GitHub Security Advisories（GHSA）は、npm・PyPI・Maven などのオープンソース向けエコシステムで影響を受けるパッケージに対する正式な注意喚起で、多くの場合 CVE とリンクされています。 検索ボックスで GHSA や CVE を探し、エコシステムや深刻度で絞り込むか、概要文にフレーズ一致させます。
| GHSA | CVE | 深刻度 | タイプ | 概要 | 公開 |
|---|---|---|---|---|---|
| GHSA-v82c-5c2q-hx9g | CVE-2026-11769 | medium | unreviewed | We have released version 5.24.0 of the Grafana Operator. This patch includes a CRITICAL severity... | 2026-06-13 06:30:23 UTC |
| GHSA-cmwh-2j7f-4vh3 | CVE-2026-9848 | high | unreviewed | The WP Ticket plugin for WordPress is vulnerable to SQL Injection via the WordPress search query... | 2026-06-13 03:30:24 UTC |
| GHSA-p464-2mqm-5h37 | CVE-2026-54231 | medium | unreviewed | A content injection vulnerability was found in the ABRT post-create event handler scripts in... | 2026-06-13 03:30:23 UTC |
| GHSA-gvjc-4rfj-mxxj | CVE-2026-54230 | high | unreviewed | A symlink following vulnerability was found in the ABRT post-create event handler scripts in... | 2026-06-13 03:30:23 UTC |
| GHSA-cx9x-fm2c-c65m | CVE-2026-12089 | medium | unreviewed | The LWS Optimize – All-in-One Speed Booster & Cache Tools plugin for WordPress is vulnerable to... | 2026-06-13 03:30:23 UTC |
| GHSA-c3cq-8jxp-w66j | CVE-2026-54229 | high | unreviewed | A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method.... | 2026-06-13 03:30:23 UTC |
| GHSA-6pjg-wmm6-r8rp | CVE-2026-54228 | high | unreviewed | A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's... | 2026-06-13 03:30:23 UTC |
| GHSA-xwvr-mg4x-vxqq | CVE-2025-9032 | high | unreviewed | Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed... | 2026-06-13 00:34:33 UTC |
| GHSA-wcpv-6hg7-mfcc | CVE-2026-53839 | medium | unreviewed | OpenClaw before 2026.5.7 contains a hostname validation vulnerability in retry endpoint checks... | 2026-06-13 00:34:33 UTC |
| GHSA-p625-mq37-453v | CVE-2026-11442 | medium | unreviewed | Allegra exportReport Directory Traversal Information Disclosure Vulnerability. This vulnerability... | 2026-06-13 00:34:33 UTC |
| GHSA-m8wq-7mhg-mgm7 | CVE-2026-11443 | medium | unreviewed | Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability. This... | 2026-06-13 00:34:33 UTC |
| GHSA-h53c-vv76-w4w5 | CVE-2026-12068 | high | unreviewed | Information disclosure vulnerability in Avira Password Manager when used with Mozilla Firefox may... | 2026-06-13 00:34:33 UTC |
| GHSA-gjr2-gw52-3xch | CVE-2026-53835 | low | unreviewed | OpenClaw before 2026.5.6 contains a configuration enforcement bypass vulnerability in Feishu... | 2026-06-13 00:34:33 UTC |
| GHSA-g9f3-8379-v2hf | CVE-2026-53867 | medium | unreviewed | Capgo before 12.128.2 fails to delete previously uploaded profile images from backend storage... | 2026-06-13 00:34:33 UTC |
| GHSA-chqm-wxm2-w73w | CVE-2026-53837 | medium | unreviewed | OpenClaw before 2026.5.6 contains an improper access control vulnerability in Mattermost event... | 2026-06-13 00:34:33 UTC |
| GHSA-c89p-wq36-89h3 | CVE-2026-6676 | high | unreviewed | Heap buffer out-of-bounds write vulnerability in Avira Antivirus engine when scanning a malformed... | 2026-06-13 00:34:33 UTC |
| GHSA-c85p-9pvr-f7f5 | CVE-2026-53838 | medium | unreviewed | OpenClaw before 2026.5.27 contains a state mutation vulnerability in node pairing reconnection... | 2026-06-13 00:34:33 UTC |
| GHSA-8v35-94r3-25g8 | CVE-2025-9033 | high | unreviewed | Heap buffer out-of-bounds read vulnerability in Avira Antivirus engine when scanning a malformed... | 2026-06-13 00:34:33 UTC |
| GHSA-575m-c8qr-pcg3 | CVE-2025-14098 | high | unreviewed | Heap buffer out-of-bounds write vulnerability due to integer overflow in Avira Antivirus engine... | 2026-06-13 00:34:33 UTC |
| GHSA-2cqf-7mh8-jphj | CVE-2026-53868 | high | unreviewed | Capgo before 12.128.2 contains a denial of service vulnerability allowing attackers to register... | 2026-06-13 00:34:33 UTC |