GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
2 advisories
jackson-databind has a PolymorphicTypeValidator bypass via generic type parameters that allows arbitrary class instantiation
High
CVE-2026-54512
was published
for
com.fasterxml.jackson.core:jackson-databind
(Maven)
Jun 23, 2026
Apktool: Path Traversal to Arbitrary File Write
High
CVE-2026-39973
was published
for
org.apktool:apktool-lib
(Maven)
Apr 23, 2026
ProTip!
Advisories are also available from the
GraphQL API