Project
GitHub's public database of security advisories (GHSA) for open-source software vulnerabilities, used across dependency ecosystems and scanners.
Munim, Inc.'s census of 30 self-hosted AI projects found 195 of 618 maintainer advisories missing from GitHub's global database under their own IDs. Dependabot and pip-audit read that database. The author infers OSV tools share the gap, and his direct OSV sweep is still running.
Reality
Deno 2.9.7's `deno audit --fix` left deno.lock byte-for-byte identical on a vulnerable semver, a dev.to author reported. The post says --ignore and --frozen-lockfile did the same, so CI needs its own check that a fix happened.
Reality
Two of n8n's three September advisory batches, at least 26 advisories in all, have no CVE IDs, a dev.to post reports. A green scanner report on a self-hosted instance says little until someone checks the version by hand.
Reality
vLLM published more than 30 security advisories on GitHub between 12 September and 9 October, most without a CVE ID, a dev.to author reports. The author's five OSV.dev lookups came back empty, so a clean scanner run says little about any server below 0.31.0.
Reality
At least 15 Open WebUI advisories fixed in 0.11.4, one a CVSS 8.1 session-token theft, were missing from GitHub's advisory database and OSV on 11 October. Scanners reading those databases can report 0.11.1 to 0.11.3 as clean, a dev.to post found, so operators have to check the version themselves.
Reality
GitHub flagged six npm typosquats of Angular that claimed the live 22.2.1 version, five pulling a payload through the Wayback Machine. With the version number now correct, the defence has to sit at the package name and at whether install scripts run at all.
Reality
CVE-2026-94545 lets attacker-supplied text in an Open Graph image reach Next.js dependencies. Vercel shipped the fix on September 22 in 16.3.6; a day later, npm audit still passed affected builds.
Reality
AWS's Java extended clients for large SQS and SNS messages pull Jackson versions with seven known advisories via a library last released in March 2024. Kotlin services now have ports on Maven Central that take Jackson out of that code path.
Reality
AgentGate read the shipped code behind 30-plus OSV and GHSA flags, verified 19 npm packages as malicious, and found 18 still resolvable on publication day. Removal, not detection, is where the chain stopped.
Reality
The Erlang Ecosystem Foundation's CNA published the entry on August 30, 2026, and ash_sqlite 0.2.18 escapes the path segments. Exposure comes down to whether your callers get to name the JSON field.
Reality
CVE-2026-48519 lets anyone holding a shared Langflow playground link supply their own Python inside the build request. The exposure follows a user clicking share, so it lives in flow state rather than in server config.
Reality
Sysdig logged a pre-auth SQL injection probe against CVE-2026-42208 from an operator who already had the Prisma schema casing right, which is the argument for putting LLM gateways on the same patch clock as edge appliances.
Reality
Kaspersky's Q2 2026 figures credit AI with both writing the bugs and finding them. The disclosures carrying working exploit code never got a CVE identifier at all.
Reality
Two 2026 studies put AI-generated deployment infrastructure at worse than a coin flip, and the gates most CI pipelines run were built for application source, not config.
Reality
JFrog found that 54 of 55 advisories from one new GitHub account were machine-generated fiction. They reached enterprise scanners by the normal route, which is the problem.
Reality