-
Notifications
You must be signed in to change notification settings - Fork 722
Pull requests: github/advisory-database
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
[GHSA-8qqm-fp2q-v734] Skipper: Incomplete fix for CVE-2026-50197: an oversized body can bypass OPA deny-on-presence Rego policies
#9162
opened Aug 19, 2026 by
deepakravisankar
Loading…
[GHSA-2v37-7h3g-55p8] nanoid: custom generators can loop indefinitely when size is zero
#9157
opened Aug 18, 2026 by
tijuks
Loading…
[GHSA-jjmj-jmhj-qwj2] React Router: Open redirect leading to XSS
#9156
opened Aug 18, 2026 by
brophdawg11
Loading…
[GHSA-pv39-qrfq-g8gc] In nltk version 3.9.4, the `nltk.downloader.Downloader...
#9155
opened Aug 18, 2026 by
navaneethibm
Loading…
[GHSA-3p64-6gvh-82v5] MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth
#9154
opened Aug 18, 2026 by
noren95
Loading…
[GHSA-876p-8259-xjgg] libp2p nodes vulnerable to attack using large RSA keys
#9151
opened Aug 17, 2026 by
simonmorley
Loading…
[GHSA-hq9q-27g5-qwpj] Microsoft Kiota: Command injection via x-ms-kiota-info dependencyInstallCommand surfaced by
kiota info
#9144
opened Aug 17, 2026 by
baywet
Loading…
[GHSA-x863-p983-p4f7] In an untrusted JMS environment, org.springframework.jms...
#9140
opened Aug 17, 2026 by
tal-sealsecurity
Loading…
[GHSA-52cp-r559-cp3m] js-yaml: YAML merge-key chains can force quadratic CPU consumption
#9138
opened Aug 17, 2026 by
tijuks
Loading…
Improve GHSA-28xv-ph75-77wh: add Crow 4.x patched range
#9137
opened Aug 16, 2026 by
marshallswain
Loading…
[GHSA-jfpg-hfv5-2rf7] Shescape before 2.1.15 (and 3.0.0 before 3.0.2) fails to...
#9136
opened Aug 16, 2026 by
antonisloukis
Loading…
[GHSA-2rq5-699j-x7p6] Arbitrary local file read vulnerability during template rendering
#9135
opened Aug 16, 2026 by
Martin-Luther
Loading…
[GHSA-m3v4-v5gx-7wf5] OpenMed vulnerable to remote code injection through privacy-filter model loading path
#9134
opened Aug 15, 2026 by
SaiTeja-Erukude
Loading…
[GHSA-777r-4v59-6486] Gitea: Permanent Fork PR Workflow Approval Gate Bypass
#9133
opened Aug 15, 2026 by
satyam-umrao
Loading…
[GHSA-q86x-4w7f-8hrm] In Eclipse Parsson published Maven Central artifacts...
#9132
opened Aug 15, 2026 by
KMChris
Loading…
[GHSA-4j2p-28q2-5m79] Hugging Face Accelerate through 1.14.0 contains a path...
#9130
opened Aug 14, 2026 by
KMChris
Loading…
[GHSA-xvcm-6775-5m9r] Immutable: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set
#9129
opened Aug 14, 2026 by
jdeniau
Loading…
[GHSA-v56q-mh7h-f735] Immutable.js
List 32-bit trie overflow → unrecoverable DoS
#9128
opened Aug 14, 2026 by
jdeniau
Loading…
[GHSA-c3q9-q986-vrwh] Nomad is vulnerable to unintentional exposure of the workload identity token and client secret token in audit logs
#9127
opened Aug 14, 2026 by
dduzgun-security
Loading…
[GHSA-955p-x3mx-jcvp] Next.js: Unauthenticated disclosure of internal Server Function endpoints
#9124
opened Aug 14, 2026 by
De-ASI-INTERFACE
Loading…
[GHSA-j36p-7w88-g82j] Gradio before 6.16.0 contain a path traversal...
#9123
opened Aug 13, 2026 by
PercevalFox
Loading…
Previous Next
ProTip!
Add no:assignee to see everything that’s not assigned.