-
Notifications
You must be signed in to change notification settings - Fork 452
Pull requests: github/advisory-database
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
[GHSA-v6h2-p8h4-qcjw] brace-expansion Regular Expression Denial of Service vulnerability
#5895
opened Aug 3, 2025 by
CosmicJesterX
Loading…
[GHSA-chp4-rv79-68j3] Apache serialization mechanism does not have a list of classes allowed for serialization/deserialization
#5894
opened Aug 3, 2025 by
morningstarxcdcode
Loading…
[GHSA-6x65-vqp7-5r63] alchemist.vim vulnerable to remote code execution
#5892
opened Aug 3, 2025 by
morningstarxcdcode
Loading…
[GHSA-xx36-6rv4-gj8r] ecdsa-elixir fails to check signatures, vulnerable to message forging
#5891
opened Aug 3, 2025 by
morningstarxcdcode
Loading…
[GHSA-4r2f-6fm9-2qgh] Ecto lacks a protection mechanism
#5890
opened Aug 3, 2025 by
morningstarxcdcode
Loading…
[GHSA-h3rw-77w7-92gf] Samly access control vulnerability
#5889
opened Aug 3, 2025 by
morningstarxcdcode
Loading…
[GHSA-gq52-6phf-x2r6] tj-actions/branch-names has a Command Injection Vulnerability
#5888
opened Aug 3, 2025 by
morningstarxcdcode
Loading…
[GHSA-frg3-gpcx-968f] SwiftNIO SSL arbitrary code execution vulnerability
#5887
opened Aug 2, 2025 by
morningstarxcdcode
Loading…
[GHSA-j2v9-cq8f-8ch7] The Brave Conversion Engine (PRO) plugin for WordPress is...
#5884
opened Aug 2, 2025 by
morningstarxcdcode
Loading…
[GHSA-8cv8-4354-xjv8] A vulnerability was found in code-projects Wazifa System...
#5883
opened Aug 2, 2025 by
morningstarxcdcode
Loading…
[GHSA-v3c8-3pr6-gr7p] llama_index vulnerable to SQL Injection
#5882
opened Aug 2, 2025 by
asvishnyakov
Loading…
[GHSA-6628-q6j9-w8vg] gRPC Reachable Assertion issue
#5873
opened Jul 30, 2025 by
levpachmanov
Loading…
[GHSA-cfgp-2977-2fmm] Connection confusion in gRPC
#5872
opened Jul 30, 2025 by
levpachmanov
Loading…
[GHSA-7653-r8cq-rf8w] The Nginx Cache Purge Preload plugin for WordPress is...
#5845
opened Jul 23, 2025 by
hsntgm
Loading…
[GHSA-h57w-vh34-f8cw] Code injection in mingSoft MCMS
Stale
#5835
opened Jul 18, 2025 by
achibear
Loading…
[GHSA-fr5w-98mc-jjvg] Arbitrary file upload in Mingsoft MCMS
#5834
opened Jul 18, 2025 by
achibear
Loading…
[GHSA-8w3f-4r8f-pf53] Remote code execution through js2py onCaptchaResult
Stale
#5809
opened Jul 15, 2025 by
odaysec
Loading…
[GHSA-34rf-485x-g5h7] Arbitrary Command Injection in Kubernetes Headlamp via macOS Process codeSign
#5802
opened Jul 11, 2025 by
odaysec
Loading…
[GHSA-wx5j-54mm-rqqq] HTTP request smuggling in netty
Stale
#5792
opened Jul 5, 2025 by
poc-effectiveness
Loading…
[GHSA-m8p2-495h-ccmh] The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks
Stale
#5791
opened Jul 5, 2025 by
poc-effectiveness
Loading…
[GHSA-9pp5-9c7g-4r83] Spring Security authorization bypass for method security annotations on private methods
Keep
#5747
opened Jun 24, 2025 by
tomabai
Loading…
ProTip!
Type g p on any issue or pull request to go back to the pull request listing page.