-
Notifications
You must be signed in to change notification settings - Fork 692
Pull requests: github/advisory-database
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
[GHSA-w4f7-4cxr-rv3c] cowboy and gun affected by an HTTP Request/Response Splitting vulnerability
#8906
opened Jul 31, 2026 by
StrongOliverV
Loading…
GHSA-mh99-v99m-4gvg: add the 1.x/2.x/3.x backport ranges
#8905
opened Jul 31, 2026 by
kthoeny1
Loading…
4 tasks done
[GHSA-mh99-v99m-4gvg] brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash
#8904
opened Jul 30, 2026 by
sroyad
Loading…
[GHSA-m2qf-hxjv-5gpq] Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header
#8903
opened Jul 30, 2026 by
RFOF-NETWORK
•
1/2
Loading…
[GHSA-c3fc-8qff-9hwx] Bouncy Castle has an LDAP injection
#8902
opened Jul 30, 2026 by
sislampanw
Loading…
Update GHSA-rjr7-jggh-pgcp.json due to incorrect middleware in path
#8900
opened Jul 30, 2026 by
pjroth
Loading…
[GHSA-jx74-cqjv-2c67] Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltration
#8899
opened Jul 30, 2026 by
BarakSrour
Loading…
[GHSA-86vw-mfpg-wwv9] jsonata: Malicious inputs to "$toMillis" function can cause resource exhaustion
#8897
opened Jul 30, 2026 by
mattbaileyuk
Loading…
[GHSA-mh99-v99m-4gvg] brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash
#8896
opened Jul 30, 2026 by
litmaj0r
Loading…
[GHSA-p5rm-jg5c-8c77] Microsoft Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)
#8894
opened Jul 30, 2026 by
BarakSrour
Loading…
[GHSA-659w-93r5-9j6m] Apache OpenNLP AbstractModelReader has an OOM Denial of Service via Unbounded Array Allocation
#8892
opened Jul 30, 2026 by
maheshwarivijaykumar
Loading…
[GHSA-cx4m-2p55-rw7j] Apache OpenNLP ExtensionLoader Vulnerable to Arbitrary Class Instantiation via Model Manifest
#8891
opened Jul 30, 2026 by
maheshwarivijaykumar
Loading…
[GHSA-4v8g-86x5-3vrc] Apache OpenNLP DictionaryEntryPersistor Vulnerable to XML External Entity (XXE) via Unsanitized Dictionary Parsing
#8890
opened Jul 30, 2026 by
maheshwarivijaykumar
Loading…
Update affected versions and CWE for GHSA-xx7c-j7h3-vjcq
#8888
opened Jul 30, 2026 by
khlaifiabilel
Loading…
[GHSA-5gvw-p9qm-jgwh] jackson-databind: @JsonView ypassed for @JsonUnwrapped container properties on deserialization
#8884
opened Jul 30, 2026 by
mprins
Loading…
[GHSA-rrh3-cwwj-g5mg] Cornac before 2.6.0 contains a path traversal (Tar Slip)...
#8882
opened Jul 30, 2026 by
rahulreddykarne
Loading…
[GHSA-7x49-hhjc-29rg] datamodel-code-generator prior to version 0.70.0 contains...
#8881
opened Jul 30, 2026 by
rahulreddykarne
Loading…
fix version for nodebb on GHSA-9g4f-5rpg-4948
#8879
opened Jul 29, 2026 by
darakian
Contributor
Loading…
Fix version ranges for GHSA-mh99-v99m-4gvg (brace-expansion)
#8877
opened Jul 29, 2026 by
andymai
Loading…
[GHSA-qwww-vcr4-c8h2] React Router: RSC Mode CSRF Bypass Allows Action Execution Before 400 Response
#8876
opened Jul 29, 2026 by
serixscorpio
Loading…
[GHSA-mh99-v99m-4gvg] brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash
#8875
opened Jul 29, 2026 by
oconnelc
Loading…
[GHSA-mh99-v99m-4gvg] brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash
#8873
opened Jul 29, 2026 by
cd-rite
Loading…
Previous Next
ProTip!
Mix and match filters to narrow down what you’re looking for.