Skip to content

Pull requests: github/advisory-database

New pull request New
19 Open 5,482 Closed
19 Open 5,482 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

[GHSA-hpqf-m68j-2pfx] js-object-utilities Vulnerable to Prototype Pollution
#6041 opened Aug 21, 2025 by nkhayet Loading…
1
[GHSA-gqp3-2cvr-x8m3] Apache Tomcat Improper Resource Shutdown or Release vulnerability
#6040 opened Aug 21, 2025 by snieguu Loading…
[GHSA-4jq9-2xhw-jpx7] Java: DoS Vulnerability in JSON-JAVA
#6039 opened Aug 21, 2025 by AndrzejBiernacki2010 Loading…
1
[GHSA-7rqq-prvp-x9jh] Mermaid improperly sanitizes sequence diagram labels leading to XSS
#6037 opened Aug 20, 2025 by aloisklink Loading…
2
[GHSA-xqrq-4mgf-ff32] Python-Future Module Arbitrary Code Execution via Unintended Import of test.py
#6036 opened Aug 20, 2025 by BarrensZeppelin Loading…
3
[GHSA-qq6h-5g6j-q3cm] sweetalert2 v11.4.9 and above contains hidden functionality
#6032 opened Aug 19, 2025 by Humni Loading…
1
[GHSA-457r-cqc8-9vj9] sweetalert2 v10.16.10 and above contains hidden functionality
#6031 opened Aug 19, 2025 by Humni Loading…
2
[GHSA-8jh9-wqpf-q52c] sweetalert2 v8.19.1 and above contains hidden functionality
#6030 opened Aug 19, 2025 by Humni Loading…
2
[GHSA-3c93-92r7-j934] Grafana Infinity Datasource Plugin SSRF Vulnerability
#6029 opened Aug 19, 2025 by DanCech Loading…
4
[GHSA-w2cq-g8g3-gm83] content-security-policy-parser Prototype Pollution Vulnerability May Lead to RCE
#6026 opened Aug 19, 2025 by byt3n33dl3 Loading…
5
[GHSA-q355-h244-969h] Komari vulnerable to Cross-site WebSocket Hijacking
#6021 opened Aug 17, 2025 by byt3n33dl3 Loading…
7
[GHSA-xh69-987w-hrp8] resolv vulnerable to DoS via insufficient DNS domain name length validation
#6019 opened Aug 15, 2025 by manunio Loading…
1
[GHSA-859w-5945-r5v3] Vite's server.fs.deny bypassed with /. for files under project root
#6018 opened Aug 15, 2025 by Ecg-creator • Draft
6
[GHSA-6v2p-p543-phr9] golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability
#5995 opened Aug 13, 2025 by jchax Loading…
3
[GHSA-m5xw-hwxw-fq3j] Deserialization of untrusted data in IPC and Parquet...
#5988 opened Aug 12, 2025 by jtroup Loading…
2
[GHSA-7653-r8cq-rf8w] The Nginx Cache Purge Preload plugin for WordPress is... Stale
#5845 opened Jul 23, 2025 by hsntgm Loading…
2
[GHSA-fr5w-98mc-jjvg] Arbitrary file upload in Mingsoft MCMS Stale
#5834 opened Jul 18, 2025 by achibear Loading…
3
[GHSA-34rf-485x-g5h7] Arbitrary Command Injection in Kubernetes Headlamp via macOS Process codeSign
#5802 opened Jul 11, 2025 by opsysdebug Loading…
4
[GHSA-9pp5-9c7g-4r83] Spring Security authorization bypass for method security annotations on private methods Keep
#5747 opened Jun 24, 2025 by tomabai Loading…
4
ProTip! What’s not been updated in a month: updated:<2025-07-22.