-
Notifications
You must be signed in to change notification settings - Fork 614
Pull requests: github/advisory-database
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
[GHSA-xgrm-4fwx-7qm8] pgx contains memory-safety vulnerability
#7722
opened May 16, 2026 by
dor-hayun
Loading…
[GHSA-c4j6-fc7j-m34r] Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades
#7719
opened May 16, 2026 by
Drbambi7
Loading…
[GHSA-9v3m-8fp8-mj99] Bootstrap Vulnerable to Cross-Site Scripting
#7717
opened May 16, 2026 by
jasnow
Loading…
[GHSA-5cq6-9f97-wjwx] Crypt::DSA versions through 1.19 for Perl use 2-args open...
#7716
opened May 16, 2026 by
Vendetaaaa
Loading…
[GHSA-r2q3-hjc8-7x6q] Crypt::DSA versions before 1.20 for Perl generate seeds...
#7715
opened May 16, 2026 by
Vendetaaaa
Loading…
[GHSA-4fcc-vrwx-v754] The Essential Chat Support plugin for WordPress is...
#7714
opened May 16, 2026 by
Vendetaaaa
Loading…
[GHSA-j4fx-xxwh-2485] Versions of the package jsondiffpatch before 0.7.6 are...
#7713
opened May 16, 2026 by
Vendetaaaa
Loading…
[GHSA-2f3m-j83v-344c] Versions of the package jsondiffpatch before 0.7.6 are...
#7712
opened May 16, 2026 by
Vendetaaaa
Loading…
[GHSA-95jq-xph2-cx9h] Add upstream fix commit reference
#7710
opened May 15, 2026 by
massif-01
Loading…
[GHSA-45h5-66jx-r2wf] MJML allows mj-include directory traversal due to an incomplete fix for CVE-2020-12827
#7709
opened May 15, 2026 by
LambArchie
Loading…
[GHSA-mwv9-gp5h-frr4] Add upstream fix commit reference
#7708
opened May 15, 2026 by
massif-01
Loading…
[GHSA-gxhx-2686-5h9g] Add upstream fix commit reference
#7707
opened May 15, 2026 by
massif-01
Loading…
[GHSA-fv2f-rw9f-v9cm] An issue in Nodemailer smtp_server before v.3.18.3 allows...
#7706
opened May 15, 2026 by
blue2cat
Loading…
[GHSA-rpr9-rxv7-x643] Apostrophe has default XSS via
xmp raw-text passthrough in sanitize-html
#7705
opened May 15, 2026 by
scotje
Loading…
[GHSA-3rfq-4wpf-qqw3] Micronaut has Unbounded
bundleCache in ResourceBundleMessageSource that Allows Memory Exhaustion via Accept-Language Header
#7704
opened May 15, 2026 by
jojojo8359
Loading…
[GHSA-6cr3-m628-79px] * Countermeasures for DPA within SYMCRYPTO
engine on...
#7703
opened May 15, 2026 by
Vendetaaaa
Loading…
[GHSA-rm3r-35x9-jv93] A supply chain attack compromised the official...
#7702
opened May 15, 2026 by
Vendetaaaa
Loading…
[GHSA-9694-5xfg-m7vr] Permission control vulnerability in contacts. Impact:...
#7701
opened May 15, 2026 by
Vendetaaaa
Loading…
[GHSA-hr7c-pw36-w99g] Diagram's export module is vulnerable to Path Traversal...
#7700
opened May 15, 2026 by
Vendetaaaa
Loading…
[GHSA-rpr9-rxv7-x643] Apostrophe has default XSS via
xmp raw-text passthrough in sanitize-html
#7699
opened May 15, 2026 by
AND-TomHarris
Loading…
[GHSA-vvfc-fp59-m92g] Langflow: DoS Through Lack of File Size Restriction via Deprecated Unauthenticated File Upload API
#7697
opened May 15, 2026 by
ventusfortis
Loading…
[GHSA-rpr9-rxv7-x643] Apostrophe has default XSS via
xmp raw-text passthrough in sanitize-html
#7696
opened May 15, 2026 by
Matsuuu
Loading…
[GHSA-7gm6-w7mx-58cr] phpBB before 3.3.16 is vulnerable to Host Header...
#7695
opened May 15, 2026 by
marc1706
Loading…
[GHSA-rpr9-rxv7-x643] Apostrophe has default XSS via
xmp raw-text passthrough in sanitize-html
#7694
opened May 14, 2026 by
arkon
Loading…
[GHSA-xp4x-j9vh-c3wf] OS Command Injection and Command Injection in kill-port-process
#7693
opened May 14, 2026 by
filipeom
Loading…
Previous Next
ProTip!
Follow long discussions with comments:>50.