Skip to content

Pull requests: github/advisory-database

New pull request New
612 Open 7,984 Closed
612 Open 7,984 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

[GHSA-6gg3-pmm7-97xc] DOM-based XSS in auth0-lock
#9712 opened Sep 22, 2026 by nikpivkin Loading…
3
[GHSA-5mq8-78gm-pjmq] defuddle vulnerable to XSS via unescaped string interpolation in _findContentBySchemaText image tag
#9711 opened Sep 22, 2026 by nikpivkin Loading…
6
[GHSA-5f97-h2c2-826q] json-schema-ref-parser Prototype Pollution issue
#9710 opened Sep 22, 2026 by nikpivkin Loading…
1
[GHSA-h4mf-75hf-67w4] Information disclosure in parse-server
#9709 opened Sep 22, 2026 by nikpivkin Loading…
2
[GHSA-4xw9-cx39-r355] json-web-token library is vulnerable to a JWT algorithm confusion attack
#9708 opened Sep 22, 2026 by nikpivkin Loading…
2
[GHSA-6m8p-4fxj-pgc2] OS Command Injection in mversion
#9707 opened Sep 22, 2026 by nikpivkin Loading…
2
[GHSA-c27r-x354-4m68] xml-crypto's HMAC-SHA1 signatures can bypass validation via key confusion
#9706 opened Sep 22, 2026 by nikpivkin Loading…
1
[GHSA-q3gh-5r98-j4h3] RSA-PSS signature validation vulnerability by prepending zeros in jsrsasign
#9705 opened Sep 22, 2026 by nikpivkin Loading…
5
[GHSA-9rgm-9g3h-6x36] Svelte devalue: DoS via malformed input
#9704 opened Sep 22, 2026 by nikpivkin Loading…
2
[GHSA-v37h-5mfm-c47c] VM2 Has Sandbox Breakout Through Inspect Function
#9703 opened Sep 22, 2026 by nikpivkin Loading…
2
[GHSA-grj5-jjm8-h35p] VM2 Sandbox Breakout Through __lookupGetter__
#9702 opened Sep 22, 2026 by nikpivkin Loading…
2
[GHSA-55hx-c926-fr95] VM2 Has a Sandbox Escape Issue via SuppressedError
#9701 opened Sep 22, 2026 by nikpivkin Loading…
2
[GHSA-wmg3-h8mf-wgvr] Correct affected ecosystem from PyPI to npm
#9700 opened Sep 22, 2026 by devjoinedthechat Loading…
[GHSA-36p3-wjmg-h94x] Remote Code Execution in Spring Framework
#9699 opened Sep 22, 2026 by Norbo91 Loading…
[GHSA-42wg-hm62-jcwg] Apache Tomcat installer for Windows has an untrusted search path vulnerability
#9698 opened Sep 22, 2026 by levpachmanov Loading…
[GHSA-qh8g-58pp-2wxh] Eclipse Jetty URI parsing of invalid authority
#9697 opened Sep 22, 2026 by levpachmanov Loading…
1
[GHSA-p3f5-w63m-mxph] webpack-dev-middleware resolves a request to a local file...
#9696 opened Sep 22, 2026 by malcomio Loading…
[GHSA-mgp5-rv84-w37q] Apache Tomcat has an Improper Input Validation vulnerability
#9695 opened Sep 22, 2026 by levpachmanov Loading…
[GHSA-qqmf-gpg7-g8gw] PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
#9694 opened Sep 22, 2026 by jjudas-resistant Loading…
[GHSA-g9g6-gvq9-j4vp] A vulnerability was detected in react create-react-app up...
#9693 opened Sep 22, 2026 by malcomio Loading…
[GHSA-9x6g-jfj6-r3jg] When a request to the Airflow core API carries both a ses...
#9692 opened Sep 22, 2026 by oscerd • Draft
[GHSA-9cmm-29p3-73gr] Apache Airflow: the Core API logout endpoint revokes only...
#9691 opened Sep 22, 2026 by oscerd • Draft
[GHSA-pfr9-65p3-w9r9] Apache Airflow's /assets/events API returned asset even...
#9690 opened Sep 22, 2026 by oscerd • Draft
[GHSA-3c8x-fp36-75xv] The CompressionFilter class uses ZLib to deflate and infl...
#9689 opened Sep 22, 2026 by oscerd • Draft
[GHSA-gmw9-258q-r8gm] Apache Airflow's asset queued-events DELETE endpoints che...
#9688 opened Sep 22, 2026 by oscerd • Draft
ProTip! Filter pull requests by the default branch with base:main.