-
Notifications
You must be signed in to change notification settings - Fork 708
Pull requests: github/advisory-database
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Add npm package mapping for GHSA-jmr9-qjv8-65gv (CVE-2026-56876, extract-zip)
#9025
opened Aug 7, 2026 by
drengir1
Loading…
[GHSA-qwww-vcr4-c8h2] React Router: RSC Mode CSRF Bypass Allows Action Execution Before 400 Response
#9024
opened Aug 7, 2026 by
oliviamazzotta47-lab
Loading…
[GHSA-r937-wjx7-w2jp] In JetBrains Kotlin before 2.4.20 code execution was...
#9021
opened Aug 7, 2026 by
Lueton
Loading…
[GHSA-hf6x-8p5f-cgmf] Uncontrolled Resource Consumption vulnerability in the...
#9020
opened Aug 7, 2026 by
tikri
Loading…
[GHSA-rpf9-hrjr-88fv] Uncontrolled Resource Consumption vulnerability in Apache...
#9019
opened Aug 7, 2026 by
adriansubu
Loading…
[GHSA-v3vg-332r-mw99] Camel-PQC: split affected range to match the upstream advisory
#9017
opened Aug 7, 2026 by
pacocartones
Loading…
GHSA-7gfh-x38p-prh3: add reporter's technical analysis as a reference
#9016
opened Aug 7, 2026 by
cuauht
Loading…
[GHSA-qhqw-rrw9-25rm] asyncmy is vulnerable to SQL injection via crafted dict keys
#9014
opened Aug 7, 2026 by
Cycloctane
Loading…
[GHSA-jjmj-jmhj-qwj2] React Router: Open redirect leading to XSS
#9012
opened Aug 6, 2026 by
zachmitch31
Loading…
[GHSA-v39h-62p7-jpjc] fast-uri vulnerable to host confusion via percent-encoded authority delimiters
#9011
opened Aug 6, 2026 by
jlang-ih
Loading…
[GHSA-q3j6-qgpj-74h6] fast-uri vulnerable to path traversal via percent-encoded dot segments
#9010
opened Aug 6, 2026 by
jlang-ih
Loading…
[GHSA-v39h-62p7-jpjc] fast-uri vulnerable to host confusion via percent-encoded authority delimiters
#9005
opened Aug 6, 2026 by
zakaryan2004
Loading…
[GHSA-q3j6-qgpj-74h6] fast-uri vulnerable to path traversal via percent-encoded dot segments
#9004
opened Aug 6, 2026 by
zakaryan2004
Loading…
[GHSA-hwrj-9rr4-24xh] Improper Validation of Certificate with Host Mismatch...
#9000
opened Aug 6, 2026 by
carlosfunk
Loading…
[GHSA-6h9h-5c4r-fqgf] Improper Handling of Highly Compressed Data (Data...
#8999
opened Aug 6, 2026 by
carlosfunk
Loading…
[GHSA-8wv5-x4w7-5gww] Loop with Unreachable Exit Condition ('Infinite Loop')...
#8998
opened Aug 6, 2026 by
carlosfunk
Loading…
[GHSA-6pjx-3pjc-mrj8] Improper Handling of Highly Compressed Data (Data...
#8997
opened Aug 6, 2026 by
carlosfunk
Loading…
[GHSA-9qrm-48qf-r2rw] Directus has a DOM-Based cross-site scripting (XSS) via layout_options
#8996
opened Aug 5, 2026 by
Amayyas
Loading…
fix(go): correct chi module path for GHSA-3fxj-6jh8-hvhx
#8995
opened Aug 5, 2026 by
paulodearaujo
Loading…
[GHSA-6447-269v-g68m] Mezo: ERC-20 bridgeOut burn can be erased by a stale StateDB overwrite leading to full L1 bridge drain
#8991
opened Aug 5, 2026 by
DeltaXV
Loading…
[GHSA-7hhx-w23w-fg5v] Hugging Face Transformers Perceiver Model Deserialization...
#8977
opened Aug 4, 2026 by
jesvinjames
Loading…
[GHSA-7gcf-g7xr-8hxj] serde_with: KeyValueMap serialization panics on empty sequence or map entries
#8976
opened Aug 4, 2026 by
iliana
Loading…
Previous Next
ProTip!
no:milestone will show everything without a milestone.