Search results

[GHSA-qr33-gf7m-pq45] The V8 release used in Node.js v24.0.0 has changed how...

invalidThis doesn't seem rightThis doesn't seem right

Status: Closed (abandoned).

github/advisory-databasenumber 5863

#5863 In github/advisory-database;

· by Dexter2211-collab was closed on Jul 28, 2025

[GHSA-6j2q-c73v-97c5] Spring Cloud Gateway Server Forwards Headers from Untrusted Proxies

Status: Merged (completed).

github/advisory-databasenumber 5861

#5861 In github/advisory-database;

· by coreyconway was closed on Jul 28, 2025

Improve GHSA-r8xx-8vm8-x6wj

invalidThis doesn't seem rightThis doesn't seem right

Status: Closed (abandoned).

github/advisory-databasenumber 5860

#5860 In github/advisory-database;

· by Ya-123456 was closed on Jul 28, 2025

[GHSA-2g7m-ph9x-7q7m] ReDoS in strip_whitespaces() function in cps...

Status: Merged (completed).

github/advisory-databasenumber 5856

#5856 In github/advisory-database;

· by gelbphoenix was closed on Jul 28, 2025

[GHSA-h47j-hc6x-h3qq] Remote Code Execution Vulnerability in NPM mongo-express

Status: Merged (completed).

github/advisory-databasenumber 5855

#5855 In github/advisory-database;

· by JLLeitschuh was closed on Jul 28, 2025

[GHSA-qc4j-v7h6-xr5h] Improper Neutralization of Special Elements used in an OS...

Status: Merged (completed).

github/advisory-databasenumber 5854

#5854 In github/advisory-database;

· by gelbphoenix was closed on Jul 25, 2025

[GHSA-xffm-g5w8-qvg7] @eslint/plugin-kit is vulnerable to Regular Expression Denial of Service attacks through ConfigCommentParser

Status: Merged (completed).

github/advisory-databasenumber 5852

#5852 In github/advisory-database;

· by Qix- was closed on Jul 28, 2025

[GHSA-4j66-8f4r-3pjx] bun vulnerable to OS Command Injection

Status: Merged (completed).

github/advisory-databasenumber 5851

#5851 In github/advisory-database;

· by lirantal was closed on Jul 24, 2025

[GHSA-v9mx-4pqq-h232] Bun has an Application-level Prototype Pollution vulnerability in the runtime native API for Glo

Status: Merged (completed).

github/advisory-databasenumber 5850

#5850 In github/advisory-database;

· by lirantal was closed on Jul 24, 2025

[GHSA-rm8p-cx58-hcvx] Axios has Transitive Critical Vulnerability via form-data — Predictable Boundary Values (CVE-2025-7783)

Status: Merged (completed).

github/advisory-databasenumber 5849

#5849 In github/advisory-database;

· by mhassan1 was closed on Jul 24, 2025

Review requested for GHSA-fh4q-jc76-r59p: Potential false positive for the stylus npm package

Status: Closed (completed).

#5846 In github/advisory-database;

· by Banegasn was closed on Jul 23, 2025

[GHSA-vw7w-mrf6-7vrv] Add context for OpenRusty/luajit2 which also is being tagged by scanners

Status: Closed (abandoned).

github/advisory-databasenumber 5844

#5844 In github/advisory-database;

· by kbsteere was closed on Jul 22, 2025

[GHSA-xvfg-m24j-r4pm] Add context for OpenRusty/luajit2 which also is being tagged by scanners

Status: Closed (abandoned).

github/advisory-databasenumber 5843

#5843 In github/advisory-database;

· by kbsteere was closed on Jul 22, 2025

[GHSA-f29h-pxvx-f335] eslint-config-prettier, eslint-plugin-prettier, synckit, @pkgr/core, napi-postinstall have embedded malicious code

Status: Closed (abandoned).

github/advisory-databasenumber 5842

#5842 In github/advisory-database;

· by ocsurfnut was closed on Jul 23, 2025

[GHSA-2gxp-6r36-m97r] Corrected severity on advisory

Status: Merged (completed).

github/advisory-databasenumber 5841

#5841 In github/advisory-database;

· by protozeit was closed on Jul 23, 2025

[GHSA-c23v-vqw5-52c5] PowerJob vulnerable to Incorrect Access Control via the create user/save interface.

Status: Merged (completed).

github/advisory-databasenumber 5840

#5840 In github/advisory-database;

· by aruneko was closed on Jul 22, 2025

[GHSA-96c2-h667-9fxp] nova-tiptap has Unauthenticated Arbitrary File Upload Vulnerability

Status: Merged (completed).

github/advisory-databasenumber 5839

#5839 In github/advisory-database;

· by vintagesucks was closed on Jul 22, 2025

[GHSA-f29h-pxvx-f335] eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7...

Status: Merged (completed).

github/advisory-databasenumber 5838

#5838 In github/advisory-database;

· by Pradoxzon was closed on Jul 21, 2025

[GHSA-grv7-fg5c-xmjg] Uncontrolled resource consumption in braces

invalidThis doesn't seem rightThis doesn't seem right

Status: Closed (abandoned).

github/advisory-databasenumber 5837

#5837 In github/advisory-database;

· by Icantcode45 was closed on Jul 21, 2025

Add support for Linux packages

Status: Closed (completed).

#5836 In github/advisory-database;

· by yeikel was closed on Jul 21, 2025

[GHSA-c352-x843-ggpq] XXL-JOB vulnerable to Server-Side Request Forgery

Status: Merged (completed).

github/advisory-databasenumber 5833

#5833 In github/advisory-database;

· by achibear was closed on Jul 18, 2025

[GHSA-v87q-rpwp-qr7q] Jeecg-boot vulnerable to SQL Injection

Status: Merged (completed).

github/advisory-databasenumber 5832

#5832 In github/advisory-database;

· by achibear was closed on Jul 18, 2025

[GHSA-g5cj-5h58-j93w] Jeecg-boot vulnerable to SQL Injection

Status: Merged (completed).

github/advisory-databasenumber 5831

#5831 In github/advisory-database;

· by achibear was closed on Jul 18, 2025

[GHSA-4j2x-v3mr-467m] Jeecg-boot vulnerable to SQL injection via updateNullByEmptyString

Status: Merged (completed).

github/advisory-databasenumber 5830

#5830 In github/advisory-database;

· by achibear was closed on Jul 18, 2025

[GHSA-25gv-mvm7-5h3h] Jeecg-boot vulnerable to SQL injection via /sys/user/putRecycleBin

Status: Merged (completed).

github/advisory-databasenumber 5829

#5829 In github/advisory-database;

· by achibear was closed on Jul 18, 2025