6 Pull requests merged by 5 people

• [GHSA-8qhq-rq4j-8prj] Elasticsearch Logstash allows remote attackers to execute arbitrary commands

  #5465 merged Apr 16, 2025

• [GHSA-8qhq-rq4j-8prj] Elasticsearch Logstash allows remote attackers to execute arbitrary commands

  #5464 merged Apr 16, 2025

• [GHSA-968p-4wvh-cqc8] Babel has inefficient RexExp complexity in generated code with .replace when transpiling named capturing groups

  #5463 merged Apr 16, 2025

• [GHSA-cj7v-w2c7-cp7c] nest allows a remote attacker to execute arbitrary code via the Content-Type header

  #5460 merged Apr 14, 2025

• [GHSA-cj7v-w2c7-cp7c] nest allows a remote attacker to execute arbitrary code via the Content-Type header

  #5455 merged Apr 11, 2025

• [GHSA-cj7v-w2c7-cp7c] nest allows a remote attacker to execute arbitrary code via the Content-Type header

  #5453 merged Apr 11, 2025

5 Pull requests opened by 4 people

• [GHSA-jr5f-v2jv-69x6] axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL

  #5451 opened Apr 11, 2025

• [GHSA-vjh7-7g9h-fjfh] Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string)

  #5452 opened Apr 11, 2025

• [GHSA-gp8f-8m3g-qvj9] Next.js Cache Poisoning

  #5459 opened Apr 12, 2025

• [GHSA-qjp7-gvrw-vxmf] An attacker authenticated as an administrator can use an...

  #5462 opened Apr 15, 2025

• [GHSA-gc2p-g4fg-29vh] In Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest...

  #5471 opened Apr 17, 2025

2 Issues closed by 1 person

• Possible false positive on logstash-event ruby gem for CVE-2014-4326 GHSA-8qhq-rq4j-8prj

  #5468 closed Apr 17, 2025

• My

  #5454 closed Apr 14, 2025

3 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• GHSA-rjhf-4mh8-9xjq is a duplicate of GHSA-3mv5-343c-w2qg

  #3085 commented on Apr 13, 2025 • 0 new comments

• [GHSA-3hhc-qp5v-9p2j] Active Record RCE bug with Serialized Columns

  #5416 commented on Apr 16, 2025 • 0 new comments

• [GHSA-fc9h-whq2-v747] Valid ECDSA signatures erroneously rejected in Elliptic

  #5442 commented on Apr 11, 2025 • 0 new comments