Skip to content

Pull requests: github/advisory-database

New pull request New
14 Open 5,493 Closed
14 Open 5,493 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

[GHSA-q4rv-gq96-w7c5] **UNSUPPORTED WHEN ASSIGNED** GzipHandler causes part of request body to be seen as request body of a separate request
#6047 opened Aug 26, 2025 by yeikel Loading…
1
[GHSA-hp87-p4gw-j4gq] gopkg.in/yaml.v3 Denial of Service
#6046 opened Aug 26, 2025 by n-bes Loading…
[GHSA-6h5x-7c5m-7cr7] Exposure of Sensitive Information in eventsource
#6045 opened Aug 26, 2025 by Stonefox36 Loading…
2
[GHSA-ff77-26x5-69cr] Apache Tomcat Rewrite rule bypass
#6044 opened Aug 25, 2025 by tjog Loading…
[GHSA-8hmm-4crw-vm2c] @musistudio/claude-code-router has improper CORS configuration
#6043 opened Aug 25, 2025 by FERASMANASEER Loading…
2
[GHSA-hpqf-m68j-2pfx] js-object-utilities Vulnerable to Prototype Pollution
#6041 opened Aug 21, 2025 by nkhayet Loading…
2
[GHSA-3c93-92r7-j934] Grafana Infinity Datasource Plugin SSRF Vulnerability
#6029 opened Aug 19, 2025 by DanCech Loading…
6
[GHSA-w2cq-g8g3-gm83] content-security-policy-parser Prototype Pollution Vulnerability May Lead to RCE
#6026 opened Aug 19, 2025 by byt3n33dl3 Loading…
5
[GHSA-q355-h244-969h] Komari vulnerable to Cross-site WebSocket Hijacking
#6021 opened Aug 17, 2025 by byt3n33dl3 Loading…
7
[GHSA-xh69-987w-hrp8] resolv vulnerable to DoS via insufficient DNS domain name length validation
#6019 opened Aug 15, 2025 by manunio Loading…
1
[GHSA-859w-5945-r5v3] Vite's server.fs.deny bypassed with /. for files under project root
#6018 opened Aug 15, 2025 by Ecg-creator • Draft
6
[GHSA-6v2p-p543-phr9] golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability
#5995 opened Aug 13, 2025 by jchax Loading…
3
[GHSA-34rf-485x-g5h7] Arbitrary Command Injection in Kubernetes Headlamp via macOS Process codeSign Stale
#5802 opened Jul 11, 2025 by opsysdebug Loading…
5
[GHSA-9pp5-9c7g-4r83] Spring Security authorization bypass for method security annotations on private methods Keep
#5747 opened Jun 24, 2025 by tomabai Loading…
4
ProTip! Updated in the last three days: updated:>2025-08-23.