Skip to content

Pull requests: github/advisory-database

New pull request New
Clear current search query, filters, and sorts
0 Open 4,804 Closed
0 Open 4,804 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

[GHSA-hxf3-vgpm-fv9p] CycloneDX cdxgen may execute code contained within build-related files
#5244 by prabhu was merged Feb 3, 2025
1
[GHSA-gxr4-xjj5-5px2] Potential XSS vulnerability in jQuery
#5243 by Rudloff was merged Jan 31, 2025 Loading…
2
[GHSA-jpcq-cgw6-v4j6] Potential XSS vulnerability in jQuery
#5242 by Rudloff was merged Jan 31, 2025 Loading…
2
[GHSA-gxr4-xjj5-5px2] Potential XSS vulnerability in jQuery
#5241 by Rudloff was merged Jan 30, 2025 Loading…
2
[GHSA-54xq-cgqr-rpm3] sharp vulnerability in libwebp dependency CVE-2023-4863
#5240 by Xyaren was closed Jan 30, 2025 Loading…
5
[GHSA-hff8-hjwv-j9q7] Remote Code Execution on click of <a> Link in markdown preview
#5239 by gshanbhag525 was merged Jan 30, 2025 Loading…
3
[GHSA-x9qq-236j-gj97] Canonical LXD documentation improvement to make clear restricted.devices.disk=allow without restricted.devices.disk.paths also allows shift=true
#5238 by gshanbhag525 was merged Jan 30, 2025 Loading…
9
[GHSA-w33c-445m-f8w7] Okio Signed to Unsigned Conversion Error vulnerability
#5237 by sameerbiradar200 was closed Jan 29, 2025 Loading…
[GHSA-93ww-43rr-79v3] Keycloak mTLS Authentication Bypass via Reverse Proxy TLS Termination
#5236 by westonsteimel was merged Jan 30, 2025 Loading…
14
[GHSA-v4mq-x674-ff73] AWS Cloud Development Kit (AWS CDK) IAM OIDC custom resource allows connection to unauthorized OIDC provider
#5235 by mfulton26 was merged Jan 29, 2025 Loading…
2
[GHSA-6rq9-53c3-f7vj] onnx allows Arbitrary File Overwrite in download_model_with_test_data
#5233 by stevegrubb was merged Jan 27, 2025 Loading…
1
[GHSA-4cv2-4hjh-77rx] Property reflection in System.Linq.Dynamic.Core
#5232 by larsk2009 was merged Jan 27, 2025 Loading…
2
[GHSA-4vc8-pg5c-vg4x] Keycloak's improper input validation allows using email as username
#5229 by 7Ragnarok7 was closed Jan 27, 2025 Loading…
2
[GHSA-g5vr-rgqm-vf78] Spring Framework Path Traversal vulnerability
#5226 by ayamburg-panw was closed Jan 24, 2025 Loading…
1
[GHSA-4gc7-5j7h-4qph] Spring Framework DataBinder Case Sensitive Match Exception
#5225 by ayamburg-panw was closed Jan 24, 2025 Loading…
1
[GHSA-rjjv-87mx-6x3h] @sveltejs/kit vulnerable to on dev mode 404 page
#5223 by RDIL was merged Jan 22, 2025 Loading…
2
[GHSA-qh8g-58pp-2wxh] Eclipse Jetty URI parsing of invalid authority
#5222 by dwaller was closed Jan 22, 2025 Loading…
4
[GHSA-hgpp-pp89-4fgf] Action Pack contains database-query restrictions bypass
#5221 by levpachmanov was merged Jan 22, 2025 Loading…
1
[GHSA-92w9-2pqw-rhjj] actionpack Improper Authentication vulnerability
#5220 by levpachmanov was merged Jan 22, 2025 Loading…
1
[GHSA-2rhx-qhxp-5jpw] Submariner Operator sets unnecessary RBAC permissions in helm charts
#5219 by skitt was merged Jan 21, 2025 Loading…
1
[GHSA-gh2w-j7cx-2664] Active Record contains SQL Injection
#5218 by levpachmanov was merged Jan 21, 2025 Loading…
1
[GHSA-h835-75hw-pj89] activesupport Cross-site Scripting vulnerability
#5217 by levpachmanov was merged Jan 21, 2025 Loading…
1
[GHSA-gh2w-j7cx-2664] Active Record contains SQL Injection
#5216 by levpachmanov was merged Jan 21, 2025 Loading…
1
[GHSA-7g65-ghrg-hpf5] actionpack Cross-site Scripting vulnerability
#5215 by levpachmanov was merged Jan 21, 2025 Loading…
1
[GHSA-h835-75hw-pj89] activesupport Cross-site Scripting vulnerability
#5214 by levpachmanov was merged Jan 21, 2025 Loading…
1
ProTip! Follow long discussions with comments:>50.