Skip to content

Pull requests: github/advisory-database

New pull request New
Clear current search query, filters, and sorts
5 Open 4,898 Closed
5 Open 4,898 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

[GHSA-78xj-cgh5-2h22] NPM IP package vulnerable to Server-Side Request Forgery (SSRF) attacks
#3555 by mdoelker was closed Feb 19, 2024 Loading…
1 👎 2
[GHSA-78xj-cgh5-2h22] NPM IP package vulnerable to Server-Side Request Forgery (SSRF) attacks
#3554 by fshenton was closed Feb 20, 2024 Loading…
3 👎 2
GHSA-w596-4wvx-j9j6: mark as withdrawn
#762 by woodruffw was closed Oct 26, 2022 Loading…
22 👎 1
[GHSA-3hxg-fxwm-8gf7] CRLF injection in Refit's [Header], [HeaderCollection] and [Authorize] attributes
#4994 by glennawatson was merged Nov 8, 2024 Loading…
3 👎 1
[GHSA-78xj-cgh5-2h22] NPM IP package vulnerable to Server-Side Request Forgery (SSRF) attacks
#3550 by Clashsoft was closed Feb 20, 2024 Loading…
2 👎 1
[GHSA-78xj-cgh5-2h22] NPM IP package vulnerable to Server-Side Request Forgery (SSRF) attacks
#3552 by NoFr1ends was closed Feb 20, 2024 Loading…
2 👎 1
[GHSA-78xj-cgh5-2h22] NPM IP package vulnerable to Server-Side Request Forgery (SSRF) attacks
#3557 by Etaloot was closed Feb 20, 2024 Loading…
1 👎 1
[GHSA-8m45-2rjm-j347] Handling untrusted input can result in a crash, leading to loss of availability / denial of service
#4311 by loljawn was closed Apr 25, 2024 Loading…
2 👎 1
Advisory improvement for GHSA-7q9f-x6rm-qmxr
#15 by RDIL was merged Feb 24, 2022 Loading…
Advisory improvement for GHSA-w542-cpp9-r3g7
#17 by greysteil was merged Feb 24, 2022 Loading…
Advisory improvement for GHSA-x8rq-rc7x-5fg5
#23 by Haxatron was merged Feb 24, 2022 Loading…
removed log4j-api from GHSA-7rjr-3q55-vv33
#20 by mrjonstrong was merged Feb 24, 2022 Loading…
1
Advisory improvement for GHSA-r8j4-96mx-rjcc
#22 by Haxatron was merged Feb 24, 2022 Loading…
2
Exclude experimental React versions from advisory GHSA-hg79-j56m-fxgv
#25 by apostolos was merged Feb 26, 2022 Loading…
5
Advisory improvement for GHSA-j9cf-pr2x-5273
#14 by RDIL was merged Feb 24, 2022 Loading…
2
Advisory improvement for GHSA-jf5r-8hm2-f872
#9 by jhutchings1 was merged Mar 1, 2022 Loading…
[GHSA-qq5c-677p-737q] Symfony vulnerable to command execution hijack on Windows with Process class
#5343 by paulblei was merged Mar 7, 2025 Loading…
2
Contribution to "Path traversal in Grafana Loki"
#35 by simonswine was merged Mar 1, 2022 Loading…
Contribution to "matyhtf framework v3.0.5 is affected by a path manipulati..."
#58 by Rudloff was merged Mar 2, 2022 Loading…
Fix invalid version in GHSA-m3q7-rj8g-m457
#51 by oliverchang was merged Mar 2, 2022 Loading…
Contribution to "High severity vulnerability that affects websockets"
#37 by ericwb was merged Mar 2, 2022 Loading…
Fix incorrect package name for GHSA-5629-8855-gf4g
#54 by oliverchang was merged Mar 2, 2022 Loading…
Fix package name case sensitivity for GHSA-hgmw-x865-hf9x
#55 by oliverchang was merged Mar 2, 2022 Loading…
Fix package name case sensitivity for GHSA-r23g-3qw4-gfh2
#56 by oliverchang was merged Mar 2, 2022 Loading…
Advisory improvement for GHSA-jf5r-8hm2-f872
#12 by Kenny2github was merged Mar 1, 2022 Loading…
2
ProTip! Follow long discussions with comments:>50.