6 Pull requests merged by 5 people

• [GHSA-8qhq-rq4j-8prj] Elasticsearch Logstash allows remote attackers to execute arbitrary commands

  #5465 merged Apr 16, 2025

• [GHSA-8qhq-rq4j-8prj] Elasticsearch Logstash allows remote attackers to execute arbitrary commands

  #5464 merged Apr 16, 2025

• [GHSA-968p-4wvh-cqc8] Babel has inefficient RexExp complexity in generated code with .replace when transpiling named capturing groups

  #5463 merged Apr 16, 2025

• [GHSA-cj7v-w2c7-cp7c] nest allows a remote attacker to execute arbitrary code via the Content-Type header

  #5460 merged Apr 14, 2025

• [GHSA-cj7v-w2c7-cp7c] nest allows a remote attacker to execute arbitrary code via the Content-Type header

  #5455 merged Apr 11, 2025

• [GHSA-cj7v-w2c7-cp7c] nest allows a remote attacker to execute arbitrary code via the Content-Type header

  #5453 merged Apr 11, 2025

6 Pull requests opened by 5 people

• [GHSA-jr5f-v2jv-69x6] axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL

  #5451 opened Apr 11, 2025

• [GHSA-vjh7-7g9h-fjfh] Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string)

  #5452 opened Apr 11, 2025

• [GHSA-gp8f-8m3g-qvj9] Next.js Cache Poisoning

  #5459 opened Apr 12, 2025

• [GHSA-cj7v-w2c7-cp7c] nest allows a remote attacker to execute arbitrary code via the Content-Type header

  #5461 opened Apr 15, 2025

• [GHSA-qjp7-gvrw-vxmf] An attacker authenticated as an administrator can use an...

  #5462 opened Apr 15, 2025

• [GHSA-x5m7-63c6-fx79] Cluster Monitoring Operator contains a credentials leak

  #5467 opened Apr 16, 2025

1 Issue closed by 1 person

• My

  #5454 closed Apr 14, 2025

2 Issues opened by 2 people

• my first issue

  #5469 opened Apr 17, 2025

• Possible false positive on logstash-event ruby gem for CVE-2014-4326 GHSA-8qhq-rq4j-8prj

  #5468 opened Apr 16, 2025

3 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• GHSA-rjhf-4mh8-9xjq is a duplicate of GHSA-3mv5-343c-w2qg

  #3085 commented on Apr 13, 2025 • 0 new comments

• [GHSA-3hhc-qp5v-9p2j] Active Record RCE bug with Serialized Columns

  #5416 commented on Apr 16, 2025 • 0 new comments

• [GHSA-fc9h-whq2-v747] Valid ECDSA signatures erroneously rejected in Elliptic

  #5442 commented on Apr 11, 2025 • 0 new comments