Search results

[GHSA-33vc-wfww-vjfv] jsondiffpatch is vulnerable to Cross-site Scripting (XSS) via HtmlFormatter::nodeBegin

Status: Merged (completed).

github/advisory-databasenumber 6171

#6171 In github/advisory-database;

· by cai0duque was closed on Sep 22, 2025

· 4/5

3

[GHSA-mp7c-m3rh-r56v] matrix-js-sdk has insufficient validation when considering a room to be upgraded by another

Status: Merged (completed).

github/advisory-databasenumber 6170

#6170 In github/advisory-database;

· by cai0duque was closed on Sep 22, 2025

· 4/5

3

[GHSA-2h8j-8r9p-849f] @digitalocean/do-markdownit has Type Confusion vulnerability

Status: Merged (completed).

github/advisory-databasenumber 6169

#6169 In github/advisory-database;

· by cai0duque was closed on Sep 22, 2025

· 4/5

2

[GHSA-r95h-9x8f-r3f7] Nokogiri updates packaged libxml2 to v2.12.7 to resolve CVE-2024-34459

Status: Merged (completed).

github/advisory-databasenumber 6166

#6166 In github/advisory-database;

· by colbybr was closed on Sep 22, 2025

· 4/5

3

[GHSA-xwmg-2g98-w7v9] Nimbus JOSE + JWT is vulnerable to DoS attacks when processing deeply nested JSON

Status: Merged (completed).

github/advisory-databasenumber 6154

#6154 In github/advisory-database;

· by vtintillier was closed on Sep 19, 2025

· 4/5

1

Improve GHSA-r8xx-8vm8-x6wj

invalidThis doesn't seem rightThis doesn't seem right

Status: Closed (abandoned).

github/advisory-databasenumber 6153

#6153 In github/advisory-database;

· by jfjeifkvbk was closed on Sep 19, 2025

· 1/1

1

[GHSA-864f-7xjm-2jp2] CNCF K3s Kubernetes kubelet configuration exposes credentials

Status: Closed (abandoned).

github/advisory-databasenumber 6152

#6152 In github/advisory-database;

· by achibear was closed on Sep 19, 2025

· 5/5

1

[GHSA-pqqp-7cp8-vxvf] Ackites KillWxapkg Zip Bomb Resource Exhaustion

Status: Merged (completed).

github/advisory-databasenumber 6151

#6151 In github/advisory-database;

· by achibear was closed on Sep 19, 2025

· 4/5

1

[GHSA-f26w-gh5m-qq77] Pion Interceptor's improper RTP padding handling allows remote crash for SFU users (DoS)

Status: Closed (abandoned).

github/advisory-databasenumber 6150

#6150 In github/advisory-database;

· by achibear was closed on Sep 19, 2025

· 5/5

3

[GHSA-qm9p-f9j5-w83w] Parcel has an Origin Validation Error vulnerability

Status: Merged (completed).

github/advisory-databasenumber 6148

#6148 In github/advisory-database;

· by R4356th was closed on Sep 20, 2025

· 5/6

1

[GHSA-4r6h-8v6p-xvw6] Prototype Pollution in sheetJS

Status: Merged (completed).

github/advisory-databasenumber 6145

#6145 In github/advisory-database;

· by kb-med was closed on Sep 19, 2025

· 4/5

1

[GHSA-5pgg-2g8v-p4x9] SheetJS Regular Expression Denial of Service (ReDoS)

Status: Merged (completed).

github/advisory-databasenumber 6144

#6144 In github/advisory-database;

· by kb-med was closed on Sep 19, 2025

· 4/5

2

Improve GHSA-4459-qrcc-vfcf

invalidThis doesn't seem rightThis doesn't seem right

Status: Closed (abandoned).

github/advisory-databasenumber 6143

#6143 In github/advisory-database;

· by Alberto66628 was closed on Sep 17, 2025

· 5/5

1

[GHSA-4jwc-w2hc-78qv]: Fix affected version range

Status: Merged (completed).

github/advisory-databasenumber 6142

#6142 In github/advisory-database;

· by jayvdb was closed on Sep 16, 2025

· 2/3

2

[GHSA-2363-cqg2-863c] XML External Entity (XXE) Injection in JDOM

Status: Merged (completed).

github/advisory-databasenumber 6141

#6141 In github/advisory-database;

· by AndrzejBiernacki2010 was closed on Sep 16, 2025

· 4/5

2

ngx-bootstrap / ng2-file-upload: add affected versions

Status: Closed (completed).

#6140 In github/advisory-database;

· by patlkli was closed on Sep 16, 2025

1 comment

[GHSA-8xx5-h6m3-jr33] Presta Shop vulnerable to email enumeration

invalidThis doesn't seem rightThis doesn't seem right

Status: Closed (abandoned).

github/advisory-databasenumber 6137

#6137 In github/advisory-database;

· by byt3n33dl3 was closed on Sep 19, 2025

· 5/5

7

[GHSA-q58r-hwc8-rm9j] Improper Neutralization of Input During Web Page...

Status: Merged (completed).

github/advisory-databasenumber 6136

#6136 In github/advisory-database;

· by levpachmanov was closed on Sep 18, 2025

· 4/5

1

fix: add credits section to GHSA-pr45-cg4x-ff4m.json

Status: Merged (completed).

github/advisory-databasenumber 6135

#6135 In github/advisory-database;

· by lirantal was closed on Sep 18, 2025

· 1/2

3

[GHSA-x83m-pf6f-pf9g] hibernate-validator Cross-site Scripting vulnerability

Status: Merged (completed).

github/advisory-databasenumber 6133

#6133 In github/advisory-database;

· by AndrzejBiernacki2010 was closed on Sep 12, 2025

· 4/5

1

[GHSA-w285-wf9q-5w69] In Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode

Status: Merged (completed).

github/advisory-databasenumber 6131

#6131 In github/advisory-database;

· by AndrzejBiernacki2010 was closed on Sep 12, 2025

· 4/5

1

[GHSA-fjqm-246c-mwqg] In Bouncy Castle JCE Provider the other party DH public key is not fully validated

Status: Merged (completed).

github/advisory-databasenumber 6130

#6130 In github/advisory-database;

· by AndrzejBiernacki2010 was closed on Sep 12, 2025

· 4/5

1

[GHSA-9gp4-qrff-c648] Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15

Status: Merged (completed).

github/advisory-databasenumber 6129

#6129 In github/advisory-database;

· by AndrzejBiernacki2010 was closed on Sep 12, 2025

· 4/5

1

[GHSA-2j2x-hx4g-2gf4] In Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode

Status: Merged (completed).

github/advisory-databasenumber 6128

#6128 In github/advisory-database;

· by AndrzejBiernacki2010 was closed on Sep 12, 2025

· 4/5

1

[GHSA-rrvx-pwf8-p59p] In Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values

Status: Merged (completed).

github/advisory-databasenumber 6127

#6127 In github/advisory-database;

· by AndrzejBiernacki2010 was closed on Sep 12, 2025

· 3/4

1