Search results

[GHSA-3xgq-45jj-v275] Regular Expression Denial of Service (ReDoS) in cross-spawn

Status: Open (in progress).

github/advisory-databasenumber 6483

#6483 In github/advisory-database;

· aprendis543 opened on Nov 30, 2025

· 4/4

[GHSA-v6x2-4q87-rf82] Improper Neutralization of Script-Related HTML Tags in a...

Status: Open (in progress).

github/advisory-databasenumber 6482

#6482 In github/advisory-database;

· oscerd opened on Nov 28, 2025

· 4/4

[GHSA-554w-wpv2-vw27] node-forge has ASN.1 Unbounded Recursion

Status: Open (in progress).

github/advisory-databasenumber 6481

#6481 In github/advisory-database;

· Swaraj010203 opened on Nov 28, 2025

· 4/4

4

[GHSA-7xw4-g7mm-r4hh] Add associated CVE to aliases field

Status: Open (in progress).

github/advisory-databasenumber 6480

#6480 In github/advisory-database;

· bernardoamc-stripe opened on Nov 27, 2025

· 2/2

[GHSA-jc85-fpwf-qm7x] expr-eval does not restrict functions passed to the evaluate function

Status: Open (in progress).

github/advisory-databasenumber 6479

#6479 In github/advisory-database;

· alecasg555 opened on Nov 27, 2025

· 4/4

[GHSA-4w6g-g6r5-3mgp] NCP Secure Enterprise Client 13.18 and NCP Secure Entry...

Status: Open (in progress).

github/advisory-databasenumber 6478

#6478 In github/advisory-database;

· CERT-Bund-CB opened on Nov 27, 2025

· 4/4

[GHSA-5pgg-2g8v-p4x9] SheetJS Regular Expression Denial of Service (ReDoS)

Status: Open (in progress).

github/advisory-databasenumber 6477

#6477 In github/advisory-database;

· vwiv opened on Nov 27, 2025

· 4/4

[GHSA-57fm-4q7w-88cr] Null Pointer Dereference vulnerability in libarchive 3.7...

Status: Open (in progress).

github/advisory-databasenumber 6476

#6476 In github/advisory-database;

· urielcos opened on Nov 27, 2025

· 4/4

[GHSA-jmp9-x22r-554x] Spring Framework annotation detection mechanism may result in improper authorization

Status: Open (in progress).

github/advisory-databasenumber 6475

#6475 In github/advisory-database;

· rickardhm opened on Nov 26, 2025

· 3/4

[GHSA-fj7x-q9j7-g6q6] Black vulnerable to Regular Expression Denial of Service (ReDoS)

Status: Open (in progress).

github/advisory-databasenumber 6474

#6474 In github/advisory-database;

· Unmanned-Island-admin opened on Nov 26, 2025

· 4/4

6

Ingesting of Drupal advisory database

Status: Open.

#6437 In github/advisory-database;

· G-Rath opened on Nov 18, 2025

Remove GHSA-p239-rfgf-c4jh

Status: Open.

#6344 In github/advisory-database;

· Kondara opened on Oct 23, 2025

Removal of Malware in @wdp-gov/lineage-component

Status: Open.

#6259 In github/advisory-database;

· divyesh-0x01 opened on Oct 5, 2025

1 comment



Missing CWE record when creating GHSA security report (CWE-1428)

Status: Open.

#6258 In github/advisory-database;

· mbiesiad opened on Oct 4, 2025

GHSA-xqrq-4mgf-ff32 (CVE-2025-50817) is invalid

Status: Open.

#6123 In github/advisory-database;

· keysmashes opened on Sep 11, 2025

2 comments

Advisory GHSA-9mvj-f7w8-pvh2 was rejected in NVD but not updated here

Status: Open.

#6119 In github/advisory-database;

· Joseph1971234 opened on Sep 11, 2025

Proposal: Add Attack Type Classification to Malware Advisories

Status: Open.

#6107 In github/advisory-database;

· mlouthain opened on Sep 10, 2025

1 comment

Questions on scope and impact of npm malware advisories (2025-09-09)

Status: Open.

#6103 In github/advisory-database;

· marcalexiei opened on Sep 9, 2025

16 comments

GHSA-8mgj-vmr8-frr6 lists incorrect dependencies * instead of v4.4.2

Status: Open.

#6098 In github/advisory-database;

· hpierre74 opened on Sep 8, 2025

3 comments

Incorrect Package Name in Advisory GHSA-x8rq-rc7x-5fg5 for @uppy/component

Status: Open.

#6097 In github/advisory-database;

· shivakumar-loginsoft opened on Sep 8, 2025

2 comments

Please clarify harmful libffi-dev malware report

Status: Open.

#6095 In github/advisory-database;

· atgreen opened on Sep 7, 2025

Clarification on Overlap Between GHSA-49vv-6q7q-w5cf and GHSA-9p2w-rmx4-9mw7

Status: Open.

#6057 In github/advisory-database;

· electra956 opened on Aug 28, 2025

1 comment

Advisory GHSA-hcg3-q754-cr77 has incorrect package listed

Status: Open.

#5996 In github/advisory-database;

· aburmash opened on Aug 13, 2025

3 comments

Support Haskell ecosystem advisories

Status: Open.

#5858 In github/advisory-database;

· blackheaven opened on Jul 27, 2025

2 comments

Advisory GHSA-xffm-g5w8-qvg7 has incorrect fix version

Status: Open.

#5853 In github/advisory-database;

· d-ellis opened on Jul 25, 2025

2 comments