Skip to content

Pull requests: github/advisory-database

New pull request New
20 Open 6,290 Closed
20 Open 6,290 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Add advisory: python-jose algorithm confusion via DER keys (CVE-2024-33663 bypass)
#7123 opened Mar 5, 2026 by yugui923 Loading…
Add advisory: python-jose JWE CBC-HMAC padding oracle (all versions through 3.5.0)
#7122 opened Mar 5, 2026 by yugui923 Loading…
[GHSA-57q8-p4r4-7xr7] ESC/POS, a printer control language designed by Seiko...
#7121 opened Mar 5, 2026 by futileskills • Draft
[GHSA-pm7g-w2cf-q238] pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3...
#7120 opened Mar 5, 2026 by fritzdal Loading…
[GHSA-q5rg-wg7h-73m5] LibreNMS Information Disclosure
#7116 opened Mar 5, 2026 by EMSeek Loading…
[GHSA-78qv-3mpx-9cqq] NiceGUI vulnerable to XSS via Code Injection during client-side element function execution
#7113 opened Mar 5, 2026 by evnchn Loading…
4
[GHSA-mq3p-rrmp-79jg] go-ethereum is vulnerable to high CPU usage leading to DoS via malicious p2p message
#7103 opened Mar 4, 2026 by timothyfraser1955-del Loading…
5
[GHSA-r6q2-hw4h-h46w] Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS
#7095 opened Mar 2, 2026 by urielcos Loading…
2
[GHSA-h2f4-v4c4-6wx4] Uncontrolled Resource Consumption in org.eclipse.jetty:jetty-server
#7093 opened Mar 2, 2026 by Meet003118 Loading…
1
[GHSA-mw96-cpmx-2vgc] Rollup 4 has Arbitrary File Write via Path Traversal
#7089 opened Mar 1, 2026 by JaclynCodes Loading…
1
[GHSA-7r86-cg39-jmmj] minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments
#7087 opened Feb 28, 2026 by ljharb Loading…
3
[GHSA-qq67-mvv5-fw3g] Astro has Full-Read SSRF in error rendering via Host: header injection Keep
#7055 opened Feb 24, 2026 by kytta Loading…
8
[GHSA-8398-gmmx-564h] n8n has a Python sandbox escape
#7029 opened Feb 23, 2026 by c0rydoras Loading…
4
[GHSA-58pw-r2v4-pwjv] Improve advisory details: reference incomplete fix for CVE-2025-11001 Stale
#6791 opened Feb 6, 2026 by decsecre583 Loading…
2
[GHSA-x43h-8pfv-xx24] Improve advisory details: reference incomplete fix for CVE-2024-6383 Stale
#6790 opened Feb 6, 2026 by decsecre583 Loading…
2
[GHSA-cm59-8rmv-f2cj] Improve advisory details: reference incomplete fix for CVE-2024-5125 Stale
#6789 opened Feb 6, 2026 by decsecre583 Loading…
2
[GHSA-8jxr-mccc-mwg8] Improve advisory details: reference incomplete fix for CVE-2024-43795 Stale
#6788 opened Feb 6, 2026 by decsecre583 Loading…
2
[GHSA-632q-77qj-c89q] Improve advisory details: reference incomplete fix for CVE-2024-28709
#6787 opened Feb 6, 2026 by decsecre583 Loading…
4
[GHSA-r6q2-hw4h-h46w] Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS
#6733 opened Jan 28, 2026 by ssushant0011 Loading…
5
[GHSA-77r5-gw3j-2mpf] Next.js Vulnerable to HTTP Request Smuggling Stale
#6636 opened Jan 10, 2026 by mistressxalexis Loading…
3
ProTip! Add no:assignee to see everything that’s not assigned.