Skip to content

Pull requests: github/advisory-database

New pull request New
262 Open 7,565 Closed
262 Open 7,565 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

[GHSA-jpjm-c3r5-q96r] A norm.Iter can enter an infinite loop when handling...
#8838 opened Jul 28, 2026 by pbettadapura Loading…
2
[GHSA-3qwc-47jf-5rf7] Add CWE-1285 for improper ABI pointer validation
#8837 opened Jul 28, 2026 by yhay81 Loading…
[GHSA-h738-vh6g-q8gh] Add jsii-diff package and affected range
#8836 opened Jul 28, 2026 by yhay81 Loading…
[GHSA-9fjq-45qv-pcm7] Mark ruint 1.17.1 as fixed
#8835 opened Jul 28, 2026 by yhay81 Loading…
[GHSA-cpmr-mw4j-99r7] Add CWE-22 for Label Studio path traversal
#8834 opened Jul 28, 2026 by yhay81 Loading…
[GHSA-hj8m-9fhf-v7jp] Add CWE-1336 for fief-server SSTI
#8833 opened Jul 27, 2026 by yhay81 Loading…
[GHSA-mh99-v99m-4gvg] brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash
#8832 opened Jul 27, 2026 by G-Rath Loading…
3
[GHSA-x744-4wpc-v9h2] Moby has AuthZ plugin bypass when provided oversized request bodies
#8830 opened Jul 27, 2026 by praneethd51 Loading…
1
[GHSA-792x-6vq6-j8r9] Spring Integration File Support: FTP/SFTP/SMB server can write arbitrary files anywhere on the client filesystem
#8829 opened Jul 27, 2026 by oleg-andreev-check24 Loading…
[GHSA-qwww-vcr4-c8h2] React Router: RSC Mode CSRF Bypass Allows Action Execution Before 400 Response
#8828 opened Jul 27, 2026 by AlexGustafsson Loading…
1
[GHSA-vf77-8h7g-gghp] Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat
#8827 opened Jul 27, 2026 by aruneko Contributor Loading…
5
GHSA-x9hg-5q6g-q3jr: set fixed version to 0.14.3 (CVE-2025-51471)
#8826 opened Jul 27, 2026 by nghiadaulau Loading…
2
GHSA-frvp-7c67-39w9: 1.x line was patched in 1.19.15, not only 2.0.5
#8824 opened Jul 26, 2026 by askalf Loading…
[GHSA-78fc-9688-w8xw] Fix malformed CVSS 4 vector
#8819 opened Jul 26, 2026 by mohammadrezwankhan Loading…
1
[GHSA-3988-h75v-hwf6] Arbitrary shell execution
#8817 opened Jul 25, 2026 by jrfnl Loading…
[GHSA-mhfv-8rc9-w38c] Arbitrary shell execution
#8816 opened Jul 25, 2026 by jrfnl Loading…
[GHSA-fgcw-684q-jj6r] huggingface/transformers: Arbitrary Code Execution During Model Initialization in the LightGlue Model Loading Path
#8812 opened Jul 25, 2026 by daemon Loading…
[GHSA-83x9-8wvq-rrcp] The urwid web display backend (urwid/display/web.py)...
#8809 opened Jul 24, 2026 by penguinolog Loading…
[GHSA-vqqj-9cmv-hx43] Undertow is Vulnerable to HTTP Request/Response Smuggling
#8807 opened Jul 24, 2026 by julianladisch Loading…
[GHSA-3gv6-g396-9v4r] Undertow is Vulnerable to HTTP Request/Response Smuggling
#8806 opened Jul 24, 2026 by julianladisch Loading…
[GHSA-8v4x-mgvp-p658] Undertow is Vulnerable to HTTP Request/Response Smuggling
#8805 opened Jul 24, 2026 by julianladisch Loading…
[GHSA-6hcw-qqr8-pjj8] Apache Airflow: Authenticated users can bypass the is_safe_url check
#8804 opened Jul 24, 2026 by maheshwarivijaykumar Loading…
[GHSA-q2hg-643c-gw8h] Apache Airflow: RCE by race condition in example_xcom dag
#8803 opened Jul 24, 2026 by maheshwarivijaykumar Loading…
[GHSA-2r5m-76wx-56gx] Apache Airflow Vulnerable to Deserialization of Untrusted Data
#8802 opened Jul 24, 2026 by maheshwarivijaykumar Loading…
[GHSA-2r2c-cx56-8933] JLine3 Telnet server: Unauthenticated Remote DoS via Unbounded Telnet NAWS Terminal Geometry
#8801 opened Jul 24, 2026 by j-zygmunt Loading…
1
ProTip! Updated in the last three days: updated:>2026-07-25.