Skip to content

Pull requests: github/advisory-database

New pull request New
44 Open 2,007 Closed
44 Open 2,007 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

[GHSA-45j8-pm75-5v8x] Path Traversal in simplehttpserver
#2212 opened Apr 28, 2023 by s5dev Loading…
[GHSA-5pm2-9mr2-3frq] Component takeover in Oracle Data Provider for .NET
#2211 opened Apr 27, 2023 by alexkeh Loading…
1
[GHSA-5jp2-vwrj-99rf] Team scope authorization bypass when Post/Put request with :team_name in body, allows HTTP parameter pollution
#2207 opened Apr 27, 2023 by tdunlap607 Loading…
1
[GHSA-4pv3-63jw-4jw2] Missing Release of Memory after Effective Lifetime in Apache Tika
#2206 opened Apr 27, 2023 by tdunlap607 Loading…
[GHSA-4936-rj25-6wm6] nori contains Improper Input Validation
#2205 opened Apr 27, 2023 by tdunlap607 Loading…
[GHSA-46r5-59fg-2fjc] Deserialization of Untrusted Data in Infinispan
#2204 opened Apr 27, 2023 by tdunlap607 Loading…
[GHSA-3mgp-fx93-9xv5] XSS vulnerability that affects bootstrap
#2203 opened Apr 27, 2023 by tdunlap607 Loading…
[GHSA-rc2q-x9mf-w3vf] TestNG is vulnerable to Path Traversal
#2201 opened Apr 27, 2023 by ljacomet Loading…
[GHSA-29mw-wpgm-hmr9] Regular Expression Denial of Service (ReDoS) in lodash
#2198 opened Apr 26, 2023 by nitaiapiiro Loading…
[GHSA-vr8j-hgmm-jh9r] If an X.509 certificate contains a malformed policy...
#2190 opened Apr 24, 2023 by AlmogApiiro Loading…
[GHSA-6mqr-q86q-6gwr] Authentication Bypass by CSRF Weakness
#2188 opened Apr 24, 2023 by tdunlap607 Loading…
1
[GHSA-qcc4-3rxf-gf4m] Unauthorized property update in CheckboxGroup component in Vaadin 12-14 and 15-20
#2187 opened Apr 24, 2023 by tdunlap607 Loading…
[GHSA-q9h2-4xhf-23xx] Data races in im
#2185 opened Apr 23, 2023 by tdunlap607 Loading…
[GHSA-q73f-vjc2-3gqf] OpenStack Image Service (Glance) allows remote authenticated users to read arbitrary file
#2184 opened Apr 23, 2023 by tdunlap607 Loading…
[GHSA-m69r-9g56-7mv8] HashiCorp Consul vulnerable to authorization bypass
#2181 opened Apr 23, 2023 by tdunlap607 Loading…
[GHSA-jgm2-m5cg-f66g] Authentication Bypass in Apache Tomcat
#2180 opened Apr 23, 2023 by tdunlap607 Loading…
[GHSA-gvpx-9459-w3mj] Cross-Site Scripting in @ckeditor/ckeditor5-link
#2178 opened Apr 23, 2023 by tdunlap607 Loading…
[GHSA-gmpq-xrxj-xh8m] Arches vulnerable to execution of arbitrary SQL
#2177 opened Apr 23, 2023 by tdunlap607 Loading…
1
[GHSA-f8vr-r385-rh5r] h2 vulnerable to denial of service
#2176 opened Apr 23, 2023 by JohnTitor Loading…
[GHSA-c25x-cm9x-qqgx] Deno improperly handles resizable ArrayBuffer
#2175 opened Apr 23, 2023 by JohnTitor Loading…
1
[GHSA-h835-75hw-pj89] activesupport Cross-site Scripting vulnerability
#2174 opened Apr 23, 2023 by tdunlap607 Loading…
[GHSA-xrcv-f9gm-v42c] Out-of-bounds Read in Pillow
#2173 opened Apr 23, 2023 by tdunlap607 Loading…
[GHSA-qv62-xfj6-32xm] RubyGems 2.0.x before 2.0.17, 2.2.x before 2.2.5, and 2.4...
#2172 opened Apr 23, 2023 by jasnow Loading…
[GHSA-5mgj-mvv8-46mw] RubyGems before 1.8.23 does not verify an SSL certificate...
#2171 opened Apr 23, 2023 by jasnow Loading…
[GHSA-228f-g3h7-3fj3] RubyGems before 1.8.23 can redirect HTTPS connections to...
#2170 opened Apr 23, 2023 by jasnow Loading…
ProTip! Filter pull requests by the default branch with base:main.