Pull requests: github/advisory-database
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
[GHSA-69p3-xp37-f692] Improper Certificate Validation in kubeclient
#2101
opened Apr 15, 2023 by
tdunlap607
Loading…
[GHSA-4mgv-m5cm-f9h7] Vault GitHub Action did not correctly mask multi-line secrets in output
#2100
opened Apr 15, 2023 by
tdunlap607
Loading…
[GHSA-6j63-35hj-vmcg] SQL injection in mysql-bunuuid-rails
#2098
opened Apr 14, 2023 by
tdunlap607
Loading…
[GHSA-6757-jp84-gxfx] Improper Input Validation in PyYAML
#2097
opened Apr 14, 2023 by
tdunlap607
Loading…
[GHSA-64wv-8vwp-xgw2] Use of Uninitialized Resource in ash.
#2096
opened Apr 14, 2023 by
tdunlap607
Loading…
[GHSA-5v9h-q3gj-c32x] SQL Injection via GeoJSON in sequelize
#2095
opened Apr 14, 2023 by
tdunlap607
Loading…
[GHSA-5v7r-jg9r-vq44] Insecure Cryptography Algorithm in simple-crypto-js
#2094
opened Apr 14, 2023 by
tdunlap607
Loading…
[GHSA-5h7w-hmxc-99g5] Cross site scripting in safe-svg
#2093
opened Apr 14, 2023 by
tdunlap607
Loading…
[GHSA-5c5f-7vfq-3732] JMESPath for Ruby uses unsafe JSON.load when safe JSON.parse is preferable
#2092
opened Apr 14, 2023 by
tdunlap607
Loading…
[GHSA-2chv-87wj-pjv2] OHDSI WebAPI vulnerable to SQL Injection
#2091
opened Apr 14, 2023 by
tdunlap607
Loading…
[GHSA-rg3q-jxmp-pvjj] Materialize-css vulnerable to Improper Neutralization of Input During Web Page Generation
#2090
opened Apr 14, 2023 by
Prz1vaL
Loading…
[GHSA-rgw9-2qv4-ghxq] The ShipStation.com plugin 1.1 and earlier for CS-Cart...
#2055
opened Apr 12, 2023 by
jerdiggity
Loading…
[GHSA-p48j-9rw2-x9q6] SQL Injection vulnerability in viaviwebtech Android EBook...
#2041
opened Apr 11, 2023 by
nkuldip
Loading…
[GHSA-rp65-9cf3-cjxr] Inefficient Regular Expression Complexity in nth-check
#1899
opened Mar 31, 2023 by
sude-go
Loading…
[GHSA-wg72-3rf2-wvp5] api/views/user.py in LibrePhotos before e19e539 has...
Stale
#1819
opened Mar 25, 2023 by
go-compile
Loading…
[GHSA-jp27-cwp2-5qqr] fixed so json represent same as described in text
Stale
#1807
opened Mar 22, 2023 by
7h3Rabbit
Loading…
[GHSA-hc6q-2mpp-qw7j] Cross-realm object access in Webpack 5
Stale
#1789
opened Mar 15, 2023 by
0723Cu
Loading…
[GHSA-8jh9-wqpf-q52c] sweetalert2 v8.19.1 and above contains hidden functionality
Stale
#1787
opened Mar 14, 2023 by
sukh-idgateway
Loading…
[GHSA-r38f-c4h4-hqq2] PostgreSQL JDBC Driver SQL Injection in ResultSet.refreshRow() with malicious column names
Stale
#1783
opened Mar 14, 2023 by
JBrown0x90
Loading…
[GHSA-w7q9-p3jq-fmhm] Uncontrolled resource consumption in jpeg-js
Stale
#1778
opened Mar 13, 2023 by
avnerbarr
Loading…
[GHSA-cf6r-3wgc-h863] Polymorphic deserialization of malicious object in jackson-databind
Stale
#1768
opened Mar 9, 2023 by
Osmankic-Adis_pfghub
Loading…
[GHSA-269g-pwp5-87pp] TemporaryFolder on unix-like systems does not limit access to created files
Stale
#1764
opened Mar 9, 2023 by
sebastian-rose_cpdev
Loading…
[GHSA-rp65-9cf3-cjxr] Inefficient Regular Expression Complexity in nth-check
Stale
#1763
opened Mar 8, 2023 by
NManning_Perkins
Loading…
[GHSA-28f8-hqmc-7ph8] Malicious Package in ember-power-timepicker
Stale
#1712
opened Feb 20, 2023 by
oliverchang
Loading…
Previous Next
ProTip!
Find all pull requests that aren't related to any open issues with -linked:issue.