Skip to content

Pull requests: github/advisory-database

New pull request New
18 Open 2,614 Closed
18 Open 2,614 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

[GHSA-vjh7-5r6x-xh6g] CasaOS Gateway vulnerable to incorrect identification of source IP addresses
#2883 opened Oct 23, 2023 by thomas-chauchefoin-sonarsource Loading…
1
[GHSA-m5q5-8mfw-p2hr] CasaOS contains weak JWT secrets
#2882 opened Oct 23, 2023 by thomas-chauchefoin-sonarsource Loading…
1
[GHSA-fj7f-vq84-fh43] Local Code Execution through Argument Injection via dash leading git url parameter in Gemfile.
#2881 opened Oct 23, 2023 by paul-gerste-sonarsource Loading…
1
[GHSA-frqg-7g38-6gcf] Improper escaping of command arguments on Windows leading to command injection
#2880 opened Oct 23, 2023 by paul-gerste-sonarsource Loading…
1
[GHSA-m88m-crr9-jvqq] OpenRefine vulnerable to zip slip in project import
#2879 opened Oct 23, 2023 by stefan-schiller-sonarsource Loading…
1
[GHSA-mrr8-v49w-3333] sweetalert2 v11.6.14 and above contains potentially undesirable behavior
#2877 opened Oct 22, 2023 by car1ot Loading…
[GHSA-29mw-wpgm-hmr9] Regular Expression Denial of Service (ReDoS) in lodash
#2875 opened Oct 20, 2023 by jkmartindale Loading…
[GHSA-qppj-fm5r-hxr3] swift-nio-http2 vulnerable to HTTP/2 Stream Cancellation Attack
#2874 opened Oct 20, 2023 by faroukfaiz10 Loading…
1
[GHSA-cr45-98w9-gwqx] Empty severity[].score
#2873 opened Oct 20, 2023 by nulls Loading…
[GHSA-rmqp-9w4c-gc7w] Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService
#2870 opened Oct 19, 2023 by claudioandreantonio Loading…
2
[GHSA-qppj-fm5r-hxr3] swift-nio-http2 vulnerable to HTTP/2 Stream Cancellation Attack
#2860 opened Oct 16, 2023 by joakime Loading…
8
Improve GHSA-h436-432x-8fvx
#2855 opened Oct 15, 2023 by wtwhite Loading…
1
[GHSA-f7vh-qwp3-x37m] Deserialization of Untrusted Data in Apache Log4j
#2852 opened Oct 14, 2023 by SebGondron Loading…
[GHSA-65fg-84f6-3jq3] SQL Injection in Log4j 1.2.x
#2851 opened Oct 14, 2023 by SebGondron Loading…
[GHSA-w9p3-5cr8-m3jj] Deserialization of Untrusted Data in Log4j 1.x
#2850 opened Oct 14, 2023 by SebGondron Loading…
Improve GHSA-fjq5-5j5f-mvxh
#2841 opened Oct 10, 2023 by wtwhite Loading…
4
[GHSA-j7hp-h8jx-5ppr] libwebp: OOB write in BuildHuffmanTable
Stale
#2787 opened Sep 29, 2023 by jasonculverhouse Loading…
3
[GHSA-fpfv-jqm9-f5jm] Incorrect Comparison in NumPy
Stale
#2757 opened Sep 26, 2023 by KOSASIH Loading…
2
ProTip! Find all pull requests that aren't related to any open issues with -linked:issue.