Skip to content

Pull requests: github/advisory-database

New pull request New
383 Open 7,952 Closed
383 Open 7,952 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Improve GHSA-7pm4-56h2-5rxr
#9418 opened Sep 8, 2026 by bdalpe Loading…
1
Improve GHSA-cw25-2p92-7f75
#9417 opened Sep 8, 2026 by bdalpe Loading…
1
[GHSA-926x-3r5x-gfhw] Include langchain-core 0.3.83 in affected range
#9415 opened Sep 8, 2026 by KhanCold Loading…
1
[GHSA-2943-9672-r45w] Apache Airflow allows code execution through unsafe serialized DAG deserialization
#9414 opened Sep 8, 2026 by maccam912 Loading…
[GHSA-hvpf-8px2-f567] A cross-site scripting (XSS) vulnerability in rrweb...
#9413 opened Sep 8, 2026 by Juice10 Loading…
3
[GHSA-847x-vxjh-whpv] A flaw was found in GLib2. When g_file_replace() is used...
#9412 opened Sep 8, 2026 by iwayoshi1122-prog Loading…
[GHSA-9f64-m822-6qq6] The EmbeddedHeadersJsonMessageMapper defaults to an...
#9411 opened Sep 8, 2026 by julianladisch Loading…
[GHSA-37gx-w2pf-9hpp] When an IntegrationFlow uses .fluxTransform() with an...
#9410 opened Sep 8, 2026 by julianladisch Loading…
[GHSA-7274-w8xr-fr2w] Applications using AesBytesEncryptor with the two...
#9409 opened Sep 8, 2026 by julianladisch Loading…
[GHSA-pppg-c2f5-276v] Applications using Spring Framework's FreeMarker...
#9408 opened Sep 8, 2026 by julianladisch Loading…
[GHSA-jx9q-477g-4wgw] An authenticated attacker can craft a disposition frame...
#9407 opened Sep 8, 2026 by Ankush-Pathak Contributor Loading…
[GHSA-v648-fvf7-jrg2] DeadLetterPublishingRecovererFactory reads the...
#9406 opened Sep 8, 2026 by julianladisch Loading…
[GHSA-p2gc-fm5w-94jj] A pre-authentication attacker could leverage type nesting...
#9405 opened Sep 8, 2026 by Ankush-Pathak Contributor Loading…
[GHSA-wr2r-m36x-734x] A pre-authentication attacker could leverage type size...
#9404 opened Sep 8, 2026 by Ankush-Pathak Contributor Loading…
[GHSA-c3j3-64rf-grvf] Netty (io.netty:netty-handler) versions from 4.2.0.Final...
#9403 opened Sep 8, 2026 by Ankush-Pathak Contributor Loading…
[GHSA-jv7x-jjj5-pqwg] Spring Batch's FlatFileItemReader supports files where a...
#9402 opened Sep 8, 2026 by julianladisch Loading…
[GHSA-rh53-xvx2-j327] OpenChoreo: cluster-gateway internal proxy performs no caller authentication and is not read-only — data-plane Secret disclosure and arbitrary Kubernetes mutation
#9401 opened Sep 8, 2026 by cwolcott77 Loading…
1
[GHSA-955m-rr6m-2f9v] @sap/cds-mtxs NPM library does not perform sufficient...
#9399 opened Sep 8, 2026 by rosenblueh Loading…
[GHSA-cp6q-959q-f8rh] Tiptap: mergeAttributes() turns an own __proto__ key into inherited executable DOM attributes
#9396 opened Sep 7, 2026 by joshkel Loading…
3
[GHSA-9w5v-hq8q-c6h7] There is no allow list for property keys when Spring...
#9395 opened Sep 7, 2026 by julianladisch Loading…
[GHSA-vj7f-9q44-g5xv] Several components in Spring Security compare security...
#9394 opened Sep 7, 2026 by julianladisch Loading…
[GHSA-47m2-wp7j-p9vc] rubyzip versions before 3.4.0 contain a path traversal...
#9391 opened Sep 7, 2026 by iBotPeaches Loading…
3
[GHSA-v648-fvf7-jrg2] DeadLetterPublishingRecovererFactory reads the retry_topi...
#9390 opened Sep 7, 2026 by oscerd • Draft
[GHSA-f6gf-8w3m-3498] JsonKafkaHeaderMapper and DefaultKafkaHeaderMapper includ...
#9389 opened Sep 7, 2026 by oscerd • Draft
[GHSA-hfpc-7mr4-p297] whichllm before 0.5.16 contains a code injection...
#9388 opened Sep 7, 2026 by Andyyyy64 Loading…
1
ProTip! Mix and match filters to narrow down what you’re looking for.