Skip to content

Pull requests: github/advisory-database

New pull request New
514 Open 7,003 Closed
514 Open 7,003 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

[GHSA-hhpq-7wg4-36jm] CakePHP Authentication: Open redirect weakness via backslash bypass
#8485 opened Jul 3, 2026 by markstory Loading…
3
[GHSA-jc38-x7x8-2xc8] PHP JWT Framework: JWSVerifier uses algorithm from unprotected header, enabling algorithm confusion attacks
#8484 opened Jul 3, 2026 by samuelwei Loading…
2
[GHSA-q742-qvgc-gc2f] TinyMCE Cross-Site Scripting (XSS) vulnerability using through data-mce- prefixed src, href, style attributes
#8483 opened Jul 3, 2026 by sbrinkhorst Loading…
1
[GHSA-v98h-vmpc-fpqv] TinyMCE Cross-Site Scripting (XSS) vulnerability through mce:protected comments
#8482 opened Jul 3, 2026 by sbrinkhorst Loading…
1
[GHSA-v5pm-xwqc-g5wc] Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing
#8481 opened Jul 3, 2026 by mahsa-lamiyan Loading…
[GHSA-v5pm-xwqc-g5wc] Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing
#8480 opened Jul 2, 2026 by Falco20019 Loading…
2
[GHSA-wm64-883p-84j3] An issue was discovered in H2 1.4.197. Insecure handling...
#8478 opened Jul 2, 2026 by levpachmanov Loading…
[GHSA-vrv9-rjp4-w93c] Description: To issue and renew TLS certificates on...
#8477 opened Jul 2, 2026 by DavidOsipov Loading…
1
[GHSA-jgpv-4h4c-xhw3] Uncontrolled Resource Consumption in pillow
#8475 opened Jul 2, 2026 by yusuke-koyoshi Loading…
5
[GHSA-8988-4f7v-96qf] OpenTelemetry Core: Unbounded memory allocation in W3C Baggage propagation
#8474 opened Jul 2, 2026 by Lokeninfinitypoint Loading…
4
[GHSA-567r-vvh5-jjr8] ACE vulnerability in conditional configuration file...
#8473 opened Jul 1, 2026 by beth-soptim Loading…
Add DOMPurify selectedcontent fixed references
#8470 opened Jun 30, 2026 by cookesan Loading…
Add DOMPurify ADD_TAGS fixed references
#8469 opened Jun 30, 2026 by cookesan Loading…
Add PickleScan profile fixed references
#8468 opened Jun 30, 2026 by cookesan Loading…
Add PickleScan pkgutil fixed references
#8467 opened Jun 30, 2026 by cookesan Loading…
Add PickleScan fixed references
#8466 opened Jun 30, 2026 by cookesan Loading…
Add Loofah allowed_uri fixed references
#8465 opened Jun 30, 2026 by cookesan Loading…
Add Hono JSX fixed references
#8464 opened Jun 30, 2026 by cookesan Loading…
Add chi RealIP fixed references
#8463 opened Jun 30, 2026 by cookesan Loading…
Add Nodemailer raw message fixed references
#8462 opened Jun 30, 2026 by cookesan Loading…
Add launch-editor UNC path fixed references
#8461 opened Jun 30, 2026 by cookesan Loading…
Add Nokogiri JRuby NONET fixed references
#8460 opened Jun 30, 2026 by cookesan Loading…
Add Nokogiri encoding fixed references
#8459 opened Jun 30, 2026 by cookesan Loading…
Add Nokogiri uninitialized wrapper fixed references
#8458 opened Jun 30, 2026 by cookesan Loading…
Add Nokogiri NodeSet fixed references
#8457 opened Jun 30, 2026 by cookesan Loading…
ProTip! What’s not been updated in a month: updated:<2026-06-03.