-
Notifications
You must be signed in to change notification settings - Fork 742
Pull requests: github/advisory-database
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
[GHSA-9w5v-hq8q-c6h7] There is no allow list for property keys when Spring...
#9395
opened Sep 7, 2026 by
julianladisch
Loading…
[GHSA-vj7f-9q44-g5xv] Several components in Spring Security compare security...
#9394
opened Sep 7, 2026 by
julianladisch
Loading…
[GHSA-cp6q-959q-f8rh] Tiptap: mergeAttributes() turns an own __proto__ key into inherited executable DOM attributes
#9393
opened Sep 7, 2026 by
gnapse
Loading…
[GHSA-47m2-wp7j-p9vc] rubyzip versions before 3.4.0 contain a path traversal...
#9391
opened Sep 7, 2026 by
iBotPeaches
Loading…
[GHSA-hfpc-7mr4-p297] whichllm before 0.5.16 contains a code injection...
#9388
opened Sep 7, 2026 by
Andyyyy64
Loading…
[GHSA-v56q-mh7h-f735] Immutable.js
List 32-bit trie overflow → unrecoverable DoS
#9387
opened Sep 7, 2026 by
domcleal
Loading…
[GHSA-5hjh-c26m-xw8w] github.com/hoppscotch/proxyscotch: patched version 1.0.0 does not exist on the registry; the fix is in 0.1.0
#9386
opened Sep 7, 2026 by
zyl71
Loading…
[GHSA-5grx-v727-qmq6] github.com/1Panel-dev/1Panel: patched version 1.10.12-tls does not exist on the registry; the fix is in 1.10.12-lts
#9385
opened Sep 7, 2026 by
zyl71
Loading…
[GHSA-4f5x-q4jc-xfcf] pimcore/pimcore: patched version predates the fix (first fixed release: 10.2.9)
#9384
opened Sep 7, 2026 by
zyl71
Loading…
[GHSA-45rp-q25w-4426] pretix: backports to 2024.5.1, 2024.6.1 not reflected
#9383
opened Sep 7, 2026 by
zyl71
Loading…
[GHSA-3xxm-3g3c-w579] moodle/moodle: backports to 3.9.24, 3.11.17, 4.0.11, 4.1.6, 4.2.3 not reflected
#9382
opened Sep 7, 2026 by
zyl71
Loading…
[GHSA-3xgx-r9j4-qw9w] dexie: backport to 3.0.4 not reflected
#9381
opened Sep 7, 2026 by
zyl71
Loading…
[GHSA-3wfj-vh84-732p] org.apache.activemq:activemq-client: backport to 5.10.2 not reflected
#9380
opened Sep 7, 2026 by
zyl71
Loading…
[GHSA-2ppf-2m6f-6v6f] python-openstackclient: backports to 5.8.1, 6.0.1, 6.2.1 not reflected
#9379
opened Sep 7, 2026 by
zyl71
Loading…
[GHSA-263q-5cv3-xq9g] code.gitea.io/gitea: add the patched version 1.23.0
#9378
opened Sep 7, 2026 by
zyl71
Loading…
[GHSA-22qq-3xwm-r5x4] github.com/cometbft/cometbft: backport to 0.37.15 not reflected
#9377
opened Sep 7, 2026 by
zyl71
Loading…
[GHSA-cp6q-959q-f8rh] Tiptap: mergeAttributes() turns an own __proto__ key into inherited executable DOM attributes
#9375
opened Sep 6, 2026 by
G-Rath
Loading…
[GHSA-663r-x48j-fg8p] A weakness has been identified in jsonata-js jsonata up...
#9374
opened Sep 6, 2026 by
noren95
Loading…
[GHSA-f22v-gfqf-p8f3] React Router has stored XSS via unescaped Location header in prerendered redirect HTML
#9372
opened Sep 5, 2026 by
HF-CYGG
Loading…
[GHSA-8v8x-cx79-35w7] React Router SSR XSS in ScrollRestoration
#9371
opened Sep 5, 2026 by
HF-CYGG
Loading…
[GHSA-3cgp-3xvw-98x8] React Router has XSS Vulnerability
#9370
opened Sep 5, 2026 by
HF-CYGG
Loading…
Include affected npm alpha release in GHSA-f962-v9hr-pfg5
#9369
opened Sep 5, 2026 by
KSAGlory
Loading…
Previous Next
ProTip!
Updated in the last three days: updated:>2026-09-04.