Skip to content

Pull requests: github/advisory-database

New pull request New
402 Open 7,956 Closed
402 Open 7,956 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

Pin GitHub Actions to commit SHAs
#9444 opened Sep 10, 2026 by github-security-bot Loading…
1
[GHSA-qjrq-cvv4-3g9w] knowns versions before 0.30.0 fail to validate filesystem...
#9443 opened Sep 10, 2026 by portyu9 Loading…
[GHSA-6924-jpg3-mjfw] A security flaw has been discovered in java-json-tools...
#9442 opened Sep 10, 2026 by portyu9 Loading…
[GHSA-4v8g-86x5-3vrc] Apache OpenNLP DictionaryEntryPersistor Vulnerable to XML External Entity (XXE) via Unsanitized Dictionary Parsing
#9440 opened Sep 10, 2026 by angelcrespoblanco-tng Loading…
1
[GHSA-qqmf-gpg7-g8gw] PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
#9439 opened Sep 10, 2026 by westonsteimel Loading…
[GHSA-gq3w-7jj3-x7gr] MLflow Use of Default Password Authentication Bypass Vulnerability
#9438 opened Sep 10, 2026 by tanghaoji Loading…
[GHSA-rgpg-cpwg-4f45] Traefik versions >= v3.7.0 and <= v3.7.10 contain an...
#9437 opened Sep 9, 2026 by james-yusuke Loading…
[GHSA-q9cv-5mjc-7cjc] Add the missing affected package range for google-adk
#9436 opened Sep 9, 2026 by imran-siddique Loading…
[GHSA-q42x-32f8-m4r5] Traefik before v2.11.55 contains a TLS option conflict...
#9434 opened Sep 9, 2026 by james-yusuke Loading…
[GHSA-pc63-qcmh-9cmg] Use of XsltView in a Spring MVC application can result in...
#9433 opened Sep 9, 2026 by julianladisch Loading…
[GHSA-96vf-qc2m-7q49] Spring Framework applications that use Spring's data...
#9432 opened Sep 9, 2026 by julianladisch Loading…
[GHSA-g782-8rcv-55rh] Applications that evaluate user-supplied Spring...
#9431 opened Sep 9, 2026 by julianladisch Loading…
[GHSA-549f-4rpc-3rw9] Spring MVC and WebFlux applications that obtain a data...
#9430 opened Sep 9, 2026 by julianladisch Loading…
[GHSA-m843-fc87-4v2m] Applications that evaluate Spring Expression Language ...
#9429 opened Sep 9, 2026 by julianladisch Loading…
[GHSA-p9xf-3946-vr35] In Reactor Core, applications that use the Flux...
#9428 opened Sep 9, 2026 by julianladisch Loading…
[GHSA-5jp2-w3vg-5w3x] In Reactor Core, applications that use the Flux...
#9427 opened Sep 9, 2026 by julianladisch Loading…
[GHSA-f22x-pp6j-8h8j] PAX Technology A930 PayDroid 7.1.1 Virgo V04.4.02...
#9426 opened Sep 9, 2026 by ayibunyamin152-jpg Loading…
[GHSA-53cv-4frm-9p27] A WebFlux application running on the Jetty 12 Core...
#9425 opened Sep 9, 2026 by julianladisch Loading…
[GHSA-jv9m-vf54-chjj] Flowise is vulnerable to arbitrary file write through its WriteFileTool
#9423 opened Sep 9, 2026 by blue2cat Loading…
2
[GHSA-xcg2-9pp4-j82x] rollbar vulnerable to Prototype Pollution in merge()
#9422 opened Sep 9, 2026 by blue2cat Loading…
3
[GHSA-2j8v-hwgc-x698] OpenClaw: Shell wrapper argv could change between approval and execution
#9421 opened Sep 9, 2026 by blue2cat Loading…
2
[GHSA-v56q-mh7h-f735] Immutable.js List 32-bit trie overflow → unrecoverable DoS
#9420 opened Sep 9, 2026 by LeongXuhua Loading…
1
Improve GHSA-7pm4-56h2-5rxr
#9418 opened Sep 8, 2026 by bdalpe Loading…
1
Improve GHSA-cw25-2p92-7f75
#9417 opened Sep 8, 2026 by bdalpe Loading…
1
[GHSA-926x-3r5x-gfhw] Include langchain-core 0.3.83 in affected range
#9415 opened Sep 8, 2026 by KhanCold Loading…
1
ProTip! Filter pull requests by the default branch with base:main.