-
Notifications
You must be signed in to change notification settings - Fork 647
Pull requests: github/advisory-database
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
[GHSA-98m9-hrrm-r99r] Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters
#8108
opened Jun 24, 2026 by
G-Rath
Loading…
Add fix references to GHSA-cmwh-pvxp-8882 (DOMPurify)
#8106
opened Jun 23, 2026 by
EchoTydes
Loading…
[GHSA-rhv4-8758-jx7v] Decimal: Unbounded exponent in
Decimal.new enables unauthenticated DoS
#8105
opened Jun 23, 2026 by
tiagoefmoraes
Loading…
Add fix references to GHSA-vq2f-vcc9-j8mv (python-liquid)
#8104
opened Jun 23, 2026 by
EchoTydes
Loading…
Add fix references to GHSA-h8w8-99g7-qmvj (concurrent-ruby)
#8103
opened Jun 23, 2026 by
EchoTydes
Loading…
Add fix references to GHSA-cwxw-98qj-8qjx (guzzlehttp/guzzle)
#8100
opened Jun 23, 2026 by
EchoTydes
Loading…
[GHSA-jxfc-8wcq-xxcg] The Gravity SMTP plugin for WordPress is vulnerable to...
#8099
opened Jun 23, 2026 by
nickpelton
Loading…
[GHSA-7m2p-62gw-p8qq] Due to incorrect host parsing, applications that rely on...
#8097
opened Jun 23, 2026 by
julianladisch
Loading…
[GHSA-3prj-6hqw-cm82] PHP JWT Library: PBES2-HS*+A*KW unwrap accepts an unbounded p2c iteration count, enabling CPU-amplification denial of service
#8096
opened Jun 23, 2026 by
hostep
Loading…
[GHSA-jc38-x7x8-2xc8] PHP JWT Framework: JWSVerifier uses algorithm from unprotected header, enabling algorithm confusion attacks
#8095
opened Jun 23, 2026 by
hostep
Loading…
[GHSA-293q-567p-wmwq] SubjectDnX509PrincipalExtractor does not correctly handle...
#8094
opened Jun 23, 2026 by
julianladisch
Loading…
[GHSA-g3pr-3p32-fp23] In Micrometer, it is possible for a user to provide...
#8092
opened Jun 23, 2026 by
julianladisch
Loading…
[GHSA-w737-wx49-qj23] In Micrometer, it is possible for a user to provide...
#8091
opened Jun 23, 2026 by
julianladisch
Loading…
[GHSA-42jc-v69j-g38f] Gophish through 0.12.1 contains a denial of service...
#8090
opened Jun 23, 2026 by
ashikmd7
Loading…
[GHSA-c8q4-9h32-2ww8] Spinnaker has uon-safe yaml deserialization, allowing RCE when using specific types
#8088
opened Jun 22, 2026 by
connorshea
Loading…
[GHSA-5xgj-pmjj-gw49] RISC Zero zkVM notes on zero-knowledge
#8087
opened Jun 22, 2026 by
v-sdingari
Loading…
[GHSA-263q-5cv3-xq9g] Gitea allows attackers to add attachments with forbidden file extensions
#8086
opened Jun 22, 2026 by
brianrlamar-enlighten
Loading…
[GHSA-5xgj-pmjj-gw49] RISC Zero zkVM notes on zero-knowledge
#8083
opened Jun 22, 2026 by
Saireddy453
Loading…
[GHSA-p4gq-832x-fm9v] Natural Language Toolkit (NLTK): URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read
#8081
opened Jun 21, 2026 by
ekaf
Loading…
[GHSA-m5wg-cjgh-223j] goodoneuz/pay-uz: the /payment/api/editable/update endpoint overwrites existing PHP payment hook files
#8077
opened Jun 20, 2026 by
shaxzodbek-uzb
Loading…
Enrich GHSA-xp7f-v245-w3w8 (CVE-2026-38361, dash-uploader DoS): resubmit of #7636
#8076
opened Jun 20, 2026 by
a1ohadance
Loading…
Previous Next
ProTip!
Updated in the last three days: updated:>2026-06-20.