-
Notifications
You must be signed in to change notification settings - Fork 542
Pull requests: github/advisory-database
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
[GHSA-hhfx-wfvq-7g9c] Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network
#7152
opened Mar 12, 2026 by
vcolin7
Loading…
[GHSA-mq3p-rrmp-79jg] go-ethereum is vulnerable to high CPU usage leading to DoS via malicious p2p message
#7103
opened Mar 4, 2026 by
timothyfraser1955-del
Loading…
[GHSA-r6q2-hw4h-h46w] Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS
#7095
opened Mar 2, 2026 by
urielcos
Loading…
[GHSA-h2f4-v4c4-6wx4] Uncontrolled Resource Consumption in org.eclipse.jetty:jetty-server
#7093
opened Mar 2, 2026 by
Meet003118
Loading…
[GHSA-mw96-cpmx-2vgc] Rollup 4 has Arbitrary File Write via Path Traversal
#7089
opened Mar 1, 2026 by
JaclynCodes
Loading…
[GHSA-7r86-cg39-jmmj] minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments
#7087
opened Feb 28, 2026 by
ljharb
Loading…
[GHSA-qq67-mvv5-fw3g] Astro has Full-Read SSRF in error rendering via Host: header injection
Keep
#7055
opened Feb 24, 2026 by
kytta
Loading…
[GHSA-8398-gmmx-564h] n8n has a Python sandbox escape
#7029
opened Feb 23, 2026 by
c0rydoras
Loading…
[GHSA-632q-77qj-c89q] Improve advisory details: reference incomplete fix for CVE-2024-28709
Stale
#6787
opened Feb 6, 2026 by
decsecre583
Loading…
[GHSA-r6q2-hw4h-h46w] Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS
Stale
#6733
opened Jan 28, 2026 by
ssushant0011
Loading…
[GHSA-77r5-gw3j-2mpf] Next.js Vulnerable to HTTP Request Smuggling
Stale
#6636
opened Jan 10, 2026 by
mistressxalexis
Loading…
ProTip!
Add no:assignee to see everything that’s not assigned.