Skip to content

Pull requests: github/advisory-database

New pull request New
574 Open 7,076 Closed
574 Open 7,076 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

[GHSA-wfqx-gjrf-g28r] Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag
#8628 opened Jul 8, 2026 by adamwg Loading…
1
[GHSA-2p5w-cvg5-gc5c] Hibernate vulnerable to SQL Injection
#8627 opened Jul 8, 2026 by InitFlo Loading…
[GHSA-5jmj-h7xm-6q6v] jackson-databind has case-insensitive deserialization bypasses per-property @JsonIgnoreProperties
#8626 opened Jul 8, 2026 by surli Loading…
3
[GHSA-9wxq-mwqw-8hhg] Java Deserialisation Vulnerability in Jaspersoft Reports...
#8625 opened Jul 8, 2026 by yaso-bash Loading…
2
[GHSA-5jqp-885w-xj32] pymatgen is vulnerable to Regular Expression Denial of Service (ReDoS)
#8624 opened Jul 8, 2026 by DanielYang59 Loading…
[GHSA-7x27-g8rg-x87w] A flaw in AngularJS' Strict Contextual Escaping (SCE)...
#8621 opened Jul 8, 2026 by spectacularpigeoncow Loading…
[GHSA-923m-gv2p-w5qp] An issue was discovered in Django 5.2 before 5.2.15 and 6...
#8620 opened Jul 7, 2026 by cgurnik Loading…
[GHSA-qpc8-7fxc-cm4p] An issue was discovered in Django 5.2 before 5.2.15 and 6...
#8619 opened Jul 7, 2026 by cgurnik Loading…
[GHSA-8cjm-8mp7-r2xf] An issue was discovered in Django 5.2 before 5.2.15 and 6...
#8618 opened Jul 7, 2026 by cgurnik Loading…
[GHSA-h7pc-vwp9-298g] An issue was discovered in Django 6.0 before 6.0.6 and 5...
#8617 opened Jul 7, 2026 by cgurnik Loading…
[GHSA-62c8-mh53-4cqv] HTTP client can manipulate custom HTTP headers …
#8614 opened Jul 7, 2026 by x64vps Loading…
Add Enclave fixed release references
#8612 opened Jul 7, 2026 by cookesan • Draft
Add LiteLLM fixed release references
#8609 opened Jul 7, 2026 by cookesan • Draft
Add Kedro fixed release references
#8608 opened Jul 7, 2026 by cookesan • Draft
Add ESPHome advisory references
#8606 opened Jul 7, 2026 by cookesan • Draft
Add Filament advisory references
#8605 opened Jul 7, 2026 by cookesan • Draft
Add DOMPurify cross-realm fixed references
#8602 opened Jul 7, 2026 by cookesan • Draft
Add Mise credential command CVE-2026-55448 references
#8601 opened Jul 7, 2026 by cookesan • Draft
Add Piscina CVE-2026-55388 references
#8600 opened Jul 7, 2026 by cookesan • Draft
Correct Mise task include fixed version
#8598 opened Jul 7, 2026 by cookesan • Draft
Add Langflow BaseFile fixed release reference
#8597 opened Jul 7, 2026 by cookesan • Draft
Add Langflow upload fixed release reference
#8595 opened Jul 7, 2026 by cookesan • Draft
Add Sulu fixed release references
#8594 opened Jul 7, 2026 by cookesan • Draft
Add Deno WebSocket fixed release reference
#8593 opened Jul 7, 2026 by cookesan • Draft
Add TinaCMS fixed source tag references
#8592 opened Jul 7, 2026 by cookesan • Draft
ProTip! no:milestone will show everything without a milestone.