-
Notifications
You must be signed in to change notification settings - Fork 618
Pull requests: github/advisory-database
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
[GHSA-c32j-vqhx-rx3x] ruby-jwt: Empty-key HMAC bypass; cross-language sibling of CVE-2026-44351
#7808
opened May 25, 2026 by
perryn
Loading…
[GHSA-xq3m-2v4x-88gg] Arbitrary code execution in protobufjs
#7807
opened May 24, 2026 by
javi0guerrero4-cloud
Loading…
[GHSA-8gw3-rxh4-v6jx] expr-eval vulnerable to Prototype Pollution
#7806
opened May 22, 2026 by
vladko312
Loading…
[GHSA-45vw-wh46-2vx8] Twig: Arbitrary PHP code execution via
_self.(<string>) macro-reference compilation
#7805
opened May 22, 2026 by
vladko312
Loading…
[GHSA-p93r-85wp-75v3] Bouncy Castle Has Covert Timing Channel Vulnerability
#7804
opened May 22, 2026 by
jmini
Loading…
[GHSA-7g5w-pq96-8c5w] flash-attention contains an insecure deserialization vulnerability in its checkpoint loading mechanism
#7803
opened May 22, 2026 by
warsang
Loading…
[GHSA-97jf-46m3-8953] Improper authentication in Azure SDK allows an...
#7802
opened May 22, 2026 by
scottaddie
Loading…
[GHSA-qqj3-g7mx-5p4w] NeuVector telemetry sender is vulnerable to MITM and DoS
#7801
opened May 22, 2026 by
holyspectral
Loading…
[GHSA-w54x-xfxg-4gxq] NeuVector process with sensitive arguments lead to leakage
#7800
opened May 22, 2026 by
holyspectral
Loading…
[GHSA-8pxw-9c75-6w56] NeuVector admin account has insecure default password
#7799
opened May 22, 2026 by
holyspectral
Loading…
[GHSA-8ff6-pc43-jwv3] NeuVector has an insecure password storage vulnerable to rainbow attack
#7798
opened May 22, 2026 by
holyspectral
Loading…
[GHSA-m5gw-83w2-7749] Deserialization of untrusted data in Apache Fory PyFory....
#7797
opened May 22, 2026 by
HGWAYEN
Loading…
[GHSA-3x3v-w654-m28m] Undertow: Denial of Service via Multipart/Form-Data Parsing on HTTP GET Requests
#7796
opened May 22, 2026 by
julianladisch
Loading…
[GHSA-w42g-jj8w-fj77] phpMyFAQ: Stored XSS via Utils::parseUrl() in comment rendering
#7795
opened May 22, 2026 by
klaudialax
Loading…
[GHSA-24c8-4792-22hx] Scriban: array.insert_at index parameter DoS bypasses LoopLimit and LimitToString
#7794
opened May 22, 2026 by
adamus2
Loading…
Use earlier Go pseudo-version for GHSA-78mf-482w-62qj
#7793
opened May 21, 2026 by
cookesan
Loading…
Previous Next
ProTip!
Filter pull requests by the default branch with base:main.