-
Notifications
You must be signed in to change notification settings - Fork 595
Pull requests: github/advisory-database
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
[GHSA-q67f-28xg-22rw] Forge has signature forgery in Ed25519 due to missing S > L check
#7536
opened Apr 28, 2026 by
DRAWING99
Loading…
Improve GHSA-qx2v-qp2m-jg93
invalid
This doesn't seem right
#7535
opened Apr 28, 2026 by
asrarmared-ship-it
Loading…
[GHSA-h7wm-ph43-c39p] Scrapy denial of service vulnerability
#7532
opened Apr 28, 2026 by
G-Rath
Loading…
[GHSA-q34m-jh98-gwm2] Werkzeug possible resource exhaustion when parsing file data in forms
#7527
opened Apr 28, 2026 by
levpachmanov
Loading…
[GHSA-69cc-cv78-qc8g] Apache Tomcat: Configured cipher preference order not preserved
#7524
opened Apr 28, 2026 by
aruneko
Loading…
[GHSA-j39c-c8hj-x4j3] Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
#7523
opened Apr 28, 2026 by
hara-satoshi-ymr
Loading…
[GHSA-95jq-rwvf-vjx4] Apache Tomcat: CLIENT_CERT authentication does not fail as expected
#7522
opened Apr 28, 2026 by
aruneko
Loading…
[GHSA-653p-vg55-5652] Apache Tomcat Uncontrolled Resource Consumption vulnerability
#7521
opened Apr 28, 2026 by
yusuke-koyoshi
Loading…
[GHSA-344f-f5vg-2jfj] Potential remote code execution in Apache Tomcat
#7520
opened Apr 28, 2026 by
aruneko
Loading…
[GHSA-563x-q5rq-57qp] Apache Tomcat has an HTTP Request/Response Smuggling vulnerability
#7519
opened Apr 28, 2026 by
aruneko
Loading…
[GHSA-vf77-8h7g-gghp] Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat
#7518
opened Apr 28, 2026 by
aruneko
Loading…
[GHSA-q3mw-pvr8-9ggc] Apache Tomcat Open Redirect vulnerability
#7517
opened Apr 28, 2026 by
hara-satoshi-ymr
Loading…
[GHSA-qcxh-w3j9-58qr] Apache Tomcat Denial of Service vulnerability
#7516
opened Apr 28, 2026 by
aruneko
Loading…
[GHSA-24j9-x2wg-9qv6] Apache Tomcat: CLIENT_CERT authentication does not fail as expected
#7515
opened Apr 28, 2026 by
aruneko
Loading…
[GHSA-2mjp-6q6p-2qxm] Undici has an HTTP Request/Response Smuggling issue
#7514
opened Apr 28, 2026 by
tijuks
Loading…
[GHSA-x5gf-qvw8-r2rm] pm2 Regular Expression Denial of Service vulnerability
#7513
opened Apr 27, 2026 by
corridormatt
Loading…
Add GHSA-fhw2-h46x-v2mj: Arbitrary local file disclosure in @playwright/mcp
#7511
opened Apr 27, 2026 by
mmzha2013
Loading…
[GHSA-v92g-xgxw-vvmm] Mako: Path traversal via double-slash URI prefix in TemplateLookup
#7508
opened Apr 26, 2026 by
augustocesarperin
Loading…
[GHSA-rvhj-8chj-8v3c] Mflow: Command Injection when serving models with enable_mlserver=True
#7507
opened Apr 26, 2026 by
rotemd-apiiro
Loading…
[GHSA-qj8w-gfj5-8c6v] Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects
#7506
opened Apr 26, 2026 by
sealonohana
Loading…
[GHSA-mw35-8rx3-xf9r] Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization
#7504
opened Apr 25, 2026 by
shakevsky
Loading…
[GHSA-cw7v-45wm-mcf2] Kirby CMS has Persistent DoS via Malformed Image Upload
#7503
opened Apr 24, 2026 by
lukasbestle
Loading…
Previous Next
ProTip!
Find all pull requests that aren't related to any open issues with -linked:issue.