Skip to content

Pull requests: github/advisory-database

New pull request New
Clear current search query, filters, and sorts
13 Open 6,316 Closed
13 Open 6,316 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

[GHSA-r6q2-hw4h-h46w] Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS
#6733 opened Jan 28, 2026 by ssushant0011 Loading… updated Feb 24, 2026
5
[GHSA-632q-77qj-c89q] Improve advisory details: reference incomplete fix for CVE-2024-28709
#6787 opened Feb 6, 2026 by decsecre583 Loading… updated Feb 24, 2026
4
[GHSA-77r5-gw3j-2mpf] Next.js Vulnerable to HTTP Request Smuggling Stale
#6636 opened Jan 10, 2026 by mistressxalexis Loading… updated Feb 25, 2026
3
[GHSA-8398-gmmx-564h] n8n has a Python sandbox escape
#7029 opened Feb 23, 2026 by c0rydoras Loading… updated Feb 27, 2026
4
[GHSA-qq67-mvv5-fw3g] Astro has Full-Read SSRF in error rendering via Host: header injection Keep
#7055 opened Feb 24, 2026 by kytta Loading… updated Feb 28, 2026
8
[GHSA-7r86-cg39-jmmj] minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments
#7087 opened Feb 28, 2026 by ljharb Loading… updated Mar 2, 2026
3
[GHSA-mw96-cpmx-2vgc] Rollup 4 has Arbitrary File Write via Path Traversal
#7089 opened Mar 1, 2026 by JaclynCodes Loading… updated Mar 1, 2026
1
[GHSA-mq3p-rrmp-79jg] go-ethereum is vulnerable to high CPU usage leading to DoS via malicious p2p message
#7103 opened Mar 4, 2026 by timothyfraser1955-del Loading… updated Mar 4, 2026
5
[GHSA-2h8j-8r9p-849f] @digitalocean/do-markdownit has Type Confusion vulnerability
#7124 opened Mar 6, 2026 by thesmartshadow Loading… updated Mar 6, 2026
[GHSA-r6q2-hw4h-h46w] Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS
#7095 opened Mar 2, 2026 by urielcos Loading… updated Mar 6, 2026
3
Improve GHSA-r8xx-8vm8-x6wj
#7145 opened Mar 10, 2026 by kdehl16-web Loading… updated Mar 10, 2026
[GHSA-hj57-j5cw-2mwp] Ignition config accessible to unprivileged software on VMware
#7147 opened Mar 10, 2026 by jess-lowe Loading… updated Mar 10, 2026
[GHSA-h2f4-v4c4-6wx4] Uncontrolled Resource Consumption in org.eclipse.jetty:jetty-server
#7093 opened Mar 2, 2026 by Meet003118 Loading… updated Mar 11, 2026
2
ProTip! Updated in the last three days: updated:>2026-03-07.