Skip to content

Actions: github/advisory-database

Actions

Create PR staging branch

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
create_staging_branch.yaml
1,641 workflow runs
1,641 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

[GHSA-7c3f-cg9x-f3gr] JasperReports has a Java deserialisation vulnerability Create PR staging branch #6676: Pull request #7139 opened by rfc-st
1m 10s
1m 10s
[GHSA-fg6f-75jq-6523] Authlib has 1-click Account Takeover vulnerability Create PR staging branch #6675: Pull request #7138 opened by galgolamiel
1m 12s
1m 12s
[GHSA-2r69-43cg-w872] Missing authentication and authorization in the web API... Create PR staging branch #6674: Pull request #7135 opened by aksalsalimi
51s
51s
[GHSA-7xfw-wjqp-g457] A broken access control vulnerability in the password... Create PR staging branch #6673: Pull request #7134 opened by aksalsalimi
1m 3s
1m 3s
[GHSA-qgr7-38xj-4jpq] An authorization bypass vulnerability in Tata Consultancy... Create PR staging branch #6672: Pull request #7133 opened by aksalsalimi
1m 3s
1m 3s
[GHSA-7xrh-hqfc-g7qr] Hostname verification in Apache ZooKeeper ZKTrustManager... Create PR staging branch #6671: Pull request #7130 opened by kascit
1m 4s
1m 4s
[GHSA-g6mj-j7h3-8gxq] Improper Control of Filename for Include/Require... Create PR staging branch #6670: Pull request #7129 opened by sjinks
1m 7s
1m 7s
[GHSA-qh8g-58pp-2wxh] Eclipse Jetty URI parsing of invalid authority Create PR staging branch #6669: Pull request #7128 opened by jkuhel
1m 9s
1m 9s
[GHSA-wr62-c79q-cv37] Apache Tomcat Catalina is vulnerable to DoS attack through bypassing of size limits Create PR staging branch #6668: Pull request #7127 opened by westonsteimel
1m 7s
1m 7s
[GHSA-wf6x-7x77-mvgw] Immutable is vulnerable to Prototype Pollution Create PR staging branch #6667: Pull request #7126 opened by FeBe95
1m 11s
1m 11s
[GHSA-25xr-qj8w-c4vf] Apache Tomcat Coyote vulnerable to Denial of Service via excessive HTTP/2 streams Create PR staging branch #6666: Pull request #7125 opened by westonsteimel
1m 10s
1m 10s
[GHSA-2h8j-8r9p-849f] @digitalocean/do-markdownit has Type Confusion vulnerability Create PR staging branch #6665: Pull request #7124 opened by thesmartshadow
56s
56s
Add advisory: python-jose algorithm confusion via DER keys (CVE-2024-33663 bypass) Create PR staging branch #6664: Pull request #7123 opened by yugui923
1m 8s
1m 8s
Add advisory: python-jose JWE CBC-HMAC padding oracle (all versions through 3.5.0) Create PR staging branch #6663: Pull request #7122 opened by yugui923
1m 12s
1m 12s
[GHSA-57q8-p4r4-7xr7] ESC/POS, a printer control language designed by Seiko... Create PR staging branch #6662: Pull request #7121 opened by futileskills
1m 12s
1m 12s
[GHSA-pm7g-w2cf-q238] pac4j-jwt versions prior to 4.5.9, 5.7.9, and 6.3.3... Create PR staging branch #6661: Pull request #7120 opened by fritzdal
1m 15s
1m 15s
[GHSA-v2wj-7wpq-c8vv] DOMPurify contains a Cross-site Scripting vulnerability Create PR staging branch #6660: Pull request #7117 opened by cure53
1m 35s
1m 35s
[GHSA-q5rg-wg7h-73m5] LibreNMS Information Disclosure Create PR staging branch #6659: Pull request #7116 opened by EMSeek
1m 15s
1m 15s
[GHSA-v2wj-7wpq-c8vv] DOMPurify contains a Cross-site Scripting vulnerability Create PR staging branch #6658: Pull request #7115 opened by swils23
1m 1s
1m 1s
[GHSA-78qv-3mpx-9cqq] NiceGUI vulnerable to XSS via Code Injection during client-side element function execution Create PR staging branch #6657: Pull request #7113 opened by evnchn
1m 13s
1m 13s
[GHSA-hx52-cv84-jr5v] Create PR staging branch #6656: Pull request #7112 opened by skoveit
1m 16s
1m 16s
[GHSA-2g4f-4pwh-qvx6] ajv has ReDoS when using $data option Create PR staging branch #6655: Pull request #7108 opened by meroamir99881-hue
1m 11s
1m 11s
[GHSA-33hj-rcmx-86mv] Undertow Servlets Vulnerable to Remote DoS via OutOfMemoryError when Passed Large Parameter Names Create PR staging branch #6654: Pull request #7107 opened by aogburn
1m 13s
1m 13s
[GHSA-6h4f-pj3g-q8fq] Undertow OutOfMemory when parsing form data encoding with application/x-www-form-urlencoded Create PR staging branch #6653: Pull request #7106 opened by aogburn
1m 7s
1m 7s
[GHSA-j382-5jj3-vw4j] Undertow HTTP server core doesn't properly validate the Host header in incoming HTTP requests Create PR staging branch #6652: Pull request #7105 opened by aogburn
1m 9s
1m 9s