-
Notifications
You must be signed in to change notification settings - Fork 508
Pull requests: github/advisory-database
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
[GHSA-h755-8qp9-cq85] protobufjs Prototype Pollution vulnerability
#6608
opened Jan 4, 2026 by
asrar-mared
Loading…
10 tasks
[GHSA-6rw7-vpxm-498p] qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion
#6606
opened Jan 4, 2026 by
Foysalmeazi
Loading…
[GHSA-mrfv-m5wm-5w6w] libsodium before ad3004e, in atypical use cases involving...
#6605
opened Jan 3, 2026 by
loganaden
Loading…
[GHSA-vj76-c3g6-qr5v] tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball
#6581
opened Dec 27, 2025 by
kristentr
Loading…
[GHSA-5j98-mcp5-4vw2] glob CLI: Command injection via -c/--cmd executes matches with shell:true
#6576
opened Dec 23, 2025 by
sbgitZZ
Loading…
[GHSA-x4c5-c7rf-jjgv] @octokit/endpoint has a Regular Expression in parse that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
#6573
opened Dec 22, 2025 by
G-Rath
Loading…
[GHSA-f6mr-38g8-39rg] Ollama Platform has missing authentication enabling attackers to perform model management operations
#6571
opened Dec 22, 2025 by
Ankush-Pathak
Loading…
ProTip!
Filter pull requests by the default branch with base:main.