Skip to content

Pull requests: github/advisory-database

New pull request New
600 Open 7,984 Closed
600 Open 7,984 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

[GHSA-wmg3-h8mf-wgvr] Correct affected ecosystem from PyPI to npm
#9700 opened Sep 22, 2026 by devjoinedthechat Loading…
[GHSA-36p3-wjmg-h94x] Remote Code Execution in Spring Framework
#9699 opened Sep 22, 2026 by Norbo91 Loading…
[GHSA-42wg-hm62-jcwg] Apache Tomcat installer for Windows has an untrusted search path vulnerability
#9698 opened Sep 22, 2026 by levpachmanov Loading…
[GHSA-qh8g-58pp-2wxh] Eclipse Jetty URI parsing of invalid authority
#9697 opened Sep 22, 2026 by levpachmanov Loading…
1
[GHSA-p3f5-w63m-mxph] webpack-dev-middleware resolves a request to a local file...
#9696 opened Sep 22, 2026 by malcomio Loading…
[GHSA-mgp5-rv84-w37q] Apache Tomcat has an Improper Input Validation vulnerability
#9695 opened Sep 22, 2026 by levpachmanov Loading…
[GHSA-qqmf-gpg7-g8gw] PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters
#9694 opened Sep 22, 2026 by jjudas-resistant Loading…
[GHSA-g9g6-gvq9-j4vp] A vulnerability was detected in react create-react-app up...
#9693 opened Sep 22, 2026 by malcomio Loading…
[GHSA-9x6g-jfj6-r3jg] When a request to the Airflow core API carries both a ses...
#9692 opened Sep 22, 2026 by oscerd • Draft
[GHSA-9cmm-29p3-73gr] Apache Airflow: the Core API logout endpoint revokes only...
#9691 opened Sep 22, 2026 by oscerd • Draft
[GHSA-pfr9-65p3-w9r9] Apache Airflow's /assets/events API returned asset even...
#9690 opened Sep 22, 2026 by oscerd • Draft
[GHSA-3c8x-fp36-75xv] The CompressionFilter class uses ZLib to deflate and infl...
#9689 opened Sep 22, 2026 by oscerd • Draft
[GHSA-gmw9-258q-r8gm] Apache Airflow's asset queued-events DELETE endpoints che...
#9688 opened Sep 22, 2026 by oscerd • Draft
[GHSA-3c25-9cqf-vxfc] Apache Karaf's XmlUtils cached XML parser/transformer fac...
#9687 opened Sep 22, 2026 by oscerd • Draft
[GHSA-6ghg-hh2v-f99w] Apache NiFi Registry 0.4.0 through 2.11.0 are subject to ...
#9686 opened Sep 22, 2026 by oscerd • Draft
[GHSA-5rjq-rw3w-qr4c] Apache NiFi 2.11.0 supports migrating the contents of a v...
#9685 opened Sep 22, 2026 by oscerd • Draft
[GHSA-8c35-m833-7pmh] Apache NiFi 2.9.0 through 2.11.0 provide Connector config...
#9684 opened Sep 22, 2026 by oscerd • Draft
[GHSA-hfp7-cf28-6f6q] Apache NiFi 1.5.0 through 2.11.0 provide REST API methods...
#9683 opened Sep 22, 2026 by oscerd • Draft
[GHSA-56vg-25rp-h2c5] Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP...
#9682 opened Sep 22, 2026 by oscerd • Draft
[GHSA-5fv6-hxpr-6p55] Server-Side Request Forgery / Local File Inclusion in Apa...
#9681 opened Sep 22, 2026 by oscerd • Draft
[GHSA-8wf7-xwcv-w393] Apache Airflow Apache Kafka provider versions 1.15.0 befo...
#9680 opened Sep 22, 2026 by oscerd • Draft
[GHSA-6fx3-rxq6-j8w2] Apache Airflow FAB provider: the Authentik OAuth path in ...
#9679 opened Sep 22, 2026 by oscerd • Draft
[GHSA-rwpr-5hxh-f9cm] Apache Airflow Keycloak provider: the unauthenticated tok...
#9678 opened Sep 22, 2026 by oscerd • Draft
[GHSA-mxvw-9w3g-hmrq] When audit logging is enabled (zookeeper.audit.enable=tru...
#9677 opened Sep 22, 2026 by oscerd • Draft
[GHSA-mm24-r27q-hxg5] An unauthenticated attacker can inject arbitrary fake log...
#9676 opened Sep 22, 2026 by oscerd • Draft
ProTip! Follow long discussions with comments:>50.