Skip to content

Actions: github/advisory-database

Delete PR staging and head branches

Actions

Loading...

Show workflow options

Create status badge

2,397 workflow runs
2,397 workflow runs
Event

Filter by event

Status

Filter by status

Branch
Actor

Filter by actor

[GHSA-45vm-3j38-7p78] PrestaShop cross-site scripting via customer contact form in FO, through file upload
Delete PR staging and head branches #3972: Pull request #4438 closed by advisory-database bot
May 22, 2024 17:27 1m 0s
May 22, 2024 17:27 1m 0s
[GHSA-w3h3-4rj7-4ph4] Request smuggling leading to endpoint restriction bypass in Gunicorn
Delete PR staging and head branches #3971: Pull request #4275 closed by advisory-database bot
May 21, 2024 20:42 58s
May 21, 2024 20:42 58s
[GHSA-jj54-5q2m-q7pj] NATS server TLS missing ciphersuite settings when CLI flags used
Delete PR staging and head branches #3970: Pull request #4455 closed by advisory-database bot
May 21, 2024 20:34 3m 31s
May 21, 2024 20:34 3m 31s
[GHSA-9v8h-57gv-qch6] Django vulnerable to Denial of Service via i18n middleware component
Delete PR staging and head branches #3969: Pull request #4454 closed by advisory-database bot
May 21, 2024 20:33 1m 55s
May 21, 2024 20:33 1m 55s
[GHSA-54qj-48vx-cr9f] Django Cross-site scripting (XSS) vulnerability
Delete PR staging and head branches #3968: Pull request #4453 closed by advisory-database bot
May 21, 2024 20:31 57s
May 21, 2024 20:31 57s
[GHSA-r5cj-wv24-92p5] Django cross-site request forgery (CSRF) vulnerability
Delete PR staging and head branches #3967: Pull request #4452 closed by advisory-database bot
May 21, 2024 20:28 56s
May 21, 2024 20:28 56s
[GHSA-fwr5-q9rx-294f] Moderate severity vulnerability that affects django
Delete PR staging and head branches #3966: Pull request #4450 closed by advisory-database bot
May 21, 2024 20:21 1m 3s
May 21, 2024 20:21 1m 3s
[GHSA-7wph-fc4w-wqp2] Moderate severity vulnerability that affects django
Delete PR staging and head branches #3965: Pull request #4449 closed by advisory-database bot
May 21, 2024 20:20 1m 1s
May 21, 2024 20:20 1m 1s
[GHSA-x64m-686f-fmm3] The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and...
Delete PR staging and head branches #3964: Pull request #4428 closed by advisory-database bot
May 21, 2024 20:17 1m 5s
May 21, 2024 20:17 1m 5s
[GHSA-qrh7-x6fp-c2mp] The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and...
Delete PR staging and head branches #3963: Pull request #4427 closed by advisory-database bot
May 21, 2024 20:12 56s
May 21, 2024 20:12 56s
[GHSA-8c8w-f7wp-2jr2] Sender can cause a receiver to overwrite files during ZIP extraction in Croc
Delete PR staging and head branches #3962: Pull request #4446 closed by advisory-database bot
May 21, 2024 18:21 57s
May 21, 2024 18:21 57s
[GHSA-7mp6-929p-pqhj] Croc requires senders to provide local IP addresses in cleartext
Delete PR staging and head branches #3961: Pull request #4445 closed by advisory-database bot
May 21, 2024 18:20 55s
May 21, 2024 18:20 55s
[GHSA-hp56-xvf4-g6wr] Cros secrets may be disclosed to untrusted relay
Delete PR staging and head branches #3960: Pull request #4444 closed by advisory-database bot
May 21, 2024 18:19 58s
May 21, 2024 18:19 58s
[GHSA-7g3v-4ggr-xvjf] Croc may expose secret to local users
Delete PR staging and head branches #3959: Pull request #4443 closed by advisory-database bot
May 21, 2024 18:18 55s
May 21, 2024 18:18 55s
[GHSA-ppjh-xp5v-46wc] Croc sender may send dangerous new files to receiver
Delete PR staging and head branches #3958: Pull request #4447 closed by advisory-database bot
May 21, 2024 18:16 57s
May 21, 2024 18:16 57s
[GHSA-364c-vvqx-446c] Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device
Delete PR staging and head branches #3957: Pull request #4448 closed by advisory-database bot
May 21, 2024 18:15 1m 0s
May 21, 2024 18:15 1m 0s
[GHSA-6g7w-8wpp-frhj] Infinite loop in rustls::conn::ConnectionCommon::complete_io() with proper client input
Delete PR staging and head branches #3956: Pull request #4288 closed by darakian
May 21, 2024 17:24 1m 21s
May 21, 2024 17:24 1m 21s
[GHSA-p979-4mfw-53vg] HTTP Request Smuggling in Netty
Delete PR staging and head branches #3955: Pull request #4409 closed by advisory-database bot
May 21, 2024 17:13 1m 0s
May 21, 2024 17:13 1m 0s
[GHSA-h755-8qp9-cq85] protobufjs Prototype Pollution vulnerability
Delete PR staging and head branches #3954: Pull request #4351 closed by advisory-database bot
May 20, 2024 22:54 1m 2s
May 20, 2024 22:54 1m 2s
[GHSA-h755-8qp9-cq85] protobufjs Prototype Pollution vulnerability
Delete PR staging and head branches #3953: Pull request #4270 closed by advisory-database bot
May 20, 2024 22:54 54s
May 20, 2024 22:54 54s
[GHSA-4724-7jwc-3fpw] Grafana Spoofing originalUrl of snapshots
Delete PR staging and head branches #3952: Pull request #4434 closed by advisory-database bot
May 20, 2024 20:59 1m 3s
May 20, 2024 20:59 1m 3s
[GHSA-rc6h-qwj9-2c53] Apache DolphinScheduler vulnerable to arbitrary JavaScript execution as root for authenticated users
Delete PR staging and head branches #3951: Pull request #4441 closed by advisory-database bot
May 20, 2024 20:46 1m 11s
May 20, 2024 20:46 1m 11s
[GHSA-9324-jv53-9cc8] dio vulnerable to CRLF injection with HTTP method string
Delete PR staging and head branches #3950: Pull request #4442 closed by hamde33
May 19, 2024 05:46 57s
May 19, 2024 05:46 57s
[GHSA-5j2h-h5hg-3wf8] Moderate severity vulnerability that affects django
Delete PR staging and head branches #3949: Pull request #4432 closed by advisory-database bot
May 16, 2024 18:44 1m 43s
May 16, 2024 18:44 1m 43s
[GHSA-7g9h-c88w-r7h2] High severity vulnerability that affects django
Delete PR staging and head branches #3948: Pull request #4431 closed by advisory-database bot
May 16, 2024 18:42 1m 12s
May 16, 2024 18:42 1m 12s