Skip to content

Actions: github/advisory-database

Actions

All workflows

Actions

Loading...
Loading

Showing runs from all workflows
5,125 workflow runs
5,125 workflow runs

Filter by Event

Filter by Status

Filter by Branch

Filter by Actor

[GHSA-3xgq-45jj-v275] Versions of the package cross-spawn before 7.0.5 are... Create PR staging branch #4787: Pull request #5013 opened by rozeskjm
November 15, 2024 15:40 53s
November 15, 2024 15:40 53s
[GHSA-9qv8-7jfq-73j2] Open redirect vulnerability in Jenkins OpenId Connect Authentication Plugin Create PR staging branch #4786: Pull request #5012 opened by westonsteimel
November 15, 2024 15:38 1m 6s
November 15, 2024 15:38 1m 6s
[GHSA-6r5w-jjr5-qvgr] Password stored in a recoverable format by Jenkins OpenId Connect Authentication Plugin Create PR staging branch #4785: Pull request #5011 opened by westonsteimel
November 15, 2024 11:06 1m 4s
November 15, 2024 11:06 1m 4s
[GHSA-8p5q-j9m2-g8wr] Withdrawn: Arbitrary code execution in lodash Create PR staging branch #4784: Pull request #5010 opened by t-vorobyova
November 15, 2024 08:56 58s
November 15, 2024 08:56 58s
[GHSA-3mwc-2cj7-gx8c] lunary-ai/lunary Access Control Vulnerability in Prompt Variation Management Create PR staging branch #4783: Pull request #5009 opened by vincelwt
November 15, 2024 05:00 55s
November 15, 2024 05:00 55s
[GHSA-w5xm-mx47-v7c8] lunary-ai/lunary allows users unauthorized access to projects Create PR staging branch #4782: Pull request #5008 opened by vincelwt
November 15, 2024 04:59 1m 1s
November 15, 2024 04:59 1m 1s
Close stale PRs Close stale PRs #826: Scheduled
November 15, 2024 00:30 13s main
main
November 15, 2024 00:30 13s
[GHSA-m2qf-hxjv-5gpq] Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header Delete PR staging and head branches #4468: Pull request #5006 closed by advisory-database bot
November 14, 2024 23:56 51s
November 14, 2024 23:56 51s
[GHSA-cg23-qf8f-62rr] Symphony has an Authentication Bypass via RememberMe Delete PR staging and head branches #4467: Pull request #5007 closed by advisory-database bot
November 14, 2024 23:55 52s
November 14, 2024 23:55 52s
[GHSA-cg23-qf8f-62rr] Symphony has an Authentication Bypass via RememberMe Create PR staging branch #4781: Pull request #5007 opened by stof
November 14, 2024 13:56 59s
November 14, 2024 13:56 59s
Close stale PRs Close stale PRs #825: Scheduled
November 14, 2024 00:28 21s main
main
November 14, 2024 00:28 21s
[GHSA-m2qf-hxjv-5gpq] Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header Create PR staging branch #4780: Pull request #5006 opened by RFOF-NETWORK
November 13, 2024 21:26 1m 15s
November 13, 2024 21:26 1m 15s
[GHSA-vrmr-f2qh-3hhf] Improper use of cryptographic key in wal-g Delete PR staging and head branches #4466: Pull request #5002 closed by andrewpollock
November 13, 2024 06:18 1m 2s
November 13, 2024 06:18 1m 2s
[GHSA-mwwc-3jv2-62j3] AdGuardHome vulnerable to Cross-Site Request Forgery Delete PR staging and head branches #4465: Pull request #5001 closed by andrewpollock
November 13, 2024 06:17 1m 1s
November 13, 2024 06:17 1m 1s
Close stale PRs Close stale PRs #824: Scheduled
November 13, 2024 00:28 14s main
main
November 13, 2024 00:28 14s
[GHSA-45pg-36p6-83v9] Langchain SQL Injection vulnerability Delete PR staging and head branches #4464: Pull request #5005 closed by advisory-database bot
November 12, 2024 19:58 56s
November 12, 2024 19:58 56s
[GHSA-45pg-36p6-83v9] Langchain SQL Injection vulnerability Create PR staging branch #4779: Pull request #5005 opened by efriis
November 12, 2024 19:21 54s
November 12, 2024 19:21 54s
[GHSA-pppg-cpfq-h7wr] JSONPath Plus Remote Code Execution (RCE) Vulnerability Delete PR staging and head branches #4463: Pull request #5003 closed by advisory-database bot
November 12, 2024 16:21 52s
November 12, 2024 16:21 52s
[GHSA-9224-ggvw-wh7v] VM images built with Image Builder and Proxmox provider use default credentials in github.com/kubernetes-sigs/image-builder Delete PR staging and head branches #4462: Pull request #5000 closed by advisory-database bot
November 12, 2024 16:00 55s
November 12, 2024 16:00 55s
[GHSA-pppg-cpfq-h7wr] JSONPath Plus Remote Code Execution (RCE) Vulnerability Create PR staging branch #4778: Pull request #5003 opened by jdong10
November 12, 2024 15:08 52s
November 12, 2024 15:08 52s
[GHSA-5vx5-9q73-wgp4] Safemode Gem Has Incomplete List of Disallowed Inputs Delete PR staging and head branches #4461: Pull request #4999 closed by shelbyc
November 12, 2024 14:57 1m 3s
November 12, 2024 14:57 1m 3s
[GHSA-j9m2-h2pv-wvph] Regular expression denial of service in jquery-validation Delete PR staging and head branches #4460: Pull request #4998 closed by advisory-database bot
November 12, 2024 14:55 55s
November 12, 2024 14:55 55s
[GHSA-378w-3fqw-3555] Multiple cross-site scripting (XSS) vulnerabilities in... Delete PR staging and head branches #4459: Pull request #4997 closed by shelbyc
November 12, 2024 14:42 52s
November 12, 2024 14:42 52s
Close stale PRs Close stale PRs #823: Scheduled
November 12, 2024 00:27 15s main
main
November 12, 2024 00:27 15s
[GHSA-vrmr-f2qh-3hhf] Improper use of cryptographic key in wal-g Create PR staging branch #4777: Pull request #5002 opened by andrewpollock
November 11, 2024 06:16 1m 4s
November 11, 2024 06:16 1m 4s