Skip to content

Actions: github/advisory-database

Actions

Create PR staging branch

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
create_staging_branch.yaml
1,743 workflow runs
1,743 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
fix: correct GHSA-887w-45rq-vxgf sqlalchemy fixed version 1.2.18 -> 1.3.0b1 Create PR staging branch #6972: Pull request #7486 opened by DEVSOG12
1m 15s
1m 15s
[GHSA-qpm2-6cq5-7pq5] happy-dom's --disallow-code-generation-from-strings is not sufficient for isolating untrusted JavaScript Create PR staging branch #6971: Pull request #7485 opened by Wenxin-Jiang
1m 8s
1m 8s
fix: correct GHSA-pfr9-2p92-qrhq dbn fixed version 0.22.0 -> 0.22.1 Create PR staging branch #6970: Pull request #7483 opened by DEVSOG12
1m 6s
1m 6s
fix: correct GHSA-4j5j-58j7-6c3w dulwich fixed version 0.9.9 -> 0.10.0 Create PR staging branch #6969: Pull request #7482 opened by DEVSOG12
53s
53s
[GHSA-cq8v-f236-94qc] Rand is unsound with a custom logger using rand::rng() Create PR staging branch #6968: Pull request #7481 opened by nbagnard
1m 4s
1m 4s
fix: correct ECOSYSTEM fixed versions in GHSA-4j5j-58j7-6c3w (dulwich) and GHSA-pfr9-2p92-qrhq (dbn) Create PR staging branch #6967: Pull request #7480 opened by DEVSOG12
1m 14s
1m 14s
[GHSA-hcp2-x6j4-29j7] RustCrypto: Signatures has timing side-channel in ML-DSA decomposition Create PR staging branch #6966: Pull request #7479 opened by tarcieri
1m 7s
1m 7s
[GHSA-wjxp-xrpv-xpff] Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL Create PR staging branch #6965: Pull request #7478 reopened by stenzopolis1986-art
2m 6s
2m 6s
[GHSA-wjxp-xrpv-xpff] Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL Create PR staging branch #6964: Pull request #7478 opened by stenzopolis1986-art
1m 7s
1m 7s
[GHSA-9hxg-w7qf-hh93] Use Go pseudo-version for fixed version Create PR staging branch #6963: Pull request #7477 opened by cookesan
55s
55s
[GHSA-r4q5-vmmm-2653] follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets Create PR staging branch #6962: Pull request #7476 opened by ljharb
1m 11s
1m 11s
[GHSA-cxjh-pqwp-8mfp] follow-redirects' Proxy-Authorization header kept across hosts Create PR staging branch #6961: Pull request #7475 opened by ljharb
1m 8s
1m 8s
[GHSA-jchw-25xp-jwwc] Follow Redirects improperly handles URLs in the url.parse() function Create PR staging branch #6960: Pull request #7474 opened by ljharb
1m 48s
1m 48s
[GHSA-pw2r-vq6v-hr8c] Exposure of Sensitive Information to an Unauthorized Actor in follow-redirects Create PR staging branch #6959: Pull request #7473 opened by ljharb
1m 17s
1m 17s
[GHSA-74fj-2j2h-c42q] Exposure of sensitive information in follow-redirects Create PR staging branch #6958: Pull request #7472 opened by ljharb
1m 9s
1m 9s
[GHSA-6qvv-pj99-48qm] @adonisjs/http-server has an Open Redirect vulnerability Create PR staging branch #6957: Pull request #7471 opened by TheAdamGalloway
1m 9s
1m 9s
[GHSA-p93r-85wp-75v3] Covert timing channel vulnerability in Legion of the... Create PR staging branch #6956: Pull request #7470 opened by marcelstoer
1m 7s
1m 7s
Exploited Create PR staging branch #6955: Pull request #7469 opened by SunShineHead
1m 7s
1m 7s
[GHSA-4hmj-39m8-jwc7] OpenClaw has ACP CLI approval prompt ANSI escape sequence injection Create PR staging branch #6954: Pull request #7468 opened by anlakii
1m 6s
1m 6s
[GHSA-xq7p-g2vc-g82p] Homograph attack allows Unicode lookalike characters to bypass validation. Create PR staging branch #6952: Pull request #7466 opened by Wenxin-Jiang
1m 15s
1m 15s
[GHSA-px4h-xg32-q955] ReDoS in normalize-url Create PR staging branch #6951: Pull request #7465 opened by Wenxin-Jiang
1m 7s
1m 7s
[GHSA-mwv9-gp5h-frr4] Sveltejs devalue's devalue.parse and devalue.unflatten emit objects with __proto__ own properties Create PR staging branch #6950: Pull request #7464 opened by Wenxin-Jiang
1m 13s
1m 13s
[GHSA-hx9m-jf43-8ffr] seroval affected by Denial of Service via RegExp serialization Create PR staging branch #6949: Pull request #7463 opened by Wenxin-Jiang
1m 7s
1m 7s
[GHSA-gpvj-q7fp-jcch] simplehttpserver allows directory traversal and file listing Create PR staging branch #6948: Pull request #7462 opened by Wenxin-Jiang
1m 10s
1m 10s
[GHSA-ff7x-qrg7-qggm] dot-prop Prototype Pollution vulnerability Create PR staging branch #6947: Pull request #7461 opened by Wenxin-Jiang
1m 15s
1m 15s