All pull requests

Pull requests

• [GHSA-rfx3-98h7-v3xp] Marten's LINQ provider has SQL injection via unescaped string literals

  #10866·mysticmind opened Nov 3, 2026·

  ·
  3

• Update GHSA-q97c-8qh3-fpc6.json

  #10865·nicolasderouet opened Nov 3, 2026·

  ·

• [GHSA-7hhj-8fwv-m5hc] A flaw was found in gnutls. A remote attacker could...

  #10864·benjaminandrew386-boop opened Nov 3, 2026·

  ·

• [GHSA-8fxw-fmj8-xp7j] MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs

  #10863·kamilk3d opened Nov 3, 2026·

  ·
  1

• [GHSA-g3hv-75wg-m249] minimatch has potential denial of service via globparts amplification

  #10862·worldwideskier-alpine opened Nov 3, 2026·

  ·
  1

• [GHSA-wh92-6q6g-px7j] Remove magento/community-edition 2.4.9, which contains the fix

  #10861·plohmy opened Nov 3, 2026·

  ·
  1

• [GHSA-g3hv-75wg-m249] minimatch has potential denial of service via globparts amplification

  #10860·khucanhduy9-cloud opened Nov 3, 2026·

  ·
  1

• [GHSA-gcqx-w48m-w2h4] deepmerge mergeObject() allows prototype poisoning of returned objects

  #10859·gwynne opened Nov 3, 2026·

  ·

• Improve GHSA-wpw8-53h7-xqcq

  #10857·ultragangster7 opened Nov 2, 2026·

  ·

• [GHSA-wpw8-53h7-xqcq] In the Linux kernel, the following vulnerability has been...

  #10856·ultragangster7 opened Nov 2, 2026·

  ·

• [GHSA-f9x3-7vq9-cph6] Add patched Laravel 10.x and 11.x versions

  #10855·rmcdaniel opened Nov 2, 2026·

  ·

• [GHSA-99jh-6h7p-pp36] Add fixed version 4.16.3 for github.com/labstack/echo/v4

  #10854·myhubstat opened Nov 2, 2026·

  ·

• [GHSA-246p-cpwv-v3jq] Add fixed version 4.16.3 for github.com/labstack/echo/v4

  #10853·myhubstat opened Nov 2, 2026·

  ·

• [GHSA-rfx3-98h7-v3xp] Marten's LINQ provider has SQL injection via unescaped string literals

  #10852·jeremydmiller opened Nov 2, 2026·

  ·
  1

• [GHSA-rcfx-77hg-w2wv] Add CWE-1395 to FastMCP advisory

  #10851·eeee2345 opened Nov 2, 2026·

  ·

• [GHSA-m665-v7pm-7grj] zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE

  #10850·lovasoa opened Nov 2, 2026·

  ·
  2

• [GHSA-g3hv-75wg-m249] minimatch has potential denial of service via globparts amplification

  #10849·1abcdefggs opened Nov 2, 2026·

  ·
  1

• [GHSA-9rjg-x2p2-h68h] API Platform Core: Relation IRIs are not type-checked: a related resource can be denormalised as the wrong resource type (type confusion)

  #10848·fabianbloching opened Nov 2, 2026·

  ·
  1

• [GHSA-jj36-9pvh-vj5r] Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation

  #10847·ranjiGT opened Nov 2, 2026·

  ·
  2

• [GHSA-2qrf-pqgx-qh9v] Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH

  #10846·ranjiGT opened Nov 2, 2026·

  ·
  5

• [GHSA-vpp8-g58w-m8mp] Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset

  #10845·ranjiGT opened Nov 2, 2026·

  ·
  3

• [GHSA-53xc-49m8-p798] Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer

  #10844·ranjiGT opened Nov 2, 2026·

  ·
  3

• [GHSA-cwm5-jh59-mwxr] Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer

  #10843·ranjiGT opened Nov 2, 2026·

  ·
  3

• [GHSA-q7qq-6mhp-9rc4] Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value

  #10842·ranjiGT opened Nov 2, 2026·

  ·
  3

• [GHSA-9m4w-fmjw-fvjq] Ghost: Regular Expression Denial of Service in External Media Inliner

  #10840·ranjiGT opened Nov 2, 2026·

  ·
  2