GHSA-QX2V-8332-M4FV vulnerabilities

Vulnerabilities for packages: zola, pixi, efs-utils, linkerd2-proxy, buck2, linkerd-extension-init, mdbook, uv, linkerd2, jujutsu, shadowsocks-rust...

CVE-2025-54796

creationtimestamp| type| source ---|---|--- 2025-08-01 21:32:31+00:00| published-proof-of-concept| https://github.com/9001/copyparty/security/advisories/GHSA-5662-2rj7-f2v6...

CVE-2025-41419

creationtimestamp| type| source ---|---|--- 2025-07-31 06:16:31+00:00| published-proof-of-concept| https://github.com/modelscope/ms-swift/security/advisories/GHSA-7c78-rm87-5673...

CVE-2025-54586

creationtimestamp| type| source ---|---|--- 2025-07-30 15:27:15+00:00| published-proof-of-concept| https://github.com/finos/git-proxy/security/advisories/GHSA-v98g-8rqx-g93g...

CVE-2025-54413

creationtimestamp| type| source ---|---|--- 2025-07-25 16:59:07+00:00| published-proof-of-concept| https://github.com/skops-dev/skops/security/advisories/GHSA-4v6w-xpmh-gfgp...

CVE-2025-54134

creationtimestamp| type| source ---|---|--- 2025-07-21 18:02:23+00:00| published-proof-of-concept| https://github.com/haxtheweb/issues/security/advisories/GHSA-pjj3-j5j6-qj27...

CVE-2025-53832

creationtimestamp| type| source ---|---|--- 2025-07-20 23:48:39+00:00| published-proof-of-concept| https://github.com/translated/lara-mcp/security/advisories/GHSA-xj5p-8h7g-76m7...

CVE-2025-53818

creationtimestamp| type| source ---|---|--- 2025-07-12 10:41:59+00:00| published-proof-of-concept| https://github.com/Sunwood-ai-labs/github-kanban-mcp-server/security/advisories/GHSA-6jx8-rcjx-vmwf...

CVE-2025-53372

creationtimestamp| type| source ---|---|--- 2025-07-08 06:35:04+00:00| published-proof-of-concept| https://github.com/alfonsograziano/node-code-sandbox-mcp/security/advisories/GHSA-5w57-2ccq-8w95...

GitHub Advisory Database by the numbers: Known security vulnerabilities and what you can do about them

The GitHub Advisory Database Advisory DB is a vital resource for developers, providing a comprehensive list of known security vulnerabilities and malware affecting open source packages. This post analyzes trends in the Advisory DB, highlighting the growth in reviewed advisories, ecosystem coverag...

GHSA-63XR-98VC-WHX5

creationtimestamp| type| source ---|---|--- 2025-06-25 15:52:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19468...

GHSA-9VJ4-RV7Q-36QJ

creationtimestamp| type| source ---|---|--- 2025-06-24 03:34:31+00:00| seen| Telegram/61p3TvgIcQeITUHd25WC7uXKnalG822tf2zquntb02gfO4o 2025-06-24 03:48:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19301...

GHSA-R976-RFRV-Q24M

creationtimestamp| type| source ---|---|--- 2025-06-21 03:25:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19098...

GHSA-QR9F-MPGF-WP25

creationtimestamp| type| source ---|---|--- 2025-06-19 14:40:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18863...

GHSA-JP4X-W9CJ-97Q7

creationtimestamp| type| source ---|---|--- 2025-06-13 19:03:31+00:00| seen| Telegram/4Ga2KnPxVC8teo9C6hWW8v7cz1iZaC5NGvXAx1RBKflQoQ...

CVE-2024-38524

creationtimestamp| type| source ---|---|--- 2025-06-10 14:14:08+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-jm79-7xhw-6f6f...

CVE-2025-49007

Rack is a modular Ruby web server interface. Starting in version 3.1.0 and prior to version 3.1.16, there is a denial of service vulnerability in the Content-Disposition parsing component of Rack. This is very similar to the previous security issue CVE-2022-44571. Carefully crafted input can caus...

GHSA-6C48-67XX-VQGC

creationtimestamp| type| source ---|---|--- 2025-05-22 21:38:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17361...

CVE-2021-37700

@github/paste-markdown is an npm package for pasting markdown objects. A self Cross-Site Scripting vulnerability exists in the @github/paste-markdown before version 0.3.4. If the clipboard data contains the string , a div is dynamically created, and the clipboard content is copied into its...

CVE-2021-21399

Ampache is a web based audio/video streaming application and file manager. Versions prior to 4.4.1 allow unauthenticated access to Ampache using the subsonic API. To successfully make the attack you must use a username that is not part of the site to bypass the auth checks. For more details and...