1243 matches found
GHSA-7JXJ-RPX7-PH2C
creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:33+00:00| seen| https://gist.github.com/alon710/be5bed867a7a74a3502ab74ecb972384 2026-01-24 22:17:04+00:00| seen| https://gist.github.com/alon710/59dbc024d388f24e75ae769d8151f5ce 2026-01-24 22:17:07+00:00| seen|...
GHSA-MXC8-4JQF-368Q
creationtimestamp| type| source ---|---|--- 2026-01-24 21:22:17+00:00| seen| https://gist.github.com/alon710/538f3bbaec01e73a79181c8d943a0a8b...
GHSA-GJ5H-7FQ5-56P5 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-vmware...
GHSA-84X2-RFRF-6F2C vulnerabilities
Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-vmware...
GHSA-59F6-F4PC-WW92 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-vmware...
GHSA-FCV2-XGW5-PQXF vulnerabilities
Vulnerabilities for packages: gh, xeol-fips, docker-compose-fips, skaffold-fips, ko, trivy, gitsign, kyverno-policy-reporter-plugins-kyverno, tkn-fips, kyverno-notation-aws-fips, neuvector-sigstore-interface, timestamp-authority-fips, zot, kubescape, falcoctl, prometheus-podman-exporter, rekor,...
AI-supported vulnerability triage with the GitHub Security Lab Taskflow Agent
Triaging security alerts is often very repetitive because false positives are caused by patterns that are obvious to a human auditor but difficult to encode as a formal code pattern. But large language models LLMs excel at matching the fuzzy patterns that traditional tools struggle with, so we at...
GHSA-JM66-CG57-JJV5 vulnerabilities
Vulnerabilities for packages: authentik-fips, datadog-agent, py3-cassandra-medusa, authentik, datadog-agent-fips, duplicity, open-webui, kserve, awx, barman, pgadmin4, request-1276, airflow, az...
GHSA-VH2P-4GFM-V9V7 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-azure, linux-qemu, linux-gcp, linux-vmware...
@cenk1cenk2/renovate-config (>=2.0.0 <=2.3.148), @jamietanna/patch-testing (>=0.1.0 <=0.2.28) +8 more potentially affected by unknown CVE via renovate (>=32.241.11 <=42.66.1)
renovate NPM version =32.241.11, =2.0.0, =0.1.0, =0.1.0, =0.5.0, =0.1.0, =0.1.0, =0.0.1, =0.19.0 - @zotero-chinese/renovate-config =1.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-PFQ2-HH62-7M96...
GHSA-MQW7-C5GG-XQ97
creationtimestamp| type| source ---|---|--- 2026-01-13 14:36:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115888290409404878...
GHSA-527X-5WRF-22M2 vulnerabilities
Vulnerabilities for packages: cloudflared...
GHSA-74P9-4V44-WWX5 vulnerabilities
Vulnerabilities for packages: python...
GHSA-9WX5-5C3V-3QMX vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-qemu, linux-qemu-melange...
GHSA-G7MW-CR59-R458 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-qemu, linux-qemu-melange...
CVE-2022-31524
The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2022-31529
The cinemaproject/monorepo repository through 2021-03-03 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...
CVE-2021-41188
Shopware is open source e-commerce software. Versions prior to 5.7.6 contain a cross-site scripting vulnerability. This issue is patched in version 5.7.6. Two workarounds are available. Using the security plugin or adding a particular following config to the .htaccess file will protect against...
CVE-2023-25560
DataHub is an open-source metadata platform. The AuthServiceClient which is responsible for creation of new accounts, verifying credentials, resetting them or requesting access tokens, crafts multiple JSON strings using format strings with user-controlled data. This means that an attacker may be...