All pull requests

Pull requests

• [GHSA-pj3v-9cm8-gvj8] tRPC 11 WebSocket DoS Vulnerability

  #11327·aungzayyanaing opened Nov 14, 2026·

  ·
  2

• [GHSA-qfx6-q44v-9qqw] ag-psd can exhaust memory when parsing crafted PSD dimensions

  #11325·aungzayyanaing opened Nov 13, 2026·

  ·
  2

• [GHSA-9mgx-552f-59p6] TCPDF missing certificate validation

  #11324·aungzayyanaing opened Nov 13, 2026·

  ·
  1

• [GHSA-rp3h-jf77-q9p4] containerd: Unpack DoS via repeated opaque whiteouts

  #11323·aungzayyanaing opened Nov 13, 2026·

  ·
  2

• [GHSA-3hpf-ff72-j67p] shared_preferences_android vulnerability

  #11322·aungzayyanaing opened Nov 13, 2026·

  ·
  2

• [GHSA-8fx7-8jr8-84rv] NLTK: Unbounded CPU consumption in SteppingRecursiveDescentParser.parse() with ambiguous or self-embedding grammars

  #11320·aungzayyanaing opened Nov 13, 2026·

  ·
  2

• [GHSA-p3jp-9v83-76w9] Associate existing NuGet advisory with CVE-2026-111497

  #11319·bribrothers opened Nov 13, 2026·

  ·
  1

• [GHSA-389r-gv7p-r3rp] go-git's improper parsing of specially crafted objects may lead to inconsistent interpretation compared to upstream Git

  #11317·aungzayyanaing opened Nov 13, 2026·

  ·
  2

• Add 1.1.3 release reference to GHSA-2xpx-vcmq-5f72

  #11316·aungzayyanaing opened Nov 13, 2026·

  ·

• Add 0.58.0 release reference to GHSA-3434-hc3m-8mmm

  #11315·aungzayyanaing opened Nov 13, 2026·

  ·

• Add 1.12.7 release reference to GHSA-2x36-qhx3-7m5f

  #11314·aungzayyanaing opened Nov 13, 2026·

  ·

• Add 2.4.9 release reference to GHSA-2fhr-8r8r-qp56

  #11313·aungzayyanaing opened Nov 13, 2026·

  ·

• Add v11.2.4 release reference to GHSA-277c-5vvj-9pwx

  #11312·aungzayyanaing opened Nov 13, 2026·

  ·

• Add 0.2.5 release reference to GHSA-258h-f687-4226

  #11311·aungzayyanaing opened Nov 13, 2026·

  ·

• Add v1.8.3 release reference to GHSA-25qx-vfw2-fw8r

  #11310·aungzayyanaing opened Nov 13, 2026·

  ·

• Add v1.0.0 release reference to GHSA-2326-pfpj-vx3h

  #11309·aungzayyanaing opened Nov 13, 2026·

  ·

• Add gradio 5.0.0 release reference to GHSA-279j-x4gx-hfrh

  #11308·aungzayyanaing opened Nov 13, 2026·

  ·

• Add 3.1.3.1 release reference to GHSA-2697-96mv-3gfm

  #11307·aungzayyanaing opened Nov 13, 2026·

  ·

• Add v3.10.11 release reference to GHSA-27mf-ghqm-j3j8

  #11306·aungzayyanaing opened Nov 13, 2026·

  ·

• [GHSA-2452-6xj8-jh47] Opening a malicious website while running a Nuxt dev server could allow read-only access to code

  #11305·aungzayyanaing opened Nov 13, 2026·

  ·
  2

• [GHSA-2237-5r9w-vm8j] Connect-CMS information that is restricted to viewing is visible

  #11304·aungzayyanaing opened Nov 13, 2026·

  ·
  1

• [GHSA-227r-w5j2-6243] InvokeAI Arbitrary File Deletion vulnerability

  #11303·aungzayyanaing opened Nov 13, 2026·

  ·
  1

• Add Whoogle v0.9.1 release reference to GHSA-2689-cw26-6cpj

  #11302·aungzayyanaing opened Nov 13, 2026·

  ·

• [GHSA-2hj5-g64g-fp6p] Argo CD allows cross-site scripting on repositories page

  #11301·aungzayyanaing opened Nov 13, 2026·

  ·
  2

• [GHSA-2v3v-3whp-953h] starcitizentools/citizen-skin allows stored XSS in user registration date message

  #11300·aungzayyanaing opened Nov 13, 2026·

  ·
  2