| 1. | | Brotli vulnerability affects curl and Git (github.com/advisories) |
| 3 points by bmitch3020 1 hour ago | past | 1 comment |
|
| 2. | | Vitest Dev Server Secret Leak (CVE-2026-112948) (github.com/advisories) |
| 2 points by mumairrana007 1 day ago | past | discuss |
|
| 3. | | Certifi bundles emSign root CAs with compromised intermediate CA keys (github.com/advisories) |
| 3 points by codingjoe 2 days ago | past | 1 comment |
|
| 4. | | CVE-2026-63277 โ LibreOffice Remote Code Execution (github.com/advisories) |
| 1 point by mritzmann 16 days ago | past |
|
| 5. | | CVE-2026-55200: libssh2 memory corruption with possible RCE (github.com/advisories) |
| 4 points by wildylion 3 months ago | past | 1 comment |
|
| 6. | | Claude Code CVE-2026-39861:sandbox escape via symlink (github.com/advisories) |
| 51 points by Armor1AI 5 months ago | past | 9 comments |
|
| 7. | | Axios request smuggling via prototype pollution โ Critical (CVSS 9.9) (github.com/advisories) |
| 3 points by akhs 6 months ago | past | 1 comment |
|
| 8. | | Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket (github.com/advisories) |
| 2 points by lukax 6 months ago | past | 1 comment |
|
| 9. | | React Router has XSS Vulnerability ยท CVE-2025-59057 (github.com/advisories) |
| 2 points by maxloh 9 months ago | past |
|
| 10. | | Malware in Ngx-Bootstrap (github.com/advisories) |
| 3 points by lambdaone on Sept 15, 2025 | past | 1 comment |
|
| 11. | | Malware in Debug (npm) (github.com/advisories) |
| 3 points by duggan on Sept 8, 2025 | past | 1 comment |
|
| 12. | | Malware in Stylus (github.com/advisories) |
| 2 points by veidr on July 23, 2025 | past | 3 comments |
|
| 13. | | browserify/pbkdf2 returns predictable uninitialized/zero-filled memory (github.com/advisories) |
| 3 points by wslh on June 24, 2025 | past | 1 comment |
|
| 14. | | Cloudflare/workers-OAuth-provider missing validation of redirect_URI (github.com/advisories) |
| 5 points by notachatbot123 on June 3, 2025 | past | 1 comment |
|
| 15. | | Authorization Bypass in Next.js Middleware (github.com/advisories) |
| 25 points by nilsbunger on March 22, 2025 | past | 2 comments |
|
| 16. | | Axios Requests Vulnerable to Possible SSRF (github.com/advisories) |
| 1 point by andrewfromx on March 11, 2025 | past |
|
| 17. | | GitHub Actions Script Injection in ultralytics/actions (github.com/advisories) |
| 1 point by bo0tzz on Dec 7, 2024 | past |
|
| 18. | | ws Node WebSocket affected by DoS when handling a request with many HTTP headers (github.com/advisories) |
| 1 point by wslh on June 24, 2024 | past |
|
| 19. | | High Severity:Request smuggling leads to endpoint restriction bypass in Gunicorn (github.com/advisories) |
| 2 points by bearsyankees on April 17, 2024 | past |
|
| 20. | | GitHub Advisories Database (github.com/advisories) |
| 1 point by max_ on Sept 15, 2023 | past |
|
| 21. | | Malware in fsevents (github.com/advisories) |
| 16 points by peanut-walrus on April 28, 2023 | past | 1 comment |
|
| 22. | | Okta Auth0 JWT vulnerability CVE-2022-23529 (github.com/advisories) |
| 7 points by KingOfCoders on Jan 11, 2023 | past | 2 comments |
|
| 23. | | Improper handling of email input โ GitHub advisory for next-auth (github.com/advisories) |
| 1 point by moritzwarhier on July 6, 2022 | past |
|
| 24. | | [dupe] Embedded Malicious Code in node-ipc (github.com/advisories) |
| 139 points by planb on March 20, 2022 | past | 124 comments |
|
| 25. | | GitHub Advisory Database (github.com/advisories) |
| 1 point by based2 on Jan 13, 2022 | past |
|
| 26. | | Infinite loop causing Denial of Service in colors (github.com/advisories) |
| 2 points by 0xedb on Jan 10, 2022 | past |
|
| 27. | | Embedded malware in RC (NPM package) (github.com/advisories) |
| 140 points by hjek on Nov 5, 2021 | past | 114 comments |
|
| 28. | | Embedded Malware in Coa (github.com/advisories) |
| 137 points by StevePlea on Nov 5, 2021 | past | 83 comments |
|
| 29. | | [dupe] Embedded malware in ua-parser-JS (NPM package) (github.com/advisories) |
| 3 points by carbonboarder on Oct 25, 2021 | past | 1 comment |
|
| 30. | | Embedded crypto miner in ua-parser-JS (github.com/advisories) |
| 3 points by Fervicus on Oct 22, 2021 | past | 1 comment |
|
|
| More |