GitHub

icon indicating a website link https://github.com/about

icon location San Francisco, CA icon location How people build software.

Results 19 comments of GitHub

[GHSA-cjcc-p67m-7qxm] Unsafe Reflection in base Component class in yiisoft/yii2

Hi there @samdark! A community member has suggested an improvement to your security advisory. If approved, this change will affect the [global advisory](https://github.com/advisories/GHSA-cjcc-p67m-7qxm) listed at github.com/advisories. It will not affect...

[GHSA-83pv-qr33-2vcf] Litestar and Starlite vulnerable to Path Traversal

Hi there @brian-edgar-re and @peterschutt! A community member has suggested an improvement to your security advisory. If approved, this change will affect the [global advisory](https://github.com/advisories/GHSA-83pv-qr33-2vcf) listed at github.com/advisories. It will...

[GHSA-vp35-85q5-9f25] Container build can leak any path on the host into the container

Hi there @thaJeztah! A community member has suggested an improvement to your security advisory. If approved, this change will affect the [global advisory](https://github.com/advisories/GHSA-vp35-85q5-9f25) listed at github.com/advisories. It will not affect...

[GHSA-rc4r-wh2q-q6c4] Moby supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions

Hi there @thaJeztah! A community member has suggested an improvement to your security advisory. If approved, this change will affect the [global advisory](https://github.com/advisories/GHSA-rc4r-wh2q-q6c4) listed at github.com/advisories. It will not affect...

[GHSA-rc4r-wh2q-q6c4] Moby supplementary group permissions not set up properly, allowing attackers to bypass primary group restrictions

Hi there @thaJeztah! A community member has suggested an improvement to your security advisory. If approved, this change will affect the [global advisory](https://github.com/advisories/GHSA-rc4r-wh2q-q6c4) listed at github.com/advisories. It will not affect...

[GHSA-cj83-2ww7-mvq7] Rack ReDoS Vulnerability in HTTP Accept Headers Parsing

Hi there @ioquatix! A community member has suggested an improvement to your security advisory. If approved, this change will affect the [global advisory](https://github.com/advisories/GHSA-cj83-2ww7-mvq7) listed at github.com/advisories. It will not affect...

[GHSA-wr3j-pwj9-hqq6] Path traversal in webpack-dev-middleware

Hi there @palirichtarik and @alexander-akait! A community member has suggested an improvement to your security advisory. If approved, this change will affect the [global advisory](https://github.com/advisories/GHSA-wr3j-pwj9-hqq6) listed at github.com/advisories. It will...

[GHSA-925w-6v3x-g4j4] Source Code Exposure Vulnerability in React Server Components

Hi there @zpao! A community member has suggested an improvement to your security advisory. If approved, this change will affect the [global advisory](https://github.com/advisories/GHSA-925w-6v3x-g4j4) listed at github.com/advisories. It will not affect...

[GHSA-9cwx-2883-4wfx] Vite's `server.fs.deny` is bypassed when using `?import&raw`

Hi there @patak-dev! A community member has suggested an improvement to your security advisory. If approved, this change will affect the [global advisory](https://github.com/advisories/GHSA-9cwx-2883-4wfx) listed at github.com/advisories. It will not affect...