Madison Oliver

icon indicating an email [email protected]

icon company GitHub icon location Pittsburgh, PA icon location manager of advisory database within the Security Lab at GitHub

Results 92 comments of Madison Oliver

[GHSA-fj2j-8cg9-vrj8] The rebar3 tool 3.0.0-beta.3 through 3.13.2 for Erlang...

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold...

[GHSA-rpr3-cw39-3pxh] jackson-databind before 2.9.10.4 vulnerable to unsafe deserialization

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold...

[GHSA-5crp-9r3c-p9vr] Improper Handling of Exceptional Conditions in Newtonsoft.Json

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold...

[GHSA-mhxj-85r3-2x55] file-type vulnerable to Infinite Loop via malformed MKV file

hi @ItalyPaleAle, thank you for the contribution! can you point me to any references to support your suggestions about the version ranges and severity scoring?

GHSA-93q8-gq69-wqmw needs updating

hi @G-Rath 👋 I wanted to follow up on this issue and see if this still needs to be addressed in the advisory. another [community contribution](https://github.com/github/advisory-database/pull/149) came in after your...

GHSA-93q8-gq69-wqmw needs updating

thanks for the feedback @G-Rath! 😄

.NET / ASP .NET CVEs package vulnerabilities backfill

thank you @skofman1 for sharing this with us! we've made an internal issue to track this and have added this to our backfill queue. this information is **extremely helpful**! I'll...

[GHSA-jxhc-q857-3j6g] Regular Expression Denial of Service in Addressable templates

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold...

[GHSA-f7gc-6hcj-wc42] Malicious Package in path-to-regxep

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold...

[GHSA-r4r9-mgjc-g6q3] Path Traversal in 626

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold...