Skip to content

Actions: github/advisory-database

Actions

All workflows

Actions

Loading...
Loading

Showing runs from all workflows
2,500+ workflow runs
2,500+ workflow runs

Filter by Workflow

⌥ + click/return to exclude

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
Push on main CodeQL #14413: by advisory-database Bot
2m 6s main
main
2m 6s
[GHSA-qpm2-6cq5-7pq5] happy-dom's --disallow-code-generation-from-strings is not sufficient for isolating untrusted JavaScript Delete PR staging and head branches #6458: Pull request #7485 closed by helixplant
1m 7s
1m 7s
[GHSA-xq7p-g2vc-g82p] Homograph attack allows Unicode lookalike characters to bypass validation. Delete PR staging and head branches #6457: Pull request #7466 closed by helixplant
54s
54s
Push on main CodeQL #14412: by advisory-database Bot
2m 18s main
main
2m 18s
Push on main CodeQL #14411: by advisory-database Bot
2m 13s main
main
2m 13s
[GHSA-29xr-v42j-r956] thenify before 3.3.1 made use of unsafe calls to eval. Delete PR staging and head branches #6456: Pull request #7451 closed by helixplant
1m 6s
1m 6s
[GHSA-6g33-8w2q-4hxv] robots-txt-guard Inefficient Regular Expression Complexity vulnerability Delete PR staging and head branches #6455: Pull request #7452 closed by helixplant
51s
51s
[GHSA-7mg4-w3w5-x5pc] Prototype pollution in json-pointer Delete PR staging and head branches #6454: Pull request #7453 closed by helixplant
46s
46s
[GHSA-86wf-436m-h424] Resource Exhaustion Denial of Service in http-proxy-agent Delete PR staging and head branches #6453: Pull request #7454 closed by helixplant
53s
53s
[GHSA-884p-74jh-xrg2] Command Injection in tree-kill Delete PR staging and head branches #6452: Pull request #7455 closed by helixplant
43s
43s
[GHSA-8r6j-v8pm-fqw3] Code injection in fsevents Delete PR staging and head branches #6451: Pull request #7457 closed by helixplant
1m 9s
1m 9s
[GHSA-92fh-27vv-894w] nanotar is vulnerable to path traversal in parseTar() and parseTarGzip() Delete PR staging and head branches #6450: Pull request #7458 closed by helixplant
1m 1s
1m 1s
[GHSA-f6v4-cf5j-vf3w] dset Prototype Pollution vulnerability Delete PR staging and head branches #6449: Pull request #7460 closed by helixplant
1m 9s
1m 9s
[GHSA-ff7x-qrg7-qggm] dot-prop Prototype Pollution vulnerability Delete PR staging and head branches #6448: Pull request #7461 closed by helixplant
1m 3s
1m 3s
[GHSA-gpvj-q7fp-jcch] simplehttpserver allows directory traversal and file listing Delete PR staging and head branches #6447: Pull request #7462 closed by helixplant
1m 7s
1m 7s
[GHSA-px4h-xg32-q955] ReDoS in normalize-url Delete PR staging and head branches #6446: Pull request #7465 closed by helixplant
1m 7s
1m 7s
[GHSA-gp2j-mg4w-2rh5] chrome-launcher subject to OS Command Injection Delete PR staging and head branches #6445: Pull request #7487 closed by helixplant
1m 17s
1m 17s
[GHSA-28xh-wpgr-7fm8] Command Injection in open Delete PR staging and head branches #6444: Pull request #7450 closed by helixplant
1m 6s
1m 6s
Push on main CodeQL #14410: by advisory-database Bot
3m 24s main
main
3m 24s
Push on main CodeQL #14409: by advisory-database Bot
2m 13s main
main
2m 13s
Push on Wenxin-Jiang/advisory-improvement-7487 CodeQL #14408: by github-actions Bot
2m 20s Wenxin-Jiang/advisory-improvement-7487
Wenxin-Jiang/advisory-improvement-7487
2m 20s
[GHSA-gp2j-mg4w-2rh5] chrome-launcher subject to OS Command Injection Create PR staging branch #6973: Pull request #7487 opened by Wenxin-Jiang
1m 22s
1m 22s
PR #7487 CodeQL #14407: by Wenxin-Jiang
1m 53s refs/pull/7487/head
refs/pull/7487/head
1m 53s
Push on main CodeQL #14406: by advisory-database Bot
2m 16s main
main
2m 16s
Push on main CodeQL #14405: by advisory-database Bot
2m 9s main
main
2m 9s
ProTip! You can narrow down the results and go further in time using created:<2026-04-22 or the other filters available.