The Wayback Machine - https://web.archive.org/web/20230923131333/https://github.com/github/advisory-database/issues
Skip to content

Issues: github/advisory-database

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

48 Open 83 Closed
48 Open 83 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Extend GitHub's CNA scope
#2718 opened Sep 10, 2023 by Marcono1234
1
Fix GHSA-jpcm-4485-69p7
#2703 opened Sep 4, 2023 by alejolagosm
1
GHSA-gwjw-ph82-w683 - Malware in duo_web_sdk
#2701 opened Sep 2, 2023 by pidydx
Empty affected function in crates.io Rust advisories
#2665 opened Aug 27, 2023 by amousset
Schema Inaccuracy with Security Advisories endpoints
#2645 opened Aug 21, 2023 by bearcherian
CONTRIBUTING.md references OSV schema while the actual repo/PR builds reject valid JSON
#2644 opened Aug 21, 2023 by daniel-beck
GHSA-2qmj-7962-cjq8 last_affected is not updated to the latest version
#2640 opened Aug 21, 2023 by another-rex
1
XLSX patch version doesn't exist
#2627 opened Aug 16, 2023 by kpierro914
2
Support for zig packages in build.zig.zon
#2610 opened Aug 9, 2023 by figsoda
The wrong/unclear report for never-published packages focal-manual-tests and focal-todomvc
#2492 opened Jul 12, 2023 by oleksiilevzhynskyi
Reporting Inaccurate Affected Components in GitHub Advisory Database
#2467 opened Jul 5, 2023 by catch22out
3
Why not every CVE collected in GHSA?
#2451 opened Jun 25, 2023 by JustinB1eber
2
narrow version constrains of vulnerable radancy/dropr-client - GHSA-3crg-f8r3-cw5x
#2450 opened Jun 23, 2023 by Levivb
Package incorrectly identified as malware
#2405 opened Jun 13, 2023 by ashishbijlani
missed CVE-2019-3826 for github.com/prometheus/prometheus
#2341 opened May 31, 2023 by DmitriyLewen
Package vs module for go advisories
#2224 opened May 5, 2023 by ArthurBrillant
## Release the Library on Packagist
#2222 opened May 5, 2023 by superguysmal0326
1 task done
Should use "MEDIUM" instead of "MODERATE" in CVSS rating
#2189 opened Apr 24, 2023 by sschuberth
Dependency Submission API - Opam Protocol
#1897 opened Mar 31, 2023 by smorimoto
GHSA-hgwp-4vp4-qmm2 has no published or compatible non-vulnerable versions
#1742 opened Mar 2, 2023 by uhthomas
1
10
GHSA-mjmj-j48q-9wg2 is triggering for snakeyaml-engine but CVE is for just "snakeyaml"
#1720 opened Feb 23, 2023 by mr-c
5
julia ecosystem support
#1689 opened Feb 10, 2023 by anandijain
1
Feature: Provide advisories as CSAF
#1685 opened Feb 9, 2023 by tschmidtb51
3
Add support for Elixir Ecosystem for dependency graphs since the package manager hex.pm is already used for Erlang
#1661 opened Jan 31, 2023 by SupaMic
9
improve Dependabot Alert UI; allow markdown comments
#1643 opened Jan 27, 2023 by jtmoon79
1
ProTip! Find all open issues with in progress development work with linked:pr.