Search results

Hardcoded API Keys / Secrets Exposure

Status: Open.

#7560 In github/advisory-database;

· CreepyLewis opened on Apr 30, 2026

git fetch upstream git checkout main git merge upstream

Status: Open.

#7559 In github/advisory-database;

· e7457166-a11y opened on Apr 30, 2026

git remote add upstream https://github.com/mozilla/fxa

Status: Open.

#7558 In github/advisory-database;

· e7457166-a11y opened on Apr 30, 2026

Codespaces allows you to load extensions from the Microsoft Visual Studio Marketplace (“Marketplace Extensions”) for use in your development environment, for example, to process the programming languages that your code is written in. Marketplace Extensions are licensed under their own separate terms of use as noted in the Visual Studio Marketplace, and the terms of use located at https://aka.ms/vsmarketplace-ToU. GitHub makes no warranties of any kind in relation to Marketplace Extensions and is not liable for actions of third-party authors of Marketplace Extensions that are granted access to Your Content. Codespaces also allows you to load software into your environment through devcontainer features. Such software is provided under the separate terms of use accompanying it. Your use of any third-party applications is at your sole risk.

Status: Open.

#7557 In github/advisory-database;

· e7457166-a11y opened on Apr 30, 2026

172.217.16.36

Status: Open.

#7556 In github/advisory-database;

· e7457166-a11y opened on Apr 30, 2026

e7457166@gmail.com

Status: Open.

#7554 In github/advisory-database;

· e7457166-a11y opened on Apr 30, 2026

levpachmanov-GHSA-3hhc-qp5v-9p2j

Status: Open.

#7551 In github/advisory-database;

· e7457166-a11y opened on Apr 30, 2026

vmess://ewogICJhZGQiOiAic2hvcC5iYXJhdmFyZGVoLnRvcCIsCiAgImlkIjogIjQ0NWM0NDM1LWE4NWUtNGU3NS04ZWZmLTAxN2Q2Njg1YjYwZCIsCiAgIm5ldCI6ICJ0Y3AiLAogICJwb3J0IjogMzE2MCwKICAicHMiOiAi4puU77iPTi9BLTFHQi1WSVAtNzRtMW9yNjkiLAogICJzY3kiOiAiYXV0byIsCiAgInRscyI6ICJub25lIiwKICAidHlwZSI6ICJub25lIiwKICAidiI6ICIyIgp9

Status: Open.

#7550 In github/advisory-database;

· e7457166-a11y opened on Apr 30, 2026

Hi @levpachmanov, I don't agree with setting a minimum vulnerable version based on the contents of https://github.com/rails/rails/blob/v3.0.20/activerecord/lib/active_record.rb. I found fix commits for versions [7.03.1](https://github.com/rails/rails/commit/9529dc844e001c03931e3579a03b89713d9c236f), [6.1.6.1](https://github.com/rails/rails/commit/8ce4bd1be83c08c30c34af4d0f1a726066128176), [6.0.5.1](https://github.com/rails/rails/commit/d28f278788b599c0a9f6e3ea437c6642eb56f16c), and [5.2.8.1](https://github.com/rails/rails/commit/6576aa7bbcf52ebd39853363e29f92b4dd53b6f1), and of those, only the fix commits corresponding the the 7.1 and 7.0 branches made any changes to active_record.rb. I think it's more likely that change in a different file would cause CVE-2022-32224. Can you find a change that's consistent with all of the fix commits and where the vulnerable code was introduced in the repo?

Status: Open.

#7548 In github/advisory-database;

· e7457166-a11y opened on Apr 30, 2026

CVSS ordering validation

Status: Open.

#7543 In github/advisory-database;

· awsactran opened on Apr 29, 2026

[GHSA-vffh-x6r8-xx99] [CVE-2026-40179] Doesn't show all remediated versions (particularly v3.5.2's go counterpart v0.305.2)

Status: Open.

#7537 In github/advisory-database;

· MartinFalatic opened on Apr 28, 2026

Request for GitHub Security Advisory Database entries for two disclosed open-source vulnerabilities

Status: Open.

#7533 In github/advisory-database;

· michaelknap opened on Apr 28, 2026