Search results

Malware advisories for @browserbasehq/* need version scoping (Shai-Hulud 2.0 remediated)

Status: Open.

#6993 In github/advisory-database;

· shrey150 opened on Feb 20, 2026

crewAIInc/crewAI: Command Injection and Sandbox Escape in CodeInterpreterTool

Status: Open.

#6977 In github/advisory-database;

· optimus-fulcria opened on Feb 19, 2026

Request: AgentScope Path Traversal (CWE-22) in JSONSession

Status: Open.

#6976 In github/advisory-database;

· optimus-fulcria opened on Feb 19, 2026

[New Advisory Request] Command Injection in DaytonaTools via Unquoted Path Variables (agno/phidata)

Status: Open.

#6975 In github/advisory-database;

· optimus-fulcria opened on Feb 19, 2026

CVE-2026-22028 Significant scoring difference between GHSA<>NVD

Status: Open.

#6841 In github/advisory-database;

· noren95 opened on Feb 11, 2026

21,244 GHSAs may be unsubstantiated spam

Status: Open.

#6824 In github/advisory-database;

· danielkordik opened on Feb 10, 2026

GHSA-38qg-rp66-3ghr: flagged as Malware

Status: Open.

#6734 In github/advisory-database;

· MrMotiz opened on Jan 28, 2026

GHSA-x9jr-5wf6-m2wf: Falsely flagged as Malware

Status: Open.

#6728 In github/advisory-database;

· ncolonm opened on Jan 27, 2026

GHSA-jmp9-x22r-554x: Missing 'fixed' versions for 5.3.x and 6.0.x/6.1.x ranges

Status: Open.

#6686 In github/advisory-database;

· shreyah963 opened on Jan 21, 2026

PLAN B: Add "Ruby" as new required ecosystem choice to sit beside "RubyGems" ecosystem

Status: Open.

#6676 In github/advisory-database;

· jasnow opened on Jan 20, 2026

Mattermost advisories include server/v8 pseudo-version ranges that cause false positives (Go workspaces)

Status: Open.

#6675 In github/advisory-database;

· esarafianou opened on Jan 20, 2026

Change history for GHSA

Status: Open.

#6632 In github/advisory-database;

· cbieneck opened on Jan 9, 2026