Security advisories (GitHub reviewed), as recorded on Flare Reef (https://flarereef.flareforward.com/p/20)

November 13, 2026. On November 13, 2026, GitHub's security advisory list published 41 new advisories, changed 2, and withdrew 0. A security advisory is a public warning about a hole in a piece of software.
GHSA-mfg3-p6m3-gjgr · changed · nova · MODERATE · OpenStack Nova: Nova scheduler hint injection bypasses Placement resource claims and scheduling constraints
Advisory: https://github.com/advisories/GHSA-mfg3-p6m3-gjgr
The commit: https://github.com/github/advisory-database/commit/afed71a60fe27fb31a448c718b922ba1883a8747
The file: https://github.com/github/advisory-database/blob/afed71a60fe27fb31a448c718b922ba1883a8747/advisories/github-reviewed/2026/06/GHSA-mfg3-p6m3-gjgr/GHSA-mfg3-p6m3-gjgr.json
GHSA-4j63-6c4x-wfg4 · published · soupsieve · MODERATE · Soup Sieve: General sibling combinator inside :has() matches untrusted HTML in quadratic time
Advisory: https://github.com/advisories/GHSA-4j63-6c4x-wfg4
The commit: https://github.com/github/advisory-database/commit/dd3621032506cd31b4606029323f9cc10e280ba1
The file: https://github.com/github/advisory-database/blob/dd3621032506cd31b4606029323f9cc10e280ba1/advisories/github-reviewed/2026/11/GHSA-4j63-6c4x-wfg4/GHSA-4j63-6c4x-wfg4.json
GHSA-mmhr-3c5m-f64f · published · soupsieve · HIGH · Soup Sieve: Polynomial-time denial of service in the descendant combinator
Advisory: https://github.com/advisories/GHSA-mmhr-3c5m-f64f
The commit: https://github.com/github/advisory-database/commit/3bd657d41e18ea884042f635f43e3952435d2241
The file: https://github.com/github/advisory-database/blob/3bd657d41e18ea884042f635f43e3952435d2241/advisories/github-reviewed/2026/11/GHSA-mmhr-3c5m-f64f/GHSA-mmhr-3c5m-f64f.json
GHSA-x585-4vv8-2mh2 · published · rucio · CRITICAL · Rucio: Unauthenticated administrator impersonation through SSH challenge tokens
Advisory: https://github.com/advisories/GHSA-x585-4vv8-2mh2
The commit: https://github.com/github/advisory-database/commit/6df69917e10740d3ac1b7bb4cb71ffcc5ea4e82b
The file: https://github.com/github/advisory-database/blob/6df69917e10740d3ac1b7bb4cb71ffcc5ea4e82b/advisories/github-reviewed/2026/11/GHSA-x585-4vv8-2mh2/GHSA-x585-4vv8-2mh2.json
GHSA-v653-r55g-hcmg · changed · uv · MODERATE · uv has ZIP payload obfuscation through parsing differentials
Advisory: https://github.com/advisories/GHSA-v653-r55g-hcmg
The commit: https://github.com/github/advisory-database/commit/be31a8d61d5d9e4c101caa4f7506105dda96862b
The file: https://github.com/github/advisory-database/blob/be31a8d61d5d9e4c101caa4f7506105dda96862b/advisories/github-reviewed/2026/02/GHSA-v653-r55g-hcmg/GHSA-v653-r55g-hcmg.json
GHSA-7g44-g9rc-x53w · published · soupsieve · MODERATE · Soup Sieve: Uncontrolled recursion in CSS parser lets nested pseudo-class selectors exhaust the Python call stack
Advisory: https://github.com/advisories/GHSA-7g44-g9rc-x53w
The commit: https://github.com/github/advisory-database/commit/d56a454765269424437dc69b51cc71da6a220842
The file: https://github.com/github/advisory-database/blob/d56a454765269424437dc69b51cc71da6a220842/advisories/github-reviewed/2026/11/GHSA-7g44-g9rc-x53w/GHSA-7g44-g9rc-x53w.json
GHSA-6655-6qjp-jx7x · published · soupsieve · HIGH · Soup Sieve: Exponential ReDoS in selector compilation via \9-run in CSS_ESCAPES/IDENTIFIER
Advisory: https://github.com/advisories/GHSA-6655-6qjp-jx7x
The commit: https://github.com/github/advisory-database/commit/d7f40b238b018b57230354b3a98efb213aebefe4
The file: https://github.com/github/advisory-database/blob/d7f40b238b018b57230354b3a98efb213aebefe4/advisories/github-reviewed/2026/11/GHSA-6655-6qjp-jx7x/GHSA-6655-6qjp-jx7x.json
GHSA-mf5v-w3w3-f6cg · published · opentelemetry-api · MODERATE · OpenTelemetry Python API: Denial of service through quadratic-time traceparent parsing
Advisory: https://github.com/advisories/GHSA-mf5v-w3w3-f6cg
The commit: https://github.com/github/advisory-database/commit/cc2b7f626cffec0787b9717357a36f589225616e
The file: https://github.com/github/advisory-database/blob/cc2b7f626cffec0787b9717357a36f589225616e/advisories/github-reviewed/2026/11/GHSA-mf5v-w3w3-f6cg/GHSA-mf5v-w3w3-f6cg.json
GHSA-cpgf-5mjf-73p7 · published · rails-html-sanitizer · MODERATE · rails-html-sanitizer: Possible regular expression denial of service with certain configurations
Advisory: https://github.com/advisories/GHSA-cpgf-5mjf-73p7
The commit: https://github.com/github/advisory-database/commit/8150ca091a4fb76146295fcc427e639a674ff72e
The file: https://github.com/github/advisory-database/blob/8150ca091a4fb76146295fcc427e639a674ff72e/advisories/github-reviewed/2026/11/GHSA-cpgf-5mjf-73p7/GHSA-cpgf-5mjf-73p7.json
GHSA-jv6m-48w5-5rpr · published · envd · MODERATE · envd: Host file disclosure through requirements path traversal and TOCTOU
Advisory: https://github.com/advisories/GHSA-jv6m-48w5-5rpr
The commit: https://github.com/github/advisory-database/commit/74d9b65c1cba9b1f9bf6fdb07a364d83ca7de25f
The file: https://github.com/github/advisory-database/blob/74d9b65c1cba9b1f9bf6fdb07a364d83ca7de25f/advisories/github-reviewed/2026/11/GHSA-jv6m-48w5-5rpr/GHSA-jv6m-48w5-5rpr.json
GHSA-h7wh-q2qr-458c · published · rails-html-sanitizer · MODERATE · rails-html-sanitizer: Possible XSS via shared scrubber state in concurrent calls
Advisory: https://github.com/advisories/GHSA-h7wh-q2qr-458c
The commit: https://github.com/github/advisory-database/commit/fd2c792c5ec3a2c514949d658e7c6078ac643f69
The file: https://github.com/github/advisory-database/blob/fd2c792c5ec3a2c514949d658e7c6078ac643f69/advisories/github-reviewed/2026/11/GHSA-h7wh-q2qr-458c/GHSA-h7wh-q2qr-458c.json
GHSA-mjrq-cffv-q4qc · published · @nuxt/schema · MODERATE · Nuxt dev server serves files from a parent directory with a stray lockfile or workspace file
Advisory: https://github.com/advisories/GHSA-mjrq-cffv-q4qc
The commit: https://github.com/github/advisory-database/commit/7a8ac86ae3359e59e5040b4bec62f6289138f79e
The file: https://github.com/github/advisory-database/blob/7a8ac86ae3359e59e5040b4bec62f6289138f79e/advisories/github-reviewed/2026/11/GHSA-mjrq-cffv-q4qc/GHSA-mjrq-cffv-q4qc.json
GHSA-r3h5-4585-7x3w · published · @astrojs/node · astro · MODERATE · Astro: Image endpoint in @astrojs/node can read files from a case-variant sibling of the output directory on case-sensitive filesystems
Advisory: https://github.com/advisories/GHSA-r3h5-4585-7x3w
The commit: https://github.com/github/advisory-database/commit/1936c65b1508be11265709a09229d810010ab8fb
The file: https://github.com/github/advisory-database/blob/1936c65b1508be11265709a09229d810010ab8fb/advisories/github-reviewed/2026/11/GHSA-r3h5-4585-7x3w/GHSA-r3h5-4585-7x3w.json
GHSA-mh32-jxcr-mh9f · published · astro · LOW · Astro: XSS via attribute injection in dynamic tag names
Advisory: https://github.com/advisories/GHSA-mh32-jxcr-mh9f
The commit: https://github.com/github/advisory-database/commit/e74debc9a3a735a867862dc0b19384d0c430fc8f
The file: https://github.com/github/advisory-database/blob/e74debc9a3a735a867862dc0b19384d0c430fc8f/advisories/github-reviewed/2026/11/GHSA-mh32-jxcr-mh9f/GHSA-mh32-jxcr-mh9f.json
GHSA-gpwp-5797-mjff · published · AutoMapper · HIGH · AutoMapper: Denial of Service via uncontrolled recursion that bypasses MaxDepth
Advisory: https://github.com/advisories/GHSA-gpwp-5797-mjff
The commit: https://github.com/github/advisory-database/commit/364007edb49dabbc998eee1c6079f62c0155fbc9
The file: https://github.com/github/advisory-database/blob/364007edb49dabbc998eee1c6079f62c0155fbc9/advisories/github-reviewed/2026/11/GHSA-gpwp-5797-mjff/GHSA-gpwp-5797-mjff.json
GHSA-63hm-g96r-2m2q · published · laravel/framework · LOW · Laravel: Task Output Injection - Concurrency Process
Advisory: https://github.com/advisories/GHSA-63hm-g96r-2m2q
The commit: https://github.com/github/advisory-database/commit/4ee9791db3416d33f863c149937addcfa972e8ee
The file: https://github.com/github/advisory-database/blob/4ee9791db3416d33f863c149937addcfa972e8ee/advisories/github-reviewed/2026/11/GHSA-63hm-g96r-2m2q/GHSA-63hm-g96r-2m2q.json
GHSA-4fqr-96q8-xrfx · published · sqlite3 · MODERATE · sqlite3-ruby: Possible SQL query truncation when a string is 4 GiB or larger
Advisory: https://github.com/advisories/GHSA-4fqr-96q8-xrfx
The commit: https://github.com/github/advisory-database/commit/c289804e665aac323c081789c7f137423efbdd24
The file: https://github.com/github/advisory-database/blob/c289804e665aac323c081789c7f137423efbdd24/advisories/github-reviewed/2026/11/GHSA-4fqr-96q8-xrfx/GHSA-4fqr-96q8-xrfx.json
GHSA-q7gw-24fr-5p69 · published · go[.]opentelemetry[.]io/otel/sdk · go[.]opentelemetry[.]io/otel/sdk/log · go[.]opentelemetry[.]io/otel/trace · MODERATE · opentelemetry-go: AttributeValueLengthLimit is fully bypassed by attribute values composed of valid U+FFFD runes
Advisory: https://github.com/advisories/GHSA-q7gw-24fr-5p69
The commit: https://github.com/github/advisory-database/commit/1eb06e7d63453b9fa0e56cdf15d2795cbb8fdcec
The file: https://github.com/github/advisory-database/blob/1eb06e7d63453b9fa0e56cdf15d2795cbb8fdcec/advisories/github-reviewed/2026/11/GHSA-q7gw-24fr-5p69/GHSA-q7gw-24fr-5p69.json
GHSA-rrfc-gjm9-cgrj · published · go[.]opentelemetry[.]io/otel/baggage · go[.]opentelemetry[.]io/otel/propagation · MODERATE · OpenTelemetry-Go: Eager W3C baggage-property materialization causes bounded memory-allocation amplification
Advisory: https://github.com/advisories/GHSA-rrfc-gjm9-cgrj
The commit: https://github.com/github/advisory-database/commit/1c957b7351b56ed8e37cccf75243b765150e0d93
The file: https://github.com/github/advisory-database/blob/1c957b7351b56ed8e37cccf75243b765150e0d93/advisories/github-reviewed/2026/11/GHSA-rrfc-gjm9-cgrj/GHSA-rrfc-gjm9-cgrj.json
GHSA-736f-c93q-9fwx · published · russh · LOW · russh try_sign: asynchronous confirmation can sign after agent lock
Advisory: https://github.com/advisories/GHSA-736f-c93q-9fwx
The commit: https://github.com/github/advisory-database/commit/8242cb021a02f0eb4608ee4ab878c3ab88b5a34e
The file: https://github.com/github/advisory-database/blob/8242cb021a02f0eb4608ee4ab878c3ab88b5a34e/advisories/github-reviewed/2026/11/GHSA-736f-c93q-9fwx/GHSA-736f-c93q-9fwx.json
GHSA-9264-jvgf-6w2f · published · russh · LOW · russh kex_done: Shared-secret callback runs before server host-key verification
Advisory: https://github.com/advisories/GHSA-9264-jvgf-6w2f
The commit: https://github.com/github/advisory-database/commit/1878d81171e5bed193c1e7da4474ac280a7370ee
The file: https://github.com/github/advisory-database/blob/1878d81171e5bed193c1e7da4474ac280a7370ee/advisories/github-reviewed/2026/11/GHSA-9264-jvgf-6w2f/GHSA-9264-jvgf-6w2f.json
GHSA-6vhm-j9h7-f9gh · published · AutoMapper · HIGH · AutoMapper: Uncontrolled Recursion with Constructor Parameters
Advisory: https://github.com/advisories/GHSA-6vhm-j9h7-f9gh
The commit: https://github.com/github/advisory-database/commit/dc5824fa4e7cf15854abb24b8b912fbb1408c1ea
The file: https://github.com/github/advisory-database/blob/dc5824fa4e7cf15854abb24b8b912fbb1408c1ea/advisories/github-reviewed/2026/11/GHSA-6vhm-j9h7-f9gh/GHSA-6vhm-j9h7-f9gh.json
GHSA-3v2p-hm54-8qcq · published · @opentelemetry/instrumentation-http · MODERATE · OpenTelemetry JavaScript: Insertion of Sensitive Information into Log File and Exposure of Sensitive Information to an Unauthorized Actor in @opentelemetry/instrumentation-http
Advisory: https://github.com/advisories/GHSA-3v2p-hm54-8qcq
The commit: https://github.com/github/advisory-database/commit/2d0f959d94515f3ddcbd0ccddfa8ae21199d1cd8
The file: https://github.com/github/advisory-database/blob/2d0f959d94515f3ddcbd0ccddfa8ae21199d1cd8/advisories/github-reviewed/2026/11/GHSA-3v2p-hm54-8qcq/GHSA-3v2p-hm54-8qcq.json
GHSA-r99w-jh2x-3mg9 · published · @nuxt/nitro-server · MODERATE · Nuxt: Incomplete fix for GHSA-9v7c-q64q-vv33: a leading `//` in the request path bypasses `server/middleware` path checks and server route rules on page routes
Advisory: https://github.com/advisories/GHSA-r99w-jh2x-3mg9
The commit: https://github.com/github/advisory-database/commit/23f11208c0d7dd60d67baf206f1b052aed30184f
The file: https://github.com/github/advisory-database/blob/23f11208c0d7dd60d67baf206f1b052aed30184f/advisories/github-reviewed/2026/11/GHSA-r99w-jh2x-3mg9/GHSA-r99w-jh2x-3mg9.json
GHSA-vvf4-9x63-8xvv · published · dnspython · HIGH · dnspython has excessive memory and CPU use
Advisory: https://github.com/advisories/GHSA-vvf4-9x63-8xvv
The commit: https://github.com/github/advisory-database/commit/51afb096ea630f0fc668e7facbeee9c032207251
The file: https://github.com/github/advisory-database/blob/51afb096ea630f0fc668e7facbeee9c032207251/advisories/github-reviewed/2026/11/GHSA-vvf4-9x63-8xvv/GHSA-vvf4-9x63-8xvv.json
GHSA-5cjw-f85j-cv6r · published · tornado · LOW · Tornado: Open redirect via triple-slash redirect paths
Advisory: https://github.com/advisories/GHSA-5cjw-f85j-cv6r
The commit: https://github.com/github/advisory-database/commit/6cae5ca403c6f54030887cec6cef34f5c2c27843
The file: https://github.com/github/advisory-database/blob/6cae5ca403c6f54030887cec6cef34f5c2c27843/advisories/github-reviewed/2026/11/GHSA-5cjw-f85j-cv6r/GHSA-5cjw-f85j-cv6r.json
GHSA-rqw3-x7hx-mm3p · published · @sveltejs/adapter-node · MODERATE · SvelteKit: `@sveltejs/adapter-node` crashes when proxying certain requests via `fetch`
Advisory: https://github.com/advisories/GHSA-rqw3-x7hx-mm3p
The commit: https://github.com/github/advisory-database/commit/8dd2303a59acd0de87df7b38e5c05eb68b4125d2
The file: https://github.com/github/advisory-database/blob/8dd2303a59acd0de87df7b38e5c05eb68b4125d2/advisories/github-reviewed/2026/11/GHSA-rqw3-x7hx-mm3p/GHSA-rqw3-x7hx-mm3p.json
GHSA-5wg4-q3ww-283h · published · @sveltejs/adapter-cloudflare · MODERATE · SvelteKit: Prerendered redirect paths can inject arbitrary rules into the `_redirects` file generated by `@sveltejs/adapter-cloudflare`
Advisory: https://github.com/advisories/GHSA-5wg4-q3ww-283h
The commit: https://github.com/github/advisory-database/commit/cebb49976e0b3ee817b35f66b4d2a5da2e544529
The file: https://github.com/github/advisory-database/blob/cebb49976e0b3ee817b35f66b4d2a5da2e544529/advisories/github-reviewed/2026/11/GHSA-5wg4-q3ww-283h/GHSA-5wg4-q3ww-283h.json
GHSA-jf9x-2fg2-hx4w · published · @sveltejs/adapter-vercel · @sveltejs/adapter-static · MODERATE · SvelteKit: Prerendered paths are interpreted as regular expressions in Vercel route config generated by @sveltejs/adapter-vercel and @sveltejs/adapter-static
Advisory: https://github.com/advisories/GHSA-jf9x-2fg2-hx4w
The commit: https://github.com/github/advisory-database/commit/75ac9f2cfb812c35e651671de1c5051aabc7d44c
The file: https://github.com/github/advisory-database/blob/75ac9f2cfb812c35e651671de1c5051aabc7d44c/advisories/github-reviewed/2026/11/GHSA-jf9x-2fg2-hx4w/GHSA-jf9x-2fg2-hx4w.json
GHSA-mw6w-2fmv-pvw3 · published · @sveltejs/kit · MODERATE · SvelteKit: adapter-node crashes with an unhandled URIError when `reroute` rewrites malformed pathnames
Advisory: https://github.com/advisories/GHSA-mw6w-2fmv-pvw3
The commit: https://github.com/github/advisory-database/commit/1f7ecfc45ad984725f5eb83b3e89f376e0c7620b
The file: https://github.com/github/advisory-database/blob/1f7ecfc45ad984725f5eb83b3e89f376e0c7620b/advisories/github-reviewed/2026/11/GHSA-mw6w-2fmv-pvw3/GHSA-mw6w-2fmv-pvw3.json
GHSA-7r4r-6ppg-7ff8 · published · nltk · HIGH · Duplicate Advisory: Symlink escape in YCOECorpusReader lets a psd/pos directory symlink read files outside the corpus root within the data sandbox
Advisory: https://github.com/advisories/GHSA-7r4r-6ppg-7ff8
The commit: https://github.com/github/advisory-database/commit/c22e8d90df91a2c839f9a6cc8a4cf6a62b23cd91
The file: https://github.com/github/advisory-database/blob/c22e8d90df91a2c839f9a6cc8a4cf6a62b23cd91/advisories/github-reviewed/2026/11/GHSA-7r4r-6ppg-7ff8/GHSA-7r4r-6ppg-7ff8.json
GHSA-4hvg-fv5c-9936 · published · nltk · HIGH · Duplicate Advisory: Unbounded CPU consumption in NLTK SteppingRecursiveDescentParser[.]parse() with ambiguous or self-embedding grammars
Advisory: https://github.com/advisories/GHSA-4hvg-fv5c-9936
The commit: https://github.com/github/advisory-database/commit/407e74dc63e313f97227eca1c81414a5321500a4
The file: https://github.com/github/advisory-database/blob/407e74dc63e313f97227eca1c81414a5321500a4/advisories/github-reviewed/2026/11/GHSA-4hvg-fv5c-9936/GHSA-4hvg-fv5c-9936.json
GHSA-qg35-44qx-7vrr · published · nltk · HIGH · NLTK: Symlink escape in YCOECorpusReader lets a psd/pos directory symlink read files outside the corpus root within the data sandbox
Advisory: https://github.com/advisories/GHSA-qg35-44qx-7vrr
The commit: https://github.com/github/advisory-database/commit/407e74dc63e313f97227eca1c81414a5321500a4
The file: https://github.com/github/advisory-database/blob/407e74dc63e313f97227eca1c81414a5321500a4/advisories/github-reviewed/2026/11/GHSA-qg35-44qx-7vrr/GHSA-qg35-44qx-7vrr.json
GHSA-8fx7-8jr8-84rv · published · nltk · HIGH · NLTK: Unbounded CPU consumption in SteppingRecursiveDescentParser[.]parse() with ambiguous or self-embedding grammars
Advisory: https://github.com/advisories/GHSA-8fx7-8jr8-84rv
The commit: https://github.com/github/advisory-database/commit/e2c68e60a557adcc8f075aae523046b9cf43232c
The file: https://github.com/github/advisory-database/blob/e2c68e60a557adcc8f075aae523046b9cf43232c/advisories/github-reviewed/2026/11/GHSA-8fx7-8jr8-84rv/GHSA-8fx7-8jr8-84rv.json
GHSA-rg32-vgf9-927c · published · nltk · MODERATE · Duplicate Advisory: Quadratic CPU exhaustion in TreebankWordTokenizer.span_tokenize via list[.]pop(0) in quote-restore loop
Advisory: https://github.com/advisories/GHSA-rg32-vgf9-927c
The commit: https://github.com/github/advisory-database/commit/9162eba25b286e4a3da7c9e521d0368fa8212380
The file: https://github.com/github/advisory-database/blob/9162eba25b286e4a3da7c9e521d0368fa8212380/advisories/github-reviewed/2026/11/GHSA-rg32-vgf9-927c/GHSA-rg32-vgf9-927c.json
GHSA-ffr9-mgrr-wcvr · published · nltk · MODERATE · NLTK: Quadratic CPU exhaustion in TreebankWordTokenizer.span_tokenize via list[.]pop(0) in quote-restore loop
Advisory: https://github.com/advisories/GHSA-ffr9-mgrr-wcvr
The commit: https://github.com/github/advisory-database/commit/e1ecbd9ea5eb397b26514ffb0e463872e3e5e8d1
The file: https://github.com/github/advisory-database/blob/e1ecbd9ea5eb397b26514ffb0e463872e3e5e8d1/advisories/github-reviewed/2026/11/GHSA-ffr9-mgrr-wcvr/GHSA-ffr9-mgrr-wcvr.json
GHSA-gpwc-27cw-rh9r · published · nltk · MODERATE · NLTK: Quadratic CPU exhaustion in LegalitySyllableTokenizer[.]tokenize via unguarded onset reversal loop
Advisory: https://github.com/advisories/GHSA-gpwc-27cw-rh9r
The commit: https://github.com/github/advisory-database/commit/96f64df1e8d2a1a4d3f7cf72e5c5a95a648fdfa1
The file: https://github.com/github/advisory-database/blob/96f64df1e8d2a1a4d3f7cf72e5c5a95a648fdfa1/advisories/github-reviewed/2026/11/GHSA-gpwc-27cw-rh9r/GHSA-gpwc-27cw-rh9r.json
GHSA-g5wx-957h-f4wj · published · nltk · MODERATE · Duplicate Advisory: Path Traversal in save_maxent_params / load_maxent_params Allow Arbitrary File READ/WRITE
Advisory: https://github.com/advisories/GHSA-g5wx-957h-f4wj
The commit: https://github.com/github/advisory-database/commit/ad3f98cb12ad1c18dde899f31061ab667006429e
The file: https://github.com/github/advisory-database/blob/ad3f98cb12ad1c18dde899f31061ab667006429e/advisories/github-reviewed/2026/11/GHSA-g5wx-957h-f4wj/GHSA-g5wx-957h-f4wj.json
GHSA-jh6r-h4rx-2j3w · published · nltk · HIGH · Duplicate Advisory: Quadratic-time CPU denial of service in NLTK CCG lexicon parser (fromstring) on wide bracket bodies and operator chains
Advisory: https://github.com/advisories/GHSA-jh6r-h4rx-2j3w
The commit: https://github.com/github/advisory-database/commit/ebf8894d236bef6d65a83096599b0bbad9083f50
The file: https://github.com/github/advisory-database/blob/ebf8894d236bef6d65a83096599b0bbad9083f50/advisories/github-reviewed/2026/11/GHSA-jh6r-h4rx-2j3w/GHSA-jh6r-h4rx-2j3w.json
GHSA-pp88-jhwj-5qh5 · published · github[.]com/filebrowser/filebrowser/v2 · LOW · File Browser: Trailing-slash directory deletion leaves public shares active for recreated paths
Advisory: https://github.com/advisories/GHSA-pp88-jhwj-5qh5
The commit: https://github.com/github/advisory-database/commit/8246cfea1e11d78f953467f626b2b208e946ca83
The file: https://github.com/github/advisory-database/blob/8246cfea1e11d78f953467f626b2b208e946ca83/advisories/github-reviewed/2026/11/GHSA-pp88-jhwj-5qh5/GHSA-pp88-jhwj-5qh5.json
GHSA-qfx6-q44v-9qqw · published · ag-psd · HIGH · ag-psd can exhaust memory when parsing crafted PSD dimensions
Advisory: https://github.com/advisories/GHSA-qfx6-q44v-9qqw
The commit: https://github.com/github/advisory-database/commit/63ef45dcf2b9da7d2c01b1906bf33273596fc4dd
The file: https://github.com/github/advisory-database/blob/63ef45dcf2b9da7d2c01b1906bf33273596fc4dd/advisories/github-reviewed/2026/11/GHSA-qfx6-q44v-9qqw/GHSA-qfx6-q44v-9qqw.json
GHSA-f7j6-hf97-9v99 · published · nltk · HIGH · Duplicate Advisory: BllipParser passes caller-supplied model paths to the bllipparser C extension with no pathsec check, enabling arbitrary read
Advisory: https://github.com/advisories/GHSA-f7j6-hf97-9v99
The commit: https://github.com/github/advisory-database/commit/a58d110cf9790b728795f111c53bf68d64b0109a
The file: https://github.com/github/advisory-database/blob/a58d110cf9790b728795f111c53bf68d64b0109a/advisories/github-reviewed/2026/11/GHSA-f7j6-hf97-9v99/GHSA-f7j6-hf97-9v99.json
GHSA-fg9w-wfp5-j933 · published · nltk · MODERATE · NLTK: BllipParser passes caller-supplied model paths to the bllipparser C extension with no pathsec check, enabling arbitrary read
Advisory: https://github.com/advisories/GHSA-fg9w-wfp5-j933
The commit: https://github.com/github/advisory-database/commit/a58d110cf9790b728795f111c53bf68d64b0109a
The file: https://github.com/github/advisory-database/blob/a58d110cf9790b728795f111c53bf68d64b0109a/advisories/github-reviewed/2026/11/GHSA-fg9w-wfp5-j933/GHSA-fg9w-wfp5-j933.json
Permanent record: https://flarereef.flareforward.com/n/472