All pull requests

Pull requests

• Add 1.12.7 release reference to GHSA-2x36-qhx3-7m5f

  #11314·aungzayyanaing opened Nov 13, 2026·

  ·

• Add 2.4.9 release reference to GHSA-2fhr-8r8r-qp56

  #11313·aungzayyanaing opened Nov 13, 2026·

  ·

• Add v11.2.4 release reference to GHSA-277c-5vvj-9pwx

  #11312·aungzayyanaing opened Nov 13, 2026·

  ·

• Add 0.2.5 release reference to GHSA-258h-f687-4226

  #11311·aungzayyanaing opened Nov 13, 2026·

  ·

• Add v1.8.3 release reference to GHSA-25qx-vfw2-fw8r

  #11310·aungzayyanaing opened Nov 13, 2026·

  ·

• Add v1.0.0 release reference to GHSA-2326-pfpj-vx3h

  #11309·aungzayyanaing opened Nov 13, 2026·

  ·

• Add gradio 5.0.0 release reference to GHSA-279j-x4gx-hfrh

  #11308·aungzayyanaing opened Nov 13, 2026·

  ·

• Add 3.1.3.1 release reference to GHSA-2697-96mv-3gfm

  #11307·aungzayyanaing opened Nov 13, 2026·

  ·

• Add v3.10.11 release reference to GHSA-27mf-ghqm-j3j8

  #11306·aungzayyanaing opened Nov 13, 2026·

  ·

• [GHSA-2452-6xj8-jh47] Opening a malicious website while running a Nuxt dev server could allow read-only access to code

  #11305·aungzayyanaing opened Nov 13, 2026·

  ·
  2

• [GHSA-2237-5r9w-vm8j] Connect-CMS information that is restricted to viewing is visible

  #11304·aungzayyanaing opened Nov 13, 2026·

  ·
  1

• [GHSA-227r-w5j2-6243] InvokeAI Arbitrary File Deletion vulnerability

  #11303·aungzayyanaing opened Nov 13, 2026·

  ·
  1

• Add Whoogle v0.9.1 release reference to GHSA-2689-cw26-6cpj

  #11302·aungzayyanaing opened Nov 13, 2026·

  ·

• [GHSA-2hj5-g64g-fp6p] Argo CD allows cross-site scripting on repositories page

  #11301·aungzayyanaing opened Nov 13, 2026·

  ·
  2

• [GHSA-2v3v-3whp-953h] starcitizentools/citizen-skin allows stored XSS in user registration date message

  #11300·aungzayyanaing opened Nov 13, 2026·

  ·
  2

• Add matrix-sdk 0.13.0 release reference to GHSA-275g-g844-73jh

  #11299·aungzayyanaing opened Nov 13, 2026·

  ·

• Add color-string 2.1.2 release reference to GHSA-286p-vc9p-p5qv

  #11298·aungzayyanaing opened Nov 13, 2026·

  ·

• [GHSA-2q8q-8fgw-9p6p] OpenBao LDAP MFA Enforcement Bypass When Using Username As Alias

  #11297·aungzayyanaing opened Nov 13, 2026·

  ·
  2

• [GHSA-253q-9q78-63x4] Clatter has a PSK Validity Rule Violation issue

  #11296·aungzayyanaing opened Nov 13, 2026·

  ·

• [GHSA-3rg7-wf37-54rm] Symfony's incorrect parsing of PATH_INFO can lead to limited authorization bypass

  #11295·aungzayyanaing opened Nov 13, 2026·

  ·
  2

• [GHSA-27c9-vp3w-6ww8] Shopware exposes sensitive user information via CSV export mapping

  #11294·aungzayyanaing opened Nov 13, 2026·

  ·
  1

• Add marimo 0.23.0 release reference to GHSA-2679-6mx9-h9xc

  #11293·aungzayyanaing opened Nov 13, 2026·

  ·

• [GHSA-2m4f-cg75-76w2] NiceGUI Stored/Reflected XSS in ui.interactive_image via unsanitized SVG content

  #11292·aungzayyanaing opened Nov 13, 2026·

  ·
  2

• [GHSA-2299-ghjr-6vjp] Parse Server: MFA recovery code single-use bypass via concurrent requests

  #11291·aungzayyanaing opened Nov 13, 2026·

  ·
  2

• [GHSA-243v-98vx-264h] Wasmtime can panic when adding excessive fields to a wasi:http/types.fields instance

  #11290·aungzayyanaing opened Nov 13, 2026·

  ·
  3