All pull requests

Pull requests

• [GHSA-xxc3-xpmc-vmvr] Add fix commit reference

  #10333·stanleys12 opened Oct 12, 2026·

  ·

• [GHSA-pqf9-h8g4-8gmh] Add fix commit reference for GHSA-pqf9-h8g4-8gmh

  #10332·stanleys12 opened Oct 12, 2026·

  ·

• [GHSA-wq92-8x3r-fm38] Add fix commit reference

  #10331·stanleys12 opened Oct 12, 2026·

  ·

• [GHSA-q29v-xc37-wh5m] Docling: Unsafe URI and Path Handling in HTML Backend

  #10330·ranjiGT opened Oct 12, 2026·

  ·
  2

• [GHSA-vfj7-8cjw-p6xm] braces vulnerable to stack-exhaustion denial of service through deeply nested patterns

  #10329·carlogennaro-94 opened Oct 12, 2026·

  ·

• [GHSA-2q76-m6w6-qgc6] Payload: Improper access control for MCP API keys

  #10328·ranjiGT opened Oct 12, 2026·

  ·
  2

• [GHSA-3325-v43h-43rv] JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs

  #10327·ranjiGT opened Oct 12, 2026·

  ·
  2

• [GHSA-3rp5-jjmw-4wv2] GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)

  #10326·ranjiGT opened Oct 12, 2026·

  ·
  2

• [GHSA-6vgw-5pg2-w6jp] pip Path Traversal vulnerability

  #10325·ranjiGT opened Oct 12, 2026·

  ·
  1

• [GHSA-wf93-45jw-7689] pip: Path traversal in console_scripts/gui_scripts entry point names allows installing scripts outside of target directory

  #10324·ranjiGT opened Oct 12, 2026·

  ·
  2

• [GHSA-hp3w-g68c-fv3c] sprintf-js vulnerable to denial of service through unbounded precision specifiers

  #10320·aliyevaladddin opened Oct 12, 2026·

  ·

• Correct Ghost embed-preview advisory references

  #10319·eprogressing opened Oct 12, 2026·

  ·
  1

• [GHSA-wccg-v638-j9q2] karmada vulnerable to arbitrary code execution via a crafted command

  #10318·RainbowMango opened Oct 12, 2026·

  ·
  2

• [GHSA-vfj7-8cjw-p6xm] braces vulnerable to stack-exhaustion denial of service through deeply nested patterns

  #10317·noren95 opened Oct 12, 2026·

  ·

• [GHSA-4v8g-86x5-3vrc] Add fix commit reference

  #10316·stanleys12 opened Oct 11, 2026·

  ·

• [GHSA-93g8-qqv3-mrx8] Add fix commit reference

  #10315·stanleys12 opened Oct 11, 2026·

  ·

• [GHSA-f4j7-r4q5-qw2c] Add fix commit reference

  #10314·stanleys12 opened Oct 11, 2026·

  ·
  1

• Add Django package and supported version ranges for GHSA-2f9m-qhxg-w5v5

  #10313·jacobtylerwalls opened Oct 11, 2026·

  ·

• Add Django package and supported version ranges for GHSA-8rmj-xgq5-w9qm

  #10312·jacobtylerwalls opened Oct 11, 2026·

  ·

• Add Django package and supported version ranges for GHSA-76g2-x83x-73r7

  #10311·jacobtylerwalls opened Oct 11, 2026·

  ·

• Add Django package and supported version ranges for GHSA-7cqx-w4gp-37v7

  #10310·jacobtylerwalls opened Oct 11, 2026·

  ·

• Add Django package and supported version ranges for GHSA-mxcg-2f2x-4q92

  #10309·jacobtylerwalls opened Oct 11, 2026·

  ·

• Add Django package and supported version ranges for GHSA-x869-hccf-fv7r

  #10308·jacobtylerwalls opened Oct 11, 2026·

  ·

• [GHSA-78fc-9688-w8xw] OpenMRS Module Upload Vulnerable to Path Traversal (Zip Slip)

  #10305·yusuke-koyoshi opened Oct 11, 2026·

  ·
  2

• [GHSA-365w-hqf6-vxfg] Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution

  #10304·yusuke-koyoshi opened Oct 11, 2026·

  ·
  4