All pull requests

Pull requests

• Fix affected range for GHSA-3cj3-hqcr-g934

  #10398·yanjost opened Oct 16, 2026·

  ·
  1

• [GHSA-wrvx-pxxf-g8fg] Insufficient Session Expiration vulnerability in Apache...

  #10397·hara-satoshi-ymr opened Oct 16, 2026·

  ·
  4

• [GHSA-4x29-79gh-6v8q] Detection of Error Condition Without Action vulnerability...

  #10396·hara-satoshi-ymr opened Oct 16, 2026·

  ·
  2

• [GHSA-xjhv-pp2r-6f82] BoxLite has a Timeout Bypass Vulnerability

  #10395·LiveNL opened Oct 16, 2026·

  ·
  1

• [GHSA-h3mr-2w3q-jcv9] Time-of-check Time-of-use (TOCTOU) Race Condition...

  #10394·hara-satoshi-ymr opened Oct 16, 2026·

  ·
  2

• [GHSA-95xr-cq6h-vwr3] Jodit Editor vulnerable to cross-site scripting

  #10393·xdan opened Oct 16, 2026·

  ·

• [GHSA-g8qj-vp23-742m] Off-by-one Error vulnerability in Apache Tomcat impacting...

  #10392·hara-satoshi-ymr opened Oct 16, 2026·

  ·
  3

• [GHSA-f525-44xv-f2qj] Improper Input Validation vulnerability in Apache Tomcat...

  #10391·hara-satoshi-ymr opened Oct 16, 2026·

  ·
  2

• [GHSA-42hx-vrxx-5r6v] Jodit Editor vulnerable to Cross-site Scripting

  #10390·xdan opened Oct 16, 2026·

  ·

• [GHSA-334f-vvp4-7g6p] Microsoft Security Advisory CVE-2026-70159 - ASP.NET Core Denial of Service Vulnerability

  #10389·bribrothers opened Oct 15, 2026·

  ·
  2

• [GHSA-8v8x-cx79-35w7] React Router SSR XSS in ScrollRestoration

  #10388·avidpupilskateboards opened Oct 15, 2026·

  ·
  1

• [GHSA-j8rh-479h-cp32] Add affected range for axios 0.x (patched in 0.34.0)

  #10387·akhan-pn opened Oct 15, 2026·

  ·

• [GHSA-44g4-m2mj-wpvx] Add affected range for axios 0.x (patched in 0.34.0)

  #10386·akhan-pn opened Oct 15, 2026·

  ·

• [GHSA-mghh-pgcx-3jjj] Add affected range for axios 0.x (patched in 0.34.0)

  #10385·akhan-pn opened Oct 15, 2026·

  ·

• [GHSA-m358-vx46-jcm4] Add summary

  #10384·ErenYeager1836 opened Oct 15, 2026·

  ·

• [GHSA-fm4g-76c9-7w69] Http4s: DigestAuth nonce map grows unbounded

  #10383·rossabaker opened Oct 15, 2026·

  ·
  2

• [GHSA-9xww-74xv-gjfp] Http4s: DigestAuth allows replay of captured requests

  #10382·rossabaker opened Oct 15, 2026·

  ·
  2

• [GHSA-8xx9-69p8-7jp3] LiquidJS has a renderLimit DoS guard bypass via empty {% for %} body

  #10380·SiteQ8 opened Oct 15, 2026·

  ·
  1

• [GHSA-2qv6-9wx5-cwv4] LiquidJS's strip_html filter bypass via newline characters in HTML tags enables XSS

  #10379·SiteQ8 opened Oct 15, 2026·

  ·
  1

• [GHSA-9x9p-qf8f-mvjg] LiquidJS's {% render %} tag silently bypasses per-render ownPropertyOnly:true via Context.spawn()

  #10378·SiteQ8 opened Oct 15, 2026·

  ·
  1

• [GHSA-hh27-hf48-9f5q] LiquidJS has a memory and render limit bypass via unbounded width padding in date filter (strftime)

  #10377·SiteQ8 opened Oct 15, 2026·

  ·
  1

• [GHSA-6q5m-63h6-5x4v] LiquidJS has Exponential Memory Amplification through its replace_first Filter $& Pattern

  #10376·SiteQ8 opened Oct 15, 2026·

  ·
  1

• [GHSA-9r5m-9576-7f6x] LiquidJS: memoryLimit Bypass through Negative Range Values Leads to Process Crash

  #10375·SiteQ8 opened Oct 15, 2026·

  ·
  1

• Update introduced field for GHSA-3w5p-95mh-gq75

  #10373·oliviersels opened Oct 15, 2026·

  ·

• [GHSA-3r7j-8mqh-6qhx] Jadx-gui vulnerable to swing HTML Denial of Service (DoS) attack

  #10372·muhammedalikcb opened Oct 15, 2026·

  ·
  2