All pull requests

Pull requests

• [GHSA-h6w7-qmcm-q6xr] RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()

  #10217·mark-adams opened Oct 7, 2026·

  ·
  1

• Add the NuGet package log4net to six Apache log4net advisories

  #10216·FreeAndNil opened Oct 7, 2026·

  ·

• [GHSA-9993-rfwp-rhwf] Add CWE-287 (Improper Authentication)

  #10215·stanleys12 opened Oct 7, 2026·

  ·

• [GHSA-8fxw-fmj8-xp7j] Add CWE-943 to GHSA-8fxw-fmj8-xp7j

  #10214·stanleys12 opened Oct 7, 2026·

  ·

• [GHSA-5f42-97gr-vfhq] Add CWE-863 to GHSA-5f42-97gr-vfhq

  #10213·stanleys12 opened Oct 7, 2026·

  ·

• [GHSA-h4w6-wx8r-p68v] ruby webrick through v1.9.2 WEBrick reparses trailer...

  #10212·ranjiGT opened Oct 7, 2026·

  ·
  1

• [GHSA-5xmw-vc9v-4wf2] Pillow has a heap buffer overflow with nested list coordinates

  #10210·ranjiGT opened Oct 7, 2026·

  ·
  2

• [GHSA-p423-j2cm-9vmq] Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs

  #10209·ranjiGT opened Oct 7, 2026·

  ·
  2

• GHSA-4gh6-j99c-x6g2: map CVE-2026-52001 to npm package mcp-remote

  #10208·playb0t opened Oct 7, 2026·

  ·

• GHSA-v65w-6crh-cp3h: map CVE-2026-51997 to npm package mcp-remote

  #10207·playb0t opened Oct 7, 2026·

  ·

• GHSA-mvq8-g2rm-4rhm: map CVE-2026-51996 to npm package mcp-remote

  #10206·playb0t opened Oct 7, 2026·

  ·

• GHSA-5wmf-76f4-cg47: map CVE-2026-51995 to npm package mcp-remote

  #10205·playb0t opened Oct 7, 2026·

  ·

• GHSA-8rrr-xx35-4q6h: map CVE-2026-51994 to npm package mcp-remote

  #10204·playb0t opened Oct 7, 2026·

  ·

• Add fix reference for GHSA-f57c-hx33-hvh8

  #10203·darakian opened Oct 7, 2026Contributor·

  ·

• [GHSA-27v5-c462-wpq7] path-to-regexp vulnerable to Regular Expression Denial of Service via multiple wildcards

  #10202·ranjiGT opened Oct 7, 2026·

  ·
  2

• [GHSA-rcjc-c4pj-xxrp] Apache Derby: LDAP injection vulnerability in authenticator

  #10200·benoitbayol opened Oct 7, 2026·

  ·
  2

• GHSA-72hf-fj62-w6j4: correct garbled Magick.NET package name

  #10199·jgreen-hai opened Oct 7, 2026·

  ·

• GHSA-xwc6-v6g8-pw2h: correct garbled Magick.NET package name

  #10198·jgreen-hai opened Oct 7, 2026·

  ·

• GHSA-v994-63cg-9wj3: correct garbled Magick.NET package name

  #10197·jgreen-hai opened Oct 7, 2026·

  ·

• GHSA-gxcx-qjqp-8vjw: correct garbled Magick.NET package name

  #10196·jgreen-hai opened Oct 7, 2026·

  ·

• [GHSA-f27v-pv5m-c5g6] http-cache-semantics through 4.2.0 contains a cache...

  #10195·zsharpBDO opened Oct 6, 2026·

  ·
  5

• [GHSA-fh45-7f3j-r575] A heap buffer overflow vulnerability exists in the Jansi...

  #10194·levpachmanov opened Oct 6, 2026·

  ·

• [GHSA-r7g4-qg5f-qqm2] Add fix commit reference

  #10193·AnanduB13 opened Oct 6, 2026·

  ·
  1

• [GHSA-xw5h-cmh3-8j6j] Apache CXF has Improper Restriction of XML External Entity Reference

  #10192·Kabutt opened Oct 6, 2026·

  ·

• [GHSA-j82v-59xc-mmxx] Information disclosure in the blogComments GraphQL query...

  #10191·stevenrombauts opened Oct 6, 2026·

  ·