All pull requests

Pull requests

• [GHSA-fhj9-24fm-m53p] In affected Snowflake drivers, WORKLOAD_IDENTITY...

  #10340·btackett3 opened Oct 13, 2026·

  ·
  1

• [GHSA-mrhx-c7xc-m3w5] Add affected version range for zod (< 4.6.6)

  #10339·MohamedEslam04 opened Oct 13, 2026·

  ·

• [GHSA-8jxj-xq3g-hvm2] MONAI through 1.6.0 contains a remote code execution...

  #10338·d-shah8 opened Oct 13, 2026·

  ·

• [GHSA-h6w7-qmcm-q6xr] RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()

  #10337·HonorableSudoku opened Oct 13, 2026·

  ·
  2

• [GHSA-xw5h-cmh3-8j6j] Apache CXF has Improper Restriction of XML External Entity Reference

  #10336·liefke opened Oct 13, 2026·

  ·

• [GHSA-gxr4-xjj5-5px2] Potential XSS vulnerability in jQuery

  #10335·sealonohana opened Oct 13, 2026·

  ·

• [GHSA-xw5h-cmh3-8j6j] Apache CXF has Improper Restriction of XML External Entity Reference

  #10334·dms00 opened Oct 13, 2026·

  ·

• [GHSA-xxc3-xpmc-vmvr] Add fix commit reference

  #10333·stanleys12 opened Oct 12, 2026·

  ·

• [GHSA-pqf9-h8g4-8gmh] Add fix commit reference for GHSA-pqf9-h8g4-8gmh

  #10332·stanleys12 opened Oct 12, 2026·

  ·

• [GHSA-wq92-8x3r-fm38] Add fix commit reference

  #10331·stanleys12 opened Oct 12, 2026·

  ·

• [GHSA-q29v-xc37-wh5m] Docling: Unsafe URI and Path Handling in HTML Backend

  #10330·ranjiGT opened Oct 12, 2026·

  ·
  3

• [GHSA-vfj7-8cjw-p6xm] braces vulnerable to stack-exhaustion denial of service through deeply nested patterns

  #10329·carlogennaro-94 opened Oct 12, 2026·

  ·

• [GHSA-2q76-m6w6-qgc6] Payload: Improper access control for MCP API keys

  #10328·ranjiGT opened Oct 12, 2026·

  ·
  2

• [GHSA-3325-v43h-43rv] JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs

  #10327·ranjiGT opened Oct 12, 2026·

  ·
  2

• [GHSA-3rp5-jjmw-4wv2] GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)

  #10326·ranjiGT opened Oct 12, 2026·

  ·
  4

• [GHSA-6vgw-5pg2-w6jp] pip Path Traversal vulnerability

  #10325·ranjiGT opened Oct 12, 2026·

  ·
  1

• [GHSA-wf93-45jw-7689] pip: Path traversal in console_scripts/gui_scripts entry point names allows installing scripts outside of target directory

  #10324·ranjiGT opened Oct 12, 2026·

  ·
  2

• Correct Ghost embed-preview advisory references

  #10319·eprogressing opened Oct 12, 2026·

  ·
  1

• [GHSA-wccg-v638-j9q2] karmada vulnerable to arbitrary code execution via a crafted command

  #10318·RainbowMango opened Oct 12, 2026·

  ·
  2

• [GHSA-vfj7-8cjw-p6xm] braces vulnerable to stack-exhaustion denial of service through deeply nested patterns

  #10317·noren95 opened Oct 12, 2026·

  ·

• [GHSA-4v8g-86x5-3vrc] Add fix commit reference

  #10316·stanleys12 opened Oct 11, 2026·

  ·

• [GHSA-93g8-qqv3-mrx8] Add fix commit reference

  #10315·stanleys12 opened Oct 11, 2026·

  ·

• [GHSA-f4j7-r4q5-qw2c] Add fix commit reference

  #10314·stanleys12 opened Oct 11, 2026·

  ·
  1

• Add Django package and supported version ranges for GHSA-2f9m-qhxg-w5v5

  #10313·jacobtylerwalls opened Oct 11, 2026·

  ·

• Add Django package and supported version ranges for GHSA-8rmj-xgq5-w9qm

  #10312·jacobtylerwalls opened Oct 11, 2026·

  ·