All pull requests

Pull requests

• [GHSA-692r-grfm-v8x7] @angular/core: Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)

  #10458·Cayan opened Oct 20, 2026·

  ·
  2

• [GHSA-rj75-hqrm-r3gf] PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion

  #10457·mikael-mattsson opened Oct 20, 2026·

  ·
  3

• [GHSA-rj75-hqrm-r3gf] PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion

  #10456·MoOx opened Oct 20, 2026·

  ·
  2

• [GHSA-cv23-7vc5-jfh7] gomarkdown/markdown IsSafeURL panics on short URLs

  #10455·Smove opened Oct 20, 2026·

  ·
  1

• [GHSA-4x29-79gh-6v8q] Detection of Error Condition Without Action vulnerability...

  #10454·hara-satoshi-ymr opened Oct 20, 2026·

  ·
  1

• [GHSA-494j-54xm-rwp3] AIOHTTP: Secure attribute not enforced for shared cookie

  #10453·iamrobertmorrison01-stack opened Oct 20, 2026·

  ·
  1

• GHSA-gfrc-g87h-7h5w: fix Go module name

  #10452·nonkronk opened Oct 20, 2026·

  ·

• GHSA-44xr-mrhh-qm78: fix Go module name

  #10451·nonkronk opened Oct 20, 2026·

  ·

• [GHSA-5x6v-p487-7qh2] LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values

  #10448·thesanjok opened Oct 19, 2026·

  ·
  2

• [GHSA-f8c7-rwf9-fmgm] Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass

  #10447·mickeyking2023-stack opened Oct 19, 2026·

  ·
  1

• [GHSA-j7fq-p9q7-5wfv] Treekill Enables OS Command Injection

  #10446·richardfan0606 opened Oct 19, 2026·

  ·

• [GHSA-m93j-546h-jwjv] An arbitrary code execution vulnerability in Mistral Vibe...

  #10445·portyu9 opened Oct 19, 2026·

  ·

• Withdraw GHSA-hp3w-g68c-fv3c: source CVE-2026-97058 rejected by issuing CNA

  #10444·rkunjappan opened Oct 19, 2026·

  ·

• [GHSA-vvfw-4m39-fjqf] Add patched version 29.1.0

  #10443·mikeflame opened Oct 19, 2026·

  ·
  1

• [GHSA-6rc6-p838-686f] Add patched version 29.1.0

  #10442·mikeflame opened Oct 19, 2026·

  ·

• [GHSA-xr6f-h4x7-r6qp] Add patched version 29.1.0

  #10441·mikeflame opened Oct 19, 2026·

  ·

• [GHSA-8whc-2wmv-ww35] Add patched version 29.1.0

  #10440·mikeflame opened Oct 19, 2026·

  ·

• [GHSA-gph2-j4c9-vhhr] Add patched version 29.1.0

  #10439·mikeflame opened Oct 19, 2026·

  ·

• [GHSA-r7mc-x6x7-cqxx] Add patched version 0.5.0b3.dev97

  #10438·mikeflame opened Oct 19, 2026·

  ·
  1

• [GHSA-2x79-gwq3-vxxm] Add patched version 0.7.59

  #10437·mikeflame opened Oct 19, 2026·

  ·
  1

• [GHSA-v6wj-c83f-v46x] Add patched version 1.5.0

  #10436·mikeflame opened Oct 19, 2026·

  ·
  1

• [GHSA-mjgf-xj26-9qf9] Add patched version 11.6.2

  #10435·mikeflame opened Oct 19, 2026·

  ·
  1

• [GHSA-f66q-9rf6-8795] Add patched version 5.8.2

  #10434·mikeflame opened Oct 19, 2026·

  ·
  1

• [GHSA-wrvx-pxxf-g8fg] Insufficient Session Expiration vulnerability in Apache...

  #10433·hara-satoshi-ymr opened Oct 19, 2026·

  ·
  1

• [GHSA-g8qj-vp23-742m] Off-by-one Error vulnerability in Apache Tomcat impacting...

  #10432·hara-satoshi-ymr opened Oct 19, 2026·

  ·
  1