All pull requests

Pull requests

• [GHSA-26hh-7cqf-hhc6] Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up

  #10362·ranjiGT opened Oct 14, 2026·

  ·
  2

• [GHSA-9mhv-cw55-h9jp] Privilege Defined With Unsafe Actions vulnerability in...

  #10361·ranjiGT opened Oct 14, 2026·

  ·
  1

• [GHSA-2mxg-prvg-9jfg] Microsoft Security Advisory CVE-2026-85790 - .NET Information Disclosure Vulnerability

  #10360·rbhanda opened Oct 14, 2026·

  ·
  1

• [GHSA-qqmf-gpg7-g8gw] PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters

  #10358·willmurphyscode opened Oct 14, 2026·

  ·
  1

• [GHSA-vmxq-hqjm-cxv7] Cleartext transmission of sensitive information...

  #10357·ranjiGT opened Oct 14, 2026·

  ·
  1

• [GHSA-w293-vg96-wgc3] undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool

  #10355·auapwllc-dev opened Oct 14, 2026·

  ·
  4

• [GHSA-h6w7-qmcm-q6xr] RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()

  #10353·xnuinside opened Oct 14, 2026·

  ·
  2

• [GHSA-pfh5-g6h6-v95h] Shopware version 6.7 allows the upload of attacker...

  #10351·shyim opened Oct 14, 2026·

  ·
  3

• [GHSA-63x5-9mcr-7447] Flowise before 3.1.4 contains a validation bypass...

  #10350·munimv2 opened Oct 14, 2026·

  ·

• [GHSA-mjgh-prrr-9qw5] Flowise through 3.1.4 resolves SSO and local-password...

  #10348·munimv2 opened Oct 14, 2026·

  ·

• [GHSA-q5vh-j6x8-9f53] Flowise before 3.1.4 contains a remote code execution...

  #10347·munimv2 opened Oct 14, 2026·

  ·

• [GHSA-39p5-2wrr-xh29] Add fix commit reference

  #10346·stanleys12 opened Oct 13, 2026·

  ·

• [GHSA-vfxw-3x8p-2vjr] Add fix commit reference

  #10345·stanleys12 opened Oct 13, 2026·

  ·

• [GHSA-w7jp-mf2v-8342] Add fix commit reference

  #10344·stanleys12 opened Oct 13, 2026·

  ·

• [GHSA-v8cr-9jrc-fwf9] Trail of Bits fickling versions up to and including 0.1...

  #10343·ranjiGT opened Oct 13, 2026·

  ·
  1

• [GHSA-fhj9-24fm-m53p] In affected Snowflake drivers, WORKLOAD_IDENTITY...

  #10340·btackett3 opened Oct 13, 2026·

  ·
  1

• [GHSA-mrhx-c7xc-m3w5] Add affected version range for zod (< 4.6.6)

  #10339·MohamedEslam04 opened Oct 13, 2026·

  ·

• [GHSA-8jxj-xq3g-hvm2] MONAI through 1.6.0 contains a remote code execution...

  #10338·d-shah8 opened Oct 13, 2026·

  ·

• [GHSA-xw5h-cmh3-8j6j] Apache CXF has Improper Restriction of XML External Entity Reference

  #10336·liefke opened Oct 13, 2026·

  ·

• [GHSA-gxr4-xjj5-5px2] Potential XSS vulnerability in jQuery

  #10335·sealonohana opened Oct 13, 2026·

  ·

• [GHSA-xw5h-cmh3-8j6j] Apache CXF has Improper Restriction of XML External Entity Reference

  #10334·dms00 opened Oct 13, 2026·

  ·

• [GHSA-xxc3-xpmc-vmvr] Add fix commit reference

  #10333·stanleys12 opened Oct 12, 2026·

  ·

• [GHSA-pqf9-h8g4-8gmh] Add fix commit reference for GHSA-pqf9-h8g4-8gmh

  #10332·stanleys12 opened Oct 12, 2026·

  ·

• [GHSA-wq92-8x3r-fm38] Add fix commit reference

  #10331·stanleys12 opened Oct 12, 2026·

  ·

• [GHSA-q29v-xc37-wh5m] Docling: Unsafe URI and Path Handling in HTML Backend

  #10330·ranjiGT opened Oct 12, 2026·

  ·
  4