All pull requests

Pull requests

• Map Apache Pulsar Maven artifact for CVE-2026-105869

  #10491·nazeeh111 opened Oct 22, 2026·

  ·

• [GHSA-5xmw-vc9v-4wf2] Pillow has a heap buffer overflow with nested list coordinates

  #10490·p-linnane opened Oct 22, 2026·

  ·
  3

• Correct Podman v4/v5 module matching for CVE-2026-94603

  #10489·nazeeh111 opened Oct 22, 2026·

  ·

• Improve GHSA-6phc-8h2j-74hw

  #10488·alexinteritus1984 opened Oct 22, 2026·

  ·

• Record pyload-ng 0.5.0b3.dev97 as the fixed release for CVE-2026-35459

  #10487·nazeeh111 opened Oct 22, 2026·

  ·

• Add n8n affected package and supported fix ranges for CVE-2026-103259

  #10486·nazeeh111 opened Oct 22, 2026·

  ·

• Add credits section to GHSA-2hhw-p8mg-jrm6.json

  #10485·lirantal opened Oct 22, 2026·

  ·
  1

• [GHSA-6phc-8h2j-74hw] The Ultimate Member – User Profile, Registration, Login,...

  #10484·alexinteritus1984 opened Oct 22, 2026·

  ·
  3

• [GHSA-q9v2-7m5w-4693] expr-eval vulnerable to Code Execution

  #10483·adriank31 opened Oct 22, 2026·

  ·

• [GHSA-p7fg-763f-g4gf] Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool

  #10482·Myeongseok-Kang opened Oct 22, 2026·

  ·
  1

• [GHSA-rj75-hqrm-r3gf] PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion

  #10481·markscott-ms opened Oct 21, 2026·

  ·
  3

• [GHSA-xr8f-h2gw-9xh6] OAuth 2.1 Provider: Unprivileged users can register OAuth clients

  #10480·mikeflame opened Oct 21, 2026·

  ·
  3

• [GHSA-f66q-9rf6-8795] Flask-Security-Too: WebAuthn reauthentication freshness bypass via cross-user assertion

  #10479·mikeflame opened Oct 21, 2026·

  ·
  4

• [GHSA-hm7r-c7qw-ghp6] fast-jwt accepts unknown crit header extensions (RFC 7515 violation)

  #10478·mikeflame opened Oct 21, 2026·

  ·
  1

• Add affected Go package and range to GHSA-958w-8f9q-43j8

  #10477·0x00-sys opened Oct 21, 2026·

  ·
  1

• Add affected Go package and range to GHSA-vcwj-2rq7-52fc

  #10476·0x00-sys opened Oct 21, 2026·

  ·
  1

• Add affected npm package and range to GHSA-fc5q-39xc-vjpf

  #10475·0x00-sys opened Oct 21, 2026·

  ·
  1

• Add affected npm package and range to GHSA-2f48-3555-fpx6

  #10474·0x00-sys opened Oct 21, 2026·

  ·
  1

• Add affected npm package and range to GHSA-chf7-hjrj-qwh8

  #10473·0x00-sys opened Oct 21, 2026·

  ·
  1

• Add affected npm package and range to GHSA-53p6-95m7-9c4h

  #10472·0x00-sys opened Oct 21, 2026·

  ·
  1

• Add affected npm package and range to GHSA-mpvc-jhp3-x7r5

  #10471·0x00-sys opened Oct 21, 2026·

  ·
  1

• Add affected npm package and range to GHSA-fp33-4hh4-xjj5

  #10470·0x00-sys opened Oct 21, 2026·

  ·
  1

• Add affected npm package and range to GHSA-3pr5-x7xf-mg4g

  #10469·0x00-sys opened Oct 21, 2026·

  ·
  1

• Add affected npm package and range to GHSA-6wfj-92cw-88vg

  #10468·0x00-sys opened Oct 21, 2026·

  ·
  1

• Add affected Go package and range to GHSA-gx9w-9qq8-m485

  #10467·0x00-sys opened Oct 21, 2026·

  ·
  1