All pull requests

Pull requests

• [GHSA-qqj6-54q6-cxv6] Add snowflake-sdk (Node.js) fix commit reference

  #10296·stanleys12 opened Oct 10, 2026·

  ·

• [GHSA-xw5h-cmh3-8j6j] Add fix commit reference

  #10295·stanleys12 opened Oct 10, 2026·

  ·

• [GHSA-r75f-5x8p-qvmc] Add fix commit reference

  #10294·stanleys12 opened Oct 10, 2026·

  ·

• [GHSA-3x58-xr87-2fcj] Cross-site scripting in bluemonday

  #10293·darshanrajagoli opened Oct 10, 2026·

  ·
  1

• [GHSA-h4mf-4v27-hggj] Correct rclone's affected range to < 1.75.0

  #10292·augustocesarperin opened Oct 10, 2026·

  ·

• [GHSA-9468-v6mj-fppw] Add Centrifugo v6 module

  #10290·augustocesarperin opened Oct 9, 2026·

  ·

• [GHSA-p8wg-vrv2-v86f] Handlebars: JavaScript Injection via Own Property Check Bypass

  #10289·brandon-t-elliott opened Oct 9, 2026·

  ·
  2

• [GHSA-jm7w-5684-pvh8] Add fix commit reference

  #10288·stanleys12 opened Oct 9, 2026·

  ·

• [GHSA-6jv9-x5w9-2ccm] Add fix commit reference

  #10287·stanleys12 opened Oct 9, 2026·

  ·

• [GHSA-h2qv-fj59-j46j] Add fix commit reference

  #10286·stanleys12 opened Oct 9, 2026·

  ·

• [GHSA-g9pc-8g42-g6vq] RoadRunner is at risk of HTTP Request/Response Smuggling through vulnerable dependency

  #10283·rustatian opened Oct 9, 2026·

  ·
  1

• [GHSA-27gv-rfvv-22mv] RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields

  #10282·d3fenestrator opened Oct 9, 2026·

  ·
  1

• [GHSA-6c5v-hqjr-5xxp] amqp091-go has a Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload

  #10281·d3fenestrator opened Oct 9, 2026·

  ·
  1

• [GHSA-xwwf-m8fg-p9q2] RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation

  #10280·d3fenestrator opened Oct 9, 2026·

  ·
  1

• [GHSA-rm6m-hrcw-jw33] RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration

  #10279·d3fenestrator opened Oct 9, 2026·

  ·
  1

• [GHSA-r9c8-gcjp-xfwh] RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation

  #10278·d3fenestrator opened Oct 9, 2026·

  ·
  1

• [GHSA-4v58-74mf-rjx3] RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client

  #10277·d3fenestrator opened Oct 9, 2026·

  ·
  1

• [GHSA-j497-x9hr-x34x] RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow

  #10276·d3fenestrator opened Oct 9, 2026·

  ·
  1

• [GHSA-c5pq-fr2g-9jpf] RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr

  #10275·d3fenestrator opened Oct 9, 2026·

  ·
  1

• [GHSA-vp3h-ghgh-jr7g] Nx: Zip-Slip in the self-hosted remote cache

  #10274·suckyourmomonoktagon opened Oct 9, 2026·

  ·
  2

• [GHSA-v76p-62qx-wwq2] ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write

  #10273·JimBobSquarePants opened Oct 9, 2026·

  ·
  3

• [GHSA-jj3q-cwqj-842r] ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp

  #10272·JimBobSquarePants opened Oct 9, 2026·

  ·
  5

• [GHSA-j9gm-c75j-xc9q] ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer

  #10271·JimBobSquarePants opened Oct 9, 2026·

  ·
  4

• [GHSA-jjfr-hcj7-qf5w] ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer

  #10270·JimBobSquarePants opened Oct 9, 2026·

  ·
  4

• [GHSA-wmxv-xphr-5c9g] ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop

  #10269·JimBobSquarePants opened Oct 9, 2026·

  ·
  4