16 Pull requests merged by 9 people

• [GHSA-jr6h-r7vg-f9mc] org.ini4j allows attackers to cause a Denial of Service (DoS)

  #5687 merged Jun 4, 2025

• [GHSA-rhx6-c78j-4q9w] Unpatched path-to-regexp ReDoS in 0.1.x

  #5685 merged Jun 3, 2025

• [GHSA-rhx6-c78j-4q9w] Unpatched path-to-regexp ReDoS in 0.1.x

  #5603 merged Jun 3, 2025

• [GHSA-4wp7-92pw-q264] CVE-2024-38820 ensured Locale-independent, lowercase...

  #5683 merged Jun 2, 2025

• [GHSA-56pw-mpj4-fxww] Bundled libwebp in Pillow vulnerable

  #5666 merged May 30, 2025

• [GHSA-xh6m-7cr7-xx66] Missing permission checks on Hazelcast client protocol

  #5682 merged May 30, 2025

• [GHSA-4gc7-5j7h-4qph] Spring Framework DataBinder Case Sensitive Match Exception

  #5680 merged May 29, 2025

• [GHSA-7chv-rrw6-w6fc] XStream is vulnerable to a Remote Command Execution attack

  #5679 merged May 29, 2025

• [GHSA-xhfx-hgmf-v6vp] Potential Host Header Poisoning on misconfigured servers

  #5678 merged May 29, 2025

• [GHSA-j4f2-536g-r55m] Resource exhaustion in engine.io

  #5676 merged May 29, 2025

• [GHSA-c52f-pq47-2r9j] plugin.yaml file allows for duplicate entries in helm

  #5674 merged May 29, 2025

• [GHSA-qhrx-hcm6-pmrw] Unsafe deserialization in SmtpTransport in CakePHP

  #5673 merged May 29, 2025

• [GHSA-pgwj-prpq-jpc2] Symfony Service IDs Allow Injection

  #5672 merged May 29, 2025

• [GHSA-jp4x-w63m-7wgm] Prototype Pollution in hoek

  #5671 merged May 29, 2025

• [GHSA-w578-j992-554x] Ansible fails to properly mark lookup-plugin results as unsafe

  #5670 merged May 29, 2025

• [GHSA-jc7r-v6fg-2gpf] Apache CXF TLS hostname verification does not work correctly with com.sun.net.ssl.*

  #5669 merged May 29, 2025

1 Pull request opened by 1 person

• [GHSA-wrxf-x8rm-6ggg] Fluent Fluentd and Fluent-ui use default password

  #5686 opened Jun 4, 2025

2 Issues closed by 2 people

• GHSA-h97m-ww89-6jmq - missing CVE

  #5668 closed May 29, 2025

• GHSA-h97m-ww89-6jmq - CVE missing

  #5667 closed May 29, 2025

2 Issues opened by 2 people

• Advisory GHSA-g434-3q2j-hj4r lists incorrect fixed version

  #5688 opened Jun 4, 2025

• Correction Required in GHSA-2pcj-76hj-xqhm Advisory

  #5684 opened Jun 2, 2025

2 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• List Perl as an environment

  #3536 commented on May 29, 2025 • 0 new comments

• [GHSA-c678-jfcj-6jmf] A vulnerability was found in PyTorch 2.6.0+cu124. It has...

  #5512 commented on Jun 3, 2025 • 0 new comments