6 Pull requests merged by 3 people

• [GHSA-6xp3-p59p-q4fj] go-pg SQL injection vulnerability via the component /types/append_value.go

  #6017 merged Aug 14, 2025

• [GHSA-6628-q6j9-w8vg] gRPC Reachable Assertion issue

  #5999 merged Aug 13, 2025

• [GHSA-9hxf-ppjv-w6rq] gRPC connection termination issue

  #5998 merged Aug 13, 2025

• [GHSA-cfgp-2977-2fmm] Connection confusion in gRPC

  #5997 merged Aug 13, 2025

• Note remediation for GHSA-jg74-mwgw-v6x3

  #5991 merged Aug 12, 2025

• Correctly annotate affected package

  #5990 merged Aug 12, 2025

3 Pull requests opened by 3 people

• [GHSA-m5xw-hwxw-fq3j] Deserialization of untrusted data in IPC and Parquet...

  #5988 opened Aug 12, 2025

• [GHSA-6v2p-p543-phr9] golang.org/x/oauth2 Improper Validation of Syntactic Correctness of Input vulnerability

  #5995 opened Aug 13, 2025

• [GHSA-mrr8-v49w-3333] sweetalert2 v11.6.14 and above contains potentially undesirable behavior

  #6014 opened Aug 14, 2025

1 Issue opened by 1 person

• Advisory GHSA-hcg3-q754-cr77 has incorrect package listed

  #5996 opened Aug 13, 2025

1 Unresolved conversation

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Add support for purl

  #10 commented on Aug 12, 2025 • 0 new comments