All pull requests

Pull requests

• [GHSA-rj9j-8772-4h6c] Add fix commit reference

  #10407·stanleys12 opened Oct 16, 2026·

  ·

• [GHSA-6rvj-qwjf-3m4q] Add fix commit reference

  #10406·stanleys12 opened Oct 16, 2026·

  ·

• [GHSA-c9ff-59g8-m36q] Add fix commit reference

  #10405·stanleys12 opened Oct 16, 2026·

  ·

• [GHSA-3hh9-752g-5g22] LMCache: 16-bit multimodal hash collision can poison KV cache entries

  #10404·BoJiang03 opened Oct 16, 2026·

  ·
  1

• [GHSA-h42w-g3ch-rjjm] open-multi-agent (@open-multi-agent/core) 1.5.0 through 1...

  #10403·JackChen-me opened Oct 16, 2026·

  ·

• [GHSA-g9pc-8g42-g6vq] Exclude spiral/roadrunner 3.0.0 from the affected range

  #10401·aln-1 opened Oct 16, 2026·

  ·

• [GHSA-vfj7-8cjw-p6xm] braces vulnerable to stack-exhaustion denial of service through deeply nested patterns

  #10400·jorenbroekema opened Oct 16, 2026·

  ·
  4

• [GHSA-79vw-4xm5-93ph] Add missing PyPI package and source metadata

  #10399·ranjiGT opened Oct 16, 2026·

  ·
  2

• Fix affected range for GHSA-3cj3-hqcr-g934

  #10398·yanjost opened Oct 16, 2026·

  ·
  1

• [GHSA-wrvx-pxxf-g8fg] Insufficient Session Expiration vulnerability in Apache...

  #10397·hara-satoshi-ymr opened Oct 16, 2026·

  ·
  4

• [GHSA-4x29-79gh-6v8q] Detection of Error Condition Without Action vulnerability...

  #10396·hara-satoshi-ymr opened Oct 16, 2026·

  ·
  2

• [GHSA-xjhv-pp2r-6f82] BoxLite has a Timeout Bypass Vulnerability

  #10395·LiveNL opened Oct 16, 2026·

  ·
  1

• [GHSA-h3mr-2w3q-jcv9] Time-of-check Time-of-use (TOCTOU) Race Condition...

  #10394·hara-satoshi-ymr opened Oct 16, 2026·

  ·
  2

• [GHSA-95xr-cq6h-vwr3] Jodit Editor vulnerable to cross-site scripting

  #10393·xdan opened Oct 16, 2026·

  ·

• [GHSA-g8qj-vp23-742m] Off-by-one Error vulnerability in Apache Tomcat impacting...

  #10392·hara-satoshi-ymr opened Oct 16, 2026·

  ·
  3

• [GHSA-f525-44xv-f2qj] Improper Input Validation vulnerability in Apache Tomcat...

  #10391·hara-satoshi-ymr opened Oct 16, 2026·

  ·
  2

• [GHSA-42hx-vrxx-5r6v] Jodit Editor vulnerable to Cross-site Scripting

  #10390·xdan opened Oct 16, 2026·

  ·

• [GHSA-334f-vvp4-7g6p] Microsoft Security Advisory CVE-2026-70159 - ASP.NET Core Denial of Service Vulnerability

  #10389·bribrothers opened Oct 15, 2026·

  ·
  2

• [GHSA-8v8x-cx79-35w7] React Router SSR XSS in ScrollRestoration

  #10388·avidpupilskateboards opened Oct 15, 2026·

  ·
  1

• [GHSA-j8rh-479h-cp32] Add affected range for axios 0.x (patched in 0.34.0)

  #10387·akhan-pn opened Oct 15, 2026·

  ·

• [GHSA-44g4-m2mj-wpvx] Add affected range for axios 0.x (patched in 0.34.0)

  #10386·akhan-pn opened Oct 15, 2026·

  ·

• [GHSA-mghh-pgcx-3jjj] Add affected range for axios 0.x (patched in 0.34.0)

  #10385·akhan-pn opened Oct 15, 2026·

  ·

• [GHSA-m358-vx46-jcm4] Add summary

  #10384·ErenYeager1836 opened Oct 15, 2026·

  ·

• [GHSA-fm4g-76c9-7w69] Http4s: DigestAuth nonce map grows unbounded

  #10383·rossabaker opened Oct 15, 2026·

  ·
  2

• [GHSA-9xww-74xv-gjfp] Http4s: DigestAuth allows replay of captured requests

  #10382·rossabaker opened Oct 15, 2026·

  ·
  2