All pull requests

Pull requests

• [GHSA-9392-pj54-qqf8] Add patched version 29.1.0

  #10777·mikeflame opened Oct 29, 2026·

  ·
  1

• [GHSA-ffw8-fwxp-h64w] Add patched version 29.1.0

  #10776·mikeflame opened Oct 29, 2026·

  ·
  1

• [GHSA-ff5q-cc22-fgp4] Add patched version 29.1.0

  #10775·mikeflame opened Oct 29, 2026·

  ·
  1

• [GHSA-ghcv-22jf-vfxm] Add patched version 29.1.0

  #10774·mikeflame opened Oct 29, 2026·

  ·
  2

• [GHSA-qm9p-p5pw-jrx2] Add patched version 29.1.0

  #10773·mikeflame opened Oct 29, 2026·

  ·
  2

• [GHSA-j432-4w3j-3w8j] Add patched version 29.1.0

  #10772·mikeflame opened Oct 29, 2026·

  ·
  1

• [GHSA-2hch-c97c-g99x] Add patched version 29.1.0

  #10771·mikeflame opened Oct 29, 2026·

  ·
  2

• [GHSA-ccq9-r5cw-5hwq] Add patched version 29.1.0

  #10770·mikeflame opened Oct 29, 2026·

  ·
  1

• [GHSA-wc3f-xc32-435f] Add patched version 29.1.0

  #10769·mikeflame opened Oct 29, 2026·

  ·
  1

• [GHSA-834v-8h66-3h79] Happy DOM: Incomplete fix for CVE-2026-33943: unsanitized import alias leads to host code execution

  #10768·iAlturki opened Oct 29, 2026·

  ·
  2

• [GHSA-cg8m-r9f2-5wm2] Narrow the affected range to black 26.10.0

  #10767·iseletsk opened Oct 29, 2026·

  ·

• [GHSA-x8rm-f576-gq67] graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service

  #10766·otavlna opened Oct 29, 2026·

  ·
  1

• [GHSA-3jp2-3mrg-2vxc] Remove patched version 4.0.0

  #10765·Rania193 opened Oct 29, 2026·

  ·
  1

• [GHSA-2j8r-3c22-8565] Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability

  #10764·ranjiGT opened Oct 29, 2026·

  ·
  1

• [GHSA-56v8-86gj-66jp] Spring Boot DevTools remote secret comparison is vulnerable to timing attacks

  #10763·ranjiGT opened Oct 29, 2026·

  ·
  1

• [GHSA-wg36-wvj6-r67p] Composer has a command injection via malicious perforce repository

  #10762·ranjiGT opened Oct 29, 2026·

  ·
  2

• [GHSA-763v-5pjm-fx36] Correct first affected Strands session-storage release

  #10760·sylvesterkaczmarek opened Oct 29, 2026·

  ·

• [GHSA-x8rm-f576-gq67] graphql-scalars: affected range starts at 1.24.1

  #10759·Pteam-sa opened Oct 29, 2026·

  ·

• [GHSA-p3jp-9v83-76w9] Microsoft Security Advisory CVE-2026-111497 - .NET Brotli Decoder Out-of-bounds Write Vulnerability

  #10758·rein-netanel opened Oct 29, 2026·

  ·

• [GHSA-w93q-cq9w-58p7] SunEditor Embed Plugin has DOM XSS via External Script Element After Iframe Embed

  #10757·brianandle opened Oct 29, 2026·

  ·
  2

• Align GHSA-qwgh-2vcv-g2f7 affected range with maintainer advisory

  #10756·mcf-capx opened Oct 28, 2026·

  ·

• [GHSA-qwgh-2vcv-g2f7] block_buffer: panic corrupts inline buffer position

  #10755·aodl opened Oct 28, 2026·

  ·
  1

• [GHSA-qwgh-2vcv-g2f7] Narrow block_buffer affected range to >= 0.11.0, < 0.12.1

  #10754·rldyourmnd opened Oct 28, 2026·

  ·

• [GHSA-54v7-gqcw-27wj] The read function in file thinkphp\library\think\template...

  #10753·ugur-ercan opened Oct 28, 2026·

  ·

• [GHSA-gg35-v6g4-rw3c] The fetch function in file thinkphp\library\think...

  #10752·ugur-ercan opened Oct 28, 2026·

  ·