All pull requests

Pull requests

• [GHSA-p7fg-763f-g4gf] Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool

  #10482·Myeongseok-Kang opened Oct 22, 2026·

  ·
  1

• [GHSA-rj75-hqrm-r3gf] PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion

  #10481·markscott-ms opened Oct 21, 2026·

  ·
  3

• [GHSA-xr8f-h2gw-9xh6] OAuth 2.1 Provider: Unprivileged users can register OAuth clients

  #10480·mikeflame opened Oct 21, 2026·

  ·
  3

• [GHSA-f66q-9rf6-8795] Flask-Security-Too: WebAuthn reauthentication freshness bypass via cross-user assertion

  #10479·mikeflame opened Oct 21, 2026·

  ·
  4

• [GHSA-hm7r-c7qw-ghp6] fast-jwt accepts unknown crit header extensions (RFC 7515 violation)

  #10478·mikeflame opened Oct 21, 2026·

  ·
  1

• Add affected Go package and range to GHSA-958w-8f9q-43j8

  #10477·0x00-sys opened Oct 21, 2026·

  ·
  1

• Add affected Go package and range to GHSA-vcwj-2rq7-52fc

  #10476·0x00-sys opened Oct 21, 2026·

  ·
  1

• Add affected npm package and range to GHSA-fc5q-39xc-vjpf

  #10475·0x00-sys opened Oct 21, 2026·

  ·
  1

• Add affected npm package and range to GHSA-2f48-3555-fpx6

  #10474·0x00-sys opened Oct 21, 2026·

  ·
  1

• Add affected npm package and range to GHSA-chf7-hjrj-qwh8

  #10473·0x00-sys opened Oct 21, 2026·

  ·
  1

• Add affected npm package and range to GHSA-53p6-95m7-9c4h

  #10472·0x00-sys opened Oct 21, 2026·

  ·
  1

• Add affected npm package and range to GHSA-mpvc-jhp3-x7r5

  #10471·0x00-sys opened Oct 21, 2026·

  ·
  1

• Add affected npm package and range to GHSA-fp33-4hh4-xjj5

  #10470·0x00-sys opened Oct 21, 2026·

  ·
  1

• Add affected npm package and range to GHSA-3pr5-x7xf-mg4g

  #10469·0x00-sys opened Oct 21, 2026·

  ·
  1

• Add affected npm package and range to GHSA-6wfj-92cw-88vg

  #10468·0x00-sys opened Oct 21, 2026·

  ·
  1

• Add affected Go package and range to GHSA-gx9w-9qq8-m485

  #10467·0x00-sys opened Oct 21, 2026·

  ·
  1

• [GHSA-r265-6x28-5pfq] A vulnerability was found in IBPhoenix ibWebAdmin up to 1...

  #10466·reevespaul opened Oct 21, 2026·

  ·

• [GHSA-6q48-6c7w-9gw2] certifi bundles emSign root CAs with compromised intermediate CA keys

  #10465·nemo-lm opened Oct 21, 2026·

  ·
  4

• [GHSA-994w-cp3m-8qh7] XMB is vulnerable to cross-site scripting (XSS) due to...

  #10464·miqrogroove opened Oct 21, 2026·

  ·

• Add fix commit reference for GHSA-xm28-fw2x-fqv2

  #10462·potatohoney-p opened Oct 21, 2026·

  ·

• [GHSA-xw5h-cmh3-8j6j] Apache CXF has Improper Restriction of XML External Entity Reference

  #10461·picgenoa opened Oct 21, 2026·

  ·

• [GHSA-x439-gf26-v2wp] The Cart Abandonment Recovery for WooCommerce WordPress...

  #10460·m4hdhi opened Oct 21, 2026·

  ·
  1

• [GHSA-gg2p-37pv-v7fq] A flaw was found in Feast. The system improperly...

  #10459·patelchaitany opened Oct 21, 2026·

  ·
  1

• [GHSA-692r-grfm-v8x7] @angular/core: Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)

  #10458·Cayan opened Oct 20, 2026·

  ·
  2

• [GHSA-rj75-hqrm-r3gf] PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion

  #10457·mikael-mattsson opened Oct 20, 2026·

  ·
  3