All pull requests

Pull requests

• Add missing Maven ecosystem packages for 282 CVEs

  #11077·rushitparekh opened Nov 10, 2026·

  ·
  159

• Add sagemaker-core to GHSA-rjrp-m2jw-pv9c

  #11076·dougj-contrast opened Nov 10, 2026·

  ·
  1

• Add opentelemetry-instrumentation-wsgi to GHSA-5rv5-6h4r-h22v

  #11075·dougj-contrast opened Nov 10, 2026·

  ·
  1

• Add langgraph-checkpoint to GHSA-g48c-2wqr-h844

  #11074·dougj-contrast opened Nov 10, 2026·

  ·
  2

• Add langchain-openai to GHSA-2g6r-c272-w58r

  #11073·dougj-contrast opened Nov 10, 2026·

  ·
  1

• Add langchain-core to GHSA-h9j7-5xvc-qhg5

  #11072·dougj-contrast opened Nov 10, 2026·

  ·
  1

• Add llama-index-core to GHSA-rg9h-vx28-xxp5

  #11071·dougj-contrast opened Nov 10, 2026·

  ·
  1

• Add the eight affected vector store packages to GHSA-v3c8-3pr6-gr7p

  #11070·dougj-contrast opened Nov 10, 2026·

  ·
  2

• Add llama-index-core, llama-index-experimental to GHSA-jmgm-gx32-vp4w

  #11069·dougj-contrast opened Nov 10, 2026·

  ·
  2

• Add llama-index-readers-web to GHSA-jvpf-xf32-2w4q

  #11068·dougj-contrast opened Nov 10, 2026·

  ·
  2

• [GHSA-75pg-wvh3-34jr] When coalescing adjacent text nodes in addText and...

  #11067·marquiz opened Nov 10, 2026·

  ·
  1

• [GHSA-vr39-qqr3-x9v4] Mozilla blocked compromised intermediate eMudhra...

  #11065·ultragangster7 opened Nov 10, 2026·

  ·
  3

• Ultragangster7 ghsa 2x8c 95vh gfv4

  #11064·ultragangster7 opened Nov 10, 2026·

  ·
  3

• [GHSA-2x8c-95vh-gfv4] A signal handler race condition was found in OpenSSH's...

  #11063·ultragangster7 opened Nov 10, 2026·

  ·
  3

• GHSA-658g-p7jg-wx5g: include @usebruno/cli 3.2.0 in the affected range

  #11062·muhammadmobi opened Nov 10, 2026·

  ·
  1

• [GHSA-3gmf-p6r4-q8m6] Apache Wicket has a Path Traversal issue

  #11061·ranjiGT opened Nov 10, 2026·

  ·
  1

• [GHSA-rfx8-wq2m-j436] The CMB2 plugin for WordPress is vulnerable to Stored...

  #11060·ictbeheer opened Nov 10, 2026·

  ·
  1

• [GHSA-qpjw-p3jg-59j6] Apache Wicket has a Session Fixation issue

  #11059·ranjiGT opened Nov 10, 2026·

  ·
  1

• [GHSA-jvv4-8wxx-m5r6] Apache Wicket has an Exposure of Sensitive Information to an Unauthorized Actor vulnerability

  #11058·ranjiGT opened Nov 10, 2026·

  ·
  1

• [GHSA-5x9h-93gp-chpj] Apache Wicket has a Cross-site Scripting issue

  #11057·ranjiGT opened Nov 10, 2026·

  ·
  1

• [GHSA-gcqx-w48m-w2h4] CVE-2026-93753 has been rejected

  #11056·apepper opened Nov 10, 2026·

  ·
  1

  1

• [GHSA-4486-gxhx-5mg7] PsySH has Local Privilege Escalation via CWD .psysh.php auto-load

  #11055·ranjiGT opened Nov 10, 2026·

  ·
  2

• [GHSA-3g3m-2fjr-6pw4] glob 13.0.7 contains the fix; narrow the affected range

  #11054·IPEVO-PeterFang opened Nov 10, 2026·

  ·
  1

• [GHSA-wgv4-95jc-33jm] The activestorage gem before 8.1.4.1 for Ruby on Rails,...

  #11053·dlagerro opened Nov 9, 2026·

  ·
  1

• [GHSA-4ppq-6vhc-4q97] Uncontrolled recursion in Apache ZooKeeper. The server...

  #11051·rushitparekh opened Nov 9, 2026·

  ·
  3