All pull requests

Pull requests

• [GHSA-7j59-v9qr-6fq9] Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect

  #9779·checkmator opened Sep 25, 2026·

  ·

• [GHSA-wrpj-755p-x363] Apache Airflow Provider for Databricks: TLS Certificate Verification is Disabled in Databricks Provider K8s Token Exchange

  #9778·checkmator opened Sep 25, 2026·

  ·

• [GHSA-xq3m-2v4x-88gg] Arbitrary code execution in protobufjs

  #9777·checkmator opened Sep 25, 2026·

  ·
  1

• [GHSA-2v4p-qf9q-27wj] gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing :authority and Host headers

  #9776·akselaase opened Sep 25, 2026·

  ·
  1

• [GHSA-qpqm-x4vh-jm23] A missing authorization vulnerability exists in the Task ...

  #9775·oscerd opened Sep 25, 2026·

  ·

• [GHSA-42x2-wfr5-pcgx] Apache Airflow HashiCorp provider: the HashiCorp Vault se...

  #9774·oscerd opened Sep 25, 2026·

  ·

• [GHSA-f4hp-rmr7-r7v8] PyTorch is Vulnerable to Memory Consumption through pad_packed_sequence Function

  #9773·JacobMenge opened Sep 24, 2026·

  ·
  1

  1

• [GHSA-qqmf-gpg7-g8gw] Add pytorch-lightning as affected package; correct lightning fixed version

  #9771·arielbosa opened Sep 24, 2026·

  ·
  1

• [GHSA-vmjq-hvgq-2wv4] Correct 9router affected range

  #9769·TayfurYldz opened Sep 24, 2026·

  ·
  1

• [GHSA-j8w6-2r9h-cxhj] Fix affected range for mindsdb

  #9767·rmz-oz opened Sep 24, 2026·

  ·

• [GHSA-282f-qqgm-c34q] Fix WebJar package for jsonpointer

  #9766·rmz-oz opened Sep 24, 2026·

  ·

• [GHSA-pgjv-jrg2-gq3v] Move dompurify from PyPI to npm

  #9764·rmz-oz opened Sep 24, 2026·

  ·

• [GHSA-h6p3-p4vx-wr8q] Move dompurify from PyPI to npm

  #9763·rmz-oz opened Sep 24, 2026·

  ·

• [GHSA-rg7c-g689-fr3x] Clarify affected-version wording and link patched releases

  #9762·Yoha02 opened Sep 24, 2026·

  ·

• [GHSA-c47j-g3rg-hrfq] CLIENT_CERT authentication does not fail as expected for ...

  #9759·oscerd opened Sep 23, 2026·

  ·

• [GHSA-xwrc-v28h-528j] Improper handling of length parameter inconsistency vulne...

  #9758·oscerd opened Sep 23, 2026·

  ·

• [GHSA-6ff5-mwrj-376m] Inconsistent interpretation of HTTP/2 requests ('HTTP Req...

  #9757·oscerd opened Sep 23, 2026·

  ·

• [GHSA-gpfr-7w77-mp48] Inconsistent Interpretation of HTTP Requests ('HTTP Reque...

  #9756·oscerd opened Sep 23, 2026·

  ·

• [GHSA-hvg5-8g86-xm44] Incomplete cleanup vulnerability in Apache Tomcat allows ...

  #9755·oscerd opened Sep 23, 2026·

  ·

• [GHSA-rpxf-vjhq-9cv9] Allocation of resources without limits or throttling vuln...

  #9754·oscerd opened Sep 23, 2026·

  ·

• [GHSA-q9fp-9gfr-vj9g] Improper Authentication vulnerability in Apache Tomcat. W...

  #9753·oscerd opened Sep 23, 2026·

  ·

• [GHSA-r5gx-4gq8-822g] Missing release of resource after effective lifetime, Com...

  #9752·oscerd opened Sep 23, 2026·

  ·

• [GHSA-9cg7-2q68-g3mq] Uncontrolled Resource Consumption vulnerability in Apache...

  #9751·oscerd opened Sep 23, 2026·

  ·

• [GHSA-28v4-2v86-58cc] Concurrent Execution using Shared Resource with Improper ...

  #9750·oscerd opened Sep 23, 2026·

  ·

• [GHSA-cf68-55f3-8gfw] Improper Check for Certificate Revocation vulnerability i...

  #9749·oscerd opened Sep 23, 2026·

  ·