Pull requests

• [GHSA-6q48-6c7w-9gw2] certifi bundles emSign root CAs with compromised intermediate CA keys

  #10465·nemo-lm opened Oct 21, 2026·

  ·
  3

• [GHSA-994w-cp3m-8qh7] XMB is vulnerable to cross-site scripting (XSS) due to...

  #10464·miqrogroove opened Oct 21, 2026·

  ·

• Add fix commit reference for GHSA-xm28-fw2x-fqv2

  #10462·potatohoney-p opened Oct 21, 2026·

  ·

• [GHSA-xw5h-cmh3-8j6j] Apache CXF has Improper Restriction of XML External Entity Reference

  #10461·picgenoa opened Oct 21, 2026·

  ·

• [GHSA-x439-gf26-v2wp] The Cart Abandonment Recovery for WooCommerce WordPress...

  #10460·m4hdhi opened Oct 21, 2026·

  ·
  1

• [GHSA-gg2p-37pv-v7fq] A flaw was found in Feast. The system improperly...

  #10459·patelchaitany opened Oct 21, 2026·

  ·
  1

• [GHSA-692r-grfm-v8x7] @angular/core: Angular Template and Dynamic Component Namespace Bypass leading to Cross-Site Scripting (XSS)

  #10458·Cayan opened Oct 20, 2026·

  ·
  2

• [GHSA-rj75-hqrm-r3gf] PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion

  #10457·mikael-mattsson opened Oct 20, 2026·

  ·
  3

• [GHSA-rj75-hqrm-r3gf] PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion

  #10456·MoOx opened Oct 20, 2026·

  ·
  2

• [GHSA-cv23-7vc5-jfh7] gomarkdown/markdown IsSafeURL panics on short URLs

  #10455·Smove opened Oct 20, 2026·

  ·
  1

• [GHSA-4x29-79gh-6v8q] Detection of Error Condition Without Action vulnerability...

  #10454·hara-satoshi-ymr opened Oct 20, 2026·

  ·
  1

• [GHSA-494j-54xm-rwp3] AIOHTTP: Secure attribute not enforced for shared cookie

  #10453·iamrobertmorrison01-stack opened Oct 20, 2026·

  ·
  1

• GHSA-gfrc-g87h-7h5w: fix Go module name

  #10452·nonkronk opened Oct 20, 2026·

  ·

• GHSA-44xr-mrhh-qm78: fix Go module name

  #10451·nonkronk opened Oct 20, 2026·

  ·

• [GHSA-5x6v-p487-7qh2] LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values

  #10448·thesanjok opened Oct 19, 2026·

  ·
  2

• [GHSA-f8c7-rwf9-fmgm] Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass

  #10447·mickeyking2023-stack opened Oct 19, 2026·

  ·
  1

• [GHSA-j7fq-p9q7-5wfv] Treekill Enables OS Command Injection

  #10446·richardfan0606 opened Oct 19, 2026·

  ·

• [GHSA-m93j-546h-jwjv] An arbitrary code execution vulnerability in Mistral Vibe...

  #10445·portyu9 opened Oct 19, 2026·

  ·

• Withdraw GHSA-hp3w-g68c-fv3c: source CVE-2026-97058 rejected by issuing CNA

  #10444·rkunjappan opened Oct 19, 2026·

  ·

• [GHSA-vvfw-4m39-fjqf] Add patched version 29.1.0

  #10443·mikeflame opened Oct 19, 2026·

  ·
  1

• [GHSA-6rc6-p838-686f] Add patched version 29.1.0

  #10442·mikeflame opened Oct 19, 2026·

  ·

• [GHSA-xr6f-h4x7-r6qp] Add patched version 29.1.0

  #10441·mikeflame opened Oct 19, 2026·

  ·

• [GHSA-8whc-2wmv-ww35] Add patched version 29.1.0

  #10440·mikeflame opened Oct 19, 2026·

  ·

• [GHSA-gph2-j4c9-vhhr] Add patched version 29.1.0

  #10439·mikeflame opened Oct 19, 2026·

  ·

• [GHSA-r7mc-x6x7-cqxx] Add patched version 0.5.0b3.dev97

  #10438·mikeflame opened Oct 19, 2026·

  ·
  1