All pull requests

Pull requests

• [GHSA-5rr2-29jr-5v63] Apache Karaf exposes a JMX MBeanServer guarded by KarafMB...

  #9878·oscerd opened Sep 30, 2026·

  ·

• [GHSA-q6wq-m79c-29mj] org.apache.karaf.config.core.impl.ConfigRepositoryImpl#up...

  #9877·oscerd opened Sep 30, 2026·

  ·

• [GHSA-pq4f-45cw-mm5m] The jdbc shell command scope shipped no org.apache.karaf....

  #9876·oscerd opened Sep 30, 2026·

  ·

• [GHSA-8g53-m82p-xqf5] Apache Karaf's shell/SSH command security is enforced by ...

  #9875·oscerd opened Sep 30, 2026·

  ·

• [GHSA-jcpw-3g4p-9hmj] Apache Airflow's Teradata provider embedded cloud storage...

  #9874·oscerd opened Sep 30, 2026·

  ·

• [GHSA-g995-5p95-2fw6] Apache Airflow's Google provider built Google Drive searc...

  #9873·oscerd opened Sep 30, 2026·

  ·

• [GHSA-x776-f7fc-mx6q] Apache Airflow's Snowflake provider did not validate the ...

  #9872·oscerd opened Sep 30, 2026·

  ·

• [GHSA-w623-968q-qp55] The Apache Airflow Teradata provider's compute-cluster ex...

  #9871·oscerd opened Sep 30, 2026·

  ·

• [GHSA-jp7g-xv94-gfw8] Apache XmlSchema doesn't limit how deeply schema structur...

  #9870·oscerd opened Sep 30, 2026·

  ·

• [GHSA-p4rx-69jj-g5w2] Apache XmlSchema doesn't limit how deeply schema imports ...

  #9869·oscerd opened Sep 30, 2026·

  ·

• [GHSA-9wgm-rwmh-4mcv] The Apache XmlSchema walker (xmlschema-walker) doesn't de...

  #9868·oscerd opened Sep 30, 2026·

  ·

• [GHSA-rjm2-8fmf-7h67] The /datasources/unauth-datasource endpoint does not prop...

  #9867·oscerd opened Sep 30, 2026·

  ·

• [GHSA-6m78-8x87-73vx] The scriptPath parameter is incorporated into a /bin/sh -...

  #9866·oscerd opened Sep 30, 2026·

  ·

• [GHSA-cmrj-w8v5-mv8v] A missing authorization vulnerability exists in the `quer...

  #9865·oscerd opened Sep 30, 2026·

  ·

• [GHSA-7jf5-57qv-9q6r] An incorrect authorization check in Apache DolphinSchedul...

  #9864·oscerd opened Sep 30, 2026·

  ·

• [GHSA-68pc-ppw3-f56j] An authentication bypass vulnerability exists in the prot...

  #9863·oscerd opened Sep 30, 2026·

  ·

• [GHSA-j93x-5w9j-p4gc] An improper authorization check in Apache DolphinSchedule...

  #9862·oscerd opened Sep 30, 2026·

  ·

• [GHSA-xhgf-wr45-fhhj] An improper authorization vulnerability exists in the han...

  #9861·oscerd opened Sep 30, 2026·

  ·

• [GHSA-848v-j2j6-p92w] Apache Polaris allows an authenticated principal with per...

  #9860·oscerd opened Sep 30, 2026·

  ·

• Add affected versions for GHSA-c9pv-p24c-23v6

  #9859·satyam-umrao opened Sep 30, 2026·

  ·
  1

• [GHSA-cxf4-7mrp-vvpr] Flysystem: WhitespacePathNormalizer's control-character (CorruptedPathDetected) check is bypassed by malformed UTF-8 in the path, affecting every adapter

  #9858·Unifex opened Sep 30, 2026·

  ·
  3

• [GHSA-rrmf-rvhw-rf47] PyTorch is vulnerable to memory corruption through its torch.jit.script function

  #9857·Ankush-Pathak opened Sep 29, 2026Contributor·

  ·

• [GHSA-fhjh-xqqj-cjf5] LightGBM through 4.7.0 fails to validate child and split...

  #9856·portyu9 opened Sep 29, 2026·

  ·
  1

• [GHSA-pm27-vjq7-f5fv] snappy-java through 1.1.10.8 contains a buffer overflow...

  #9855·portyu9 opened Sep 29, 2026·

  ·
  1

• [GHSA-gr8h-7qg5-vh27] OOM Denial of Service via Unbounded Map Pre-Sizing in...

  #9854·portyu9 opened Sep 29, 2026·

  ·