All pull requests

Pull requests

• [GHSA-9f4q-q82q-4359] Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks

  #9914·chrikrah opened Oct 1, 2026·

  ·

• [GHSA-cr42-rg2m-mq4q] Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks

  #9913·chrikrah opened Oct 1, 2026·

  ·

• Fix source links and add fix commit for GHSA-6rmh-7xcm-cpxj

  #9911·shmulc8 opened Sep 30, 2026·

  ·
  1

• Fix source links and add fix commit for GHSA-gmjg-hv98-qggq

  #9910·shmulc8 opened Sep 30, 2026·

  ·
  1

• Fix source links and add fix reference for GHSA-3643-7v76-5cj2

  #9909·shmulc8 opened Sep 30, 2026·

  ·
  1

• [GHSA-25mm-vqww-gc8q] The Viable URL Media Uploader plugin for WordPress is...

  #9908·tatkelthuzad opened Sep 30, 2026·

  ·

• [GHSA-86p5-cmgc-c94w] In Eclipse BaSyx Go Components versions up to and...

  #9907·portyu9 opened Sep 30, 2026·

  ·

• [GHSA-8m2g-8cgm-3vcp] DeepSeek Harness before 0.1.2-alpha.1 contains an...

  #9906·portyu9 opened Sep 30, 2026·

  ·

• [GHSA-5r2p-pjr8-7fh7] SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality

  #9905·fahran-wallace opened Sep 30, 2026·

  ·
  2

• [GHSA-f4cq-mfh7-4385] Improper Verification of Cryptographic Signature and Impr...

  #9904·oscerd opened Sep 30, 2026·

  ·

• [GHSA-jfxw-f7pw-76rc] Improper Verification of Source of a Communication Channe...

  #9903·oscerd opened Sep 30, 2026·

  ·

• [GHSA-3jwv-g6m6-vg8m] Integer Overflow, Improper Validation of Array Index, Unc...

  #9902·oscerd opened Sep 30, 2026·

  ·

• [GHSA-c34c-r8hh-6grp] Memory Allocation with Excessive Size Value, Allocation o...

  #9901·oscerd opened Sep 30, 2026·

  ·

• [GHSA-v223-2p4c-wp64] Authentication bypass in sshd-core in Apache MINA SSHD ve...

  #9900·oscerd opened Sep 30, 2026·

  ·

• [GHSA-qc4p-9828-mv83] Apache MINA SSHD is a Java library for client-side and se...

  #9899·oscerd opened Sep 30, 2026·

  ·

• [GHSA-mf93-r5x4-wxqr] Possible memory exhaustion in SFTP clients (DefaultSftpCl...

  #9898·oscerd opened Sep 30, 2026·

  ·

• [GHSA-6wm4-w8x6-4vvr] Uncontrolled resource consumption in component ssd-scp in...

  #9897·oscerd opened Sep 30, 2026·

  ·

• [GHSA-fj5v-qh2p-6v8f] Server-side memory exhaustion in Apache MINA SSHD 1.0.0 t...

  #9896·oscerd opened Sep 30, 2026·

  ·

• [GHSA-9jwj-xh8m-f4vf] Improper input validation in sshd-git in Apache MINA SSHD...

  #9895·oscerd opened Sep 30, 2026·

  ·

• [GHSA-wm5x-hv45-v2v6] A missing check in LdapPasswordAuthenticator in component...

  #9894·oscerd opened Sep 30, 2026·

  ·

• [GHSA-qrc3-w53g-j8gv] Authentication bypass via LDAP injection in component ssh...

  #9893·oscerd opened Sep 30, 2026·

  ·

• [GHSA-5x6j-m6jc-q2r5] Apache WSS4J accepted attacker-controlled derived-key len...

  #9892·oscerd opened Sep 30, 2026·

  ·

• [GHSA-4c9g-74h5-78r7] An authentication bypass in the DOM security processor in...

  #9891·oscerd opened Sep 30, 2026·

  ·

• [GHSA-pw3c-6w58-28w4] Apache WSS4J remembers the Nonce of each UsernameToken it...

  #9890·oscerd opened Sep 30, 2026·

  ·

• [GHSA-6j9g-8fxc-25hq] Flowise (packages flowise and flowise-components) in...

  #9889·portyu9 opened Sep 30, 2026·

  ·