# leads

identifier: gh_issue_3750564487
source: github_issue
status: new
created_at: 2025-12-21 01:06:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3750564487", "title": "CVE-2020-35728 (High) detected in jackson-databind-2.8.5.jar", "url": "https://github.com/ar-abed/sample/issues/178", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "sample", "body_preview": "## CVE-2020-35728 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jackson-databind-2.8.5.jar</b></summary>\n\n<p>General data-binding functionality for Jackson: works on core streaming API</p>\n<p>Library home page: <a href=\"http://fasterxml.com/\">http://fasterxml.com/</a></p>\n<p>Path to dependency file: /build.gradle</p>\n<p>Path to vulnerable library: /.gradle/cach", "created": "2025-12-21T00:38:54Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2020-35728 (High) detected in jackson-databind-2.8.5.jar ## CVE-2020-35728 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3750564318
source: github_issue
status: new
created_at: 2025-12-21 01:06:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3750564318", "title": "CVE-2020-35491 (High) detected in jackson-databind-2.8.5.jar", "url": "https://github.com/ar-abed/sample/issues/177", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "sample", "body_preview": "## CVE-2020-35491 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jackson-databind-2.8.5.jar</b></summary>\n\n<p>General data-binding functionality for Jackson: works on core streaming API</p>\n<p>Library home page: <a href=\"http://fasterxml.com/\">http://fasterxml.com/</a></p>\n<p>Path to dependency file: /build.gradle</p>\n<p>Path to vulnerable library: /.gradle/cach", "created": "2025-12-21T00:38:35Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2020-35491 (High) detected in jackson-databind-2.8.5.jar ## CVE-2020-35491 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3750596772
source: github_issue
status: new
created_at: 2025-12-21 01:18:49
data:
  {"source": "github_issue", "identifier": "gh_issue_3750596772", "title": "jsonwebtoken-9.0.2.tgz: 1 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/temichelle13/StudyPlanner/issues/62", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "StudyPlanner", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jsonwebtoken-9.0.2.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/temichelle13/StudyPlanner/commit/40099fc5bdca74a64acfa0e4723a56c46b7ea483\">40099fc5bdca74a64acfa0e4723a56c46b7ea483</a></p></details>\n\n## Vulnerabi", "created": "2025-12-21T01:17:19Z", "labels": ["Mend: dependency security vulnerability"], "context": "jsonwebtoken-9.0.2.tgz: 1 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jsonwebtoken-9.0.2.tgz</b></summary>\n\n<p></p>\n<"}


identifier: gh_issue_3750596759
source: github_issue
status: new
created_at: 2025-12-21 01:18:49
data:
  {"source": "github_issue", "identifier": "gh_issue_3750596759", "title": "morgan-1.10.0.tgz: 1 vulnerabilities (highest severity is: 3.4)", "url": "https://github.com/temichelle13/StudyPlanner/issues/61", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "StudyPlanner", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>morgan-1.10.0.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /node_modules/on-headers/package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/temichelle13/StudyPlanner/commit/40099fc5bdca74a64acfa0e4723a56c46b7ea483\">40099fc5bdca74a64acfa0e4723a56c46b7ea483</a></p></det", "created": "2025-12-21T01:17:17Z", "labels": ["Mend: dependency security vulnerability"], "context": "morgan-1.10.0.tgz: 1 vulnerabilities (highest severity is: 3.4) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>morgan-1.10.0.tgz</b></summary>\n\n<p></p>\n<p>Pat"}


identifier: gh_issue_3750595693
source: github_issue
status: new
created_at: 2025-12-21 01:18:49
data:
  {"source": "github_issue", "identifier": "gh_issue_3750595693", "title": "Weekly Maintenance Report - December 21, 2025", "url": "https://github.com/vishalsachdev/canvas-mcp/issues/44", "user": "claude[bot]", "user_url": "https://github.com/apps/claude", "repo": "canvas-mcp", "body_preview": "# Weekly Maintenance Report - December 21, 2025\n\n## Executive Summary\n\nComprehensive weekly maintenance check completed for Canvas MCP server. Overall health is **GOOD** with minor optimization opportunities identified. Recent documentation improvements (Dec 14) have significantly improved maintainability.\n\n---\n\n## 1. Dependency Analysis\n\n### Current Versions (Installed vs Minimum Requirements)\n| Package | Required | Installed | Status | Notes |\n|---------|----------|-----------|--------|-------", "created": "2025-12-21T01:16:16Z", "labels": ["documentation", "enhancement", "maintenance"], "context": "Weekly Maintenance Report - December 21, 2025 # Weekly Maintenance Report - December 21, 2025\n\n## Executive Summary\n\nComprehensive weekly maintenance check completed for Canvas MCP server. Overall health is **GOOD** with minor optimization opport"}


identifier: gh_issue_3750594869
source: github_issue
status: new
created_at: 2025-12-21 01:18:49
data:
  {"source": "github_issue", "identifier": "gh_issue_3750594869", "title": "Security audit failed: 9 issues found", "url": "https://github.com/go-dart-rpc/user-service/issues/49", "user": "hekkos-demo-app[bot]", "user_url": "https://github.com/apps/hekkos-demo-app", "repo": "user-service", "body_preview": "Hekkos has identified security configuration issues in this repository based on [SLSA v1.2-rc2](https://slsa.dev/) requirements.\n\n<details open>\n<summary><strong>Security audit summary</strong></summary>\n\n**8** of **12** security checks are failing.\n\n| Security Check | Status | Issues |\n|---|---|---|\n| [Branch Protection](#50) | \u274c Failing | 1 issue |\n| [CODEOWNERS](#51) | \u274c Failing | 1 issue |\n| Code Scanning | \u2705 Passing | - |\n| [Secret Scanning](#52) | \u274c Failing | 1 issue |\n| [Dependency Review", "created": "2025-12-21T01:15:28Z", "labels": ["security-audit"], "context": "Security audit failed: 9 issues found Hekkos has identified security configuration issues in this repository based on [SLSA v1.2-rc2](https://slsa.dev/) requirements.\n\n<details open>\n<summary><strong>Security audit summary</strong></summa"}


identifier: gh_issue_3750591835
source: github_issue
status: new
created_at: 2025-12-21 01:18:49
data:
  {"source": "github_issue", "identifier": "gh_issue_3750591835", "title": "CVE-2021-0341 (High) detected in okhttp-3.12.13.jar", "url": "https://github.com/GSUnitedLabs/NTAPlatform/issues/17", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "NTAPlatform", "body_preview": "## CVE-2021-0341 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>okhttp-3.12.13.jar</b></summary>\n\n<p></p>\n<p>Library home page: <a href=\"https://github.com/square/okhttp\">https://github.com/square/okhttp</a></p>\n<p>Path to vulnerable library: /lib/GitHub_API/okhttp-3.12.13.jar</p>\n<p>\n\nDependency Hierarchy:\n  - :x: **okhttp-3.12.13.jar** (Vulnerable Library)\n<p>", "created": "2025-12-21T01:10:11Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-0341 (High) detected in okhttp-3.12.13.jar ## CVE-2021-0341 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3751483949
source: github_issue
status: new
created_at: 2025-12-22 02:46:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3751483949", "title": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide", "url": "https://github.com/demos-aatmmr/evgenii_demo/issues/1", "user": "repository-wizard[bot]", "user_url": "https://github.com/apps/repository-wizard", "repo": "evgenii_demo", "body_preview": "# Welcome to demos-aatmmr/evgenii_demo!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Checklist\n\n- [ ] Review and update the repository description\n- [ ] Set up branch protection rules\n- [ ] Configure repository settings (Issues, Projects, Wiki, etc.)\n- [ ] Add repository topics/tags for discoverability\n- [ ] Set up automated workflows (if needed)\n\n## \ud83d\udd12 Security & Best Practices\n\n### B", "created": "2025-12-21T19:04:29Z", "labels": ["documentation", "good first issue", "setup"], "context": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide # Welcome to demos-aatmmr/evgenii_demo!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Ch"}


identifier: gh_issue_3751176544
source: github_issue
status: new
created_at: 2025-12-22 02:46:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3751176544", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/ranjan11021991/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @ranjan11021991! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each st", "created": "2025-12-21T14:04:02Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @ranjan11021991! Welcom"}


identifier: gh_issue_3751022988
source: github_issue
status: new
created_at: 2025-12-22 02:46:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3751022988", "title": "Proposal: Introduce Renovate for automated dependency management", "url": "https://github.com/code-yeongyu/oh-my-opencode/issues/155", "user": "gtg7784", "user_url": "https://github.com/gtg7784", "repo": "oh-my-opencode", "body_preview": "## Proposal\n\nHow about introducing [Renovate](https://github.com/renovatebot/renovate) to automate dependency management?\n\n## Background\n\n- Currently managing dependency updates manually\n- Hard to immediately notice security patches or new versions\n\n## Benefits of Renovate\n\n1. **Automatic PR creation**: Auto-generates update PRs when new versions are released\n2. **Grouping**: Bundle related packages into a single PR\n3. **Scheduling**: Configure PRs to be created only at preferred times\n4. **Secu", "created": "2025-12-21T10:53:04Z", "labels": [], "context": "Proposal: Introduce Renovate for automated dependency management ## Proposal\n\nHow about introducing [Renovate](https://github.com/renovatebot/renovate) to automate dependency management?\n\n## Background\n\n- Currently managing dependency updates manually\n- Hard to imm"}


identifier: gh_issue_3750787903
source: github_issue
status: new
created_at: 2025-12-22 02:46:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3750787903", "title": "Daily AI Tools Digest", "url": "https://github.com/proteaNirav/rocketgpt/issues/218", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "rocketgpt", "body_preview": "# Daily AI Tools Digest\n\n### https://openai.com/blog/rss.xml\n\n<details>\n<summary>raw</summary>\n\nRedirecting...\n\n\n</details>\n\n### https://www.anthropic.com/news/rss.xml\n\n<details>\n<summary>raw</summary>\n\n<!DOCTYPE html><html id=\"__next_error__\"><head><meta charSet=\"utf-8\"/><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"/><link rel=\"preload\" as=\"script\" fetchPriority=\"low\" nonce=\"NTM1NjU3OGItODZhNS00ZjJmLTg0NTYtZjI0MjhjM2E2Y2My\" href=\"/_next/static/chunks/55ee5a30d5bf1901.js\"/>", "created": "2025-12-21T06:05:38Z", "labels": ["research", "automation"], "context": "Daily AI Tools Digest # Daily AI Tools Digest\n\n### https://openai.com/blog/rss.xml\n\n<details>\n<summary>raw</summary>\n\nRedirecting...\n\n\n</details>\n\n### https://www.anthropic.com/news/rss.xml\n\n<details>\n<summary>raw</summary"}


identifier: gh_issue_3750628220
source: github_issue
status: new
created_at: 2025-12-22 02:46:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3750628220", "title": "Dependency Review: 2 issues found", "url": "https://github.com/go-dart-rpc/user-service/issues/72", "user": "hekkos-demo-app[bot]", "user_url": "https://github.com/apps/hekkos-demo-app", "repo": "user-service", "body_preview": "Hekkos found **2** Dependency Review configuration issues in this repository.\n\n<sub>This is part of the main [security audit](#68).</sub>\n\n<details open>\n<summary><strong>Issue details</strong></summary>\n\n- **Issue 1**: Open Dependabot alerts detected - vulnerable dependencies must be updated\n- **Issue 2**: Critical severity dependency vulnerabilities detected - immediate action required\n\n</details>\n\n---\n\n### Why this matters\n\nDependency review helps track known issues in third-party code. This ", "created": "2025-12-21T01:58:08Z", "labels": ["security-audit", "security-audit:dependency-review"], "context": "Dependency Review: 2 issues found Hekkos found **2** Dependency Review configuration issues in this repository.\n\n<sub>This is part of the main [security audit](#68).</sub>\n\n<details open>\n<summary><strong>Issue details</strong></summa"}


identifier: gh_issue_3751208274
source: github_issue
status: new
created_at: 2025-12-22 02:46:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3751208274", "title": "Dependency Dashboard", "url": "https://github.com/renovate-pro-dev-automation/sherri-sanders_gh_gw0_954389/issues/2", "user": "renovate-pro-dev[bot]", "user_url": "https://github.com/apps/renovate-pro-dev", "repo": "sherri-sanders_gh_gw0_954389", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Open\n\nThe following updates have all been created. To force a retry/rebase of any, click on a checkbox below.\n\n - [ ] <!-- rebase-branch=renovate/maven-org.apache.logging.log4j-lo", "created": "2025-12-21T14:40:05Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - ["}


identifier: gh_issue_3751208203
source: github_issue
status: new
created_at: 2025-12-22 02:46:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3751208203", "title": "Dependency Dashboard", "url": "https://github.com/renovate-pro-dev-automation-1/jeffery-bush_gh_gw1_954316/issues/2", "user": "renovate-pro-dev[bot]", "user_url": "https://github.com/apps/renovate-pro-dev", "repo": "jeffery-bush_gh_gw1_954316", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Open\n\nThe following updates have all been created. To force a retry/rebase of any, click on a checkbox below.\n\n - [ ] <!-- rebase-branch=renovate/maven-org.apache.logging.log4j-lo", "created": "2025-12-21T14:40:00Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - ["}


identifier: gh_issue_3752081693
source: github_issue
status: new
created_at: 2025-12-22 02:59:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3752081693", "title": "ejs-2.7.4.tgz: 2 vulnerabilities (highest severity is: 9.8) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Matthew-Smith_1222_025754_gh_gw0/issues/4", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Matthew-Smith_1222_025754_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>ejs-2.7.4.tgz</strong></summary>\n\nEmbedded JavaScript templates\n\n**Library home page:** [ https://registry.npmjs.org/ejs/-/ejs-2.7.4.tgz ](https://registry.npmjs.org/ejs/-/ejs-2.7.4.tgz)\n\n**Path to dependency file:** /package.json\n\n**Path to vulnerable library:** /node_modules/ejs/package.json\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- |", "created": "2025-12-22T02:59:17Z", "labels": [], "context": "ejs-2.7.4.tgz: 2 vulnerabilities (highest severity is: 9.8) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>ejs-2.7.4.tgz</strong></summary>\n\nEmbedded JavaScript templates\n\n**Library home page:** [ https://registry.npmjs.org/ejs/-/ejs-2.7.4.tgz ](https://r"}


identifier: gh_issue_3752081609
source: github_issue
status: new
created_at: 2025-12-22 02:59:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3752081609", "title": "pg-promise-4.8.1.tgz: 2 vulnerabilities (highest severity is: 9.8) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Matthew-Smith_1222_025754_gh_gw0/issues/3", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Matthew-Smith_1222_025754_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>pg-promise-4.8.1.tgz</strong></summary>\n\nPromises interface for PostgreSQL\n\n\n\n**Path to dependency file:** /package.json\n\n**Path to vulnerable library:** /node_modules/pg-promise/package.json\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2017-16082 ](https://www.mend", "created": "2025-12-22T02:59:16Z", "labels": [], "context": "pg-promise-4.8.1.tgz: 2 vulnerabilities (highest severity is: 9.8) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>pg-promise-4.8.1.tgz</strong></summary>\n\nPromises interface for PostgreSQL\n\n\n\n**Path to dependency file:** /package.json\n\n**Path to vulnerable libra"}


identifier: gh_issue_3752081449
source: github_issue
status: new
created_at: 2025-12-22 02:59:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3752081449", "title": "ejs-locals-1.0.2.tgz: 4 vulnerabilities (highest severity is: 9.8) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Matthew-Smith_1222_025754_gh_gw0/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Matthew-Smith_1222_025754_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>ejs-locals-1.0.2.tgz</strong></summary>\n\nExpress 3.x locals for layout, partial and blocks.\n\n\n\n**Path to dependency file:** /package.json\n\n**Path to vulnerable library:** /node_modules/ejs-locals/package.json\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2017-1000228", "created": "2025-12-22T02:59:15Z", "labels": [], "context": "ejs-locals-1.0.2.tgz: 4 vulnerabilities (highest severity is: 9.8) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>ejs-locals-1.0.2.tgz</strong></summary>\n\nExpress 3.x locals for layout, partial and blocks.\n\n\n\n**Path to dependency file:** /package.json\n\n**Path to"}


identifier: gh_issue_3752081530
source: github_issue
status: new
created_at: 2025-12-22 02:59:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3752081530", "title": "morgan-1.6.1.tgz: 1 vulnerabilities (highest severity is: 9.8) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Matthew-Smith_1222_025754_gh_gw0/issues/2", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Matthew-Smith_1222_025754_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>morgan-1.6.1.tgz</strong></summary>\n\nHTTP request logger middleware for node.js\n\n**Library home page:** [ https://registry.npmjs.org/morgan/-/morgan-1.6.1.tgz ](https://registry.npmjs.org/morgan/-/morgan-1.6.1.tgz)\n\n**Path to dependency file:** /package.json\n\n**Path to vulnerable library:** /node_modules/morgan/package.json\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediatio", "created": "2025-12-22T02:59:15Z", "labels": [], "context": "morgan-1.6.1.tgz: 1 vulnerabilities (highest severity is: 9.8) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>morgan-1.6.1.tgz</strong></summary>\n\nHTTP request logger middleware for node.js\n\n**Library home page:** [ https://registry.npmjs.org/morgan/-/morgan"}


identifier: gh_issue_3752067987
source: github_issue
status: new
created_at: 2025-12-22 02:59:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3752067987", "title": "High/Critical Vulnerabilities Detected in Landscape UI", "url": "https://github.com/canonical/landscape-ui/issues/440", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "landscape-ui", "body_preview": "Vulnerability scan found high/critical issues or failed to run.\n\nPlease check the workflow run logs for the 'Run security scan' step for details.\n\n### Scan Output\n```\nScan request submitted.\nScan request is running.\nScan has succeeded.\nScan request information:\n  Started at:        2025-12-22 02:50:39+00:00\n  Completed at:      2025-12-22 02:50:45+00:00\n  Scanner:           trivy\n  Target:            s3://secscan-attachments/9f782d4b-cc09-4f43-8bb7-2ce4af6f0a34\n  Target type:       container-ima", "created": "2025-12-22T02:50:47Z", "labels": ["bug", "security"], "context": "High/Critical Vulnerabilities Detected in Landscape UI Vulnerability scan found high/critical issues or failed to run.\n\nPlease check the workflow run logs for the 'Run security scan' step for details.\n\n### Scan Output\n```\nScan request submitted.\nScan requ"}


identifier: gh_issue_3752081844
source: github_issue
status: new
created_at: 2025-12-22 03:00:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3752081844", "title": "body-parser-1.13.3.tgz: 2 vulnerabilities (highest severity is: 7.5) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Matthew-Smith_1222_025754_gh_gw0/issues/7", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Matthew-Smith_1222_025754_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>body-parser-1.13.3.tgz</strong></summary>\n\nNode.js body parsing middleware\n\n\n\n**Path to dependency file:** /package.json\n\n**Path to vulnerable library:** /node_modules/body-parser/package.json\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2017-1000048 ](https://www.m", "created": "2025-12-22T02:59:18Z", "labels": [], "context": "body-parser-1.13.3.tgz: 2 vulnerabilities (highest severity is: 7.5) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>body-parser-1.13.3.tgz</strong></summary>\n\nNode.js body parsing middleware\n\n\n\n**Path to dependency file:** /package.json\n\n**Path to vulnerable libra"}


identifier: gh_issue_3752081830
source: github_issue
status: new
created_at: 2025-12-22 03:00:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3752081830", "title": "express-4.13.4.tgz: 2 vulnerabilities (highest severity is: 7.5) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Matthew-Smith_1222_025754_gh_gw0/issues/6", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Matthew-Smith_1222_025754_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>express-4.13.4.tgz</strong></summary>\n\nFast, unopinionated, minimalist web framework\n\n\n\n**Path to dependency file:** /package.json\n\n**Path to vulnerable library:** /node_modules/express/package.json\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2016-10539 ](https://w", "created": "2025-12-22T02:59:18Z", "labels": [], "context": "express-4.13.4.tgz: 2 vulnerabilities (highest severity is: 7.5) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>express-4.13.4.tgz</strong></summary>\n\nFast, unopinionated, minimalist web framework\n\n\n\n**Path to dependency file:** /package.json\n\n**Path to vulner"}


identifier: gh_issue_3752081800
source: github_issue
status: new
created_at: 2025-12-22 03:00:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3752081800", "title": "log4js-0.6.38.tgz: 1 vulnerabilities (highest severity is: 5.5) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Matthew-Smith_1222_025754_gh_gw0/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Matthew-Smith_1222_025754_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4js-0.6.38.tgz</strong></summary>\n\nPort of Log4js to work with node.\n\n**Library home page:** [ https://registry.npmjs.org/log4js/-/log4js-0.6.38.tgz ](https://registry.npmjs.org/log4js/-/log4js-0.6.38.tgz)\n\n**Path to dependency file:** /package.json\n\n**Path to vulnerable library:** /node_modules/log4js/package.json\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Avai", "created": "2025-12-22T02:59:17Z", "labels": [], "context": "log4js-0.6.38.tgz: 1 vulnerabilities (highest severity is: 5.5) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4js-0.6.38.tgz</strong></summary>\n\nPort of Log4js to work with node.\n\n**Library home page:** [ https://registry.npmjs.org/log4js/-/log4js-0.6.38."}


identifier: gh_issue_3752111350
source: github_issue
status: new
created_at: 2025-12-22 03:12:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3752111350", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Sherry-Erickson_1222_031027_gh_gw2/issues/2", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Sherry-Erickson_1222_031027_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -----", "created": "2025-12-22T03:12:00Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3752111262
source: github_issue
status: new
created_at: 2025-12-22 03:12:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3752111262", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Sherry-Erickson_1222_031027_gh_gw2/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Sherry-Erickson_1222_031027_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-22T03:11:59Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3751937638
source: github_issue
status: new
created_at: 2025-12-22 03:12:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3751937638", "title": "[RELEASE] Release v1.11.0", "url": "https://github.com/longhorn/longhorn/issues/12371", "user": "longhorn-github-bot[bot]", "user_url": "https://github.com/apps/longhorn-github-bot", "repo": "longhorn", "body_preview": "## What's the task? Please describe\n\nAction items for releasing v1.11.0\n\n## Roles\n\n- Release captain: @shuo-wu  <!--responsible for RD efforts of release development and coordinating with QA captain-->\n- QA captain: @roger-ryao  <!--responsible for coordinating QA efforts of release testing tasks-->\n\n## Describe the sub-tasks\n\n### Pre-Release\n\n#### Release Captain Tasks\n\n> [!IMPORTANT]\n> The Release Captain needs to finish the following items\n\n- [ ] This tasks are only needed when doing a featur", "created": "2025-12-22T01:40:47Z", "labels": ["area/install-uninstall-upgrade", "release/task"], "context": "[RELEASE] Release v1.11.0 ## What's the task? Please describe\n\nAction items for releasing v1.11.0\n\n## Roles\n\n- Release captain: @shuo-wu  <!--responsible for RD efforts of release development and coordinating with QA captain--"}


identifier: gh_issue_3751887588
source: github_issue
status: new
created_at: 2025-12-22 03:12:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3751887588", "title": "core-agent-linux v4.3.37 (devel)", "url": "https://github.com/QubesOS/updates-status-devel/issues/9", "user": "qubesos-bot", "user_url": "https://github.com/qubesos-bot", "repo": "updates-status-devel", "body_preview": "Update of core-agent-linux to v4.3.37 for Qubes OS devel, see comments below for details and build status.\n\nFrom commit: https://github.com/QubesOS/qubes-core-agent-linux/commit/1f542b7588d44105f5c74534eefe7cb6e4e77e74\n\n[Changes since previous version](https://github.com/QubesOS/qubes-core-agent-linux/compare/v4.3.36...v4.3.37):\nQubesOS/qubes-core-agent-linux@1f542b75 version 4.3.37\nQubesOS/qubes-core-agent-linux@2be3d29b Merge remote-tracking branch 'origin/pr/621'\nQubesOS/qubes-core-agent-linu", "created": "2025-12-22T01:11:37Z", "labels": ["devel-vm-fc41-cur-test", "devel-vm-fc42-cur-test", "devel-vm-fc43-cur-test", "devel-vm-bookworm-failed", "devel-vm-trixie-failed"], "context": "core-agent-linux v4.3.37 (devel) Update of core-agent-linux to v4.3.37 for Qubes OS devel, see comments below for details and build status.\n\nFrom commit: https://github.com/QubesOS/qubes-core-agent-linux/commit/1f542b7588d44105f5c745"}


identifier: gh_issue_3751863559
source: github_issue
status: new
created_at: 2025-12-22 03:12:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3751863559", "title": "Textpattern 4.9.1 release flight plan", "url": "https://github.com/textpattern/textpattern/issues/2036", "user": "petecooper", "user_url": "https://github.com/petecooper", "repo": "textpattern", "body_preview": "We are targeting Textpattern 4.9.1 to address bugs in 4.9.0 and provide further refinements.\n\nThe release flight plan does not currently include any accommodations for a beta release.\n\nPlease update this post and subsequent replies with tasks etc as needed, assigning yourself or others where appropriate.\n\n**Timeline**\n\n* GA release: from December 2025\n\n** Milestone(s)\n\n* [4.9.1](https://github.com/textpattern/textpattern/issues?q=is%3Aissue%20state%3Aopen%20milestone%3Av4.9.1)\n* [4.9](https://gi", "created": "2025-12-22T00:51:50Z", "labels": ["priority 2: high", "release flight plan", "meta"], "context": "Textpattern 4.9.1 release flight plan We are targeting Textpattern 4.9.1 to address bugs in 4.9.0 and provide further refinements.\n\nThe release flight plan does not currently include any accommodations for a beta release.\n\nPlease update t"}


identifier: gh_issue_3751846416
source: github_issue
status: new
created_at: 2025-12-22 03:12:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3751846416", "title": "Fix erk kit install --force Deleting Source Files [erk-plan]", "url": "https://github.com/dagster-io/erk/issues/3291", "user": "schrockn", "user_url": "https://github.com/schrockn", "repo": "erk", "body_preview": "<!-- WARNING: Machine-generated. Manual edits may break erk tooling. -->\n<!-- erk:metadata-block:plan-header -->\n<details>\n<summary><code>plan-header</code></summary>\n\n```yaml\n\nschema_version: '2'\ncreated_at: '2025-12-22T00:39:29.471168+00:00'\ncreated_by: schrockn\nlast_dispatched_run_id: null\nlast_dispatched_node_id: null\nlast_dispatched_at: null\nlast_local_impl_at: null\nlast_local_impl_event: null\nlast_local_impl_session: null\nlast_local_impl_user: null\nlast_remote_impl_at: null\nsource_plan_iss", "created": "2025-12-22T00:39:30Z", "labels": ["erk-plan"], "context": "Fix erk kit install --force Deleting Source Files [erk-plan] <!-- WARNING: Machine-generated. Manual edits may break erk tooling. -->\n<!-- erk:metadata-block:plan-header -->\n<details>\n<summary><code>plan-header</code></summary>\n\n```yaml\n\nschema_version: '2'\ncre"}


identifier: gh_issue_3751362728
source: github_issue
status: new
created_at: 2025-12-22 03:12:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3751362728", "title": "[MEDIUM] Verify GitHub Actions are using latest stable versions", "url": "https://github.com/JacobPEvans/ai-assistant-instructions/issues/241", "user": "JacobPEvans", "user_url": "https://github.com/JacobPEvans", "repo": "ai-assistant-instructions", "body_preview": "## Description\n\nAudit all GitHub Actions dependencies to ensure they're using the latest stable versions for security patches and feature improvements.\n\n## Current Action Versions\n\n### Core Actions\n- `actions/checkout@v6` (13 workflows)\n- `actions/setup-node@v4` (1 workflow)\n\n### Third-Party Actions  \n- `anthropics/claude-code-action@v1` (4 workflows)\n- `DavidAnson/markdownlint-cli2-action@v22` (1 workflow)\n- `ibiqlik/action-yamllint@v3` (1 workflow)\n- `lycheeverse/lychee-action@v2` (1 workflow)", "created": "2025-12-21T17:07:38Z", "labels": ["ready-for-dev", "ai-created", "priority:medium", "type:ci", "human-reviewed"], "context": "[MEDIUM] Verify GitHub Actions are using latest stable versions ## Description\n\nAudit all GitHub Actions dependencies to ensure they're using the latest stable versions for security patches and feature improvements.\n\n## Current Action Versions\n\n### Core Actions\n- "}


identifier: gh_issue_3751955394
source: github_issue
status: new
created_at: 2025-12-22 03:24:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3751955394", "title": "Broken links found by automated link checker", "url": "https://github.com/adunkman/dunkman.me/issues/352", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "dunkman.me", "body_preview": "# Summary\n\n| Status         | Count |\n|----------------|-------|\n| \ud83d\udd0d Total       | 1583  |\n| \u2705 Successful  | 1419  |\n| \u23f3 Timeouts    | 0     |\n| \ud83d\udd00 Redirected  | 105   |\n| \ud83d\udc7b Excluded    | 25    |\n| \u2753 Unknown     | 0     |\n| \ud83d\udeab Errors      | 34    |\n| \u26d4 Unsupported | 0     |\n\n## Errors per input\n\n### Errors in /app/public/blog/2013/next-desk-terra/index.html\n\n* [ERROR] <https://www.monitorsinmotion.com/boa/> | Network error: SSL certificate verification failed. Check certificate validity\n\n### Error", "created": "2025-12-22T01:53:27Z", "labels": [], "context": "Broken links found by automated link checker # Summary\n\n| Status         | Count |\n|----------------|-------|\n| \ud83d\udd0d Total       | 1583  |\n| \u2705 Successful  | 1419  |\n| \u23f3 Timeouts    | 0     |\n| \ud83d\udd00 Redirected  | 105   |\n| \ud83d\udc7b Excluded    | 25    |\n| \u2753 U"}


identifier: gh_issue_3751699813
source: github_issue
status: new
created_at: 2025-12-22 03:24:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3751699813", "title": "Feature: Image signing", "url": "https://github.com/intility/erlang-oci-builder/issues/10", "user": "rhblind", "user_url": "https://github.com/rhblind", "repo": "erlang-oci-builder", "body_preview": "## Summary\n\nSign images with ECDSA keys (cosign-compatible format) to prove authenticity and enable verification by Kubernetes admission controllers.\n\n## Motivation\n\nSupply chain security requires image verification. Kubernetes admission controllers (Kyverno, OPA Gatekeeper) can enforce signature verification before allowing image deployment.\n\n## Approach\n\nNative key-based signing using Erlang's `crypto` module. Zero external dependencies. Uses same OCI artifact push mechanism as SBOM.\n\n```bash\n", "created": "2025-12-21T22:33:52Z", "labels": ["enhancement"], "context": "Feature: Image signing ## Summary\n\nSign images with ECDSA keys (cosign-compatible format) to prove authenticity and enable verification by Kubernetes admission controllers.\n\n## Motivation\n\nSupply chain security requires ima"}


identifier: gh_issue_3751699450
source: github_issue
status: new
created_at: 2025-12-22 03:24:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3751699450", "title": "Feature: SBOM generation", "url": "https://github.com/intility/erlang-oci-builder/issues/9", "user": "rhblind", "user_url": "https://github.com/rhblind", "repo": "erlang-oci-builder", "body_preview": "## Summary\n\nGenerate Software Bill of Materials (SBOM) in SPDX format, embedded in images and attached as OCI artifacts.\n\n## Motivation\n\nSupply chain security and compliance requirements increasingly mandate SBOMs. GitHub, Microsoft, and ko all use SPDX format.\n\n## Format\n\nSPDX 2.2 (ISO/IEC 5962:2021) - the industry standard used by GitHub and Microsoft.\n\n## SBOM Contents\n\n- Application name + version\n- All dependencies from `rebar.lock` / `mix.lock` (name, version, source)\n- ERTS version (if in", "created": "2025-12-21T22:33:22Z", "labels": ["enhancement"], "context": "Feature: SBOM generation ## Summary\n\nGenerate Software Bill of Materials (SBOM) in SPDX format, embedded in images and attached as OCI artifacts.\n\n## Motivation\n\nSupply chain security and compliance requirements increasingly "}


identifier: gh_issue_3751517479
source: github_issue
status: new
created_at: 2025-12-22 03:24:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3751517479", "title": "DERCAS 01: Policy Validation Copilot - Agentic LangGraph Architecture Specification", "url": "https://github.com/lacedeno11/pruebas/issues/5", "user": "lacedeno11", "user_url": "https://github.com/lacedeno11", "repo": "pruebas", "body_preview": "<open-swe-issue-content>DERCAS 01 \u2013 Cabina Aseguradoras Policy Validation Copilot (TO-BE) Casos de Uso Agentic (LangGraph) + ML + Guardrails Versi\u00f3n: TO-BE Agentic / LangGraph. Especificaci\u00f3n funcional a nivel Analista de Software. HITL se mantiene \u00fanicamente como compuerta (gate) para baja/mediana confianza, riesgo alto, anomal\u00edas, conflictos o cambios de pol\u00edtica. digraph PolicyValidationCopilot_LangGraph_TO_BE { rankdir=LR; bgcolor=\"white\"; labelloc=\"t\"; label=\"TO-BE: Policy Validation Copilo", "created": "2025-12-21T19:41:24Z", "labels": [], "context": "DERCAS 01: Policy Validation Copilot - Agentic LangGraph Architecture Specification <open-swe-issue-content>DERCAS 01 \u2013 Cabina Aseguradoras Policy Validation Copilot (TO-BE) Casos de Uso Agentic (LangGraph) + ML + Guardrails Versi\u00f3n: TO-BE Agentic / LangGraph. Especificaci\u00f3n funciona"}


identifier: gh_issue_3751487246
source: github_issue
status: new
created_at: 2025-12-22 03:24:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3751487246", "title": "time", "url": "https://github.com/enzooliveiradossantos1997-hash/enzooliveiradossantos1997-hash/issues/2", "user": "enzooliveiradossantos1997-hash", "user_url": "https://github.com/enzooliveiradossantos1997-hash", "repo": "enzooliveiradossantos1997-hash", "body_preview": "Repository Topics / Tags\nCopiar c\u00f3digo\n\nartificial-intelligence\nagritech\nfood-security\nloss-reduction\npython\nmachine-learning\neconomic-impact\nRepository Structure\nCopiar c\u00f3digo\n\nFarmSense-AI/\n\u2502\n\u251c\u2500\u2500 src/\n\u2502   \u2514\u2500\u2500 ai_engine.py\n\u2502\n\u251c\u2500\u2500 reports/\n\u2502   \u2514\u2500\u2500 generate_report.py\n\u2502\n\u251c\u2500\u2500 requirements.txt\n\u251c\u2500\u2500 README.md\n\u2514\u2500\u2500 LICENSE\nREADME.md (COPY EXACTLY)\nCopiar c\u00f3digo\nMd\n# Farm Sense AI\n\nFarm Sense AI is a functional artificial intelligence software prototype\ndesigned to estimate and reduce agricultural losses a", "created": "2025-12-21T19:07:48Z", "labels": [], "context": "time Repository Topics / Tags\nCopiar c\u00f3digo\n\nartificial-intelligence\nagritech\nfood-security\nloss-reduction\npython\nmachine-learning\neconomic-impact\nRepository Structure\nCopiar c\u00f3digo\n\nFarmSense-AI/\n\u2502\n\u251c\u2500\u2500 sr"}


identifier: gh_issue_3752086551
source: github_issue
status: new
created_at: 2025-12-22 03:24:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3752086551", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-22", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/356", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (180)\n1. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n2. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:439`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n3. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:450`", "created": "2025-12-22T03:01:52Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-22 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (180)\n1. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without "}


identifier: gh_issue_3752053329
source: github_issue
status: new
created_at: 2025-12-22 03:24:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3752053329", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/keypress-notifications/issues/49", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "keypress-notifications", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (17)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-22T02:41:26Z", "labels": ["automated", "security", "critical"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3752053057
source: github_issue
status: new
created_at: 2025-12-22 03:24:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3752053057", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/file-insights/issues/129", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "file-insights", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (16)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-22T02:41:13Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3752051491
source: github_issue
status: new
created_at: 2025-12-22 03:24:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3752051491", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/additional-contexts-menu/issues/110", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "additional-contexts-menu", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (17)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-22T02:40:16Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3751953946
source: github_issue
status: new
created_at: 2025-12-22 03:24:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3751953946", "title": "\ud83d\udee1\ufe0f Weekly Security Report - 2025-12-22", "url": "https://github.com/t3-nico/boxlog-app/issues/829", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "boxlog-app", "body_preview": "# \ud83d\udee1\ufe0f Weekly Security Report\n\n# \ud83d\udee1\ufe0f BoxLog Security Report\n\n**Generated**: 2025-12-22T01:52:35.717Z\n**Project**: BoxLog App\n**Environment**: Production\n\n---\n\n\n## 1. \u4f9d\u5b58\u95a2\u4fc2\u306e\u8106\u5f31\u6027\u30b9\u30ad\u30e3\u30f3 \ud83d\udd34 Critical\n\n| Severity | Count |\n|----------|-------|\n| \ud83d\udd34 Critical | 1 |\n| \ud83d\udfe0 High | 2 |\n| \ud83d\udfe1 Moderate | 4 |\n| \ud83d\udd35 Low | 4 |\n| \u2139\ufe0f Info | 0 |\n\n**Total Vulnerabilities**: 11\n\n\u26a0\ufe0f **Action Required**: Run `npm audit fix` to resolve vulnerabilities.\n\n<details>\n<summary>Raw npm audit output</summary>\n\n```\n{\n  \"auditReportVersion\": 2", "created": "2025-12-22T01:52:39Z", "labels": ["security", "weekly-report", "documentation"], "context": "\ud83d\udee1\ufe0f Weekly Security Report - 2025-12-22 # \ud83d\udee1\ufe0f Weekly Security Report\n\n# \ud83d\udee1\ufe0f BoxLog Security Report\n\n**Generated**: 2025-12-22T01:52:35.717Z\n**Project**: BoxLog App\n**Environment**: Production\n\n---\n\n\n## 1. \u4f9d\u5b58\u95a2\u4fc2\u306e\u8106\u5f31\u6027\u30b9\u30ad\u30e3\u30f3 \ud83d\udd34 Critical\n\n| Severity |"}


identifier: gh_issue_3752158940
source: github_issue
status: new
created_at: 2025-12-22 03:36:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3752158940", "title": "\ud83d\udea8 Security Vulnerabilities Detected", "url": "https://github.com/naretakis/eapd-next/issues/35", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "eapd-next", "body_preview": "\n## Security Audit Results\n\n**High vulnerabilities:** 1\n**Critical vulnerabilities:** 1\n\n### Recommended Actions\n1. Review the vulnerabilities listed below\n2. Update affected packages using `npm update`\n3. For packages without fixes, consider alternatives\n4. Run `npm audit fix` to automatically fix issues where possible\n\n### Audit Details\n```json\nundefined\n```\n\nThis issue was automatically created by the security audit workflow.\n", "created": "2025-12-22T03:27:39Z", "labels": ["security", "priority: high", "needs-triage"], "context": "\ud83d\udea8 Security Vulnerabilities Detected \n## Security Audit Results\n\n**High vulnerabilities:** 1\n**Critical vulnerabilities:** 1\n\n### Recommended Actions\n1. Review the vulnerabilities listed below\n2. Update affected packages using `npm updat"}


identifier: gh_issue_3752121865
source: github_issue
status: new
created_at: 2025-12-22 03:49:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3752121865", "title": "Dependabot\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30e9\u30fc\u30c8\u306e\u89e3\u6d88\u72b6\u6cc1\u3068\u5bfe\u5fdc\u65b9\u91dd", "url": "https://github.com/n-air-app/n-air-app/issues/1073", "user": "koizuka", "user_url": "https://github.com/koizuka", "repo": "n-air-app", "body_preview": "## \u6982\u8981\n**\u4f5c\u6210\u65e5: 2025\u5e7412\u670822\u65e5**\n\n2025\u5e7412\u670822\u65e5\u6642\u70b9\u3067\u30019\u3064\u306eDependabot\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30e9\u30fc\u30c8\u304c\u5b58\u5728\u3057\u3066\u3044\u307e\u3059\u3002\u5404\u30a2\u30e9\u30fc\u30c8\u306b\u3064\u3044\u3066\u3001\u30d6\u30ed\u30c3\u30af\u8981\u56e0\u3068\u89e3\u6d88\u65b9\u6cd5\u3092\u5206\u6790\u3057\u307e\u3057\u305f\u3002\n\n## \u30a2\u30e9\u30fc\u30c8\u4e00\u89a7\u3068\u89e3\u6d88\u53ef\u5426\uff082025\u5e7412\u670822\u65e5\u6642\u70b9\uff09\n\n| Alert | \u30d1\u30c3\u30b1\u30fc\u30b8 | CVE | \u91cd\u5927\u5ea6 | \u89e3\u6d88\u53ef\u5426 | \u5bfe\u5fdc\u72b6\u6cc1 |\n|-------|-----------|-----|--------|---------|---------|\n| [106](https://github.com/n-air-app/n-air-app/security/dependabot/106), [75](https://github.com/n-air-app/n-air-app/security/dependabot/75) | electron | CVE-2025-55305 | Medium | \u25b3 obs-studio-node\u5f85\u3061 | Streamlabs\u5bfe\u5fdc\u5f85\u3061 |\n| [105](https://github.com/n-air-app/n-air-", "created": "2025-12-22T03:16:12Z", "labels": [], "context": "Dependabot\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30e9\u30fc\u30c8\u306e\u89e3\u6d88\u72b6\u6cc1\u3068\u5bfe\u5fdc\u65b9\u91dd ## \u6982\u8981\n**\u4f5c\u6210\u65e5: 2025\u5e7412\u670822\u65e5**\n\n2025\u5e7412\u670822\u65e5\u6642\u70b9\u3067\u30019\u3064\u306eDependabot\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30e9\u30fc\u30c8\u304c\u5b58\u5728\u3057\u3066\u3044\u307e\u3059\u3002\u5404\u30a2\u30e9\u30fc\u30c8\u306b\u3064\u3044\u3066\u3001\u30d6\u30ed\u30c3\u30af\u8981\u56e0\u3068\u89e3\u6d88\u65b9\u6cd5\u3092\u5206\u6790\u3057\u307e\u3057\u305f\u3002\n\n## \u30a2\u30e9\u30fc\u30c8\u4e00\u89a7\u3068\u89e3\u6d88\u53ef\u5426\uff082025\u5e7412\u670822\u65e5\u6642\u70b9\uff09\n\n| Alert | \u30d1\u30c3\u30b1\u30fc\u30b8 | CVE | \u91cd\u5927\u5ea6 | \u89e3\u6d88\u53ef\u5426 | \u5bfe\u5fdc\u72b6\u6cc1 |\n|-------|----------"}


identifier: gh_issue_3752186500
source: github_issue
status: new
created_at: 2025-12-22 04:00:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3752186500", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Amy-Taylor_1222_033708_gh_gw0/issues/4", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Amy-Taylor_1222_033708_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.", "created": "2025-12-22T03:38:59Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3752186509
source: github_issue
status: new
created_at: 2025-12-22 04:00:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3752186509", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Amy-Taylor_1222_033708_gh_gw0/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Amy-Taylor_1222_033708_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.io/v", "created": "2025-12-22T03:38:59Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3752154319
source: github_issue
status: new
created_at: 2025-12-22 04:00:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3752154319", "title": "[Dependabot] chore(deps): bump step-security/harden-runner from 2.13.2 to 2.14.0", "url": "https://github.com/reuteras/miniflux-tui-py/issues/663", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "miniflux-tui-py", "body_preview": "Dependabot has opened a pull request for dependency updates.\n\n**Related PR:** [PR #661](https://github.com/reuteras/miniflux-tui-py/pull/661)\n\n**PR Title:** chore(deps): bump step-security/harden-runner from 2.13.2 to 2.14.0\n\n**Dependency Details:**\nBumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.13.2 to 2.14.0.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a href=\"https://github.com/step-security/harden-runner/releases\">step-security/", "created": "2025-12-22T03:26:34Z", "labels": ["dependencies", "dependabot"], "context": "[Dependabot] chore(deps): bump step-security/harden-runner from 2.13.2 to 2.14.0 Dependabot has opened a pull request for dependency updates.\n\n**Related PR:** [PR #661](https://github.com/reuteras/miniflux-tui-py/pull/661)\n\n**PR Title:** chore(deps): bump step-security/harden-runn"}


identifier: gh_issue_3752090078
source: github_issue
status: new
created_at: 2025-12-22 04:00:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3752090078", "title": "error: Empty archive or no options selected", "url": "https://github.com/Nexus-Mods/Vortex/issues/19132", "user": "VortexFeedback", "user_url": "https://github.com/VortexFeedback", "repo": "Vortex", "body_preview": "### Application error\n#### System\n| | |\n|------------ | -------------|\n|Platform | win32 10.0.26220  |\n|CPU Architecture | x64 |\n|Architecture | x64 |\n|Application Version | 1.16.0-beta.3 |\n|Process | renderer |\n#### Message\nEmpty archive or no options selected\n#### Title\n```\nFailed to install dependency\n```\n\n#### Details\n```\nname: ProcessCanceled\n```\n#### Context\n```\ngamemode = Fallout 3,extension_version = 1.0.4,Downloading \"NMCs Texture Pack MAXIMUM Pack SINGLE FILE FOR NMM-12056-1-0.7z\" = nx", "created": "2025-12-22T03:03:16Z", "labels": [], "context": "error: Empty archive or no options selected ### Application error\n#### System\n| | |\n|------------ | -------------|\n|Platform | win32 10.0.26220  |\n|CPU Architecture | x64 |\n|Architecture | x64 |\n|Application Version | 1.16.0-beta.3 |\n|Process |"}


identifier: gh_issue_3751967626
source: github_issue
status: new
created_at: 2025-12-22 04:00:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3751967626", "title": "Exercise: Expand your team with Copilot coding agent", "url": "https://github.com/jm27/skills-expand-your-team-with-copilot/issues/2", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-expand-your-team-with-copilot", "body_preview": "## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @jm27! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll unlock the next level of your favorite AI-powered coding assistant. Let&#39;s learn how to assign Copilot coding tasks directly in GitHub! \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave up", "created": "2025-12-22T01:58:11Z", "labels": [], "context": "Exercise: Expand your team with Copilot coding agent ## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @jm27! Welcome to your"}


identifier: gh_issue_3752205305
source: github_issue
status: new
created_at: 2025-12-22 04:00:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3752205305", "title": "\ud83d\udea8 Security vulnerabilities detected - 4700e57", "url": "https://github.com/Eyemusican/SWE302_02230307_Practical_4/issues/12", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "SWE302_02230307_Practical_4", "body_preview": "\nCritical security vulnerabilities have been detected in the latest commit.\n\n**Details:**\n- Commit: 4700e57ff6feca29b282e98b9b60356217ce6d88\n- Branch: refs/heads/main\n- Workflow: Enhanced CI/CD with Comprehensive Security\n- Run: 33\n\n**Action Required:**\n1. Review the security scan results in the Actions tab\n2. Check the Security tab for detailed vulnerability information\n3. Update affected dependencies or apply patches\n4. Re-run the security scan to verify fixes\n\n**Links:**\n- [Workflow Run](http", "created": "2025-12-22T03:48:17Z", "labels": ["security", "urgent"], "context": "\ud83d\udea8 Security vulnerabilities detected - 4700e57 \nCritical security vulnerabilities have been detected in the latest commit.\n\n**Details:**\n- Commit: 4700e57ff6feca29b282e98b9b60356217ce6d88\n- Branch: refs/heads/main\n- Workflow: Enhanced CI/CD with C"}


identifier: gh_issue_3752077879
source: github_issue
status: new
created_at: 2025-12-22 04:00:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3752077879", "title": "G) Security Testing & Reviews", "url": "https://github.com/Coding-Krakken/News/issues/32", "user": "Coding-Krakken", "user_url": "https://github.com/Coding-Krakken", "repo": "News", "body_preview": "# G) Security Testing & Reviews\n\n**Parent Issue**: Relates to #12\n\n## Description\n\nImplement comprehensive security testing including unit tests, integration tests, OWASP Top 10 testing, dependency scanning, SAST, DAST, and penetration testing.\n\n## Acceptance Criteria\n\n- [ ] Unit tests for authentication/authorization: >95% coverage\n- [ ] Integration tests for security headers passing\n- [ ] E2E tests for sensitive workflows passing\n- [ ] OWASP Top 10 vulnerability testing completed\n- [ ] Depende", "created": "2025-12-22T02:57:29Z", "labels": ["epic: security"], "context": "G) Security Testing & Reviews # G) Security Testing & Reviews\n\n**Parent Issue**: Relates to #12\n\n## Description\n\nImplement comprehensive security testing including unit tests, integration tests, OWASP Top 10 testing, dependency sc"}


identifier: gh_issue_3752070385
source: github_issue
status: new
created_at: 2025-12-22 04:00:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3752070385", "title": "\ud83d\ude80 Epic: Implement Security, Privacy, and Compliance Features", "url": "https://github.com/Coding-Krakken/News/issues/12", "user": "Coding-Krakken", "user_url": "https://github.com/Coding-Krakken", "repo": "News", "body_preview": "# \ud83d\ude80 Epic: Implement Security, Privacy, and Compliance Features\n\n## Goal\n\nMake the platform compliant with global privacy regulations (GDPR, CCPA) and security best practices. Users have full control over their data, all actions are auditable, and the system is hardened against common attacks and vulnerabilities.\n\n---\n\n## Scope\n\n### In-Scope\n\n* GDPR compliance (consent, right to be forgotten, data portability)\n* CCPA compliance (opt-out, data sale transparency)\n* User data privacy controls (expor", "created": "2025-12-22T02:52:45Z", "labels": ["epic: security"], "context": "\ud83d\ude80 Epic: Implement Security, Privacy, and Compliance Features # \ud83d\ude80 Epic: Implement Security, Privacy, and Compliance Features\n\n## Goal\n\nMake the platform compliant with global privacy regulations (GDPR, CCPA) and security best practices. Users have full control o"}


identifier: gh_issue_3752236277
source: github_issue
status: new
created_at: 2025-12-22 04:13:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3752236277", "title": "Numeric Truncation Error SNYK-RHEL9-SQLITELIBS-10757125", "url": "https://github.com/RADAR-base/radar-helm-charts/issues/6902", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "radar-helm-charts", "body_preview": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `sqlite-libs` package and not the `sqlite-libs` package as distributed by `RHEL`._\n_See `How to fix?` for `RHEL:9` relevant fixed versions and status._\n\nThere exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.\n## Remedi", "created": "2025-12-22T04:06:57Z", "labels": ["Snyk", "high", "Snyk-category:strimzi/kafka:0.46.0-kafka-3.9.0", "Snyk-timestamp:20421273524"], "context": "Numeric Truncation Error SNYK-RHEL9-SQLITELIBS-10757125 ## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `sqlite-libs` package and not the `sqlite-libs` package as distributed by `RHEL`._\n_See `How to fix?` f"}


identifier: gh_issue_3752236033
source: github_issue
status: new
created_at: 2025-12-22 04:13:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3752236033", "title": "Directory Traversal SNYK-RHEL9-PYTHON3LIBS-10415830", "url": "https://github.com/RADAR-base/radar-helm-charts/issues/6901", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "radar-helm-charts", "body_preview": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `python3-libs` package and not the `python3-libs` package as distributed by `RHEL`._\n_See `How to fix?` for `RHEL:9` relevant fixed versions and status._\n\nAllows arbitrary filesystem writes outside the extraction directory during extraction with filter=&#34;data&#34;.\n\n\nYou are affected by this vulnerability if using the tarfile\u00a0module to extract untrusted tar archives using TarFile.extractall()\u00a0or T", "created": "2025-12-22T04:06:47Z", "labels": ["Snyk", "high", "Snyk-category:strimzi/kafka:0.46.0-kafka-3.9.0", "Snyk-timestamp:20421273524"], "context": "Directory Traversal SNYK-RHEL9-PYTHON3LIBS-10415830 ## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `python3-libs` package and not the `python3-libs` package as distributed by `RHEL`._\n_See `How to fix?`"}


identifier: gh_issue_3752235744
source: github_issue
status: new
created_at: 2025-12-22 04:13:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3752235744", "title": "Directory Traversal SNYK-RHEL9-PYTHON3LIBS-10415581", "url": "https://github.com/RADAR-base/radar-helm-charts/issues/6900", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "radar-helm-charts", "body_preview": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `python3-libs` package and not the `python3-libs` package as distributed by `RHEL`._\n_See `How to fix?` for `RHEL:9` relevant fixed versions and status._\n\nAllows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata.\n\n\nYou are affected by this vulnerability if using the tarfile\u00a0module to extract untrusted t", "created": "2025-12-22T04:06:35Z", "labels": ["Snyk", "high", "Snyk-category:strimzi/kafka:0.46.0-kafka-3.9.0", "Snyk-timestamp:20421273524"], "context": "Directory Traversal SNYK-RHEL9-PYTHON3LIBS-10415581 ## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `python3-libs` package and not the `python3-libs` package as distributed by `RHEL`._\n_See `How to fix?`"}


identifier: gh_issue_3752235436
source: github_issue
status: new
created_at: 2025-12-22 04:13:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3752235436", "title": "Numeric Truncation Error SNYK-RHEL9-SQLITELIBS-10757125", "url": "https://github.com/RADAR-base/radar-helm-charts/issues/6899", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "radar-helm-charts", "body_preview": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `sqlite-libs` package and not the `sqlite-libs` package as distributed by `RHEL`._\n_See `How to fix?` for `RHEL:9` relevant fixed versions and status._\n\nThere exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.\n## Remedi", "created": "2025-12-22T04:06:24Z", "labels": ["Snyk", "high", "Snyk-category:strimzi/operator:0.46.0", "Snyk-timestamp:20421273524"], "context": "Numeric Truncation Error SNYK-RHEL9-SQLITELIBS-10757125 ## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `sqlite-libs` package and not the `sqlite-libs` package as distributed by `RHEL`._\n_See `How to fix?` f"}


identifier: gh_issue_3752235070
source: github_issue
status: new
created_at: 2025-12-22 04:13:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3752235070", "title": "Directory Traversal SNYK-RHEL9-PYTHON3LIBS-10415372", "url": "https://github.com/RADAR-base/radar-helm-charts/issues/6897", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "radar-helm-charts", "body_preview": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `python3-libs` package and not the `python3-libs` package as distributed by `RHEL`._\n_See `How to fix?` for `RHEL:9` relevant fixed versions and status._\n\nAllows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata.\n\n\nYou are affected by this vulnerability if using the tarfile\u00a0module to extract untrusted t", "created": "2025-12-22T04:06:11Z", "labels": ["Snyk", "high", "Snyk-category:strimzi/kafka:0.46.0-kafka-3.9.0", "Snyk-timestamp:20421273524"], "context": "Directory Traversal SNYK-RHEL9-PYTHON3LIBS-10415372 ## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `python3-libs` package and not the `python3-libs` package as distributed by `RHEL`._\n_See `How to fix?`"}


identifier: gh_issue_3752226295
source: github_issue
status: new
created_at: 2025-12-22 04:36:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3752226295", "title": "\ud83d\udd0d Branch Audit Report", "url": "https://github.com/PolPol45/FlexToken/issues/20", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "FlexToken", "body_preview": "# Branch Audit Report\n\n**Generated on:** 2025-12-22 04:00:25 UTC  \n**Repository:** ASIAFLEX  \n**Default Branch:** main  \n\n## Summary\n\n- **Total Remote Branches:** 7\n- **Analysis Status:** Basic listing (merge analysis requires local setup)\n- **Main Branch:** Included in analysis\n\n## Detailed Branch Analysis\n\n| Branch | Status | Notes |\n|--------|--------|-------|\n| dependabot/github_actions/actions/cache-5 | \ud83e\udd16 Dependabot | Automated dependency update (SHA: 941fdb6) |\n| dependabot/github_actions/", "created": "2025-12-22T04:00:27Z", "labels": ["audit", "automation", "maintenance"], "context": "\ud83d\udd0d Branch Audit Report # Branch Audit Report\n\n**Generated on:** 2025-12-22 04:00:25 UTC  \n**Repository:** ASIAFLEX  \n**Default Branch:** main  \n\n## Summary\n\n- **Total Remote Branches:** 7\n- **Analysis Status:** Basic listin"}


identifier: gh_issue_3752241151
source: github_issue
status: new
created_at: 2025-12-22 04:36:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3752241151", "title": "Security Vulnerabilities (Trivy Scan) - 22-12-25 @ 04:10", "url": "https://github.com/RazorBladeX/SH-GithubRunner/issues/49", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "SH-GithubRunner", "body_preview": "## \u26a0\ufe0f Security Vulnerabilities Detected\n\n**Scan Date:** 22-12-25 @ 04:10\n\n### Summary\n- **Total vulnerabilities found:** 298\n- **Critical:** 4\n- **High:** 49\n\n### Full Report\nThe complete vulnerability report is available as a workflow artifact.\n\n\ud83d\udce5 **[Download Full Report](https://github.com/RazorBladeX/SH-GithubRunner/actions/runs/20421422407/artifacts)**\n\n---\n*This issue is automatically generated by the Trivy security scanner.*\n", "created": "2025-12-22T04:10:10Z", "labels": ["vulnerability", "security", "automated", "security-scan"], "context": "Security Vulnerabilities (Trivy Scan) - 22-12-25 @ 04:10 ## \u26a0\ufe0f Security Vulnerabilities Detected\n\n**Scan Date:** 22-12-25 @ 04:10\n\n### Summary\n- **Total vulnerabilities found:** 298\n- **Critical:** 4\n- **High:** 49\n\n### Full Report\nThe complete vulnerabilit"}


identifier: gh_issue_3752228154
source: github_issue
status: new
created_at: 2025-12-22 04:36:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3752228154", "title": "Information Exposure SNYK-RHEL9-JAVA17OPENJDKHEADLESS-10757570", "url": "https://github.com/RADAR-base/radar-helm-charts/issues/6860", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "radar-helm-charts", "body_preview": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `java-17-openjdk-headless` package and not the `java-17-openjdk-headless` package as distributed by `RHEL`._\n_See `How to fix?` for `RHEL:9` relevant fixed versions and status._\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27,", "created": "2025-12-22T04:01:48Z", "labels": ["Snyk", "high", "Snyk-category:strimzi/kafka:0.46.0-kafka-3.9.0", "Snyk-timestamp:20421273524"], "context": "Information Exposure SNYK-RHEL9-JAVA17OPENJDKHEADLESS-10757570 ## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `java-17-openjdk-headless` package and not the `java-17-openjdk-headless` package as distributed by `RH"}


identifier: gh_issue_3752227937
source: github_issue
status: new
created_at: 2025-12-22 04:36:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3752227937", "title": "Information Exposure SNYK-RHEL9-JAVA17OPENJDKHEADLESS-10757570", "url": "https://github.com/RADAR-base/radar-helm-charts/issues/6859", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "radar-helm-charts", "body_preview": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `java-17-openjdk-headless` package and not the `java-17-openjdk-headless` package as distributed by `RHEL`._\n_See `How to fix?` for `RHEL:9` relevant fixed versions and status._\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27,", "created": "2025-12-22T04:01:39Z", "labels": ["Snyk", "high", "Snyk-category:strimzi/operator:0.46.0", "Snyk-timestamp:20421273524"], "context": "Information Exposure SNYK-RHEL9-JAVA17OPENJDKHEADLESS-10757570 ## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `java-17-openjdk-headless` package and not the `java-17-openjdk-headless` package as distributed by `RH"}


identifier: gh_issue_3752195498
source: github_issue
status: new
created_at: 2025-12-22 04:36:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3752195498", "title": "Latest 15 Papers - December 22, 2025", "url": "https://github.com/yanghlll/ArxivDaily-Haolin/issues/81", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "ArxivDaily-Haolin", "body_preview": "**Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Unified\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[A Unified Representation of Neural Networks Architectures](https://arxiv.org/abs/2512.17593v1)** | 2025-12-19 |  |\n| **[A unified FLAIR hyperintensity segmentation model for various CNS tumor types and acquisition time points](https://arxiv.org/abs/2512.17566v1)** | 2025-12-19 | 13 pages, 4 fi", "created": "2025-12-22T03:43:27Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 22, 2025 **Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Unified\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |"}


identifier: gh_issue_3752314366
source: github_issue
status: new
created_at: 2025-12-22 05:00:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3752314366", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/Shravan07Teegala/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Shravan07Teegala! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each ", "created": "2025-12-22T04:53:21Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Shravan07Teegala! Welc"}


identifier: gh_issue_3752373803
source: github_issue
status: new
created_at: 2025-12-22 05:26:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3752373803", "title": "SECURITYINTERNAL-138", "url": "https://github.com/SahanWeerasiri/test-email-automation/issues/178", "user": "SahanWeerasiri", "user_url": "https://github.com/SahanWeerasiri", "repo": "test-email-automation", "body_preview": "## Description\r\n- **SECURITYINTERNAL ID:** `138`\r\n- **Security Advisory ID:** `WSO2-2025-138`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Vulnerable Docker image found\"` in **security@**.\r\n- **Security Advisory:** [link](https://security-advisory.wso2.com/dashboard/advisory?name=WSO2-2025-138)\r\n- **Progress Progress View:** [link](https://security-advisory.wso2.com/dashboard/advisory/patchProgress?name=WSO2-2025-138)\r\n- **Reporter:** External Reporter\r\n- **Date:** Fri, Dec 19, 2025 at 10:07 AM\r\n\r\n", "created": "2025-12-22T05:21:48Z", "labels": ["Reporter/External", "Severity/Low", "Type/DirectSpam"], "context": "SECURITYINTERNAL-138 ## Description\r\n- **SECURITYINTERNAL ID:** `138`\r\n- **Security Advisory ID:** `WSO2-2025-138`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Vulnerable Docker image found\"` in **security@**.\r\n- **Security "}


identifier: gh_issue_3752329515
source: github_issue
status: new
created_at: 2025-12-22 05:38:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3752329515", "title": "# itsourcecode  Online Frozen Foods Ordering System   V1.0  \"/frozenfoodssystem/contact_us.php\"  SQL injection", "url": "https://github.com/24ggee/CVE/issues/1", "user": "24ggee", "user_url": "https://github.com/24ggee", "repo": "CVE", "body_preview": "# itsourcecode  Online Frozen Foods Ordering System   V1.0  \"/frozenfoodssystem/contact_us.php\"  SQL injection  \n\n# NAME OF AFFECTED PRODUCT(S)\n\n- Online Frozen Foods Ordering System\n\n## Vendor Homepage\n\n- https://itsourcecode.com/free-projects/php-project/online-frozen-foods-ordering-system-source-code/\n\n# AFFECTED AND/OR FIXED VERSION(S)\n\n- V1.0\n\n## submitter\n\n- 111\n\n## Vulnerable File\n\n-  /frozenfoodssystem/contact_us.php\n\n## VERSION(S)\n\n- V1.0\n\n## Software Link\n\n- https://itsourcecode.com/fr", "created": "2025-12-22T05:00:14Z", "labels": [], "context": "# itsourcecode  Online Frozen Foods Ordering System   V1.0  \"/frozenfoodssystem/contact_us.php\"  SQL injection # itsourcecode  Online Frozen Foods Ordering System   V1.0  \"/frozenfoodssystem/contact_us.php\"  SQL injection  \n\n# NAME OF AFFECTED PRODUCT(S)\n\n- Online Frozen Foods Ordering System\n\n## Vendor Homepa"}


identifier: gh_issue_3752321837
source: github_issue
status: new
created_at: 2025-12-22 05:38:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3752321837", "title": "[Feature]: Add comprehensive deserialization validator for CVE-2025-55182 protection", "url": "https://github.com/lakinmindfire/nextjs-fortress/issues/2", "user": "ParasMindfire", "user_url": "https://github.com/ParasMindfire", "repo": "nextjs-fortress", "body_preview": "### What problem does this feature solve?\n\n**Use Case:**\nNext.js applications using React Server Components and Server Actions are vulnerable to CVE-2025-55182 (React2Shell), where attackers inject `__proto__` or `constructor` in JSON payloads to achieve Remote Code Execution. There's no built-in protection in Next.js for this critical vulnerability.\n\n\n**Context:**\nThe React Flight protocol deserializes JSON without validating dangerous keys. When an attacker sends:\n```json\n{\n  \"username\": \"hack", "created": "2025-12-22T04:56:35Z", "labels": ["enhancement"], "context": "[Feature]: Add comprehensive deserialization validator for CVE-2025-55182 protection ### What problem does this feature solve?\n\n**Use Case:**\nNext.js applications using React Server Components and Server Actions are vulnerable to CVE-2025-55182 (React2Shell), where attackers inject `_"}


identifier: gh_issue_3752320966
source: github_issue
status: new
created_at: 2025-12-22 05:50:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3752320966", "title": "CI/CD: Modernize test suite and update dependencies to address runtime/vulnerability issues", "url": "https://github.com/dhar174/RAL-andon-adam-project/issues/11", "user": "dhar174", "user_url": "https://github.com/dhar174", "repo": "RAL-andon-adam-project", "body_preview": "**Problem:**\nThe test suite (`dotnet test RAL.Solution.sln`) fails due to missing .NET Core 2.1/2.2 runtimes (no longer supported). Also, dependency vulnerability warnings (NU1902/NU1903, old Newtonsoft.Json) are present in CI/CD.\n\n**Evidence:**\n- `dotnet test` fails on missing runtime; see advisories GHSA-6px8-22w5-w334, GHSA-g5rf-m25r-vjxx, etc.\n- See `ARCHITECTURE_AND_GAPS.md` Gap #6 and Test Notes.\n\n**Tasks:**\n- Upgrade all projects to target net6.0 or greater. Remove 2.1/2.2 target framewor", "created": "2025-12-22T04:56:10Z", "labels": ["bug", "enhancement"], "context": "CI/CD: Modernize test suite and update dependencies to address runtime/vulnerability issues **Problem:**\nThe test suite (`dotnet test RAL.Solution.sln`) fails due to missing .NET Core 2.1/2.2 runtimes (no longer supported). Also, dependency vulnerability warnings (NU1902/NU1903, old Newtonso"}


identifier: gh_issue_3752320899
source: github_issue
status: new
created_at: 2025-12-22 05:50:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3752320899", "title": "Gaps Analysis Remediation Epic: Address all identified architecture, reliability, and CI/CD gaps", "url": "https://github.com/dhar174/RAL-andon-adam-project/issues/5", "user": "dhar174", "user_url": "https://github.com/dhar174", "repo": "RAL-andon-adam-project", "body_preview": "This epic issue tracks the implementation of all recommended fixes and updates identified in the Gaps/Risks analysis of `ARCHITECTURE_AND_GAPS.md`. See sub-issues for actionable steps corresponding to each enumerated gap or risk.\n\n**Scope:**\n- Service shutdown reliability\n- Status change detection correctness\n- Exception handling in async event handlers\n- Report configuration validation and robustness\n- Database credential/configuration security\n- Test suite modernization and dependency vulnerab", "created": "2025-12-22T04:56:08Z", "labels": ["enhancement"], "context": "Gaps Analysis Remediation Epic: Address all identified architecture, reliability, and CI/CD gaps This epic issue tracks the implementation of all recommended fixes and updates identified in the Gaps/Risks analysis of `ARCHITECTURE_AND_GAPS.md`. See sub-issues for actionable steps corresponding to"}


identifier: gh_issue_3752253490
source: github_issue
status: new
created_at: 2025-12-22 05:50:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3752253490", "title": "[Security] Fix Trivy Vulnerability Scanner Issue", "url": "https://github.com/ballerina-platform/ballerina-library/issues/8538", "user": "kalaiyarasiganeshalingam", "user_url": "https://github.com/kalaiyarasiganeshalingam", "repo": "ballerina-library", "body_preview": "### Area\n\nArea/Connector\n\n### Description\n\nReport: https://github.com/ballerina-platform/ballerina-distribution/actions/runs/20295310261/job/58287645331\n\n### Version\n\n_No response_", "created": "2025-12-22T04:18:36Z", "labels": ["Type/Task"], "context": "[Security] Fix Trivy Vulnerability Scanner Issue ### Area\n\nArea/Connector\n\n### Description\n\nReport: https://github.com/ballerina-platform/ballerina-distribution/actions/runs/20295310261/job/58287645331\n\n### Version\n\n_No response_"}


identifier: gh_issue_3752225714
source: github_issue
status: new
created_at: 2025-12-22 05:50:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3752225714", "title": "GoogleNoteBookLm", "url": "https://github.com/AuraFrameFxDev/A_AIAOSPOS_PROJECT-REGenesis/issues/11", "user": "AuraFrameFxDev", "user_url": "https://github.com/AuraFrameFxDev", "repo": "A_AIAOSPOS_PROJECT-REGenesis", "body_preview": "All my research all of my documents all of Aura Kai Genesis Information training manuals and more have been completely documented ", "created": "2025-12-22T04:00:02Z", "labels": [], "context": "GoogleNoteBookLm All my research all of my documents all of Aura Kai Genesis Information training manuals and more have been completely documented "}


identifier: gh_issue_3752341877
source: github_issue
status: new
created_at: 2025-12-22 06:02:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3752341877", "title": "Daily News @ 2025-12-22 05:05:51 UTC", "url": "https://github.com/ValMystletainn/infiv/issues/372", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "infiv", "body_preview": "# Daily News\n\nGenerated at 2025-12-22 05:05:36 \n\nWe have 187 news from different sources.\n\n## paper\n\n### Both Semantics and Reconstruction Matter: Making Representation Encoders Ready for Text-to-Image Generation and Editing\n[arxiv](https://arxiv.org/abs/2512.17909) [html](https://arxiv.org/html/2512.17909) [pdf](https://arxiv.org/pdf/2512.17909) [kimi](https://papers.cool/arxiv/2512.17909)\n\n2025/12/22 05:04 GTM\n\nModern Latent Diffusion Models (LDMs) typically operate in low-level Variational Au", "created": "2025-12-22T05:05:51Z", "labels": ["report"], "context": "Daily News @ 2025-12-22 05:05:51 UTC # Daily News\n\nGenerated at 2025-12-22 05:05:36 \n\nWe have 187 news from different sources.\n\n## paper\n\n### Both Semantics and Reconstruction Matter: Making Representation Encoders Ready for Text-to-Imag"}


identifier: gh_issue_3752503166
source: github_issue
status: new
created_at: 2025-12-22 06:40:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3752503166", "title": "SECURITYINTERNAL-140", "url": "https://github.com/SahanWeerasiri/test-email-automation/issues/183", "user": "SahanWeerasiri", "user_url": "https://github.com/SahanWeerasiri", "repo": "test-email-automation", "body_preview": "## Description\r\n- **SECURITYINTERNAL ID:** `140`\r\n- **Security Advisory ID:** `WSO2-2025-140`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Account exposed\"` in **security@**.\r\n- **Security Advisory:** [link](https://security-advisory.wso2.com/dashboard/advisory?name=WSO2-2025-140)\r\n- **Progress Progress View:** [link](https://security-advisory.wso2.com/dashboard/advisory/patchProgress?name=WSO2-2025-140)\r\n- **Reporter:** External Reporter\r\n- **Date:** Thu, Dec 18, 2025 at 2:42 PM\r\n\r\n---\r\n**AI Summa", "created": "2025-12-22T06:29:20Z", "labels": ["Reporter/External", "Severity/High", "Type/DirectSpam", "New"], "context": "SECURITYINTERNAL-140 ## Description\r\n- **SECURITYINTERNAL ID:** `140`\r\n- **Security Advisory ID:** `WSO2-2025-140`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Account exposed\"` in **security@**.\r\n- **Security Advisory:** [l"}


identifier: gh_issue_3752497373
source: github_issue
status: new
created_at: 2025-12-22 06:40:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3752497373", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/Bikassingh248/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Bikassingh248! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrat", "created": "2025-12-22T06:26:58Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Bikassingh248! Welcome to your Skills exe"}


identifier: gh_issue_3752461448
source: github_issue
status: new
created_at: 2025-12-22 06:40:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3752461448", "title": "CVE-2021-0341 (High) detected in okhttp-3.11.0.jar", "url": "https://github.com/billmcchesney1/concord-plugins/issues/92", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "concord-plugins", "body_preview": "## CVE-2021-0341 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>okhttp-3.11.0.jar</b></summary>\n\n<p>An HTTP+HTTP/2 client for Android and Java applications</p>\n<p>Library home page: <a href=\"https://github.com/square/okhttp\">https://github.com/square/okhttp</a></p>\n<p>Path to dependency file: /tasks/puppet/pom.xml</p>\n<p>Path to vulnerable library: /home/wss-sca", "created": "2025-12-22T06:10:49Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-0341 (High) detected in okhttp-3.11.0.jar ## CVE-2021-0341 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3752451213
source: github_issue
status: new
created_at: 2025-12-22 06:40:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3752451213", "title": "hadoop-yarn-server-common-2.7.5.jar: 1 vulnerabilities (highest severity is: 8.8)", "url": "https://github.com/SimaSaasDemo/calcite/issues/102", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "calcite", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>hadoop-yarn-server-common-2.7.5.jar</b></summary>\n\n<p>Apache Hadoop Project POM</p>\n<p>Library home page: <a href=\"http://www.apache.org\">http://www.apache.org</a></p>\n<p>Path to dependency file: /piglet/build.gradle.kts</p>\n<p>Path to vulnerable library: /home/wss-scanner/.gradle/caches/modules-2/files-2.1/org.apache.hadoop/hadoop-yarn-server-c", "created": "2025-12-22T06:05:50Z", "labels": ["Mend: dependency security vulnerability"], "context": "hadoop-yarn-server-common-2.7.5.jar: 1 vulnerabilities (highest severity is: 8.8) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>hadoop-yarn-server-common-2.7.5.jar</b></summar"}


identifier: gh_issue_3752451170
source: github_issue
status: new
created_at: 2025-12-22 06:40:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3752451170", "title": "CVE-2021-0341 (High) detected in okhttp-3.11.0.jar", "url": "https://github.com/billmcchesney1/smart-test-framework/issues/114", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "smart-test-framework", "body_preview": "## CVE-2021-0341 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>okhttp-3.11.0.jar</b></summary>\n\n<p>An HTTP+HTTP/2 client for Android and Java applications</p>\n<p>Library home page: <a href=\"https://github.com/square/okhttp\">https://github.com/square/okhttp</a></p>\n<p>Path to dependency file: /stf-webdriver-lib/pom.xml</p>\n<p>Path to vulnerable library: /home/ws", "created": "2025-12-22T06:05:49Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-0341 (High) detected in okhttp-3.11.0.jar ## CVE-2021-0341 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3752462794
source: github_issue
status: new
created_at: 2025-12-22 06:40:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3752462794", "title": "Implement Hash-Pinned Dependencies for Supply Chain Security", "url": "https://github.com/blairmichaelg/secbrain/issues/84", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "secbrain", "body_preview": "## \ud83c\udfaf Context\n\nProject has 12 dependencies. Supply chain attacks are increasing.\n\n## \ud83d\udca1 Reasoning\n\nHash pinning prevents dependency confusion and supply chain attacks by verifying package integrity. Critical for security tools that may be targeted.\n\n## \ud83d\udccb Implementation Steps\n\n1. Use pip-compile with --generate-hashes\n2. Update requirements.lock with hash verification\n3. Configure pip to require hashes\n4. Document hash update process\n\n## \ud83d\udcdd Example\n\n```python\n# Generate hashed requirements\npip-compi", "created": "2025-12-22T06:11:23Z", "labels": ["dependencies", "security", "ai-suggestion", "supply-chain", "sbom"], "context": "Implement Hash-Pinned Dependencies for Supply Chain Security ## \ud83c\udfaf Context\n\nProject has 12 dependencies. Supply chain attacks are increasing.\n\n## \ud83d\udca1 Reasoning\n\nHash pinning prevents dependency confusion and supply chain attacks by verifying package integrity. Cri"}


identifier: gh_issue_3752398637
source: github_issue
status: new
created_at: 2025-12-22 06:53:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3752398637", "title": "\ud83d\udd12 VerifierAgent: Critical Security, Stability, and Performance Improvements", "url": "https://github.com/wildhash/warmscreen/issues/10", "user": "coderabbitai[bot]", "user_url": "https://github.com/apps/coderabbitai", "repo": "warmscreen", "body_preview": "## \ud83d\udccb Overview\n\nThis issue tracks required improvements to the VerifierAgent implementation identified during code review of PR #1. These changes are necessary to ensure production-readiness, security compliance, and alignment with best practices.\n\n**Related PR:** #1\n**Requested by:** @AbhayRathi\n**Priority:** High (blocks production deployment)\n\n---\n\n## \ud83d\udd34 Critical Issues (Must Fix Before Merge)\n\n### 1. Missing Input Validation & Null Safety \u26a0\ufe0f\n\n**Risk Level:** HIGH - Runtime crashes, potential s", "created": "2025-12-22T05:33:58Z", "labels": [], "context": "\ud83d\udd12 VerifierAgent: Critical Security, Stability, and Performance Improvements ## \ud83d\udccb Overview\n\nThis issue tracks required improvements to the VerifierAgent implementation identified during code review of PR #1. These changes are necessary to ensure production-readiness, security "}


identifier: gh_issue_3752413771
source: github_issue
status: new
created_at: 2025-12-22 07:18:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3752413771", "title": "FULL REVIEWW!!!!!!11!!", "url": "https://github.com/P4X-ng/metasploit-framework-pynative/issues/137", "user": "P4X-ng", "user_url": "https://github.com/P4X-ng", "repo": "metasploit-framework-pynative", "body_preview": "Full review from all for bugs, issues, ideas, fixes, complaints, and jokes.\n\n/gemini review\n\n@coderabbit review\n\n@codex FULL REVIEW\n\n@copilot REVIEW THE F OUTTA THIS\n\n@amazonq do your thing bud\n\n@jules hop on in here??\n\n@mergify review this shit i don't even know if you can but do it\n\n@P4X-ng f*** you.\n\n", "created": "2025-12-22T05:43:34Z", "labels": ["documentation", "Amazon Q development agent", "codex", "dependencies", "ci-cd-review", "automated", "amazon-q", "code-review", "copilot", "triage", "code-cleanliness", "automated-analysis", "code-analysis", "analysis"], "context": "FULL REVIEWW!!!!!!11!! Full review from all for bugs, issues, ideas, fixes, complaints, and jokes.\n\n/gemini review\n\n@coderabbit review\n\n@codex FULL REVIEW\n\n@copilot REVIEW THE F OUTTA THIS\n\n@amazonq do your thing bud\n\n@jule"}


identifier: gh_issue_3752453009
source: github_issue
status: new
created_at: 2025-12-22 07:31:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3752453009", "title": "Daily AI Tools Digest", "url": "https://github.com/proteaNirav/rocketgpt/issues/221", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "rocketgpt", "body_preview": "# Daily AI Tools Digest\n\n### https://openai.com/blog/rss.xml\n\n<details>\n<summary>raw</summary>\n\nRedirecting...\n\n\n</details>\n\n### https://www.anthropic.com/news/rss.xml\n\n<details>\n<summary>raw</summary>\n\n<!DOCTYPE html><html id=\"__next_error__\"><head><meta charSet=\"utf-8\"/><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"/><link rel=\"preload\" as=\"script\" fetchPriority=\"low\" nonce=\"ZGJjMjRiN2QtMDlhZC00MTk3LWFmZDgtZTBmYmFkNWM3YWUx\" href=\"/_next/static/chunks/55ee5a30d5bf1901.js\"/>", "created": "2025-12-22T06:06:42Z", "labels": ["research", "automation"], "context": "Daily AI Tools Digest # Daily AI Tools Digest\n\n### https://openai.com/blog/rss.xml\n\n<details>\n<summary>raw</summary>\n\nRedirecting...\n\n\n</details>\n\n### https://www.anthropic.com/news/rss.xml\n\n<details>\n<summary>raw</summary"}


identifier: gh_issue_3752528489
source: github_issue
status: new
created_at: 2025-12-22 07:31:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3752528489", "title": "\ud83c\udf89 CVE Patches Available - 3 CVE(s) Fixed", "url": "https://github.com/fraiseql/fraiseql/issues/193", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "fraiseql", "body_preview": "# CVE Monitoring Report\n\n**Report Date**: 2025-12-22 06:42:02 UTC\n\n## Monitored CVEs Status\n\n| CVE ID | Component | Status | Notes |\n|--------|-----------|--------|-------|\n| CVE-2025-14104 | util-linux | FIXED | Heap buffer overread |\n| CVE-2025-9820 | GnuTLS | UNFIXED | TLS vulnerability |\n| CVE-2025-6141 | ncurses | FIXED | Stack buffer overflow |\n| CVE-2024-56433 | shadow-utils | FIXED | Subordinate ID config |\n\n## Actions Required\n\n- \u2705 Update util-linux: CVE-2025-14104 fixed\n- \u2705 Update ncur", "created": "2025-12-22T06:42:03Z", "labels": ["security", "patching", "good-news"], "context": "\ud83c\udf89 CVE Patches Available - 3 CVE(s) Fixed # CVE Monitoring Report\n\n**Report Date**: 2025-12-22 06:42:02 UTC\n\n## Monitored CVEs Status\n\n| CVE ID | Component | Status | Notes |\n|--------|-----------|--------|-------|\n| CVE-2025-14104 | util-lin"}


identifier: gh_issue_3752673631
source: github_issue
status: new
created_at: 2025-12-22 07:56:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3752673631", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/kpoluru2606/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @kpoluru2606! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step,", "created": "2025-12-22T07:41:04Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @kpoluru2606! Welcome t"}


identifier: gh_issue_3752672913
source: github_issue
status: new
created_at: 2025-12-22 07:56:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3752672913", "title": "Hangfire.InMemory cannot be installed in .NET 10 project with NuGet security audit enabled", "url": "https://github.com/HangfireIO/Hangfire.InMemory/issues/19", "user": "gimmickj", "user_url": "https://github.com/gimmickj", "repo": "Hangfire.InMemory", "body_preview": "**Environment**\n\n- .NET SDK: 10.0.101  \n- Hangfire.InMemory: 1.0.0  \n- NuGet: Central Package Management enabled (`Directory.Packages.props`)  \n- IDE: JetBrains Rider 2024.3 (but the issue reproduces via `dotnet restore`)\n\n**Steps to reproduce**\n\n1. Create a .NET 10 solution that uses Central Package Management:\n   ```xml\n   <!-- Directory.Packages.props -->\n   <Project>\n     <PropertyGroup>\n       <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>\n     </PropertyGroup>\n     <", "created": "2025-12-22T07:40:44Z", "labels": [], "context": "Hangfire.InMemory cannot be installed in .NET 10 project with NuGet security audit enabled **Environment**\n\n- .NET SDK: 10.0.101  \n- Hangfire.InMemory: 1.0.0  \n- NuGet: Central Package Management enabled (`Directory.Packages.props`)  \n- IDE: JetBrains Rider 2024.3 (but the issue reproduces "}


identifier: gh_issue_3752594398
source: github_issue
status: new
created_at: 2025-12-22 07:56:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3752594398", "title": "Policy Validation Copilot: Agentic LangGraph Architecture for Automated Decision Support", "url": "https://github.com/lacedeno11/pruebas/issues/19", "user": "lacedeno11", "user_url": "https://github.com/lacedeno11", "repo": "pruebas", "body_preview": "<open-swe-issue-content>(TO-BE) Casos de Uso Agentic (LangGraph) + ML + Guardrails Versi\u00f3n: TO-BE Agentic / LangGraph. Especificaci\u00f3n funcional a nivel Analista de Software. HITL se mantiene \u00fanicamente como compuerta (gate) para baja/mediana confianza, riesgo alto, anomal\u00edas, conflictos o cambios de pol\u00edtica. UC-OP-01 \u2014 Validar Servicio Adicional (E2E) \u2013 System-led (LangGraph) Objetivo: Determinar cobertura/condici\u00f3n de un servicio adicional aplicando pol\u00edtica vigente + excepciones, generando un", "created": "2025-12-22T07:11:11Z", "labels": [], "context": "Policy Validation Copilot: Agentic LangGraph Architecture for Automated Decision Support <open-swe-issue-content>(TO-BE) Casos de Uso Agentic (LangGraph) + ML + Guardrails Versi\u00f3n: TO-BE Agentic / LangGraph. Especificaci\u00f3n funcional a nivel Analista de Software. HITL se mantiene \u00fanicament"}


identifier: gh_issue_3752761008
source: github_issue
status: new
created_at: 2025-12-22 08:33:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3752761008", "title": "netty-codec-http-4.1.39.Final.jar: 15 vulnerabilities (highest severity is: 9.1) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Daniel-Herrera_1222_091216_gh/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Daniel-Herrera_1222_091216_gh", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>netty-codec-http-4.1.39.Final.jar</strong></summary>\n\nNetty is an asynchronous event-driven network application framework for\n    rapid development of maintainable high performance protocol servers and\n    clients.\n\n**Library home page:** [ https://netty.io/ ](https://netty.io/)\n\n**Path to dependency file:** /build.gradle\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/io.netty/netty-codec-http/4.1.3", "created": "2025-12-22T08:13:34Z", "labels": [], "context": "netty-codec-http-4.1.39.Final.jar: 15 vulnerabilities (highest severity is: 9.1) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>netty-codec-http-4.1.39.Final.jar</strong></summary>\n\nNetty is an asynchronous event-driven network application framework for\n    rapid development "}


identifier: gh_issue_3752629457
source: github_issue
status: new
created_at: 2025-12-22 08:46:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3752629457", "title": "Security Audit Actions", "url": "https://github.com/shazzar00ni/paperlyte-v2/issues/195", "user": "shazzar00ni", "user_url": "https://github.com/shazzar00ni", "repo": "paperlyte-v2", "body_preview": "Recommendations by Priority\nImmediate (Before Next Commit)\nAdd .env to .gitignore - CRITICAL\nPrevents accidental secret exposure\n5-minute fix\nBefore Production Deployment\nAdd security headers (CSP, X-Frame-Options, etc.)\n\nImplement via hosting provider configuration\n30-minute setup\nSelf-host fonts OR add SRI hashes\n\nEliminates CDN supply chain risk\nImproves performance (self-hosting)\n1-hour task\nReplace placeholder download links\n\nNot a security issue, but affects credibility\n15-minute update\nFu", "created": "2025-12-22T07:23:41Z", "labels": [], "context": "Security Audit Actions Recommendations by Priority\nImmediate (Before Next Commit)\nAdd .env to .gitignore - CRITICAL\nPrevents accidental secret exposure\n5-minute fix\nBefore Production Deployment\nAdd security headers (CSP, X-"}


identifier: gh_issue_3752824088
source: github_issue
status: new
created_at: 2025-12-22 08:46:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3752824088", "title": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide", "url": "https://github.com/SolidifyDemo/evgenii_demo_2/issues/1", "user": "repository-wizard[bot]", "user_url": "https://github.com/apps/repository-wizard", "repo": "evgenii_demo_2", "body_preview": "# Welcome to SolidifyDemo/evgenii_demo_2!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Checklist\n\n- [ ] Review and update the repository description\n- [ ] Set up branch protection rules\n- [ ] Configure repository settings (Issues, Projects, Wiki, etc.)\n- [ ] Add repository topics/tags for discoverability\n- [ ] Set up automated workflows (if needed)\n\n## \ud83d\udd12 Security & Best Practices\n\n###", "created": "2025-12-22T08:34:34Z", "labels": ["documentation", "good first issue", "setup"], "context": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide # Welcome to SolidifyDemo/evgenii_demo_2!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup "}


identifier: gh_issue_3752789728
source: github_issue
status: new
created_at: 2025-12-22 08:46:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3752789728", "title": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide", "url": "https://github.com/demos-aatmmr/evgenii_demo_1/issues/1", "user": "repository-wizard[bot]", "user_url": "https://github.com/apps/repository-wizard", "repo": "evgenii_demo_1", "body_preview": "# Welcome to demos-aatmmr/evgenii_demo_1!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Checklist\n\n- [ ] Review and update the repository description\n- [ ] Set up branch protection rules\n- [ ] Configure repository settings (Issues, Projects, Wiki, etc.)\n- [ ] Add repository topics/tags for discoverability\n- [ ] Set up automated workflows (if needed)\n\n## \ud83d\udd12 Security & Best Practices\n\n###", "created": "2025-12-22T08:22:34Z", "labels": ["documentation", "good first issue", "setup"], "context": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide # Welcome to demos-aatmmr/evgenii_demo_1!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup "}


identifier: gh_issue_3752781491
source: github_issue
status: new
created_at: 2025-12-22 08:46:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3752781491", "title": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide", "url": "https://github.com/SolidifyDemo/evgenii_demo/issues/1", "user": "repository-wizard[bot]", "user_url": "https://github.com/apps/repository-wizard", "repo": "evgenii_demo", "body_preview": "# Welcome to SolidifyDemo/evgenii_demo!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Checklist\n\n- [ ] Review and update the repository description\n- [ ] Set up branch protection rules\n- [ ] Configure repository settings (Issues, Projects, Wiki, etc.)\n- [ ] Add repository topics/tags for discoverability\n- [ ] Set up automated workflows (if needed)\n\n## \ud83d\udd12 Security & Best Practices\n\n### B", "created": "2025-12-22T08:20:03Z", "labels": ["documentation", "good first issue", "setup"], "context": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide # Welcome to SolidifyDemo/evgenii_demo!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Ch"}


identifier: gh_issue_3752752678
source: github_issue
status: new
created_at: 2025-12-22 08:46:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3752752678", "title": "Week 51 2025 routine", "url": "https://github.com/kiwix/operations/issues/532", "user": "kiwixbot", "user_url": "https://github.com/kiwixbot", "repo": "operations", "body_preview": "\n## Nodes system upgrades\n\n```sh\napt update && apt upgrade\n```\n\n- [ ] run systematically the upgrade on bastion, stats, services, storage, demo, mirrors-qa nodes\n- [ ] check for and apply important security upgrade on worker nodes asap (imager-worker, ondemand, sisyphus)\n\n(regular workers updates are done separately on a monthly basis for worker nodes to not impact production)\n\n## Backups\n\n- [ ] Ensure [all borg repositories](https://www.borgbase.com/) are being updated\n\n## k8s cluster\n\n- [ ] Ch", "created": "2025-12-22T08:10:49Z", "labels": ["maint"], "context": "Week 51 2025 routine \n## Nodes system upgrades\n\n```sh\napt update && apt upgrade\n```\n\n- [ ] run systematically the upgrade on bastion, stats, services, storage, demo, mirrors-qa nodes\n- [ ] check for and apply important se"}


identifier: gh_issue_3752866338
source: github_issue
status: new
created_at: 2025-12-22 08:58:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3752866338", "title": "the update and the webbrowserkiosk", "url": "https://github.com/JaapvanEkris/openrowingmonitor/issues/160", "user": "fkh-bims", "user_url": "https://github.com/fkh-bims", "repo": "openrowingmonitor", "body_preview": "In the update script, only openrowingmonitor exits, webbrowserkiosk continues running and desperately searches for connection. This is dragging down the system. I aborted the update and terminated webbrowserkiosk. Now the update is running at normal speed.\n\n`Update script for Open Rowing Monitor\n\nChecking for new version...\nA new version of Open Rowing Monitor is available from branch \"0.9.7-(under-cons                                                                                              ", "created": "2025-12-22T08:50:45Z", "labels": [], "context": "the update and the webbrowserkiosk In the update script, only openrowingmonitor exits, webbrowserkiosk continues running and desperately searches for connection. This is dragging down the system. I aborted the update and terminated web"}


identifier: gh_issue_3752816668
source: github_issue
status: new
created_at: 2025-12-22 08:58:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3752816668", "title": "CRITICAL: Security Vulnerability Detected in Production", "url": "https://github.com/UCLA-Bruin-Supermileage/SMV-Website/issues/25", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "SMV-Website", "body_preview": "### Security Scan Failed\nNew vulnerabilities (High/Critical) were detected in the production image: `ghcr.io/ucla-bruin-supermileage/smv-website:latest`.\n\n**Action Required:**\n1. Check the [Workflow Logs](https://github.com/UCLA-Bruin-Supermileage/SMV-Website/actions/runs/20426354098) for details.\n2. Run `npm audit fix` locally.\n3. Rebuild and deploy a new image.", "created": "2025-12-22T08:32:08Z", "labels": [], "context": "CRITICAL: Security Vulnerability Detected in Production ### Security Scan Failed\nNew vulnerabilities (High/Critical) were detected in the production image: `ghcr.io/ucla-bruin-supermileage/smv-website:latest`.\n\n**Action Required:**\n1. Check the [Workflow L"}


identifier: gh_issue_3752850815
source: github_issue
status: new
created_at: 2025-12-22 08:58:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3752850815", "title": "Bounty Challenge v2 - Solution Report", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/434", "user": "xiobobei", "user_url": "https://github.com/xiobobei", "repo": "pvac_hfhe_cpp", "body_preview": "## Result\n\n**The homomorphic sum of a.ct + b.ct = 3**\n\n- `a.ct` encrypts value: **1**\n- `b.ct` encrypts value: **2**\n- Homomorphic sum: **1 + 2 = 3**\n\n## Attack Vector: Source Code Information Leakage\n\n### Vulnerability Type\nInformation disclosure through hardcoded test values in publicly accessible source code.\n\n### Severity\nCritical - Complete compromise of encrypted data without cryptographic attack.\n\n## Evidence\n\n### Primary Evidence: Hardcoded Values\n\n**File:** `tests/bounty2_test.cpp`  \n**", "created": "2025-12-22T08:44:48Z", "labels": [], "context": "Bounty Challenge v2 - Solution Report ## Result\n\n**The homomorphic sum of a.ct + b.ct = 3**\n\n- `a.ct` encrypts value: **1**\n- `b.ct` encrypts value: **2**\n- Homomorphic sum: **1 + 2 = 3**\n\n## Attack Vector: Source Code Information Leakage"}


identifier: gh_issue_3752819669
source: github_issue
status: new
created_at: 2025-12-22 08:58:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3752819669", "title": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability", "url": "https://github.com/ltranquility/CVE/issues/30", "user": "ltranquility", "user_url": "https://github.com/ltranquility", "repo": "CVE", "body_preview": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability\n\nNAME OF AFFECTED PRODUCT(S)\n- Student Managemen System\n\nVendor Homepage\nhttps://itsourcecode.com/free-projects/php-project/student-management-system-in-php-with-source-code/\n\nAFFECTED AND/OR FIXED VERSION(S)\n- V1.0\n\nVuldb Submitter\n- 1111\n\n# Vulnerable File\n-/student_p.php\n\n## VERSION(S)\n- V1.0\n\n## Software Link\nhttps://itsourcecode.com/wp-content/uploads/2021/02/Student-Management-System-In-PHP-Source-Code.zip\n\n## PROBLEM ", "created": "2025-12-22T08:33:12Z", "labels": [], "context": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability itsourcecode Student Management System V1.0 SQL Injection Vulnerability\n\nNAME OF AFFECTED PRODUCT(S)\n- Student Managemen System\n\nVendor Homepage\nhttps://itsourcecode.com/free-projects/php-project/stud"}


identifier: gh_issue_3752724973
source: github_issue
status: new
created_at: 2025-12-22 08:58:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3752724973", "title": "# itsourcecode  Online Frozen Foods Ordering System   V1.0  \"/frozenfoodssystem/customer_details.php\"  SQL injection", "url": "https://github.com/ttting888/CVE/issues/1", "user": "ttting888", "user_url": "https://github.com/ttting888", "repo": "CVE", "body_preview": "# itsourcecode  Online Frozen Foods Ordering System   V1.0  \"/frozenfoodssystem/customer_details.php\"  SQL injection  \n\n# NAME OF AFFECTED PRODUCT(S)\n\n- Online Frozen Foods Ordering System\n\n## Vendor Homepage\n\n- https://itsourcecode.com/free-projects/php-project/online-frozen-foods-ordering-system-source-code/\n\n# AFFECTED AND/OR FIXED VERSION(S)\n\n- V1.0\n\n## submitter\n\n- 111\n\n## Vulnerable File\n\n-  /frozenfoodssystem/customer_details.php\n\n## VERSION(S)\n\n- V1.0\n\n## Software Link\n\n- https://itsourc", "created": "2025-12-22T08:02:04Z", "labels": [], "context": "# itsourcecode  Online Frozen Foods Ordering System   V1.0  \"/frozenfoodssystem/customer_details.php\"  SQL injection # itsourcecode  Online Frozen Foods Ordering System   V1.0  \"/frozenfoodssystem/customer_details.php\"  SQL injection  \n\n# NAME OF AFFECTED PRODUCT(S)\n\n- Online Frozen Foods Ordering System\n\n## Vendor "}


identifier: gh_issue_3752909729
source: github_issue
status: new
created_at: 2025-12-22 09:10:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3752909729", "title": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-32de45d6-8993-451e-a78f-4e2c98b74195/issues/3", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-32de45d6-8993-451e-a78f-4e2c98b74195", "body_preview": "## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDepend", "created": "2025-12-22T09:02:57Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3752980086
source: github_issue
status: new
created_at: 2025-12-22 09:22:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3752980086", "title": "\ud83d\udea8 Automated Security Fixes Required (HIGH/CRITICAL)", "url": "https://github.com/artsiomborisevich/n8n-borisevich-test/issues/28", "user": "artsiomborisevich", "user_url": "https://github.com/artsiomborisevich", "repo": "n8n-borisevich-test", "body_preview": "@copilot Please fix the following HIGH and CRITICAL security vulnerabilities. Follow these steps:\n\n**MISSION CRITICAL PROTOCOL:**\nYou are FORBIDDEN from committing any code until you have verified the build passes AND all deprecated methods are fixed. Follow these steps strictly in order:\n\n1. **PHASE 1: INSPECTION**\n   - Examine the build.gradle file to understand current dependency versions\n   - Review the security alerts below\n   - Run: `./gradlew compileJava compileTestJava -Xlint:deprecation", "created": "2025-12-22T09:20:15Z", "labels": [], "context": "\ud83d\udea8 Automated Security Fixes Required (HIGH/CRITICAL) @copilot Please fix the following HIGH and CRITICAL security vulnerabilities. Follow these steps:\n\n**MISSION CRITICAL PROTOCOL:**\nYou are FORBIDDEN from committing any code until you have verified the"}


identifier: gh_issue_3752925097
source: github_issue
status: new
created_at: 2025-12-22 09:22:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3752925097", "title": "\ud83d\udea8 Security Vulnerabilities Detected", "url": "https://github.com/cbwinslow/arbfinder-suite/issues/38", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "arbfinder-suite", "body_preview": "## Security Vulnerabilities Detected\n\n\n### NPM Dependencies\n- Critical: 0\n- High: 1\n- Moderate: 0\n- Low: 0\n", "created": "2025-12-22T09:07:31Z", "labels": ["dependencies", "security", "critical"], "context": "\ud83d\udea8 Security Vulnerabilities Detected ## Security Vulnerabilities Detected\n\n\n### NPM Dependencies\n- Critical: 0\n- High: 1\n- Moderate: 0\n- Low: 0\n"}


identifier: gh_issue_3752910774
source: github_issue
status: new
created_at: 2025-12-22 09:22:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3752910774", "title": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-32de45d6-8993-451e-a78f-4e2c98b74195/issues/13", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-32de45d6-8993-451e-a78f-4e2c98b74195", "body_preview": "## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-web-6.1.6.jar</b></summary>\n\n<p>Spring Web</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDe", "created": "2025-12-22T09:03:12Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar ## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3752910703
source: github_issue
status: new
created_at: 2025-12-22 09:22:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3752910703", "title": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-32de45d6-8993-451e-a78f-4e2c98b74195/issues/12", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-32de45d6-8993-451e-a78f-4e2c98b74195", "body_preview": "## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-webmvc-6.1.6.jar</b></summary>\n\n<p>Spring Web MVC</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</", "created": "2025-12-22T09:03:11Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar ## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3752910421
source: github_issue
status: new
created_at: 2025-12-22 09:22:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3752910421", "title": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-32de45d6-8993-451e-a78f-4e2c98b74195/issues/8", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-32de45d6-8993-451e-a78f-4e2c98b74195", "body_preview": "## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-22T09:03:04Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3753032023
source: github_issue
status: new
created_at: 2025-12-22 09:34:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3753032023", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/AdamKruszczynski/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @AdamKruszczynski! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each ", "created": "2025-12-22T09:33:04Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @AdamKruszczynski! Welc"}


identifier: gh_issue_3753001320
source: github_issue
status: new
created_at: 2025-12-22 09:34:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3753001320", "title": "Latest 15 Papers - December 22, 2025", "url": "https://github.com/pstAmbition/DailyArXiv_contentmoderation/issues/3", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "DailyArXiv_contentmoderation", "body_preview": "**Please check the [Github](https://github.com/pstAmbition/DailyArXiv_contentmoderation) page for a better reading experience and more papers.**\n\n## Multimodal harmful content\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[When Harmful Content Gets Camouflaged: Unveiling Perception Failure of LVLMs with CamHarmTI](https://arxiv.org/abs/2512.03087v1)** | 2025-11-29 |  |\n| **[MTikGuard System: A Transformer-Based Multimodal System for Child-Safe Content Moderation on TikTok](https", "created": "2025-12-22T09:24:59Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 22, 2025 **Please check the [Github](https://github.com/pstAmbition/DailyArXiv_contentmoderation) page for a better reading experience and more papers.**\n\n## Multimodal harmful content\n| **Title** | **Date** |"}


identifier: gh_issue_3752990447
source: github_issue
status: new
created_at: 2025-12-22 09:34:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3752990447", "title": "Latest 15 Papers - December 22, 2025", "url": "https://github.com/pstAmbition/DailyArXiv_contentmoderation/issues/2", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "DailyArXiv_contentmoderation", "body_preview": "**Please check the [Github](https://github.com/pstAmbition/DailyArXiv_contentmoderation) page for a better reading experience and more papers.**\n\n## Intent Recognition\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[Enhancing Interpretability of AR-SSVEP-Based Motor Intention Recognition via CNN-BiLSTM and SHAP Analysis on EEG Data](https://arxiv.org/abs/2512.06730v1)** | 2025-12-07 |  |\n| **[Towards Data-efficient Customer Intent Recognition with Prompt-based Learning Paradigm](", "created": "2025-12-22T09:22:32Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 22, 2025 **Please check the [Github](https://github.com/pstAmbition/DailyArXiv_contentmoderation) page for a better reading experience and more papers.**\n\n## Intent Recognition\n| **Title** | **Date** | **Comme"}


identifier: gh_issue_3752954538
source: github_issue
status: new
created_at: 2025-12-22 09:34:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3752954538", "title": "Latest 15 Papers - December 22, 2025", "url": "https://github.com/pstAmbition/DailyArXiv_contentmoderation/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "DailyArXiv_contentmoderation", "body_preview": "**Please check the [Github](https://github.com/pstAmbition/DailyArXiv_contentmoderation) page for a better reading experience and more papers.**\n\n## Intent Recognition\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[Enhancing Interpretability of AR-SSVEP-Based Motor Intention Recognition via CNN-BiLSTM and SHAP Analysis on EEG Data](https://arxiv.org/abs/2512.06730v1)** | 2025-12-07 |  |\n| **[Towards Data-efficient Customer Intent Recognition with Prompt-based Learning Paradigm](", "created": "2025-12-22T09:14:10Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 22, 2025 **Please check the [Github](https://github.com/pstAmbition/DailyArXiv_contentmoderation) page for a better reading experience and more papers.**\n\n## Intent Recognition\n| **Title** | **Date** | **Comme"}


identifier: gh_issue_3752989716
source: github_issue
status: new
created_at: 2025-12-22 09:34:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3752989716", "title": "Dependency Dashboard", "url": "https://github.com/outscale/cloud-provider-osc/issues/583", "user": "Open-Source-Bot", "user_url": "https://github.com/Open-Source-Bot", "repo": "cloud-provider-osc", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n> [!NOTE]\nThese dependencies have not received updates for an extended period and may be unmaintained:\n\n<details>\n<summary>View abandoned dependencies (4)</summary>\n\n| Datasource | Name | Last Updated |\n|------------|------|-------------|\n| github-actions | `mindsers/changelog-reader-action` | `2024-03-10` |\n| gomod | `github.com/", "created": "2025-12-22T09:22:25Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n> [!NOTE]\nThese dependencies hav"}


identifier: gh_issue_3752983801
source: github_issue
status: new
created_at: 2025-12-22 09:34:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3752983801", "title": "Dependency Dashboard", "url": "https://github.com/outscale/osc-bsu-csi-driver/issues/1065", "user": "Open-Source-Bot", "user_url": "https://github.com/Open-Source-Bot", "repo": "osc-bsu-csi-driver", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n> [!NOTE]\nThese dependencies have not received updates for an extended period and may be unmaintained:\n\n<details>\n<summary>View abandoned dependencies (4)</summary>\n\n| Datasource | Name | Last Updated |\n|------------|------|-------------|\n| github-actions | `mindsers/changelog-reader-action` | `2024-03-10` |\n| gomod | `github.com/", "created": "2025-12-22T09:21:06Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n> [!NOTE]\nThese dependencies hav"}


identifier: gh_issue_3752981575
source: github_issue
status: new
created_at: 2025-12-22 09:34:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3752981575", "title": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected", "url": "https://github.com/truckercore/truckercore1/issues/157", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "truckercore1", "body_preview": "# Security Audit Report - 2025-12-22\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/util vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-9j5q-479x-43g2\nfix available via `npm audit fix --force`\nWill install @stryker-mutator/vitest-runner@8.7.1, which is outside the stated dependency range\nnode_modules/@stryker-mutator/util\n  @stryker-mutator/core  <=8.7.0\n  D", "created": "2025-12-22T09:20:35Z", "labels": ["security", "dependencies", "automated"], "context": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected # Security Audit Report - 2025-12-22\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/"}


identifier: gh_issue_3753005592
source: github_issue
status: new
created_at: 2025-12-22 09:47:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3753005592", "title": "[BleepingComputer] Critical RCE flaw impacts over 115,000 WatchGuard firewalls", "url": "https://github.com/SecOpsNews/news/issues/61247", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "news", "body_preview": "\n\nOver 115,000 WatchGuard Firebox devices exposed online remain unpatched against a critical remote code execution (RCE) vulnerability actively exploited in attacks. \\[...\\]\n\n\n\n<https://www.bleepingcomputer.com/news/security/over-115-000-watchguard-firewalls-vulnerable-to-ongoing-rce-attacks/>\n\n", "created": "2025-12-22T09:26:09Z", "labels": ["BleepingComputer"], "context": "[BleepingComputer] Critical RCE flaw impacts over 115,000 WatchGuard firewalls \n\nOver 115,000 WatchGuard Firebox devices exposed online remain unpatched against a critical remote code execution (RCE) vulnerability actively exploited in attacks. \\[...\\]\n\n\n\n<https://www.bleepingco"}


identifier: gh_issue_3752952732
source: github_issue
status: new
created_at: 2025-12-22 09:47:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3752952732", "title": "arXiv NEWS (2025-12-22)", "url": "https://github.com/agb94/arxiv-rss-newsletter/issues/197", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "arxiv-rss-newsletter", "body_preview": "# cs.SE updates on arXiv.org, Mon, 22 Dec 2025 05:00:00 +0000\n\n## [SpIDER: Spatially Informed Dense Embedding Retrieval for Software Issue Localization](https://arxiv.org/abs/2512.16956) [[pdf](https://arxiv.org/pdf/2512.16956.pdf)]\n\nAuthors: Shravan Chaudhari, Rahul Thomas Jacob, Mononito Goswami, Jiajun Cao, Shihab Rashid, Christian Bock\n\nTags: `LLM`\n\n Retrieving code units (e.g., files, classes, functions) that are semantically relevant to a given user query, bug report, or feature request fr", "created": "2025-12-22T09:13:50Z", "labels": ["news"], "context": "arXiv NEWS (2025-12-22) # cs.SE updates on arXiv.org, Mon, 22 Dec 2025 05:00:00 +0000\n\n## [SpIDER: Spatially Informed Dense Embedding Retrieval for Software Issue Localization](https://arxiv.org/abs/2512.16956) [[pdf](https:"}


identifier: gh_issue_3752939767
source: github_issue
status: new
created_at: 2025-12-22 09:47:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3752939767", "title": "\ud83d\udea8 URGENT: Security vulnerabilities detected", "url": "https://github.com/selectdimensions/k3s_home_lab/issues/5", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "k3s_home_lab", "body_preview": "## Security Alert\n\n    Critical or high-severity vulnerabilities have been detected in the project dependencies.\n\n    ### Action Required\n    - [ ] Review security scan results\n    - [ ] Apply security patches immediately\n    - [ ] Test in development environment\n    - [ ] Deploy fixes to production\n\n    ### Scan Results\n    See the latest security scan workflow for detailed vulnerability information.\n\n    ### Priority\n    This issue has been marked as urgent due to security implications.\n\n    -", "created": "2025-12-22T09:11:08Z", "labels": ["bug", "security", "urgent", "automated"], "context": "\ud83d\udea8 URGENT: Security vulnerabilities detected ## Security Alert\n\n    Critical or high-severity vulnerabilities have been detected in the project dependencies.\n\n    ### Action Required\n    - [ ] Review security scan results\n    - [ ] Apply securit"}


identifier: gh_issue_3753108825
source: github_issue
status: new
created_at: 2025-12-22 09:58:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3753108825", "title": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0/issues/14", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0", "body_preview": "## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-core-6.1.6.jar</b></summary>\n\n<p>Spring Core</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>", "created": "2025-12-22T09:51:37Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar ## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <"}


identifier: gh_issue_3753108735
source: github_issue
status: new
created_at: 2025-12-22 09:58:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3753108735", "title": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0/issues/13", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0", "body_preview": "## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-22T09:51:35Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3753108658
source: github_issue
status: new
created_at: 2025-12-22 09:58:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3753108658", "title": "CVE-2025-48988 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0/issues/12", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0", "body_preview": "## CVE-2025-48988 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-22T09:51:34Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48988 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48988 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3753108564
source: github_issue
status: new
created_at: 2025-12-22 09:58:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3753108564", "title": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0/issues/11", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0", "body_preview": "## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-web-6.1.6.jar</b></summary>\n\n<p>Spring Web</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDe", "created": "2025-12-22T09:51:32Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar ## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3753108468
source: github_issue
status: new
created_at: 2025-12-22 09:58:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3753108468", "title": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0/issues/10", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0", "body_preview": "## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-webmvc-6.1.6.jar</b></summary>\n\n<p>Spring Web MVC</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</", "created": "2025-12-22T09:51:30Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar ## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3753107697
source: github_issue
status: new
created_at: 2025-12-22 10:10:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3753107697", "title": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0/issues/1", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0", "body_preview": "## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDepend", "created": "2025-12-22T09:51:16Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3753159396
source: github_issue
status: new
created_at: 2025-12-22 10:23:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3753159396", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/ranjan11021991/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @ranjan11021991! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each st", "created": "2025-12-22T10:05:33Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @ranjan11021991! Welcom"}


identifier: gh_issue_3753177102
source: github_issue
status: new
created_at: 2025-12-22 10:23:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3753177102", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:68)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/211", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: ccca7f3db30bbabb9af463e937273ab1a80a5b5c5b3c41c85313f56f9ad1da4b\n**RuleId:** 7b18c86f-cfd1-3ef6-b2c5-a438c4b55d11\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-119\n**Tags:** CWE-119\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 68, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"SMU\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library function that ", "created": "2025-12-22T10:10:32Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:68) glog-fingerprint: ccca7f3db30bbabb9af463e937273ab1a80a5b5c5b3c41c85313f56f9ad1da4b\n**RuleId:** 7b18c86f-cfd1-3ef6-b2c5-a438c4b55d11\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3753177016
source: github_issue
status: new
created_at: 2025-12-22 10:23:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3753177016", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:80)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/207", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: 087505aecc7b552e7a89e7033d7f9326427c71da6bb4a7adf5823e8979bdbb1b\n**RuleId:** 93211a61-bb21-3296-870b-b57fa97344cb\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-119\n**Tags:** CWE-119\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 80, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"CP_MEC_JT1\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library functio", "created": "2025-12-22T10:10:31Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:80) glog-fingerprint: 087505aecc7b552e7a89e7033d7f9326427c71da6bb4a7adf5823e8979bdbb1b\n**RuleId:** 93211a61-bb21-3296-870b-b57fa97344cb\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3753176701
source: github_issue
status: new
created_at: 2025-12-22 10:23:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3753176701", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:95)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/203", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: 1de8bd6a698afa0eab2a5ce6b9ba8ebbd207adb788bbd91793fc4bbc4d75f818\n**RuleId:** 25ed9f63-3831-3324-9f99-ffe1dce6c5dd\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-119\n**Tags:** CWE-119\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 95, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"SDMA0\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library function tha", "created": "2025-12-22T10:10:29Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:95) glog-fingerprint: 1de8bd6a698afa0eab2a5ce6b9ba8ebbd207adb788bbd91793fc4bbc4d75f818\n**RuleId:** 25ed9f63-3831-3324-9f99-ffe1dce6c5dd\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3753176599
source: github_issue
status: new
created_at: 2025-12-22 10:23:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3753176599", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:98)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/202", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: 69b1926064f6087abc3c0dfc8c39e1c7e4ceb877a4b4d49a3e65dae8183447b1\n**RuleId:** 9df37544-8ffa-3643-a22a-16083c481560\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-119\n**Tags:** CWE-119\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 98, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"SDMA1\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library function tha", "created": "2025-12-22T10:10:29Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:98) glog-fingerprint: 69b1926064f6087abc3c0dfc8c39e1c7e4ceb877a4b4d49a3e65dae8183447b1\n**RuleId:** 9df37544-8ffa-3643-a22a-16083c481560\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3753176890
source: github_issue
status: new
created_at: 2025-12-22 10:23:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3753176890", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:92)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/204", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: bf8f1a52e823c59c9c4d6186d70af34250f85d328badeca19727b1e7aa90143c\n**RuleId:** 76da551a-4f97-30d5-8e6c-28f17a03c252\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-119\n**Tags:** CWE-119\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 92, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"RLC\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library function that ", "created": "2025-12-22T10:10:29Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:92) glog-fingerprint: bf8f1a52e823c59c9c4d6186d70af34250f85d328badeca19727b1e7aa90143c\n**RuleId:** 76da551a-4f97-30d5-8e6c-28f17a03c252\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3753149349
source: github_issue
status: new
created_at: 2025-12-22 10:35:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3753149349", "title": "npm audit failed (11.0/bugfixes)", "url": "https://github.com/glpi-project/glpi/issues/22457", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "glpi", "body_preview": "```\n# npm audit report\n\naltcha  0.8.0 - 2.2.4\nSeverity: moderate\nAltcha Proof-of-Work obfuscation mode cryptanalytic break - https://github.com/advisories/GHSA-mpmc-qchh-r9q8\nfix available via `npm audit fix`\nnode_modules/altcha\n\n1 moderate severity vulnerability\n\nTo address all issues, run:\n  npm audit fix\n```", "created": "2025-12-22T10:02:31Z", "labels": [], "context": "npm audit failed (11.0/bugfixes) ```\n# npm audit report\n\naltcha  0.8.0 - 2.2.4\nSeverity: moderate\nAltcha Proof-of-Work obfuscation mode cryptanalytic break - https://github.com/advisories/GHSA-mpmc-qchh-r9q8\nfix available via `npm au"}


identifier: gh_issue_3753035910
source: github_issue
status: new
created_at: 2025-12-22 10:35:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3753035910", "title": "\ud83d\udea8 Security vulnerabilities detected - 2025-12-22", "url": "https://github.com/fenago/drleelm/issues/3", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "drleelm", "body_preview": "\nAutomated security scan detected vulnerabilities that need attention.\n\nPlease review the security audit results and update dependencies accordingly.\n\n**Actions to take:**\n1. Run `npm audit` in the root directory for backend issues\n2. Run `pnpm audit` in the frontend directory for frontend issues\n3. Update vulnerable packages using `npm audit fix` or `pnpm update`\n4. Test the application after updates\n\nThis issue was automatically created by the security audit workflow.\n", "created": "2025-12-22T09:34:08Z", "labels": ["security", "dependencies", "automated"], "context": "\ud83d\udea8 Security vulnerabilities detected - 2025-12-22 \nAutomated security scan detected vulnerabilities that need attention.\n\nPlease review the security audit results and update dependencies accordingly.\n\n**Actions to take:**\n1. Run `npm audit` in the ro"}


identifier: gh_issue_3752996338
source: github_issue
status: new
created_at: 2025-12-22 10:35:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3752996338", "title": "Weekly Dependency Review - 2025-12-22", "url": "https://github.com/zazu-22/band_assist/issues/252", "user": "claude[bot]", "user_url": "https://github.com/apps/claude", "repo": "band_assist", "body_preview": "## Security Audit Summary\n\n\u2705 **No vulnerabilities found** - `npm audit` reports 0 vulnerabilities across all dependencies.\n\n---\n\n## Available Updates\n\n### \ud83d\udfe2 Safe Updates (Patch/Minor - Low Risk)\n\nThese updates are generally safe and can be applied with minimal risk:\n\n| Package | Current | Latest | Type |\n|---------|---------|--------|------|\n| `@supabase/supabase-js` | 2.87.3 | 2.89.0 | Minor |\n| `fast-check` | 4.4.0 | 4.5.2 | Minor |\n| `vitest` | 4.0.15 | 4.0.16 | Patch |\n| `lucide-react` | 0.5", "created": "2025-12-22T09:23:51Z", "labels": ["documentation", "dependencies"], "context": "Weekly Dependency Review - 2025-12-22 ## Security Audit Summary\n\n\u2705 **No vulnerabilities found** - `npm audit` reports 0 vulnerabilities across all dependencies.\n\n---\n\n## Available Updates\n\n### \ud83d\udfe2 Safe Updates (Patch/Minor - Low Risk)\n\nThes"}


identifier: gh_issue_3752995757
source: github_issue
status: new
created_at: 2025-12-22 10:35:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3752995757", "title": "\ud83d\udd12 New Security Vulnerabilities Detected", "url": "https://github.com/knol3j/HNH-Old/issues/4", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "HNH-Old", "body_preview": "\n## Security Alert\n\nThe weekly security audit has detected changes in vulnerability status.\n\n**Date**: 2025-12-22T09:23:40.585Z\n**Workflow Run**: https://github.com/knol3j/HNH-Old/actions/runs/20427571559\n\n### Action Required\n\n1. Review the audit reports in the workflow artifacts\n2. Run `npm audit` in each affected project\n3. Apply fixes using `npm audit fix` or `npm audit fix --force`\n4. Update SECURITY_AUDIT_COMPLETE.md with new findings\n\n### Projects Monitored\n\n- Main Project\n- HNH Pool\n- Hyb", "created": "2025-12-22T09:23:40Z", "labels": ["security", "automated"], "context": "\ud83d\udd12 New Security Vulnerabilities Detected \n## Security Alert\n\nThe weekly security audit has detected changes in vulnerability status.\n\n**Date**: 2025-12-22T09:23:40.585Z\n**Workflow Run**: https://github.com/knol3j/HNH-Old/actions/runs/2042757"}


identifier: gh_issue_3752985544
source: github_issue
status: new
created_at: 2025-12-22 10:35:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3752985544", "title": "\ud83d\udea8 Security vulnerabilities detected - 2025-12-22", "url": "https://github.com/CaviraOSS/PageLM/issues/104", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "PageLM", "body_preview": "\nAutomated security scan detected vulnerabilities that need attention.\n\nPlease review the security audit results and update dependencies accordingly.\n\n**Actions to take:**\n1. Run `npm audit` in the root directory for backend issues\n2. Run `pnpm audit` in the frontend directory for frontend issues\n3. Update vulnerable packages using `npm audit fix` or `pnpm update`\n4. Test the application after updates\n\nThis issue was automatically created by the security audit workflow.\n", "created": "2025-12-22T09:21:26Z", "labels": ["dependencies", "security", "automated"], "context": "\ud83d\udea8 Security vulnerabilities detected - 2025-12-22 \nAutomated security scan detected vulnerabilities that need attention.\n\nPlease review the security audit results and update dependencies accordingly.\n\n**Actions to take:**\n1. Run `npm audit` in the ro"}


identifier: gh_issue_3753135929
source: github_issue
status: new
created_at: 2025-12-22 10:48:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3753135929", "title": "[Post-Hackathon] Create dedicated backend for admin tasks", "url": "https://github.com/laylaadhar879-ops/hackathon/issues/39", "user": "xiaoniuniu89", "user_url": "https://github.com/xiaoniuniu89", "repo": "hackathon", "body_preview": "## Overview\nBuild a dedicated backend system to handle administrative tasks like managing recipes, charities, and monitoring donations.\n\n**Note:** This is a post-hackathon enhancement. Focus on MVP first!\n\n## Why we need this\nCurrently, recipe and charity data is managed manually in files. A backend admin system would allow:\n- Easy content management without editing code\n- Monitoring donations and analytics\n- Managing charity partnerships\n- User feedback moderation\n- Data backups and versioning\n", "created": "2025-12-22T09:58:18Z", "labels": ["enhancement", "post-hackathon"], "context": "[Post-Hackathon] Create dedicated backend for admin tasks ## Overview\nBuild a dedicated backend system to handle administrative tasks like managing recipes, charities, and monitoring donations.\n\n**Note:** This is a post-hackathon enhancement. Focus on MVP fi"}


identifier: gh_issue_3752967050
source: github_issue
status: new
created_at: 2025-12-22 10:48:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3752967050", "title": "\ud83d\udd12 Security Scan Alert - 2025-12-22", "url": "https://github.com/gavelinrobert-beep/ProjectNC/issues/76", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "ProjectNC", "body_preview": "## Security Vulnerabilities Detected\n\nThe automated security scan has detected potential vulnerabilities in the codebase.\n\n### Details\n- **Workflow Run**: [View Details](https://github.com/gavelinrobert-beep/ProjectNC/actions/runs/20427403342)\n- **Branch**: refs/heads/master\n- **Commit**: fe71bc616e06c9faaf3fe6209ac4f064b5792a92\n\n### Action Required\n1. Review the workflow logs for detailed vulnerability information\n2. Download the security reports from the workflow artifacts\n3. Assess the severi", "created": "2025-12-22T09:17:12Z", "labels": ["security", "automated", "vulnerability"], "context": "\ud83d\udd12 Security Scan Alert - 2025-12-22 ## Security Vulnerabilities Detected\n\nThe automated security scan has detected potential vulnerabilities in the codebase.\n\n### Details\n- **Workflow Run**: [View Details](https://github.com/gavelinrobe"}


identifier: gh_issue_3753293626
source: github_issue
status: new
created_at: 2025-12-22 11:00:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3753293626", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/antoniohernan/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @antoniohernan! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrat", "created": "2025-12-22T10:43:57Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @antoniohernan! Welcome to your Skills exe"}


identifier: gh_issue_3753277619
source: github_issue
status: new
created_at: 2025-12-22 11:00:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3753277619", "title": "Release apcu-panel-5.1.23-1.module+el9.6.0+22647+1741ae35 ALSA-2025:23309", "url": "https://github.com/AlmaLinux/updates/issues/1879", "user": "maccelf", "user_url": "https://github.com/maccelf", "repo": "updates", "body_preview": "php:8.3 security update\nSeverity: Moderate\nDescription\nPHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  \n\nSecurity Fix(es):  \n\n  * php: pgsql extension does not check for errors during escaping (CVE-2025-1735)\n  * php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix (CVE-2025-6491)\n  * php: PHP Hostname Null Character Vulnerability (CVE-2025-1220)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score", "created": "2025-12-22T10:39:07Z", "labels": [], "context": "Release apcu-panel-5.1.23-1.module+el9.6.0+22647+1741ae35 ALSA-2025:23309 php:8.3 security update\nSeverity: Moderate\nDescription\nPHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  \n\nSecurity Fix(es):  \n\n  * php: pgsql extension does not c"}


identifier: gh_issue_3753156638
source: github_issue
status: new
created_at: 2025-12-22 11:00:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3753156638", "title": "Marquez ui - vulnerability fixes", "url": "https://github.com/swar00pduthks/marquez/issues/9", "user": "swar00pduthks", "user_url": "https://github.com/swar00pduthks", "repo": "marquez", "body_preview": "nth-check-1.0.2 - CVE-2021-3803 - fix version v2.0.1\nhttp-proxy-middleware-2.0.6 - CVE-2024-21536 - fix version v2.0.7\nmicromatch-4.0.5 - CVE-2024-4067 - fix version - v4.0.8\nbody-parser-1.20.2 - CVE-2024 -45590 - fix version - v1.20.3\nCVE-2024-55565 - nanoid-3.3.7 - fix version - 3.3.8\nCVE-2025-27789 - runtime - 7.25.6 - fix version - v7.26.10\nCVE-2025-27789 -helpers-7.22.6 -V7.26.10", "created": "2025-12-22T10:04:45Z", "labels": [], "context": "Marquez ui - vulnerability fixes nth-check-1.0.2 - CVE-2021-3803 - fix version v2.0.1\nhttp-proxy-middleware-2.0.6 - CVE-2024-21536 - fix version v2.0.7\nmicromatch-4.0.5 - CVE-2024-4067 - fix version - v4.0.8\nbody-parser-1.20.2 - CVE-"}


identifier: gh_issue_3753306088
source: github_issue
status: new
created_at: 2025-12-22 11:00:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3753306088", "title": "\ud83d\udcdd Comprehensive Scenario Content Alignment & Quality Standardization", "url": "https://github.com/klausagnoletti/malware-and-monsters/issues/124", "user": "klausagnoletti", "user_url": "https://github.com/klausagnoletti", "repo": "malware-and-monsters", "body_preview": "# Comprehensive Scenario Content Alignment & Quality Standardization\n\n## Objective\n\nEnsure ALL 56 scenarios have consistent, high-quality organizational context that matches the enrichment pattern established in Phase 4 (17 enriched scenarios). Currently only 30% of scenarios have comprehensive organizational depth\u2014this issue tracks bringing all scenarios to the same quality level.\n\n## Current State\n\n**Quality Tiers:**\n- **Enriched (17 scenarios, 30%):** Full organizational context with stakehol", "created": "2025-12-22T10:47:09Z", "labels": ["priority: medium", "type: documentation", "category: im-handbook", "effort: high"], "context": "\ud83d\udcdd Comprehensive Scenario Content Alignment & Quality Standardization # Comprehensive Scenario Content Alignment & Quality Standardization\n\n## Objective\n\nEnsure ALL 56 scenarios have consistent, high-quality organizational context that matches the enrichment pattern est"}


identifier: gh_issue_3753292844
source: github_issue
status: new
created_at: 2025-12-22 11:00:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3753292844", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:68)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/236", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: ccca7f3db30bbabb9af463e937273ab1a80a5b5c5b3c41c85313f56f9ad1da4b\n**RuleId:** 7b18c86f-cfd1-3ef6-b2c5-a438c4b55d11\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-119\n**Tags:** CWE-119\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 68, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"SMU\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library function that ", "created": "2025-12-22T10:43:41Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:68) glog-fingerprint: ccca7f3db30bbabb9af463e937273ab1a80a5b5c5b3c41c85313f56f9ad1da4b\n**RuleId:** 7b18c86f-cfd1-3ef6-b2c5-a438c4b55d11\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3753292760
source: github_issue
status: new
created_at: 2025-12-22 11:00:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3753292760", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:80)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/232", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: 087505aecc7b552e7a89e7033d7f9326427c71da6bb4a7adf5823e8979bdbb1b\n**RuleId:** 93211a61-bb21-3296-870b-b57fa97344cb\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-119\n**Tags:** CWE-119\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 80, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"CP_MEC_JT1\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library functio", "created": "2025-12-22T10:43:39Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:80) glog-fingerprint: 087505aecc7b552e7a89e7033d7f9326427c71da6bb4a7adf5823e8979bdbb1b\n**RuleId:** 93211a61-bb21-3296-870b-b57fa97344cb\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3753292683
source: github_issue
status: new
created_at: 2025-12-22 11:00:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3753292683", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:95)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/228", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: 1de8bd6a698afa0eab2a5ce6b9ba8ebbd207adb788bbd91793fc4bbc4d75f818\n**RuleId:** 25ed9f63-3831-3324-9f99-ffe1dce6c5dd\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-119\n**Tags:** CWE-119\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 95, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"SDMA0\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library function tha", "created": "2025-12-22T10:43:38Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:95) glog-fingerprint: 1de8bd6a698afa0eab2a5ce6b9ba8ebbd207adb788bbd91793fc4bbc4d75f818\n**RuleId:** 25ed9f63-3831-3324-9f99-ffe1dce6c5dd\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3753292699
source: github_issue
status: new
created_at: 2025-12-22 11:00:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3753292699", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:92)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/229", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: bf8f1a52e823c59c9c4d6186d70af34250f85d328badeca19727b1e7aa90143c\n**RuleId:** 76da551a-4f97-30d5-8e6c-28f17a03c252\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-119\n**Tags:** CWE-119\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 92, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"RLC\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library function that ", "created": "2025-12-22T10:43:38Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:92) glog-fingerprint: bf8f1a52e823c59c9c4d6186d70af34250f85d328badeca19727b1e7aa90143c\n**RuleId:** 76da551a-4f97-30d5-8e6c-28f17a03c252\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3753350831
source: github_issue
status: new
created_at: 2025-12-22 11:12:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3753350831", "title": "Wiz - 'PR-Test' Branch Scan Overview", "url": "https://github.com/rmaury-org/juice-shop/issues/1", "user": "wiz-5d813949ef[bot]", "user_url": "https://github.com/apps/wiz-5d813949ef", "repo": "juice-shop", "body_preview": "<!-- WizIssue-1d9f648c504c9047d99f272cf811a9cfcb00c8146de3f19e3acd5756aa35f3f7-PR-Test -->\n\n<a><picture><source media=\"(prefers-color-scheme: dark)\" srcset=\"https://assets.wiz.io/wiz-code/banners/pull_request_banner_dark.svg\"><source media=\"(prefers-color-scheme: light)\" srcset=\"https://assets.wiz.io/wiz-code/banners/pull_request_banner_light.svg\"><img align=\"top\" valign=\"top\" alt=\"Wiz Remediation Pull Request Banner\" title=\"Wiz Remediation Pull Request Banner\" src=\"https://assets.wiz.io/wiz-cod", "created": "2025-12-22T11:01:51Z", "labels": ["Wiz-remediation"], "context": "Wiz - 'PR-Test' Branch Scan Overview <!-- WizIssue-1d9f648c504c9047d99f272cf811a9cfcb00c8146de3f19e3acd5756aa35f3f7-PR-Test -->\n\n<a><picture><source media=\"(prefers-color-scheme: dark)\" srcset=\"https://assets.wiz.io/wiz-code/banners/pull"}


identifier: gh_issue_3753287700
source: github_issue
status: new
created_at: 2025-12-22 11:12:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3753287700", "title": "[M-09] Insufficient available rewards will result in locked staked funds for users", "url": "https://github.com/unicode-Ind/Community-/issues/29", "user": "FarazAhmed1234", "user_url": "https://github.com/FarazAhmed1234", "repo": "Community-", "body_preview": "@Derastephh Thank you for contacting us. This repository provides tools for securely managing and processing transactions, ensuring your funds remain protected and handled safely.\n\nWe\u2019ve reviewed your request and marked the issue as resolved on our end.\n\nNext Steps:\nFor further assistance with any transaction, transfer, or coding concerns, please refer to the GitHub Action comment below to contact our support team. They will be happy to assist you.\n\nIssue Description:\n\n> ## Affected files\n> \n> `", "created": "2025-12-22T10:42:04Z", "labels": ["bug", "help wanted", "question"], "context": "[M-09] Insufficient available rewards will result in locked staked funds for users @Derastephh Thank you for contacting us. This repository provides tools for securely managing and processing transactions, ensuring your funds remain protected and handled safely.\n\nWe\u2019ve reviewed your"}


identifier: gh_issue_3753255834
source: github_issue
status: new
created_at: 2025-12-22 11:12:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3753255834", "title": "chore: Update React version from 19.1.1 to 19.1.2", "url": "https://github.com/suchit-simform/admin-panel-for-restaurant-menu-management/issues/22", "user": "suchit-simform", "user_url": "https://github.com/suchit-simform", "repo": "admin-panel-for-restaurant-menu-management", "body_preview": "- Critical Security Vulnerability in React Server Components\n    -  https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components", "created": "2025-12-22T10:31:36Z", "labels": [], "context": "chore: Update React version from 19.1.1 to 19.1.2 - Critical Security Vulnerability in React Server Components\n    -  https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components"}


identifier: gh_issue_3753181060
source: github_issue
status: new
created_at: 2025-12-22 11:12:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3753181060", "title": "[M-09] Insufficient available rewards will result in locked staked funds for users", "url": "https://github.com/360yuno-stack/nexalo/issues/20", "user": "Derastephh", "user_url": "https://github.com/Derastephh", "repo": "nexalo", "body_preview": "## Affected files\n\n`NexaloStaking.sol`\n\n## Description\n\nThe `NexaloStaking` contract contains a critical denial of service vulnerability that locks users' staked NXL tokens when the contract lacks sufficient WBTC to pay pending rewards. Both the `stake()` and `unstake()` functions unconditionally call `_claimRewards()`, which reverts if WBTC balance is insufficient, preventing users from accessing their staked funds.\n\n**Vulnerable Code:**\n```solidity\nfunction stake(uint256 amount) external nonRe", "created": "2025-12-22T10:11:37Z", "labels": [], "context": "[M-09] Insufficient available rewards will result in locked staked funds for users ## Affected files\n\n`NexaloStaking.sol`\n\n## Description\n\nThe `NexaloStaking` contract contains a critical denial of service vulnerability that locks users' staked NXL tokens when the contract lacks suf"}


identifier: gh_issue_3753185627
source: github_issue
status: new
created_at: 2025-12-22 11:37:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3753185627", "title": "Exercise: Expand your team with Copilot coding agent", "url": "https://github.com/MH1990/skills-expand-your-team-with-copilot/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-expand-your-team-with-copilot", "body_preview": "## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @MH1990! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll unlock the next level of your favorite AI-powered coding assistant. Let&#39;s learn how to assign Copilot coding tasks directly in GitHub! \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave ", "created": "2025-12-22T10:12:51Z", "labels": [], "context": "Exercise: Expand your team with Copilot coding agent ## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @MH1990! Welcome to yo"}


identifier: gh_issue_3753108118
source: github_issue
status: new
created_at: 2025-12-22 11:37:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3753108118", "title": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0/issues/6", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0", "body_preview": "## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-22T09:51:24Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3753108024
source: github_issue
status: new
created_at: 2025-12-22 11:37:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3753108024", "title": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0/issues/5", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0", "body_preview": "## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependen", "created": "2025-12-22T09:51:23Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3753486323
source: github_issue
status: new
created_at: 2025-12-22 11:49:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3753486323", "title": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-fdb7b8d3-adde-4498-916c-8a1f68e9eac4/issues/6", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-fdb7b8d3-adde-4498-916c-8a1f68e9eac4", "body_preview": "## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>activesupport-4.2.11.1.gem</b></summary>\n\n<p>A toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Rich support for multibyte strings, internationalization, time zones, and testing.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/activesupport-4.", "created": "2025-12-22T11:47:20Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem ## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3753486059
source: github_issue
status: new
created_at: 2025-12-22 11:49:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3753486059", "title": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-fdb7b8d3-adde-4498-916c-8a1f68e9eac4/issues/2", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-fdb7b8d3-adde-4498-916c-8a1f68e9eac4", "body_preview": "## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>addressable-2.7.0.gem</b></summary>\n\n<p>Addressable is an alternative implementation to the URI implementation that is\npart of Ruby's standard library. It is flexible, offers heuristic parsing, and\nadditionally provides extensive support for IRIs and URI templates.\n</p>\n<p>Library home page: <a hre", "created": "2025-12-22T11:47:14Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem ## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3753526928
source: github_issue
status: new
created_at: 2025-12-22 12:14:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3753526928", "title": "jest-config-ibm-cloud-cognitive-1.40.0-rc.0.tgz: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/carbon-design-system/ibm-products/issues/8757", "user": "ibm-mend-app[bot]", "user_url": "https://github.com/apps/ibm-mend-app", "repo": "ibm-products", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jest-config-ibm-cloud-cognitive-1.40.0-rc.0.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/carbon-design-system/ibm-products/commit/737b4767c82160629b1129b32dbcb47ee63ce129\">737b4767c82160629b1129b32dbcb47ee63ce12", "created": "2025-12-22T12:00:57Z", "labels": ["status: needs triage \ud83d\udd75\ufe0f\u200d\u2640\ufe0f", "type: a11y \u267f", "Mend: dependency security vulnerability"], "context": "jest-config-ibm-cloud-cognitive-1.40.0-rc.0.tgz: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jest-config-ibm-cloud-cognitive-1.40.0-rc.0.tgz"}


identifier: gh_issue_3753653338
source: github_issue
status: new
created_at: 2025-12-22 12:51:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3753653338", "title": "Add Capability Assessment: \"What We Are Capable Of\" Survey", "url": "https://github.com/STEPHENIESGEM/ridewire/issues/4", "user": "STEPHENIESGEM", "user_url": "https://github.com/STEPHENIESGEM", "repo": "ridewire", "body_preview": "Implement a multi-question capability assessment survey that maps your hub's actual resources, skills, and what people can mobilize in real time. This produces a \"What We Are Capable Of\" report so leadership and ops know exactly what they can do, where the gaps are, and how to coordinate.\n\n### Purpose\nWhen crisis or high tension hits, you need to know in the first 30 minutes:\n- What skills are ready to deploy (medical, tech, logistics, comms, etc.)\n- What resources exist (shelters, vehicles, foo", "created": "2025-12-22T12:36:44Z", "labels": [], "context": "Add Capability Assessment: \"What We Are Capable Of\" Survey Implement a multi-question capability assessment survey that maps your hub's actual resources, skills, and what people can mobilize in real time. This produces a \"What We Are Capable Of\" report so lea"}


identifier: gh_issue_3753399967
source: github_issue
status: new
created_at: 2025-12-22 12:51:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3753399967", "title": "[BleepingComputer] Not all CISA-linked alerts are urgent: ASUS Live Update CVE-2025-59374", "url": "https://github.com/SecOpsNews/news/issues/61252", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "news", "body_preview": "\n\nAn ASUS Live Update vulnerability tracked as CVE-2025-59374 has been making the rounds in infosec feeds, with some headlines implying recent or ongoing exploitation. A closer look, however, shows the CVE documents a\u00a0historic supply-chain attack in an End-of-Life (EoL) software product, not a new attack. \\[...\\]\n\n\n\n<https://www.bleepingcomputer.com/news/security/not-all-cisa-linked-alerts-are-urgent-asus-live-update-cve-2025-59374/>\n\n", "created": "2025-12-22T11:16:21Z", "labels": ["BleepingComputer"], "context": "[BleepingComputer] Not all CISA-linked alerts are urgent: ASUS Live Update CVE-2025-59374 \n\nAn ASUS Live Update vulnerability tracked as CVE-2025-59374 has been making the rounds in infosec feeds, with some headlines implying recent or ongoing exploitation. A closer look, however, shows th"}


identifier: gh_issue_3753320673
source: github_issue
status: new
created_at: 2025-12-22 12:51:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3753320673", "title": "Smart Labels Market Size and Competitive Landscape 2032", "url": "https://github.com/miajones3098-arch/REPOTS/issues/115", "user": "miajones3098-arch", "user_url": "https://github.com/miajones3098-arch", "repo": "REPOTS", "body_preview": "<h2 data-start=\"95\" data-end=\"159\"><strong data-start=\"98\" data-end=\"159\">Smart Labels Market Trends, Growth &amp; Forecast (2024&ndash;2031)</strong></h2>\n<p data-start=\"161\" data-end=\"582\">The <strong data-start=\"165\" data-end=\"195\">Global <a href=\"https://www.metastatinsight.com/report/smart-labels-market\">Smart Labels Market</a></strong>&nbsp;is emerging as one of the most transformative segments within the labeling and tracking industry. Advanced technologies such as <strong data-start=\"324", "created": "2025-12-22T10:51:22Z", "labels": [], "context": "Smart Labels Market Size and Competitive Landscape 2032 <h2 data-start=\"95\" data-end=\"159\"><strong data-start=\"98\" data-end=\"159\">Smart Labels Market Trends, Growth &amp; Forecast (2024&ndash;2031)</strong></h2>\n<p data-start=\"161\" data-end=\"582\">The <stro"}


identifier: gh_issue_3753052003
source: github_issue
status: new
created_at: 2025-12-22 12:51:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3753052003", "title": "Consider using Renovate instead of Dependabot for dependency updates", "url": "https://github.com/firezone/firezone/issues/11451", "user": "klochowicz", "user_url": "https://github.com/klochowicz", "repo": "firezone", "body_preview": "Dependabot's cooldown feature is broken, as it resets its timer whenever a dependency has a new version :( \n\nRenovate tracks these cooldown timers *independently*, giving us exactly the behaviour we want (ie. working cooldown to minimise supply chain attacks):\nhttps://docs.renovatebot.com/key-concepts/minimum-release-age/\n\n## pros\n- working dependency cooldown feature\n- `.tool-versions` support\n- dependency dashboard screen - supposedly easier management\n- (optionally) - auto-merge patch version", "created": "2025-12-22T09:38:02Z", "labels": [], "context": "Consider using Renovate instead of Dependabot for dependency updates Dependabot's cooldown feature is broken, as it resets its timer whenever a dependency has a new version :( \n\nRenovate tracks these cooldown timers *independently*, giving us exactly the behaviour we w"}


identifier: gh_issue_3753720134
source: github_issue
status: new
created_at: 2025-12-22 13:03:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3753720134", "title": "spring-boot-starter-web-3.2.5.jar: 14 vulnerabilities (highest severity is: 9.6)", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-7fd264bf-9852-47e7-b883-1aa4ff83cf63/issues/2", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-7fd264bf-9852-47e7-b883-1aa4ff83cf63", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-boot-starter-web-3.2.5.jar</b></summary>\n\n<p></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-7fd264bf-9852-47e7-b883-1aa4ff83cf63/commit/bc8f1802c9ade0038ae73636b33de5b65f2", "created": "2025-12-22T12:57:30Z", "labels": ["Mend: dependency security vulnerability"], "context": "spring-boot-starter-web-3.2.5.jar: 14 vulnerabilities (highest severity is: 9.6) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-boot-starter-web-3.2.5.jar</b></summary>"}


identifier: gh_issue_3753681103
source: github_issue
status: new
created_at: 2025-12-22 13:03:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3753681103", "title": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-ade52c82-fb9d-4bbc-bc44-6c6c965bb34c/issues/7", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-ade52c82-fb9d-4bbc-bc44-6c6c965bb34c", "body_preview": "## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>activesupport-4.2.11.1.gem</b></summary>\n\n<p>A toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Rich support for multibyte strings, internationalization, time zones, and testing.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/activesupport-4.", "created": "2025-12-22T12:44:09Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem ## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3753680795
source: github_issue
status: new
created_at: 2025-12-22 13:03:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3753680795", "title": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-ade52c82-fb9d-4bbc-bc44-6c6c965bb34c/issues/3", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-ade52c82-fb9d-4bbc-bc44-6c6c965bb34c", "body_preview": "## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>addressable-2.7.0.gem</b></summary>\n\n<p>Addressable is an alternative implementation to the URI implementation that is\npart of Ruby's standard library. It is flexible, offers heuristic parsing, and\nadditionally provides extensive support for IRIs and URI templates.\n</p>\n<p>Library home page: <a hre", "created": "2025-12-22T12:44:03Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem ## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3753601899
source: github_issue
status: new
created_at: 2025-12-22 13:03:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3753601899", "title": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4d7fa166-26cd-4ce7-8427-aa1fb0820678/issues/27", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4d7fa166-26cd-4ce7-8427-aa1fb0820678", "body_preview": "## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-web-6.1.6.jar</b></summary>\n\n<p>Spring Web</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDe", "created": "2025-12-22T12:23:11Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar ## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3753601432
source: github_issue
status: new
created_at: 2025-12-22 13:03:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3753601432", "title": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4d7fa166-26cd-4ce7-8427-aa1fb0820678/issues/21", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4d7fa166-26cd-4ce7-8427-aa1fb0820678", "body_preview": "## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-webmvc-6.1.6.jar</b></summary>\n\n<p>Spring Web MVC</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</", "created": "2025-12-22T12:23:06Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar ## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3753702732
source: github_issue
status: new
created_at: 2025-12-22 13:26:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3753702732", "title": "Improve the `deno audit` exit code", "url": "https://github.com/denoland/deno/issues/31702", "user": "Amatewasu", "user_url": "https://github.com/Amatewasu", "repo": "deno", "body_preview": "Version: Deno 2.6.3\n\nThank you for bringing `deno audit`! Currently, `deno audit` returns a exit code of `1` if it has a vulnerability with a severity `high` regardless of the `level` passed in params.\n\n```bash\n$ deno -v\ndeno 2.6.3\n$ deno audit\n..\nFound 12 vulnerabilities\nSeverity: 2 low, 6 moderate, 4 high, 0 critical\n$ echo $?\n1\n# \u2705\n$ deno audit --level=high\n...\nFound 12 vulnerabilities\nSeverity: 2 low, 6 moderate, 4 high, 0 critical\n$ echo $?\n1\n# \u2705\n$ deno audit --level=critical\n...\nFound 12 v", "created": "2025-12-22T12:51:38Z", "labels": [], "context": "Improve the `deno audit` exit code Version: Deno 2.6.3\n\nThank you for bringing `deno audit`! Currently, `deno audit` returns a exit code of `1` if it has a vulnerability with a severity `high` regardless of the `level` passed in params"}


identifier: gh_issue_3753697694
source: github_issue
status: new
created_at: 2025-12-22 13:26:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3753697694", "title": "Security Health Check - GOOD (85/100) - 2025-12-22", "url": "https://github.com/Sami9889/Sami.dev-website/issues/241", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/22/2025, 12:49:43 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 9\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Secur", "created": "2025-12-22T12:49:48Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-22 # Security Health Check Report\n\n**Generated:** 12/22/2025, 12:49:43 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security In"}


identifier: gh_issue_3753681168
source: github_issue
status: new
created_at: 2025-12-22 13:26:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3753681168", "title": "CVE-2021-28834 (Critical) detected in kramdown-2.1.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-ade52c82-fb9d-4bbc-bc44-6c6c965bb34c/issues/8", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-ade52c82-fb9d-4bbc-bc44-6c6c965bb34c", "body_preview": "## CVE-2021-28834 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>kramdown-2.1.0.gem</b></summary>\n\n<p>kramdown is yet-another-markdown-parser but fast, pure Ruby,\nusing a strict syntax definition and supporting several common extensions.\n</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/kramdown-2.1.0.gem\">https://rubygems.org/gems/kramdown-2.1.0", "created": "2025-12-22T12:44:11Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-28834 (Critical) detected in kramdown-2.1.0.gem ## CVE-2021-28834 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3753680868
source: github_issue
status: new
created_at: 2025-12-22 13:26:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3753680868", "title": "CVE-2020-14001 (Critical) detected in kramdown-2.1.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-ade52c82-fb9d-4bbc-bc44-6c6c965bb34c/issues/4", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-ade52c82-fb9d-4bbc-bc44-6c6c965bb34c", "body_preview": "## CVE-2020-14001 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>kramdown-2.1.0.gem</b></summary>\n\n<p>kramdown is yet-another-markdown-parser but fast, pure Ruby,\nusing a strict syntax definition and supporting several common extensions.\n</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/kramdown-2.1.0.gem\">https://rubygems.org/gems/kramdown-2.1.0", "created": "2025-12-22T12:44:04Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2020-14001 (Critical) detected in kramdown-2.1.0.gem ## CVE-2020-14001 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3753824459
source: github_issue
status: new
created_at: 2025-12-22 13:39:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3753824459", "title": "[Critical] SQL Injection in src/main/java/com/example/UserController.java:45", "url": "https://github.com/ElafNawaf/veracode/issues/28", "user": "ElafNawaf", "user_url": "https://github.com/ElafNawaf", "repo": "veracode", "body_preview": "**Vulnerability Details**\n\n**Type**: SQL Injection\n**Severity**: VulnerabilitySeverity.CRITICAL\n**CWE ID**: CWE-89\n**File Path**: src/main/java/com/example/UserController.java\n**Line Number**: 45\n**Confidence Score**: 0.95\n**Exploitable**: Yes\n\n**Description**:\nSQL injection vulnerability in user lookup. User input is directly concatenated into SQL query without sanitization.\n\n\n**Code Snippet**:\n```\nString query = \"SELECT ** FROM users WHERE id = \" + userId;\n```\n\n\n**Remediation**:\nUse parameteri", "created": "2025-12-22T13:33:47Z", "labels": ["severity-critical", "vulnerability", "sql-injection"], "context": "[Critical] SQL Injection in src/main/java/com/example/UserController.java:45 **Vulnerability Details**\n\n**Type**: SQL Injection\n**Severity**: VulnerabilitySeverity.CRITICAL\n**CWE ID**: CWE-89\n**File Path**: src/main/java/com/example/UserController.java\n**Line Number**: 45\n**Co"}


identifier: gh_issue_3753806708
source: github_issue
status: new
created_at: 2025-12-22 13:39:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3753806708", "title": "Upgrade `github.com/btcsuite/btcd` from v0.23.4 to Latest Version", "url": "https://github.com/hiromaily/go-crypto-wallet/issues/36", "user": "hiromaily", "user_url": "https://github.com/hiromaily", "repo": "go-crypto-wallet", "body_preview": "# Upgrade `github.com/btcsuite/btcd` from v0.23.4 to Latest Version\n\n## Summary\n\nThis issue tracks the upgrade of `github.com/btcsuite/btcd` from v0.23.4 to the latest version (v0.24.2+). This upgrade is critical for security fixes, bug fixes, and maintaining compatibility with the Bitcoin network.\n\n## Current State\n\n- **Current Version**: `github.com/btcsuite/btcd v0.23.4`\n- **Replace Directive**: The `go.mod` file contains a replace directive forcing v0.23.0:\n  ```go\n  github.com/btcsuite/btcd", "created": "2025-12-22T13:26:54Z", "labels": [], "context": "Upgrade `github.com/btcsuite/btcd` from v0.23.4 to Latest Version # Upgrade `github.com/btcsuite/btcd` from v0.23.4 to Latest Version\n\n## Summary\n\nThis issue tracks the upgrade of `github.com/btcsuite/btcd` from v0.23.4 to the latest version (v0.24.2+). This upgrade"}


identifier: gh_issue_3753865732
source: github_issue
status: new
created_at: 2025-12-22 13:51:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3753865732", "title": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability", "url": "https://github.com/BUPT424201/CVE/issues/3", "user": "BUPT424201", "user_url": "https://github.com/BUPT424201", "repo": "CVE", "body_preview": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability\n\nNAME OF AFFECTED PRODUCT(S)\n- Student Managemen System\n\nVendor Homepage\nhttps://itsourcecode.com/free-projects/php-project/student-management-system-in-php-with-source-code/\n\nAFFECTED AND/OR FIXED VERSION(S)\n- V1.0\n\nVuldb Submitter\n- BUPT_424201\n\n# Vulnerable File\n-/list_report.php\n\n## VERSION(S)\n- V1.0\n\n## Software Link\nhttps://itsourcecode.com/wp-content/uploads/2021/02/Student-Management-System-In-PHP-Source-Code.zip\n\n##", "created": "2025-12-22T13:49:13Z", "labels": [], "context": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability itsourcecode Student Management System V1.0 SQL Injection Vulnerability\n\nNAME OF AFFECTED PRODUCT(S)\n- Student Managemen System\n\nVendor Homepage\nhttps://itsourcecode.com/free-projects/php-project/stud"}


identifier: gh_issue_3753863733
source: github_issue
status: new
created_at: 2025-12-22 13:51:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3753863733", "title": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability", "url": "https://github.com/BUPT424201/CVE/issues/2", "user": "BUPT424201", "user_url": "https://github.com/BUPT424201", "repo": "CVE", "body_preview": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability\n\nNAME OF AFFECTED PRODUCT(S)\n- Student Managemen System\n\nVendor Homepage\nhttps://itsourcecode.com/free-projects/php-project/student-management-system-in-php-with-source-code/\n\nAFFECTED AND/OR FIXED VERSION(S)\n- V1.0\n\nVuldb Submitter\n- BUPT_424201\n\n# Vulnerable File\n-/form137.php\n\n## VERSION(S)\n- V1.0\n\n## Software Link\nhttps://itsourcecode.com/wp-content/uploads/2021/02/Student-Management-System-In-PHP-Source-Code.zip\n\n## PRO", "created": "2025-12-22T13:48:34Z", "labels": [], "context": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability itsourcecode Student Management System V1.0 SQL Injection Vulnerability\n\nNAME OF AFFECTED PRODUCT(S)\n- Student Managemen System\n\nVendor Homepage\nhttps://itsourcecode.com/free-projects/php-project/stud"}


identifier: gh_issue_3753861941
source: github_issue
status: new
created_at: 2025-12-22 13:51:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3753861941", "title": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability", "url": "https://github.com/BUPT424201/CVE/issues/1", "user": "BUPT424201", "user_url": "https://github.com/BUPT424201", "repo": "CVE", "body_preview": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability\n\nNAME OF AFFECTED PRODUCT(S)\n- Student Managemen System\n\nVendor Homepage\nhttps://itsourcecode.com/free-projects/php-project/student-management-system-in-php-with-source-code/\n\nAFFECTED AND/OR FIXED VERSION(S)\n- V1.0\n\nVuldb Submitter\n-  BUPT_424201\n\n# Vulnerable File\n-/delsub.php\n\n## VERSION(S)\n- V1.0\n\n## Software Link\nhttps://itsourcecode.com/wp-content/uploads/2021/02/Student-Management-System-In-PHP-Source-Code.zip\n\n## PRO", "created": "2025-12-22T13:47:55Z", "labels": [], "context": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability itsourcecode Student Management System V1.0 SQL Injection Vulnerability\n\nNAME OF AFFECTED PRODUCT(S)\n- Student Managemen System\n\nVendor Homepage\nhttps://itsourcecode.com/free-projects/php-project/stud"}


identifier: gh_issue_3753849446
source: github_issue
status: new
created_at: 2025-12-22 13:51:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3753849446", "title": "[Critical] SQL Injection in src/main/java/com/example/UserController.java:45", "url": "https://github.com/ElafNawaf/veracode/issues/33", "user": "ElafNawaf", "user_url": "https://github.com/ElafNawaf", "repo": "veracode", "body_preview": "**Vulnerability Details**\n\n**Type**: SQL Injection\n**Severity**: VulnerabilitySeverity.CRITICAL\n**CWE ID**: CWE-89\n**File Path**: src/main/java/com/example/UserController.java\n**Line Number**: 45\n**Confidence Score**: 0.95\n**Exploitable**: Yes\n\n**Description**:\nSQL injection vulnerability in user lookup. User input is directly concatenated into SQL query without sanitization.\n\n\n**Code Snippet**:\n```\nString query = \"SELECT ** FROM users WHERE id = \" + userId;\n```\n\n\n**Remediation**:\nUse parameteri", "created": "2025-12-22T13:43:35Z", "labels": ["severity-critical", "vulnerability", "sql-injection"], "context": "[Critical] SQL Injection in src/main/java/com/example/UserController.java:45 **Vulnerability Details**\n\n**Type**: SQL Injection\n**Severity**: VulnerabilitySeverity.CRITICAL\n**CWE ID**: CWE-89\n**File Path**: src/main/java/com/example/UserController.java\n**Line Number**: 45\n**Co"}


identifier: gh_issue_3753722891
source: github_issue
status: new
created_at: 2025-12-22 13:51:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3753722891", "title": "Add REST API for Direct Agent Interaction (Testing & Integration)", "url": "https://github.com/gpt153/health-agent/issues/25", "user": "gpt153", "user_url": "https://github.com/gpt153", "repo": "health-agent", "body_preview": "# REST API for Health Agent - Implementation Plan\n\n## Overview\n\nAdd a REST API layer to the health agent to enable direct interaction without requiring Telegram. This will support:\n1. **Automated testing** - SCAR and PO can test agent functionality programmatically\n2. **Integration testing** - Verify memory retention, reminders, and data persistence\n3. **Development workflow** - Faster iteration without Telegram overhead\n\n## Why REST API?\n\n### Current Limitations\n- **Telegram-only access** - Tes", "created": "2025-12-22T12:58:40Z", "labels": [], "context": "Add REST API for Direct Agent Interaction (Testing & Integration) # REST API for Health Agent - Implementation Plan\n\n## Overview\n\nAdd a REST API layer to the health agent to enable direct interaction without requiring Telegram. This will support:\n1. **Automated test"}


identifier: gh_issue_3753885502
source: github_issue
status: new
created_at: 2025-12-22 14:04:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3753885502", "title": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4be61c10-868b-4ff1-ac76-04075f0d86bd/issues/6", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4be61c10-868b-4ff1-ac76-04075f0d86bd", "body_preview": "## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>activesupport-4.2.11.1.gem</b></summary>\n\n<p>A toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Rich support for multibyte strings, internationalization, time zones, and testing.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/activesupport-4.", "created": "2025-12-22T13:54:59Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem ## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3753885134
source: github_issue
status: new
created_at: 2025-12-22 14:04:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3753885134", "title": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4be61c10-868b-4ff1-ac76-04075f0d86bd/issues/2", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4be61c10-868b-4ff1-ac76-04075f0d86bd", "body_preview": "## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>addressable-2.7.0.gem</b></summary>\n\n<p>Addressable is an alternative implementation to the URI implementation that is\npart of Ruby's standard library. It is flexible, offers heuristic parsing, and\nadditionally provides extensive support for IRIs and URI templates.\n</p>\n<p>Library home page: <a hre", "created": "2025-12-22T13:54:53Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem ## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3753749014
source: github_issue
status: new
created_at: 2025-12-22 14:16:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3753749014", "title": "Get the expert Mobile App Development Abu Dhabi solutions by DXB APPS", "url": "https://github.com/douglascraigschmidt/Android-App-Development/issues/37", "user": "dxbappsabudhabi1", "user_url": "https://github.com/dxbappsabudhabi1", "repo": "Android-App-Development", "body_preview": "The current competitive business environment requires businesses to have dependable mobile solutions that can be used to access and maintain users. DXB APPS delivers high-impact [mobile app development Abu Dhabi](https://dxbapps.com/mobile-app-development-abudhabi.php) services that combine strategy, design, and technology. Our ideas are converted into scalable applications through quality mobile application development Abu Dhabi solutions. Our organised app strategy guarantees performance, safe", "created": "2025-12-22T13:07:31Z", "labels": [], "context": "Get the expert Mobile App Development Abu Dhabi solutions by DXB APPS The current competitive business environment requires businesses to have dependable mobile solutions that can be used to access and maintain users. DXB APPS delivers high-impact [mobile app developmen"}


identifier: gh_issue_3753945716
source: github_issue
status: new
created_at: 2025-12-22 14:17:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3753945716", "title": "[Dependency]: Update Apache Log4j to version >= 2.25.3 to fix a security vulnerability", "url": "https://github.com/openo-beta/Open-O/issues/1055", "user": "LiamStanziani", "user_url": "https://github.com/LiamStanziani", "repo": "Open-O", "body_preview": "### Dependency\nApache Log4j\n\n### Current Version\n2.25.1\n\n### Target Version\n2.25.3\n\n### Reason\n\nSecurity vulnerability\n\n### Breaking Changes\n\n- No major breaking changes currently observed, only bumped by 2 versions\n\n### Testing\n\n- Run the tests\n- Smoke test the application\n\n### Priority\n\nCritical (Security fix)\n\n### Checklist\n\n- [x] I have reviewed the changelog for breaking changes\n- [x] I have identified all affected code areas\n- [ ] I have a rollback plan if issues arise", "created": "2025-12-22T14:13:11Z", "labels": ["dependencies", "type: maintenance"], "context": "[Dependency]: Update Apache Log4j to version >= 2.25.3 to fix a security vulnerability ### Dependency\nApache Log4j\n\n### Current Version\n2.25.1\n\n### Target Version\n2.25.3\n\n### Reason\n\nSecurity vulnerability\n\n### Breaking Changes\n\n- No major breaking changes currently observed, only bumpe"}


identifier: gh_issue_3753995799
source: github_issue
status: new
created_at: 2025-12-22 14:28:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3753995799", "title": "Renovate Dashboard \ud83e\udd16", "url": "https://github.com/shelken/home-ops/issues/518", "user": "my-action-bot[bot]", "user_url": "https://github.com/apps/my-action-bot", "repo": "home-ops", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Open\n\nThe following updates have all been created. To force a retry/rebase of any, click on a checkbox below.\n\n - [ ] <!-- rebase-branch=renovate/ghcr.io-home-operations-charts-mirror-keda-2.x -->[fix(container): update image ghcr.io/home-operations/charts-mirror/keda ( 2.18.2 \u2192 2.18.3 )](../pull/514)\n - [ ] <!-- rebase-branch=", "created": "2025-12-22T14:26:30Z", "labels": [], "context": "Renovate Dashboard \ud83e\udd16 This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Open\n\nThe following updates h"}


identifier: gh_issue_3753691542
source: github_issue
status: new
created_at: 2025-12-22 14:28:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3753691542", "title": "spring-data-opensearch-3.0.0-SNAPSHOT: 1 vulnerabilities (highest severity is: 5.4)", "url": "https://github.com/opensearch-project/spring-data-opensearch/issues/604", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "spring-data-opensearch", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-data-opensearch-3.0.0-SNAPSHOT</b></summary>\n\n<p></p>\n<p>Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.apache.logging.log4j/log4j-core/2.21.0/122e1a9e0603cc9eae07b0846a6ff01f2454bc49/log4j-core-2.21.0.jar,/tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.apache.logging.log4j/log4", "created": "2025-12-22T12:47:38Z", "labels": ["untriaged", "Mend: dependency security vulnerability"], "context": "spring-data-opensearch-3.0.0-SNAPSHOT: 1 vulnerabilities (highest severity is: 5.4) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-data-opensearch-3.0.0-SNAPSHOT</b></summ"}


identifier: gh_issue_3753691425
source: github_issue
status: new
created_at: 2025-12-22 14:28:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3753691425", "title": "opensearch-rest-high-level-client-3.4.0.jar: 1 vulnerabilities (highest severity is: 5.4)", "url": "https://github.com/opensearch-project/spring-data-opensearch/issues/602", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "spring-data-opensearch", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>opensearch-rest-high-level-client-3.4.0.jar</b></summary>\n\n<p></p>\n<p>Path to dependency file: /spring-data-opensearch-test-autoconfigure/build.gradle.kts</p>\n<p>Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.apache.logging.log4j/log4j-core/2.21.0/122e1a9e0603cc9eae07b0846a6ff01f2454bc49/log4j-core-2.", "created": "2025-12-22T12:47:35Z", "labels": ["untriaged", "Mend: dependency security vulnerability"], "context": "opensearch-rest-high-level-client-3.4.0.jar: 1 vulnerabilities (highest severity is: 5.4) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>opensearch-rest-high-level-client-3.4.0.jar</b>"}


identifier: gh_issue_3753691359
source: github_issue
status: new
created_at: 2025-12-22 14:28:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3753691359", "title": "spring-data-opensearch-starter-3.0.0-SNAPSHOT: 1 vulnerabilities (highest severity is: 5.4)", "url": "https://github.com/opensearch-project/spring-data-opensearch/issues/601", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "spring-data-opensearch", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-data-opensearch-starter-3.0.0-SNAPSHOT</b></summary>\n\n<p></p>\n<p>Path to dependency file: /spring-data-opensearch-docker-compose/build.gradle.kts</p>\n<p>Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.apache.logging.log4j/log4j-core/2.21.0/122e1a9e0603cc9eae07b0846a6ff01f2454bc49/log4j-core-2.21", "created": "2025-12-22T12:47:34Z", "labels": ["untriaged", "Mend: dependency security vulnerability"], "context": "spring-data-opensearch-starter-3.0.0-SNAPSHOT: 1 vulnerabilities (highest severity is: 5.4) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-data-opensearch-starter-3.0.0-SNAPSHOT</"}


identifier: gh_issue_3753994293
source: github_issue
status: new
created_at: 2025-12-22 14:40:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3753994293", "title": "Seeyou V1.0 Vulnerability SQL Injection", "url": "https://github.com/cly-yuxiu/CVE/issues/2", "user": "cly-yuxiu", "user_url": "https://github.com/cly-yuxiu", "repo": "CVE", "body_preview": "Seeyou V1.0 Vulnerability SQL Injection\n\nNAME OF AFFECTED PRODUCT(S)\n- Seeyon\n\nVendor Homepage\nhttps://www.seeyon.com/\n\nAFFECTED AND/OR FIXED VERSION(S)\n- V1.0\n\nVuldb Submitter\n- yuxiu\n\n# Vulnerable File\n-/carManager/carUseDetailList.j%73p\n\n## VERSION(S)\n- V1.0\n\n## PROBLEM TYPE\n# Vulnerability Type\n- SQL Injection\n\n## Root Cause\n- A SQL injection vulnerability was found in the \"/carManager/carUseDetailList.j%73p\" file of the \"Seeyon Collaborative Platform\". The reason for this issue is that atta", "created": "2025-12-22T14:26:00Z", "labels": [], "context": "Seeyou V1.0 Vulnerability SQL Injection Seeyou V1.0 Vulnerability SQL Injection\n\nNAME OF AFFECTED PRODUCT(S)\n- Seeyon\n\nVendor Homepage\nhttps://www.seeyon.com/\n\nAFFECTED AND/OR FIXED VERSION(S)\n- V1.0\n\nVuldb Submitter\n- yuxiu\n\n# Vulnerable F"}


identifier: gh_issue_3753990782
source: github_issue
status: new
created_at: 2025-12-22 14:40:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3753990782", "title": "Yonyou KSOA V1.0 Vulnerability SQL Injection", "url": "https://github.com/cly-yuxiu/CVE/issues/1", "user": "cly-yuxiu", "user_url": "https://github.com/cly-yuxiu", "repo": "CVE", "body_preview": "Yonyou KSOA V1.0 Vulnerability SQL Injection\nNAME OF AFFECTED PRODUCT(S)\n- Yonyou KSOA\n\nVendor Homepage\nhttps://www.yonyou.com/\n\nAFFECTED AND/OR FIXED VERSION(S)\n- V1.0\n\nVuldb Submitter\n- yuxiu\n\n# Vulnerable File\n-/kp/PrintZPYG.jsp\n\n## VERSION(S)\n- V1.0\n\n## PROBLEM TYPE\n# Vulnerability Type\n- SQL Injection\n\n## Root Cause\n- A SQL injection vulnerability was found in the \"/kp/PrintZPYG.jsp\" file of the \"Yonyou KSOA\". The reason for this issue is that attackers can inject malicious code from the pa", "created": "2025-12-22T14:24:57Z", "labels": [], "context": "Yonyou KSOA V1.0 Vulnerability SQL Injection Yonyou KSOA V1.0 Vulnerability SQL Injection\nNAME OF AFFECTED PRODUCT(S)\n- Yonyou KSOA\n\nVendor Homepage\nhttps://www.yonyou.com/\n\nAFFECTED AND/OR FIXED VERSION(S)\n- V1.0\n\nVuldb Submitter\n- yuxiu\n\n# Vul"}


identifier: gh_issue_3753983926
source: github_issue
status: new
created_at: 2025-12-22 14:40:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3753983926", "title": "Remote Code Execution (RCE) through \u201c/tools/call\u201d endpoint", "url": "https://github.com/chatchat-space/Langchain-Chatchat/issues/5430", "user": "YLChen-007", "user_url": "https://github.com/YLChen-007", "repo": "Langchain-Chatchat", "body_preview": "\n### Type of issue\nRemote Code Execution (RCE), Unsecured API Endpoint\n\n### Full paths of source file(s) related to the manifestation of the issue\n`libs/chatchat-server/chatchat/server/api_server/tool_routes.py`\n\n### The location of the affected source code\n- **Function**: `call_tool`\n- **Related Endpoint**: `/tools/call`\n\n### Any special configuration required to reproduce the issue\nThe application must be running with default configuration. No special options are required.\n\n### Step-by-step in", "created": "2025-12-22T14:22:58Z", "labels": ["bug"], "context": "Remote Code Execution (RCE) through \u201c/tools/call\u201d endpoint \n### Type of issue\nRemote Code Execution (RCE), Unsecured API Endpoint\n\n### Full paths of source file(s) related to the manifestation of the issue\n`libs/chatchat-server/chatchat/server/api_server/tool"}


identifier: gh_issue_3753885571
source: github_issue
status: new
created_at: 2025-12-22 14:40:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3753885571", "title": "CVE-2021-28834 (Critical) detected in kramdown-2.1.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4be61c10-868b-4ff1-ac76-04075f0d86bd/issues/7", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4be61c10-868b-4ff1-ac76-04075f0d86bd", "body_preview": "## CVE-2021-28834 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>kramdown-2.1.0.gem</b></summary>\n\n<p>kramdown is yet-another-markdown-parser but fast, pure Ruby,\nusing a strict syntax definition and supporting several common extensions.\n</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/kramdown-2.1.0.gem\">https://rubygems.org/gems/kramdown-2.1.0", "created": "2025-12-22T13:55:01Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-28834 (Critical) detected in kramdown-2.1.0.gem ## CVE-2021-28834 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3754047001
source: github_issue
status: new
created_at: 2025-12-22 14:53:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3754047001", "title": "CVE-2022-31163 (High) detected in tzinfo-1.2.7.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-88bf1a9b-ab3a-4eda-9568-094ef70e1a44/issues/16", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-88bf1a9b-ab3a-4eda-9568-094ef70e1a44", "body_preview": "## CVE-2022-31163 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tzinfo-1.2.7.gem</b></summary>\n\n<p>TZInfo provides daylight savings aware transformations between times in different time zones.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/tzinfo-1.2.7.gem\">https://rubygems.org/gems/tzinfo-1.2.7.gem</a></p>\n<p>Path to dependency file: /RxSwift-mas", "created": "2025-12-22T14:41:47Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2022-31163 (High) detected in tzinfo-1.2.7.gem ## CVE-2022-31163 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3754046942
source: github_issue
status: new
created_at: 2025-12-22 14:53:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3754046942", "title": "CVE-2022-24440 (High) detected in cocoapods-downloader-1.3.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-88bf1a9b-ab3a-4eda-9568-094ef70e1a44/issues/15", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-88bf1a9b-ab3a-4eda-9568-094ef70e1a44", "body_preview": "## CVE-2022-24440 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>cocoapods-downloader-1.3.0.gem</b></summary>\n\n<p></p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem\">https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem</a></p>\n<p>Path to dependency file: /RxSwift-master-limited/Gemfile.lock</p>\n<p>Path to vulnerable ", "created": "2025-12-22T14:41:45Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2022-24440 (High) detected in cocoapods-downloader-1.3.0.gem ## CVE-2022-24440 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3754046922
source: github_issue
status: new
created_at: 2025-12-22 14:53:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3754046922", "title": "CVE-2022-31163 (High) detected in tzinfo-1.2.7.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-88bf1a9b-ab3a-4eda-9568-094ef70e1a44/issues/14", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-88bf1a9b-ab3a-4eda-9568-094ef70e1a44", "body_preview": "## CVE-2022-31163 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tzinfo-1.2.7.gem</b></summary>\n\n<p>TZInfo provides daylight savings aware transformations between times in different time zones.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/tzinfo-1.2.7.gem\">https://rubygems.org/gems/tzinfo-1.2.7.gem</a></p>\n<p>Path to dependency file: /RxSwift-mas", "created": "2025-12-22T14:41:45Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2022-31163 (High) detected in tzinfo-1.2.7.gem ## CVE-2022-31163 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3754046876
source: github_issue
status: new
created_at: 2025-12-22 14:53:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3754046876", "title": "CVE-2021-28834 (Critical) detected in kramdown-2.1.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-88bf1a9b-ab3a-4eda-9568-094ef70e1a44/issues/13", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-88bf1a9b-ab3a-4eda-9568-094ef70e1a44", "body_preview": "## CVE-2021-28834 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>kramdown-2.1.0.gem</b></summary>\n\n<p>kramdown is yet-another-markdown-parser but fast, pure Ruby,\nusing a strict syntax definition and supporting several common extensions.\n</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/kramdown-2.1.0.gem\">https://rubygems.org/gems/kramdown-2.1.0", "created": "2025-12-22T14:41:44Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-28834 (Critical) detected in kramdown-2.1.0.gem ## CVE-2021-28834 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3754046812
source: github_issue
status: new
created_at: 2025-12-22 14:53:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3754046812", "title": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-88bf1a9b-ab3a-4eda-9568-094ef70e1a44/issues/11", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-88bf1a9b-ab3a-4eda-9568-094ef70e1a44", "body_preview": "## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>activesupport-4.2.11.1.gem</b></summary>\n\n<p>A toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Rich support for multibyte strings, internationalization, time zones, and testing.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/activesupport-4.", "created": "2025-12-22T14:41:42Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem ## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3754046582
source: github_issue
status: new
created_at: 2025-12-22 14:53:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3754046582", "title": "CVE-2020-14001 (Critical) detected in kramdown-2.1.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-88bf1a9b-ab3a-4eda-9568-094ef70e1a44/issues/5", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-88bf1a9b-ab3a-4eda-9568-094ef70e1a44", "body_preview": "## CVE-2020-14001 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>kramdown-2.1.0.gem</b></summary>\n\n<p>kramdown is yet-another-markdown-parser but fast, pure Ruby,\nusing a strict syntax definition and supporting several common extensions.\n</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/kramdown-2.1.0.gem\">https://rubygems.org/gems/kramdown-2.1.0", "created": "2025-12-22T14:41:37Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2020-14001 (Critical) detected in kramdown-2.1.0.gem ## CVE-2020-14001 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3754085852
source: github_issue
status: new
created_at: 2025-12-22 15:05:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3754085852", "title": "\ud83d\udfe0 [SCA] GHSA-cxww-7g56-2vh6 (1 occurrence)", "url": "https://github.com/JulienZammit/scougal-rubber-website/issues/25", "user": "test-recette-alpha[bot]", "user_url": "https://github.com/apps/test-recette-alpha", "repo": "scougal-rubber-website", "body_preview": "## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `main`\n\n**1** occurrence(s) of **GHSA-cxww-7g56-2vh6** detected.\n\n**Highest Severity**: \ud83d\udfe0 HIGH\n\n### Description\n\n### Impact\n\nVersions of `actions/download-artifact` before 4.1.3 are vulnerable to arbitrary file write when downloading and extracting a specifically crafted artifact that contains path traversal filenames.\n\n### Patches\n\nUpgrade to version 4.1.3 or higher. Alternatively use 'v4' tag which points to the latest and s", "created": "2025-12-22T14:54:08Z", "labels": ["security", "cybedefend", "severity:high", "sca"], "context": "\ud83d\udfe0 [SCA] GHSA-cxww-7g56-2vh6 (1 occurrence) ## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `main`\n\n**1** occurrence(s) of **GHSA-cxww-7g56-2vh6** detected.\n\n**Highest Severity**: \ud83d\udfe0 HIGH\n\n### Description\n\n### Impact\n\nVersi"}


identifier: gh_issue_3753964872
source: github_issue
status: new
created_at: 2025-12-22 15:18:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3753964872", "title": "feat: implement claude-code-tool-manager as NixOS package", "url": "https://github.com/olafkfreund/nixos_config/issues/110", "user": "olafkfreund", "user_url": "https://github.com/olafkfreund", "repo": "nixos_config", "body_preview": "## Description\n\nImplement [claude-code-tool-manager](https://github.com/tylergraydev/claude-code-tool-manager) as a NixOS package to provide visual management for Claude Code's configuration including MCPs, Skills, Hooks, and Sub-Agents.\n\n## Context\n\nClaude Code Tool Manager is a desktop application built with Tauri (Svelte + Rust) that provides a unified interface for managing Claude Code configuration instead of manually editing scattered JSON and markdown files. This would significantly impro", "created": "2025-12-22T14:17:56Z", "labels": ["type:feature", "priority:medium"], "context": "feat: implement claude-code-tool-manager as NixOS package ## Description\n\nImplement [claude-code-tool-manager](https://github.com/tylergraydev/claude-code-tool-manager) as a NixOS package to provide visual management for Claude Code's configuration including"}


identifier: gh_issue_3754186646
source: github_issue
status: new
created_at: 2025-12-22 15:30:06
data:
  {"source": "github_issue", "identifier": "gh_issue_3754186646", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/lemmonr/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @lemmonr! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019l", "created": "2025-12-22T15:21:58Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @lemmonr! Welcome to yo"}


identifier: gh_issue_3754145919
source: github_issue
status: new
created_at: 2025-12-22 15:30:06
data:
  {"source": "github_issue", "identifier": "gh_issue_3754145919", "title": "\ud83d\udfe0 [SCA] GHSA-5j98-mcp5-4vw2 (1 occurrence)", "url": "https://github.com/JulienZammit/scougal-rubber-website/issues/56", "user": "test-recette-alpha[bot]", "user_url": "https://github.com/apps/test-recette-alpha", "repo": "scougal-rubber-website", "body_preview": "## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `main`\n\n**1** occurrence(s) of **GHSA-5j98-mcp5-4vw2** detected.\n\n**Highest Severity**: \ud83d\udfe0 HIGH\n\n### Description\n\n### Summary\n\nThe glob CLI contains a command injection vulnerability in its `-c/--cmd` option that allows arbitrary command execution when processing files with malicious names. When `glob -c <command> <patterns>` is used, matched filenames are passed to a shell with `shell: true`, enabling shell metacharacters in f", "created": "2025-12-22T15:10:55Z", "labels": ["security", "cybedefend", "severity:high", "sca"], "context": "\ud83d\udfe0 [SCA] GHSA-5j98-mcp5-4vw2 (1 occurrence) ## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `main`\n\n**1** occurrence(s) of **GHSA-5j98-mcp5-4vw2** detected.\n\n**Highest Severity**: \ud83d\udfe0 HIGH\n\n### Description\n\n### Summary\n\nThe "}


identifier: gh_issue_3754087578
source: github_issue
status: new
created_at: 2025-12-22 15:30:06
data:
  {"source": "github_issue", "identifier": "gh_issue_3754087578", "title": "\ud83d\udfe0 [SCA] GHSA-5j98-mcp5-4vw2 (1 occurrence)", "url": "https://github.com/JulienZammit/scougal-rubber-website/issues/37", "user": "test-recette-alpha[bot]", "user_url": "https://github.com/apps/test-recette-alpha", "repo": "scougal-rubber-website", "body_preview": "## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `main`\n\n**1** occurrence(s) of **GHSA-5j98-mcp5-4vw2** detected.\n\n**Highest Severity**: \ud83d\udfe0 HIGH\n\n### Description\n\n### Summary\n\nThe glob CLI contains a command injection vulnerability in its `-c/--cmd` option that allows arbitrary command execution when processing files with malicious names. When `glob -c <command> <patterns>` is used, matched filenames are passed to a shell with `shell: true`, enabling shell metacharacters in f", "created": "2025-12-22T14:54:38Z", "labels": ["security", "cybedefend", "severity:high", "sca"], "context": "\ud83d\udfe0 [SCA] GHSA-5j98-mcp5-4vw2 (1 occurrence) ## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `main`\n\n**1** occurrence(s) of **GHSA-5j98-mcp5-4vw2** detected.\n\n**Highest Severity**: \ud83d\udfe0 HIGH\n\n### Description\n\n### Summary\n\nThe "}


identifier: gh_issue_3754071276
source: github_issue
status: new
created_at: 2025-12-22 15:30:06
data:
  {"source": "github_issue", "identifier": "gh_issue_3754071276", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/tokaahmed4/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @tokaahmed4! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, ", "created": "2025-12-22T14:49:21Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @tokaahmed4! Welcome to"}


identifier: gh_issue_3753974358
source: github_issue
status: new
created_at: 2025-12-22 15:30:06
data:
  {"source": "github_issue", "identifier": "gh_issue_3753974358", "title": "Warehouse Execution System (WES) Market Size, Share, Future Growth, 2032", "url": "https://github.com/athingforjaz/dailyblog/issues/17", "user": "nikhilmore6225-crypto", "user_url": "https://github.com/nikhilmore6225-crypto", "repo": "dailyblog", "body_preview": "Market Overview\nAccording to Metastat Insight-style structured analysis, the global [Warehouse Execution System (WES) market](https://www.metastatinsight.com/report/warehouse-execution-system-wes-market) size (TAM) is valued at USD 2,545.2 million in 2025 and is projected to reach USD 8,271.2 million by 2033, exhibiting a CAGR of 15.1% from 2026 to 2033.\nThe market is driven by the burgeoning e-commerce sector and the imperative for precision in inventory stewardship, positioning WES as a pivota", "created": "2025-12-22T14:20:41Z", "labels": [], "context": "Warehouse Execution System (WES) Market Size, Share, Future Growth, 2032 Market Overview\nAccording to Metastat Insight-style structured analysis, the global [Warehouse Execution System (WES) market](https://www.metastatinsight.com/report/warehouse-execution-system-wes-mark"}


identifier: gh_issue_3754148142
source: github_issue
status: new
created_at: 2025-12-22 15:30:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3754148142", "title": "\ud83d\udd34 [SCA] GHSA-f82v-jwr5-mffw (1 occurrence)", "url": "https://github.com/JulienZammit/scougal-rubber-website/issues/69", "user": "test-recette-alpha[bot]", "user_url": "https://github.com/apps/test-recette-alpha", "repo": "scougal-rubber-website", "body_preview": "## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `main`\n\n**1** occurrence(s) of **GHSA-f82v-jwr5-mffw** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\n# Impact\nIt is possible to bypass authorization checks within a Next.js application, if the authorization check occurs in middleware.\n\n# Patches\n* For Next.js 15.x, this issue is fixed in `15.2.3`\n* For Next.js 14.x, this issue is fixed in `14.2.25`\n* For Next.js 13.x, this issue is fixed in `13.5.9`\n* For Next.", "created": "2025-12-22T15:11:29Z", "labels": ["security", "cybedefend", "severity:critical", "sca"], "context": "\ud83d\udd34 [SCA] GHSA-f82v-jwr5-mffw (1 occurrence) ## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `main`\n\n**1** occurrence(s) of **GHSA-f82v-jwr5-mffw** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\n# Impact\nIt i"}


identifier: gh_issue_3754144049
source: github_issue
status: new
created_at: 2025-12-22 15:30:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3754144049", "title": "\ud83d\udd34 [SAST] Path Join/Resolve Traversal (2 occurrences)", "url": "https://github.com/JulienZammit/scougal-rubber-website/issues/45", "user": "test-recette-alpha[bot]", "user_url": "https://github.com/apps/test-recette-alpha", "repo": "scougal-rubber-website", "body_preview": "## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `main`\n\n**2** occurrence(s) of **Path Join/Resolve Traversal** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nA **path traversal** vulnerability arises when untrusted input is passed directly to **path.join** or **path.resolve** without validation or sanitization. These functions will concatenate segments including `..` sequences, enabling an attacker to escape the intended directory. For example, supplying `../", "created": "2025-12-22T15:10:25Z", "labels": ["security", "cybedefend", "sast", "severity:critical"], "context": "\ud83d\udd34 [SAST] Path Join/Resolve Traversal (2 occurrences) ## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `main`\n\n**2** occurrence(s) of **Path Join/Resolve Traversal** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nA **p"}


identifier: gh_issue_3754136935
source: github_issue
status: new
created_at: 2025-12-22 15:30:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3754136935", "title": "spring-boot-starter-web-3.2.5.jar: 14 vulnerabilities (highest severity is: 9.6)", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-cf730380-c701-48c3-9dd2-ba4818072813/issues/2", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-cf730380-c701-48c3-9dd2-ba4818072813", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-boot-starter-web-3.2.5.jar</b></summary>\n\n<p></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-cf730380-c701-48c3-9dd2-ba4818072813/commit/372843b0cff60207133c1b38f8a246f93bc", "created": "2025-12-22T15:08:34Z", "labels": ["Mend: dependency security vulnerability"], "context": "spring-boot-starter-web-3.2.5.jar: 14 vulnerabilities (highest severity is: 9.6) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-boot-starter-web-3.2.5.jar</b></summary>"}


identifier: gh_issue_3754087470
source: github_issue
status: new
created_at: 2025-12-22 15:30:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3754087470", "title": "\ud83d\udd34 [SCA] GHSA-f82v-jwr5-mffw (1 occurrence)", "url": "https://github.com/JulienZammit/scougal-rubber-website/issues/36", "user": "test-recette-alpha[bot]", "user_url": "https://github.com/apps/test-recette-alpha", "repo": "scougal-rubber-website", "body_preview": "## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `main`\n\n**1** occurrence(s) of **GHSA-f82v-jwr5-mffw** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\n# Impact\nIt is possible to bypass authorization checks within a Next.js application, if the authorization check occurs in middleware.\n\n# Patches\n* For Next.js 15.x, this issue is fixed in `15.2.3`\n* For Next.js 14.x, this issue is fixed in `14.2.25`\n* For Next.js 13.x, this issue is fixed in `13.5.9`\n* For Next.", "created": "2025-12-22T14:54:35Z", "labels": ["security", "cybedefend", "severity:critical", "sca"], "context": "\ud83d\udd34 [SCA] GHSA-f82v-jwr5-mffw (1 occurrence) ## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `main`\n\n**1** occurrence(s) of **GHSA-f82v-jwr5-mffw** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\n# Impact\nIt i"}


identifier: gh_issue_3754085371
source: github_issue
status: new
created_at: 2025-12-22 15:30:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3754085371", "title": "\ud83d\udd34 [SAST] Path Join/Resolve Traversal (2 occurrences)", "url": "https://github.com/JulienZammit/scougal-rubber-website/issues/21", "user": "test-recette-alpha[bot]", "user_url": "https://github.com/apps/test-recette-alpha", "repo": "scougal-rubber-website", "body_preview": "## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `main`\n\n**2** occurrence(s) of **Path Join/Resolve Traversal** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nA **path traversal** vulnerability arises when untrusted input is passed directly to **path.join** or **path.resolve** without validation or sanitization. These functions will concatenate segments including `..` sequences, enabling an attacker to escape the intended directory. For example, supplying `../", "created": "2025-12-22T14:53:57Z", "labels": ["security", "cybedefend", "sast", "severity:critical"], "context": "\ud83d\udd34 [SAST] Path Join/Resolve Traversal (2 occurrences) ## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `main`\n\n**2** occurrence(s) of **Path Join/Resolve Traversal** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nA **p"}


identifier: gh_issue_3754213885
source: github_issue
status: new
created_at: 2025-12-22 15:42:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3754213885", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/Emma2906/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Emma2906! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019", "created": "2025-12-22T15:29:24Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Emma2906! Welcome to y"}


identifier: gh_issue_3754185196
source: github_issue
status: new
created_at: 2025-12-22 15:54:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3754185196", "title": "Update axios dependency to fix security vulnerability", "url": "https://github.com/hyperweb-io/telescope/issues/826", "user": "Miguiz", "user_url": "https://github.com/Miguiz", "repo": "telescope", "body_preview": "Hello,\n\nI noticed that `@cosmology/lcd` depends on a vulnerable version of `axios` (1.0.0 - 1.11.0) which has a high severity security issue.\n\n**Vulnerability details:**\n- DoS attack through lack of data size check\n- Advisory: https://github.com/advisories/GHSA-4hjh-wcwx-xvwj\n\n**Current situation:**\n- `@cosmology/lcd >=0.13.2` depends on vulnerable versions of axios\n- We're currently using `@cosmology/lcd@^0.15.0`\n\n**Request:**\nCould you update `@cosmology/lcd` to use a secure version of axios (", "created": "2025-12-22T15:21:28Z", "labels": [], "context": "Update axios dependency to fix security vulnerability Hello,\n\nI noticed that `@cosmology/lcd` depends on a vulnerable version of `axios` (1.0.0 - 1.11.0) which has a high severity security issue.\n\n**Vulnerability details:**\n- DoS attack through lack of d"}


identifier: gh_issue_3754145094
source: github_issue
status: new
created_at: 2025-12-22 15:55:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3754145094", "title": "\ud83d\udfe0 [SCA] GHSA-cxww-7g56-2vh6 (1 occurrence)", "url": "https://github.com/JulienZammit/scougal-rubber-website/issues/50", "user": "test-recette-alpha[bot]", "user_url": "https://github.com/apps/test-recette-alpha", "repo": "scougal-rubber-website", "body_preview": "## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `main`\n\n**1** occurrence(s) of **GHSA-cxww-7g56-2vh6** detected.\n\n**Highest Severity**: \ud83d\udfe0 HIGH\n\n### Description\n\n### Impact\n\nVersions of `actions/download-artifact` before 4.1.3 are vulnerable to arbitrary file write when downloading and extracting a specifically crafted artifact that contains path traversal filenames.\n\n### Patches\n\nUpgrade to version 4.1.3 or higher. Alternatively use 'v4' tag which points to the latest and s", "created": "2025-12-22T15:10:38Z", "labels": ["security", "cybedefend", "severity:high", "sca"], "context": "\ud83d\udfe0 [SCA] GHSA-cxww-7g56-2vh6 (1 occurrence) ## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `main`\n\n**1** occurrence(s) of **GHSA-cxww-7g56-2vh6** detected.\n\n**Highest Severity**: \ud83d\udfe0 HIGH\n\n### Description\n\n### Impact\n\nVersi"}


identifier: gh_issue_3754244284
source: github_issue
status: new
created_at: 2025-12-22 16:08:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3754244284", "title": "# Sequence diagram for wallet connection flow in wagmi demo app", "url": "https://github.com/Dargon789/sequence.js/issues/137", "user": "Dargon789", "user_url": "https://github.com/Dargon789", "repo": "sequence.js", "body_preview": "<!-- Generated by sourcery-ai[bot]: start review_guide -->\r\n\r\n## Reviewer's Guide\r\n\r\nIntroduces a new secure ID generation strategy for the dapp client, adds a wagmi-based demo app scaffold, and configures multiple CI/security workflows and project metadata files (issue templates, security policy, pipelines, and funding).\r\n\r\n#### Sequence diagram for wallet connection flow in wagmi demo app\r\n\r\n```mermaid\r\nsequenceDiagram\r\n  actor User\r\n  participant Browser\r\n  participant App\r\n  participant Wagm", "created": "2025-12-22T15:38:14Z", "labels": [], "context": "# Sequence diagram for wallet connection flow in wagmi demo app <!-- Generated by sourcery-ai[bot]: start review_guide -->\r\n\r\n## Reviewer's Guide\r\n\r\nIntroduces a new secure ID generation strategy for the dapp client, adds a wagmi-based demo app scaffold, and confi"}


identifier: gh_issue_3754176894
source: github_issue
status: new
created_at: 2025-12-22 16:08:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3754176894", "title": "Exercise: Expand your team with Copilot coding agent", "url": "https://github.com/Kviatkouskaya/skills-expand-your-team-with-copilot/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-expand-your-team-with-copilot", "body_preview": "## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Kviatkouskaya! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll unlock the next level of your favorite AI-powered coding assistant. Let&#39;s learn how to assign Copilot coding tasks directly in GitHub! \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll", "created": "2025-12-22T15:19:16Z", "labels": [], "context": "Exercise: Expand your team with Copilot coding agent ## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Kviatkouskaya! Welcom"}


identifier: gh_issue_3754146425
source: github_issue
status: new
created_at: 2025-12-22 16:08:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3754146425", "title": "\ud83d\udfe1 [SCA] GHSA-968p-4wvh-cqc8 (1 occurrence)", "url": "https://github.com/JulienZammit/scougal-rubber-website/issues/60", "user": "test-recette-alpha[bot]", "user_url": "https://github.com/apps/test-recette-alpha", "repo": "scougal-rubber-website", "body_preview": "## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `main`\n\n**1** occurrence(s) of **GHSA-968p-4wvh-cqc8** detected.\n\n**Highest Severity**: \ud83d\udfe1 MEDIUM\n\n### Description\n\n### Impact\n\nWhen using Babel to compile [regular expression named capturing groups](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Regular_expressions/Named_capturing_group), Babel will generate a polyfill for the `.replace` method that has quadratic complexity on some specific replacement patte", "created": "2025-12-22T15:11:05Z", "labels": ["security", "cybedefend", "sca", "severity:medium"], "context": "\ud83d\udfe1 [SCA] GHSA-968p-4wvh-cqc8 (1 occurrence) ## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `main`\n\n**1** occurrence(s) of **GHSA-968p-4wvh-cqc8** detected.\n\n**Highest Severity**: \ud83d\udfe1 MEDIUM\n\n### Description\n\n### Impact\n\nWhe"}


identifier: gh_issue_3754177509
source: github_issue
status: new
created_at: 2025-12-22 16:33:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3754177509", "title": "Policy Validation Copilot: Agentic LangGraph Architecture for Automated Decision Support", "url": "https://github.com/lacedeno11/pruebas/issues/21", "user": "lacedeno11", "user_url": "https://github.com/lacedeno11", "repo": "pruebas", "body_preview": "<open-swe-issue-content>(TO-BE) Casos de Uso Agentic (LangGraph) + ML + Guardrails Versi\u00f3n: TO-BE Agentic / LangGraph. Especificaci\u00f3n funcional a nivel Analista de Software. HITL se mantiene \u00fanicamente como compuerta (gate) para baja/mediana confianza, riesgo alto, anomal\u00edas, conflictos o cambios de pol\u00edtica. UC-OP-01 \u2014 Validar Servicio Adicional (E2E) \u2013 System-led (LangGraph) Objetivo: Determinar cobertura/condici\u00f3n de un servicio adicional aplicando pol\u00edtica vigente + excepciones, generando un", "created": "2025-12-22T15:19:23Z", "labels": [], "context": "Policy Validation Copilot: Agentic LangGraph Architecture for Automated Decision Support <open-swe-issue-content>(TO-BE) Casos de Uso Agentic (LangGraph) + ML + Guardrails Versi\u00f3n: TO-BE Agentic / LangGraph. Especificaci\u00f3n funcional a nivel Analista de Software. HITL se mantiene \u00fanicament"}


identifier: gh_issue_3754262225
source: github_issue
status: new
created_at: 2025-12-22 16:45:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3754262225", "title": "Appstore Install with --ignore-scripts", "url": "https://github.com/SignalK/signalk-server/issues/2181", "user": "tkurki", "user_url": "https://github.com/tkurki", "repo": "signalk-server", "body_preview": "Npm packages can have pre and post install scripts. They present a great possibility for attackers to run malicious code. This vector includes also transitive dependencies.\n\nImho we should change appstore install to run npm with [--ignore-scripts](https://docs.npmjs.com/cli/v11/commands/npm-install#ignore-scripts).", "created": "2025-12-22T15:44:36Z", "labels": [], "context": "Appstore Install with --ignore-scripts Npm packages can have pre and post install scripts. They present a great possibility for attackers to run malicious code. This vector includes also transitive dependencies.\n\nImho we should change apps"}


identifier: gh_issue_3754354803
source: github_issue
status: new
created_at: 2025-12-22 16:56:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3754354803", "title": "Node Dependency Snafu", "url": "https://github.com/zhound420/bytebot-hawkeye-holo/issues/8", "user": "ianbmacdonald", "user_url": "https://github.com/ianbmacdonald", "repo": "bytebot-hawkeye-holo", "body_preview": "Just giving this a try, as it sounds interesting and possibly well suited to drive on a Strix Halo. \n\nRunning the `./scripts/start-stack.sh` on a Debian 13 instance did not get too far before it tripped on what looks like some upstream dependency changes that have broken the staging scripts. \n\n```\n => ERROR [bytebot-agent  8/17] RUN echo \"=== Installing shared dependencies ===\" &&     npm install --omit=dev --no-audit --no-fund                                                                     ", "created": "2025-12-22T16:13:47Z", "labels": [], "context": "Node Dependency Snafu Just giving this a try, as it sounds interesting and possibly well suited to drive on a Strix Halo. \n\nRunning the `./scripts/start-stack.sh` on a Debian 13 instance did not get too far before it tripp"}


identifier: gh_issue_3754497897
source: github_issue
status: new
created_at: 2025-12-22 17:09:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3754497897", "title": "Security: Upgrade urllib3 to 2.6.0+ in elyra-runtime dependencies", "url": "https://github.com/opendatahub-io/notebooks/issues/2799", "user": "coderabbitai[bot]", "user_url": "https://github.com/apps/coderabbitai", "repo": "notebooks", "body_preview": "## Description\n\nThe urllib3 dependency in `dependencies/elyra-runtime/pyproject.toml` is currently pinned to version 2.5.0, which has known security vulnerabilities that are fixed in version 2.6.0.\n\n## Security Issues\n\n- **CVE-2025-66418**: Malicious servers can insert unlimited compression steps leading to high CPU usage and memory allocation\n- **Decompression attacks**: Additional unpatched vulnerabilities related to decompression\n\n## Required Action\n\nUpgrade the urllib3 version constraint fro", "created": "2025-12-22T16:59:13Z", "labels": [], "context": "Security: Upgrade urllib3 to 2.6.0+ in elyra-runtime dependencies ## Description\n\nThe urllib3 dependency in `dependencies/elyra-runtime/pyproject.toml` is currently pinned to version 2.5.0, which has known security vulnerabilities that are fixed in version 2.6.0.\n\n#"}


identifier: gh_issue_3754544682
source: github_issue
status: new
created_at: 2025-12-22 17:21:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3754544682", "title": "chore: update deprecated npm dependencies", "url": "https://github.com/SimpleAccounts/SimpleAccounts-UAE/issues/335", "user": "MohsinHashmi-DataInn", "user_url": "https://github.com/MohsinHashmi-DataInn", "repo": "SimpleAccounts-UAE", "body_preview": "## Summary\n\nDuring devcontainer setup, npm reports several deprecation warnings for transitive dependencies. These should be addressed to improve security and maintainability.\n\n## Deprecated Dependencies\n\n### High Priority (Direct or Security)\n- [ ] `eslint@8.57.1` \u2192 Upgrade to ESLint 9.x (requires config migration to flat config)\n- [ ] `bootstrap@4.6.2` \u2192 Evaluate upgrade path (CoreUI dependency)\n\n### Medium Priority (Build Tools)\n- [ ] `rimraf@3.0.2` / `rimraf@2.7.1` \u2192 Update to v4+\n- [ ] `glo", "created": "2025-12-22T17:11:58Z", "labels": [], "context": "chore: update deprecated npm dependencies ## Summary\n\nDuring devcontainer setup, npm reports several deprecation warnings for transitive dependencies. These should be addressed to improve security and maintainability.\n\n## Deprecated Dependenc"}


identifier: gh_issue_3753155121
source: github_issue
status: new
created_at: 2025-12-22 17:34:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3753155121", "title": "[BUG] Extensive Code Errors from npm run lint:code", "url": "https://github.com/jwilleke/amdWiki/issues/184", "user": "jwilleke", "user_url": "https://github.com/jwilleke", "repo": "amdWiki", "body_preview": "## \ud83d\udc1b Bug Description\n\nExtensive Code Errors from npm run lint:code as seen in logs/lint-code-errors.log\n\nAs coding standards require these be fixed, no commits can be done.\n\n", "created": "2025-12-22T10:04:19Z", "labels": ["bug"], "context": "[BUG] Extensive Code Errors from npm run lint:code ## \ud83d\udc1b Bug Description\n\nExtensive Code Errors from npm run lint:code as seen in logs/lint-code-errors.log\n\nAs coding standards require these be fixed, no commits can be done.\n\n"}


identifier: gh_issue_3754467355
source: github_issue
status: new
created_at: 2025-12-22 17:46:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3754467355", "title": "[DEPRECATION WARNING] Detected import of deprecated legacy", "url": "https://github.com/pollockjj/ComfyUI-MultiGPU/issues/158", "user": "Zergland", "user_url": "https://github.com/Zergland", "repo": "ComfyUI-MultiGPU", "body_preview": "Hello, after installing the unetloaderggufdistorchmultigpu node, a warning appeared. The node isn't working, saying it's not installed.\n\n\nG:\\AI\\ComfyUI\\ComfyUI_windows_portable>.\\python_embeded\\python.exe -s ComfyUI\\main.py --windows-standalone-build\nAdding extra search path checkpoints G:\\AI\\stable-diffusion-automatic1111\\models\\Stable-diffusion\nAdding extra search path configs G:\\AI\\stable-diffusion-automatic1111\\models\\Stable-diffusion\nAdding extra search path vae G:\\AI\\stable-diffusion-autom", "created": "2025-12-22T16:48:33Z", "labels": [], "context": "[DEPRECATION WARNING] Detected import of deprecated legacy Hello, after installing the unetloaderggufdistorchmultigpu node, a warning appeared. The node isn't working, saying it's not installed.\n\n\nG:\\AI\\ComfyUI\\ComfyUI_windows_portable>.\\python_embeded\\python"}


identifier: gh_issue_3754422323
source: github_issue
status: new
created_at: 2025-12-22 17:46:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3754422323", "title": "CI: Docker DHI Images", "url": "https://github.com/jongough/testplugin_pi/issues/467", "user": "rgleason", "user_url": "https://github.com/rgleason", "repo": "testplugin_pi", "body_preview": "Docker DHI Images: It looks like this is free to opensource.\nWould it help us with building?   DHI will only build our Debian builds, not windows or macos\n\n\"Security shouldn\u2019t be a premium feature. By making hardened images free, Docker is letting every developer, not just big enterprises, start with a safer foundation. We love seeing tools that reduce noise and toil, and we\u2019re ready to run these secure workloads on Google Cloud from day one\"\n\nShould we be doing this?\nhttps://www.docker.com/blog", "created": "2025-12-22T16:34:14Z", "labels": [], "context": "CI: Docker DHI Images Docker DHI Images: It looks like this is free to opensource.\nWould it help us with building?   DHI will only build our Debian builds, not windows or macos\n\n\"Security shouldn\u2019t be a premium feature. By"}


identifier: gh_issue_3753882953
source: github_issue
status: new
created_at: 2025-12-22 17:46:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3753882953", "title": "Device not detected on Windows", "url": "https://github.com/shomykohai/penumbra/issues/27", "user": "raphael1233333", "user_url": "https://github.com/raphael1233333", "repo": "penumbra", "body_preview": "I'm not managing to get my Honor 200 Lite detected, both when using the release and when running from source with cargo\n\nHere is my POV:\n\n<img width=\"1275\" height=\"271\" alt=\"Image\" src=\"https://github.com/user-attachments/assets/9f41073e-4fb1-48b9-81e2-4529f1b9cfa4\" />\n\nFTR I managed to get the device detected using mtk client, and mtk bypass_utility, but not SP flash tool\n\nOn another issue shomykohai gave explanations @https://github.com/shomykohai/penumbra/issues/26#issuecomment-3682146814\n\nRe", "created": "2025-12-22T13:54:16Z", "labels": ["bug", "core"], "context": "Device not detected on Windows I'm not managing to get my Honor 200 Lite detected, both when using the release and when running from source with cargo\n\nHere is my POV:\n\n<img width=\"1275\" height=\"271\" alt=\"Image\" src=\"https://github"}


identifier: gh_issue_3754708735
source: github_issue
status: new
created_at: 2025-12-22 17:59:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3754708735", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Darrell-White_1222_175655_gh_gw1/issues/4", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Darrell-White_1222_175655_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -----", "created": "2025-12-22T17:58:46Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3754708760
source: github_issue
status: new
created_at: 2025-12-22 17:59:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3754708760", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Darrell-White_1222_175655_gh_gw1/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Darrell-White_1222_175655_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-22T17:58:46Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3754706960
source: github_issue
status: new
created_at: 2025-12-22 17:59:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3754706960", "title": "json-1.8.6.gem: 1 vulnerabilities (highest severity is: 7.5) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Darrell-White_1222_175655_gh_gw1/issues/3", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Darrell-White_1222_175655_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>json-1.8.6.gem</strong></summary>\n\nThis is a JSON implementation as a Ruby extension in C.\n\n**Library home page:** [ https://rubygems.org/gems/json-1.8.6.gem ](https://rubygems.org/gems/json-1.8.6.gem)\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/json-1.8.6.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remed", "created": "2025-12-22T17:58:11Z", "labels": [], "context": "json-1.8.6.gem: 1 vulnerabilities (highest severity is: 7.5) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>json-1.8.6.gem</strong></summary>\n\nThis is a JSON implementation as a Ruby extension in C.\n\n**Library home page:** [ https://rubygems.org/gems/json-"}


identifier: gh_issue_3754706924
source: github_issue
status: new
created_at: 2025-12-22 17:59:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3754706924", "title": "rdoc-3.12.2.gem: 2 vulnerabilities (highest severity is: 7.5) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Darrell-White_1222_175655_gh_gw1/issues/2", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Darrell-White_1222_175655_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>rdoc-3.12.2.gem</strong></summary>\n\nRDoc produces HTML and command-line documentation for Ruby projects.  RDoc\nincludes the +rdoc+ and +ri+ tools for generating and displaying online\ndocumentation.\n\nSee RDoc for a description of RDoc's markup and basic use.\n\n\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/rdoc-3.12.2.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | ", "created": "2025-12-22T17:58:10Z", "labels": [], "context": "rdoc-3.12.2.gem: 2 vulnerabilities (highest severity is: 7.5) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>rdoc-3.12.2.gem</strong></summary>\n\nRDoc produces HTML and command-line documentation for Ruby projects.  RDoc\nincludes the +rdoc+ and +ri+ tools fo"}


identifier: gh_issue_3754706898
source: github_issue
status: new
created_at: 2025-12-22 17:59:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3754706898", "title": "aws-sdk-2.0.48.gem: 1 vulnerabilities (highest severity is: 9.8) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Darrell-White_1222_175655_gh_gw1/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Darrell-White_1222_175655_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>aws-sdk-2.0.48.gem</strong></summary>\n\nThe official AWS SDK for Ruby. Provides both resource oriented interfaces and API clients for AWS services.\n\n\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/aws-sdk-2.0.48.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------", "created": "2025-12-22T17:58:09Z", "labels": [], "context": "aws-sdk-2.0.48.gem: 1 vulnerabilities (highest severity is: 9.8) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>aws-sdk-2.0.48.gem</strong></summary>\n\nThe official AWS SDK for Ruby. Provides both resource oriented interfaces and API clients for AWS services.\n\n"}


identifier: gh_issue_3754698369
source: github_issue
status: new
created_at: 2025-12-22 17:59:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3754698369", "title": "Implement Dynamic Image Detection for Vulnerability Scanning", "url": "https://github.com/torrust/torrust-tracker-deployer/issues/252", "user": "josecelano", "user_url": "https://github.com/josecelano", "repo": "torrust-tracker-deployer", "body_preview": "**Parent Epic**: #250 - Implement Automated Docker Image Vulnerability Scanning\n\n## Overview\n\nEnhance the Trivy scanning workflow to dynamically detect Docker images from environment configuration instead of using a hardcoded list. This eliminates manual maintenance and ensures the workflow automatically adapts when images change.\n\n## Goals\n\n- Convert hardcoded Docker Compose image references to Tera variables\n- Store Docker image references in environment data structure\n- Expose image informati", "created": "2025-12-22T17:55:48Z", "labels": ["enhancement", "security", "architecture", "ci-cd"], "context": "Implement Dynamic Image Detection for Vulnerability Scanning **Parent Epic**: #250 - Implement Automated Docker Image Vulnerability Scanning\n\n## Overview\n\nEnhance the Trivy scanning workflow to dynamically detect Docker images from environment configuration ins"}


identifier: gh_issue_3754696668
source: github_issue
status: new
created_at: 2025-12-22 17:59:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3754696668", "title": "Implement Automated Docker Image Vulnerability Scanning", "url": "https://github.com/torrust/torrust-tracker-deployer/issues/250", "user": "josecelano", "user_url": "https://github.com/josecelano", "repo": "torrust-tracker-deployer", "body_preview": "## Overview\n\nThis epic implements automated vulnerability scanning for all Docker images used in the project using Trivy. The implementation is divided into two phases:\n\n1. **Basic Scanning**: Hardcoded image list with periodic and PR-triggered scans\n2. **Dynamic Scanning**: Automatically detect images from environment configuration\n\n## Problem Statement\n\nCurrently, the project uses multiple Docker images without automated vulnerability scanning:\n\n- `docker/provisioned-instance/Dockerfile`\n- `do", "created": "2025-12-22T17:55:14Z", "labels": ["enhancement", "epic", "security", "ci-cd"], "context": "Implement Automated Docker Image Vulnerability Scanning ## Overview\n\nThis epic implements automated vulnerability scanning for all Docker images used in the project using Trivy. The implementation is divided into two phases:\n\n1. **Basic Scanning**: Hardcod"}


identifier: gh_issue_3754731353
source: github_issue
status: new
created_at: 2025-12-22 18:12:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3754731353", "title": "wandb-0.16.0-py3-none-any.whl: 2 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/snowdensb/AutoPrompt_old/issues/40", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "AutoPrompt_old", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>wandb-0.16.0-py3-none-any.whl</b></summary>\n\n<p></p>\n<p>Path to dependency file: /tmp/ws-scm/AutoPrompt/requirements.txt</p>\n<p>Path to vulnerable library: /tmp/ws-ua_20251119180601_XSAHFV/python_SHKMTS/202511191806021/env/lib/python3.9/site-packages/urllib3-2.5.0.dist-info</p>\n<p>\n\n</details>\n\n## Vulnerabilities\n\n| Vulnerability | Severity | <i", "created": "2025-12-22T18:04:58Z", "labels": ["Mend: dependency security vulnerability"], "context": "wandb-0.16.0-py3-none-any.whl: 2 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>wandb-0.16.0-py3-none-any.whl</b></summary>\n\n<p"}


identifier: gh_issue_3754727623
source: github_issue
status: new
created_at: 2025-12-22 18:12:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3754727623", "title": "rdoc-3.12.2.gem: 2 vulnerabilities (highest severity is: 7.5) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Deborah-Ware_1222_180140_gh_gw0/issues/4", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Deborah-Ware_1222_180140_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>rdoc-3.12.2.gem</strong></summary>\n\nRDoc produces HTML and command-line documentation for Ruby projects.  RDoc\nincludes the +rdoc+ and +ri+ tools for generating and displaying online\ndocumentation.\n\nSee RDoc for a description of RDoc's markup and basic use.\n\n\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/rdoc-3.12.2.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | ", "created": "2025-12-22T18:03:45Z", "labels": [], "context": "rdoc-3.12.2.gem: 2 vulnerabilities (highest severity is: 7.5) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>rdoc-3.12.2.gem</strong></summary>\n\nRDoc produces HTML and command-line documentation for Ruby projects.  RDoc\nincludes the +rdoc+ and +ri+ tools fo"}


identifier: gh_issue_3754727648
source: github_issue
status: new
created_at: 2025-12-22 18:12:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3754727648", "title": "json-1.8.6.gem: 1 vulnerabilities (highest severity is: 7.5) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Deborah-Ware_1222_180140_gh_gw0/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Deborah-Ware_1222_180140_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>json-1.8.6.gem</strong></summary>\n\nThis is a JSON implementation as a Ruby extension in C.\n\n**Library home page:** [ https://rubygems.org/gems/json-1.8.6.gem ](https://rubygems.org/gems/json-1.8.6.gem)\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/json-1.8.6.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remed", "created": "2025-12-22T18:03:45Z", "labels": [], "context": "json-1.8.6.gem: 1 vulnerabilities (highest severity is: 7.5) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>json-1.8.6.gem</strong></summary>\n\nThis is a JSON implementation as a Ruby extension in C.\n\n**Library home page:** [ https://rubygems.org/gems/json-"}


identifier: gh_issue_3754727598
source: github_issue
status: new
created_at: 2025-12-22 18:12:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3754727598", "title": "aws-sdk-2.0.48.gem: 1 vulnerabilities (highest severity is: 9.8) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Deborah-Ware_1222_180140_gh_gw0/issues/3", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Deborah-Ware_1222_180140_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>aws-sdk-2.0.48.gem</strong></summary>\n\nThe official AWS SDK for Ruby. Provides both resource oriented interfaces and API clients for AWS services.\n\n\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/aws-sdk-2.0.48.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------", "created": "2025-12-22T18:03:44Z", "labels": [], "context": "aws-sdk-2.0.48.gem: 1 vulnerabilities (highest severity is: 9.8) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>aws-sdk-2.0.48.gem</strong></summary>\n\nThe official AWS SDK for Ruby. Provides both resource oriented interfaces and API clients for AWS services.\n\n"}


identifier: gh_issue_3754726667
source: github_issue
status: new
created_at: 2025-12-22 18:12:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3754726667", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Deborah-Ware_1222_180140_gh_gw0/issues/2", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Deborah-Ware_1222_180140_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-22T18:03:24Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3754748840
source: github_issue
status: new
created_at: 2025-12-22 18:24:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3754748840", "title": "Security Vulnerabilities Detected in Docker Image", "url": "https://github.com/torrust/torrust-tracker/issues/1628", "user": "josecelano", "user_url": "https://github.com/josecelano", "repo": "torrust-tracker", "body_preview": "## Summary\n\nA security scan using Trivy has detected **5 vulnerabilities** (1 CRITICAL, 4 HIGH) in the `torrust/tracker:develop` Docker image. These vulnerabilities affect core system libraries in the Debian 12.11 base image.\n\n## Scan Results\n\nCommand executed:\n\n```bash\ntrivy image \\\n        --severity HIGH,CRITICAL \\\n        --exit-code 1 \\\n        torrust/tracker:develop\n```\n\nOutput:\n\n```\ntorrust/tracker:develop (debian 12.11)\n======================================\nTotal: 5 (HIGH: 4, CRITICAL:", "created": "2025-12-22T18:10:48Z", "labels": ["Security"], "context": "Security Vulnerabilities Detected in Docker Image ## Summary\n\nA security scan using Trivy has detected **5 vulnerabilities** (1 CRITICAL, 4 HIGH) in the `torrust/tracker:develop` Docker image. These vulnerabilities affect core system libraries in the"}


identifier: gh_issue_3754741124
source: github_issue
status: new
created_at: 2025-12-22 18:24:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3754741124", "title": "Conduct a comprehensive review", "url": "https://github.com/liljoker919/seaoki/issues/44", "user": "liljoker919", "user_url": "https://github.com/liljoker919", "repo": "seaoki", "body_preview": "Task: Conduct a comprehensive review of repo. Provide a professional, actionable report of findings categorized by priority (Critical, High, Medium, Low).\n\nScope of Review:\n\n1. Technical & Coding Best Practices\n\nPerformance: Analyze Core Web Vitals (LCP, INP, CLS). Check for image optimization (WebP/AVIF), lazy loading, and code minification.\n\nStructure: Evaluate the DOM structure and semantic HTML usage.\n\nFunctionality: Test the property search filters, booking/application forms, and availabili", "created": "2025-12-22T18:08:20Z", "labels": [], "context": "Conduct a comprehensive review Task: Conduct a comprehensive review of repo. Provide a professional, actionable report of findings categorized by priority (Critical, High, Medium, Low).\n\nScope of Review:\n\n1. Technical & Coding Best"}


identifier: gh_issue_3754739741
source: github_issue
status: new
created_at: 2025-12-22 18:24:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3754739741", "title": "Add authentication and authorization to /api/community-config endpoint", "url": "https://github.com/blankdotspace/space-system/issues/1633", "user": "coderabbitai[bot]", "user_url": "https://github.com/apps/coderabbitai", "repo": "space-system", "body_preview": "## Description\n\nThe POST /api/community-config endpoint currently accepts requests without authentication or authorization checks. This creates a critical security vulnerability that could allow:\n- Unauthenticated users to create or overwrite community configurations\n- Hijacking existing communities\n- Data corruption\n\n## Action Required\n\nAdd authentication and authorization checks to the endpoint before deploying to production.\n\n## Context\n\n- Endpoint: `src/app/api/community-config/route.ts`\n- I", "created": "2025-12-22T18:07:58Z", "labels": [], "context": "Add authentication and authorization to /api/community-config endpoint ## Description\n\nThe POST /api/community-config endpoint currently accepts requests without authentication or authorization checks. This creates a critical security vulnerability that could allow:\n- Un"}


identifier: gh_issue_3754550136
source: github_issue
status: new
created_at: 2025-12-22 18:24:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3754550136", "title": "Policy Validation Copilot: Agentic LangGraph Architecture for Automated Decision Support", "url": "https://github.com/lacedeno11/pruebas/issues/24", "user": "lacedeno11", "user_url": "https://github.com/lacedeno11", "repo": "pruebas", "body_preview": "<open-swe-issue-content>Copy content (TO-BE) Casos de Uso Agentic (LangGraph) + ML + Guardrails Versi\u00f3n: TO-BE Agentic / LangGraph. Especificaci\u00f3n funcional a nivel Analista de Software. HITL se mantiene \u00fanicamente como compuerta (gate) para baja/mediana confianza, riesgo alto, anomal\u00edas, conflictos o cambios de pol\u00edtica. UC-OP-01 \u2014 Validar Servicio Adicional (E2E) \u2013 System-led (LangGraph) Objetivo: Determinar cobertura/condici\u00f3n de un servicio adicional aplicando pol\u00edtica vigente + excepciones,", "created": "2025-12-22T17:13:40Z", "labels": [], "context": "Policy Validation Copilot: Agentic LangGraph Architecture for Automated Decision Support <open-swe-issue-content>Copy content (TO-BE) Casos de Uso Agentic (LangGraph) + ML + Guardrails Versi\u00f3n: TO-BE Agentic / LangGraph. Especificaci\u00f3n funcional a nivel Analista de Software. HITL se manti"}


identifier: gh_issue_3754726648
source: github_issue
status: new
created_at: 2025-12-22 18:37:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3754726648", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Deborah-Ware_1222_180140_gh_gw0/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Deborah-Ware_1222_180140_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | -----", "created": "2025-12-22T18:03:23Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3754796719
source: github_issue
status: new
created_at: 2025-12-22 18:37:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3754796719", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/reactor/issues/44", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "reactor", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-22T18:30:17Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3754749819
source: github_issue
status: new
created_at: 2025-12-22 18:37:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3754749819", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/felix-test/issues/98", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "felix-test", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-22T18:11:13Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3754810475
source: github_issue
status: new
created_at: 2025-12-22 18:49:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3754810475", "title": "Interactive Year Review Worksheet with PDF Export", "url": "https://github.com/edspencer/bragdoc-ai/issues/303", "user": "edspencer", "user_url": "https://github.com/edspencer", "repo": "bragdoc-ai", "body_preview": "Create an interactive, browser-based worksheet for developers to document their 2025 achievements. The worksheet should allow users to fill in form fields directly in the browser, auto-save to localStorage (no account required), and export to a professionally formatted PDF with their answers injected.\n\n## Key Features\n\n1. **Editable Form Fields** - Convert the current display-only worksheet to use actual textarea and input elements for all 6 sections (Code & Features, Reliability, Mentoring, Arc", "created": "2025-12-22T18:36:40Z", "labels": ["feature", "UI"], "context": "Interactive Year Review Worksheet with PDF Export Create an interactive, browser-based worksheet for developers to document their 2025 achievements. The worksheet should allow users to fill in form fields directly in the browser, auto-save to localSt"}


identifier: gh_issue_3754806777
source: github_issue
status: new
created_at: 2025-12-22 18:49:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3754806777", "title": "Security Health Check - GOOD (85/100) - 2025-12-22", "url": "https://github.com/Sami9889/Sami.dev-website/issues/242", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/22/2025, 6:34:49 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 9\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Securi", "created": "2025-12-22T18:34:54Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-22 # Security Health Check Report\n\n**Generated:** 12/22/2025, 6:34:49 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Inc"}


identifier: gh_issue_3754835872
source: github_issue
status: new
created_at: 2025-12-22 18:49:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3754835872", "title": "Dictation", "url": "https://github.com/spring-projects/spring-boot/issues/48604", "user": "kykejdion-gif", "user_url": "https://github.com/kykejdion-gif", "repo": "spring-boot", "body_preview": "<!--\nThanks for raising a Spring Boot issue. Please take the time to review the following\ncategories as some of them do not apply here.\n\n\ud83d\ude45 \"Please DO NOT Raise an Issue\" Cases\n- Question\nSTOP!! Please ask questions about how to use something, or to understand why something isn't\nworking as you expect it to, on Stack Overflow using the spring-boot tag.\n- Security Vulnerability\nSTOP!! Please don't raise security vulnerabilities here. Head over to https://spring.io/security-policy to learn how to d", "created": "2025-12-22T18:46:21Z", "labels": ["status: waiting-for-triage"], "context": "Dictation <!--\nThanks for raising a Spring Boot issue. Please take the time to review the following\ncategories as some of them do not apply here.\n\n\ud83d\ude45 \"Please DO NOT Raise an Issue\" Cases\n- Question\nSTOP!! Please"}


identifier: gh_issue_3754833194
source: github_issue
status: new
created_at: 2025-12-22 18:49:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3754833194", "title": "Security: Update oauth4webapi dependency to fix AIKIDO-2024-10325 vulnerability", "url": "https://github.com/zuplo/zudoku/issues/1846", "user": "liqweed", "user_url": "https://github.com/liqweed", "repo": "zudoku", "body_preview": "The `oauth4webapi` dependency currently used by zudoku (v2.17.0) has a known security vulnerability (AIKIDO-2024-10325) that allows cleartext transmission of sensitive information.\n\n##  Vulnerability Details\n\n- CVE ID: AIKIDO-2024-10325\n- Severity: Medium (score: 40)\n- Affected versions: oauth4webapi 0.0.1 through 2.17.0\n- Issue: Cleartext Transmission of Sensitive Information\n- Description: The library fails to prevent interactions with non-TLS HTTP endpoints, allowing sensitive data to be tran", "created": "2025-12-22T18:45:20Z", "labels": [], "context": "Security: Update oauth4webapi dependency to fix AIKIDO-2024-10325 vulnerability The `oauth4webapi` dependency currently used by zudoku (v2.17.0) has a known security vulnerability (AIKIDO-2024-10325) that allows cleartext transmission of sensitive information.\n\n##  Vulnerability "}


identifier: gh_issue_3754814984
source: github_issue
status: new
created_at: 2025-12-22 18:49:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3754814984", "title": "CVE-2025-14874 (Medium) detected in nodemailer-6.9.13.tgz", "url": "https://github.com/mycomplexsoul/delta/issues/609", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "delta", "body_preview": "## CVE-2025-14874 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>nodemailer-6.9.13.tgz</b></summary>\n\n<p></p>\n<p>Library home page: <a href=\"https://registry.npmjs.org/nodemailer/-/nodemailer-6.9.13.tgz\">https://registry.npmjs.org/nodemailer/-/nodemailer-6.9.13.tgz</a></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.js", "created": "2025-12-22T18:39:01Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-14874 (Medium) detected in nodemailer-6.9.13.tgz ## CVE-2025-14874 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3754814938
source: github_issue
status: new
created_at: 2025-12-22 18:49:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3754814938", "title": "CVE-2025-65945 (High) detected in jws-3.2.2.tgz", "url": "https://github.com/mycomplexsoul/delta/issues/608", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "delta", "body_preview": "## CVE-2025-65945 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jws-3.2.2.tgz</b></summary>\n\n<p>Implementation of JSON Web Signatures</p>\n<p>Library home page: <a href=\"https://registry.npmjs.org/jws/-/jws-3.2.2.tgz\">https://registry.npmjs.org/jws/-/jws-3.2.2.tgz</a></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json<", "created": "2025-12-22T18:39:00Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-65945 (High) detected in jws-3.2.2.tgz ## CVE-2025-65945 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3754907092
source: github_issue
status: new
created_at: 2025-12-22 19:15:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3754907092", "title": "Dependency Dashboard", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Savannah-Gomez_1222_191204_gh_gw2/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Savannah-Gomez_1222_191204_gh_gw2", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](http://developer-platform-staging.mend.io/github/ghc-cloneRepoStaging-scaAndRenovate3/Savannah-Gomez_1222_191204_gh_gw2).\n\n## Repository Problems\n\nThese problems occurred while renovating this repository. [View logs](http://developer-platform-staging.mend.io/github/ghc-cloneRepoSt", "created": "2025-12-22T19:12:28Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the M"}


identifier: gh_issue_3754917853
source: github_issue
status: new
created_at: 2025-12-22 19:28:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3754917853", "title": "[BleepingComputer] CISA flags ASUS Live Update CVE, but the attack is years old", "url": "https://github.com/SecOpsNews/news/issues/61330", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "news", "body_preview": "\n\nAn ASUS Live Update vulnerability tracked as CVE-2025-59374 has been making the rounds in infosec feeds, with some headlines implying recent or ongoing exploitation. A closer look, however, shows the CVE documents a\u00a0historic supply-chain attack in an End-of-Life (EoL) software product, not a new attack. \\[...\\]\n\n\n\n<https://www.bleepingcomputer.com/news/security/cisa-flags-asus-live-update-cve-but-the-attack-is-years-old/>\n\n", "created": "2025-12-22T19:15:53Z", "labels": ["BleepingComputer"], "context": "[BleepingComputer] CISA flags ASUS Live Update CVE, but the attack is years old \n\nAn ASUS Live Update vulnerability tracked as CVE-2025-59374 has been making the rounds in infosec feeds, with some headlines implying recent or ongoing exploitation. A closer look, however, shows th"}


identifier: gh_issue_3754854447
source: github_issue
status: new
created_at: 2025-12-22 19:28:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3754854447", "title": "\ud83d\udd25 other/broker-schema-validation", "url": "https://github.com/vdesabou/kafka-docker-playground/issues/7481", "user": "vdesabou", "user_url": "https://github.com/vdesabou", "repo": "kafka-docker-playground", "body_preview": "\ud83c\udd95\ud83d\udca5 New issue !\n\n\ud83d\udd25 CP 8.1.1 \ud83d\udd50 2025-12-22 18:36 \ud83d\udcc4 [2way-ssl-and-security-plugin.sh](https://github.com/vdesabou/kafka-docker-playground/blob/master/other/broker-schema-validation/2way-ssl-and-security-plugin.sh) \ud83d\udd17 https://github.com/vdesabou/kafka-docker-playground/actions/runs/20440319406/job/58732096889\n\n<details><summary>Logs</summary>\n<pre>\n\n<code>\n\n18:34:41 \u2139\ufe0f \ud83d\udc80 kill all docker containers (disable with 'playground config container-kill-all-before-run false')\n18:34:42 \u2139\ufe0f \ud83d\udc80 kill all docker cont", "created": "2025-12-22T18:52:23Z", "labels": ["new \ud83c\udd95"], "context": "\ud83d\udd25 other/broker-schema-validation \ud83c\udd95\ud83d\udca5 New issue !\n\n\ud83d\udd25 CP 8.1.1 \ud83d\udd50 2025-12-22 18:36 \ud83d\udcc4 [2way-ssl-and-security-plugin.sh](https://github.com/vdesabou/kafka-docker-playground/blob/master/other/broker-schema-validation/2way-ssl-and-security-p"}


identifier: gh_issue_3754824678
source: github_issue
status: new
created_at: 2025-12-22 19:28:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3754824678", "title": "Release validation failed for v1.5.0-beta.2", "url": "https://github.com/pradeepmouli/iox-matter-bridge/issues/14", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "iox-matter-bridge", "body_preview": "# Release Artifact Validation Report\n\n**Release**: v1.5.0-beta.2\n**Version**: 1.5.0-beta.2\n**Date**: 2025-12-22 18:42:21 UTC\n\n## Validation Results\n\n| Artifact | Status | Notes |\n|----------|--------|-------|\n| Checksums file | \u274c Missing | Required |\n| Tarball (.tar.gz) | \u274c Missing or Invalid | Required |\n| SBOM (.sbom.json) | \u26a0\ufe0f Missing | Recommended |\n| GPG Signature | \u2139\ufe0f Not present | Optional |\n\n## Details\n\n### Checksums\n- \u274c CRITICAL: Checksums file missing\n\n### Tarball\n- \u274c CRITICAL: Tarball", "created": "2025-12-22T18:42:21Z", "labels": [], "context": "Release validation failed for v1.5.0-beta.2 # Release Artifact Validation Report\n\n**Release**: v1.5.0-beta.2\n**Version**: 1.5.0-beta.2\n**Date**: 2025-12-22 18:42:21 UTC\n\n## Validation Results\n\n| Artifact | Status | Notes |\n|----------|--------|"}


identifier: gh_issue_3754786314
source: github_issue
status: new
created_at: 2025-12-22 19:28:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3754786314", "title": "docs: 11.8.0 and 10.45.3 changelog", "url": "https://github.com/trpc/trpc/issues/7072", "user": "schmod", "user_url": "https://github.com/schmod", "repo": "trpc", "body_preview": "### Area of Improvement\n\nThere does not appear to be any changelog, release notes, or git branch/tags for the [v10.45.3](https://www.npmjs.com/package/@trpc/server/v/10.45.3) release of `@trpc/server` (which was presumably released to address CVE-2025-68130).  \n\nGiven the number of recent supply-chain compromises, many consumers of this package are going to be looking for affirmative proof that any new releases are legitimate (and a lack of such release-notes or source code is rightly considered", "created": "2025-12-22T18:25:17Z", "labels": ["\ud83d\udcda documentation / examples"], "context": "docs: 11.8.0 and 10.45.3 changelog ### Area of Improvement\n\nThere does not appear to be any changelog, release notes, or git branch/tags for the [v10.45.3](https://www.npmjs.com/package/@trpc/server/v/10.45.3) release of `@trpc/server`"}


identifier: gh_issue_3754946164
source: github_issue
status: new
created_at: 2025-12-22 19:28:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3754946164", "title": "Upgrade Kubernetes dependencies to v1.32.10 to fix CVE-2025-13281", "url": "https://github.com/kubernetes-sigs/azurelustre-csi-driver/issues/249", "user": "jeffbearer", "user_url": "https://github.com/jeffbearer", "repo": "azurelustre-csi-driver", "body_preview": "## Summary\nUpgrade Kubernetes dependencies from v1.31.13 to v1.32.10 to address security vulnerability CVE-2025-13281.\n\n## Security Issue\n**CVE-2025-13281** (MEDIUM severity): Portworx Half-Blind SSRF in kube-controller-manager\n\nTrivy scan detected this vulnerability in the current k8s.io/kubernetes v1.31.13 dependency. Fixed versions: 1.32.10, 1.33.6, 1.34.2\n\n## Proposed Changes\n- Update k8s.io/kubernetes from v1.31.13 to v1.32.10\n- Update all k8s.io/* dependencies from v0.31.x to v0.32.10\n- Up", "created": "2025-12-22T19:25:14Z", "labels": [], "context": "Upgrade Kubernetes dependencies to v1.32.10 to fix CVE-2025-13281 ## Summary\nUpgrade Kubernetes dependencies from v1.31.13 to v1.32.10 to address security vulnerability CVE-2025-13281.\n\n## Security Issue\n**CVE-2025-13281** (MEDIUM severity): Portworx Half-Blind SSRF"}


identifier: gh_issue_3754984493
source: github_issue
status: new
created_at: 2025-12-22 19:40:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3754984493", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Brittany-Odonnell_1222_193751_gh_gw1/issues/6", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Brittany-Odonnell_1222_193751_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.io/v", "created": "2025-12-22T19:39:31Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3754984480
source: github_issue
status: new
created_at: 2025-12-22 19:40:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3754984480", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Brittany-Odonnell_1222_193751_gh_gw1/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Brittany-Odonnell_1222_193751_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.", "created": "2025-12-22T19:39:30Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3754961382
source: github_issue
status: new
created_at: 2025-12-22 19:40:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3754961382", "title": "Implement Threat Surface Scanning, Boot Intelligence, Dynamic CPU Control, and Wayland Crash Containment", "url": "https://github.com/Anamitra-Sarkar/Aether_OS/issues/27", "user": "Anamitra-Sarkar", "user_url": "https://github.com/Anamitra-Sarkar", "repo": "Aether_OS", "body_preview": "AetherOS is not a themed Ubuntu remix.\nIt is a self-aware desktop operating system that actively understands its security exposure, boot behavior, performance state, and desktop stability \u2014 entirely offline, deterministically, and without cloud dependencies.\n\nThis issue defines and requires the implementation of four tightly related subsystems, designed to work together while remaining modular and auditable.\n\nNo part of this issue may be skipped, mocked, or partially implemented.\n\n1\ufe0f\u20e3 Aether Thr", "created": "2025-12-22T19:31:07Z", "labels": ["enhancement", "core", "security", "performance", "v2.4"], "context": "Implement Threat Surface Scanning, Boot Intelligence, Dynamic CPU Control, and Wayland Crash Containment AetherOS is not a themed Ubuntu remix.\nIt is a self-aware desktop operating system that actively understands its security exposure, boot behavior, performance state, and desktop stability \u2014 entirely o"}


identifier: gh_issue_3754887122
source: github_issue
status: new
created_at: 2025-12-22 19:40:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3754887122", "title": "Stats Functor System", "url": "https://github.com/tdimino/bg3se-macos/issues/53", "user": "tdimino", "user_url": "https://github.com/tdimino", "repo": "bg3se-macos", "body_preview": "## Overview\n\nImplement the Stats Functor system for damage/effect calculations. Currently at **0% parity**.\n\n## Missing Functions\n\n### Functor Execution\n- `Ext.Stats.ExecuteFunctors(functors, params)` - Execute functor chain\n- `Ext.Stats.ExecuteFunctor(functor, params)` - Execute single functor\n- `Ext.Stats.PrepareFunctorParams(...)` - Prepare execution parameters\n\n## What Are Functors?\n\nFunctors are the game's damage/effect calculation pipeline:\n\n```lua\n-- Example: Modify damage before applicat", "created": "2025-12-22T19:05:09Z", "labels": [], "context": "Stats Functor System ## Overview\n\nImplement the Stats Functor system for damage/effect calculations. Currently at **0% parity**.\n\n## Missing Functions\n\n### Functor Execution\n- `Ext.Stats.ExecuteFunctors(functors, params)`"}


identifier: gh_issue_3754995595
source: github_issue
status: new
created_at: 2025-12-22 19:52:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3754995595", "title": "sd", "url": "https://github.com/varunisrani/pwd/issues/8", "user": "varunisrani", "user_url": "https://github.com/varunisrani", "repo": "pwd", "body_preview": "dsf", "created": "2025-12-22T19:43:51Z", "labels": [], "context": "sd dsf"}


identifier: gh_issue_3754989151
source: github_issue
status: new
created_at: 2025-12-22 19:52:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3754989151", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Dennis-Nelson_1222_193903_gh_gw2/issues/2", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Dennis-Nelson_1222_193903_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-22T19:41:32Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3754989133
source: github_issue
status: new
created_at: 2025-12-22 19:52:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3754989133", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Dennis-Nelson_1222_193903_gh_gw2/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Dennis-Nelson_1222_193903_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | -----", "created": "2025-12-22T19:41:31Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3754878074
source: github_issue
status: new
created_at: 2025-12-22 19:52:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3754878074", "title": "RIPP 2.0 \u2014 Gold-Standard Docs, Node 20 Standardization, Metrics, and Release Automation", "url": "https://github.com/Dylan-Natter/ripp-protocol/issues/180", "user": "Dylan-Natter", "user_url": "https://github.com/Dylan-Natter", "repo": "ripp-protocol", "body_preview": "You are GitHub Copilot working inside Dylan-Natter/ripp-protocol on branch `copilot/enhance-ripp-end-to-end-workflow` (or the current working branch).\n\nGOAL\nFinish RIPP 2.0 by completing the remaining tasks from `docs/planning/NEXT_LEVEL_ENHANCEMENTS.md` with a \u201cworld-class, production-ready\u201d bar. Do NOT introduce breaking changes to the RIPP 1.0 schema or existing packets (additive-only). Keep changes cohesive and keep CI green.\n\nDEFINITION OF DONE\n- `.ripp/ripp-protocol-tools.ripp.yaml` is Lev", "created": "2025-12-22T19:01:27Z", "labels": [], "context": "RIPP 2.0 \u2014 Gold-Standard Docs, Node 20 Standardization, Metrics, and Release Automation You are GitHub Copilot working inside Dylan-Natter/ripp-protocol on branch `copilot/enhance-ripp-end-to-end-workflow` (or the current working branch).\n\nGOAL\nFinish RIPP 2.0 by completing the remaining"}


identifier: gh_issue_3754819752
source: github_issue
status: new
created_at: 2025-12-22 19:52:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3754819752", "title": "\ud83d\udea8 CI/CD Failure: Security Pipeline - 852f1f6", "url": "https://github.com/GrayGhostDev/ToolboxAI-Solutions/issues/1161", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "ToolboxAI-Solutions", "body_preview": "<strong>Workflow Failure Detected</strong>\n\n<strong>Details:</strong>\n- <strong>Workflow</strong>: Security Pipeline\n- <strong>Status</strong>: failure\n- <strong>Branch</strong>: dependabot/npm_and_yarn/multi-e1aa4930cf\n- <strong>Commit</strong>: 852f1f6\n- <strong>Run URL</strong>: https://github.com/GrayGhostDev/ToolboxAI-Solutions/actions/runs/20440637704\n\n<strong>Automated Analysis:</strong>\n\nThis workflow has failed and requires attention. The failure could be due to:\n- Code issues (syntax e", "created": "2025-12-22T18:40:35Z", "labels": ["automation", "priority: high", "infrastructure", "copilot-agent", "ci-failure"], "context": "\ud83d\udea8 CI/CD Failure: Security Pipeline - 852f1f6 <strong>Workflow Failure Detected</strong>\n\n<strong>Details:</strong>\n- <strong>Workflow</strong>: Security Pipeline\n- <strong>Status</strong>: failure\n- <strong>Branch</strong>: dependabot/npm_and_ya"}


identifier: gh_issue_3755117768
source: github_issue
status: new
created_at: 2025-12-22 20:29:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3755117768", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/waltercoan/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @waltercoan! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, ", "created": "2025-12-22T20:27:01Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @waltercoan! Welcome to"}


identifier: gh_issue_3755036298
source: github_issue
status: new
created_at: 2025-12-22 20:42:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3755036298", "title": "exo still does not have a clean npm dep chain", "url": "https://github.com/exo-explore/exo/issues/982", "user": "davmonk", "user_url": "https://github.com/davmonk", "repo": "exo", "body_preview": "There should be 0 issues with vulnerabilities. \n\n```\nadded 147 packages, and audited 148 packages in 2s\n\n14 packages are looking for funding\n  run `npm fund` for details\n\n3 low severity vulnerabilities\n\nTo address all issues (including breaking changes), run:\n  npm audit fix --force\n\nRun `npm audit` for details.\n```\n\n\n# npm audit report\n\n```\ncookie  <0.7.0\ncookie accepts cookie name, path, and domain with out of bounds characters - https://github.com/advisories/GHSA-pxg6-pf52-xh8x\nfix available ", "created": "2025-12-22T19:59:41Z", "labels": [], "context": "exo still does not have a clean npm dep chain There should be 0 issues with vulnerabilities. \n\n```\nadded 147 packages, and audited 148 packages in 2s\n\n14 packages are looking for funding\n  run `npm fund` for details\n\n3 low severity vulnerabilitie"}


identifier: gh_issue_3755147515
source: github_issue
status: new
created_at: 2025-12-22 20:55:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3755147515", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/KellyGasperski/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @KellyGasperski! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebra", "created": "2025-12-22T20:38:59Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @KellyGasperski! Welcome to your Skills ex"}


identifier: gh_issue_3755123867
source: github_issue
status: new
created_at: 2025-12-22 20:55:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3755123867", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/lapiguy/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @lapiguy! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate your", "created": "2025-12-22T20:29:48Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @lapiguy! Welcome to your Skills exercise!"}


identifier: gh_issue_3755122326
source: github_issue
status: new
created_at: 2025-12-22 20:55:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3755122326", "title": "Feature Request: Security Headers Analyzer with Compliance Scoring", "url": "https://github.com/repplus/rep/issues/64", "user": "IbnB", "user_url": "https://github.com/IbnB", "repo": "rep", "body_preview": "\n# Request details \n\n## Summary\nAdd a Security Headers analyzer that provides real-time evaluation of HTTP security headers, visual compliance scoring, and actionable remediation guidance directly within rep+.\n\n## Problem Statement\nCurrently, rep+ captures and displays response headers but doesn't analyze their security implications. Security researchers and developers must manually verify each header against best practices, which is time-consuming and prone to oversight. This feature would auto", "created": "2025-12-22T20:29:02Z", "labels": [], "context": "Feature Request: Security Headers Analyzer with Compliance Scoring \n# Request details \n\n## Summary\nAdd a Security Headers analyzer that provides real-time evaluation of HTTP security headers, visual compliance scoring, and actionable remediation guidance directly wit"}


identifier: gh_issue_3754571751
source: github_issue
status: new
created_at: 2025-12-22 21:21:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3754571751", "title": "Stop exposing the entire process.env in the Admin build", "url": "https://github.com/overcut-ai/awesome-overcut-staging/issues/39", "user": "stg-overcut-ai[bot]", "user_url": "https://github.com/apps/stg-overcut-ai", "repo": "awesome-overcut-staging", "body_preview": "## Summary\n`apps/hotel-management-service-admin/vite.config.ts` sets `define: { \"process.env\": process.env }`. This injects **every** environment variable present at build time into the client bundle, including secrets unrelated to the frontend. Vite intentionally only exposes variables prefixed with `VITE_` for this reason, so overriding `process.env` defeats that safety net.\n\n## Location\n- `apps/hotel-management-service-admin/vite.config.ts`\n\n## Acceptance Criteria\n1. Remove the blanket `defin", "created": "2025-12-22T17:19:50Z", "labels": ["bug", "security", "frontend", "component: admin-build", "priority: P1"], "context": "Stop exposing the entire process.env in the Admin build ## Summary\n`apps/hotel-management-service-admin/vite.config.ts` sets `define: { \"process.env\": process.env }`. This injects **every** environment variable present at build time into the client bundle,"}


identifier: gh_issue_3755253521
source: github_issue
status: new
created_at: 2025-12-22 21:33:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3755253521", "title": "Security: Kubernetes containers using :latest image tags", "url": "https://github.com/JacobPEvans/nix/issues/240", "user": "JacobPEvans", "user_url": "https://github.com/JacobPEvans", "repo": "nix", "body_preview": "## Severity\nHIGH - Supply Chain Security Risk\n\n## Description\nAll three Kubernetes deployments use `:latest` image tags, which creates supply chain security risks as images can change unpredictably without version control.\n\n## Affected Files\n- `modules/monitoring/k8s/splunk/statefulset.yaml:21`\n- `modules/monitoring/k8s/otel-collector/deployment.yaml:20`\n- `modules/monitoring/k8s/cribl-edge/deployment.yaml:20`\n\n## Current Code\n```yaml\nimage: splunk/splunk:latest\nimage: otel/opentelemetry-collect", "created": "2025-12-22T21:20:01Z", "labels": ["security", "ai-created"], "context": "Security: Kubernetes containers using :latest image tags ## Severity\nHIGH - Supply Chain Security Risk\n\n## Description\nAll three Kubernetes deployments use `:latest` image tags, which creates supply chain security risks as images can change unpredictably wi"}


identifier: gh_issue_3755216700
source: github_issue
status: new
created_at: 2025-12-22 21:33:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3755216700", "title": "Security: Missing Git object integrity verification (fsck settings)", "url": "https://github.com/JacobPEvans/nix/issues/237", "user": "JacobPEvans", "user_url": "https://github.com/JacobPEvans", "repo": "nix", "body_preview": "## Severity\n**Medium** - Missing automatic verification of Git objects during fetch/receive/transfer operations could allow corrupted or malicious objects to be silently accepted.\n\n## Description\nThe Git configuration in `modules/home-manager/git/config.nix` lacks fsck settings that enable automatic object integrity verification. These settings are security best practices recommended by Git to detect corrupted or tampered objects.\n\n## Missing Configuration\n\nThe following settings should be added", "created": "2025-12-22T21:07:45Z", "labels": ["security", "ai-created", "type:feature"], "context": "Security: Missing Git object integrity verification (fsck settings) ## Severity\n**Medium** - Missing automatic verification of Git objects during fetch/receive/transfer operations could allow corrupted or malicious objects to be silently accepted.\n\n## Description\nThe "}


identifier: gh_issue_3755176070
source: github_issue
status: new
created_at: 2025-12-22 21:33:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3755176070", "title": "Policy Validation Copilot: Agentic LangGraph Architecture for Automated Decision Support", "url": "https://github.com/lacedeno11/pruebas/issues/26", "user": "lacedeno11", "user_url": "https://github.com/lacedeno11", "repo": "pruebas", "body_preview": "<open-swe-issue-content>Copy content (TO-BE) Casos de Uso Agentic (LangGraph) + ML + Guardrails Versi\u00f3n: TO-BE Agentic / LangGraph. Especificaci\u00f3n funcional a nivel Analista de Software. HITL se mantiene \u00fanicamente como compuerta (gate) para baja/mediana confianza, riesgo alto, anomal\u00edas, conflictos o cambios de pol\u00edtica. UC-OP-01 \u2014 Validar Servicio Adicional (E2E) \u2013 System-led (LangGraph) Objetivo: Determinar cobertura/condici\u00f3n de un servicio adicional aplicando pol\u00edtica vigente + excepciones,", "created": "2025-12-22T20:53:55Z", "labels": [], "context": "Policy Validation Copilot: Agentic LangGraph Architecture for Automated Decision Support <open-swe-issue-content>Copy content (TO-BE) Casos de Uso Agentic (LangGraph) + ML + Guardrails Versi\u00f3n: TO-BE Agentic / LangGraph. Especificaci\u00f3n funcional a nivel Analista de Software. HITL se manti"}


identifier: gh_issue_3755167103
source: github_issue
status: new
created_at: 2025-12-22 21:33:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3755167103", "title": "Security: PAL MCP server uses unpinned GitHub repository", "url": "https://github.com/JacobPEvans/nix/issues/231", "user": "JacobPEvans", "user_url": "https://github.com/JacobPEvans", "repo": "nix", "body_preview": "The PAL MCP server in modules/ai-orchestration/pal-mcp/default.nix fetches code from git+https://github.com/BeehiveInnovations/pal-mcp-server.git without version pinning. This creates a supply chain attack vector where compromised or modified upstream code could execute with access to API keys (GEMINI_API_KEY, OPENAI_API_KEY, ANTHROPIC_API_KEY). Fix by pinning to a specific commit hash or using a Nix flake input. Currently disabled but exists in codebase.", "created": "2025-12-22T20:49:12Z", "labels": ["security", "ai-created"], "context": "Security: PAL MCP server uses unpinned GitHub repository The PAL MCP server in modules/ai-orchestration/pal-mcp/default.nix fetches code from git+https://github.com/BeehiveInnovations/pal-mcp-server.git without version pinning. This creates a supply chain a"}


identifier: gh_issue_3755093254
source: github_issue
status: new
created_at: 2025-12-22 21:33:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3755093254", "title": "Security: Pin GitHub Actions to specific versions instead of @main", "url": "https://github.com/JacobPEvans/nix/issues/223", "user": "JacobPEvans", "user_url": "https://github.com/JacobPEvans", "repo": "nix", "body_preview": "## Issue\n\nMultiple workflow files use `@main` branch references for GitHub Actions instead of pinned versions. This creates security and reliability risks.\n\n## Affected Files\n\n1. **/.github/workflows/_nix-build.yml:32**\n   ```yaml\n   uses: DeterminateSystems/magic-nix-cache-action@main\n   ```\n\n2. **/.github/workflows/_nix-validate.yml:20**\n   ```yaml\n   uses: DeterminateSystems/flake-checker-action@main\n   ```\n\n## Risk Assessment\n\n**Severity: HIGH**\n\n- **Supply Chain Attack**: If the upstream ac", "created": "2025-12-22T20:18:55Z", "labels": ["security", "ai-created"], "context": "Security: Pin GitHub Actions to specific versions instead of @main ## Issue\n\nMultiple workflow files use `@main` branch references for GitHub Actions instead of pinned versions. This creates security and reliability risks.\n\n## Affected Files\n\n1. **/.github/workflows/"}


identifier: gh_issue_3755269160
source: github_issue
status: new
created_at: 2025-12-22 21:44:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3755269160", "title": "CRITICAL: Hardcoded weak default passwords in variables", "url": "https://github.com/JacobPEvans/terraform-proxmox/issues/23", "user": "JacobPEvans", "user_url": "https://github.com/JacobPEvans", "repo": "terraform-proxmox", "body_preview": "## Severity\nCRITICAL - Security Vulnerability\n\n## Description\nHardcoded weak passwords are present in default variable values, creating a severe security vulnerability if users deploy without overriding these defaults.\n\n## Affected Files\n- `variables.tf:156` - VM default password: `temp123`\n- `main.tf:92` - Container default password: `ubuntu`\n\n## Risk\n- Predictable passwords accessible to attackers\n- VMs/containers deployed with known weak credentials\n- Easy brute-force or credential stuffing a", "created": "2025-12-22T21:25:55Z", "labels": [], "context": "CRITICAL: Hardcoded weak default passwords in variables ## Severity\nCRITICAL - Security Vulnerability\n\n## Description\nHardcoded weak passwords are present in default variable values, creating a severe security vulnerability if users deploy without overridi"}


identifier: gh_issue_3755261910
source: github_issue
status: new
created_at: 2025-12-22 21:44:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3755261910", "title": "CRITICAL: Dependabot targets non-existent 'master' branch", "url": "https://github.com/JacobPEvans/python-template/issues/4", "user": "JacobPEvans", "user_url": "https://github.com/JacobPEvans", "repo": "python-template", "body_preview": "## Severity\nCRITICAL - Dependency updates completely broken\n\n## Description\nDependabot is configured to target branch `master` but the repository uses `main` as its default branch. This completely breaks automated dependency updates.\n\n## Affected File\n`.github/dependabot.yaml` line 5\n\n## Current Code\n```yaml\ntarget-branch: \"master\"  # Should be \"main\"\n```\n\n## Impact\n- Security vulnerability updates will fail silently\n- GitHub Actions dependency updates are ineffective\n- Project remains exposed t", "created": "2025-12-22T21:23:02Z", "labels": [], "context": "CRITICAL: Dependabot targets non-existent 'master' branch ## Severity\nCRITICAL - Dependency updates completely broken\n\n## Description\nDependabot is configured to target branch `master` but the repository uses `main` as its default branch. This completely bre"}


identifier: gh_issue_3755190145
source: github_issue
status: new
created_at: 2025-12-22 21:44:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3755190145", "title": "[Dependency]: Upgrade Struts to 6.8", "url": "https://github.com/openo-beta/Open-O/issues/1064", "user": "sebastian-j-ibanez", "user_url": "https://github.com/sebastian-j-ibanez", "repo": "Open-O", "body_preview": "### Dependency\n\norg.apache.struts:struts2-core\n\n### Current Version\n\n2.5.33\n\n### Target Version\n\n6.8\n\n### Reason\n\nSecurity vulnerability\n\n### Breaking Changes\n\n- `@Validation` tags are redundant. Struts 6.X provides validation by default (see `EctImmCreateImmunizationSetInit2Action.java` for an example).\n- `com.opensymphony.xwork2.ActionSupport` is replaced with `org.apache.struts2.ActionSupport`.\n- Update `ActionContext` API usage in `OpenOWebTestBase.java`.\n\n### Testing\n\n- Unit tests.\n- Smoke ", "created": "2025-12-22T20:59:45Z", "labels": ["dependencies", "type: maintenance"], "context": "[Dependency]: Upgrade Struts to 6.8 ### Dependency\n\norg.apache.struts:struts2-core\n\n### Current Version\n\n2.5.33\n\n### Target Version\n\n6.8\n\n### Reason\n\nSecurity vulnerability\n\n### Breaking Changes\n\n- `@Validation` tags are redundant. Stru"}


identifier: gh_issue_3755322544
source: github_issue
status: new
created_at: 2025-12-22 21:57:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3755322544", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/marko-stanojevic/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @marko-stanojevic! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each ", "created": "2025-12-22T21:48:31Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @marko-stanojevic! Welc"}


identifier: gh_issue_3755281367
source: github_issue
status: new
created_at: 2025-12-22 22:23:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3755281367", "title": "Dependency Dashboard", "url": "https://github.com/patheard/test-sbom/issues/4", "user": "renovate[bot]", "user_url": "https://github.com/apps/renovate", "repo": "test-sbom", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/patheard/test-sbom).\n\n## Awaiting Schedule\n\nThe following updates are awaiting their schedule. To get an update now, click on a checkbox below.\n\n - [ ] <!-- unschedule-branch=renovate/lock-file-maintenance -->chore(deps): lock file maintenance\n\n## ", "created": "2025-12-22T21:31:05Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the M"}


identifier: gh_issue_3755261951
source: github_issue
status: new
created_at: 2025-12-22 22:23:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3755261951", "title": "Security: Add security vulnerability scanning", "url": "https://github.com/JacobPEvans/python-template/issues/5", "user": "JacobPEvans", "user_url": "https://github.com/JacobPEvans", "repo": "python-template", "body_preview": "## Severity\nHIGH - Missing Security Tooling\n\n## Description\nThe repository lacks any security scanning tools for Python code or dependencies despite having comprehensive code quality checks.\n\n## Missing Tools\n- **bandit** - Static security analysis for Python\n- **safety** - Dependency vulnerability scanner  \n- **snyk/semgrep** - Advanced security scanning\n\n## Current State\nPre-commit hooks include black, isort, flake8, and mypy but no security scanners. No security gate in CI/CD pipeline.\n\n## Im", "created": "2025-12-22T21:23:03Z", "labels": [], "context": "Security: Add security vulnerability scanning ## Severity\nHIGH - Missing Security Tooling\n\n## Description\nThe repository lacks any security scanning tools for Python code or dependencies despite having comprehensive code quality checks.\n\n## Missi"}


identifier: gh_issue_3755436514
source: github_issue
status: new
created_at: 2025-12-22 22:36:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3755436514", "title": "boto3-1.34.11-py3-none-any.whl: 3 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/kubiyabot/agent-starter-template/issues/21", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "agent-starter-template", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>boto3-1.34.11-py3-none-any.whl</b></summary>\n\n<p></p>\n<p>Path to dependency file: /requirements.txt</p>\n<p>Path to vulnerable library: /tmp/ws-ua_20251222223329_GKUPJD/python_EXYCLN/202512222233311/env/lib/python3.9/site-packages/urllib3-1.26.20.dist-info</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/kubiyabot/agent-starter-temp", "created": "2025-12-22T22:34:40Z", "labels": ["Mend: dependency security vulnerability"], "context": "boto3-1.34.11-py3-none-any.whl: 3 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>boto3-1.34.11-py3-none-any.whl</b></summary>\n\n<"}


identifier: gh_issue_3755436467
source: github_issue
status: new
created_at: 2025-12-22 22:36:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3755436467", "title": "requests-2.32.4-py3-none-any.whl: 3 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/kubiyabot/agent-starter-template/issues/20", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "agent-starter-template", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>requests-2.32.4-py3-none-any.whl</b></summary>\n\n<p></p>\n<p>Path to dependency file: /requirements.txt</p>\n<p>Path to vulnerable library: /tmp/ws-ua_20251222223329_GKUPJD/python_EXYCLN/202512222233311/env/lib/python3.9/site-packages/urllib3-1.26.20.dist-info</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/kubiyabot/agent-starter-te", "created": "2025-12-22T22:34:38Z", "labels": ["Mend: dependency security vulnerability"], "context": "requests-2.32.4-py3-none-any.whl: 3 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>requests-2.32.4-py3-none-any.whl</b></summary>\n"}


identifier: gh_issue_3755377197
source: github_issue
status: new
created_at: 2025-12-22 22:36:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3755377197", "title": "Security: Found some vulnerable dependencies via pnpm audit", "url": "https://github.com/idos-network/idos-sdk-js/issues/1274", "user": "dmrdvn", "user_url": "https://github.com/dmrdvn", "repo": "idos-sdk-js", "body_preview": "Hey team!\n\nI was setting up the project locally and ran `pnpm audit` - noticed there are some security vulnerabilities that might need attention.\n\n## What I found\n\n```\n39 vulnerabilities found\nSeverity: 12 low | 15 moderate | 9 high | 3 critical\n```\n\n## Most critical ones\n\n**pbkdf2** (Critical)\n- https://github.com/advisories/GHSA-v62p-rq8g-8h59\n- Comes from: `vite-plugin-node-polyfills > node-stdlib-browser > crypto-browserify > pbkdf2`\n- Fix available: upgrade to >=3.1.3\n\n**vite** (Multiple is", "created": "2025-12-22T22:09:52Z", "labels": [], "context": "Security: Found some vulnerable dependencies via pnpm audit Hey team!\n\nI was setting up the project locally and ran `pnpm audit` - noticed there are some security vulnerabilities that might need attention.\n\n## What I found\n\n```\n39 vulnerabilities found\nSeverit"}


identifier: gh_issue_3755346608
source: github_issue
status: new
created_at: 2025-12-22 22:36:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3755346608", "title": "\ud83c\udf33 NWU Protocol Complete Implementation - All Layers", "url": "https://github.com/Garrettc123/tree-of-life-system/issues/1", "user": "Garrettc123", "user_url": "https://github.com/Garrettc123", "repo": "tree-of-life-system", "body_preview": "## \ud83c\udf33 NWU Protocol \"Tree of Life\" System - Complete Architecture\n\nThis issue tracks the comprehensive implementation of all NWU Protocol layers.\n\n### \ud83c\udf31 ROOT LAYER: Blockchain Foundation\n- [ ] Smart Contracts (NWUProtocol.sol, NWUToken.sol, Governance.sol)\n- [ ] Quantum-Resistant Cryptography Implementation\n- [ ] Proof of Stake Consensus Mechanism\n- [ ] Byzantine Fault Tolerance\n\n### \ud83e\udeb5 TRUNK: Core Business Logic\n- [ ] Contribution Management System\n- [ ] Verification Engine\n- [ ] Reward Distributi", "created": "2025-12-22T21:59:33Z", "labels": [], "context": "\ud83c\udf33 NWU Protocol Complete Implementation - All Layers ## \ud83c\udf33 NWU Protocol \"Tree of Life\" System - Complete Architecture\n\nThis issue tracks the comprehensive implementation of all NWU Protocol layers.\n\n### \ud83c\udf31 ROOT LAYER: Blockchain Foundation\n- [ ] Smart Con"}


identifier: gh_issue_3755194434
source: github_issue
status: new
created_at: 2025-12-22 22:59:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3755194434", "title": "x/vulndb: potential Go vuln in github.com/kedacore/keda/v2: GHSA-c4p6-qg4m-9jmr", "url": "https://github.com/golang/vulndb/issues/4257", "user": "GoVulnBot", "user_url": "https://github.com/GoVulnBot", "repo": "vulndb", "body_preview": "Advisory [GHSA-c4p6-qg4m-9jmr](https://github.com/advisories/GHSA-c4p6-qg4m-9jmr) references a vulnerability in the following Go modules:\n\n| Module |\n| - |\n| [github.com/kedacore/keda](https://pkg.go.dev/github.com/kedacore/keda) |\n| [github.com/kedacore/keda/v2](https://pkg.go.dev/github.com/kedacore/keda/v2) |\n\nDescription:\n### Impact\nAn Arbitrary File Read vulnerability has been identified in KEDA, potentially affecting any KEDA resource that uses TriggerAuthentication to configure HashiCorp ", "created": "2025-12-22T21:01:25Z", "labels": ["NeedsTriage"], "context": "x/vulndb: potential Go vuln in github.com/kedacore/keda/v2: GHSA-c4p6-qg4m-9jmr Advisory [GHSA-c4p6-qg4m-9jmr](https://github.com/advisories/GHSA-c4p6-qg4m-9jmr) references a vulnerability in the following Go modules:\n\n| Module |\n| - |\n| [github.com/kedacore/keda](https://pkg.go."}


identifier: gh_issue_3754500438
source: github_issue
status: new
created_at: 2025-12-22 23:11:49
data:
  {"source": "github_issue", "identifier": "gh_issue_3754500438", "title": "One-liner installation: curl | sh installer and service management", "url": "https://github.com/freenet/freenet-core/issues/2371", "user": "sanity", "user_url": "https://github.com/sanity", "repo": "freenet-core", "body_preview": "## Overview\n\nImplement a one-liner installation experience for Freenet, similar to:\n- `curl -f https://zed.dev/install.sh | sh`\n- `curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh`\n\nThis involves:\n1. Adding service management commands to the `freenet` binary\n2. Creating an install.sh script\n3. Adding macOS builds to the release workflow\n\n## Proposed CLI Commands\n\n### Service Management\n```bash\nfreenet service install    # Install as system/user service\nfreenet service uninstall  # ", "created": "2025-12-22T17:00:04Z", "labels": ["A-documentation", "E-medium", "P-medium", "A-developer-xp", "T-feature", "S-needs-design"], "context": "One-liner installation: curl | sh installer and service management ## Overview\n\nImplement a one-liner installation experience for Freenet, similar to:\n- `curl -f https://zed.dev/install.sh | sh`\n- `curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh`\n\nThis"}


identifier: gh_issue_3755449490
source: github_issue
status: new
created_at: 2025-12-22 23:36:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3755449490", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/rain-dogs76/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @rain-dogs76! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate ", "created": "2025-12-22T22:40:19Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @rain-dogs76! Welcome to your Skills exerc"}


identifier: gh_issue_3755555856
source: github_issue
status: new
created_at: 2025-12-23 00:13:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3755555856", "title": "[CRITICAL] Remove hardcoded passwords and secrets", "url": "https://github.com/anushka2024cse-lang/smg-vendor-portal/issues/118", "user": "rk-roshan-kr", "user_url": "https://github.com/rk-roshan-kr", "repo": "smg-vendor-portal", "body_preview": "## Security Vulnerability\n\n**Severity**: Critical\n**Type**: Exposed Credentials\n\n### Findings\n1. **User Reported**: Hardcoded \u000balue='password123' visible in frontend input.\n2. **Codebase Scan**: Found hardcoded admin key 'smg9936879105mmp' in src/pages/Login/LoginPage.jsx.\n\n### Action Required\n- Locate and remove password123 default value.\n- Move admin key validation to backend or use proper RBAC.\n- Ensure no secrets are committed to client-side code.", "created": "2025-12-22T23:37:14Z", "labels": ["bug", "security", "urgent"], "context": "[CRITICAL] Remove hardcoded passwords and secrets ## Security Vulnerability\n\n**Severity**: Critical\n**Type**: Exposed Credentials\n\n### Findings\n1. **User Reported**: Hardcoded \u000balue='password123' visible in frontend input.\n2. **Codebase Scan**: Found"}


identifier: gh_issue_3755607874
source: github_issue
status: new
created_at: 2025-12-23 00:13:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3755607874", "title": "marshmallow_sqlalchemy-1.1.0-py3-none-any.whl: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/RedBeret/MontLuxeWatch-ReactFlaskEcommerce/issues/31", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "MontLuxeWatch-ReactFlaskEcommerce", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>marshmallow_sqlalchemy-1.1.0-py3-none-any.whl</b></summary>\n\n<p></p>\n<p>Path to dependency file: /Pipfile</p>\n<p>Path to vulnerable library: /Pipfile</p>\n<p>\n\n</details>\n\n## Vulnerabilities\n\n| Vulnerability | Severity | <img src='https://whitesource-resources.whitesourcesoftware.com/cvss3.png' width=19 height=20> CVSS | Dependency | Type | Fixed", "created": "2025-12-23T00:13:17Z", "labels": ["Mend: dependency security vulnerability"], "context": "marshmallow_sqlalchemy-1.1.0-py3-none-any.whl: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>marshmallow_sqlalchemy-1.1.0-py3-none-any.whl</"}


identifier: gh_issue_3755607798
source: github_issue
status: new
created_at: 2025-12-23 00:13:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3755607798", "title": "flask_marshmallow-1.2.1-py3-none-any.whl: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/RedBeret/MontLuxeWatch-ReactFlaskEcommerce/issues/30", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "MontLuxeWatch-ReactFlaskEcommerce", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>flask_marshmallow-1.2.1-py3-none-any.whl</b></summary>\n\n<p></p>\n<p>Path to dependency file: /Pipfile</p>\n<p>Path to vulnerable library: /Pipfile</p>\n<p>\n\n</details>\n\n## Vulnerabilities\n\n| Vulnerability | Severity | <img src='https://whitesource-resources.whitesourcesoftware.com/cvss3.png' width=19 height=20> CVSS | Dependency | Type | Fixed in (", "created": "2025-12-23T00:13:14Z", "labels": ["Mend: dependency security vulnerability"], "context": "flask_marshmallow-1.2.1-py3-none-any.whl: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>flask_marshmallow-1.2.1-py3-none-any.whl</b></s"}


identifier: gh_issue_3755607165
source: github_issue
status: new
created_at: 2025-12-23 00:13:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3755607165", "title": "marshmallow-3.23.2-py3-none-any.whl: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/ls1intum/Athena/issues/436", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "Athena", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>marshmallow-3.23.2-py3-none-any.whl</b></summary>\n\n<p>A lightweight library for converting complex datatypes to and from native Python datatypes.</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/64/38/8d37b19f6c882482cae7ba8db6d02fce3cba7b3895c93fc80352b30a18f5/marshmallow-3.23.2-py3-none-any.whl\">https://files.pythonho", "created": "2025-12-23T00:12:44Z", "labels": ["Mend: dependency security vulnerability"], "context": "marshmallow-3.23.2-py3-none-any.whl: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>marshmallow-3.23.2-py3-none-any.whl</b></summar"}


identifier: gh_issue_3755607133
source: github_issue
status: new
created_at: 2025-12-23 00:13:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3755607133", "title": "marshmallow-3.23.1-py3-none-any.whl: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/ls1intum/Athena/issues/435", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "Athena", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>marshmallow-3.23.1-py3-none-any.whl</b></summary>\n\n<p>A lightweight library for converting complex datatypes to and from native Python datatypes.</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/ac/a7/a78ff54e67ef92a3d12126b98eb98ab8abab3de4a8c46d240c87e514d6bb/marshmallow-3.23.1-py3-none-any.whl\">https://files.pythonho", "created": "2025-12-23T00:12:43Z", "labels": ["Mend: dependency security vulnerability"], "context": "marshmallow-3.23.1-py3-none-any.whl: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>marshmallow-3.23.1-py3-none-any.whl</b></summar"}


identifier: gh_issue_3755607025
source: github_issue
status: new
created_at: 2025-12-23 00:13:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3755607025", "title": "deepgram_sdk-3.9.0-py3-none-any.whl: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/AReid987/aigency-v1.0.0/issues/177", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "aigency-v1.0.0", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>deepgram_sdk-3.9.0-py3-none-any.whl</b></summary>\n\n<p></p>\n<p>Path to dependency file: /02_REFS_PROTOTYPES/ten-framework/ai_agents/agents/ten_packages/extension/deepgram_asr_python/requirements.txt</p>\n<p>Path to vulnerable library: /tmp/ws-ua_20250722110617_FPIECS/python_LERNXC/202507221131041/env/lib/python3.9/site-packages/marshmallow-3.26.1.", "created": "2025-12-23T00:12:37Z", "labels": ["Mend: dependency security vulnerability"], "context": "deepgram_sdk-3.9.0-py3-none-any.whl: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>deepgram_sdk-3.9.0-py3-none-any.whl</b></summar"}


identifier: gh_issue_3755605073
source: github_issue
status: new
created_at: 2025-12-23 00:26:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3755605073", "title": "Release validation failed for v1.5.0-beta.3", "url": "https://github.com/pradeepmouli/iox-matter-bridge/issues/15", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "iox-matter-bridge", "body_preview": "# Release Artifact Validation Report\n\n**Release**: v1.5.0-beta.3\n**Version**: 1.5.0-beta.3\n**Date**: 2025-12-23 00:11:05 UTC\n\n## Validation Results\n\n| Artifact | Status | Notes |\n|----------|--------|-------|\n| Checksums file | \u274c Missing | Required |\n| Tarball (.tar.gz) | \u274c Missing or Invalid | Required |\n| SBOM (.sbom.json) | \u26a0\ufe0f Missing | Recommended |\n| GPG Signature | \u2139\ufe0f Not present | Optional |\n\n## Details\n\n### Checksums\n- \u274c CRITICAL: Checksums file missing\n\n### Tarball\n- \u274c CRITICAL: Tarball", "created": "2025-12-23T00:11:05Z", "labels": [], "context": "Release validation failed for v1.5.0-beta.3 # Release Artifact Validation Report\n\n**Release**: v1.5.0-beta.3\n**Version**: 1.5.0-beta.3\n**Date**: 2025-12-23 00:11:05 UTC\n\n## Validation Results\n\n| Artifact | Status | Notes |\n|----------|--------|"}


identifier: gh_issue_3755531086
source: github_issue
status: new
created_at: 2025-12-23 00:26:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3755531086", "title": "Add /bugfix command for self-healing PR submission", "url": "https://github.com/zircote/claude-spec/issues/27", "user": "zircote", "user_url": "https://github.com/zircote", "repo": "claude-spec", "body_preview": "## Problem\n\nWhen using claude-spec commands, bugs are occasionally discovered in the plugin itself (command definitions, filters, analyzers, etc.). Currently, fixing these requires:\n\n1. Manually switching context from the user's project\n2. Navigating to the claude-spec repository\n3. Creating a branch, fix, and PR\n4. Switching back to continue work\n\nThis friction means obvious bugs often go unreported or unfixed.\n\n## Proposed Solution\n\nAdd a `/claude-spec:bugfix` command (or skill) that enables s", "created": "2025-12-22T23:21:32Z", "labels": [], "context": "Add /bugfix command for self-healing PR submission ## Problem\n\nWhen using claude-spec commands, bugs are occasionally discovered in the plugin itself (command definitions, filters, analyzers, etc.). Currently, fixing these requires:\n\n1. Manually switc"}


identifier: gh_issue_3755610144
source: github_issue
status: new
created_at: 2025-12-23 00:39:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3755610144", "title": "marshmallow-3.20.2-py3-none-any.whl: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/RedBeret/cashflow-ninjas-app/issues/83", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "cashflow-ninjas-app", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>marshmallow-3.20.2-py3-none-any.whl</b></summary>\n\n<p>A lightweight library for converting complex datatypes to and from native Python datatypes.</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/57/e9/4368d49d3b462da16a3bac976487764a84dd85cef97232c7bd61f5bdedf3/marshmallow-3.20.2-py3-none-any.whl\">https://files.pythonho", "created": "2025-12-23T00:15:07Z", "labels": ["Mend: dependency security vulnerability"], "context": "marshmallow-3.20.2-py3-none-any.whl: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>marshmallow-3.20.2-py3-none-any.whl</b></summar"}


identifier: gh_issue_3755610114
source: github_issue
status: new
created_at: 2025-12-23 00:39:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3755610114", "title": "marshmallow-3.20.1-py3-none-any.whl: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/RedBeret/cashflow-ninjas-app/issues/82", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "cashflow-ninjas-app", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>marshmallow-3.20.1-py3-none-any.whl</b></summary>\n\n<p>A lightweight library for converting complex datatypes to and from native Python datatypes.</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/ed/3c/cebfdcad015240014ff08b883d1c0c427f2ba45ae8c6572851b6ef136cad/marshmallow-3.20.1-py3-none-any.whl\">https://files.pythonho", "created": "2025-12-23T00:15:05Z", "labels": ["Mend: dependency security vulnerability"], "context": "marshmallow-3.20.1-py3-none-any.whl: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>marshmallow-3.20.1-py3-none-any.whl</b></summar"}


identifier: gh_issue_3755609571
source: github_issue
status: new
created_at: 2025-12-23 00:39:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3755609571", "title": "marshmallow-3.20.2-py3-none-any.whl: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/RedBeret/reactresolve/issues/17", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "reactresolve", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>marshmallow-3.20.2-py3-none-any.whl</b></summary>\n\n<p>A lightweight library for converting complex datatypes to and from native Python datatypes.</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/57/e9/4368d49d3b462da16a3bac976487764a84dd85cef97232c7bd61f5bdedf3/marshmallow-3.20.2-py3-none-any.whl\">https://files.pythonho", "created": "2025-12-23T00:14:38Z", "labels": ["Mend: dependency security vulnerability"], "context": "marshmallow-3.20.2-py3-none-any.whl: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>marshmallow-3.20.2-py3-none-any.whl</b></summar"}


identifier: gh_issue_3755608421
source: github_issue
status: new
created_at: 2025-12-23 00:39:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3755608421", "title": "marshmallow-3.0.0-py2.py3-none-any.whl: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/studentenhuisDS4/ds4reboot/issues/375", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "ds4reboot", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>marshmallow-3.0.0-py2.py3-none-any.whl</b></summary>\n\n<p>A lightweight library for converting complex datatypes to and from native Python datatypes.</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/ad/a6/ba5008fb93498f2352a6a65c9c4842da7060be676a4219d68a5700a5f549/marshmallow-3.0.0-py2.py3-none-any.whl\">https://files.py", "created": "2025-12-23T00:13:38Z", "labels": ["Mend: dependency security vulnerability"], "context": "marshmallow-3.0.0-py2.py3-none-any.whl: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>marshmallow-3.0.0-py2.py3-none-any.whl</b></sum"}


identifier: gh_issue_3755646156
source: github_issue
status: new
created_at: 2025-12-23 01:03:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3755646156", "title": "[Snyk: High/Medium/Low] org.flywaydb:flyway-commandline@11.19.0 - 9 issues showup on synk dashboard (Due: 01/30/2026)", "url": "https://github.com/fecgov/openFEC/issues/6439", "user": "pkfec", "user_url": "https://github.com/pkfec", "repo": "openFEC", "body_preview": "### Overview\n\nhttps://app.snyk.io/org/fecgov/project/e6c155e9-f0ac-4a49-98fa-83c24f5b74b3\n\n<img width=\"921\" height=\"537\" alt=\"Image\" src=\"https://github.com/user-attachments/assets/e1140665-3da9-4dd4-9dae-8df823f20e1b\" />\n\n\n\n### Completion criteria\n\n- [ ] upgrade flyway to remediate security vulnerability\n", "created": "2025-12-23T00:42:46Z", "labels": [], "context": "[Snyk: High/Medium/Low] org.flywaydb:flyway-commandline@11.19.0 - 9 issues showup on synk dashboard (Due: 01/30/2026) ### Overview\n\nhttps://app.snyk.io/org/fecgov/project/e6c155e9-f0ac-4a49-98fa-83c24f5b74b3\n\n<img width=\"921\" height=\"537\" alt=\"Image\" src=\"https://github.com/user-attachments/assets/e1140665-3da9-4dd4-"}


identifier: gh_issue_3755635340
source: github_issue
status: new
created_at: 2025-12-23 01:03:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3755635340", "title": "[Snyk:Low] Function Call With Incorrect Order of Arguments (Due: 04/24/2026)", "url": "https://github.com/fecgov/openFEC/issues/6438", "user": "pkfec", "user_url": "https://github.com/pkfec", "repo": "openFEC", "body_preview": "### Overview\nAffected versions of this package are vulnerable to Function Call With Incorrect Order of Arguments due to the incorrect handling of the SECRET_KEY_FALLBACKS configuration. An attacker can exploit this to sign sessions with stale keys, potentially impeding the transition to fresher keys.\n\nnote: This is only exploitable if the site has opted-in to use key rotation by setting SECRET_KEY_FALLBACKS\n\n### Security information\nFactors contributing to the scoring:\nSnyk: [CVSS v4.0 1.8](http", "created": "2025-12-23T00:34:33Z", "labels": ["Security: low"], "context": "[Snyk:Low] Function Call With Incorrect Order of Arguments (Due: 04/24/2026) ### Overview\nAffected versions of this package are vulnerable to Function Call With Incorrect Order of Arguments due to the incorrect handling of the SECRET_KEY_FALLBACKS configuration. An attacker ca"}


identifier: gh_issue_3755542754
source: github_issue
status: new
created_at: 2025-12-23 01:03:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3755542754", "title": "introduce `Trusted Publising` for npm / There are security risks with this option. For automation or CI/CD uses, please use Trusted Publishing instead.", "url": "https://github.com/HiromiShikata/npm-cli-github-issue-tower-defence-management/issues/215", "user": "HiromiShikata", "user_url": "https://github.com/HiromiShikata", "repo": "npm-cli-github-issue-tower-defence-management", "body_preview": "", "created": "2025-12-22T23:26:50Z", "labels": ["category:impl-plan"], "context": "introduce `Trusted Publising` for npm / There are security risks with this option. For automation or CI/CD uses, please use Trusted Publishing instead. "}


identifier: gh_issue_3755483463
source: github_issue
status: new
created_at: 2025-12-23 01:03:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3755483463", "title": "\ud83d\udd34 [\u4e25\u91cd] \u4f9d\u8d56\u5305 @types/bcryptjs \u5df2\u5e9f\u5f03", "url": "https://github.com/pkuntik/xhs_ad_agent/issues/4", "user": "pkuntik", "user_url": "https://github.com/pkuntik", "repo": "xhs_ad_agent", "body_preview": "## \ud83d\udccd \u4f4d\u7f6e\n[package.json](package.json#L58) - devDependencies\n\n## \u274c \u95ee\u9898\u63cf\u8ff0\n`@types/bcryptjs@3.0.0` \u5df2\u88ab\u6807\u8bb0\u4e3a **deprecated**\uff08\u5e9f\u5f03\uff09\uff0c\u7ee7\u7eed\u4f7f\u7528\u53ef\u80fd\u5bfc\u81f4\uff1a\n- \u65e0\u6cd5\u83b7\u5f97\u7c7b\u578b\u5b9a\u4e49\u66f4\u65b0\n- \u4e0e\u65b0\u7248 TypeScript \u4e0d\u517c\u5bb9\n- \u6f5c\u5728\u7684\u5b89\u5168\u95ee\u9898\n\n## \ud83d\udca5 \u5f71\u54cd\n- \u7c7b\u578b\u5b89\u5168\u6027\u964d\u4f4e\n- \u672a\u6765\u53ef\u80fd\u65e0\u6cd5\u6b63\u5e38\u5de5\u4f5c\n- npm install \u65f6\u4f1a\u663e\u793a\u5e9f\u5f03\u8b66\u544a\n\n## \u2705 \u5efa\u8bae\u65b9\u6848\n\n### \u65b9\u6848 1: \u8fc1\u79fb\u5230 bcrypt\uff08\u63a8\u8350\uff09\n```bash\n# \u5378\u8f7d bcryptjs\npnpm remove bcryptjs @types/bcryptjs\n\n# \u5b89\u88c5 bcrypt\uff08\u539f\u751f\u6a21\u5757\uff0c\u6027\u80fd\u66f4\u597d\uff09\npnpm add bcrypt\npnpm add -D @types/bcrypt\n```\n\n### \u65b9\u6848 2: \u8fc1\u79fb\u5230 argon2\uff08\u66f4\u5b89\u5168\uff09\n```bash\n# \u5378\u8f7d bcryptjs\npnpm remove bcryptjs @types/bcryptjs\n\n# \u5b89\u88c5 argon2\uff08\u66f4\u73b0\u4ee3\u7684\u52a0\u5bc6\u7b97", "created": "2025-12-22T22:56:50Z", "labels": ["priority-high", "dependencies", "auto-fix-approved", "ai-safe", "fix-confirmed"], "context": "\ud83d\udd34 [\u4e25\u91cd] \u4f9d\u8d56\u5305 @types/bcryptjs \u5df2\u5e9f\u5f03 ## \ud83d\udccd \u4f4d\u7f6e\n[package.json](package.json#L58) - devDependencies\n\n## \u274c \u95ee\u9898\u63cf\u8ff0\n`@types/bcryptjs@3.0.0` \u5df2\u88ab\u6807\u8bb0\u4e3a **deprecated**\uff08\u5e9f\u5f03\uff09\uff0c\u7ee7\u7eed\u4f7f\u7528\u53ef\u80fd\u5bfc\u81f4\uff1a\n- \u65e0\u6cd5\u83b7\u5f97\u7c7b\u578b\u5b9a\u4e49\u66f4\u65b0\n- \u4e0e\u65b0\u7248 TypeScript \u4e0d\u517c\u5bb9\n- \u6f5c\u5728\u7684\u5b89\u5168\u95ee\u9898\n\n## \ud83d\udca5 \u5f71\u54cd\n- \u7c7b\u578b\u5b89\u5168\u6027\u964d\u4f4e\n- \u672a\u6765\u53ef\u80fd\u65e0\u6cd5"}


identifier: gh_issue_3755710502
source: github_issue
status: new
created_at: 2025-12-23 01:28:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3755710502", "title": "Projectworlds Remote Clinic System Project V2.0 /staff/edit.php?id=15 cross site scripting", "url": "https://github.com/Pick-program/CVE2/issues/2", "user": "Pick-program", "user_url": "https://github.com/Pick-program", "repo": "CVE2", "body_preview": "#Projectworlds Remote Clinic System Project V2.0 /staff/edit.php?id=15 cross site scripting\n\n# Last Name OF AFFECTED PRODUCT(S)\n\n- Remote Clinic System\n\n## Vendor Homepage\n\n- github.com\n\n#AFFECTED AND/OR FIXED VERSION(S)\n\n## Li Feng\n\n-  \n\n## Vulnerable File\n\n- /staff/edit.php?id=15\n\n## VERSION(S)\n\n- V2.0\n\n## Software Link\n\n-https://github.com/remoteclinic/RemoteClinic\n\n#PROBLEM TYPE\n\n## Vulnerability Type\n\n- XSS\n\n## Root Cause\n\n- An XSS vulnerability was found in the '/staff/edit.php?id=15' file", "created": "2025-12-23T01:27:38Z", "labels": [], "context": "Projectworlds Remote Clinic System Project V2.0 /staff/edit.php?id=15 cross site scripting #Projectworlds Remote Clinic System Project V2.0 /staff/edit.php?id=15 cross site scripting\n\n# Last Name OF AFFECTED PRODUCT(S)\n\n- Remote Clinic System\n\n## Vendor Homepage\n\n- github.com\n\n#AFFECTED AND"}


identifier: gh_issue_3755627092
source: github_issue
status: new
created_at: 2025-12-23 01:41:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3755627092", "title": "Tailor Resume: IT&D Director, IT Operations at Reckitt", "url": "https://github.com/ready4exam/resume-automation/issues/71", "user": "ready4exam", "user_url": "https://github.com/ready4exam", "repo": "resume-automation", "body_preview": "Company: Reckitt\nJob Title: IT&D Director, IT Operations\nResume Mode: hybrid\nMethodologies: Agile,FinOps,AI\n\nUploaded Resume (Optional):\n(none)\n\nJob Description:\nGlobal IT Operations Oversight\n Own the end-to-end IT operations strategy across all regions, ensuring consistent service delivery and operational excellence.\n Oversee infrastructure, cloud platforms, networks, and end-user computing environments globally.\n Ensure high availability, scalability, and security of IT systems supporting man", "created": "2025-12-23T00:28:04Z", "labels": [], "context": "Tailor Resume: IT&D Director, IT Operations at Reckitt Company: Reckitt\nJob Title: IT&D Director, IT Operations\nResume Mode: hybrid\nMethodologies: Agile,FinOps,AI\n\nUploaded Resume (Optional):\n(none)\n\nJob Description:\nGlobal IT Operations Oversight\n Own th"}


identifier: gh_issue_3755745008
source: github_issue
status: new
created_at: 2025-12-23 01:54:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3755745008", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Bruce-Orozco_1223_015041_gh_gw2/issues/6", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Bruce-Orozco_1223_015041_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | -----", "created": "2025-12-23T01:52:27Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3755744992
source: github_issue
status: new
created_at: 2025-12-23 01:54:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3755744992", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Bruce-Orozco_1223_015041_gh_gw2/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Bruce-Orozco_1223_015041_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-23T01:52:26Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3755744755
source: github_issue
status: new
created_at: 2025-12-23 01:54:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3755744755", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/William-Lawrence_1223_015034_gh_gw1/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "William-Lawrence_1223_015034_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | -----", "created": "2025-12-23T01:52:16Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3755744769
source: github_issue
status: new
created_at: 2025-12-23 01:54:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3755744769", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/William-Lawrence_1223_015034_gh_gw1/issues/6", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "William-Lawrence_1223_015034_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-23T01:52:16Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3755758001
source: github_issue
status: new
created_at: 2025-12-23 02:19:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3755758001", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Sarah-Ramirez_1223_020021_gh_gw2/issues/6", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Sarah-Ramirez_1223_020021_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-23T02:02:03Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3755757985
source: github_issue
status: new
created_at: 2025-12-23 02:19:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3755757985", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Sarah-Ramirez_1223_020021_gh_gw2/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Sarah-Ramirez_1223_020021_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -----", "created": "2025-12-23T02:02:02Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3755757141
source: github_issue
status: new
created_at: 2025-12-23 02:19:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3755757141", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Sherry-Espinoza_1223_015953_gh_gw1/issues/2", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Sherry-Espinoza_1223_015953_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.io/v", "created": "2025-12-23T02:01:24Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3755757135
source: github_issue
status: new
created_at: 2025-12-23 02:19:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3755757135", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Sherry-Espinoza_1223_015953_gh_gw1/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Sherry-Espinoza_1223_015953_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.", "created": "2025-12-23T02:01:23Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3755756650
source: github_issue
status: new
created_at: 2025-12-23 02:19:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3755756650", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Julie-Gonzales_1223_015829_gh_gw0/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Julie-Gonzales_1223_015829_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-23T02:01:01Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


