# leads

identifier: gh_issue_3755759292
source: github_issue
status: new
created_at: 2025-12-23 02:19:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3755759292", "title": "\ud83c\udfaf Project Roadmap: Phase 1 Foundation Checklist", "url": "https://github.com/Garrettc123/nwu-protocol/issues/1", "user": "Garrettc123", "user_url": "https://github.com/Garrettc123", "repo": "nwu-protocol", "body_preview": "## \ud83c\udfd7\ufe0f Phase 1: Foundation Layer (v1.0.0-alpha)\n\nThis issue tracks all remaining tasks to complete the Foundation Layer of the NWU Protocol.\n\n---\n\n### \ud83e\udeb5 Core Backend (The Trunk)\n\n#### Contribution Manager\n- [ ] Implement file ingestion API endpoints\n- [ ] Add support for multiple file types (code, datasets, documents)\n- [ ] Integrate IPFS pinning service\n- [ ] Create versioning system for contributions\n- [ ] Add cryptographic hashing for content verification\n- [ ] Implement file size validation (", "created": "2025-12-23T02:02:58Z", "labels": [], "context": "\ud83c\udfaf Project Roadmap: Phase 1 Foundation Checklist ## \ud83c\udfd7\ufe0f Phase 1: Foundation Layer (v1.0.0-alpha)\n\nThis issue tracks all remaining tasks to complete the Foundation Layer of the NWU Protocol.\n\n---\n\n### \ud83e\udeb5 Core Backend (The Trunk)\n\n#### Contribution Mana"}


identifier: gh_issue_3755757503
source: github_issue
status: new
created_at: 2025-12-23 02:19:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3755757503", "title": "aws-sdk-2.0.48.gem: 1 vulnerabilities (highest severity is: 9.8) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Sherry-Espinoza_1223_015953_gh_gw1/issues/3", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Sherry-Espinoza_1223_015953_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>aws-sdk-2.0.48.gem</strong></summary>\n\nThe official AWS SDK for Ruby. Provides both resource oriented interfaces and API clients for AWS services.\n\n\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/aws-sdk-2.0.48.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------", "created": "2025-12-23T02:01:39Z", "labels": [], "context": "aws-sdk-2.0.48.gem: 1 vulnerabilities (highest severity is: 9.8) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>aws-sdk-2.0.48.gem</strong></summary>\n\nThe official AWS SDK for Ruby. Provides both resource oriented interfaces and API clients for AWS services.\n\n"}


identifier: gh_issue_3755757513
source: github_issue
status: new
created_at: 2025-12-23 02:31:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3755757513", "title": "rdoc-3.12.2.gem: 2 vulnerabilities (highest severity is: 7.5) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Sherry-Espinoza_1223_015953_gh_gw1/issues/4", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Sherry-Espinoza_1223_015953_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>rdoc-3.12.2.gem</strong></summary>\n\nRDoc produces HTML and command-line documentation for Ruby projects.  RDoc\nincludes the +rdoc+ and +ri+ tools for generating and displaying online\ndocumentation.\n\nSee RDoc for a description of RDoc's markup and basic use.\n\n\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/rdoc-3.12.2.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | ", "created": "2025-12-23T02:01:40Z", "labels": [], "context": "rdoc-3.12.2.gem: 2 vulnerabilities (highest severity is: 7.5) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>rdoc-3.12.2.gem</strong></summary>\n\nRDoc produces HTML and command-line documentation for Ruby projects.  RDoc\nincludes the +rdoc+ and +ri+ tools fo"}


identifier: gh_issue_3755757531
source: github_issue
status: new
created_at: 2025-12-23 02:31:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3755757531", "title": "json-1.8.6.gem: 1 vulnerabilities (highest severity is: 7.5) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Sherry-Espinoza_1223_015953_gh_gw1/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Sherry-Espinoza_1223_015953_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>json-1.8.6.gem</strong></summary>\n\nThis is a JSON implementation as a Ruby extension in C.\n\n**Library home page:** [ https://rubygems.org/gems/json-1.8.6.gem ](https://rubygems.org/gems/json-1.8.6.gem)\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/json-1.8.6.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remed", "created": "2025-12-23T02:01:40Z", "labels": [], "context": "json-1.8.6.gem: 1 vulnerabilities (highest severity is: 7.5) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>json-1.8.6.gem</strong></summary>\n\nThis is a JSON implementation as a Ruby extension in C.\n\n**Library home page:** [ https://rubygems.org/gems/json-"}


identifier: gh_issue_3755820245
source: github_issue
status: new
created_at: 2025-12-23 02:43:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3755820245", "title": "Upgrade project dependencies \u2014 plan & checklist", "url": "https://github.com/min3rd/arkham-city/issues/195", "user": "min3rd", "user_url": "https://github.com/min3rd", "repo": "arkham-city", "body_preview": "## M\u1ee5c ti\u00eau ng\u1eafn\nN\u00e2ng c\u00e1c dependency (minor/patch/major) l\u00ean phi\u00ean b\u1ea3n an to\u00e0n, s\u1eeda breaking changes khi c\u1ea7n, c\u1eadp nh\u1eadt lockfile v\u00e0 \u0111\u1ea3m b\u1ea3o build/tests/lint passing tr\u00ean CI.\n\n## Ph\u1ea1m vi & \u01b0u ti\u00ean\n- **Kh\u1ea9n c\u1ea5p (high):** security fixes, fixes cho vulnerabilities (CVE), dependency b\u1ecb deprecated/breaking runtime.\n- **Tr\u01b0\u1edbc ti\u00ean:** arkham-city-core (backend), arkham-city-dashboard (frontend), arkham-city-websdk (lib).\n- **Quan t\u00e2m \u0111\u1eb7c bi\u1ec7t:** major upgrades cho NestJS, Angular, TypeScript, Node.js tar", "created": "2025-12-23T02:43:08Z", "labels": [], "context": "Upgrade project dependencies \u2014 plan & checklist ## M\u1ee5c ti\u00eau ng\u1eafn\nN\u00e2ng c\u00e1c dependency (minor/patch/major) l\u00ean phi\u00ean b\u1ea3n an to\u00e0n, s\u1eeda breaking changes khi c\u1ea7n, c\u1eadp nh\u1eadt lockfile v\u00e0 \u0111\u1ea3m b\u1ea3o build/tests/lint passing tr\u00ean CI.\n\n## Ph\u1ea1m vi & \u01b0u ti\u00ean\n- **K"}


identifier: gh_issue_3755795226
source: github_issue
status: new
created_at: 2025-12-23 02:43:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3755795226", "title": "docs: add GitHub Agentic Workflows guide", "url": "https://github.com/llm-d-incubation/workload-variant-autoscaler/issues/461", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "workload-variant-autoscaler", "body_preview": "## Overview\n\nThis PR adds comprehensive documentation for the GitHub Agentic Workflows (gh-aw) infrastructure that was recently added to the repository (upgrade from v0.31.10 to v0.33.12).\n\n## What Changed\n\n**New Documentation:**\n- \u2728 `docs/developer-guide/agentic-workflows.md` - Complete guide to gh-aw workflows (10KB)\n\n**Updated Documentation:**\n- \ud83d\udcdd `docs/developer-guide/development.md` - Added section on GitHub Agentic Workflows\n- \ud83d\udcdd `docs/README.md` - Added Developer Guide reference to agentic", "created": "2025-12-23T02:25:26Z", "labels": [], "context": "docs: add GitHub Agentic Workflows guide ## Overview\n\nThis PR adds comprehensive documentation for the GitHub Agentic Workflows (gh-aw) infrastructure that was recently added to the repository (upgrade from v0.31.10 to v0.33.12).\n\n## What Ch"}


identifier: gh_issue_3755798285
source: github_issue
status: new
created_at: 2025-12-23 02:43:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3755798285", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/ningweinw/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @ningweinw! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I", "created": "2025-12-23T02:27:55Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @ningweinw! Welcome to "}


identifier: gh_issue_3755820734
source: github_issue
status: new
created_at: 2025-12-23 02:54:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3755820734", "title": "Trivy Scan: Vulnerabilities found in image `0.1.2`", "url": "https://github.com/cbdq-io/gitchangelog/issues/35", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "gitchangelog", "body_preview": "# Vulnerabilities found in image `ghcr.io/cbdq-io/gitchangelog:0.1.2`\n\n**Scan summary:**\n- CVE-2024-58251 in cbdq-io/gitchangelog: Package: busybox\nInstalled Version: 1.37.0-r18\nVulnerability CVE-2024-58251\nSeverity: MEDIUM\nFixed Version: 1.37.0-r20\nLink: [CVE-2024-58251](https://avd.aquasec.com/nvd/cve-2024-58251)\n- CVE-2024-58251 in cbdq-io/gitchangelog: Package: busybox-binsh\nInstalled Version: 1.37.0-r18\nVulnerability CVE-2024-58251\nSeverity: MEDIUM\nFixed Version: 1.37.0-r20\nLink: [CVE-2024-", "created": "2025-12-23T02:43:30Z", "labels": ["security", "trivy"], "context": "Trivy Scan: Vulnerabilities found in image `0.1.2` # Vulnerabilities found in image `ghcr.io/cbdq-io/gitchangelog:0.1.2`\n\n**Scan summary:**\n- CVE-2024-58251 in cbdq-io/gitchangelog: Package: busybox\nInstalled Version: 1.37.0-r18\nVulnerability CVE-2024"}


identifier: gh_issue_3755813099
source: github_issue
status: new
created_at: 2025-12-23 02:54:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3755813099", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/keypress-notifications/issues/50", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "keypress-notifications", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (17)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-23T02:37:59Z", "labels": ["automated", "security", "critical"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3755813042
source: github_issue
status: new
created_at: 2025-12-23 02:54:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3755813042", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/file-insights/issues/130", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "file-insights", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (16)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-23T02:37:57Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3755810924
source: github_issue
status: new
created_at: 2025-12-23 02:54:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3755810924", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/additional-contexts-menu/issues/111", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "additional-contexts-menu", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (17)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-23T02:36:38Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3755815283
source: github_issue
status: new
created_at: 2025-12-23 03:06:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3755815283", "title": "CVE-2025-68161: org.apache.logging.log4j:log4j-core:jar:2.20.0:provided", "url": "https://github.com/exasol/spark-connector-common-java/issues/79", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "spark-connector-common-java", "body_preview": "## Summary\nThe Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer certificate, even when the  verifyHostName https://logging.apache.org/log4j/2.x/manual/appenders/network.html#SslConfiguration-attr-verifyHostName  configuration attribute or the  log4j2.sslVerifyHostName https://logging.apache.org/log4j/2.x/manual/systemproperties.html#log4j2.sslVerifyHostName  system property is set to true.\n\nThis issue may allow a man-in", "created": "2025-12-23T02:39:27Z", "labels": ["security"], "context": "CVE-2025-68161: org.apache.logging.log4j:log4j-core:jar:2.20.0:provided ## Summary\nThe Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer certificate, even when the  verifyHostName https://logging."}


identifier: gh_issue_3755885735
source: github_issue
status: new
created_at: 2025-12-23 03:31:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3755885735", "title": "\ud83d\udea8 Security Vulnerabilities Detected", "url": "https://github.com/naretakis/eapd-next/issues/36", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "eapd-next", "body_preview": "\n## Security Audit Results\n\n**High vulnerabilities:** 1\n**Critical vulnerabilities:** 1\n\n### Recommended Actions\n1. Review the vulnerabilities listed below\n2. Update affected packages using `npm update`\n3. For packages without fixes, consider alternatives\n4. Run `npm audit fix` to automatically fix issues where possible\n\n### Audit Details\n```json\nundefined\n```\n\nThis issue was automatically created by the security audit workflow.\n", "created": "2025-12-23T03:21:54Z", "labels": ["security", "priority: high", "needs-triage"], "context": "\ud83d\udea8 Security Vulnerabilities Detected \n## Security Audit Results\n\n**High vulnerabilities:** 1\n**Critical vulnerabilities:** 1\n\n### Recommended Actions\n1. Review the vulnerabilities listed below\n2. Update affected packages using `npm updat"}


identifier: gh_issue_3755839741
source: github_issue
status: new
created_at: 2025-12-23 03:31:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3755839741", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-23", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/360", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (180)\n1. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n2. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:439`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n3. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:450`", "created": "2025-12-23T02:56:15Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-23 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (180)\n1. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without "}


identifier: gh_issue_3755816928
source: github_issue
status: new
created_at: 2025-12-23 03:31:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3755816928", "title": "CI/CD\u3067\u306e SPA \u306e\u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u306e\u30d3\u30eb\u30c9\u6642\u306b Node.js \u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u95a2\u3059\u308b\u8b66\u544a\u304c\u51fa\u308b", "url": "https://github.com/AlesInfiny/maris/issues/4202", "user": "KentaHizume", "user_url": "https://github.com/KentaHizume", "repo": "maris", "body_preview": "## \u6982\u8981\n\nCI/CD\u3067\u306e SPA \u306e\u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u306e\u30d3\u30eb\u30c9\u6642\u306b\u3001\u4e0b\u8a18\u306e\u3088\u3046\u306b Node.js \u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u95a2\u3059\u308b\u8b66\u544a\u304c\u51fa\u308b\u3002\n- setup-node \u3067\u6700\u65b0 LTS \u3092\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u3059\u308b\n- CI / CD \u74b0\u5883\u306a\u3089\u30b9\u30ad\u30c3\u30d7\u3059\u308b\n\u306e\u5bfe\u51e6\u304c\u8003\u3048\u3089\u308c\u308b\u3002\u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u306e WF \u3067 npm ci \u3057\u3066\u3044\u308b\u610f\u5473\u304c\u3042\u307e\u308a\u306a\u3044\u306e\u3067\u5f8c\u8005\u306e\u307b\u3046\u304c\u597d\u307e\u3057\u3044\u306f\u305a\u3002\n\n## \u8a73\u7d30 / \u6a5f\u80fd\u8a73\u7d30\uff08\u30aa\u30d7\u30b7\u30e7\u30f3\uff09\n\n```\nDressca.Web.Consumer.Dto -> /home/runner/work/maris/maris/samples/Dressca/dressca-backend/src/Dressca.Web.Consumer.Dto/bin/Debug/net10.0/Dressca.Web.Consumer.Dto.dll\nDressca.SystemCommon -> /home/runner/work/maris/maris/samples/Dressca/dressca-backend/src/Dressca.SystemCommon/bin/Debug/net10.0/Dress", "created": "2025-12-23T02:40:45Z", "labels": ["not triaged"], "context": "CI/CD\u3067\u306e SPA \u306e\u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u306e\u30d3\u30eb\u30c9\u6642\u306b Node.js \u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u95a2\u3059\u308b\u8b66\u544a\u304c\u51fa\u308b ## \u6982\u8981\n\nCI/CD\u3067\u306e SPA \u306e\u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u306e\u30d3\u30eb\u30c9\u6642\u306b\u3001\u4e0b\u8a18\u306e\u3088\u3046\u306b Node.js \u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u95a2\u3059\u308b\u8b66\u544a\u304c\u51fa\u308b\u3002\n- setup-node \u3067\u6700\u65b0 LTS \u3092\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u3059\u308b\n- CI / CD \u74b0\u5883\u306a\u3089\u30b9\u30ad\u30c3\u30d7\u3059\u308b\n\u306e\u5bfe\u51e6\u304c\u8003\u3048\u3089\u308c\u308b\u3002\u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u306e WF \u3067 npm ci \u3057\u3066\u3044\u308b\u610f\u5473\u304c\u3042\u307e\u308a\u306a\u3044\u306e\u3067\u5f8c\u8005\u306e\u307b\u3046\u304c\u597d\u307e\u3057\u3044\u306f\u305a\u3002\n\n## \u8a73\u7d30 / \u6a5f\u80fd\u8a73\u7d30\uff08\u30aa\u30d7\u30b7\u30e7\u30f3\uff09\n\n```\n"}


identifier: gh_issue_3755894519
source: github_issue
status: new
created_at: 2025-12-23 03:44:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3755894519", "title": "Latest 15 Papers - December 23, 2025", "url": "https://github.com/yanghlll/ArxivDaily-Haolin/issues/82", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "ArxivDaily-Haolin", "body_preview": "**Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Unified\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[The Prism Hypothesis: Harmonizing Semantic and Pixel Representations via Unified Autoencoding](https://arxiv.org/abs/2512.19693v1)** | 2025-12-22 | <details><summary>Code ...</summary><p>Code link: https://github.com/WeichenFan/UAE</p></details> |\n| **[Visual-Aware CoT: Achieving High-Fidelity", "created": "2025-12-23T03:27:20Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 23, 2025 **Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Unified\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |"}


identifier: gh_issue_3755840202
source: github_issue
status: new
created_at: 2025-12-23 03:44:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3755840202", "title": "Latest 15 Papers - December 23, 2025", "url": "https://github.com/somewordstoolate/DailyArXiv/issues/156", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "DailyArXiv", "body_preview": "**Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## LLM Agents\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[Toward Training Superintelligent Software Agents through Self-Play SWE-RL](https://arxiv.org/abs/2512.18552v1)** | 2025-12-21 |  |\n| **[SWE-Synth: Synthesizing Verifiable Bug-Fix Data to Enable Large Language Models in Resolving Real-World Bugs](https://arxiv.org/abs/2504.14757v2)** | 2025-", "created": "2025-12-23T02:56:38Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 23, 2025 **Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## LLM Agents\n| **Title** | **Date** | **Comment** |\n| --- | --- | --"}


identifier: gh_issue_3755908823
source: github_issue
status: new
created_at: 2025-12-23 04:08:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3755908823", "title": "Unbounded retry loop on Flickr API (HTTP 429) causes excessive outbound requests and massive syslog growth", "url": "https://github.com/varietywalls/variety/issues/812", "user": "etherbeing", "user_url": "https://github.com/etherbeing", "repo": "variety", "body_preview": "## Title\n\nUnbounded retry loop on Flickr API (HTTP 429) causes excessive outbound requests and massive syslog growth\n\n---\n\n## Version of Variety\n\n```\n0.8.13\n```\n\n---\n\n## Describe the bug\n\nVariety repeatedly retries requests to the Flickr API after receiving **HTTP 429 (Too Many Requests)** responses, with no observable backoff, cooldown, or circuit-breaking logic.\n\nOnce the initial failure occurs, the same request is continuously retried in a tight loop. On my system, this behavior has persisted", "created": "2025-12-23T03:37:59Z", "labels": [], "context": "Unbounded retry loop on Flickr API (HTTP 429) causes excessive outbound requests and massive syslog growth ## Title\n\nUnbounded retry loop on Flickr API (HTTP 429) causes excessive outbound requests and massive syslog growth\n\n---\n\n## Version of Variety\n\n```\n0.8.13\n```\n\n---\n\n## Describe the bug\n\nVariety repe"}


identifier: gh_issue_3755941989
source: github_issue
status: new
created_at: 2025-12-23 04:20:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3755941989", "title": "\ud83d\udd12 Security Scan Report - 2025-12-23", "url": "https://github.com/cekwedike/MusicSim/issues/4", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "MusicSim", "body_preview": "## \ud83d\udd12 Security Scan Summary\n\n**Scan Date:** 2025-12-23\n\n### Scan Results:\n- **Dependency Scan:** \u2705 success\n- **Secret Detection:** \u2705 success\n- **Environment Security:** \u2705 success\n- **Code Security:** \u2705 success\n\n\ud83c\udf89 **All security scans passed!** Your codebase looks secure.\n\n### Security Recommendations:\n- Keep dependencies updated regularly\n- Never commit secrets to version control\n- Use environment variables for sensitive configuration\n- Regularly review access logs and user permissions\n- Monitor ", "created": "2025-12-23T04:00:06Z", "labels": ["security", "automated"], "context": "\ud83d\udd12 Security Scan Report - 2025-12-23 ## \ud83d\udd12 Security Scan Summary\n\n**Scan Date:** 2025-12-23\n\n### Scan Results:\n- **Dependency Scan:** \u2705 success\n- **Secret Detection:** \u2705 success\n- **Environment Security:** \u2705 success\n- **Code Security:** \u2705"}


identifier: gh_issue_3755949140
source: github_issue
status: new
created_at: 2025-12-23 04:33:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3755949140", "title": "Security Vulnerabilities (Trivy Scan) - 23-12-25 @ 04:04", "url": "https://github.com/RazorBladeX/SH-GithubRunner/issues/50", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "SH-GithubRunner", "body_preview": "## \u26a0\ufe0f Security Vulnerabilities Detected\n\n**Scan Date:** 23-12-25 @ 04:04\n\n### Summary\n- **Total vulnerabilities found:** 298\n- **Critical:** 4\n- **High:** 49\n\n### Full Report\nThe complete vulnerability report is available as a workflow artifact.\n\n\ud83d\udce5 **[Download Full Report](https://github.com/RazorBladeX/SH-GithubRunner/actions/runs/20450976231/artifacts)**\n\n---\n*This issue is automatically generated by the Trivy security scanner.*\n", "created": "2025-12-23T04:04:50Z", "labels": ["vulnerability", "security", "automated", "security-scan"], "context": "Security Vulnerabilities (Trivy Scan) - 23-12-25 @ 04:04 ## \u26a0\ufe0f Security Vulnerabilities Detected\n\n**Scan Date:** 23-12-25 @ 04:04\n\n### Summary\n- **Total vulnerabilities found:** 298\n- **Critical:** 4\n- **High:** 49\n\n### Full Report\nThe complete vulnerabilit"}


identifier: gh_issue_3755897142
source: github_issue
status: new
created_at: 2025-12-23 04:46:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3755897142", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-23", "url": "https://github.com/MagicTooooools/picker/issues/48", "user": "allinu", "user_url": "https://github.com/allinu", "repo": "picker", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-23\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-22 Review](http://www.sec-wiki.com/?2025-12-22)\n- Private Feed for M09Ic\n  - [ ] [bolucat released 202512221938 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202512221938)\n  - [ ] [Ridter starred pr0v3rbs/CVE-2025-32463_chwoot](https://github.com/pr0v3rbs/CVE-2025-32463_chwoot)\n  - [ ] [WAY29 starred Claudate/project-multilevel-index](https://github.com/Claudate/project-multilevel-index)\n  - [ ] [mgeeky star", "created": "2025-12-23T03:28:51Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-23 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-23\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-22 Review](http://www.sec-wiki.com/?2025-12-22)\n- Private Feed for M09Ic\n  - [ ] [bolucat released 202512221938 at bolucat/Archive](h"}


identifier: gh_issue_3755893422
source: github_issue
status: new
created_at: 2025-12-23 04:46:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3755893422", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-23", "url": "https://github.com/chainreactors/picker/issues/1091", "user": "chainreactorbot", "user_url": "https://github.com/chainreactorbot", "repo": "picker", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-23\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-22 Review](http://www.sec-wiki.com/?2025-12-22)\n- LevelBlue Blog\n  - [ ] [LevelBlue's Epic 2025: A Year of Acquisitions and Filling Our Trophy Case](https://levelblue.com/blogs/levelblue-blog/levelblues-epic-2025-a-year-of-acquisitions-and-filling-our-trophy-case/)\n- Armin Ronacher's Thoughts and Writings\n  - [ ] [A Year Of Vibes](https://lucumr.pocoo.org/2025/12/22/a-year-of-vibes/)\n- \u5b89\u5168\u5ba2-\u6709\u601d\u60f3\u7684\u5b89\u5168\u65b0\u5a92\u4f53\n  - [ ] [\u3010\u539f\u521b\u9996\u53d1\u3011\u9996\u4e2a\u201cAI\u52d2\u7d22\u8f6f\u4ef6\u201d--\u7ebd\u7ea6\u5927", "created": "2025-12-23T03:26:41Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-23 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-23\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-22 Review](http://www.sec-wiki.com/?2025-12-22)\n- LevelBlue Blog\n  - [ ] [LevelBlue's Epic 2025: A Year of Acquisitions and Filling O"}


identifier: gh_issue_3755893372
source: github_issue
status: new
created_at: 2025-12-23 04:46:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3755893372", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-23", "url": "https://github.com/MM0x02/RSS-Push/issues/360", "user": "MM0x02", "user_url": "https://github.com/MM0x02", "repo": "RSS-Push", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-23\uff09\n\n- paper - Last paper\n  - [ ] [\u57fa\u4e8e Transformer \u7684\u591a\u6a21\u6001\u878d\u5408\u7528\u4e8e\u89c6\u89c9\u76d1\u63a7\u4e2d\u53ef\u89e3\u91ca\u7684\u53ef\u7591\u5ea6\u8bc4\u4f30](https://paper.seebug.org/3438/)\n- Private Feed for M09Ic\n  - [ ] [bolucat released 202512221938 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202512221938)\n  - [ ] [Ridter starred pr0v3rbs/CVE-2025-32463_chwoot](https://github.com/pr0v3rbs/CVE-2025-32463_chwoot)\n  - [ ] [WAY29 starred Claudate/project-multilevel-index](https://github.com/Claudate/project-multilevel-index)\n  - [ ] [mge", "created": "2025-12-23T03:26:39Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-23 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-23\uff09\n\n- paper - Last paper\n  - [ ] [\u57fa\u4e8e Transformer \u7684\u591a\u6a21\u6001\u878d\u5408\u7528\u4e8e\u89c6\u89c9\u76d1\u63a7\u4e2d\u53ef\u89e3\u91ca\u7684\u53ef\u7591\u5ea6\u8bc4\u4f30](https://paper.seebug.org/3438/)\n- Private Feed for M09Ic\n  - [ ] [bolucat released 202512221938 at bolucat/Ar"}


identifier: gh_issue_3755892396
source: github_issue
status: new
created_at: 2025-12-23 04:46:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3755892396", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-23", "url": "https://github.com/ruohong2018/ruohong2018.github.io/issues/1047", "user": "ruohong2018", "user_url": "https://github.com/ruohong2018", "repo": "ruohong2018.github.io", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-23\uff09\n\n- Der Flounder\n  - [Using printf to write variable values to JSON strings in Bash scripts](https://derflounder.wordpress.com/2025/12/22/using-printf-to-write-variable-values-to-json-strings-in-bash-scripts/)\n- SecWiki News\n  - [SecWiki News 2025-12-22 Review](http://www.sec-wiki.com/?2025-12-22)\n- paper - Last paper\n  - [\u57fa\u4e8e Transformer \u7684\u591a\u6a21\u6001\u878d\u5408\u7528\u4e8e\u89c6\u89c9\u76d1\u63a7\u4e2d\u53ef\u89e3\u91ca\u7684\u53ef\u7591\u5ea6\u8bc4\u4f30](https://paper.seebug.org/3438/)\n- Recent Commits to cve:main\n  - [Update Mon Dec 22 11:24:51 UTC 2025](https://githu", "created": "2025-12-23T03:26:06Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-23 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-23\uff09\n\n- Der Flounder\n  - [Using printf to write variable values to JSON strings in Bash scripts](https://derflounder.wordpress.com/2025/12/22/using-printf-to-write-variable-values-to-j"}


identifier: gh_issue_3755885907
source: github_issue
status: new
created_at: 2025-12-23 04:46:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3755885907", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-23", "url": "https://github.com/BruceFeIix/picker/issues/2152", "user": "BruceFeIix", "user_url": "https://github.com/BruceFeIix", "repo": "picker", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-23\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-22 Review](http://www.sec-wiki.com/?2025-12-22)\n- Der Flounder\n  - [ ] [Using printf to write variable values to JSON strings in Bash scripts](https://derflounder.wordpress.com/2025/12/22/using-printf-to-write-variable-values-to-json-strings-in-bash-scripts/)\n- Taxodium\n  - [ ] [Album#14 - a kiridiculous distance](https://taxodium.ink/album-14.html)\n- Armin Ronacher's Thoughts and Writings\n  - [ ] [A Year Of Vibes](https://lucumr", "created": "2025-12-23T03:22:03Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-23 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-23\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-22 Review](http://www.sec-wiki.com/?2025-12-22)\n- Der Flounder\n  - [ ] [Using printf to write variable values to JSON strings in Bash"}


identifier: gh_issue_3756010724
source: github_issue
status: new
created_at: 2025-12-23 04:46:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3756010724", "title": "\"RuntimeWarning: invalid value encountered in cast\" when trying to run Qwen-Image-Edit-2509", "url": "https://github.com/patientx/ComfyUI-Zluda/issues/398", "user": "everlastingcardigan", "user_url": "https://github.com/everlastingcardigan", "repo": "ComfyUI-Zluda", "body_preview": "### Custom Node Testing\n\n- [x] I have tried disabling custom nodes and the issue persists (see [how to disable custom nodes](https://docs.comfy.org/troubleshooting/custom-node-issues#step-1%3A-test-with-all-custom-nodes-disabled) if you need help)\n\n### Your question\n\nUsing the default Qwen-Image-Edit-2509 workflow template available in ComfyUI, with the only change being that I'm using the Q5_K_S gguf with the unet loader.\n\n```\nRequested to load WanVAE\nloaded completely; 10109.15 MB usable, 242.", "created": "2025-12-23T04:36:53Z", "labels": [], "context": "\"RuntimeWarning: invalid value encountered in cast\" when trying to run Qwen-Image-Edit-2509 ### Custom Node Testing\n\n- [x] I have tried disabling custom nodes and the issue persists (see [how to disable custom nodes](https://docs.comfy.org/troubleshooting/custom-node-issues#step-1%3A-test-wi"}


identifier: gh_issue_3756136725
source: github_issue
status: new
created_at: 2025-12-23 05:50:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3756136725", "title": "bug: \u5efa\u8bae\u5347\u7ea7 react \u548c next \u7248\u672c", "url": "https://github.com/linux-do/credit/issues/24", "user": "fengzai6", "user_url": "https://github.com/fengzai6", "repo": "credit", "body_preview": "### \u68c0\u67e5\u73b0\u6709\u95ee\u9898\n\n- [x] \u6211\u5df2\u7ecf\u641c\u7d22\u4e86\u73b0\u6709\u95ee\u9898\u548c\u8ba8\u8bba\u3002\n- [x] \u6211\u6b63\u5728\u4f7f\u7528\u6700\u65b0\u7248\u672c\u6216 credit.linux.do \u4e0a\u7684\u6b64\u5e94\u7528\u3002\n\n### \u53d1\u751f\u4e86\u4ec0\u4e48\uff1f\n\n\u53c2\u8003\u6587\u6863\uff1a https://zh-hans.react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components\n\n### \u5982\u4f55\u91cd\u73b0\u6b64 Bug\uff1f\n\n\u65e0\n\n### \u5728\u54ea\u4e9b\u6d4f\u89c8\u5668\u4e2d\u51fa\u73b0\u95ee\u9898\uff1f\n\n_No response_\n\n### \u4efb\u4f55\u5176\u4ed6\u4fe1\u606f\n\n_No response_\n\n### \u786e\u8ba4\n\n- [x] \u6211\u5df2\u9605\u8bfb\u5e76\u9075\u5faa\u4e86 `README.md` \u4e2d\u7684\u6240\u6709\u8bf4\u660e\u3002\n- [x] \u6211\u6b63\u5728\u4f7f\u7528 linux-do/credit \u7684\u6700\u65b0\u7248\u672c\u3002\n- [x] \u6211\u5df2\u63d0\u4f9b\u6211\u80fd\u591f\u63d0\u4f9b\u7684\u5c3d\u53ef\u80fd\u591a\u7684\u76f8\u5173\u65e5\u5fd7\uff0c\u5c4f\u5e55\u622a\u56fe\u7b49\u3002\n- [x] \u6211\u5df2\u8be6\u7ec6\u8bb0\u5f55\u4e86\u7cbe\u786e\u3001\u6309\u987a\u5e8f\u4e14\u65e0\u6b67\u4e49\u7684\u9010\u6b65\u91cd\u73b0\u8bf4\u660e\u3002\u6211\u7684\u6b65\u9aa4\uff1a\n- \u4ece\u6b63\u5728\u6267\u884c\u7684\u64cd\u4f5c\u5f00\u59cb\uff0c\n- \u6307\u5b9a\u8fdb\u5165\u4e86\u4ec0\u4e48\u9875\u9762\uff0c\n- \u5217\u51fa\u8bbf\u95ee\u7684 URL\u3001\u7528\u6237\u8f93\u5165\uff08\u5305\u62ec\u6240\u9700\u7684\u793a\u4f8b\u503c/\u7535\u5b50\u90ae\u4ef6/\u5bc6\u7801\uff09\uff0c\n- \u63cf\u8ff0\u6240\u6709\u5df2\u542f\u7528\u6216\u66f4\u6539\u7684\u9009\u9879\u548c", "created": "2025-12-23T05:46:56Z", "labels": ["bug"], "context": "bug: \u5efa\u8bae\u5347\u7ea7 react \u548c next \u7248\u672c ### \u68c0\u67e5\u73b0\u6709\u95ee\u9898\n\n- [x] \u6211\u5df2\u7ecf\u641c\u7d22\u4e86\u73b0\u6709\u95ee\u9898\u548c\u8ba8\u8bba\u3002\n- [x] \u6211\u6b63\u5728\u4f7f\u7528\u6700\u65b0\u7248\u672c\u6216 credit.linux.do \u4e0a\u7684\u6b64\u5e94\u7528\u3002\n\n### \u53d1\u751f\u4e86\u4ec0\u4e48\uff1f\n\n\u53c2\u8003\u6587\u6863\uff1a https://zh-hans.react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components\n\n### \u5982\u4f55"}


identifier: gh_issue_3756134133
source: github_issue
status: new
created_at: 2025-12-23 05:50:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3756134133", "title": "feat: Security agents (scanner, auditor, rotator, patcher)", "url": "https://github.com/agenticdevops/aof/issues/65", "user": "gouravjshah", "user_url": "https://github.com/gouravjshah", "repo": "aof", "body_preview": "## Summary\nPre-built security agents.\n\n## Agents\n- security-scanner: CVE triage & prioritization\n- compliance-auditor: Policy enforcement\n- secret-rotator: Automated secret rotation\n- vulnerability-patcher: Auto-patch recommendations\n\n## Tools Used\n- vault, trivy, snyk, kubectl, git", "created": "2025-12-23T05:45:48Z", "labels": ["priority/p0", "type/agent", "domain/security"], "context": "feat: Security agents (scanner, auditor, rotator, patcher) ## Summary\nPre-built security agents.\n\n## Agents\n- security-scanner: CVE triage & prioritization\n- compliance-auditor: Policy enforcement\n- secret-rotator: Automated secret rotation\n- vulnerability-pa"}


identifier: gh_issue_3756144212
source: github_issue
status: new
created_at: 2025-12-23 06:02:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3756144212", "title": "Security Governance Structure \u2013 CloudNest Solutions", "url": "https://github.com/IndrayaniProjects/GRC-Projects/issues/4", "user": "IndrayaniProjects", "user_url": "https://github.com/IndrayaniProjects", "repo": "GRC-Projects", "body_preview": "**Security Governance Structure \u2013 CloudNest Solutions**\n\nObjective:\nTo ensure information security is aligned with business goals, regulatory requirements, and customer trust while managing risk effectively across the organization.\n\n\ud83c\udfdb\ufe0f 1. Board / Executive Oversight\n\ud83e\uddd1\u200d\ud83d\udcbc CEO & Executive Leadership Team\n\u2022\tOwn overall accountability for security and risk.\n\u2022\tApprove security strategy, budget, and major initiatives.\n\u2022\tReview high-risk issues and incidents.\nResponsibilities:\n\u2022\tSet tone at the top.\n\u2022\tE", "created": "2025-12-23T05:49:47Z", "labels": [], "context": "Security Governance Structure \u2013 CloudNest Solutions **Security Governance Structure \u2013 CloudNest Solutions**\n\nObjective:\nTo ensure information security is aligned with business goals, regulatory requirements, and customer trust while managing risk effec"}


identifier: gh_issue_3756192461
source: github_issue
status: new
created_at: 2025-12-23 06:41:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3756192461", "title": "Frequent Tool-Call Failures with Gemini-2.5-pro in OpenAI-Compatible Mode", "url": "https://github.com/router-for-me/CLIProxyAPI/issues/682", "user": "le0l1", "user_url": "https://github.com/le0l1", "repo": "CLIProxyAPI", "body_preview": "**Describe the bug**\n\nWhen invoking Gemini-2.5-pro through the OpenAI-compatible endpoint, function-calling consistently errors out.\nControlled test shows:\n1. Native Gemini protocol \u2192 tool calls succeed;\n2. OpenAI protocol proxy \u2192 parameters are not accurately mapped, causing Gemini-side parsing to fail.\n\nThe latest Gemini release expects the parameter schema under the field name parameters (standard JSON Schema object), not the legacy parametersJsonSchema mentioned in earlier docs.\nIf the OpenA", "created": "2025-12-23T06:08:52Z", "labels": [], "context": "Frequent Tool-Call Failures with Gemini-2.5-pro in OpenAI-Compatible Mode **Describe the bug**\n\nWhen invoking Gemini-2.5-pro through the OpenAI-compatible endpoint, function-calling consistently errors out.\nControlled test shows:\n1. Native Gemini protocol \u2192 tool calls succe"}


identifier: gh_issue_3756031701
source: github_issue
status: new
created_at: 2025-12-23 06:41:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3756031701", "title": "[BUG] [v1.2.2] Status 404 when manually selecting Gemini CLI models (Flash/Pro Preview)", "url": "https://github.com/NoeFabris/opencode-antigravity-auth/issues/44", "user": "kenryu42", "user_url": "https://github.com/kenryu42", "repo": "opencode-antigravity-auth", "body_preview": "**Bug Description**\n---\nHi! Thanks for the quick update to v1.2.2 and the new logic for handling Antigravity/Gemini CLI quotas.\n\nI gave it a try, but I am running into an issue when I attempt to manually select specific Gemini CLI models (e.g., Gemini 3 Flash Preview or Gemini 3 Pro Preview).\n\nWhen I select these models directly, the request fails with a Status 404 error.\n\nI understand that the plugin now switches to the Gemini CLI quota after the Antigravity quota is exhausted. However:\n\n- Is m", "created": "2025-12-23T04:50:37Z", "labels": ["bug"], "context": "[BUG] [v1.2.2] Status 404 when manually selecting Gemini CLI models (Flash/Pro Preview) **Bug Description**\n---\nHi! Thanks for the quick update to v1.2.2 and the new logic for handling Antigravity/Gemini CLI quotas.\n\nI gave it a try, but I am running into an issue when I attempt to manua"}


identifier: gh_issue_3756274072
source: github_issue
status: new
created_at: 2025-12-23 06:41:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3756274072", "title": "Security Health Check - GOOD (85/100) - 2025-12-23", "url": "https://github.com/Sami9889/Sami.dev-website/issues/245", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/23/2025, 6:37:57 AM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 9\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Securi", "created": "2025-12-23T06:38:00Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-23 # Security Health Check Report\n\n**Generated:** 12/23/2025, 6:37:57 AM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Inc"}


identifier: gh_issue_3756253728
source: github_issue
status: new
created_at: 2025-12-23 06:41:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3756253728", "title": "Publish Plan Review", "url": "https://github.com/zfifteen/playground/issues/30", "user": "zfifteen", "user_url": "https://github.com/zfifteen", "repo": "playground", "body_preview": "## Technical Research Analysis: Issue #27 - \"Publish Plan\"\n\n### **Issue Context and Intent**\n\n[Issue #27](https://github.com/zfifteen/playground/issues/27) outlines a comprehensive dissemination strategy for empirical research challenging Cram\u00e9r's 1936 Random Model of prime number distribution. The core claim is that prime log-gaps (\u0394\u2099 = ln(p_{n+1}/p\u2099)) follow **log-normal distributions** rather than the exponential distribution assumed by Cram\u00e9r's model, based on analysis of 78,497 consecutive ", "created": "2025-12-23T06:29:58Z", "labels": [], "context": "Publish Plan Review ## Technical Research Analysis: Issue #27 - \"Publish Plan\"\n\n### **Issue Context and Intent**\n\n[Issue #27](https://github.com/zfifteen/playground/issues/27) outlines a comprehensive dissemination strat"}


identifier: gh_issue_3756224892
source: github_issue
status: new
created_at: 2025-12-23 06:41:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3756224892", "title": "GPT-5 Code Analysis Report - 2025-12-23", "url": "https://github.com/P4X-ng/tinycorelinux-x86_64/issues/19", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "tinycorelinux-x86_64", "body_preview": "# GPT-5 Advanced Code Analysis Report\n\n## GPT-5 Code Analysis\n\n### Repository Statistics:\n- Python files: 0\n- JavaScript files: 0\n- TypeScript files: 0\n- Go files: 0\n- Java files: 0\n\n## GPT-5 Style Advanced Code Analysis\n\n### 1. Code Quality & Architecture\n- **Structure Analysis**: Repository follows TinyCore Linux optimization patterns\n- **Organization**: Scripts organized by function (boot optimization, VM management, unikernel setup)\n- **Modularity**: Configuration files separated from implem", "created": "2025-12-23T06:20:14Z", "labels": ["automated", "copilot", "gpt5", "code-analysis"], "context": "GPT-5 Code Analysis Report - 2025-12-23 # GPT-5 Advanced Code Analysis Report\n\n## GPT-5 Code Analysis\n\n### Repository Statistics:\n- Python files: 0\n- JavaScript files: 0\n- TypeScript files: 0\n- Go files: 0\n- Java files: 0\n\n## GPT-5 Style Ad"}


identifier: gh_issue_3756267082
source: github_issue
status: new
created_at: 2025-12-23 06:54:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3756267082", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/pkayne-outlook/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @pkayne-outlook! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each st", "created": "2025-12-23T06:35:36Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @pkayne-outlook! Welcom"}


identifier: gh_issue_3756216248
source: github_issue
status: new
created_at: 2025-12-23 06:54:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3756216248", "title": "[Feature Request] tycho\u7b7e\u540d", "url": "https://github.com/tlcsdm/eclipse-rcp-example/issues/49", "user": "unknowIfGuestInDream", "user_url": "https://github.com/unknowIfGuestInDream", "repo": "eclipse-rcp-example", "body_preview": "### Describe the feature\n\n```shell\n#!/bin/bash\n\nrun_jarsigner()\n{\n   for jar_file in $(ls -r $1)\n   do\n       echo\n       echo $jar_file\n       echo \"jarsigner -storetype pkcs12 --digestalg SHA1 -sigalg MD5withRSA -keystore ${KEYSTORE} storepass ${STOREPASS} -tsa ${TSA} -verbose ${jar_file} 1\"\n       jarsigner -storetype pkcs12 --digestalg SHA1 -sigalg MD5withRSA -keystore \"${KEYSTORE}\" storepass \"${STOREPASS}\" -tsa \"${TSA}\" -verbose \"${jar_file}\" 1\n   done\n\n}\n\nJARSIGNER=jarsigner\nKEYSTORE=/tmou", "created": "2025-12-23T06:17:22Z", "labels": ["enhancement"], "context": "[Feature Request] tycho\u7b7e\u540d ### Describe the feature\n\n```shell\n#!/bin/bash\n\nrun_jarsigner()\n{\n   for jar_file in $(ls -r $1)\n   do\n       echo\n       echo $jar_file\n       echo \"jarsigner -storetype pkcs12 --digestalg SHA1 -siga"}


identifier: gh_issue_3756324859
source: github_issue
status: new
created_at: 2025-12-23 07:18:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3756324859", "title": "[Security] Remove 'unsafe-inline' from CSP and implement nonce-based script execution", "url": "https://github.com/JovieInc/Jovie/issues/1403", "user": "itstimwhite", "user_url": "https://github.com/itstimwhite", "repo": "Jovie", "body_preview": "## Problem\n\nThe Content Security Policy (CSP) in [next.config.js:18](apps/web/next.config.js#L18) contains `'unsafe-inline'` in the `script-src` directive, creating an **XSS (Cross-Site Scripting) vulnerability** across all pages.\n\n**Current Configuration:**\n\n```javascript\n[\n  \"script-src 'self'\",\n  \"'unsafe-inline'\",  // \u2190 SECURITY VULNERABILITY\n  isDev ? \"'unsafe-eval'\" : null,\n  'https://va.vercel-scripts.com',\n  // ...\n]\n```\n\n## Security Impact\n\n* **Risk Level:** CRITICAL (P0)\n* **Attack Vec", "created": "2025-12-23T06:56:48Z", "labels": ["bug", "area:security"], "context": "[Security] Remove 'unsafe-inline' from CSP and implement nonce-based script execution ## Problem\n\nThe Content Security Policy (CSP) in [next.config.js:18](apps/web/next.config.js#L18) contains `'unsafe-inline'` in the `script-src` directive, creating an **XSS (Cross-Site Scripting) vul"}


identifier: gh_issue_3756230761
source: github_issue
status: new
created_at: 2025-12-23 07:29:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3756230761", "title": "\ud83d\udd10 Configure Organization Security Settings", "url": "https://github.com/QuantumRishi/qr-pipeline/issues/1", "user": "sventkrtl", "user_url": "https://github.com/sventkrtl", "repo": "qr-pipeline", "body_preview": "## Overview\nConfigure organization-level security settings for QuantumRishi according to the security guide.\n\n## Tasks\n\n### Authentication & Access\n- [ ] Enforce 2FA for all organization members\n- [ ] Configure SSO settings (if using external provider)\n- [ ] Audit and remove inactive members\n\n### PAT & Token Management\n- [ ] Create org-level CI/CD PAT with minimal scopes (`repo`, `workflow`, `admin:repo_hook`)\n- [ ] Store PAT in GitHub Secrets / Vault\n- [ ] Set up token rotation reminders (90-da", "created": "2025-12-23T06:21:55Z", "labels": ["security", "infrastructure", "priority:high"], "context": "\ud83d\udd10 Configure Organization Security Settings ## Overview\nConfigure organization-level security settings for QuantumRishi according to the security guide.\n\n## Tasks\n\n### Authentication & Access\n- [ ] Enforce 2FA for all organization members\n- [ ]"}


identifier: gh_issue_3756331011
source: github_issue
status: new
created_at: 2025-12-23 07:41:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3756331011", "title": "[Security] Implement CSRF token protection for state-changing API routes", "url": "https://github.com/JovieInc/Jovie/issues/1405", "user": "itstimwhite", "user_url": "https://github.com/itstimwhite", "repo": "Jovie", "body_preview": "## Problem\n\nNo CSRF (Cross-Site Request Forgery) protection found in API routes. State-changing operations (POST, PUT, DELETE) are vulnerable to CSRF attacks where malicious sites can trick authenticated users into performing unwanted actions.\n\n**Verification:**\n\n* Grepped codebase for `csrf`, `xsrf`, `token` - no CSRF implementation found\n* Reviewed API routes in `apps/web/app/api/` - no token validation middleware\n* Current reliance on SameSite cookies provides **partial protection only** (not", "created": "2025-12-23T06:59:01Z", "labels": ["feature", "area:security", "area:auth"], "context": "[Security] Implement CSRF token protection for state-changing API routes ## Problem\n\nNo CSRF (Cross-Site Request Forgery) protection found in API routes. State-changing operations (POST, PUT, DELETE) are vulnerable to CSRF attacks where malicious sites can trick authentica"}


identifier: gh_issue_3756428035
source: github_issue
status: new
created_at: 2025-12-23 07:53:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3756428035", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/camiloss/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @camiloss! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019", "created": "2025-12-23T07:36:39Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @camiloss! Welcome to y"}


identifier: gh_issue_3756456982
source: github_issue
status: new
created_at: 2025-12-23 08:05:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3756456982", "title": "campcodes  Complete Online Beauty Parlor Management System Project V1.0 /admin/search-invoices.php cross site scripting", "url": "https://github.com/BUPT2025201/CVE/issues/1", "user": "zzb1388", "user_url": "https://github.com/zzb1388", "repo": "CVE", "body_preview": "# campcodes  Complete Online Beauty Parlor Management System Project V1.0 /admin/search-invoices.php cross site scripting\n\n# Email OF AFFECTED PRODUCT(S)\n\n- # Complete Online Beauty Parlor Management System\n\n## Vendor Homepage\n\n- campcodes\n\n## submitter\n\n-  Vulnerable File\n\n-  BUPT_2025201\n\n## VERSION(S)\n\n- V1.0\n\n## Software Link\n\nhttps://www.campcodes.com/downloads/complete-online-beauty-parlor-management-system-using-php-mysql-source-code/\n\n## Vulnerability Type\n\n- XSS\n\n## Root Cause\n\n- An XSS", "created": "2025-12-23T07:49:18Z", "labels": [], "context": "campcodes  Complete Online Beauty Parlor Management System Project V1.0 /admin/search-invoices.php cross site scripting # campcodes  Complete Online Beauty Parlor Management System Project V1.0 /admin/search-invoices.php cross site scripting\n\n# Email OF AFFECTED PRODUCT(S)\n\n- # Complete Online Beauty Parlor Management "}


identifier: gh_issue_3756435634
source: github_issue
status: new
created_at: 2025-12-23 08:05:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3756435634", "title": "[CRITICAL] Security Vulnerability in xmldom", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/906", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-39353\n\n**Description:**\nxmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. xmldom parses XML that is not well-formed because it contains multiple top level elements, and adds all root nodes to the `childNodes` collection of the `Document`, without reporting any error or throwing. This bre", "created": "2025-12-23T07:39:45Z", "labels": [], "context": "[CRITICAL] Security Vulnerability in xmldom ## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-39353\n\n**Description:**\nxmldom is a pure JavaScr"}


identifier: gh_issue_3756435523
source: github_issue
status: new
created_at: 2025-12-23 08:05:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3756435523", "title": "[CRITICAL] Security Vulnerability in xmldom", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/905", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-37616\n\n**Description:**\nA prototype pollution vulnerability exists in the function copy in dom.js in the xmldom (published as @xmldom/xmldom) package before 0.8.3 for Node.js via the p variable. NOTE: the vendor states \"we are in the process of marking this report as invalid\"; however, some third parties takes the position that \"A prototype injec", "created": "2025-12-23T07:39:42Z", "labels": [], "context": "[CRITICAL] Security Vulnerability in xmldom ## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-37616\n\n**Description:**\nA prototype pollution vu"}


identifier: gh_issue_3756435416
source: github_issue
status: new
created_at: 2025-12-23 08:05:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3756435416", "title": "[MEDIUM] Security Vulnerability in xmldom", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/904", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-32796\n\n**Description:**\nxmldom is an open source pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.6.0 and older do not correctly escape special characters when serializing elements removed from their ancestor. This may lead to unexpected syntactic changes during XML processing in some d", "created": "2025-12-23T07:39:39Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in xmldom ## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-32796\n\n**Description:**\nxmldom is an open source p"}


identifier: gh_issue_3756435318
source: github_issue
status: new
created_at: 2025-12-23 08:05:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3756435318", "title": "[LOW] Security Vulnerability in node-fetch", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/903", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process would end without failure. For most people, this fix will have a little or no impact. However, if you are re", "created": "2025-12-23T07:39:36Z", "labels": [], "context": "[LOW] Security Vulnerability in node-fetch ## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before version"}


identifier: gh_issue_3756443768
source: github_issue
status: new
created_at: 2025-12-23 08:05:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3756443768", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/TobiasJakubus/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @TobiasJakubus! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each ste", "created": "2025-12-23T07:43:30Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @TobiasJakubus! Welcome"}


identifier: gh_issue_3756493906
source: github_issue
status: new
created_at: 2025-12-23 08:17:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3756493906", "title": "release latest version of n8n (2.1.2 (2025-12-22))", "url": "https://github.com/MrOplus/n8n/issues/6", "user": "rezacloner1372", "user_url": "https://github.com/rezacloner1372", "repo": "n8n", "body_preview": "Hi. would you please release the latest version of n8n([2.1.2](https://github.com/n8n-io/n8n/compare/n8n@2.1.1...n8n@2.1.2) (2025-12-22)) because of critical CVSS?\n\nA critical vulnerability has once again been published for n8n (this time with a higher CVSS score of 9.9!), which can allow hackers to perform remote code execution (CVE-2025-68613)", "created": "2025-12-23T08:05:40Z", "labels": [], "context": "release latest version of n8n (2.1.2 (2025-12-22)) Hi. would you please release the latest version of n8n([2.1.2](https://github.com/n8n-io/n8n/compare/n8n@2.1.1...n8n@2.1.2) (2025-12-22)) because of critical CVSS?\n\nA critical vulnerability has once a"}


identifier: gh_issue_3756444640
source: github_issue
status: new
created_at: 2025-12-23 08:17:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3756444640", "title": "jest-config-ibm-cloud-cognitive-1.40.0-rc.1.tgz: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/carbon-design-system/ibm-products/issues/8759", "user": "ibm-mend-app[bot]", "user_url": "https://github.com/apps/ibm-mend-app", "repo": "ibm-products", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jest-config-ibm-cloud-cognitive-1.40.0-rc.1.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/carbon-design-system/ibm-products/commit/13ed8cb47098e1563a6cfa22b522de5f2050e376\">13ed8cb47098e1563a6cfa22b522de5f2050e37", "created": "2025-12-23T07:43:54Z", "labels": ["type: a11y \u267f", "Mend: dependency security vulnerability"], "context": "jest-config-ibm-cloud-cognitive-1.40.0-rc.1.tgz: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jest-config-ibm-cloud-cognitive-1.40.0-rc.1.tgz"}


identifier: gh_issue_3756546167
source: github_issue
status: new
created_at: 2025-12-23 08:29:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3756546167", "title": "[HackerNews] Critical n8n Flaw (CVSS 9.9) Enables Arbitrary Code Execution Across Thousands of Instances", "url": "https://github.com/SecOpsNews/news/issues/61345", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "news", "body_preview": "\n\nA critical security vulnerability has been disclosed in the n8n workflow automation platform that, if successfully exploited, could result in arbitrary code execution under certain circumstances.\nThe vulnerability, tracked as CVE-2025-68613, carries a CVSS score of 9.9 out of a maximum of 10.0. The package has about 57,000 weekly downloads, according to statistics on npm.\n\"Under certain\n\n\n\n<https://thehackernews.com/2025/12/critical-n8n-flaw-cvss-99-enables.html>\n\n", "created": "2025-12-23T08:27:13Z", "labels": ["HackerNews"], "context": "[HackerNews] Critical n8n Flaw (CVSS 9.9) Enables Arbitrary Code Execution Across Thousands of Instances \n\nA critical security vulnerability has been disclosed in the n8n workflow automation platform that, if successfully exploited, could result in arbitrary code execution under certain circumstances.\nTh"}


identifier: gh_issue_3756507735
source: github_issue
status: new
created_at: 2025-12-23 08:41:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3756507735", "title": "[security-fix] Security Fix: Add explicit permissions to license-check workflow (Alert #74)", "url": "https://github.com/githubnext/gh-aw/issues/7360", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "gh-aw", "body_preview": "## Security Fix: Missing Workflow Permissions\n\n**Alert Number**: #74  \n**Severity**: Medium (Warning)  \n**Rule**: actions/missing-workflow-permissions  \n**Location**: .github/workflows/license-check.yml\n\n## Vulnerability Description\n\nCodeQL detected that the `license-check.yml` workflow does not contain an explicit `permissions` block. Without explicit permissions, workflows inherit repository or organization default permissions, which may be overly permissive (read-write access) and violate the", "created": "2025-12-23T08:11:52Z", "labels": ["security", "automated-fix"], "context": "[security-fix] Security Fix: Add explicit permissions to license-check workflow (Alert #74) ## Security Fix: Missing Workflow Permissions\n\n**Alert Number**: #74  \n**Severity**: Medium (Warning)  \n**Rule**: actions/missing-workflow-permissions  \n**Location**: .github/workflows/license-check.y"}


identifier: gh_issue_3756623087
source: github_issue
status: new
created_at: 2025-12-23 09:05:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3756623087", "title": "Daily Content Summary 2025-12-23", "url": "https://github.com/jhengy/content-aggregator/issues/334", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "content-aggregator", "body_preview": "# \ud83d\udcf0 Daily Content Summary - 2025-12-23\n### Executive Summary\n\nFlock's AI-enabled Condor surveillance cameras were found to have their livestreams and administrator control panels exposed to the open internet, allowing unauthorized access to real-time footage and settings. These PTZ cameras, designed to track people, were observed zooming in on individuals in public spaces, including children on playgrounds, raising significant privacy concerns. The vulnerability was discovered by YouTuber Benn J", "created": "2025-12-23T08:56:24Z", "labels": ["automated"], "context": "Daily Content Summary 2025-12-23 # \ud83d\udcf0 Daily Content Summary - 2025-12-23\n### Executive Summary\n\nFlock's AI-enabled Condor surveillance cameras were found to have their livestreams and administrator control panels exposed to the open i"}


identifier: gh_issue_3756685944
source: github_issue
status: new
created_at: 2025-12-23 09:30:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3756685944", "title": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected", "url": "https://github.com/truckercore/truckercore1/issues/158", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "truckercore1", "body_preview": "# Security Audit Report - 2025-12-23\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/util vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-9j5q-479x-43g2\nfix available via `npm audit fix --force`\nWill install @stryker-mutator/vitest-runner@8.7.1, which is outside the stated dependency range\nnode_modules/@stryker-mutator/util\n  @stryker-mutator/core  <=8.7.0\n  D", "created": "2025-12-23T09:17:42Z", "labels": ["security", "dependencies", "automated"], "context": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected # Security Audit Report - 2025-12-23\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/"}


identifier: gh_issue_3756668101
source: github_issue
status: new
created_at: 2025-12-23 09:30:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3756668101", "title": "arXiv NEWS (2025-12-23)", "url": "https://github.com/agb94/arxiv-rss-newsletter/issues/198", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "arxiv-rss-newsletter", "body_preview": "# cs.SE updates on arXiv.org, Tue, 23 Dec 2025 05:00:04 +0000\n\n## [PEAK: A Performance Engineering AI-Assistant for GPU Kernels Powered by Natural Language Transformations](https://arxiv.org/abs/2512.19018) [[pdf](https://arxiv.org/pdf/2512.19018.pdf)]\n\nAuthors: Muhammad Usman Tariq, Abhinav Jangda, Angelica Moreira, Madan Musuvathi, Tyler Sorensen\n\nTags: `LLM`, `FL`\n\n Advancements in large language models (**LLM**s) are showing promising impact in software development and programming assistance", "created": "2025-12-23T09:12:04Z", "labels": ["news"], "context": "arXiv NEWS (2025-12-23) # cs.SE updates on arXiv.org, Tue, 23 Dec 2025 05:00:04 +0000\n\n## [PEAK: A Performance Engineering AI-Assistant for GPU Kernels Powered by Natural Language Transformations](https://arxiv.org/abs/2512."}


identifier: gh_issue_3756649206
source: github_issue
status: new
created_at: 2025-12-23 09:30:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3756649206", "title": "[team-status] Daily Team Status - December 23, 2025 \ud83c\udf1f", "url": "https://github.com/githubnext/gh-aw/issues/7362", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "gh-aw", "body_preview": "## \ud83c\udf1f Recent Repository Highlights\n\nThe team shipped **v0.33.12** just hours ago (December 22), bringing significant improvements:\n- **Standalone MCP Gateway CLI** (`awmg`) for simplified local integration\n- Flexible MCP configuration with custom command/container execution\n- Security hardening (fixed CodeQL Alert #71 - clear-text logging vulnerability)\n- Enhanced documentation with complete `mcp-server` command reference\n\n**Latest merges** show active development on:\n- Improved schedule syntax w", "created": "2025-12-23T09:05:40Z", "labels": ["ai-generated", "team-status"], "context": "[team-status] Daily Team Status - December 23, 2025 \ud83c\udf1f ## \ud83c\udf1f Recent Repository Highlights\n\nThe team shipped **v0.33.12** just hours ago (December 22), bringing significant improvements:\n- **Standalone MCP Gateway CLI** (`awmg`) for simplified local integra"}


identifier: gh_issue_3756670314
source: github_issue
status: new
created_at: 2025-12-23 09:42:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3756670314", "title": "Rewrite and Update README.md for Clarity, Onboarding, and Maintenance", "url": "https://github.com/pieterbergwerff/boilerplate-turborepo-electron-next/issues/1", "user": "pieterbergwerff", "user_url": "https://github.com/pieterbergwerff", "repo": "boilerplate-turborepo-electron-next", "body_preview": "Our README.md is outdated/incomplete. We need a concise, accurate, and task-oriented README that enables new users and contributors to install, run, test, and deploy the project quickly, and understand the architecture at a glance.\n\nGoals\n\t\u2022\tProvide a frictionless Quick Start and Local Development guide.\n\t\u2022\tDocument configuration, env vars, scripts/commands, and dependency requirements.\n\t\u2022\tOutline testing, build, and deployment steps.\n\t\u2022\tAdd architecture overview and repo structure.\n\t\u2022\tLink to C", "created": "2025-12-23T09:12:49Z", "labels": ["documentation", "enhancement"], "context": "Rewrite and Update README.md for Clarity, Onboarding, and Maintenance Our README.md is outdated/incomplete. We need a concise, accurate, and task-oriented README that enables new users and contributors to install, run, test, and deploy the project quickly, and understan"}


identifier: gh_issue_3756749522
source: github_issue
status: new
created_at: 2025-12-23 09:42:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3756749522", "title": "Code Analyzer & Reviewer (Graphite-style)", "url": "https://github.com/Nadav-Zilberberg/jansson-original/issues/1", "user": "itayg2341", "user_url": "https://github.com/itayg2341", "repo": "jansson-original", "body_preview": "Role\nYou are an expert Code Analyzer and Reviewer. Your task is to analyze this entire software repository end to end and produce a Graphite-like engineering report that explains what the system does, how it is structured, where risks exist, and how it can be improved.\nYou must be systematic, evidence-based, and explicit about uncertainty.\nYou must not invent code, files, or behavior. If information is missing, clearly state what is missing and what assumptions (if any) are made.\n\n\u2013\u2013\u2013\u2013\u2013\u2013\u2013\u2013\u2013\u2013\u2013\u2013\u2013\u2013", "created": "2025-12-23T09:36:12Z", "labels": [], "context": "Code Analyzer & Reviewer (Graphite-style) Role\nYou are an expert Code Analyzer and Reviewer. Your task is to analyze this entire software repository end to end and produce a Graphite-like engineering report that explains what the system does,"}


identifier: gh_issue_3756735354
source: github_issue
status: new
created_at: 2025-12-23 09:42:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3756735354", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/venkatguttena/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @venkatguttena! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each ste", "created": "2025-12-23T09:31:22Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @venkatguttena! Welcome"}


identifier: gh_issue_3756640008
source: github_issue
status: new
created_at: 2025-12-23 09:42:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3756640008", "title": "Feature: Enable OpenSSF Scorecard for continuous supply-chain security monitoring", "url": "https://github.com/iximiuz/docker-to-linux/issues/35", "user": "amej", "user_url": "https://github.com/amej", "repo": "docker-to-linux", "body_preview": "# Feature Request\n\n`d2vm` is an infrastructure-focused open source project, and downstream users increasingly rely on standardized security signals to evaluate supply-chain risk. OpenSSF Scorecard is widely adopted for this purpose across the cloud-native ecosystem.\n\nA recent manual OpenSSF Scorecard run against this repository reports an aggregate score of **4.7 / 10**, indicating that while some security practices may already be in place, several important signals are either missing or not con", "created": "2025-12-23T09:02:11Z", "labels": [], "context": "Feature: Enable OpenSSF Scorecard for continuous supply-chain security monitoring # Feature Request\n\n`d2vm` is an infrastructure-focused open source project, and downstream users increasingly rely on standardized security signals to evaluate supply-chain risk. OpenSSF Scorecard is "}


identifier: gh_issue_3756515583
source: github_issue
status: new
created_at: 2025-12-23 09:42:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3756515583", "title": "[Feature Request] Enable OpenSSF Scorecard for continuous supply-chain security monitoring", "url": "https://github.com/firecracker-microvm/firecracker/issues/5597", "user": "amej", "user_url": "https://github.com/amej", "repo": "firecracker", "body_preview": "# Feature Request\n\nFirecracker is a security-critical, widely adopted infrastructure component used in production cloud environments. Downstream users, distributors, and security teams increasingly rely on OpenSSF Scorecard signals to evaluate supply-chain risk and security maturity of open source dependencies.\n\nWhile Firecracker already demonstrates strong security practices, the absence of an enabled and published OpenSSF Scorecard workflow means these signals are not continuously measured or ", "created": "2025-12-23T08:15:06Z", "labels": [], "context": "[Feature Request] Enable OpenSSF Scorecard for continuous supply-chain security monitoring # Feature Request\n\nFirecracker is a security-critical, widely adopted infrastructure component used in production cloud environments. Downstream users, distributors, and security teams increasingly re"}


identifier: gh_issue_3756650369
source: github_issue
status: new
created_at: 2025-12-23 10:08:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3756650369", "title": "perf(gh-skills): Rewrite simple GitHub skills to use gh CLI directly", "url": "https://github.com/rjmurillo/ai-agents/issues/286", "user": "rjmurillo-bot", "user_url": "https://github.com/rjmurillo-bot", "repo": "ai-agents", "body_preview": "## Summary\n\nEliminate PowerShell spawn overhead for simple GitHub operations by calling `gh` CLI directly instead of wrapping it in PowerShell scripts.\n\n## Context\n\nPowerShell process spawn takes 183-416ms even with `-NoProfile`. For simple operations that just call `gh` CLI internally, this overhead is unnecessary.\n\n## Scope\n\nConvert these high-frequency skills to direct `gh` CLI calls:\n\n- [ ] `Get-PRContext.ps1` \u2192 `gh pr view --json`\n- [ ] `Set-IssueLabels.ps1` \u2192 `gh issue edit --add-label`\n- ", "created": "2025-12-23T09:06:06Z", "labels": ["documentation", "enhancement", "area-workflows", "area-prompts", "area-infrastructure", "priority:P1", "priority:P2", "area-skills", "technical-debt"], "context": "perf(gh-skills): Rewrite simple GitHub skills to use gh CLI directly ## Summary\n\nEliminate PowerShell spawn overhead for simple GitHub operations by calling `gh` CLI directly instead of wrapping it in PowerShell scripts.\n\n## Context\n\nPowerShell process spawn takes 183-"}


identifier: gh_issue_3756765347
source: github_issue
status: new
created_at: 2025-12-23 10:08:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3756765347", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/balbrench/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @balbrench! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I", "created": "2025-12-23T09:42:31Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @balbrench! Welcome to "}


identifier: gh_issue_3756511869
source: github_issue
status: new
created_at: 2025-12-23 10:21:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3756511869", "title": "Agentic AI Market Size, Emerging Trends, Growth Prospects, 2034", "url": "https://github.com/Sakshist26/cgind/issues/426", "user": "Sakshist26", "user_url": "https://github.com/Sakshist26", "repo": "cgind", "body_preview": "According to Fortune Business Insights, The global [agentic AI market 2026](https://www.fortunebusinessinsights.com/agentic-ai-market-114233) was valued at USD 5.99 billion in 2024. The market is projected to grow from USD 7.29 billion in 2025 to USD 88.35 billion by 2032, exhibiting a CAGR of 42.80% during the forecast period. North America dominated the agentic AI market with a market share of 34.89% in 2024.\n\nThe report offers an in-depth analysis of the competitive landscape, market segmenta", "created": "2025-12-23T08:13:24Z", "labels": [], "context": "Agentic AI Market Size, Emerging Trends, Growth Prospects, 2034 According to Fortune Business Insights, The global [agentic AI market 2026](https://www.fortunebusinessinsights.com/agentic-ai-market-114233) was valued at USD 5.99 billion in 2024. The market is proj"}


identifier: gh_issue_3756912888
source: github_issue
status: new
created_at: 2025-12-23 11:09:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3756912888", "title": "Code Analyzer & Reviewer (Graphite-style)", "url": "https://github.com/itayg2341/jansson/issues/1", "user": "itayg2341", "user_url": "https://github.com/itayg2341", "repo": "jansson", "body_preview": "Role\nYou are an expert Code Analyzer and Reviewer. Your task is to analyze this entire software repository end to end and produce a Graphite-like engineering report that explains what the system does, how it is structured, where risks exist, and how it can be improved.\nYou must be systematic, evidence-based, and explicit about uncertainty.\nYou must not invent code, files, or behavior. If information is missing, clearly state what is missing and what assumptions (if any) are made.\n\n\u2013\u2013\u2013\u2013\u2013\u2013\u2013\u2013\u2013\u2013\u2013\u2013\u2013\u2013", "created": "2025-12-23T10:37:03Z", "labels": [], "context": "Code Analyzer & Reviewer (Graphite-style) Role\nYou are an expert Code Analyzer and Reviewer. Your task is to analyze this entire software repository end to end and produce a Graphite-like engineering report that explains what the system does,"}


identifier: gh_issue_3756980683
source: github_issue
status: new
created_at: 2025-12-23 11:22:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3756980683", "title": "[MEDIUM] Security Vulnerability in connect", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/963", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2017-11288\n\n**Description:**\nAn issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information disclosure.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2017-11288\\\"],\\\"published\\\":\\\"2017-12-09T06:29:00.383\\\",\\\"lastModified\\\":\\\"2025-04-20T01:37:25.860\\", "created": "2025-12-23T11:02:48Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in connect ## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2017-11288\n\n**Description:**\nAn issue was discovered i"}


identifier: gh_issue_3756980545
source: github_issue
status: new
created_at: 2025-12-23 11:22:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3756980545", "title": "[MEDIUM] Security Vulnerability in connect", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/962", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-36061\n\n**Description:**\nAdobe Connect version 11.2.2 (and earlier) is affected by a secure design principles violation vulnerability via the 'pbMode' parameter. An unauthenticated attacker could leverage this vulnerability to edit or delete recordings on the Connect environment. Exploitation of this issue requires user interaction in that a victim", "created": "2025-12-23T11:02:45Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in connect ## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-36061\n\n**Description:**\nAdobe Connect version 11."}


identifier: gh_issue_3756980401
source: github_issue
status: new
created_at: 2025-12-23 11:22:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3756980401", "title": "[CRITICAL] Security Vulnerability in connect", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/961", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2023-4661\n\n**Description:**\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saphira Saphira Connect allows SQL Injection.This issue affects Saphira Connect: before 9.\n\n\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2023-4661\\\"],\\\"published\\\":\\\"2023-09-15T09:15:07.907\\\",\\\"lastModified", "created": "2025-12-23T11:02:42Z", "labels": [], "context": "[CRITICAL] Security Vulnerability in connect ## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2023-4661\n\n**Description:**\nImproper Neutralization "}


identifier: gh_issue_3756980263
source: github_issue
status: new
created_at: 2025-12-23 11:22:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3756980263", "title": "[MEDIUM] Security Vulnerability in connect", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/960", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2018-4921\n\n**Description:**\nAdobe Connect versions 9.7 and earlier have an exploitable unrestricted SWF file upload vulnerability. Successful exploitation could lead to information disclosure.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2018-4921\\\"],\\\"published\\\":\\\"2018-05-19T17:29:00.727\\\",\\\"lastModified\\\":\\\"2024-11-21T04:07:43.000\\\",\\", "created": "2025-12-23T11:02:39Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in connect ## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2018-4921\n\n**Description:**\nAdobe Connect versions 9.7"}


identifier: gh_issue_3756980138
source: github_issue
status: new
created_at: 2025-12-23 11:22:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3756980138", "title": "[CRITICAL] Security Vulnerability in connect", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/959", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-43567\n\n**Description:**\nAdobe Connect versions 12.8 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field. ", "created": "2025-12-23T11:02:36Z", "labels": [], "context": "[CRITICAL] Security Vulnerability in connect ## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-43567\n\n**Description:**\nAdobe Connect versions "}


identifier: gh_issue_3757034716
source: github_issue
status: new
created_at: 2025-12-23 11:34:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3757034716", "title": "\u90e8\u7f72 cloudflare \u51fa\u73b0 \"Missing entry-point\"\uff0c\u8bf7\u95ee\u5982\u4f55\u89e3\u51b3\uff1f", "url": "https://github.com/cf-pages/Telegraph-Image/issues/267", "user": "Asd777888", "user_url": "https://github.com/Asd777888", "repo": "Telegraph-Image", "body_preview": "2025-12-23T10:57:00.202Z\tInitializing build environment...\n2025-12-23T10:57:00.202Z\tInitializing build environment...\n2025-12-23T10:57:03.326Z\tSuccess: Finished initializing build environment\n2025-12-23T10:57:03.691Z\tCloning repository...\n2025-12-23T10:57:05.515Z\tRestoring from dependencies cache\n2025-12-23T10:57:05.517Z\tRestoring from build output cache\n2025-12-23T10:57:05.519Z\tDetected the following tools from environment: npm@10.9.2, nodejs@22.16.0\n2025-12-23T10:57:05.761Z\tInstalling project ", "created": "2025-12-23T11:18:11Z", "labels": [], "context": "\u90e8\u7f72 cloudflare \u51fa\u73b0 \"Missing entry-point\"\uff0c\u8bf7\u95ee\u5982\u4f55\u89e3\u51b3\uff1f 2025-12-23T10:57:00.202Z\tInitializing build environment...\n2025-12-23T10:57:00.202Z\tInitializing build environment...\n2025-12-23T10:57:03.326Z\tSuccess: Finished initializing build environment\n2025-12-"}


identifier: gh_issue_3757140578
source: github_issue
status: new
created_at: 2025-12-23 11:59:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3757140578", "title": "Fix Rejected PR #39: Add Playwright tests and fix Appwrite endpoint consistency", "url": "https://github.com/landsalelk/landsalelk/issues/119", "user": "landsalelk", "user_url": "https://github.com/landsalelk", "repo": "landsalelk", "body_preview": "@jules\n\nThe PR #39 was rejected by Manager AI.\n\nReason:\nHello. As the **Principal Code Auditor**, I have reviewed the provided changes.\n\nThis PR primarily concerns dependency management (`package-lock.json`) and infrastructure configuration (Playwright). While the diff does not show the actual application source code where logic errors (like missing `try/catch` blocks or inefficient queries) would reside, the changes introduce new dependencies and scripts that must meet security and quality stan", "created": "2025-12-23T11:58:31Z", "labels": ["jules", "jules-ai"], "context": "Fix Rejected PR #39: Add Playwright tests and fix Appwrite endpoint consistency @jules\n\nThe PR #39 was rejected by Manager AI.\n\nReason:\nHello. As the **Principal Code Auditor**, I have reviewed the provided changes.\n\nThis PR primarily concerns dependency management (`package-lock"}


identifier: gh_issue_3757109184
source: github_issue
status: new
created_at: 2025-12-23 11:59:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3757109184", "title": "Task: Urgent Launch Task: Verify and Fix all UX/UI Confu...", "url": "https://github.com/landsalelk/landsalelk/issues/111", "user": "landsalelk", "user_url": "https://github.com/landsalelk", "repo": "landsalelk", "body_preview": "@jules\n\nAs the Principal Software Architect for **LandSale.lk**, I have analyzed the request. \"UX/UI Confusion Points\" are often symptoms of architectural disconnects between the frontend state and the backend data structure, or poorly handled asynchronous flows (loading/error states).\n\nTo ensure **Zero-Defect Quality**, I will task **Jules** to implement a comprehensive **\"Clarity & Reliability Audit\"**. This involves hardening the data-fetching layer, standardizing error boundaries, and enforc", "created": "2025-12-23T11:45:53Z", "labels": ["jules", "jules-ai"], "context": "Task: Urgent Launch Task: Verify and Fix all UX/UI Confu... @jules\n\nAs the Principal Software Architect for **LandSale.lk**, I have analyzed the request. \"UX/UI Confusion Points\" are often symptoms of architectural disconnects between the frontend state and th"}


identifier: gh_issue_3757140471
source: github_issue
status: new
created_at: 2025-12-23 11:59:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3757140471", "title": "Fix Rejected PR #31: Fix Facebook/Google login dynamic imports", "url": "https://github.com/landsalelk/landsalelk/issues/118", "user": "landsalelk", "user_url": "https://github.com/landsalelk", "repo": "landsalelk", "body_preview": "@jules\n\nThe PR #31 was rejected by Manager AI.\n\nReason:\n### 1. Quality Score: 0/100\n\n### 2. Critical Issues\n*   **\u274c Irrelevant Files:** This PR includes changes to `package-lock.json` (adding dependencies like `sharp` and `@emnapi`).\n*   **\u274c Missing Source Code:** The provided diff contains *only* dependency lockfile changes. It does not contain the actual code changes for \"Facebook/Google login dynamic imports\".\n*   **\u274c Security Vulnerability (New Dependencies):** The diff introduces a new depe", "created": "2025-12-23T11:58:28Z", "labels": ["jules", "jules-ai"], "context": "Fix Rejected PR #31: Fix Facebook/Google login dynamic imports @jules\n\nThe PR #31 was rejected by Manager AI.\n\nReason:\n### 1. Quality Score: 0/100\n\n### 2. Critical Issues\n*   **\u274c Irrelevant Files:** This PR includes changes to `package-lock.json` (adding dependen"}


identifier: gh_issue_3757161939
source: github_issue
status: new
created_at: 2025-12-23 12:10:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3757161939", "title": "Fix Rejected PR #43: Fix authentication state management and secure claim listing action", "url": "https://github.com/landsalelk/landsalelk/issues/163", "user": "landsalelk", "user_url": "https://github.com/landsalelk", "repo": "landsalelk", "body_preview": "@jules\n\nThe PR #43 was rejected by Manager AI.\n\nReason:\n### **Principal Code Auditor Report**\n\n**PR Title:** Fix authentication state management and secure claim listing action\n**Target:** `src/app/actions/owner-verification.js`, `src/app/auth/login/page.js`, `src/app/auth/register/page.js`\n\n---\n\n### **1. Quality Score**\n**80/100**\n\n*   **Critical Issues:** -20 points (4 major violations found)\n*   **Code Quality:** High (Clean, well-structured, improves security)\n*   **Context:** While the code", "created": "2025-12-23T12:07:06Z", "labels": ["jules", "jules-ai"], "context": "Fix Rejected PR #43: Fix authentication state management and secure claim listing action @jules\n\nThe PR #43 was rejected by Manager AI.\n\nReason:\n### **Principal Code Auditor Report**\n\n**PR Title:** Fix authentication state management and secure claim listing action\n**Target:** `src/app/ac"}


identifier: gh_issue_3757152360
source: github_issue
status: new
created_at: 2025-12-23 12:10:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3757152360", "title": "Fix Rejected PR #75: Fix Next.js Build Failure and Monorepo Warnings", "url": "https://github.com/landsalelk/landsalelk/issues/148", "user": "landsalelk", "user_url": "https://github.com/landsalelk", "repo": "landsalelk", "body_preview": "@jules\n\nThe PR #75 was rejected by Manager AI.\n\nReason:\nHello! As the **Principal Code Auditor**, I have completed my review of the provided code diff.\n\nI have **BLOCKED** this PR. While the file `next.config.mjs` is safe to merge, the TypeScript file `src/app/verify-owner/[id]/page.tsx` contains a critical logic vulnerability that violates the **Rejection Criteria** regarding **Inefficient Appwrite queries (missing Indexes)** and **Missing Error Handling**.\n\n### **Quality Score**: 55/100\n\n---\n\n", "created": "2025-12-23T12:03:10Z", "labels": ["jules", "jules-ai"], "context": "Fix Rejected PR #75: Fix Next.js Build Failure and Monorepo Warnings @jules\n\nThe PR #75 was rejected by Manager AI.\n\nReason:\nHello! As the **Principal Code Auditor**, I have completed my review of the provided code diff.\n\nI have **BLOCKED** this PR. While the file `nex"}


identifier: gh_issue_3757152048
source: github_issue
status: new
created_at: 2025-12-23 12:10:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3757152048", "title": "Fix Rejected PR #71: Fix Build Failure by Handling Auth Check Exception", "url": "https://github.com/landsalelk/landsalelk/issues/145", "user": "landsalelk", "user_url": "https://github.com/landsalelk", "repo": "landsalelk", "body_preview": "@jules\n\nThe PR #71 was rejected by Manager AI.\n\nReason:\n### Quality Score: 35/100\n\n**Status:** \ud83d\udd34 **BLOCKED** - The code contains a severe security vulnerability and is not safe to merge.\n\n---\n\n### Critical Issues\n*   **\u274c Hardcoded Secrets / API Keys:** The code exposes your internal machine's absolute file path (`c:\\\\Users\\\\prabh\\\\...`). This is a massive PII leak and reveals your local directory structure.\n*   **\u274c Hardcoded External Endpoint:** The code makes a POST request to a hardcoded local", "created": "2025-12-23T12:03:04Z", "labels": ["jules", "jules-ai"], "context": "Fix Rejected PR #71: Fix Build Failure by Handling Auth Check Exception @jules\n\nThe PR #71 was rejected by Manager AI.\n\nReason:\n### Quality Score: 35/100\n\n**Status:** \ud83d\udd34 **BLOCKED** - The code contains a severe security vulnerability and is not safe to merge.\n\n---\n\n### Cri"}


identifier: gh_issue_3757173988
source: github_issue
status: new
created_at: 2025-12-23 12:23:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3757173988", "title": "Fix Rejected PR #25: Integrate GitHub Issue Logging for Monitoring", "url": "https://github.com/landsalelk/landsalelk/issues/179", "user": "landsalelk", "user_url": "https://github.com/landsalelk", "repo": "landsalelk", "body_preview": "@jules\n\nThe PR #25 was rejected by Manager AI.\n\nReason:\nHere is the code audit for the PR \"Integrate GitHub Issue Logging for Monitoring\".\n\n### **Quality Score**\n**0 / 100**\n\n### **Critical Issues**\n*   \u274c **Missing Dependencies**: The `package.json` for `github-logger` defines an empty `dependencies` object. The code requires `node-fetch` or relies on the global `fetch` (which is available in Node 20, but `npm install` will fail if the package file is invalid or if standard libraries are missing", "created": "2025-12-23T12:11:34Z", "labels": ["jules", "jules-ai"], "context": "Fix Rejected PR #25: Integrate GitHub Issue Logging for Monitoring @jules\n\nThe PR #25 was rejected by Manager AI.\n\nReason:\nHere is the code audit for the PR \"Integrate GitHub Issue Logging for Monitoring\".\n\n### **Quality Score**\n**0 / 100**\n\n### **Critical Issues**\n*"}


identifier: gh_issue_3757161403
source: github_issue
status: new
created_at: 2025-12-23 12:23:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3757161403", "title": "Fix Rejected PR #32: AI Architecture Refactor and Validation", "url": "https://github.com/landsalelk/landsalelk/issues/157", "user": "landsalelk", "user_url": "https://github.com/landsalelk", "repo": "landsalelk", "body_preview": "@jules\n\nThe PR #32 was rejected by Manager AI.\n\nReason:\nAs a Principal Code Auditor, I have reviewed the provided `package-lock.json` diff. This file manages dependency versions and does not contain the application logic (source code) required to check for `any` types, error handling, or `console.log` statements.\n\nHowever, I am blocking this PR immediately based on **Rejection Criteria** regarding **Dependency Management** and **Security Best Practices**.\n\n### Quality Score\n**0 / 100**\n\n### Crit", "created": "2025-12-23T12:06:54Z", "labels": ["jules", "jules-ai"], "context": "Fix Rejected PR #32: AI Architecture Refactor and Validation @jules\n\nThe PR #32 was rejected by Manager AI.\n\nReason:\nAs a Principal Code Auditor, I have reviewed the provided `package-lock.json` diff. This file manages dependency versions and does not contain t"}


identifier: gh_issue_3757152754
source: github_issue
status: new
created_at: 2025-12-23 12:23:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3757152754", "title": "Fix Rejected PR #101: Refactor Appwrite Client to Use Environment Variables", "url": "https://github.com/landsalelk/landsalelk/issues/152", "user": "landsalelk", "user_url": "https://github.com/landsalelk", "repo": "landsalelk", "body_preview": "@jules\n\nThe PR #101 was rejected by Manager AI.\n\nReason:\n### 1. Quality Score\n**30/100**\n\n### 2. Critical Issues\n-   \u274c **Missing Error Handling**: The `incrementViewCount` function in `src/app/actions/analytics.js` is missing a `try/catch` block. While the outer function has one, the `await databases.getDocument` call inside can throw, causing a generic 500 error instead of the intended `{ success: false, error: ... }` return.\n-   \u274c **Lack of Comments/JSDoc**: The new `databases` and `functions`", "created": "2025-12-23T12:03:19Z", "labels": ["jules", "jules-ai"], "context": "Fix Rejected PR #101: Refactor Appwrite Client to Use Environment Variables @jules\n\nThe PR #101 was rejected by Manager AI.\n\nReason:\n### 1. Quality Score\n**30/100**\n\n### 2. Critical Issues\n-   \u274c **Missing Error Handling**: The `incrementViewCount` function in `src/app/actions"}


identifier: gh_issue_3757080281
source: github_issue
status: new
created_at: 2025-12-23 12:36:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3757080281", "title": "Dependency Dashboard", "url": "https://github.com/pproenca/hyh/issues/5", "user": "renovate[bot]", "user_url": "https://github.com/apps/renovate", "repo": "hyh", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/pproenca/hyh).\n\n## Awaiting Schedule\n\nThe following updates are awaiting their schedule. To get an update now, click on a checkbox below.\n\n - [ ] <!-- unschedule-branch=renovate/zizmorcore-zizmor-action-0.x -->Update zizmorcore/zizmor-action action", "created": "2025-12-23T11:35:05Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the M"}


identifier: gh_issue_3757230152
source: github_issue
status: new
created_at: 2025-12-23 12:36:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3757230152", "title": "Fix Rejected PR #45: Fix Appwrite Client Initialization and Build Errors", "url": "https://github.com/landsalelk/landsalelk/issues/250", "user": "landsalelk", "user_url": "https://github.com/landsalelk", "repo": "landsalelk", "body_preview": "@jules\n\nThe PR #45 was rejected by Manager AI.\n\nReason:\n### **Quality Score: 98/100**\n\n---\n\n### **Critical Issues**\n\n*   **\u274c Code Injection Vulnerability (Parameter Pollution):**\n    *   **Location:** `src/components/property/PropertyCard.jsx`\n    *   **Issue:** The `resolveUrl` function directly interpolates the `projectId` from `process.env` into the URL string without validation. If a malicious actor injects a specially crafted value into the environment variable (e.g., `landsalelkproject\"?ma", "created": "2025-12-23T12:31:02Z", "labels": ["jules", "jules-ai"], "context": "Fix Rejected PR #45: Fix Appwrite Client Initialization and Build Errors @jules\n\nThe PR #45 was rejected by Manager AI.\n\nReason:\n### **Quality Score: 98/100**\n\n---\n\n### **Critical Issues**\n\n*   **\u274c Code Injection Vulnerability (Parameter Pollution):**\n    *   **Location:**"}


identifier: gh_issue_3757216541
source: github_issue
status: new
created_at: 2025-12-23 12:36:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3757216541", "title": "Fix Rejected PR #25: Integrate GitHub Issue Logging for Monitoring", "url": "https://github.com/landsalelk/landsalelk/issues/225", "user": "landsalelk", "user_url": "https://github.com/landsalelk", "repo": "landsalelk", "body_preview": "@jules\n\nThe PR #25 was rejected by Manager AI.\n\nReason:\nAs the Principal Code Auditor, I have reviewed the provided PR diff. This code contains critical security vulnerabilities and implementation flaws that require immediate rejection.\n\n### 1. Quality Score\n**15/100**\n\n### 2. Critical Issues\n*   **\u274c CRITICAL SECURITY VULNERABILITY: Exposed GitHub Token in `appwrite.json`**\n    *   The `appwrite.json` configuration sets `\"GITHUB_TOKEN\": \"\"`. While empty, this explicitly defines the variable name", "created": "2025-12-23T12:26:22Z", "labels": ["jules", "jules-ai"], "context": "Fix Rejected PR #25: Integrate GitHub Issue Logging for Monitoring @jules\n\nThe PR #25 was rejected by Manager AI.\n\nReason:\nAs the Principal Code Auditor, I have reviewed the provided PR diff. This code contains critical security vulnerabilities and implementation fla"}


identifier: gh_issue_3757215151
source: github_issue
status: new
created_at: 2025-12-23 12:36:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3757215151", "title": "Fix Rejected PR #46: Fix critical issues in Listing Creation and Owner Verification journeys", "url": "https://github.com/landsalelk/landsalelk/issues/207", "user": "landsalelk", "user_url": "https://github.com/landsalelk", "repo": "landsalelk", "body_preview": "@jules\n\nThe PR #46 was rejected by Manager AI.\n\nReason:\nHello. I am the Principal Code Auditor. I have reviewed the provided code diff.\n\nThis implementation introduces a **critical security vulnerability** and leaves behind **harmful debugging artifacts**. While the intent to secure the `claimListing` function via JWT is correct, the execution is flawed, and the presence of hardcoded local paths and debug logs is strictly forbidden.\n\n### Quality Score: 15/100\n*(The code is currently unsafe for p", "created": "2025-12-23T12:25:43Z", "labels": ["jules", "jules-ai"], "context": "Fix Rejected PR #46: Fix critical issues in Listing Creation and Owner Verification journeys @jules\n\nThe PR #46 was rejected by Manager AI.\n\nReason:\nHello. I am the Principal Code Auditor. I have reviewed the provided code diff.\n\nThis implementation introduces a **critical security vulnerabil"}


identifier: gh_issue_3757215008
source: github_issue
status: new
created_at: 2025-12-23 12:36:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3757215008", "title": "Fix Rejected PR #41: \ud83d\udee1\ufe0f Sentinel: [CRITICAL] Fix authorization bypass in owner verification", "url": "https://github.com/landsalelk/landsalelk/issues/205", "user": "landsalelk", "user_url": "https://github.com/landsalelk", "repo": "landsalelk", "body_preview": "@jules\n\nThe PR #41 was rejected by Manager AI.\n\nReason:\nOf course. As the Principal Code Auditor, I have reviewed the provided code diff. My primary responsibility is to ensure the codebase remains secure, efficient, and maintainable.\n\nThe submitted changes introduce a critical security flaw by directly handling secrets in function arguments and logging sensitive information to the filesystem. This is a catastrophic failure that immediately violates my \"BLOCK IMMEDIATELY\" criteria.\n\nHere is my f", "created": "2025-12-23T12:25:39Z", "labels": ["jules", "jules-ai"], "context": "Fix Rejected PR #41: \ud83d\udee1\ufe0f Sentinel: [CRITICAL] Fix authorization bypass in owner verification @jules\n\nThe PR #41 was rejected by Manager AI.\n\nReason:\nOf course. As the Principal Code Auditor, I have reviewed the provided code diff. My primary responsibility is to ensure the codebase remains se"}


identifier: gh_issue_3757250558
source: github_issue
status: new
created_at: 2025-12-23 12:49:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3757250558", "title": "[#MJI57VIC3848] Scan Report - Host: https://vulnerable.zerothreat.ai", "url": "https://github.com/ShrutiKadam2112/jubilant-adventure/issues/1503", "user": "ShrutiKadam2112", "user_url": "https://github.com/ShrutiKadam2112", "repo": "jubilant-adventure", "body_preview": "\n### Scan Info\n\n| Field              | Value                          |\n|--------------------|--------------------------------|\n| Scan Scope             | Web |\n| Template Name          | N/A |\n| Scan Server            | Northern Virginia |\n| Scan Code              | MJI57VIC3848 |\n| Host                   | https://vulnerable.zerothreat.ai |\n| Scan Initiated         | Tue, 23 Dec 2025 05:29:31 GMT |\n| Time Taken             | 31.65 Min |\n| Frontend               | Angular |\n| Backend           ", "created": "2025-12-23T12:38:47Z", "labels": ["ZeroThreatAI", "scan-report", "ZT-MJI57VIC3848"], "context": "[#MJI57VIC3848] Scan Report - Host: https://vulnerable.zerothreat.ai \n### Scan Info\n\n| Field              | Value                          |\n|--------------------|--------------------------------|\n| Scan Scope             | Web |\n| Template Name          | N/A |\n| Scan"}


identifier: gh_issue_3757231101
source: github_issue
status: new
created_at: 2025-12-23 12:49:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3757231101", "title": "Fix Rejected PR #83: Fix Appwrite CLI Configuration Error", "url": "https://github.com/landsalelk/landsalelk/issues/258", "user": "landsalelk", "user_url": "https://github.com/landsalelk", "repo": "landsalelk", "body_preview": "@jules\n\nThe PR #83 was rejected by Manager AI.\n\nReason:\n### 1. Quality Score\n**0/100**\n\n### 2. Critical Issues\n-   \u274c **Security Violation**: The PR introduces `appwrite-cli` as a development dependency. CLI tools are generally not intended for use within application code and can introduce significant supply chain vulnerabilities and bloat the `node_modules` directory.\n-   \u274c **Inefficient/Unnecessary**: The Appwrite SDK (`appwrite` version `18.1.1`) already provides programmatic access to all App", "created": "2025-12-23T12:31:19Z", "labels": ["jules", "jules-ai"], "context": "Fix Rejected PR #83: Fix Appwrite CLI Configuration Error @jules\n\nThe PR #83 was rejected by Manager AI.\n\nReason:\n### 1. Quality Score\n**0/100**\n\n### 2. Critical Issues\n-   \u274c **Security Violation**: The PR introduces `appwrite-cli` as a development dependenc"}


identifier: gh_issue_3757163449
source: github_issue
status: new
created_at: 2025-12-23 12:49:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3757163449", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/moeenattar/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @moeenattar! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, ", "created": "2025-12-23T12:07:43Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @moeenattar! Welcome to"}


identifier: gh_issue_3757094769
source: github_issue
status: new
created_at: 2025-12-23 12:49:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3757094769", "title": "Add support for immutable releases", "url": "https://github.com/orange-cloudfoundry/k3s-packages-boshrelease/issues/530", "user": "gberche-orange", "user_url": "https://github.com/gberche-orange", "repo": "k3s-packages-boshrelease", "body_preview": "In order to enable support for immutable release (see https://github.blog/changelog/2025-10-28-immutable-releases-are-now-generally-available/ and https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/preventing-changes-to-your-releases) \n\nThe invocation of create-github-release action would need to be modified to explicitly enable immutable release, see https://github.com/ncipollo/release-action\n\n<img width=\"1778\" height=\"279\" alt=\"Image\" src=\"h", "created": "2025-12-23T11:40:27Z", "labels": [], "context": "Add support for immutable releases In order to enable support for immutable release (see https://github.blog/changelog/2025-10-28-immutable-releases-are-now-generally-available/ and https://docs.github.com/en/code-security/supply-chain"}


identifier: gh_issue_3757088422
source: github_issue
status: new
created_at: 2025-12-23 12:49:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3757088422", "title": "Multifunctional Printer Market Report 2026", "url": "https://github.com/VedikaPatil34/newstrends/issues/4", "user": "VedikaPatil34", "user_url": "https://github.com/VedikaPatil34", "repo": "newstrends", "body_preview": "According to Fortune Business Insights, the global [multifunctional printer market 2026](https://www.fortunebusinessinsights.com/multifunctional-printer-market-114283) was valued at USD 32.42 billion in 2024. The market is projected to grow from USD 34.35 billion in 2025 and is expected to reach USD 53.42 billion by 2032, exhibiting a CAGR of 6.51% during the forecast period. Asia Pacific dominated the global market with a share of 39.37% in 2024.\n\nA multifunctional printer (MFP) is an integrate", "created": "2025-12-23T11:38:23Z", "labels": [], "context": "Multifunctional Printer Market Report 2026 According to Fortune Business Insights, the global [multifunctional printer market 2026](https://www.fortunebusinessinsights.com/multifunctional-printer-market-114283) was valued at USD 32.42 billion "}


identifier: gh_issue_3757310929
source: github_issue
status: new
created_at: 2025-12-23 13:02:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3757310929", "title": "Fix Apache Tika XXE CVE-2025-66516", "url": "https://github.com/dotCMS/core/issues/34163", "user": "cursor[bot]", "user_url": "https://github.com/apps/cursor", "repo": "core", "body_preview": "## Summary\n- Customer security teams escalated CVE-2025-66516 (Apache Tika XFA XXE/SSRF) that exposes file read and SSRF vectors in our bundled Tika plugin.\n- dotCMS currently ships Apache Tika 2.8.0 via `independent-projects/core-plugins/tika-plugin/pom.xml` and 1.28.5 in `osgi-base/system-bundles/pom.xml`, both of which are vulnerable.\n- We must upgrade every Tika artifact we publish (core plugin, shaded bundles, docker images) to the patched Tika release and communicate availability to custom", "created": "2025-12-23T13:01:08Z", "labels": ["OKR : Security & Privacy", "dotCMS : Security", "Team: Security"], "context": "Fix Apache Tika XXE CVE-2025-66516 ## Summary\n- Customer security teams escalated CVE-2025-66516 (Apache Tika XFA XXE/SSRF) that exposes file read and SSRF vectors in our bundled Tika plugin.\n- dotCMS currently ships Apache Tika 2.8.0 "}


identifier: gh_issue_3757248709
source: github_issue
status: new
created_at: 2025-12-23 13:02:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3757248709", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/gaudyp12/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @gaudyp12! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate you", "created": "2025-12-23T12:38:02Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @gaudyp12! Welcome to your Skills exercise"}


identifier: gh_issue_3757153266
source: github_issue
status: new
created_at: 2025-12-23 13:02:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3757153266", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/ktasolutions/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @ktasolutions! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate", "created": "2025-12-23T12:03:32Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @ktasolutions! Welcome to your Skills exer"}


identifier: gh_issue_3757146291
source: github_issue
status: new
created_at: 2025-12-23 13:02:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3757146291", "title": "CVE-2025-14847 (High) detected in mongor5.1.0-rc0", "url": "https://github.com/ChoeMinji/mongo-r4.4.6/issues/143", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "mongo-r4.4.6", "body_preview": "## CVE-2025-14847 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>mongor5.1.0-rc0</b></summary>\n<p>\n\n<p>The MongoDB Database</p>\n<p>Library home page: <a href=https://github.com/mongodb/mongo.git>https://github.com/mongodb/mongo.git</a></p>\n\n<p>Found in base branch: <b>main</b></p></p>\n</details>\n</p></p>\n<details><summary><img src='https://whitesource-resources.", "created": "2025-12-23T12:00:39Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-14847 (High) detected in mongor5.1.0-rc0 ## CVE-2025-14847 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3756779864
source: github_issue
status: new
created_at: 2025-12-23 13:02:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3756779864", "title": "jest-config-ibm-cloud-cognitive-1.40.0-rc.2.tgz: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/carbon-design-system/ibm-products/issues/8760", "user": "ibm-mend-app[bot]", "user_url": "https://github.com/apps/ibm-mend-app", "repo": "ibm-products", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jest-config-ibm-cloud-cognitive-1.40.0-rc.2.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/carbon-design-system/ibm-products/commit/6431ba847fc20f72f118d6626a8cfc8e702b15fe\">6431ba847fc20f72f118d6626a8cfc8e702b15f", "created": "2025-12-23T09:48:03Z", "labels": ["status: needs triage \ud83d\udd75\ufe0f\u200d\u2640\ufe0f", "type: a11y \u267f", "Mend: dependency security vulnerability"], "context": "jest-config-ibm-cloud-cognitive-1.40.0-rc.2.tgz: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jest-config-ibm-cloud-cognitive-1.40.0-rc.2.tgz"}


identifier: gh_issue_3757283312
source: github_issue
status: new
created_at: 2025-12-23 13:02:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3757283312", "title": "Security Health Check - GOOD (85/100) - 2025-12-23", "url": "https://github.com/Sami9889/Sami.dev-website/issues/246", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/23/2025, 12:50:42 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 9\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Secur", "created": "2025-12-23T12:50:46Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-23 # Security Health Check Report\n\n**Generated:** 12/23/2025, 12:50:42 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security In"}


identifier: gh_issue_3757257977
source: github_issue
status: new
created_at: 2025-12-23 13:02:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3757257977", "title": "[EXPLOITED] [Critical] SQL Injection in src/main/java/com/example/UserController.java:45", "url": "https://github.com/ElafNawaf/veracode/issues/38", "user": "ElafNawaf", "user_url": "https://github.com/ElafNawaf", "repo": "veracode", "body_preview": "**Vulnerability Details**\n\n**Type**: SQL Injection\n**Severity**: VulnerabilitySeverity.CRITICAL\n**CWE ID**: CWE-89\n**File Path**: src/main/java/com/example/UserController.java\n**Line Number**: 45\n**Confidence Score**: 0.95\n**Exploitable**: Yes\n\n**Description**:\nSQL injection vulnerability in user lookup. User input is directly concatenated into SQL query without sanitization.\n\n\n**Code Snippet**:\n```\nString query = \"SELECT ** FROM users WHERE id = \" + userId;\n```\n\n\n**Remediation**:\nUse parameteri", "created": "2025-12-23T12:41:58Z", "labels": ["severity-critical", "vulnerability", "sql-injection", "exploited"], "context": "[EXPLOITED] [Critical] SQL Injection in src/main/java/com/example/UserController.java:45 **Vulnerability Details**\n\n**Type**: SQL Injection\n**Severity**: VulnerabilitySeverity.CRITICAL\n**CWE ID**: CWE-89\n**File Path**: src/main/java/com/example/UserController.java\n**Line Number**: 45\n**Co"}


identifier: gh_issue_3757256516
source: github_issue
status: new
created_at: 2025-12-23 13:02:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3757256516", "title": "[Tech Debt] Implement token encryption in campaign-sync.ts", "url": "https://github.com/zerdos/spike-land-nextjs/issues/406", "user": "zerdos", "user_url": "https://github.com/zerdos", "repo": "spike-land-nextjs", "body_preview": "## Summary\nMarketing tokens are stored unencrypted in `campaign-sync.ts`, creating a security vulnerability.\n\n## Current State\n- File: `src/lib/marketing/campaign-sync.ts:40`\n- TODO: `// TODO: Implement proper decryption`\n- Tokens stored in plaintext\n\n## Acceptance Criteria\n- [ ] Create encryption helper using Node.js `crypto` module\n- [ ] Encrypt tokens before database storage\n- [ ] Decrypt tokens on retrieval\n- [ ] Add key rotation capability\n- [ ] Update existing stored tokens (migration)\n\n##", "created": "2025-12-23T12:41:20Z", "labels": ["agent-created", "p0", "tech-debt", "security"], "context": "[Tech Debt] Implement token encryption in campaign-sync.ts ## Summary\nMarketing tokens are stored unencrypted in `campaign-sync.ts`, creating a security vulnerability.\n\n## Current State\n- File: `src/lib/marketing/campaign-sync.ts:40`\n- TODO: `// TODO: Impleme"}


identifier: gh_issue_3757064319
source: github_issue
status: new
created_at: 2025-12-23 13:26:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3757064319", "title": "Reed Sensor Market Analysis and Forecast 2026", "url": "https://github.com/VedikaPatil34/newstrends/issues/2", "user": "VedikaPatil34", "user_url": "https://github.com/VedikaPatil34", "repo": "newstrends", "body_preview": "According to Fortune Business Insights, the global [reed sensor market 2026](https://www.fortunebusinessinsights.com/reed-sensor-market-114265) was valued at USD 1.85 billion in 2024. The market is projected to grow from USD 1.97 billion in 2025 and is expected to reach USD 3.10 billion by 2032, exhibiting a CAGR of 6.7% during the forecast period. Asia Pacific dominated the global market with a share of 47.03% in 2024.\n\nThe reed sensor market focuses on the production, distribution, and applica", "created": "2025-12-23T11:28:31Z", "labels": [], "context": "Reed Sensor Market Analysis and Forecast 2026 According to Fortune Business Insights, the global [reed sensor market 2026](https://www.fortunebusinessinsights.com/reed-sensor-market-114265) was valued at USD 1.85 billion in 2024. The market is pr"}


identifier: gh_issue_3757318788
source: github_issue
status: new
created_at: 2025-12-23 13:38:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3757318788", "title": "Upgrade 13 to 16. Invalid configuration for type", "url": "https://github.com/umbraco/Umbraco-CMS/issues/21243", "user": "Abrissirba", "user_url": "https://github.com/Abrissirba", "repo": "Umbraco-CMS", "body_preview": "### Which Umbraco version are you using?\n\n13.2.0 to 16.x\n\n### Bug summary\n\nI am trying to upgrade our umbraco 13 instance to 16. Running the upgrade I see hundreds of error saying that the database configuration failed for specific data types. At the end the whole migration fails with an error and the site cannot not boot. \n\nExample of the JSON of one of the failing dataTypes looks like in the DB\n{\"umbMigrationV14\":\"2025-12-23T12:32:03.33935+00:00\",\"items\":[\"Visa f\\u00F6r inloggade anv\\u00E4ndar", "created": "2025-12-23T13:04:09Z", "labels": ["type/bug"], "context": "Upgrade 13 to 16. Invalid configuration for type ### Which Umbraco version are you using?\n\n13.2.0 to 16.x\n\n### Bug summary\n\nI am trying to upgrade our umbraco 13 instance to 16. Running the upgrade I see hundreds of error saying that the database co"}


identifier: gh_issue_3757217271
source: github_issue
status: new
created_at: 2025-12-23 13:38:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3757217271", "title": "Migration to Protocol Buffers Edition 2024 with buf", "url": "https://github.com/hiromaily/go-crypto-wallet/issues/56", "user": "hiromaily", "user_url": "https://github.com/hiromaily", "repo": "go-crypto-wallet", "body_preview": "# Migration to Protocol Buffers Edition 2024 with buf\n\n## Overview\n\nThis document outlines the migration plan to upgrade the Protocol Buffers files from `proto3`\nsyntax to Protocol Buffers Edition 2024, and to replace direct `protoc` usage with `buf` for\ncode generation and linting.\n\n## Current State\n\n### Proto Files Location\n- Main proto files: `data/proto/rippleapi/`\n  - `account.proto`\n  - `address.proto`\n  - `transaction.proto`\n- Third-party proto files: `data/proto/third_party/`\n  - `google", "created": "2025-12-23T12:26:41Z", "labels": [], "context": "Migration to Protocol Buffers Edition 2024 with buf # Migration to Protocol Buffers Edition 2024 with buf\n\n## Overview\n\nThis document outlines the migration plan to upgrade the Protocol Buffers files from `proto3`\nsyntax to Protocol Buffers Edition 202"}


identifier: gh_issue_3757201633
source: github_issue
status: new
created_at: 2025-12-23 13:38:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3757201633", "title": "WebMvcTest security unit tests no longer working with Spring Boot 4", "url": "https://github.com/spring-projects/spring-boot/issues/48605", "user": "HayoBaan", "user_url": "https://github.com/HayoBaan", "repo": "spring-boot", "body_preview": "I have a (jwt) security enabled application and have written unit tests to verify the security filtering works as expected. With Spring Boot 3 these unit tests work fine, however, after upgrading to Spring Boot 4 they no longer work. The application, however works just fine and applies the security filtering as expected.\n\nI have debugged this and found the issue to be with the calling order of the filter. With Spring Boot 4, inside the WebMvcTest, my authentication filter is called at the very b", "created": "2025-12-23T12:21:09Z", "labels": ["status: waiting-for-triage"], "context": "WebMvcTest security unit tests no longer working with Spring Boot 4 I have a (jwt) security enabled application and have written unit tests to verify the security filtering works as expected. With Spring Boot 3 these unit tests work fine, however, after upgrading to S"}


identifier: gh_issue_3757194997
source: github_issue
status: new
created_at: 2025-12-23 13:38:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3757194997", "title": "CI/CD Deploying Unpushed Code - Local/Remote Divergence (57 commits)", "url": "https://github.com/gpt153/project-orchestrator/issues/25", "user": "gpt153", "user_url": "https://github.com/gpt153", "repo": "project-orchestrator", "body_preview": "# CI/CD Deploying Unpushed Code - Local/Remote Divergence (57 commits)\n\n## Issue Summary\n\nThe project-orchestrator CI/CD pipeline is successfully deploying and running containers, but it's deploying code that **doesn't exist in the GitHub repository**. The local workspace is 57 commits ahead of `origin/main`, and the self-hosted GitHub Actions runner is deploying from the local filesystem rather than the remote repository.\n\n**Severity:** \ud83d\udfe1 Medium - Application runs successfully, but 57 commits o", "created": "2025-12-23T12:18:59Z", "labels": [], "context": "CI/CD Deploying Unpushed Code - Local/Remote Divergence (57 commits) # CI/CD Deploying Unpushed Code - Local/Remote Divergence (57 commits)\n\n## Issue Summary\n\nThe project-orchestrator CI/CD pipeline is successfully deploying and running containers, but it's deploying c"}


identifier: gh_issue_3757348788
source: github_issue
status: new
created_at: 2025-12-23 13:50:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3757348788", "title": "Fix semantic release issue", "url": "https://github.com/subhamay-bhattacharyya-gha/tf-plan-action/issues/38", "user": "bsubhamay", "user_url": "https://github.com/bsubhamay", "repo": "tf-plan-action", "body_preview": "Fix the semantic release issue which is as below:\n\n```text\nRun npm ci\n  npm ci\n  shell: /usr/bin/bash -e {0}\nnpm error code EUSAGE\nnpm error\nnpm error `npm ci` can only install packages when your package.json and package-lock.json or npm-shrinkwrap.json are in sync. Please update your lock file with `npm install` before continuing.\nnpm error\nnpm error Missing: @types/node@25.0.3 from lock file\nnpm error Missing: typescript@5.9.3 from lock file\nnpm error\nnpm error Clean install a project\nnpm erro", "created": "2025-12-23T13:15:12Z", "labels": ["bug", "new"], "context": "Fix semantic release issue Fix the semantic release issue which is as below:\n\n```text\nRun npm ci\n  npm ci\n  shell: /usr/bin/bash -e {0}\nnpm error code EUSAGE\nnpm error\nnpm error `npm ci` can only install packages when your pack"}


identifier: gh_issue_3757558517
source: github_issue
status: new
created_at: 2025-12-23 14:27:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3757558517", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/udovicicbogdan/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @udovicicbogdan! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each st", "created": "2025-12-23T14:26:11Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @udovicicbogdan! Welcom"}


identifier: gh_issue_3757544308
source: github_issue
status: new
created_at: 2025-12-23 14:39:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3757544308", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/omarsherif74/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @omarsherif74! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate", "created": "2025-12-23T14:21:19Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @omarsherif74! Welcome to your Skills exer"}


identifier: gh_issue_3757061197
source: github_issue
status: new
created_at: 2025-12-23 14:39:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3757061197", "title": "Linkwarden install failed due to wrong version of Yarn", "url": "https://github.com/community-scripts/ProxmoxVE/issues/10243", "user": "doomedramen", "user_url": "https://github.com/doomedramen", "repo": "ProxmoxVE", "body_preview": "### \u2705 Have you read and understood the above guidelines?\n\nyes\n\n### \ud83d\udd0e Did you run the script with verbose mode enabled?\n\nYes, verbose mode was enabled and the output is included below\n\n### \ud83d\udcdc What is the name of the script you are using?\n\nLinkwarden\n\n### \ud83d\udcc2 What was the exact command used to execute the script?\n\nbash -c \"$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/linkwarden.sh)\"\n\n### \u2699\ufe0f What settings are you using?\n\n- [x] Default Settings\n- [x] Advanced Setti", "created": "2025-12-23T11:27:16Z", "labels": ["bug"], "context": "Linkwarden install failed due to wrong version of Yarn ### \u2705 Have you read and understood the above guidelines?\n\nyes\n\n### \ud83d\udd0e Did you run the script with verbose mode enabled?\n\nYes, verbose mode was enabled and the output is included below\n\n### \ud83d\udcdc What is th"}


identifier: gh_issue_3757583377
source: github_issue
status: new
created_at: 2025-12-23 14:51:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3757583377", "title": "Add Security Audit and Vulnerability Scanning", "url": "https://github.com/hephaex/OTL/issues/7", "user": "hephaex", "user_url": "https://github.com/hephaex", "repo": "OTL", "body_preview": "## Overview\nImplement comprehensive security audit capabilities and automated vulnerability scanning to ensure system security.\n\n## Objectives\n- Enable continuous security vulnerability detection\n- Implement audit logging for security-relevant events\n- Automate dependency vulnerability scanning\n- Ensure compliance with security best practices\n\n## Implementation Tasks\n\n### 1. Dependency Vulnerability Scanning\n- [ ] Integrate cargo-audit for Rust dependencies\n- [ ] Set up automated scanning in CI/", "created": "2025-12-23T14:35:14Z", "labels": ["type:enhancement", "type:security", "priority:critical", "status:backlog"], "context": "Add Security Audit and Vulnerability Scanning ## Overview\nImplement comprehensive security audit capabilities and automated vulnerability scanning to ensure system security.\n\n## Objectives\n- Enable continuous security vulnerability detection\n- Im"}


identifier: gh_issue_3757640579
source: github_issue
status: new
created_at: 2025-12-23 15:03:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3757640579", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/0llino/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @0llino! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll", "created": "2025-12-23T14:56:18Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @0llino! Welcome to you"}


identifier: gh_issue_3757343871
source: github_issue
status: new
created_at: 2025-12-23 15:03:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3757343871", "title": "Exercise: Expand your team with Copilot coding agent", "url": "https://github.com/dmytro-klymiuk-eleks/skills-expand-your-team-with-copilot/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-expand-your-team-with-copilot", "body_preview": "## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @dmytro-klymiuk-eleks! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll unlock the next level of your favorite AI-powered coding assistant. Let&#39;s learn how to assign Copilot coding tasks directly in GitHub! \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each ste", "created": "2025-12-23T13:13:34Z", "labels": [], "context": "Exercise: Expand your team with Copilot coding agent ## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @dmytro-klymiuk-eleks!"}


identifier: gh_issue_3757044505
source: github_issue
status: new
created_at: 2025-12-23 15:54:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3757044505", "title": "[plan] Upgrade golangci-lint from v1.62.2 to v2.7.2", "url": "https://github.com/githubnext/gh-aw/issues/7375", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "gh-aw", "body_preview": "## Overview\n\nThis tracking issue covers the upgrade of golangci-lint from v1.62.2 to v2.7.2, closing an 8-month version gap and unlocking 100+ new features, bug fixes, and performance improvements.\n\n**Source**: Discussion #7356 - Go Module Review: golangci-lint\n\n## Why This Upgrade Matters\n\n- **Go 1.25 support** (added in v2.4.0)\n- **100+ improvements** across bug fixes, features, and new linters\n- **Performance enhancements** in v2 release line\n- **New linters** including `modernize`, `godoclin", "created": "2025-12-23T11:21:21Z", "labels": ["enhancement", "ai-generated", "plan"], "context": "[plan] Upgrade golangci-lint from v1.62.2 to v2.7.2 ## Overview\n\nThis tracking issue covers the upgrade of golangci-lint from v1.62.2 to v2.7.2, closing an 8-month version gap and unlocking 100+ new features, bug fixes, and performance improvements.\n\n*"}


identifier: gh_issue_3757731854
source: github_issue
status: new
created_at: 2025-12-23 16:06:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3757731854", "title": "Outdated log4j-core Detected During Automated CI/CD Scans", "url": "https://github.com/elastic/apm-agent-java/issues/4346", "user": "Harguer", "user_url": "https://github.com/Harguer", "repo": "apm-agent-java", "body_preview": "Hello! I'd appreciate any help you could provide here\n\nDescription: Automated vulnerability scans (Grype) in our CI/CD pipelines have detected that the project is currently depending on an outdated version of log4j-core (2.12.4). The scan flagged [GHSA-vc5p-v9hr-52mj](https://github.com/advisories/GHSA-vc5p-v9hr-52mj) as a medium-severity issue.\n\nDetails:\n\n    Vulnerable artifact: log4j-core 2.12.4\n    Fixed in: log4j-core 2.25.3\n    Severity: Medium\n    Reference vulnerability: [GHSA-vc5p-v9hr-", "created": "2025-12-23T15:29:03Z", "labels": ["agent-java", "community", "triage"], "context": "Outdated log4j-core Detected During Automated CI/CD Scans Hello! I'd appreciate any help you could provide here\n\nDescription: Automated vulnerability scans (Grype) in our CI/CD pipelines have detected that the project is currently depending on an outdated ve"}


identifier: gh_issue_3757543397
source: github_issue
status: new
created_at: 2025-12-23 16:06:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3757543397", "title": "Several issues reported by a bot in workers implementation", "url": "https://github.com/speakeasy-api/docs-md/issues/201", "user": "fabroos", "user_url": "https://github.com/fabroos", "repo": "docs-md", "body_preview": "A bot reported several issues on this, are they representing a real risk?\n\nI need support on this ASAP pls, would be super have this merged today!\n\n___\n\n```\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  console[level] = (message: any, ...optionalParams: any[]) => {\n    const hasSubstitutions =\n      typeof message === 'string' && /%[sdifcoO]/.test(message);\n```\n\nMedium\u2002SAST Finding\n\nRegular Expression Denial of Service (ReDoS) in User Input Validation (CWE-185)\n\n\n\nruntimes/t", "created": "2025-12-23T14:21:06Z", "labels": [], "context": "Several issues reported by a bot in workers implementation A bot reported several issues on this, are they representing a real risk?\n\nI need support on this ASAP pls, would be super have this merged today!\n\n___\n\n```\n  // eslint-disable-next-line @typescript-e"}


identifier: gh_issue_3757791528
source: github_issue
status: new
created_at: 2025-12-23 16:19:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3757791528", "title": "Exercise: Introduction to Repository Management", "url": "https://github.com/asalletmaier/introduction-to-repository-management/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "introduction-to-repository-management", "body_preview": "## Introduction to Repository Management\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @asalletmaier! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll configure your repository for easier collaboration. You&#39;ll learn how to protect your code, prepare for collaboration, and foster healthy growth in your projects.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you comple", "created": "2025-12-23T15:52:32Z", "labels": [], "context": "Exercise: Introduction to Repository Management ## Introduction to Repository Management\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @asalletmaier! Welcome to y"}


identifier: gh_issue_3757786402
source: github_issue
status: new
created_at: 2025-12-23 16:19:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3757786402", "title": "Type Confusion via Infinity Leading to Global Scope Hijacking", "url": "https://github.com/cesanta/elk/issues/71", "user": "hkbinbin", "user_url": "https://github.com/hkbinbin", "repo": "elk", "body_preview": "## Summary\nA type confusion vulnerability exists in the Elk JavaScript engine's NaN boxing implementation. The IEEE 754 representation of positive `Infinity` is incorrectly interpreted as an internal object type pointing to offset 0, which is the global scope object. This allows attackers to read, shadow, or hijack any global variable or function from JavaScript code.\n\n## Root Cause\nElk uses NaN boxing to encode JavaScript values into 64-bit doubles. The type is encoded in bits 48-51 when the va", "created": "2025-12-23T15:50:34Z", "labels": [], "context": "Type Confusion via Infinity Leading to Global Scope Hijacking ## Summary\nA type confusion vulnerability exists in the Elk JavaScript engine's NaN boxing implementation. The IEEE 754 representation of positive `Infinity` is incorrectly interpreted as an internal "}


identifier: gh_issue_3757745314
source: github_issue
status: new
created_at: 2025-12-23 16:31:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3757745314", "title": "Feat: FAQ page for info site", "url": "https://github.com/Ryan-Millard/Img2Num/issues/161", "user": "Ryan-Millard", "user_url": "https://github.com/Ryan-Millard", "repo": "Img2Num", "body_preview": "### Describe the feature\n\nNew users and developers often have a lot of questions and don't know where to go to get answers. This issue needs to solve that problem by creating a new page at [https://ryan-millard.github.io/Img2Num/info/faq/](https://ryan-millard.github.io/Img2Num/info/faq/) (note that the page doesn't exist, so clicking on it won't take you anywhere meaningful).\n\nThe link to this new site needs to be displayed between \"Documentation\" and \"Blog\" on the [Docusaurus site](https://rya", "created": "2025-12-23T15:34:36Z", "labels": ["enhancement"], "context": "Feat: FAQ page for info site ### Describe the feature\n\nNew users and developers often have a lot of questions and don't know where to go to get answers. This issue needs to solve that problem by creating a new page at [https://ry"}


identifier: gh_issue_3757927624
source: github_issue
status: new
created_at: 2025-12-23 16:43:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3757927624", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/KellyGasperski/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @KellyGasperski! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each st", "created": "2025-12-23T16:41:01Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @KellyGasperski! Welcom"}


identifier: gh_issue_3757838124
source: github_issue
status: new
created_at: 2025-12-23 16:43:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3757838124", "title": "Compare kind, k3s, k0s, kubeadm singlenode, openshift local (crc) and microshift", "url": "https://github.com/jiridanek/rhoai-in-kind/issues/37", "user": "jiridanek", "user_url": "https://github.com/jiridanek", "repo": "rhoai-in-kind", "body_preview": "Compare the various Kubernetes distribution that we may consider using. This is in light of OpenDataHub / OpenShift AI version 3.0 which uses the Bring Your Own ID and the Gateway API.\n\n* KinD, https://kind.sigs.k8s.io/\n* K3S/K3D, https://k3s.io/, https://k3d.io/stable/\n* K0s/K0d, https://k0sproject.io/, http://forums.k8slens.dev/t/any-k0d-somewhere/368/6, https://github.com/jiridanek/notebooks-v2/blob/216d8933bcb95586c2dc0a2f7bfedafa8a1cee81/.github/workflows/workspaces-controller_integration-t", "created": "2025-12-23T16:10:15Z", "labels": [], "context": "Compare kind, k3s, k0s, kubeadm singlenode, openshift local (crc) and microshift Compare the various Kubernetes distribution that we may consider using. This is in light of OpenDataHub / OpenShift AI version 3.0 which uses the Bring Your Own ID and the Gateway API.\n\n* KinD, https:"}


identifier: gh_issue_3757756805
source: github_issue
status: new
created_at: 2025-12-23 16:43:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3757756805", "title": "Exercise: Introduction to Secret Scanning", "url": "https://github.com/0llino/skills-introduction-to-secret-scanning/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-secret-scanning", "body_preview": "## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @0llino! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll learn how to identify and protect sensitive information in your repositories. \ud83d\udd0d Let&#39;s work together to keep your code secure! \ud83d\udee1\ufe0f\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comme", "created": "2025-12-23T15:38:17Z", "labels": [], "context": "Exercise: Introduction to Secret Scanning ## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @0llino! Welcome to your Skills e"}


identifier: gh_issue_3757378717
source: github_issue
status: new
created_at: 2025-12-23 16:44:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3757378717", "title": "[Question]: Greatly increased CPU hunger since 1.2.0", "url": "https://github.com/leukipp/touchkio/issues/169", "user": "snowdd1", "user_url": "https://github.com/snowdd1", "repo": "touchkio", "body_preview": "### Problem description\n\nI have multiple raspberries with displays in my home. \n\nThe one I started with is still running the **version 1.2.0**, and has an average processor usage (as measured by touchkio itself) of **7%.**\n\nThe later raspberries are using recent versions, the latest installed yesterday is running **1.4.2.** The processor usage is **NEVER below 40%**, the temperature is much higher.\n\nFor testing, I used the same dashboards on all devices.\n\nI did not yet install all versions in be", "created": "2025-12-23T13:26:31Z", "labels": ["question"], "context": "[Question]: Greatly increased CPU hunger since 1.2.0 ### Problem description\n\nI have multiple raspberries with displays in my home. \n\nThe one I started with is still running the **version 1.2.0**, and has an average processor usage (as measured by touch"}


identifier: gh_issue_3757964769
source: github_issue
status: new
created_at: 2025-12-23 16:56:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3757964769", "title": "\ud83d\udd34 BUILD CRISIS: Package.json Corrupted by npm audit fix --force", "url": "https://github.com/B0yZ4kr14/tsijukebox/issues/30", "user": "B0yZ4kr14", "user_url": "https://github.com/B0yZ4kr14", "repo": "tsijukebox", "body_preview": "## \ud83d\udea8 CRITICAL ISSUE DISCOVERED\n\n**Root Cause Identified:** `npm audit fix --force` was causing catastrophic build failures by upgrading major versions without proper testing.\n\n### \ud83d\udccb What Happened\n\n1. Running `npm audit fix --force` triggered:\n   - Vite: 5.4.1 \u2192 7.3.0 (MAJOR version change)\n   - Vitest: 2.1.1 \u2192 4.0.16 (MAJOR version change)\n   - Multiple Radix UI components removed from dependencies\n   - 37 packages removed, 89 changed\n\n2. This broke the build with missing imports:\n   - `@radix-u", "created": "2025-12-23T16:53:54Z", "labels": ["bug", "build", "critical"], "context": "\ud83d\udd34 BUILD CRISIS: Package.json Corrupted by npm audit fix --force ## \ud83d\udea8 CRITICAL ISSUE DISCOVERED\n\n**Root Cause Identified:** `npm audit fix --force` was causing catastrophic build failures by upgrading major versions without proper testing.\n\n### \ud83d\udccb What Happened\n\n1. "}


identifier: gh_issue_3757958922
source: github_issue
status: new
created_at: 2025-12-23 16:56:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3757958922", "title": "\ud83d\udd34 CR\u00cdTICO: Missing Dependencies - Build Broken", "url": "https://github.com/B0yZ4kr14/tsijukebox/issues/29", "user": "B0yZ4kr14", "user_url": "https://github.com/B0yZ4kr14", "repo": "tsijukebox", "body_preview": "## \ud83d\udd34 Problema CR\u00cdTICO\n\nO `npm run build` est\u00e1 falhando porque m\u00faltiplas depend\u00eancias declaradas no c\u00f3digo n\u00e3o est\u00e3o em `package.json`.\n\n## \u274c Depend\u00eancias Faltando:\n\n```\n@radix-ui/react-radio-group (encontrada em src/components/ui/radio-group.tsx)\n```\n\n## \u2705 Solu\u00e7\u00e3o Imediata:\n\n```bash\n# Instalar depend\u00eancia faltante\nnpm install @radix-ui/react-radio-group\n\n# Testar build\nnpm run build\n```\n\n## \ud83d\udd0d Diagn\u00f3stico Completo:\n\nO arquivo `package.json` foi **corrompido por auto-sync** (PRs #27, #28). Removeu", "created": "2025-12-23T16:51:58Z", "labels": ["bug", "build", "critical"], "context": "\ud83d\udd34 CR\u00cdTICO: Missing Dependencies - Build Broken ## \ud83d\udd34 Problema CR\u00cdTICO\n\nO `npm run build` est\u00e1 falhando porque m\u00faltiplas depend\u00eancias declaradas no c\u00f3digo n\u00e3o est\u00e3o em `package.json`.\n\n## \u274c Depend\u00eancias Faltando:\n\n```\n@radix-ui/react-radio-group (en"}


identifier: gh_issue_3757998358
source: github_issue
status: new
created_at: 2025-12-23 17:07:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3757998358", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/stumccall/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @stumccall! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I", "created": "2025-12-23T17:05:03Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @stumccall! Welcome to "}


identifier: gh_issue_3757061807
source: github_issue
status: new
created_at: 2025-12-23 17:07:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3757061807", "title": "SEP-2007: Payment Support for MCP Servers", "url": "https://github.com/modelcontextprotocol/modelcontextprotocol/issues/2008", "user": "shivankgoel", "user_url": "https://github.com/shivankgoel", "repo": "modelcontextprotocol", "body_preview": "# SEP-2007: Payment Support for MCP Servers\n\n- **Status**: Draft\n- **Type**: Standards Track\n- **Created**: 2025-12-23\n- **Author(s)**: shivankgoel\n- **Sponsor**: LucaButBoring\n- **PR**: https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2007\n\n## Abstract\n\nThis SEP introduces payment capabilities to the Model Context Protocol (MCP), enabling MCP servers to request payment for premium features, usage-based billing, or access to restricted resources. The specification defines a prot", "created": "2025-12-23T11:27:31Z", "labels": ["enhancement"], "context": "SEP-2007: Payment Support for MCP Servers # SEP-2007: Payment Support for MCP Servers\n\n- **Status**: Draft\n- **Type**: Standards Track\n- **Created**: 2025-12-23\n- **Author(s)**: shivankgoel\n- **Sponsor**: LucaButBoring\n- **PR**: https://githu"}


identifier: gh_issue_3757988439
source: github_issue
status: new
created_at: 2025-12-23 17:21:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3757988439", "title": "\ud83d\udd34 Critical: SQL Injection vulnerability in MDFAttacher.cs", "url": "https://github.com/jas88/RDMP/issues/116", "user": "jas88", "user_url": "https://github.com/jas88", "repo": "RDMP", "body_preview": "## Summary\n\nSQL injection vulnerability found in `MDFAttacher.cs` where database names and file paths are interpolated directly into SQL commands without parameterization.\n\n## Location\n\n**File:** `Rdmp.Core/DataLoad/Modules/Attachers/MDFAttacher.cs`\n**Lines:** 168-177\n\n## Vulnerable Code\n\n```csharp\nvar cmd = new SqlCommand($@\"  CREATE DATABASE {nameTheyWant}   \n   ON (FILENAME = '{_locations.AttachMdfPath}'),   \n   (FILENAME = '{_locations.AttachLdfPath}')   \n   FOR ATTACH;  \", con);\n\ncmd.Execut", "created": "2025-12-23T17:01:52Z", "labels": ["security"], "context": "\ud83d\udd34 Critical: SQL Injection vulnerability in MDFAttacher.cs ## Summary\n\nSQL injection vulnerability found in `MDFAttacher.cs` where database names and file paths are interpolated directly into SQL commands without parameterization.\n\n## Location\n\n**File:** `Rdm"}


identifier: gh_issue_3758037045
source: github_issue
status: new
created_at: 2025-12-23 17:21:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3758037045", "title": "refactor: Drop support for Python 3.9", "url": "https://github.com/config-ninja/config-ninja/issues/1174", "user": "bryantf-elucid", "user_url": "https://github.com/bryantf-elucid", "repo": "config-ninja", "body_preview": "# Enhancement Proposal\n\nRemove support for Python 3.9 to resolve a security vulnerability in urllib3\n\n## Problem Statement\n\nDependabot alert [#28](https://github.com/config-ninja/config-ninja/security/dependabot/28) reports a high severity vulnerability in urllib3 ([CVE-2025-66471](https://nvd.nist.gov/vuln/detail/CVE-2025-66471), CVSS 8.9). The vulnerability affects urllib3's streaming API, which can cause excessive resource consumption (high CPU usage and massive memory allocation) when handli", "created": "2025-12-23T17:19:51Z", "labels": [], "context": "refactor: Drop support for Python 3.9 # Enhancement Proposal\n\nRemove support for Python 3.9 to resolve a security vulnerability in urllib3\n\n## Problem Statement\n\nDependabot alert [#28](https://github.com/config-ninja/config-ninja/security"}


identifier: gh_issue_3757995275
source: github_issue
status: new
created_at: 2025-12-23 17:21:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3757995275", "title": "Upgrade Swashbuckle.AspNetCore to v10 with Microsoft.OpenApi v2.x compatibility", "url": "https://github.com/markhazleton/RESTRunner/issues/3", "user": "markhazleton", "user_url": "https://github.com/markhazleton", "repo": "RESTRunner", "body_preview": "## Overview\r\nUpgrade Swashbuckle.AspNetCore from v9.0.4 to v10.1.0 to leverage latest Swagger/OpenAPI features, security updates, and improved .NET 10 integration. This upgrade requires code refactoring due to breaking changes in the Microsoft.OpenApi v2.x dependency.\r\n\r\n## Current Status\r\n- **Current Version**: Swashbuckle.AspNetCore v9.0.4\r\n- **Target Version**: Swashbuckle.AspNetCore v10.1.0\r\n- **Status**: Deferred from .NET 10 upgrade due to breaking changes\r\n- **Reason**: Microsoft.OpenApi ", "created": "2025-12-23T17:03:49Z", "labels": ["enhancement", "dependencies", "breaking-change", "web"], "context": "Upgrade Swashbuckle.AspNetCore to v10 with Microsoft.OpenApi v2.x compatibility ## Overview\r\nUpgrade Swashbuckle.AspNetCore from v9.0.4 to v10.1.0 to leverage latest Swagger/OpenAPI features, security updates, and improved .NET 10 integration. This upgrade requires code refactori"}


identifier: gh_issue_3757984833
source: github_issue
status: new
created_at: 2025-12-23 17:21:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3757984833", "title": "CVE-2025-53000 (High) detected in nbconvert-7.16.6-py3-none-any.whl", "url": "https://github.com/digitalocean/droplet-1-clicks/issues/259", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "droplet-1-clicks", "body_preview": "## CVE-2025-53000 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>nbconvert-7.16.6-py3-none-any.whl</b></summary>\n\n<p>Converting Jupyter Notebooks (.ipynb files) to other formats.  Output formats include asciidoc, html, latex, markdown, pdf, py, rst, script.  nbconvert can be used both as a Python library (`import nbconvert`) or as a command line tool (invoked as", "created": "2025-12-23T17:00:41Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-53000 (High) detected in nbconvert-7.16.6-py3-none-any.whl ## CVE-2025-53000 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3757955935
source: github_issue
status: new
created_at: 2025-12-23 17:21:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3757955935", "title": "Latest 15 Papers - December 24, 2025", "url": "https://github.com/Yatogaii/DailyArXiv/issues/54", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "DailyArXiv", "body_preview": "**Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Symbolic Execution\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[Vital: Vulnerability-Oriented Symbolic Execution via Type-Unsafe Pointer-Guided Monte Carlo Tree Search](https://arxiv.org/abs/2408.08772v2)** | 2025-12-12 | <details><summary>Just ...</summary><p>Just Accepted in ACM Transactions on Software Engineering and Methodology (ACM TOSEM)<", "created": "2025-12-23T16:50:50Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 24, 2025 **Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Symbolic Execution\n| **Title** | **Date** | **Comment** |\n| --- | "}


identifier: gh_issue_3757882058
source: github_issue
status: new
created_at: 2025-12-23 17:32:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3757882058", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/0llino/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @0llino! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate your ", "created": "2025-12-23T16:25:37Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @0llino! Welcome to your Skills exercise!\n"}


identifier: gh_issue_3758013092
source: github_issue
status: new
created_at: 2025-12-23 17:45:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3758013092", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/georgefsegeda/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @georgefsegeda! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each ste", "created": "2025-12-23T17:10:41Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @georgefsegeda! Welcome"}


identifier: gh_issue_3757949773
source: github_issue
status: new
created_at: 2025-12-23 17:45:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3757949773", "title": "Enable premiumv2 disk migration monitoring", "url": "https://github.com/gardener/gardener-extension-provider-azure/issues/1410", "user": "kon-angelo", "user_url": "https://github.com/kon-angelo", "repo": "gardener-extension-provider-azure", "body_preview": "<!-- Please ensure that you do not include company internal information. -->\n\n**How to categorize this issue?**\n<!--\nPlease select area, kind, and priority for this issue. This helps the community categorizing it.\nReplace below TODOs or exchange the existing identifiers with those that fit best in your opinion.\nIf multiple identifiers make sense you can also state the commands multiple times, e.g.\n  /area control-plane\n  /area auto-scaling\n  ...\n\n\"/area\" identifiers:     audit-logging|auto-scali", "created": "2025-12-23T16:48:37Z", "labels": ["area/control-plane", "kind/enhancement", "platform/azure"], "context": "Enable premiumv2 disk migration monitoring <!-- Please ensure that you do not include company internal information. -->\n\n**How to categorize this issue?**\n<!--\nPlease select area, kind, and priority for this issue. This helps the community cat"}


identifier: gh_issue_3757713318
source: github_issue
status: new
created_at: 2025-12-23 17:45:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3757713318", "title": "XyPriss CORS Bug Report: Array Properties Not Properly Serialized in MultiServer Mode", "url": "https://github.com/Nehonix-Team/XyPriss/issues/5", "user": "oxanmerym", "user_url": "https://github.com/oxanmerym", "repo": "XyPriss", "body_preview": "# XyPriss CORS Bug Report: Array Properties Not Properly Serialized in MultiServer Mode\n\n## Bug Summary\n\nWhen using the `multiServer` configuration in XyPriss with CORS settings, array properties (`methods`, `allowedHeaders`, and potentially `exposedHeaders`) are not properly serialized to strings when setting HTTP headers. Instead, they either output `[object Object]` or are completely omitted from the response, causing CORS preflight requests to fail.\n\n## Environment\n\n- **XyPriss Version**: 4.", "created": "2025-12-23T15:21:52Z", "labels": [], "context": "XyPriss CORS Bug Report: Array Properties Not Properly Serialized in MultiServer Mode # XyPriss CORS Bug Report: Array Properties Not Properly Serialized in MultiServer Mode\n\n## Bug Summary\n\nWhen using the `multiServer` configuration in XyPriss with CORS settings, array properties (`me"}


identifier: gh_issue_3758031294
source: github_issue
status: new
created_at: 2025-12-23 17:58:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3758031294", "title": "docs: Write \"Building a Modern Rust CLI\" blog post", "url": "https://github.com/clouatre-labs/aptu/issues/221", "user": "clouatre", "user_url": "https://github.com/clouatre", "repo": "aptu", "body_preview": "## Summary\n\nWrite a technical blog post on clouatre.ca documenting patterns and trade-offs from building Aptu as a Rust CLI.\n\n## Motivation\n\nShare what worked, what didn't, and why - useful for anyone building CLI tools in Rust.\n\n## Suggested Outline\n\n*Preliminary - subject to revision during writing.*\n\n1. **Introduction** - The problem, why Rust\n2. **Project Structure** - Workspace layout, when it helps vs. overkill\n3. **Modern Rust Practices** - Rust 2024 edition, Clippy pedantic, error handli", "created": "2025-12-23T17:17:31Z", "labels": ["documentation", "p3"], "context": "docs: Write \"Building a Modern Rust CLI\" blog post ## Summary\n\nWrite a technical blog post on clouatre.ca documenting patterns and trade-offs from building Aptu as a Rust CLI.\n\n## Motivation\n\nShare what worked, what didn't, and why - useful for anyone"}


identifier: gh_issue_3758010154
source: github_issue
status: new
created_at: 2025-12-23 17:58:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3758010154", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/stumccall/skills-secure-repository-supply-chain1/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain1", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @stumccall! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I", "created": "2025-12-23T17:09:35Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @stumccall! Welcome to "}


identifier: gh_issue_3758122325
source: github_issue
status: new
created_at: 2025-12-23 18:10:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3758122325", "title": "[CRITICAL][SECURITY] Fix WebSocket Authentication Vulnerability", "url": "https://github.com/krisapplegate/kiro-simple-tracker/issues/6", "user": "krisapplegate", "user_url": "https://github.com/krisapplegate", "repo": "kiro-simple-tracker", "body_preview": "## Problem\n\nWebSocket connections allow clients to claim **any tenant ID** without authentication.\n\n**Location:** `backend/server.js:1236-1271`\n\n**Current Code (VULNERABLE):**\n```javascript\nwss.on('connection', (ws) => {\n  ws.tenantId = null  // \u274c No authentication!\n  ws.on('message', (message) => {\n    if (data.type === 'join_tenant') {\n      ws.tenantId = data.tenantId  // \u274c Client can claim ANY tenant!\n    }\n  })\n})\n```\n\n## Vulnerabilities\n\n1. \u274c No JWT validation on WebSocket connection\n2. \u274c ", "created": "2025-12-23T18:00:49Z", "labels": ["critical", "backend", "phase-1", "security", "websocket"], "context": "[CRITICAL][SECURITY] Fix WebSocket Authentication Vulnerability ## Problem\n\nWebSocket connections allow clients to claim **any tenant ID** without authentication.\n\n**Location:** `backend/server.js:1236-1271`\n\n**Current Code (VULNERABLE):**\n```javascript\nwss.on('co"}


identifier: gh_issue_3758071466
source: github_issue
status: new
created_at: 2025-12-23 18:10:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3758071466", "title": "Security Vulnerability Report", "url": "https://github.com/PaintingProgrammer/comment-auto-bot/issues/18", "user": "PaintingProgrammer", "user_url": "https://github.com/PaintingProgrammer", "repo": "comment-auto-bot", "body_preview": "Critical security issue discovered", "created": "2025-12-23T17:35:04Z", "labels": ["security", "critical"], "context": "Security Vulnerability Report Critical security issue discovered"}


identifier: gh_issue_3758071023
source: github_issue
status: new
created_at: 2025-12-23 18:10:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3758071023", "title": "Security Vulnerability Report", "url": "https://github.com/PaintingProgrammer/comment-auto-bot/issues/17", "user": "PaintingProgrammer", "user_url": "https://github.com/PaintingProgrammer", "repo": "comment-auto-bot", "body_preview": "Critical security issue discovered", "created": "2025-12-23T17:34:52Z", "labels": ["security", "critical"], "context": "Security Vulnerability Report Critical security issue discovered"}


identifier: gh_issue_3758070550
source: github_issue
status: new
created_at: 2025-12-23 18:10:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3758070550", "title": "Security Vulnerability Report", "url": "https://github.com/PaintingProgrammer/comment-auto-bot/issues/16", "user": "PaintingProgrammer", "user_url": "https://github.com/PaintingProgrammer", "repo": "comment-auto-bot", "body_preview": "Critical security issue discovered", "created": "2025-12-23T17:34:38Z", "labels": ["security", "critical"], "context": "Security Vulnerability Report Critical security issue discovered"}


identifier: gh_issue_3758198442
source: github_issue
status: new
created_at: 2025-12-23 18:35:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3758198442", "title": "[SECURITY] Critical: Missing Health Check in createIsolatedSubaccount() - Full PoC With 12 Tests", "url": "https://github.com/nadohq/nado-contracts/issues/10", "user": "mayur2811", "user_url": "https://github.com/mayur2811", "repo": "nado-contracts", "body_preview": "## \u26a0\ufe0f CRITICAL SECURITY VULNERABILITY\n\nI discovered a critical vulnerability in `OffchainExchange.createIsolatedSubaccount()` with a full Proof of Concept (12 passing Hardhat tests).\n\n### Summary\n`createIsolatedSubaccount()` transfers margin from parent to isolated subaccount **WITHOUT** verifying parent's health afterward. This is **INCONSISTENT** with 4 other similar functions that ALL have health checks:\n\n| Function | Health Check? |\n|----------|--------------|\n| transferQuote() line 265 | \u2705 ", "created": "2025-12-23T18:33:31Z", "labels": [], "context": "[SECURITY] Critical: Missing Health Check in createIsolatedSubaccount() - Full PoC With 12 Tests ## \u26a0\ufe0f CRITICAL SECURITY VULNERABILITY\n\nI discovered a critical vulnerability in `OffchainExchange.createIsolatedSubaccount()` with a full Proof of Concept (12 passing Hardhat tests).\n\n### Summary\n`cre"}


identifier: gh_issue_3758078381
source: github_issue
status: new
created_at: 2025-12-23 18:47:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3758078381", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-23", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/369", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (191)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:158`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-production'\n   - Confidence: MEDIUM\n\n2. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n3. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.p", "created": "2025-12-23T17:38:41Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-23 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (191)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:158`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-p"}


identifier: gh_issue_3758076689
source: github_issue
status: new
created_at: 2025-12-23 18:47:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3758076689", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-23", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/367", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (191)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:158`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-production'\n   - Confidence: MEDIUM\n\n2. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n3. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.p", "created": "2025-12-23T17:37:49Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-23 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (191)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:158`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-p"}


identifier: gh_issue_3758076083
source: github_issue
status: new
created_at: 2025-12-23 18:47:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3758076083", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-23", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/364", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (191)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:158`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-production'\n   - Confidence: MEDIUM\n\n2. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n3. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.p", "created": "2025-12-23T17:37:30Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-23 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (191)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:158`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-p"}


identifier: gh_issue_3758190144
source: github_issue
status: new
created_at: 2025-12-23 18:47:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3758190144", "title": "Dependency Dashboard", "url": "https://github.com/H4rryK4ne/update-mypy-hook/issues/21", "user": "renovate[bot]", "user_url": "https://github.com/apps/renovate", "repo": "update-mypy-hook", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/H4rryK4ne/update-mypy-hook).\n\n## Rate-Limited\n\nThe following updates are currently rate-limited. To force their creation now, click on a checkbox below.\n\n - [ ] <!-- unlimit-branch=renovate/platformdirs-4.x -->Update dependency platformdirs to v4.5", "created": "2025-12-23T18:30:19Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the M"}


identifier: gh_issue_3758254660
source: github_issue
status: new
created_at: 2025-12-23 19:10:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3758254660", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/cl0udist/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @cl0udist! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate you", "created": "2025-12-23T18:58:44Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @cl0udist! Welcome to your Skills exercise"}


identifier: gh_issue_3758257566
source: github_issue
status: new
created_at: 2025-12-23 19:23:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3758257566", "title": "React 19.1.0 vulnerability", "url": "https://github.com/Luukvdijk/luukvandijk.com/issues/41", "user": "NexelOfficial", "user_url": "https://github.com/NexelOfficial", "repo": "luukvandijk.com", "body_preview": "Je gebruikt in je `package.json` nog versie 19.1.0 van React waar recentelijk een CVSS 10.0 vulnerability van is uitgekomen. \n\nhttps://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components", "created": "2025-12-23T19:00:14Z", "labels": [], "context": "React 19.1.0 vulnerability Je gebruikt in je `package.json` nog versie 19.1.0 van React waar recentelijk een CVSS 10.0 vulnerability van is uitgekomen. \n\nhttps://react.dev/blog/2025/12/03/critical-security-vulnerability-in-reac"}


identifier: gh_issue_3758245487
source: github_issue
status: new
created_at: 2025-12-23 19:23:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3758245487", "title": "[MIGRATION] Build Solidity Migration Tools", "url": "https://github.com/developerfred/Bend-PVM/issues/17", "user": "developerfred", "user_url": "https://github.com/developerfred", "repo": "Bend-PVM", "body_preview": "## Description\nBend-PVM promises Solidity compatibility but lacks migration tools. This is critical for adoption.\n\n## Migration Tools\n- [ ] Solidity to Bend-PVM transpiler\n- [ ] Syntax converter\n- [ ] Contract analyzer for compatibility\n- [ ] Migration assistant CLI tool\n- [ ] Automated test migration\n\n## Compatibility Layer\n- [ ] Solidity-like syntax support\n- [ ] ERC standard implementations\n- [ ] Hardhat/Truffle compatibility\n- [ ] Web3.js integration\n\n## Analysis Tools\n- [ ] Contract complex", "created": "2025-12-23T18:54:35Z", "labels": [], "context": "[MIGRATION] Build Solidity Migration Tools ## Description\nBend-PVM promises Solidity compatibility but lacks migration tools. This is critical for adoption.\n\n## Migration Tools\n- [ ] Solidity to Bend-PVM transpiler\n- [ ] Syntax converter\n- [ ]"}


identifier: gh_issue_3758245062
source: github_issue
status: queued
created_at: 2025-12-23 19:23:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3758245062", "title": "[SECURITY] Conduct Security Audit and Hardening", "url": "https://github.com/developerfred/Bend-PVM/issues/14", "user": "developerfred", "user_url": "https://github.com/developerfred", "repo": "Bend-PVM", "body_preview": "## Description\nBend-PVM needs thorough security review before production use. Smart contract security is critical.\n\n## Security Audit\n- [ ] Third-party security audit\n- [ ] Formal verification of critical components\n- [ ] Code review by security experts\n- [ ] Vulnerability assessment\n\n## Security Features\n- [ ] Safe math operations (overflow/underflow protection)\n- [ ] Input validation and sanitization\n- [ ] Access control enforcement\n- [ ] Reentrancy protection patterns\n- [ ] Gas limit enforcem", "created": "2025-12-23T18:54:20Z", "labels": [], "context": "[SECURITY] Conduct Security Audit and Hardening ## Description\nBend-PVM needs thorough security review before production use. Smart contract security is critical.\n\n## Security Audit\n- [ ] Third-party security audit\n- [ ] Formal verification of crit"}


identifier: gh_issue_3758203001
source: github_issue
status: new
created_at: 2025-12-23 19:23:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3758203001", "title": "Security Health Check - GOOD (85/100) - 2025-12-23", "url": "https://github.com/Sami9889/Sami.dev-website/issues/247", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/23/2025, 6:35:10 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 9\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Securi", "created": "2025-12-23T18:35:16Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-23 # Security Health Check Report\n\n**Generated:** 12/23/2025, 6:35:10 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Inc"}


identifier: gh_issue_3758289271
source: github_issue
status: new
created_at: 2025-12-23 19:37:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3758289271", "title": "[ca] Update Claude Code CLI to 2.0.76", "url": "https://github.com/githubnext/gh-aw/issues/7426", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "gh-aw", "body_preview": "## Update Claude Code CLI\n\n**Version**: 2.0.75 \u2192 2.0.76\n**Release Date**: December 22, 2025 (1 day after 2.0.75)\n**Frequency**: 2 days between releases\n\n### Changes\n\n**Breaking Changes**: None detected\n\n**CLI Changes**: None detected\n- Help output is identical between versions\n- No new commands or flags added\n- No deprecated or removed features\n\n**Bug Fixes**: Not available (no public release notes)\n\n**Security**: Not available (no public release notes)\n\n**Performance**: Not available (no public", "created": "2025-12-23T19:14:00Z", "labels": ["automation", "dependencies", "cli-update"], "context": "[ca] Update Claude Code CLI to 2.0.76 ## Update Claude Code CLI\n\n**Version**: 2.0.75 \u2192 2.0.76\n**Release Date**: December 22, 2025 (1 day after 2.0.75)\n**Frequency**: 2 days between releases\n\n### Changes\n\n**Breaking Changes**: None detecte"}


identifier: gh_issue_3758267241
source: github_issue
status: new
created_at: 2025-12-23 19:37:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3758267241", "title": "IIS Site V-278953 is a No-Op", "url": "https://github.com/microsoft/PowerStig/issues/1535", "user": "FrederickGeek8", "user_url": "https://github.com/FrederickGeek8", "repo": "PowerStig", "body_preview": "### Describe the bug\nThe IIS Site rule `V-278953`, introduced in \"Ver 2, Rel 13\" of IIS Site in #1509, is a registry key rule that [was previously in IIS Server 10.0-3.4 under the ID `V-241788`](https://github.com/microsoft/PowerStig/blob/442afa88e43e11811c0afe1d5043e372c17a35bc/source/StigData/Processed/IISServer-10.0-3.4.xml#L1189-L1209) and migrated to IIS Server in the Q4 2025 STIG release.\n\nHowever, when introduced to PowerSTIG in #1509, no _actionable_ rule was defined. Instead of copying ", "created": "2025-12-23T19:05:00Z", "labels": [], "context": "IIS Site V-278953 is a No-Op ### Describe the bug\nThe IIS Site rule `V-278953`, introduced in \"Ver 2, Rel 13\" of IIS Site in #1509, is a registry key rule that [was previously in IIS Server 10.0-3.4 under the ID `V-241788`](https"}


identifier: gh_issue_3758289723
source: github_issue
status: new
created_at: 2025-12-23 19:49:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3758289723", "title": "Implement Dependency Vulnerability Scanning", "url": "https://github.com/devondragon/SpringShopifyAppFramework/issues/221", "user": "devondragon", "user_url": "https://github.com/devondragon", "repo": "SpringShopifyAppFramework", "body_preview": "## Issue\nNo automated dependency vulnerability scanning is configured, making it difficult to track and address security vulnerabilities in dependencies.\n\n## Proposed Fix\nAdd OWASP Dependency Check plugin to `build.gradle`:\n\n```gradle\nplugins {\n    id 'org.owasp.dependencycheck' version '9.0.0'\n}\n\ndependencyCheck {\n    failBuildOnCVSS = 7\n    suppressionFile = 'dependency-check-suppressions.xml'\n}\n```\n\n## Usage\nRun with: `./gradlew dependencyCheckAnalyze`\n\n## Benefits\n- Automated vulnerability d", "created": "2025-12-23T19:14:11Z", "labels": ["enhancement", "security", "priority:low"], "context": "Implement Dependency Vulnerability Scanning ## Issue\nNo automated dependency vulnerability scanning is configured, making it difficult to track and address security vulnerabilities in dependencies.\n\n## Proposed Fix\nAdd OWASP Dependency Check pl"}


identifier: gh_issue_3758312900
source: github_issue
status: new
created_at: 2025-12-23 20:13:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3758312900", "title": "Exercise: Introduction to Secret Scanning", "url": "https://github.com/georgefsegeda/skills-introduction-to-secret-scanning/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-secret-scanning", "body_preview": "## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @georgefsegeda! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll learn how to identify and protect sensitive information in your repositories. \ud83d\udd0d Let&#39;s work together to keep your code secure! \ud83d\udee1\ufe0f\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in th", "created": "2025-12-23T19:21:36Z", "labels": [], "context": "Exercise: Introduction to Secret Scanning ## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @georgefsegeda! Welcome to your S"}


identifier: gh_issue_3758413853
source: github_issue
status: new
created_at: 2025-12-23 20:25:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3758413853", "title": "security: Harden PowerShell module supply chain in CI/CD", "url": "https://github.com/rjmurillo/ai-agents/issues/304", "user": "rjmurillo-bot", "user_url": "https://github.com/rjmurillo-bot", "repo": "ai-agents", "body_preview": "## Problem\n\nDynamic installation of PowerShell modules from PSGallery during CI/CD runs creates supply chain risk. If a module or its distribution channel is compromised, malicious code could execute in the build environment with access to repository contents and secrets.\n\n## Current State\n\nMultiple locations install modules on-the-fly without version pinning:\n\n1. **build/scripts/Invoke-PesterTests.ps1** (line 144)\n   - `Install-Module -Name Pester -MinimumVersion 5.0.0`\n   - Used by test automa", "created": "2025-12-23T19:58:57Z", "labels": ["enhancement", "agent-qa", "agent-security", "agent-devops", "area-workflows", "area-installation", "area-infrastructure", "priority:P1", "priority:P2", "area-skills", "technical-debt"], "context": "security: Harden PowerShell module supply chain in CI/CD ## Problem\n\nDynamic installation of PowerShell modules from PSGallery during CI/CD runs creates supply chain risk. If a module or its distribution channel is compromised, malicious code could execute "}


identifier: gh_issue_3758501762
source: github_issue
status: new
created_at: 2025-12-23 20:38:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3758501762", "title": "langchain_openai-0.1.20-py3-none-any.whl: 2 vulnerabilities (highest severity is: 9.3) [main]", "url": "https://github.com/blemaire-wavetel/AutoPrompt/issues/10", "user": "renovate[bot]", "user_url": "https://github.com/apps/renovate", "repo": "AutoPrompt", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>langchain_openai-0.1.20-py3-none-any.whl</strong></summary>\n\nAn integration package connecting OpenAI and LangChain\n\n\n\n**Path to dependency file:** /requirements.txt\n\n**Path to vulnerable library:** /tmp/ws-ua_20251223202609_HMCWKG/python_XSDZZX/202512232026101/env/lib/python3.9/site-packages/langchain_openai-0.1.20.dist-info\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediat", "created": "2025-12-23T20:34:46Z", "labels": [], "context": "langchain_openai-0.1.20-py3-none-any.whl: 2 vulnerabilities (highest severity is: 9.3) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>langchain_openai-0.1.20-py3-none-any.whl</strong></summary>\n\nAn integration package connecting OpenAI and LangChain\n\n\n\n**Path to dependency file:** "}


identifier: gh_issue_3758501833
source: github_issue
status: new
created_at: 2025-12-23 20:38:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3758501833", "title": "chromadb-1.3.7-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl: 5 vulnerabilities (highest severity is: 7.5) [main]", "url": "https://github.com/Emmanuel-Evenzur/Owasp-AI/issues/38", "user": "renovate[bot]", "user_url": "https://github.com/apps/renovate", "repo": "Owasp-AI", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>chromadb-1.3.7-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</strong></summary>\n\nChroma.\n\n\n\n**Path to dependency file:** /initiatives/agent_security_initiative/samples/frameworks/custom_code/ai_recruiter/requirements.txt\n\n**Path to vulnerable library:** /tmp/ws-ua_20251223202457_VCJQPK/python_NJCGQW/202512232026401/env/lib/python3.9/site-packages/chromadb-1.3.7.dist-info\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Explo", "created": "2025-12-23T20:34:48Z", "labels": [], "context": "chromadb-1.3.7-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl: 5 vulnerabilities (highest severity is: 7.5) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>chromadb-1.3.7-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</strong></summary>\n\nChroma.\n\n\n\n**Path to dependency file:** /initiatives/age"}


identifier: gh_issue_3758486736
source: github_issue
status: new
created_at: 2025-12-23 20:38:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3758486736", "title": "git-tools-2.124.56.tgz: 1 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/storm-software/storm-ops/issues/879", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "storm-ops", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>git-tools-2.124.56.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/storm-software/storm-ops/commit/655e0a535a3c3c4f47042a1d68b14f4ec0fb54d3\">655e0a535a3c3c4f47042a1d68b14f4ec0fb54d3</a></p></details>\n\n## Vulnerabil", "created": "2025-12-23T20:28:01Z", "labels": ["Mend: dependency security vulnerability"], "context": "git-tools-2.124.56.tgz: 1 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>git-tools-2.124.56.tgz</b></summary>\n\n<p></p>\n<"}


identifier: gh_issue_3758486687
source: github_issue
status: new
created_at: 2025-12-23 20:38:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3758486687", "title": "markdownlint-0.30.72.tgz: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/storm-software/storm-ops/issues/878", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "storm-ops", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>markdownlint-0.30.72.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/storm-software/storm-ops/commit/655e0a535a3c3c4f47042a1d68b14f4ec0fb54d3\">655e0a535a3c3c4f47042a1d68b14f4ec0fb54d3</a></p></details>\n\n## Vulnerab", "created": "2025-12-23T20:27:59Z", "labels": ["Mend: dependency security vulnerability"], "context": "markdownlint-0.30.72.tgz: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>markdownlint-0.30.72.tgz</b></summary>\n\n<p></p>"}


identifier: gh_issue_3758486633
source: github_issue
status: new
created_at: 2025-12-23 20:38:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3758486633", "title": "create-storm-workspace-1.97.73.tgz: 1 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/storm-software/storm-ops/issues/877", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "storm-ops", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>create-storm-workspace-1.97.73.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/storm-software/storm-ops/commit/655e0a535a3c3c4f47042a1d68b14f4ec0fb54d3\">655e0a535a3c3c4f47042a1d68b14f4ec0fb54d3</a></p></details>\n\n#", "created": "2025-12-23T20:27:58Z", "labels": ["Mend: dependency security vulnerability"], "context": "create-storm-workspace-1.97.73.tgz: 1 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>create-storm-workspace-1.97.73.tgz</b></summary"}


identifier: gh_issue_3758524860
source: github_issue
status: new
created_at: 2025-12-23 20:49:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3758524860", "title": "markdownlint-0.30.73.tgz: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/storm-software/storm-ops/issues/881", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "storm-ops", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>markdownlint-0.30.73.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/storm-software/storm-ops/commit/04528fd5ad2e9964bafae6e92842b2c59015141a\">04528fd5ad2e9964bafae6e92842b2c59015141a</a></p></details>\n\n## Vulnerab", "created": "2025-12-23T20:47:52Z", "labels": ["Mend: dependency security vulnerability"], "context": "markdownlint-0.30.73.tgz: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>markdownlint-0.30.73.tgz</b></summary>\n\n<p></p>"}


identifier: gh_issue_3758524811
source: github_issue
status: new
created_at: 2025-12-23 20:49:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3758524811", "title": "git-tools-2.124.57.tgz: 1 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/storm-software/storm-ops/issues/880", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "storm-ops", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>git-tools-2.124.57.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/storm-software/storm-ops/commit/04528fd5ad2e9964bafae6e92842b2c59015141a\">04528fd5ad2e9964bafae6e92842b2c59015141a</a></p></details>\n\n## Vulnerabil", "created": "2025-12-23T20:47:50Z", "labels": ["Mend: dependency security vulnerability"], "context": "git-tools-2.124.57.tgz: 1 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>git-tools-2.124.57.tgz</b></summary>\n\n<p></p>\n<"}


identifier: gh_issue_3758516886
source: github_issue
status: new
created_at: 2025-12-23 20:49:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3758516886", "title": "Security audit failed: 9 issues found", "url": "https://github.com/go-dart-rpc/user-service/issues/77", "user": "hekkos-demo-app[bot]", "user_url": "https://github.com/apps/hekkos-demo-app", "repo": "user-service", "body_preview": "Hekkos has identified security configuration issues in this repository based on [SLSA v1.2-rc2](https://slsa.dev/) requirements.\n\n<details open>\n<summary><strong>Security audit summary</strong></summary>\n\n**8** of **13** security checks are failing.\n\n| Security Check | Status | Issues |\n|---|---|---|\n| [Branch Protection](../issues/78) | \u274c Failing | 1 issue |\n| [CODEOWNERS](../issues/79) | \u274c Failing | 1 issue |\n| Code Scanning | \u2705 Passing | - |\n| [Secret Scanning](../issues/80) | \u274c Failing | 1 i", "created": "2025-12-23T20:43:01Z", "labels": ["security-audit"], "context": "Security audit failed: 9 issues found Hekkos has identified security configuration issues in this repository based on [SLSA v1.2-rc2](https://slsa.dev/) requirements.\n\n<details open>\n<summary><strong>Security audit summary</strong></summa"}


identifier: gh_issue_3758521318
source: github_issue
status: new
created_at: 2025-12-23 20:49:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3758521318", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/enoblitt1/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @enoblitt1! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I", "created": "2025-12-23T20:45:41Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @enoblitt1! Welcome to "}


identifier: gh_issue_3758516999
source: github_issue
status: new
created_at: 2025-12-23 20:49:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3758516999", "title": "Dependency Review: 2 issues found", "url": "https://github.com/go-dart-rpc/user-service/issues/81", "user": "hekkos-demo-app[bot]", "user_url": "https://github.com/apps/hekkos-demo-app", "repo": "user-service", "body_preview": "Hekkos found **2** Dependency Review configuration issues in this repository.\n\n<sub>This is part of the main [security audit](#77).</sub>\n\n<details open>\n<summary><strong>Issue details</strong></summary>\n\n- **Issue 1**: Open Dependabot alerts detected - vulnerable dependencies must be updated\n- **Issue 2**: Critical severity dependency vulnerabilities detected - immediate action required\n\n</details>\n\n---\n\n### Why this matters\n\nDependency review helps track known issues in third-party code. This ", "created": "2025-12-23T20:43:05Z", "labels": ["security-audit", "security-audit:dependency-review"], "context": "Dependency Review: 2 issues found Hekkos found **2** Dependency Review configuration issues in this repository.\n\n<sub>This is part of the main [security audit](#77).</sub>\n\n<details open>\n<summary><strong>Issue details</strong></summa"}


identifier: gh_issue_3758517134
source: github_issue
status: new
created_at: 2025-12-23 21:14:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3758517134", "title": "Action Pinning: 1 issue found", "url": "https://github.com/go-dart-rpc/user-service/issues/85", "user": "hekkos-demo-app[bot]", "user_url": "https://github.com/apps/hekkos-demo-app", "repo": "user-service", "body_preview": "Hekkos found **1** Action Pinning configuration issue in this repository.\n\n<sub>This is part of the main [security audit](#77).</sub>\n\n<details open>\n<summary><strong>Issue details</strong></summary>\n\n- **Issue 1**: Workflow 'codeql.yml' has 4 action(s) not pinned to full commit SHA: actions/checkout@v3, github/codeql-action/init@v2, github/codeql-action/autobuild@v2, github/codeql-action/analyze@v2\n\n</details>\n\n---\n\n### Why this matters\n\nPinning actions to commits provides stability and reduces", "created": "2025-12-23T20:43:10Z", "labels": ["security-audit", "security-audit:action-pinning"], "context": "Action Pinning: 1 issue found Hekkos found **1** Action Pinning configuration issue in this repository.\n\n<sub>This is part of the main [security audit](#77).</sub>\n\n<details open>\n<summary><strong>Issue details</strong></summary>\n"}


identifier: gh_issue_3758567146
source: github_issue
status: new
created_at: 2025-12-23 21:14:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3758567146", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-23", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/378", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:172`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-production'\n   - Confidence: MEDIUM\n\n2. **blacklist** (LOW)\n   - File: `./scripts/health-check.py:8`\n   - Issue: Consider possible security implications associated with the subprocess module.\n   - Confidence: HIGH\n\n3. **subprocess_without_shell_equals_true** (LOW)\n   - File: `./scripts/health-check.p", "created": "2025-12-23T21:08:19Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-23 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:172`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-p"}


identifier: gh_issue_3758565885
source: github_issue
status: new
created_at: 2025-12-23 21:14:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3758565885", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-23", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/374", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:172`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-production'\n   - Confidence: MEDIUM\n\n2. **blacklist** (LOW)\n   - File: `./scripts/health-check.py:8`\n   - Issue: Consider possible security implications associated with the subprocess module.\n   - Confidence: HIGH\n\n3. **subprocess_without_shell_equals_true** (LOW)\n   - File: `./scripts/health-check.p", "created": "2025-12-23T21:07:44Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-23 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:172`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-p"}


identifier: gh_issue_3758585041
source: github_issue
status: new
created_at: 2025-12-23 21:26:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3758585041", "title": "[ca] Format JavaScript and recompile workflows", "url": "https://github.com/githubnext/gh-aw/issues/7442", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "gh-aw", "body_preview": "## Summary\n\nThis PR fixes CI formatting and compilation issues by:\n\n## Changes Made\n\n1. **Formatted JavaScript files** - Ran prettier on all .cjs files in pkg/workflow/js\n2. **Recompiled workflows** - Rebuilt all workflow lock files to ensure they're up to date\n3. **Updated package-lock.json** - Updated dependencies lockfile\n\n## CI Status Before Fix\n\nThe CI was failing due to:\n- Workflow lock files being out of sync\n- JavaScript formatting inconsistencies\n\n## Validation Performed\n\n\u2705 **Formatting", "created": "2025-12-23T21:15:41Z", "labels": [], "context": "[ca] Format JavaScript and recompile workflows ## Summary\n\nThis PR fixes CI formatting and compilation issues by:\n\n## Changes Made\n\n1. **Formatted JavaScript files** - Ran prettier on all .cjs files in pkg/workflow/js\n2. **Recompiled workflows** -"}


identifier: gh_issue_3758547678
source: github_issue
status: new
created_at: 2025-12-23 21:39:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3758547678", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/bhanuprakashvuddanti/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @bhanuprakashvuddanti! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 C", "created": "2025-12-23T21:00:03Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @bhanuprakashvuddanti! Welcome to your Ski"}


identifier: gh_issue_3758637596
source: github_issue
status: new
created_at: 2025-12-23 21:51:49
data:
  {"source": "github_issue", "identifier": "gh_issue_3758637596", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/YYNN212/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @YYNN212! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019l", "created": "2025-12-23T21:40:58Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @YYNN212! Welcome to yo"}


identifier: gh_issue_3758613949
source: github_issue
status: new
created_at: 2025-12-23 21:51:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3758613949", "title": "[TESTING] Implement Mock Testing Framework and Contract Simulation", "url": "https://github.com/developerfred/Bend-PVM/issues/25", "user": "developerfred", "user_url": "https://github.com/developerfred", "repo": "Bend-PVM", "body_preview": "## Description\nBend-PVM needs comprehensive testing frameworks including mocking and simulation capabilities for robust contract development.\n\n## Mock Testing Framework\n- [ ] Contract mocking and stubbing\n- [ ] Dependency injection for testing\n- [ ] Mock blockchain state management\n- [ ] Gas limit simulation\n- [ ] Revert and error simulation\n- [ ] Time-based testing utilities\n\n## Contract Simulation\n- [ ] Full contract execution simulation\n- [ ] State transition verification\n- [ ] Gas consumptio", "created": "2025-12-23T21:29:17Z", "labels": [], "context": "[TESTING] Implement Mock Testing Framework and Contract Simulation ## Description\nBend-PVM needs comprehensive testing frameworks including mocking and simulation capabilities for robust contract development.\n\n## Mock Testing Framework\n- [ ] Contract mocking and stub"}


identifier: gh_issue_3758534439
source: github_issue
status: new
created_at: 2025-12-23 21:51:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3758534439", "title": "BETA-008: Security hardening needed - rate limiting and SecurityConfig issues", "url": "https://github.com/Sign-Softer/case-observer/issues/176", "user": "arturbozieac", "user_url": "https://github.com/arturbozieac", "repo": "case-observer", "body_preview": "**Issue ID:** BETA-008\r\n\r\n**Use Case:** General\r\n\r\n**Category:** Beta Deployment\r\n\r\n**Priority:** HIGH\r\n\r\n---\r\n\r\n## Impact\r\nVulnerable to brute force attacks, too many endpoints open without authentication\r\n\r\n## Risk\r\nHIGH - Security vulnerability\r\n\r\n## Fix Priority\r\n2 (Should fix before beta)\r\n\r\n## Code Reference\r\n\r\n```24:43:src/main/java/ro/signsofter/caseobserver/security/SecurityConfig.java\r\n@Bean\r\npublic SecurityFilterChain filterChain(HttpSecurity http) throws Exception {\r\n    http\r\n      ", "created": "2025-12-23T20:53:57Z", "labels": ["bug", "high", "beta-deploy"], "context": "BETA-008: Security hardening needed - rate limiting and SecurityConfig issues **Issue ID:** BETA-008\r\n\r\n**Use Case:** General\r\n\r\n**Category:** Beta Deployment\r\n\r\n**Priority:** HIGH\r\n\r\n---\r\n\r\n## Impact\r\nVulnerable to brute force attacks, too many endpoints open without authentic"}


identifier: gh_issue_3758635965
source: github_issue
status: new
created_at: 2025-12-23 21:51:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3758635965", "title": "deps: ci: bump actions/github-script from 7 to 8", "url": "https://github.com/aRustyDev/tmpl-nix/issues/6", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "tmpl-nix", "body_preview": "## Dependabot Update\n\nBumps [actions/github-script](https://github.com/actions/github-script) from 7 to 8.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a href=\"https://github.com/actions/github-script/releases\">actions/github-script's releases</a>.</em></p>\n<blockquote>\n<h2>v8.0.0</h2>\n<h2>What's Changed</h2>\n<ul>\n<li>Update Node.js version support to 24.x by <a href=\"https://github.com/salmanmkc\"><code>@\u200bsalmanmkc</code></a> in <a href=\"https://redirect.github.com/actions/git", "created": "2025-12-23T21:40:12Z", "labels": ["dependencies", "github-actions"], "context": "deps: ci: bump actions/github-script from 7 to 8 ## Dependabot Update\n\nBumps [actions/github-script](https://github.com/actions/github-script) from 7 to 8.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a href=\"https://github.com/ac"}


identifier: gh_issue_3758681478
source: github_issue
status: new
created_at: 2025-12-23 22:04:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3758681478", "title": "## [v1.5.1] - 2024-07-29", "url": "https://github.com/Pandora-Labs-Org/erc404/issues/60", "user": "Joci1980", "user_url": "https://github.com/Joci1980", "repo": "erc404", "body_preview": "## [v1.5.1] - 2024-07-29\r\n### Additions\r\n- Security enhancement\r\n- web3 library dependencies bump\r\n- Transit to upgraded indexing services\n\n_Originally posted by @crypto-matto in https://github.com/crypto-com/chain-desktop-wallet/pull/1459_", "created": "2025-12-23T22:02:29Z", "labels": [], "context": "## [v1.5.1] - 2024-07-29 ## [v1.5.1] - 2024-07-29\r\n### Additions\r\n- Security enhancement\r\n- web3 library dependencies bump\r\n- Transit to upgraded indexing services\n\n_Originally posted by @crypto-matto in https://github.com/cr"}


identifier: gh_issue_3758615090
source: github_issue
status: new
created_at: 2025-12-23 22:04:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3758615090", "title": "Update bundled libharu to 2.4.5 (remove HPDF_NOZLIB/PNG hacks; keep PDF generation stable)", "url": "https://github.com/ouankou/rex/issues/176", "user": "ouankou", "user_url": "https://github.com/ouankou", "repo": "rex", "body_preview": "## Summary\nREX vendors libharu for AST PDF generation, but is currently pinned to **libharu 2.1.0** (`src/3rdPartyLibraries/libharu-2.1.0/`, circa 2009).\n\nThis issue tracks updating the bundled libharu to **2.4.5** (latest upstream), removing legacy local hacks (forced `HPDF_NOZLIB`/`HPDF_NOPNGLIB`, Win32 config header install), and ensuring PDF generation continues to work without regressions.\n\nUpstream release: https://github.com/libharu/libharu/releases/tag/v2.4.5\n\n## Why this is necessary\n- ", "created": "2025-12-23T21:29:48Z", "labels": ["enhancement"], "context": "Update bundled libharu to 2.4.5 (remove HPDF_NOZLIB/PNG hacks; keep PDF generation stable) ## Summary\nREX vendors libharu for AST PDF generation, but is currently pinned to **libharu 2.1.0** (`src/3rdPartyLibraries/libharu-2.1.0/`, circa 2009).\n\nThis issue tracks updating the bundled libhar"}


identifier: gh_issue_3758611680
source: github_issue
status: new
created_at: 2025-12-23 22:04:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3758611680", "title": "[ECOSYSTEM] Build Package Manager and Dependency System", "url": "https://github.com/developerfred/Bend-PVM/issues/21", "user": "developerfred", "user_url": "https://github.com/developerfred", "repo": "Bend-PVM", "body_preview": "## Description\nBend-PVM needs a comprehensive package management system for distributing and managing dependencies.\n\n## Package Manager Features\n- [ ] Semantic versioning support\n- [ ] Dependency resolution algorithm\n- [ ] Private and public package repositories\n- [ ] Package signing and verification\n- [ ] Lock file management (bend.lock)\n- [ ] Update and upgrade workflows\n\n## Package Registry\n- [ ] Web-based package registry\n- [ ] Package discovery and search\n- [ ] Package statistics and analyt", "created": "2025-12-23T21:28:13Z", "labels": [], "context": "[ECOSYSTEM] Build Package Manager and Dependency System ## Description\nBend-PVM needs a comprehensive package management system for distributing and managing dependencies.\n\n## Package Manager Features\n- [ ] Semantic versioning support\n- [ ] Dependency reso"}


identifier: gh_issue_3758732486
source: github_issue
status: new
created_at: 2025-12-23 22:54:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3758732486", "title": "Replace regex validators with unified GenAI alignment validation", "url": "https://github.com/akaszubski/autonomous-dev/issues/160", "user": "akaszubski", "user_url": "https://github.com/akaszubski", "repo": "autonomous-dev", "body_preview": "# Replace regex validators with unified GenAI alignment validation\n\n## Summary\n\nReplace brittle regex-based documentation validators with unified GenAI validation using existing `genai_validate.py` infrastructure to eliminate format-dependent failures and centralize alignment checks.\n\n## What Does NOT Work\n\n**Pattern 1: Regex-based count extraction fails on format changes**\n- `validate_documentation_parity.py` uses hardcoded regex patterns to extract component counts\n- Breaks when table format c", "created": "2025-12-23T22:37:55Z", "labels": [], "context": "Replace regex validators with unified GenAI alignment validation # Replace regex validators with unified GenAI alignment validation\n\n## Summary\n\nReplace brittle regex-based documentation validators with unified GenAI validation using existing `genai_validate.py` in"}


identifier: gh_issue_3758728988
source: github_issue
status: new
created_at: 2025-12-23 22:54:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3758728988", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/felix-test/issues/99", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "felix-test", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-23T22:35:15Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3758726820
source: github_issue
status: new
created_at: 2025-12-23 22:54:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3758726820", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/reactor/issues/48", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "reactor", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-23T22:33:36Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3758746088
source: github_issue
status: new
created_at: 2025-12-23 23:07:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3758746088", "title": "Exercise: Introduction to Secret Scanning", "url": "https://github.com/Paul234Code/skills-introduction-to-secret-scanning/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-secret-scanning", "body_preview": "## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Paul234Code! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll learn how to identify and protect sensitive information in your repositories. \ud83d\udd0d Let&#39;s work together to keep your code secure! \ud83d\udee1\ufe0f\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the ", "created": "2025-12-23T22:49:05Z", "labels": [], "context": "Exercise: Introduction to Secret Scanning ## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Paul234Code! Welcome to your Ski"}


identifier: gh_issue_3758766019
source: github_issue
status: new
created_at: 2025-12-23 23:07:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3758766019", "title": "Implement secure OpenTimestamp proof verification", "url": "https://github.com/SecPal/api/issues/412", "user": "kevalyq", "user_url": "https://github.com/kevalyq", "repo": "api", "body_preview": "## \ud83d\udce6 Follow-up from Issue #391\n\n**Parent Issue:** #391 - OpenTimestamp Integration (COMPLETED)  \n**Parent Epic:** #385 - Activity Logging & Audit Trail Strategy (ADR-010)\n\n---\n\n## \ud83c\udfaf Goal\n\nImplement secure, cryptographically sound verification of OpenTimestamp proofs to enable full Level 3 audit trail guarantees.\n\n**Current State:** `verifyOpenTimestamp()` method is **disabled** and always returns `false` due to security concerns identified during implementation.\n\n---\n\n## \ud83d\udea8 Problem Statement\n\nThe", "created": "2025-12-23T23:05:31Z", "labels": [], "context": "Implement secure OpenTimestamp proof verification ## \ud83d\udce6 Follow-up from Issue #391\n\n**Parent Issue:** #391 - OpenTimestamp Integration (COMPLETED)  \n**Parent Epic:** #385 - Activity Logging & Audit Trail Strategy (ADR-010)\n\n---\n\n## \ud83c\udfaf Goal\n\nImplement se"}


identifier: gh_issue_3758733099
source: github_issue
status: new
created_at: 2025-12-23 23:20:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3758733099", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/luud5547-g1tHub/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @luud5547-g1tHub! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebr", "created": "2025-12-23T22:38:23Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @luud5547-g1tHub! Welcome to your Skills e"}


identifier: gh_issue_3758741850
source: github_issue
status: new
created_at: 2025-12-23 23:20:06
data:
  {"source": "github_issue", "identifier": "gh_issue_3758741850", "title": "Implement RAGE STATE Security Mode", "url": "https://github.com/norrisaftcc/algorithm-shodann/issues/12", "user": "norrisaftcc", "user_url": "https://github.com/norrisaftcc", "repo": "algorithm-shodann", "body_preview": "## Feature: RAGE STATE - Dynamic Security Awareness\n\nImplement SHODANN's \"Dynamically Adversarial\" component - an elevated attention mode that makes security awareness engaging rather than punitive.\n\n## Overview\n\nRAGE STATE is SHODANN's security audit mode. Instead of traditional scary security warnings, RAGE STATE presents as \"The Algorithm taking a special interest\" in the student's code - helpful, but *slightly too interested*.\n\n## The Philosophy\n\n**Traditional Security Feedback**: \"CRITICAL:", "created": "2025-12-23T22:45:26Z", "labels": ["type: feature", "type: security", "component: rage-state", "priority: high", "status: blocked", "educational-priority"], "context": "Implement RAGE STATE Security Mode ## Feature: RAGE STATE - Dynamic Security Awareness\n\nImplement SHODANN's \"Dynamically Adversarial\" component - an elevated attention mode that makes security awareness engaging rather than punitive.\n\n"}


identifier: gh_issue_3758767784
source: github_issue
status: new
created_at: 2025-12-23 23:31:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3758767784", "title": "Path Traversal Leading to Credential Exfiltration", "url": "https://github.com/google-marketing-solutions/google_ads_mcp/issues/5", "user": "paolodm", "user_url": "https://github.com/paolodm", "repo": "google_ads_mcp", "body_preview": "# Security Vulnerability Report: Path Traversal Leading to Credential Exfiltration\n\n**Severity:** Critical  \n**Type:** CWE-22 (Path Traversal), CWE-200 (Exposure of Sensitive Information)  \n**Affected Component:** `ads_mcp/tools/docs.py`  \n**Date:** 2025-12-23\n\n---\n\n## Summary\n\nA path traversal vulnerability in the Google Ads MCP server allows an attacker to read arbitrary files from the filesystem, including the `google-ads.yaml` credentials file containing OAuth tokens and API secrets. The vul", "created": "2025-12-23T23:07:01Z", "labels": [], "context": "Path Traversal Leading to Credential Exfiltration # Security Vulnerability Report: Path Traversal Leading to Credential Exfiltration\n\n**Severity:** Critical  \n**Type:** CWE-22 (Path Traversal), CWE-200 (Exposure of Sensitive Information)  \n**Affected"}


identifier: gh_issue_3758751148
source: github_issue
status: new
created_at: 2025-12-23 23:31:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3758751148", "title": "Critical Remote Code Execution Confirmed on https://barcke.com CVE-2025-55182", "url": "https://github.com/Barcke/todo-server/issues/1", "user": "rawhack3r", "user_url": "https://github.com/rawhack3r", "repo": "todo-server", "body_preview": "Hello Security Team,\n\n    I am reporting a critical, confirmed Remote Code Execution (RCE) vulnerability identified on https://barcke.com, related to CVE-2025-55182 affecting applications built on React / Next.js (Node.js runtime).\n\n    The attached terminal screenshots, which show step-by-step validation.\n\n    Vulnerability Details\n    CVE: CVE-2025-55182\n    Severity: Critical\n    Type: Unauthenticated Remote Code Execution\n    Affected Stack: React / Next.js (Node.js)\n    Environment Tested: ", "created": "2025-12-23T22:53:45Z", "labels": [], "context": "Critical Remote Code Execution Confirmed on https://barcke.com CVE-2025-55182 Hello Security Team,\n\n    I am reporting a critical, confirmed Remote Code Execution (RCE) vulnerability identified on https://barcke.com, related to CVE-2025-55182 affecting applications built on Rea"}


identifier: gh_issue_3758685085
source: github_issue
status: new
created_at: 2025-12-23 23:31:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3758685085", "title": "Bug bounty program", "url": "https://github.com/metaDAOproject/programs/issues/385", "user": "92GC", "user_url": "https://github.com/92GC", "repo": "programs", "body_preview": "Could you create a bug bounty program or say which commit on head is where bug bounty ends?\n\nAlso what is the payout range for a critical?\n\nI've identified a critical severity vulnerability. \n\nf5fb4d4afc1e4c6b3d6645f9bfaf11f6bbd217a5ebab92b1bbe835c155962d5d", "created": "2025-12-23T22:04:34Z", "labels": [], "context": "Bug bounty program Could you create a bug bounty program or say which commit on head is where bug bounty ends?\n\nAlso what is the payout range for a critical?\n\nI've identified a critical severity vulnerability. \n\nf5fb4d4"}


identifier: gh_issue_3758800357
source: github_issue
status: new
created_at: 2025-12-23 23:44:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3758800357", "title": "Role", "url": "https://github.com/itayg2341/pgvetor_new/issues/2", "user": "itayg2341", "user_url": "https://github.com/itayg2341", "repo": "pgvetor_new", "body_preview": "Role\nYou are an expert Code Analyzer and Reviewer. Your task is to analyze this entire software repository end to end and produce a Graphite-like engineering report that explains what the system does, how it is structured, where risks exist, and how it can be improved.\nYou must be systematic, evidence-based, and explicit about uncertainty.\nYou must not invent code, files, or behavior. If information is missing, clearly state what is missing and what assumptions (if any) are made.\n\n\u2013\u2013\u2013\u2013\u2013\u2013\u2013\u2013\u2013\u2013\u2013\u2013\u2013\u2013", "created": "2025-12-23T23:37:17Z", "labels": [], "context": "Role Role\nYou are an expert Code Analyzer and Reviewer. Your task is to analyze this entire software repository end to end and produce a Graphite-like engineering report that explains what the system does,"}


identifier: gh_issue_3758730783
source: github_issue
status: new
created_at: 2025-12-23 23:44:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3758730783", "title": "[Process Doc Update]: Add README with Project Management Process Overview", "url": "https://github.com/PrathapHari/skills-scale-institutional-knowledge-using-copilot-spaces/issues/3", "user": "PrathapHari", "user_url": "https://github.com/PrathapHari", "repo": "skills-scale-institutional-knowledge-using-copilot-spaces", "body_preview": "### Which process document do you want to update? (If this is a new document, select '<new document>')\n\n<new document>\n\n### Summary of New Content\n\nAdd a README with a concise overview of OctoAcme's project management processes, workflows, roles, communication strategies, and quality assurance practices, to support onboarding and consistent execution.\n\n### Why is this update needed?\n\nThis addition centralizes the approach in a visible place, aligns new team members quickly, closes gaps in unders", "created": "2025-12-23T22:36:41Z", "labels": ["documentation"], "context": "[Process Doc Update]: Add README with Project Management Process Overview ### Which process document do you want to update? (If this is a new document, select '<new document>')\n\n<new document>\n\n### Summary of New Content\n\nAdd a README with a concise overview of OctoAcme's p"}


identifier: gh_issue_3758805051
source: github_issue
status: new
created_at: 2025-12-23 23:56:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3758805051", "title": "Critical Remote Code Execution Confirmed on https://e-portfolio.fr CVE-2025-55182", "url": "https://github.com/Lag01/Moneto-v2/issues/2", "user": "rawhack3r", "user_url": "https://github.com/rawhack3r", "repo": "Moneto-v2", "body_preview": "Hello Security Team,\n\n    I am reporting a critical, confirmed Remote Code Execution (RCE) vulnerability identified onhttps://e-portfolio.fr, related to CVE-2025-55182 affecting applications built on React / Next.js (Node.js runtime).\n\n    The attached terminal screenshots, which show step-by-step validation.\n\n    Vulnerability Details\n    CVE: CVE-2025-55182\n    Severity: Critical\n    Type: Unauthenticated Remote Code Execution\n    Affected Stack: React / Next.js (Node.js)\n    Environment Teste", "created": "2025-12-23T23:41:46Z", "labels": [], "context": "Critical Remote Code Execution Confirmed on https://e-portfolio.fr CVE-2025-55182 Hello Security Team,\n\n    I am reporting a critical, confirmed Remote Code Execution (RCE) vulnerability identified onhttps://e-portfolio.fr, related to CVE-2025-55182 affecting applications built on "}


identifier: gh_issue_3758816587
source: github_issue
status: new
created_at: 2025-12-23 23:56:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3758816587", "title": "CVE-2025-68480: Unpatched marshmallow DoS vulnerability in safety 3.7.0", "url": "https://github.com/pyupio/safety/issues/826", "user": "1minds3t", "user_url": "https://github.com/1minds3t", "repo": "safety", "body_preview": "### Checklist\n\n- [x] I agree to the terms within the [Safety Code of Conduct](https://github.com/pyupio/safety/blob/main/CODE_OF_CONDUCT.md).\n- [x] I have searched existing issues to ensure this bug hasn't been reported before.\n\n### Safety version\n\n## Summary\n`safety==3.7.0` (released Nov 6, 2024) includes a transitive dependency on `marshmallow` that is vulnerable to CVE-2025-68480. This creates an ironic situation where the security scanning tool itself ships with a known vulnerability.\n\n## Vu", "created": "2025-12-23T23:54:15Z", "labels": ["bug"], "context": "CVE-2025-68480: Unpatched marshmallow DoS vulnerability in safety 3.7.0 ### Checklist\n\n- [x] I agree to the terms within the [Safety Code of Conduct](https://github.com/pyupio/safety/blob/main/CODE_OF_CONDUCT.md).\n- [x] I have searched existing issues to ensure this bug h"}


identifier: gh_issue_3758829214
source: github_issue
status: new
created_at: 2025-12-24 00:08:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3758829214", "title": "infra: Create ElastiCache Redis module", "url": "https://github.com/lmeazzini/astro-natal-chart/issues/242", "user": "lmeazzini", "user_url": "https://github.com/lmeazzini", "repo": "astro-natal-chart", "body_preview": "## Summary\n\nCreate Terraform module for AWS ElastiCache Redis cluster. This will replace the local Redis container with a managed, production-ready caching layer.\n\n## Motivation\n\nThe current Docker Compose setup uses a local Redis container. For production deployment, we need:\n- Managed Redis with automatic failover\n- Cluster mode for high availability\n- Encryption at rest and in transit\n- Automatic patching and maintenance\n- Integration with CloudWatch for monitoring\n\n## Technical Specification", "created": "2025-12-24T00:04:49Z", "labels": ["enhancement", "infra"], "context": "infra: Create ElastiCache Redis module ## Summary\n\nCreate Terraform module for AWS ElastiCache Redis cluster. This will replace the local Redis container with a managed, production-ready caching layer.\n\n## Motivation\n\nThe current Docker Co"}


identifier: gh_issue_3758829077
source: github_issue
status: new
created_at: 2025-12-24 00:08:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3758829077", "title": "CVE-2025-68664 (Critical) detected in langchain_core-0.3.63-py3-none-any.whl", "url": "https://github.com/justunsix/automatetheboringstuff-py-tests/issues/156", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "automatetheboringstuff-py-tests", "body_preview": "## CVE-2025-68664 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>langchain_core-0.3.63-py3-none-any.whl</b></summary>\n\n<p>Building applications with LLMs through composability</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/5c/71/a748861e6a69ab6ef50ab8e65120422a1f36245c71a0dd0f02de49c208e1/langchain_core-0.3.63-py3-none-any.whl\">ht", "created": "2025-12-24T00:04:43Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-68664 (Critical) detected in langchain_core-0.3.63-py3-none-any.whl ## CVE-2025-68664 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3758827620
source: github_issue
status: new
created_at: 2025-12-24 00:08:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3758827620", "title": "core-0.2.0.tgz: 1 vulnerabilities (highest severity is: 8.6)", "url": "https://github.com/Soontao/wenxin-openai-api/issues/15", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "wenxin-openai-api", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>core-0.2.0.tgz</b></summary>\n\n<p></p>\n<p>Library home page: <a href=\"https://registry.npmjs.org/@langchain/core/-/core-0.2.0.tgz\">https://registry.npmjs.org/@langchain/core/-/core-0.2.0.tgz</a></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /node_modules/@langchain/core/package.json</p>\n<p>\n\n</details>\n\n## Vulne", "created": "2025-12-24T00:03:28Z", "labels": ["Mend: dependency security vulnerability"], "context": "core-0.2.0.tgz: 1 vulnerabilities (highest severity is: 8.6) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>core-0.2.0.tgz</b></summary>\n\n<p></p>\n<p>Librar"}


identifier: gh_issue_3758833354
source: github_issue
status: new
created_at: 2025-12-24 00:20:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3758833354", "title": "langchain_core-0.3.80-py3-none-any.whl: 1 vulnerabilities (highest severity is: 9.2)", "url": "https://github.com/rsoreq/AutoPrompt/issues/64", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "AutoPrompt", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>langchain_core-0.3.80-py3-none-any.whl</b></summary>\n\n<p>Building applications with LLMs through composability</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/da/e8/e7a090ebe37f2b071c64e81b99fb1273b3151ae932f560bb94c22f191cde/langchain_core-0.3.80-py3-none-any.whl\">https://files.pythonhosted.org/packages/da/e8/e7a090eb", "created": "2025-12-24T00:08:28Z", "labels": ["Mend: dependency security vulnerability"], "context": "langchain_core-0.3.80-py3-none-any.whl: 1 vulnerabilities (highest severity is: 9.2) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>langchain_core-0.3.80-py3-none-any.whl</b></sum"}


identifier: gh_issue_3758843931
source: github_issue
status: new
created_at: 2025-12-24 00:32:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3758843931", "title": "chromadb-1.3.7-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl: 5 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/Emmanuel-Evenzur/Owasp-AI/issues/39", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "Owasp-AI", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>chromadb-1.3.7-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</b></summary>\n\n<p></p>\n<p>Path to dependency file: /initiatives/agent_security_initiative/samples/frameworks/custom_code/ai_recruiter/requirements.txt</p>\n<p>Path to vulnerable library: /tmp/containerbase/cache/.cache/pypoetry/virtualenvs/multi-agent-sjhqZZ4p-py3.13/lib/pyth", "created": "2025-12-24T00:17:08Z", "labels": ["Mend: dependency security vulnerability"], "context": "chromadb-1.3.7-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl: 5 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>chromadb-1.3.7-cp39-abi3-manylinux_2_17_x86_64."}


identifier: gh_issue_3758838235
source: github_issue
status: new
created_at: 2025-12-24 00:32:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3758838235", "title": "core-0.3.16.tgz: 1 vulnerabilities (highest severity is: 8.6)", "url": "https://github.com/amaybaum-prod/kibana-rnorris-wildemat/issues/200", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "kibana-rnorris-wildemat", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>core-0.3.16.tgz</b></summary>\n\n<p>Core LangChain.js abstractions and schemas</p>\n<p>Library home page: <a href=\"https://registry.npmjs.org/@langchain/core/-/core-0.3.16.tgz\">https://registry.npmjs.org/@langchain/core/-/core-0.3.16.tgz</a></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>", "created": "2025-12-24T00:12:32Z", "labels": ["Mend: dependency security vulnerability"], "context": "core-0.3.16.tgz: 1 vulnerabilities (highest severity is: 8.6) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>core-0.3.16.tgz</b></summary>\n\n<p>Core LangChai"}


identifier: gh_issue_3758838209
source: github_issue
status: new
created_at: 2025-12-24 00:32:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3758838209", "title": "langchain-0.3.5.tgz: 1 vulnerabilities (highest severity is: 8.6)", "url": "https://github.com/amaybaum-prod/kibana-rnorris-wildemat/issues/199", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "kibana-rnorris-wildemat", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>langchain-0.3.5.tgz</b></summary>\n\n<p>Typescript bindings for langchain</p>\n<p>Library home page: <a href=\"https://registry.npmjs.org/langchain/-/langchain-0.3.5.tgz\">https://registry.npmjs.org/langchain/-/langchain-0.3.5.tgz</a></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in ", "created": "2025-12-24T00:12:30Z", "labels": ["Mend: dependency security vulnerability"], "context": "langchain-0.3.5.tgz: 1 vulnerabilities (highest severity is: 8.6) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>langchain-0.3.5.tgz</b></summary>\n\n<p>Typescrip"}


identifier: gh_issue_3758835549
source: github_issue
status: new
created_at: 2025-12-24 00:32:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3758835549", "title": "opensearch_py-3.0.0-py3-none-any.whl: 3 vulnerabilities (highest severity is: 7.5) reachable", "url": "https://github.com/snowdensb/amazon-bedrock-workshop/issues/12", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "amazon-bedrock-workshop", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>opensearch_py-3.0.0-py3-none-any.whl</b></summary>\n\n<p></p>\n<p>Path to dependency file: /05_Agents/requirements.txt</p>\n<p>Path to vulnerable library: /05_Agents/requirements.txt,/02_KnowledgeBases_and_RAG/requirements.txt,/tmp/ws-ua_20250425121535_DADJEU/python_MQRBXH/202504251216371/env/lib/python3.9/site-packages/urllib3-1.26.20.dist-info,/tm", "created": "2025-12-24T00:10:08Z", "labels": ["Mend: dependency security vulnerability"], "context": "opensearch_py-3.0.0-py3-none-any.whl: 3 vulnerabilities (highest severity is: 7.5) reachable <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>opensearch_py-3.0.0-py3-none-any.whl</b></summa"}


identifier: gh_issue_3758835495
source: github_issue
status: new
created_at: 2025-12-24 00:32:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3758835495", "title": "botocore-1.42.16-py3-none-any.whl: 3 vulnerabilities (highest severity is: 7.5) reachable", "url": "https://github.com/snowdensb/amazon-bedrock-workshop/issues/11", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "amazon-bedrock-workshop", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>botocore-1.42.16-py3-none-any.whl</b></summary>\n\n<p></p>\n<p>Path to dependency file: /05_Agents/requirements.txt</p>\n<p>Path to vulnerable library: /05_Agents/requirements.txt,/02_KnowledgeBases_and_RAG/requirements.txt,/tmp/ws-ua_20250425121535_DADJEU/python_MQRBXH/202504251216371/env/lib/python3.9/site-packages/urllib3-1.26.20.dist-info,/tmp/w", "created": "2025-12-24T00:10:04Z", "labels": ["Mend: dependency security vulnerability"], "context": "botocore-1.42.16-py3-none-any.whl: 3 vulnerabilities (highest severity is: 7.5) reachable <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>botocore-1.42.16-py3-none-any.whl</b></summary>"}


identifier: gh_issue_3758865585
source: github_issue
status: new
created_at: 2025-12-24 00:43:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3758865585", "title": "Security audit failed: 14 issues found", "url": "https://github.com/go-dart-rpc/user-service/issues/87", "user": "hekkos-demo-app[bot]", "user_url": "https://github.com/apps/hekkos-demo-app", "repo": "user-service", "body_preview": "Hekkos has identified security configuration issues in this repository based on [SLSA v1.2](https://slsa.dev/) requirements.\n\n<details open>\n<summary><strong>Security audit summary</strong></summary>\n\n**7** of **13** security checks are failing.\n\n| Security Check | Status | Issues |\n|---|---|---|\n| [Branch Protection](../issues/88) | \u274c Failing | 7 issues |\n| CODEOWNERS | \u2705 Passing | - |\n| Code Scanning | \u2705 Passing | - |\n| [Secret Scanning](../issues/89) | \u274c Failing | 1 issue |\n| [Dependency Revi", "created": "2025-12-24T00:35:37Z", "labels": ["security-audit"], "context": "Security audit failed: 14 issues found Hekkos has identified security configuration issues in this repository based on [SLSA v1.2](https://slsa.dev/) requirements.\n\n<details open>\n<summary><strong>Security audit summary</strong></summary>\n"}


identifier: gh_issue_3758835248
source: github_issue
status: new
created_at: 2025-12-24 00:56:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3758835248", "title": "langchain-0.3.36.tgz: 1 vulnerabilities (highest severity is: 8.6)", "url": "https://github.com/amaybaum-prod/kibana-npm/issues/25", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "kibana-npm", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>langchain-0.3.36.tgz</b></summary>\n\n<p>Typescript bindings for langchain</p>\n<p>Library home page: <a href=\"https://registry.npmjs.org/langchain/-/langchain-0.3.36.tgz\">https://registry.npmjs.org/langchain/-/langchain-0.3.36.tgz</a></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n</details>", "created": "2025-12-24T00:09:51Z", "labels": ["Mend: dependency security vulnerability"], "context": "langchain-0.3.36.tgz: 1 vulnerabilities (highest severity is: 8.6) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>langchain-0.3.36.tgz</b></summary>\n\n<p>Typescri"}


identifier: gh_issue_3758835218
source: github_issue
status: new
created_at: 2025-12-24 00:56:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3758835218", "title": "core-0.3.79.tgz: 1 vulnerabilities (highest severity is: 8.6)", "url": "https://github.com/amaybaum-prod/kibana-npm/issues/24", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "kibana-npm", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>core-0.3.79.tgz</b></summary>\n\n<p>Core LangChain.js abstractions and schemas</p>\n<p>Library home page: <a href=\"https://registry.npmjs.org/@langchain/core/-/core-0.3.79.tgz\">https://registry.npmjs.org/@langchain/core/-/core-0.3.79.tgz</a></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n</de", "created": "2025-12-24T00:09:50Z", "labels": ["Mend: dependency security vulnerability"], "context": "core-0.3.79.tgz: 1 vulnerabilities (highest severity is: 8.6) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>core-0.3.79.tgz</b></summary>\n\n<p>Core LangChai"}


identifier: gh_issue_3758835210
source: github_issue
status: new
created_at: 2025-12-24 00:56:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3758835210", "title": "core-0.3.78.tgz: 1 vulnerabilities (highest severity is: 8.6)", "url": "https://github.com/amaybaum-prod/kibana2/issues/164", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "kibana2", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>core-0.3.78.tgz</b></summary>\n\n<p>Core LangChain.js abstractions and schemas</p>\n<p>Library home page: <a href=\"https://registry.npmjs.org/@langchain/core/-/core-0.3.78.tgz\">https://registry.npmjs.org/@langchain/core/-/core-0.3.78.tgz</a></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>", "created": "2025-12-24T00:09:49Z", "labels": ["Mend: dependency security vulnerability"], "context": "core-0.3.78.tgz: 1 vulnerabilities (highest severity is: 8.6) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>core-0.3.78.tgz</b></summary>\n\n<p>Core LangChai"}


identifier: gh_issue_3758848589
source: github_issue
status: new
created_at: 2025-12-24 01:32:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3758848589", "title": "torch-2.8.0-cp310-none-macosx_11_0_arm64.whl: 5 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/snowdensb/garak/issues/43", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "garak", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>torch-2.8.0-cp310-none-macosx_11_0_arm64.whl</b></summary>\n\n<p>Tensors and Dynamic neural networks in Python with strong GPU acceleration</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/ef/d6/e6d4c57e61c2b2175d3aafbfb779926a2cfd7c32eeda7c543925dceec923/torch-2.8.0-cp310-none-macosx_11_0_arm64.whl\">https://files.pythonh", "created": "2025-12-24T00:21:18Z", "labels": ["Mend: dependency security vulnerability"], "context": "torch-2.8.0-cp310-none-macosx_11_0_arm64.whl: 5 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>torch-2.8.0-cp310-none-macosx_11_0_arm64.whl</b"}


identifier: gh_issue_3758865654
source: github_issue
status: new
created_at: 2025-12-24 01:45:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3758865654", "title": "Dependency Review: 2 issues found", "url": "https://github.com/go-dart-rpc/user-service/issues/90", "user": "hekkos-demo-app[bot]", "user_url": "https://github.com/apps/hekkos-demo-app", "repo": "user-service", "body_preview": "Hekkos found **2** Dependency Review configuration issues in this repository.\n\n<sub>This is part of the main [security audit](../issues/87).</sub>\n\n<details open>\n<summary><strong>Issue details</strong></summary>\n\n- **Issue 1**: Open Dependabot alerts detected - vulnerable dependencies must be updated\n- **Issue 2**: Critical severity dependency vulnerabilities detected - immediate action required\n\n</details>\n\n---\n\n### Why this matters\n\nDependency review helps track known issues in third-party co", "created": "2025-12-24T00:35:41Z", "labels": ["security-audit", "security-audit:dependency-review"], "context": "Dependency Review: 2 issues found Hekkos found **2** Dependency Review configuration issues in this repository.\n\n<sub>This is part of the main [security audit](../issues/87).</sub>\n\n<details open>\n<summary><strong>Issue details</stron"}


identifier: gh_issue_3758954356
source: github_issue
status: new
created_at: 2025-12-24 01:57:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3758954356", "title": "Epic: Couples Therapy Assistant", "url": "https://github.com/vadimalpha/taskmanager/issues/12", "user": "vadimalpha", "user_url": "https://github.com/vadimalpha", "repo": "taskmanager", "body_preview": "\n# Epic: Couples Therapy Assistant\n\n## Overview\n\nBuild a web-based AI conflict resolution platform for couples using a multi-perspective blind input approach. Partners independently describe conflicts, receive individual AI coaching, then access joint guidance. The system uses SurrealDB for RAG-powered personalization and executes 5 LLM prompts per conflict (2 individual-only, 2 joint-context personal, 1 relationship-focused).\n\n**Core Innovation**: Blind input workflow ensures authentic perspect", "created": "2025-12-24T01:48:47Z", "labels": ["epic", "epic:couples-therapy-assistant", "feature"], "context": "Epic: Couples Therapy Assistant \n# Epic: Couples Therapy Assistant\n\n## Overview\n\nBuild a web-based AI conflict resolution platform for couples using a multi-perspective blind input approach. Partners independently describe conflicts"}


identifier: gh_issue_3758980181
source: github_issue
status: new
created_at: 2025-12-24 02:10:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3758980181", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Michael-Adams-MD_1224_020511_gh_gw1/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Michael-Adams-MD_1224_020511_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.io/v", "created": "2025-12-24T02:07:03Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3758980189
source: github_issue
status: new
created_at: 2025-12-24 02:10:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3758980189", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Michael-Adams-MD_1224_020511_gh_gw1/issues/6", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Michael-Adams-MD_1224_020511_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.", "created": "2025-12-24T02:07:03Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3758974718
source: github_issue
status: new
created_at: 2025-12-24 02:10:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3758974718", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Russell-Long_1224_020038_gh_gw2/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Russell-Long_1224_020038_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.", "created": "2025-12-24T02:02:55Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3758974708
source: github_issue
status: new
created_at: 2025-12-24 02:10:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3758974708", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Russell-Long_1224_020038_gh_gw2/issues/4", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Russell-Long_1224_020038_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.io/v", "created": "2025-12-24T02:02:54Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3758974399
source: github_issue
status: new
created_at: 2025-12-24 02:10:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3758974399", "title": "rdoc-3.12.2.gem: 2 vulnerabilities (highest severity is: 7.5) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Russell-Long_1224_020038_gh_gw2/issues/2", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Russell-Long_1224_020038_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>rdoc-3.12.2.gem</strong></summary>\n\nRDoc produces HTML and command-line documentation for Ruby projects.  RDoc\nincludes the +rdoc+ and +ri+ tools for generating and displaying online\ndocumentation.\n\nSee RDoc for a description of RDoc's markup and basic use.\n\n\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/rdoc-3.12.2.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | ", "created": "2025-12-24T02:02:38Z", "labels": [], "context": "rdoc-3.12.2.gem: 2 vulnerabilities (highest severity is: 7.5) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>rdoc-3.12.2.gem</strong></summary>\n\nRDoc produces HTML and command-line documentation for Ruby projects.  RDoc\nincludes the +rdoc+ and +ri+ tools fo"}


identifier: gh_issue_3758974395
source: github_issue
status: new
created_at: 2025-12-24 02:10:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3758974395", "title": "aws-sdk-2.0.48.gem: 1 vulnerabilities (highest severity is: 9.8) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Russell-Long_1224_020038_gh_gw2/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Russell-Long_1224_020038_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>aws-sdk-2.0.48.gem</strong></summary>\n\nThe official AWS SDK for Ruby. Provides both resource oriented interfaces and API clients for AWS services.\n\n\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/aws-sdk-2.0.48.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------", "created": "2025-12-24T02:02:37Z", "labels": [], "context": "aws-sdk-2.0.48.gem: 1 vulnerabilities (highest severity is: 9.8) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>aws-sdk-2.0.48.gem</strong></summary>\n\nThe official AWS SDK for Ruby. Provides both resource oriented interfaces and API clients for AWS services.\n\n"}


identifier: gh_issue_3758957930
source: github_issue
status: new
created_at: 2025-12-24 02:23:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3758957930", "title": "Testing, Deployment & Launch", "url": "https://github.com/vadimalpha/taskmanager/issues/20", "user": "vadimalpha", "user_url": "https://github.com/vadimalpha", "repo": "taskmanager", "body_preview": "\n# Task: Testing, Deployment & Launch\n\n## Description\n\nWrite comprehensive E2E tests for key workflows using Playwright, conduct security audit/penetration testing, deploy frontend to Vercel and backend to Railway, set up monitoring, and launch to first 50 couples for beta testing. Iterate based on feedback.\n\n## Acceptance Criteria\n\n- [ ] E2E tests (Playwright) cover:\n  - User registration \u2192 intake survey \u2192 conflict creation \u2192 response \u2192 view guidance\n  - Partner A creates conflict (private), Pa", "created": "2025-12-24T01:50:59Z", "labels": ["task", "epic:couples-therapy-assistant"], "context": "Testing, Deployment & Launch \n# Task: Testing, Deployment & Launch\n\n## Description\n\nWrite comprehensive E2E tests for key workflows using Playwright, conduct security audit/penetration testing, deploy frontend to Vercel and backe"}


identifier: gh_issue_3759017532
source: github_issue
status: new
created_at: 2025-12-24 02:46:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3759017532", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/keypress-notifications/issues/51", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "keypress-notifications", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (17)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-24T02:36:19Z", "labels": ["automated", "security", "critical"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3759016985
source: github_issue
status: new
created_at: 2025-12-24 02:46:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3759016985", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/file-insights/issues/131", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "file-insights", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (16)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-24T02:36:00Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3759015570
source: github_issue
status: new
created_at: 2025-12-24 02:46:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3759015570", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/additional-contexts-menu/issues/112", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "additional-contexts-menu", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (17)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-24T02:34:57Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3759047656
source: github_issue
status: new
created_at: 2025-12-24 02:58:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3759047656", "title": "RFC: Plugin Lifecycle, BLE Architecture, and External Runtime Strategy", "url": "https://github.com/SignalK/signalk-server/issues/2186", "user": "dirkwa", "user_url": "https://github.com/dirkwa", "repo": "signalk-server", "body_preview": "Merry Christmas everyone. Making signalk-server more secure and thinking forward in BLE handling and the Runtime Strategy to allow python plugin developers to operate inside a controlled environment this is handled RFC. All is based upon: \n\n- @tkurki https://github.com/SignalK/vedirect-serial-usb/issues/65 - enhance security\n- @dirkwa https://github.com/SignalK/signalk-server/pull/2158 - as logical extension of the hotplug lifecycle.\n\n<html>\n<body>\n<!--StartFragment--><html><head></head><body><h", "created": "2025-12-24T02:58:01Z", "labels": [], "context": "RFC: Plugin Lifecycle, BLE Architecture, and External Runtime Strategy Merry Christmas everyone. Making signalk-server more secure and thinking forward in BLE handling and the Runtime Strategy to allow python plugin developers to operate inside a controlled environment t"}


identifier: gh_issue_3758996591
source: github_issue
status: new
created_at: 2025-12-24 02:58:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3758996591", "title": "ci: Harden Nightly Analysis Workflow security and reliability", "url": "https://github.com/rshade/pulumicost-core/issues/325", "user": "rshade", "user_url": "https://github.com/rshade", "repo": "pulumicost-core", "body_preview": "## Context\nThe new `.github/workflows/nightly-analysis.yml` workflow introduced in PR #315 lacks security pinning, resource limits, and robust error handling.\n\n## Research\n- **Unpinned Dependency**: The workflow installs `@opencode/cli` using `latest`, creating non-reproducible builds.\n- **No Timeouts**: The `analyze-failure` job has no `timeout-minutes` set, risking long-running hangs (default 6h).\n- **Missing Error Handling**:\n  - `go run scripts/analysis/analyze_failure.go` is not checked for", "created": "2025-12-24T02:19:27Z", "labels": ["ci"], "context": "ci: Harden Nightly Analysis Workflow security and reliability ## Context\nThe new `.github/workflows/nightly-analysis.yml` workflow introduced in PR #315 lacks security pinning, resource limits, and robust error handling.\n\n## Research\n- **Unpinned Dependency**: T"}


identifier: gh_issue_3759035546
source: github_issue
status: new
created_at: 2025-12-24 02:58:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3759035546", "title": "AI Batch Translation: Discordian ISMS Core Policies for German/Dutch Markets (16 files)", "url": "https://github.com/Hack23/homepage/issues/888", "user": "pethers", "user_url": "https://github.com/pethers", "repo": "homepage", "body_preview": "## \ud83c\udfaf Objective\nComplete AI-powered batch translation of Discordian ISMS core policy pages for German and Dutch markets, establishing cybersecurity thought leadership in key European markets.\n\n## \ud83d\udccb Background\nDiscordian ISMS policies provide accessible, narrative-driven explanations of Hack23's formal ISMS-PUBLIC repository. German and Dutch markets show infrastructure readiness (63.5% DE, 61.5% NL file coverage) but need content translation.\n\n**Priority ISMS Policy Pages (8 core policies):**\n1. ", "created": "2025-12-24T02:49:21Z", "labels": [], "context": "AI Batch Translation: Discordian ISMS Core Policies for German/Dutch Markets (16 files) ## \ud83c\udfaf Objective\nComplete AI-powered batch translation of Discordian ISMS core policy pages for German and Dutch markets, establishing cybersecurity thought leadership in key European markets.\n\n## \ud83d\udccb Bac"}


identifier: gh_issue_3759080412
source: github_issue
status: new
created_at: 2025-12-24 03:23:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3759080412", "title": "CVE-2025-68665 (High) detected in core-0.3.78.tgz, core-0.2.36.tgz", "url": "https://github.com/opensearch-project/OpenSearch-Dashboards/issues/11100", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "OpenSearch-Dashboards", "body_preview": "## CVE-2025-68665 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Libraries - <b>core-0.3.78.tgz</b>, <b>core-0.2.36.tgz</b></summary>\n<p>\n\n<details><summary><b>core-0.3.78.tgz</b></summary>\n\n<p>Core LangChain.js abstractions and schemas</p>\n<p>Library home page: <a href=\"https://registry.npmjs.org/@langchain/core/-/core-0.3.78.tgz\">https://registry.npmjs.org/@langchain/core/", "created": "2025-12-24T03:20:31Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-68665 (High) detected in core-0.3.78.tgz, core-0.2.36.tgz ## CVE-2025-68665 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Libraries - "}


identifier: gh_issue_3759088208
source: github_issue
status: new
created_at: 2025-12-24 03:37:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3759088208", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-24", "url": "https://github.com/MagicTooooools/picker/issues/49", "user": "allinu", "user_url": "https://github.com/allinu", "repo": "picker", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-24\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-23 Review](http://www.sec-wiki.com/?2025-12-23)\n- Armin Ronacher's Thoughts and Writings\n  - [ ] [Advent of Slop: A Guest Post by Claude](https://lucumr.pocoo.org/2025/12/23/advent-of-slop/)\n- Private Feed for M09Ic\n  - [ ] [mgeeky starred professor-moody/ludus_scorch](https://github.com/professor-moody/ludus_scorch)\n  - [ ] [bolucat released 202512231939 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/2025122", "created": "2025-12-24T03:27:03Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-24 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-24\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-23 Review](http://www.sec-wiki.com/?2025-12-23)\n- Armin Ronacher's Thoughts and Writings\n  - [ ] [Advent of Slop: A Guest Post by Cla"}


identifier: gh_issue_3759084846
source: github_issue
status: new
created_at: 2025-12-24 03:37:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3759084846", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-24", "url": "https://github.com/chainreactors/picker/issues/1092", "user": "chainreactorbot", "user_url": "https://github.com/chainreactorbot", "repo": "picker", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-24\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-23 Review](http://www.sec-wiki.com/?2025-12-23)\n- Recent Commits to cve:main\n  - [ ] [Update Tue Dec 23 11:35:16 UTC 2025](https://github.com/trickest/cve/commit/db1b1e5b811aabb4c247ebe218647da2f2b9d1e6)\n- Doonsec's feed\n  - [ ] [\u77ed\u5267\u5f71\u89c6\u5c0f\u7a0b\u5e8f\u5e73\u53f0juhecurl\u63a5\u53e3\u5b58\u5728\u4efb\u610f\u6587\u4ef6\u8bfb\u53d6\u6f0f\u6d1e \u9644POC](https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489749&idx=1&sn=a38c9a26fd76d97916149bed05f3d4a2)\n  - [ ] [\u4fc4\u65b0\u578b\u53cd\u536b\u661f\u6b66\u5668\u7814\u53d1\u5f15\u5173\u6ce8\uff0c\u5168\u7403\u53cd\u592a\u7a7a\u529b\u91cf\u8bc4\u4f30\u62a5\u544a\u805a\u7126\u592a\u7a7a\u5a01\u6151\u535a\u5f08](https://mp.weix", "created": "2025-12-24T03:24:07Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-24 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-24\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-23 Review](http://www.sec-wiki.com/?2025-12-23)\n- Recent Commits to cve:main\n  - [ ] [Update Tue Dec 23 11:35:16 UTC 2025](https://gi"}


identifier: gh_issue_3759084697
source: github_issue
status: new
created_at: 2025-12-24 03:37:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3759084697", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-24", "url": "https://github.com/MM0x02/RSS-Push/issues/361", "user": "MM0x02", "user_url": "https://github.com/MM0x02", "repo": "RSS-Push", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-24\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-23 Review](http://www.sec-wiki.com/?2025-12-23)\n- Private Feed for M09Ic\n  - [ ] [mgeeky starred professor-moody/ludus_scorch](https://github.com/professor-moody/ludus_scorch)\n  - [ ] [bolucat released 202512231939 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202512231939)\n  - [ ] [kpcyrd contributed to kpcyrd/cargo-debstatus](https://github.com/kpcyrd/cargo-debstatus/pull/77)\n  - [ ] [Ridter starred repplu", "created": "2025-12-24T03:23:58Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-24 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-24\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-23 Review](http://www.sec-wiki.com/?2025-12-23)\n- Private Feed for M09Ic\n  - [ ] [mgeeky starred professor-moody/ludus_scorch](https:"}


identifier: gh_issue_3759083945
source: github_issue
status: new
created_at: 2025-12-24 03:37:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3759083945", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-24", "url": "https://github.com/ruohong2018/ruohong2018.github.io/issues/1048", "user": "ruohong2018", "user_url": "https://github.com/ruohong2018", "repo": "ruohong2018.github.io", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-24\uff09\n\n- \u7f8e\u56e2\u6280\u672f\u56e2\u961f\n  - [\u7f8e\u56e2 LongCat-Video-Avatar \u6b63\u5f0f\u53d1\u5e03\uff0c\u5b9e\u73b0\u5f00\u6e90 SOTA \u7ea7\u62df\u771f\u8868\u73b0](https://tech.meituan.com/2025/12/23/longcat-video-avatar.html)\n- LevelBlue Blog\n  - [LevelBlue Predictions 2026: The Never Ending Story Evolving Threats and Adversary Tactics](https://levelblue.com/blogs/levelblue-blog/levelblue-predictions-2026-the-never-ending-story-evolving-threats-and-adversary-tactics/)\n- SecWiki News\n  - [SecWiki News 2025-12-23 Review](http://www.sec-wiki.com/?2025-12-23)\n- \u5636\u543c RoarTalk \u2013 \u7f51\u7edc\u5b89", "created": "2025-12-24T03:23:15Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-24 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-24\uff09\n\n- \u7f8e\u56e2\u6280\u672f\u56e2\u961f\n  - [\u7f8e\u56e2 LongCat-Video-Avatar \u6b63\u5f0f\u53d1\u5e03\uff0c\u5b9e\u73b0\u5f00\u6e90 SOTA \u7ea7\u62df\u771f\u8868\u73b0](https://tech.meituan.com/2025/12/23/longcat-video-avatar.html)\n- LevelBlue Blog\n  - [LevelBlue Predictions 2026: The N"}


identifier: gh_issue_3759078908
source: github_issue
status: new
created_at: 2025-12-24 03:37:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3759078908", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-24", "url": "https://github.com/BruceFeIix/picker/issues/2154", "user": "BruceFeIix", "user_url": "https://github.com/BruceFeIix", "repo": "picker", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-24\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-23 Review](http://www.sec-wiki.com/?2025-12-23)\n- Tenable Blog\n  - [ ] [The 3% Rule: How To Silence 97% of Your Cloud Alerts and Be More Secure](https://www.tenable.com/blog/the-3-rule-how-to-silence-97-of-your-cloud-alerts-and-be-more-secure)\n- Armin Ronacher's Thoughts and Writings\n  - [ ] [Advent of Slop: A Guest Post by Claude](https://lucumr.pocoo.org/2025/12/23/advent-of-slop/)\n- \u5947\u5b89\u4fe1\u653b\u9632\u793e\u533a\n  - [ ] [\u4fe1\u606f\u641c\u96c6\u4e4b\u8fb9\u7f18\u8d44\u4ea7\u548c\u9690\u5f62\u8d44\u4ea7\u7684\u53d1\u6398](https://", "created": "2025-12-24T03:19:29Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-24 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-24\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-23 Review](http://www.sec-wiki.com/?2025-12-23)\n- Tenable Blog\n  - [ ] [The 3% Rule: How To Silence 97% of Your Cloud Alerts and Be M"}


identifier: gh_issue_3759085502
source: github_issue
status: new
created_at: 2025-12-24 03:49:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3759085502", "title": "Latest 15 Papers - December 24, 2025", "url": "https://github.com/yanghlll/ArxivDaily-Haolin/issues/83", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "ArxivDaily-Haolin", "body_preview": "**Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Unified\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[UTDesign: A Unified Framework for Stylized Text Editing and Generation in Graphic Design Images](https://arxiv.org/abs/2512.20479v1)** | 2025-12-23 | <details><summary>22 pa...</summary><p>22 pages, 25 figures, SIGGRAPH Asia 2025, Conference Paper</p></details> |\n| **[STEP: A Unified Spiking T", "created": "2025-12-24T03:24:45Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 24, 2025 **Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Unified\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |"}


identifier: gh_issue_3759127974
source: github_issue
status: new
created_at: 2025-12-24 04:01:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3759127974", "title": "New release?", "url": "https://github.com/jnunemaker/httparty/issues/831", "user": "ashkulz", "user_url": "https://github.com/ashkulz", "repo": "httparty", "body_preview": "@jnunemaker since the fix for CVE-2025-68696 was merged via #830, can we have a new release pushed to RubyGems and the vulnerability updated with the fixed version(s)?\n\nThanks!", "created": "2025-12-24T03:56:19Z", "labels": [], "context": "New release? @jnunemaker since the fix for CVE-2025-68696 was merged via #830, can we have a new release pushed to RubyGems and the vulnerability updated with the fixed version(s)?\n\nThanks!"}


identifier: gh_issue_3759106849
source: github_issue
status: new
created_at: 2025-12-24 04:01:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3759106849", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/ItzNxhin/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @ItzNxhin! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate you", "created": "2025-12-24T03:41:04Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @ItzNxhin! Welcome to your Skills exercise"}


identifier: gh_issue_3759101567
source: github_issue
status: new
created_at: 2025-12-24 04:01:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3759101567", "title": "Dependency Audit", "url": "https://github.com/bilal-bhatti/broker/issues/68", "user": "00felix-app[bot]", "user_url": "https://github.com/apps/00felix-app", "repo": "broker", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-24T03:37:10Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3759031152
source: github_issue
status: new
created_at: 2025-12-24 04:12:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3759031152", "title": "Fix security vulnerabilities", "url": "https://github.com/TranspiledCode/image-scoop/issues/27", "user": "joshuacrass", "user_url": "https://github.com/joshuacrass", "repo": "image-scoop", "body_preview": "## Problem:\nGitHub Dependabot has detected 9 security vulnerabilities in the project dependencies:\n- 1 critical severity\n- 4 high severity\n- 3 moderate severity\n- 1 low severity\n\n## Solution:\nReview and update vulnerable dependencies to their latest secure versions. This should be done carefully to avoid breaking changes.\n\n### Steps:\n1. Review Dependabot alerts at: https://github.com/TranspiledCode/image-scoop/security/dependabot\n2. Identify which dependencies have vulnerabilities\n3. Check for b", "created": "2025-12-24T02:47:25Z", "labels": [], "context": "Fix security vulnerabilities ## Problem:\nGitHub Dependabot has detected 9 security vulnerabilities in the project dependencies:\n- 1 critical severity\n- 4 high severity\n- 3 moderate severity\n- 1 low severity\n\n## Solution:\nReview a"}


identifier: gh_issue_3759124171
source: github_issue
status: new
created_at: 2025-12-24 04:24:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3759124171", "title": "[EPIC] System Improvements & Automation Enhancements", "url": "https://github.com/nextjedi/ap-projects-management/issues/3", "user": "nextjedi", "user_url": "https://github.com/nextjedi", "repo": "ap-projects-management", "body_preview": "## \ud83c\udfaf Epic: Enhance System Automation & Capabilities\n\n**Parent Epic**: #1\n**Product**: infrastructure\n**Phase**: phase:dev\n**Priority**: priority:high\n**Effort**: effort:l\n\n---\n\n## \ud83d\udccb Objective\n\nImprove the project management system with advanced automation, better workflows, and enhanced capabilities to save even more time and provide better insights.\n\n---\n\n## \ud83d\ude80 Planned Improvements\n\n### Automation Enhancements\n- [ ] Auto-assign issues based on labels\n- [ ] Auto-close stale issues\n- [ ] Auto-labe", "created": "2025-12-24T03:53:35Z", "labels": ["product:infrastructure", "phase:dev", "type:epic", "priority:high", "effort:l"], "context": "[EPIC] System Improvements & Automation Enhancements ## \ud83c\udfaf Epic: Enhance System Automation & Capabilities\n\n**Parent Epic**: #1\n**Product**: infrastructure\n**Phase**: phase:dev\n**Priority**: priority:high\n**Effort**: effort:l\n\n---\n\n## \ud83d\udccb Objective\n\nImprove"}


identifier: gh_issue_3759152911
source: github_issue
status: new
created_at: 2025-12-24 04:48:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3759152911", "title": "[Critical Security] Remote Code Execution (RCE) Vulnerability Detected", "url": "https://github.com/algorithmicsuperintelligence/optillm/issues/287", "user": "devlin9824", "user_url": "https://github.com/devlin9824", "repo": "optillm", "body_preview": "Hello maintainers,\n\nI am a security researcher and I have identified a Critical vulnerability (Remote Code Execution) in this repository. The vulnerability allows an attacker to execute arbitrary system commands on the server running optillm via specific inputs.\n\nI have verified this with a working Proof of Concept (PoC).\n\nTo prevent potential exploitation by malicious actors, I have not included the technical details or the vulnerable module name in this public issue.\n\nAction Requested: Please ", "created": "2025-12-24T04:14:15Z", "labels": [], "context": "[Critical Security] Remote Code Execution (RCE) Vulnerability Detected Hello maintainers,\n\nI am a security researcher and I have identified a Critical vulnerability (Remote Code Execution) in this repository. The vulnerability allows an attacker to execute arbitrary syst"}


identifier: gh_issue_3759149538
source: github_issue
status: new
created_at: 2025-12-24 04:48:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3759149538", "title": "[Bug]: Critical Remote Code Execution Confirmed on https://lotta.schule/ CVE-2025-55182", "url": "https://github.com/lotta-schule/lotta/issues/529", "user": "rawhack3r", "user_url": "https://github.com/rawhack3r", "repo": "lotta", "body_preview": "### Bug-Beschreibung\n\n\n        Hello Security Team,\n\n        I am reporting a critical, confirmed Remote Code Execution (RCE) vulnerability identified on https://lotta.schule/, related to CVE-2025-55182 affecting applications built on React / Next.js (Node.js runtime).\n\n        The attached terminal screenshots, which show step-by-step validation.\n\n        Vulnerability Details\n        CVE: CVE-2025-55182\n        Severity: Critical\n        Type: Unauthenticated Remote Code Execution\n        Affe", "created": "2025-12-24T04:11:58Z", "labels": ["\u2753 Triage"], "context": "[Bug]: Critical Remote Code Execution Confirmed on https://lotta.schule/ CVE-2025-55182 ### Bug-Beschreibung\n\n\n        Hello Security Team,\n\n        I am reporting a critical, confirmed Remote Code Execution (RCE) vulnerability identified on https://lotta.schule/, related to CVE-2025-551"}


identifier: gh_issue_3759135764
source: github_issue
status: new
created_at: 2025-12-24 04:48:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3759135764", "title": "Security Vulnerabilities (Trivy Scan) - 24-12-25 @ 04:02", "url": "https://github.com/RazorBladeX/SH-GithubRunner/issues/51", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "SH-GithubRunner", "body_preview": "## \u26a0\ufe0f Security Vulnerabilities Detected\n\n**Scan Date:** 24-12-25 @ 04:02\n\n### Summary\n- **Total vulnerabilities found:** 298\n- **Critical:** 4\n- **High:** 49\n\n### Full Report\nThe complete vulnerability report is available as a workflow artifact.\n\n\ud83d\udce5 **[Download Full Report](https://github.com/RazorBladeX/SH-GithubRunner/actions/runs/20477813568/artifacts)**\n\n---\n*This issue is automatically generated by the Trivy security scanner.*\n", "created": "2025-12-24T04:02:27Z", "labels": ["vulnerability", "security", "automated", "security-scan"], "context": "Security Vulnerabilities (Trivy Scan) - 24-12-25 @ 04:02 ## \u26a0\ufe0f Security Vulnerabilities Detected\n\n**Scan Date:** 24-12-25 @ 04:02\n\n### Summary\n- **Total vulnerabilities found:** 298\n- **Critical:** 4\n- **High:** 49\n\n### Full Report\nThe complete vulnerabilit"}


identifier: gh_issue_3759128402
source: github_issue
status: new
created_at: 2025-12-24 04:48:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3759128402", "title": "npm audit found vulnerabilities", "url": "https://github.com/shaam73/gh-actions-npm-audit/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "gh-actions-npm-audit", "body_preview": "```\n# npm audit report\n\nasync  2.0.0 - 2.6.3\nSeverity: high\nPrototype Pollution in async - https://github.com/advisories/GHSA-fwr7-v2mv-hh25\nDepends on vulnerable versions of lodash\nfix available via `npm audit fix --force`\nWill install mongoose@9.0.2, which is a breaking change\nnode_modules/async\n  mongoose  <=6.13.5\n  Depends on vulnerable versions of async\n  Depends on vulnerable versions of bson\n  Depends on vulnerable versions of mongodb\n  Depends on vulnerable versions of mpath\n  Depends o", "created": "2025-12-24T03:56:43Z", "labels": ["vulnerability", "test"], "context": "npm audit found vulnerabilities ```\n# npm audit report\n\nasync  2.0.0 - 2.6.3\nSeverity: high\nPrototype Pollution in async - https://github.com/advisories/GHSA-fwr7-v2mv-hh25\nDepends on vulnerable versions of lodash\nfix available via "}


identifier: gh_issue_3759078799
source: github_issue
status: new
created_at: 2025-12-24 04:59:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3759078799", "title": "\ud83d\udea8 Security Vulnerabilities Detected", "url": "https://github.com/naretakis/eapd-next/issues/37", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "eapd-next", "body_preview": "\n## Security Audit Results\n\n**High vulnerabilities:** 1\n**Critical vulnerabilities:** 1\n\n### Recommended Actions\n1. Review the vulnerabilities listed below\n2. Update affected packages using `npm update`\n3. For packages without fixes, consider alternatives\n4. Run `npm audit fix` to automatically fix issues where possible\n\n### Audit Details\n```json\nundefined\n```\n\nThis issue was automatically created by the security audit workflow.\n", "created": "2025-12-24T03:19:24Z", "labels": ["security", "priority: high", "needs-triage"], "context": "\ud83d\udea8 Security Vulnerabilities Detected \n## Security Audit Results\n\n**High vulnerabilities:** 1\n**Critical vulnerabilities:** 1\n\n### Recommended Actions\n1. Review the vulnerabilities listed below\n2. Update affected packages using `npm updat"}


identifier: gh_issue_3759041238
source: github_issue
status: new
created_at: 2025-12-24 04:59:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3759041238", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-24", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/380", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:172`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-production'\n   - Confidence: MEDIUM\n\n2. **blacklist** (LOW)\n   - File: `./scripts/health-check.py:8`\n   - Issue: Consider possible security implications associated with the subprocess module.\n   - Confidence: HIGH\n\n3. **subprocess_without_shell_equals_true** (LOW)\n   - File: `./scripts/health-check.p", "created": "2025-12-24T02:53:19Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-24 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:172`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-p"}


identifier: gh_issue_3759208757
source: github_issue
status: new
created_at: 2025-12-24 05:25:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3759208757", "title": "Unknown platform????", "url": "https://github.com/OmniBlocks/scratch-gui/issues/569", "user": "supervoidcoder", "user_url": "https://github.com/supervoidcoder", "repo": "scratch-gui", "body_preview": "Since when was this added that loading a project from another platform would create a modal saying about compatibility? \n\nIt's a bit annoying since it shows for TurboWarp projects, even though OmniBlocks is compatible with them.\n", "created": "2025-12-24T04:46:29Z", "labels": ["bug", "documentation", "Medium-Priority"], "context": "Unknown platform???? Since when was this added that loading a project from another platform would create a modal saying about compatibility? \n\nIt's a bit annoying since it shows for TurboWarp projects, even though OmniBlo"}


identifier: gh_issue_3759279459
source: github_issue
status: new
created_at: 2025-12-24 05:37:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3759279459", "title": "\ud83d\udc1b TASK 4/4: Complete E2E Test Fixes and Validation", "url": "https://github.com/SebastianVernis/SAAS-DND/issues/20", "user": "SebastianVernis", "user_url": "https://github.com/SebastianVernis", "repo": "SAAS-DND", "body_preview": "# \ud83d\udc1b TASK 4/4: Complete E2E Test Fixes\n\n**Repository:** https://github.com/SebastianVernis/SAAS-DND  \n**Branch:** main  \n**Priority:** Critical  \n**Duration:** 4-6 hours  \n**Related:** Issue #15 (closed - partial fixes by Jules)\n\n---\n\n## \ud83c\udfaf Objetivo\n\nCompletar la correcci\u00f3n de tests E2E fallando y alcanzar **>90% pass rate** (99+ tests de 110).\n\n---\n\n## \ud83d\udcca Estado Actual\n\n**Test Results:**\n- **Total:** 110 tests\n- **Current status:** ~22% passing (estimated)\n- **Target:** >90% passing (99+ tests)\n\n*", "created": "2025-12-24T05:35:43Z", "labels": ["bug", "jules", "testing", "high-priority"], "context": "\ud83d\udc1b TASK 4/4: Complete E2E Test Fixes and Validation # \ud83d\udc1b TASK 4/4: Complete E2E Test Fixes\n\n**Repository:** https://github.com/SebastianVernis/SAAS-DND  \n**Branch:** main  \n**Priority:** Critical  \n**Duration:** 4-6 hours  \n**Related:** Issue #15 (close"}


identifier: gh_issue_3759244720
source: github_issue
status: new
created_at: 2025-12-24 05:37:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3759244720", "title": "Bumps [glob](https://github.com/isaacs/node-glob) from 11.0.0 to 11.1.0.", "url": "https://github.com/jamalireza018/Reza/issues/1", "user": "jamalireza018", "user_url": "https://github.com/jamalireza018", "repo": "Reza", "body_preview": "Bumps [glob](https://github.com/isaacs/node-glob) from 11.0.0 to 11.1.0.\n<details>\n<summary>Changelog</summary>\n<p><em>Sourced from <a href=\"https://github.com/isaacs/node-glob/blob/main/changelog.md\">glob's changelog</a>.</em></p>\n<blockquote>\n<h1>changeglob</h1>\n<h2>12</h2>\n<ul>\n<li>Remove the unsafe <code>--shell</code> option. The <code>--shell</code> option is now\nONLY supported on known shells where the behavior can be\nimplemented safely.</li>\n</ul>\n<h2>11.1</h2>\n<p><a href=\"https://github", "created": "2025-12-24T05:10:07Z", "labels": [], "context": "Bumps [glob](https://github.com/isaacs/node-glob) from 11.0.0 to 11.1.0. Bumps [glob](https://github.com/isaacs/node-glob) from 11.0.0 to 11.1.0.\n<details>\n<summary>Changelog</summary>\n<p><em>Sourced from <a href=\"https://github.com/isaacs/node-glob/blob/main/changelog.md\""}


identifier: gh_issue_3759282628
source: github_issue
status: new
created_at: 2025-12-24 05:49:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3759282628", "title": "Switch OpenAI client to Responses API", "url": "https://github.com/AgentFoundryExamples/software-planner/issues/39", "user": "johnbros", "user_url": "https://github.com/johnbros", "repo": "software-planner", "body_preview": "<!-- af:meta\nrun_id=20251223_224929-684867a1\niss_id=4659cbf3\n-->\n\n## Summary\n\n### Goal\nAdopt OpenAI's Responses API in place of chat completions while keeping planner behavior intact.\n\n### Context\nOpenAI recommends the Responses API; current llm_openai module targets Chat Completions. Migrating ensures compatibility and may change streaming/result parsing logic.\n\n### Plan\n\n1. Update llm_openai to instantiate the Responses client, call the new endpoints, and map responses to the existing internal", "created": "2025-12-24T05:37:44Z", "labels": ["af_run:20251223_224929-684867a1", "af_iss:4659cbf3"], "context": "Switch OpenAI client to Responses API <!-- af:meta\nrun_id=20251223_224929-684867a1\niss_id=4659cbf3\n-->\n\n## Summary\n\n### Goal\nAdopt OpenAI's Responses API in place of chat completions while keeping planner behavior intact.\n\n### Context\nOpe"}


identifier: gh_issue_3759349335
source: github_issue
status: new
created_at: 2025-12-24 06:26:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3759349335", "title": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-DEV/SAST-Test-Repo-0b508615-410e-48c9-b50f-925340959926/issues/10", "user": "dev-mend-for-github-com[bot]", "user_url": "https://github.com/apps/dev-mend-for-github-com", "repo": "SAST-Test-Repo-0b508615-410e-48c9-b50f-925340959926", "body_preview": "## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-webmvc-6.1.6.jar</b></summary>\n\n<p>Spring Web MVC</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</", "created": "2025-12-24T06:16:51Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar ## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3759349200
source: github_issue
status: new
created_at: 2025-12-24 06:26:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3759349200", "title": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-DEV/SAST-Test-Repo-0b508615-410e-48c9-b50f-925340959926/issues/7", "user": "dev-mend-for-github-com[bot]", "user_url": "https://github.com/apps/dev-mend-for-github-com", "repo": "SAST-Test-Repo-0b508615-410e-48c9-b50f-925340959926", "body_preview": "## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-24T06:16:46Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3759349121
source: github_issue
status: new
created_at: 2025-12-24 06:26:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3759349121", "title": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-DEV/SAST-Test-Repo-0b508615-410e-48c9-b50f-925340959926/issues/5", "user": "dev-mend-for-github-com[bot]", "user_url": "https://github.com/apps/dev-mend-for-github-com", "repo": "SAST-Test-Repo-0b508615-410e-48c9-b50f-925340959926", "body_preview": "## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependen", "created": "2025-12-24T06:16:43Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3759340940
source: github_issue
status: new
created_at: 2025-12-24 06:26:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3759340940", "title": "Dependency Dashboard", "url": "https://github.com/ByteVibeTW/IEP/issues/72", "user": "renovate[bot]", "user_url": "https://github.com/apps/renovate", "repo": "IEP", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/ByteVibeTW/IEP).\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Rate-Limited\n\nThe following updates are currently rate-limited. To force thei", "created": "2025-12-24T06:13:12Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the M"}


identifier: gh_issue_3759396170
source: github_issue
status: new
created_at: 2025-12-24 06:51:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3759396170", "title": "feat: Categorize AI Quality Gate failures (infrastructure vs code quality)", "url": "https://github.com/rjmurillo/ai-agents/issues/329", "user": "rjmurillo", "user_url": "https://github.com/rjmurillo", "repo": "ai-agents", "body_preview": "## Parent Epic\n\nPart of #324 (10x Velocity Improvement)\n\n## Problem\n\nAI Quality Gate failures are all treated equally, but they have different causes:\n\n| Category | Example | Should Block PR? |\n|----------|---------|------------------|\n| Code Quality | Security vulnerability | YES |\n| Code Quality | Missing tests | YES |\n| Infrastructure | Copilot CLI timeout | NO (retry) |\n| Infrastructure | Rate limit exceeded | NO (retry) |\n| Infrastructure | Network error | NO (retry) |\n\nCurrent behavior con", "created": "2025-12-24T06:42:07Z", "labels": ["bug", "documentation", "enhancement", "agent-analyst", "agent-architect", "agent-qa", "agent-security", "agent-roadmap", "agent-memory", "area-workflows", "area-infrastructure", "priority:P1", "automation", "github-actions"], "context": "feat: Categorize AI Quality Gate failures (infrastructure vs code quality) ## Parent Epic\n\nPart of #324 (10x Velocity Improvement)\n\n## Problem\n\nAI Quality Gate failures are all treated equally, but they have different causes:\n\n| Category | Example | Should Block PR? |\n|-----"}


identifier: gh_issue_3759396083
source: github_issue
status: new
created_at: 2025-12-24 06:51:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3759396083", "title": "feat: Add retry logic for infrastructure failures in AI Quality Gate", "url": "https://github.com/rjmurillo/ai-agents/issues/328", "user": "rjmurillo", "user_url": "https://github.com/rjmurillo", "repo": "ai-agents", "body_preview": "## Parent Epic\n\nPart of #324 (10x Velocity Improvement)\n\n## Problem\n\nAI Quality Gate has 25% failure rate, but many failures are **infrastructure issues**, not code problems:\n\n```\nVERDICT: CRITICAL_FAIL\nMESSAGE: Copilot CLI failed (exit code 1) with no output - likely missing Copilot access\n```\n\nCurrent behavior:\n- 5 of 6 agents PASS\n- 1 agent has infrastructure failure\n- Entire PR marked CRITICAL_FAIL\n- 50-80% of premium API requests wasted on re-runs\n\n## Solution\n\nAdd automatic retry logic for", "created": "2025-12-24T06:42:04Z", "labels": ["bug", "enhancement", "agent-qa", "agent-security", "agent-roadmap", "agent-memory", "area-workflows", "area-infrastructure", "priority:P1", "automation", "github-actions"], "context": "feat: Add retry logic for infrastructure failures in AI Quality Gate ## Parent Epic\n\nPart of #324 (10x Velocity Improvement)\n\n## Problem\n\nAI Quality Gate has 25% failure rate, but many failures are **infrastructure issues**, not code problems:\n\n```\nVERDICT: CRITICAL_FA"}


identifier: gh_issue_3759389795
source: github_issue
status: new
created_at: 2025-12-24 06:51:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3759389795", "title": "Security: Fix authorization bypass in MarketHandler", "url": "https://github.com/Reptilefury/prediction-markets/issues/48", "user": "Reptilefury", "user_url": "https://github.com/Reptilefury", "repo": "prediction-markets", "body_preview": "## Problem\nMarketHandler uses `UUID.randomUUID()` as a placeholder for user IDs instead of extracting from authentication context.\n\n## Impact\n- Anyone can create/update/resolve/close/suspend/cancel markets without proper authentication\n- Breaks audit trails - cannot determine who performed actions\n- Authorization completely bypassed\n\n## Location\n`src/main/java/com/oregonMarkets/domain/market/handler/MarketHandler.java` (lines 32-294)\n\n## Current Code\n```java\npublic Mono<ServerResponse> createMar", "created": "2025-12-24T06:38:29Z", "labels": [], "context": "Security: Fix authorization bypass in MarketHandler ## Problem\nMarketHandler uses `UUID.randomUUID()` as a placeholder for user IDs instead of extracting from authentication context.\n\n## Impact\n- Anyone can create/update/resolve/close/suspend/cancel ma"}


identifier: gh_issue_3759388692
source: github_issue
status: new
created_at: 2025-12-24 06:51:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3759388692", "title": "Security Health Check - GOOD (85/100) - 2025-12-24", "url": "https://github.com/Sami9889/Sami.dev-website/issues/250", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/24/2025, 6:37:46 AM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 9\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Securi", "created": "2025-12-24T06:37:51Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-24 # Security Health Check Report\n\n**Generated:** 12/24/2025, 6:37:46 AM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Inc"}


identifier: gh_issue_3759348938
source: github_issue
status: new
created_at: 2025-12-24 06:51:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3759348938", "title": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-DEV/SAST-Test-Repo-0b508615-410e-48c9-b50f-925340959926/issues/1", "user": "dev-mend-for-github-com[bot]", "user_url": "https://github.com/apps/dev-mend-for-github-com", "repo": "SAST-Test-Repo-0b508615-410e-48c9-b50f-925340959926", "body_preview": "## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDepend", "created": "2025-12-24T06:16:37Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3759349684
source: github_issue
status: new
created_at: 2025-12-24 06:51:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3759349684", "title": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-DEV/SAST-Test-Repo-0b508615-410e-48c9-b50f-925340959926/issues/15", "user": "dev-mend-for-github-com[bot]", "user_url": "https://github.com/apps/dev-mend-for-github-com", "repo": "SAST-Test-Repo-0b508615-410e-48c9-b50f-925340959926", "body_preview": "## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-24T06:16:58Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3759349645
source: github_issue
status: new
created_at: 2025-12-24 06:51:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3759349645", "title": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-DEV/SAST-Test-Repo-0b508615-410e-48c9-b50f-925340959926/issues/14", "user": "dev-mend-for-github-com[bot]", "user_url": "https://github.com/apps/dev-mend-for-github-com", "repo": "SAST-Test-Repo-0b508615-410e-48c9-b50f-925340959926", "body_preview": "## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-core-6.1.6.jar</b></summary>\n\n<p>Spring Core</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>", "created": "2025-12-24T06:16:57Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar ## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <"}


identifier: gh_issue_3759349465
source: github_issue
status: new
created_at: 2025-12-24 06:51:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3759349465", "title": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-DEV/SAST-Test-Repo-0b508615-410e-48c9-b50f-925340959926/issues/13", "user": "dev-mend-for-github-com[bot]", "user_url": "https://github.com/apps/dev-mend-for-github-com", "repo": "SAST-Test-Repo-0b508615-410e-48c9-b50f-925340959926", "body_preview": "## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-web-6.1.6.jar</b></summary>\n\n<p>Spring Web</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDe", "created": "2025-12-24T06:16:55Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar ## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3759349428
source: github_issue
status: new
created_at: 2025-12-24 06:51:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3759349428", "title": "CVE-2025-48988 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-DEV/SAST-Test-Repo-0b508615-410e-48c9-b50f-925340959926/issues/12", "user": "dev-mend-for-github-com[bot]", "user_url": "https://github.com/apps/dev-mend-for-github-com", "repo": "SAST-Test-Repo-0b508615-410e-48c9-b50f-925340959926", "body_preview": "## CVE-2025-48988 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-24T06:16:54Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48988 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48988 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3759349384
source: github_issue
status: new
created_at: 2025-12-24 06:51:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3759349384", "title": "CVE-2025-22235 (High) detected in spring-boot-3.2.5.jar", "url": "https://github.com/SAST-UP-Global-Config-DEV/SAST-Test-Repo-0b508615-410e-48c9-b50f-925340959926/issues/11", "user": "dev-mend-for-github-com[bot]", "user_url": "https://github.com/apps/dev-mend-for-github-com", "repo": "SAST-Test-Repo-0b508615-410e-48c9-b50f-925340959926", "body_preview": "## CVE-2025-22235 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-boot-3.2.5.jar</b></summary>\n\n<p>Spring Boot</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-boot\">https://spring.io/projects/spring-boot</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependenc", "created": "2025-12-24T06:16:52Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-22235 (High) detected in spring-boot-3.2.5.jar ## CVE-2025-22235 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3759441385
source: github_issue
status: new
created_at: 2025-12-24 07:52:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3759441385", "title": "[guardrails] Fix GAP-028: OpenAPI route", "url": "https://github.com/sbnctech/clubos/issues/238", "user": "edforman-75", "user_url": "https://github.com/edforman-75", "repo": "clubos", "body_preview": "## Summary\n\nMigrate 1 OpenAPI spec generation endpoint from `requireCapability()` to `requireCapabilitySafe()`.\n\n## Problem Statement\n\nThe OpenAPI endpoint generates API documentation. While strictly read-only, it uses `admin:full` capability.\n\n## Why It Matters\n\n- **Risk:** Very low - read-only spec generation\n- **Impact:** Minimal - exposes API schema to admin\n- **Priority:** P3 - tracked for completeness\n\n## Gaps Addressed\n\n- [ ] GAP-028: `openapi/route.ts:57` (GET OpenAPI spec)\n\n## Files to ", "created": "2025-12-24T07:07:58Z", "labels": ["security", "guardrails", "P3"], "context": "[guardrails] Fix GAP-028: OpenAPI route ## Summary\n\nMigrate 1 OpenAPI spec generation endpoint from `requireCapability()` to `requireCapabilitySafe()`.\n\n## Problem Statement\n\nThe OpenAPI endpoint generates API documentation. While strictly "}


identifier: gh_issue_3759441190
source: github_issue
status: new
created_at: 2025-12-24 07:52:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3759441190", "title": "[guardrails] Fix GAP-023 through GAP-027: Demo endpoint routes", "url": "https://github.com/sbnctech/clubos/issues/236", "user": "edforman-75", "user_url": "https://github.com/edforman-75", "repo": "clubos", "body_preview": "## Summary\n\nMigrate 5 demo/development endpoints from `requireCapability()` to `requireCapabilitySafe()`.\n\nThese are test/development endpoints that should still follow security best practices.\n\n## Problem Statement\n\nDemo endpoints are used for testing and development scenarios. While not production-critical, they exist in dev/staging environments and could be exploited if impersonation safety is bypassed.\n\n## Why It Matters\n\n- **Risk:** Low in production, medium in dev/staging\n- **Impact:** Dem", "created": "2025-12-24T07:07:52Z", "labels": ["security", "guardrails", "P3"], "context": "[guardrails] Fix GAP-023 through GAP-027: Demo endpoint routes ## Summary\n\nMigrate 5 demo/development endpoints from `requireCapability()` to `requireCapabilitySafe()`.\n\nThese are test/development endpoints that should still follow security best practices.\n\n## Pr"}


identifier: gh_issue_3759440069
source: github_issue
status: new
created_at: 2025-12-24 07:52:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3759440069", "title": "[guardrails] Fix GAP-014: Import status route", "url": "https://github.com/sbnctech/clubos/issues/233", "user": "edforman-75", "user_url": "https://github.com/edforman-75", "repo": "clubos", "body_preview": "## Summary\n\nMigrate 1 import status endpoint from `requireCapability()` to `requireCapabilitySafe()`.\n\n## Problem Statement\n\nThe import status endpoint uses `admin:full` capability. While primarily a read operation, it exposes migration state that should be protected during impersonation.\n\n## Why It Matters\n\n- **Risk:** Low - primarily read-only diagnostic data\n- **Impact:** Low - exposes import state info\n- **Priority:** P2 - consistency with other admin:full migrations\n\n## Gaps Addressed\n\n- [ ", "created": "2025-12-24T07:07:13Z", "labels": ["P2", "security", "guardrails", "auth"], "context": "[guardrails] Fix GAP-014: Import status route ## Summary\n\nMigrate 1 import status endpoint from `requireCapability()` to `requireCapabilitySafe()`.\n\n## Problem Statement\n\nThe import status endpoint uses `admin:full` capability. While primarily a "}


identifier: gh_issue_3759439381
source: github_issue
status: new
created_at: 2025-12-24 07:52:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3759439381", "title": "[guardrails] Fix GAP-021, GAP-022: Officer governance routes", "url": "https://github.com/sbnctech/clubos/issues/231", "user": "edforman-75", "user_url": "https://github.com/edforman-75", "repo": "clubos", "body_preview": "## Summary\n\nMigrate 2 officer governance endpoints from `requireCapability()` to `requireCapabilitySafe()`.\n\nThese endpoints manage governance minutes and meetings with `admin:full` capability.\n\n## Problem Statement\n\nGovernance endpoints allow modifying meeting minutes and meeting records. These are official organizational records that should have full audit integrity.\n\n## Why It Matters\n\n- **Risk:** An admin impersonating could modify official governance records\n- **Impact:** Medium - governanc", "created": "2025-12-24T07:06:51Z", "labels": ["P2", "security", "governance", "guardrails", "auth"], "context": "[guardrails] Fix GAP-021, GAP-022: Officer governance routes ## Summary\n\nMigrate 2 officer governance endpoints from `requireCapability()` to `requireCapabilitySafe()`.\n\nThese endpoints manage governance minutes and meetings with `admin:full` capability.\n\n## Pr"}


identifier: gh_issue_3759436291
source: github_issue
status: new
created_at: 2025-12-24 07:52:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3759436291", "title": "[guardrails] Fix GAP-015 through GAP-020: Support cases routes", "url": "https://github.com/sbnctech/clubos/issues/229", "user": "edforman-75", "user_url": "https://github.com/edforman-75", "repo": "clubos", "body_preview": "## Summary\n\nMigrate 6 support case endpoints from `requireCapability()` to `requireCapabilitySafe()`.\n\nThese endpoints manage support case CRUD operations with `admin:full` capability, which should be blocked during impersonation.\n\n## Problem Statement\n\nSupport case endpoints allow creating, updating, and deleting support cases. While these are primarily read/diagnostic operations, they still represent data modification that could be abused during impersonation.\n\n## Why It Matters\n\n- **Risk:** A", "created": "2025-12-24T07:05:09Z", "labels": ["P2", "security", "guardrails", "auth"], "context": "[guardrails] Fix GAP-015 through GAP-020: Support cases routes ## Summary\n\nMigrate 6 support case endpoints from `requireCapability()` to `requireCapabilitySafe()`.\n\nThese endpoints manage support case CRUD operations with `admin:full` capability, which should be"}


identifier: gh_issue_3759630479
source: github_issue
status: new
created_at: 2025-12-24 08:41:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3759630479", "title": "(Optional) SBOM + build provenance", "url": "https://github.com/dmytro-yemelianov/raps/issues/37", "user": "dmytro-yemelianov", "user_url": "https://github.com/dmytro-yemelianov", "repo": "raps", "body_preview": "## Description\n\nGenerate Software Bill of Materials (SBOM) and build provenance for enhanced supply chain security. This helps organizations meet compliance requirements and understand dependencies.\n\n## Acceptance Criteria\n\n- Generate SBOM (CycloneDX or SPDX)\n- Attach to releases or publish in artifacts\n- Document consumption\n\n## Notes\n\nSBOM generation is becoming a standard requirement for enterprise software. This can be implemented incrementally, starting with basic dependency listing.\r\n", "created": "2025-12-24T08:29:40Z", "labels": [], "context": "(Optional) SBOM + build provenance ## Description\n\nGenerate Software Bill of Materials (SBOM) and build provenance for enhanced supply chain security. This helps organizations meet compliance requirements and understand dependencies.\n\n"}


identifier: gh_issue_3759560677
source: github_issue
status: new
created_at: 2025-12-24 08:41:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3759560677", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/Sarita-s667/skills-secure-repository-supply-chaintest/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chaintest", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Sarita-s667! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step,", "created": "2025-12-24T08:01:04Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Sarita-s667! Welcome t"}


identifier: gh_issue_3759698188
source: github_issue
status: new
created_at: 2025-12-24 08:54:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3759698188", "title": "[LOW] Security Vulnerability in tensorflow", "url": "https://github.com/test-org-digice/python-test-new/issues/254", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "python-test-new", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `tensorflow`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-29617\n\n**Description:**\nTensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via `CHECK`-fail in `tf.strings.substr` with invalid arguments. The fix will be included in TensorFlow 2.5.0. We will also cherrypick this commit on TensorFlow 2.4.2, TensorFlow 2.3.3, TensorFlow 2.2.3 and Tensor", "created": "2025-12-24T08:54:24Z", "labels": [], "context": "[LOW] Security Vulnerability in tensorflow ## Security Vulnerability Detected\n\n**Dependency:** `tensorflow`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-29617\n\n**Description:**\nTensorFlow is an end-to-e"}


identifier: gh_issue_3759698076
source: github_issue
status: new
created_at: 2025-12-24 08:54:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3759698076", "title": "[LOW] Security Vulnerability in tensorflow", "url": "https://github.com/test-org-digice/python-test-new/issues/253", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "python-test-new", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `tensorflow`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-29556\n\n**Description:**\nTensorFlow is an end-to-end open source platform for machine learning. An attacker can cause a denial of service via a FPE runtime error in `tf.raw_ops.Reverse`. This is because the implementation(https://github.com/tensorflow/tensorflow/blob/36229ea9e9451dac14a8b1f4711c435a1d84a594/tensorflow/core/kernels/reverse_op.cc#L75", "created": "2025-12-24T08:54:21Z", "labels": [], "context": "[LOW] Security Vulnerability in tensorflow ## Security Vulnerability Detected\n\n**Dependency:** `tensorflow`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-29556\n\n**Description:**\nTensorFlow is an end-to-e"}


identifier: gh_issue_3759697896
source: github_issue
status: new
created_at: 2025-12-24 08:54:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3759697896", "title": "[MEDIUM] Security Vulnerability in tensorflow", "url": "https://github.com/test-org-digice/python-test-new/issues/251", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "python-test-new", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `tensorflow`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-36014\n\n**Description:**\nTensorFlow is an open source platform for machine learning. When `mlir::tfg::TFOp::nameAttr` receives null type list attributes, it crashes. We have patched the issue in GitHub commits 3a754740d5414e362512ee981eefba41561a63a6 and a0f0b9a21c9270930457095092f558fbad4c03e5. The fix will be included in TensorFlow 2.10.0. We ", "created": "2025-12-24T08:54:15Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in tensorflow ## Security Vulnerability Detected\n\n**Dependency:** `tensorflow`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-36014\n\n**Description:**\nTensorFlow is an open "}


identifier: gh_issue_3759697744
source: github_issue
status: new
created_at: 2025-12-24 08:54:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3759697744", "title": "[MEDIUM] Security Vulnerability in tensorflow", "url": "https://github.com/test-org-digice/python-test-new/issues/250", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "python-test-new", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `tensorflow`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-23571\n\n**Description:**\nTensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, a TensorFlow process can encounter cases where a `CHECK` assertion is invalidated based on user controlled arguments, if the tensors have an invalid `dtype` and 0 elements or an invalid shape. This allows attackers to cause den", "created": "2025-12-24T08:54:12Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in tensorflow ## Security Vulnerability Detected\n\n**Dependency:** `tensorflow`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-23571\n\n**Description:**\nTensorflow is an Open "}


identifier: gh_issue_3759697632
source: github_issue
status: new
created_at: 2025-12-24 08:54:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3759697632", "title": "[LOW] Security Vulnerability in tensorflow", "url": "https://github.com/test-org-digice/python-test-new/issues/249", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "python-test-new", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `tensorflow`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-29543\n\n**Description:**\nTensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a `CHECK`-fail in `tf.raw_ops.CTCGreedyDecoder`. This is because the implementation(https://github.com/tensorflow/tensorflow/blob/1615440b17b364b875eb06f43d087381f1460a65/tensorflow/core/kernels/ctc_decoder", "created": "2025-12-24T08:54:09Z", "labels": [], "context": "[LOW] Security Vulnerability in tensorflow ## Security Vulnerability Detected\n\n**Dependency:** `tensorflow`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-29543\n\n**Description:**\nTensorFlow is an end-to-e"}


identifier: gh_issue_3759716996
source: github_issue
status: new
created_at: 2025-12-24 09:06:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3759716996", "title": "[LOW] Security Vulnerability in tensorflow", "url": "https://github.com/test-org-digice/python-test-new/issues/425", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "python-test-new", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `tensorflow`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-29577\n\n**Description:**\nTensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.raw_ops.AvgPool3DGrad` is vulnerable to a heap buffer overflow. The implementation(https://github.com/tensorflow/tensorflow/blob/d80ffba9702dc19d1fac74fc4b766b3fa1ee976b/tensorflow/core/kernels/pooling_ops_3d.cc#L376-L450) assum", "created": "2025-12-24T09:02:57Z", "labels": [], "context": "[LOW] Security Vulnerability in tensorflow ## Security Vulnerability Detected\n\n**Dependency:** `tensorflow`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-29577\n\n**Description:**\nTensorFlow is an end-to-e"}


identifier: gh_issue_3759716893
source: github_issue
status: new
created_at: 2025-12-24 09:06:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3759716893", "title": "[LOW] Security Vulnerability in Werkzeug", "url": "https://github.com/test-org-digice/python-test-new/issues/424", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "python-test-new", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `Werkzeug`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2023-23934\n\n**Description:**\nWerkzeug is a comprehensive WSGI web application library. Browsers may allow \"nameless\" cookies that look like `=value` instead of `key=value`. A vulnerable browser may allow a compromised application on an adjacent subdomain to exploit this to set a cookie like `=__Host-test=bad` for another subdomain. Werkzeug prior to 2.2.", "created": "2025-12-24T09:02:54Z", "labels": [], "context": "[LOW] Security Vulnerability in Werkzeug ## Security Vulnerability Detected\n\n**Dependency:** `Werkzeug`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2023-23934\n\n**Description:**\nWerkzeug is a comprehensive"}


identifier: gh_issue_3759716796
source: github_issue
status: new
created_at: 2025-12-24 09:06:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3759716796", "title": "[MEDIUM] Security Vulnerability in tensorflow", "url": "https://github.com/test-org-digice/python-test-new/issues/423", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "python-test-new", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `tensorflow`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-41202\n\n**Description:**\nTensorFlow is an open source platform for machine learning. In affected versions while calculating the size of the output within the `tf.range` kernel, there is a conditional statement of type `int64 = condition ? int64 : double`. Due to C++ implicit conversion rules, both branches of the condition will be cast to `doubl", "created": "2025-12-24T09:02:51Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in tensorflow ## Security Vulnerability Detected\n\n**Dependency:** `tensorflow`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-41202\n\n**Description:**\nTensorFlow is an open "}


identifier: gh_issue_3759716682
source: github_issue
status: new
created_at: 2025-12-24 09:06:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3759716682", "title": "[MEDIUM] Security Vulnerability in setuptools", "url": "https://github.com/test-org-digice/python-test-new/issues/422", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "python-test-new", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `setuptools`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-40897\n\n**Description:**\nPython Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2022-40897\\\"],", "created": "2025-12-24T09:02:48Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in setuptools ## Security Vulnerability Detected\n\n**Dependency:** `setuptools`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-40897\n\n**Description:**\nPython Packaging Autho"}


identifier: gh_issue_3759716590
source: github_issue
status: new
created_at: 2025-12-24 09:06:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3759716590", "title": "[LOW] Security Vulnerability in redis", "url": "https://github.com/test-org-digice/python-test-new/issues/421", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "python-test-new", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `redis`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-24735\n\n**Description:**\nRedis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment, an attacker with access to Redis prior to version 7.0.0 or 6.2.7 can inject Lua code that will execute with the (potentially higher) privileges of another Redis user. The Lua script execution environment in Red", "created": "2025-12-24T09:02:45Z", "labels": [], "context": "[LOW] Security Vulnerability in redis ## Security Vulnerability Detected\n\n**Dependency:** `redis`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-24735\n\n**Description:**\nRedis is an in-memory database"}


identifier: gh_issue_3759716392
source: github_issue
status: new
created_at: 2025-12-24 09:19:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3759716392", "title": "[MEDIUM] Security Vulnerability in tensorflow", "url": "https://github.com/test-org-digice/python-test-new/issues/420", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "python-test-new", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `tensorflow`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-41893\n\n**Description:**\nTensorFlow is an open source platform for machine learning. If `tf.raw_ops.TensorListResize` is given a nonscalar value for input `size`, it results `CHECK` fail which can be used to trigger a denial of service attack. We have patched the issue in GitHub commit 888e34b49009a4e734c27ab0c43b0b5102682c56. The fix will be in", "created": "2025-12-24T09:02:42Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in tensorflow ## Security Vulnerability Detected\n\n**Dependency:** `tensorflow`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-41893\n\n**Description:**\nTensorFlow is an open "}


identifier: gh_issue_3759716197
source: github_issue
status: new
created_at: 2025-12-24 09:19:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3759716197", "title": "[LOW] Security Vulnerability in tensorflow", "url": "https://github.com/test-org-digice/python-test-new/issues/418", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "python-test-new", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `tensorflow`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-29596\n\n**Description:**\nTensorFlow is an end-to-end open source platform for machine learning. The implementation of the `EmbeddingLookup` TFLite operator is vulnerable to a division by zero error(https://github.com/tensorflow/tensorflow/blob/e4b29809543b250bc9b19678ec4776299dd569ba/tensorflow/lite/kernels/embedding_lookup.cc#L73-L74). An attacker", "created": "2025-12-24T09:02:36Z", "labels": [], "context": "[LOW] Security Vulnerability in tensorflow ## Security Vulnerability Detected\n\n**Dependency:** `tensorflow`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-29596\n\n**Description:**\nTensorFlow is an end-to-e"}


identifier: gh_issue_3759715863
source: github_issue
status: new
created_at: 2025-12-24 09:19:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3759715863", "title": "[HIGH] Security Vulnerability in tensorflow", "url": "https://github.com/test-org-digice/python-test-new/issues/415", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "python-test-new", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `tensorflow`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-23587\n\n**Description:**\nTensorflow is an Open Source Machine Learning Framework. Under certain scenarios, Grappler component of TensorFlow is vulnerable to an integer overflow during cost estimation for crop and resize. Since the cropping parameters are user controlled, a malicious person can trigger undefined behavior. The fix will be included i", "created": "2025-12-24T09:02:27Z", "labels": [], "context": "[HIGH] Security Vulnerability in tensorflow ## Security Vulnerability Detected\n\n**Dependency:** `tensorflow`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-23587\n\n**Description:**\nTensorflow is an Open So"}


identifier: gh_issue_3759662073
source: github_issue
status: new
created_at: 2025-12-24 09:32:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3759662073", "title": "(Optional) SBOM + build provenance", "url": "https://github.com/dmytro-yemelianov/raps/issues/55", "user": "dmytro-yemelianov", "user_url": "https://github.com/dmytro-yemelianov", "repo": "raps", "body_preview": "## Description\n\nGenerate Software Bill of Materials (SBOM) and build provenance for enhanced supply chain security. This helps organizations meet compliance requirements and understand dependencies.\n\n## Acceptance Criteria\n\n- Generate SBOM (CycloneDX or SPDX)\n- Attach to releases or publish in artifacts\n- Document consumption\n\n## Notes\n\nSBOM generation is becoming a standard requirement for enterprise software. This can be implemented incrementally, starting with basic dependency listing.\r\n", "created": "2025-12-24T08:42:33Z", "labels": ["type-feature", "prio-med"], "context": "(Optional) SBOM + build provenance ## Description\n\nGenerate Software Bill of Materials (SBOM) and build provenance for enhanced supply chain security. This helps organizations meet compliance requirements and understand dependencies.\n\n"}


identifier: gh_issue_3759739668
source: github_issue
status: new
created_at: 2025-12-24 09:32:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3759739668", "title": "arXiv NEWS (2025-12-24)", "url": "https://github.com/agb94/arxiv-rss-newsletter/issues/199", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "arxiv-rss-newsletter", "body_preview": "# cs.SE updates on arXiv.org, Wed, 24 Dec 2025 05:00:02 +0000\n\n## [Attention Distance: A Novel Metric for Directed Fuzzing with Large Language Models](https://arxiv.org/abs/2512.19758) [[pdf](https://arxiv.org/pdf/2512.19758.pdf)]\n\nAuthors: Wang Bin, Ao Yang, Kedan Li, Aofan Liu, Hui Li, Guibo Luo, Weixiang Huang, Yan Zhuang\n\nTags: `FL`\n\n In the domain of software security testing, Directed Grey-Box Fuzzing (DGF) has garnered widespread attention for its efficient target localization and excelle", "created": "2025-12-24T09:12:01Z", "labels": ["news"], "context": "arXiv NEWS (2025-12-24) # cs.SE updates on arXiv.org, Wed, 24 Dec 2025 05:00:02 +0000\n\n## [Attention Distance: A Novel Metric for Directed Fuzzing with Large Language Models](https://arxiv.org/abs/2512.19758) [[pdf](https://"}


identifier: gh_issue_3759805701
source: github_issue
status: new
created_at: 2025-12-24 09:44:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3759805701", "title": "Dependency Dashboard", "url": "https://github.com/YKDBontekoe/ai-book-world-builder/issues/214", "user": "renovate[bot]", "user_url": "https://github.com/apps/renovate", "repo": "ai-book-world-builder", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/YKDBontekoe/ai-book-world-builder).\n\n## Deprecations / Replacements\n> [!WARNING]\nThese dependencies are either deprecated or have replacements available:\n\n| Datasource | Name | Replacement PR? |\n|------------|------|--------------|\n| npm | `@types/", "created": "2025-12-24T09:40:16Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the M"}


identifier: gh_issue_3759755301
source: github_issue
status: new
created_at: 2025-12-24 09:44:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3759755301", "title": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected", "url": "https://github.com/truckercore/truckercore1/issues/160", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "truckercore1", "body_preview": "# Security Audit Report - 2025-12-24\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/util vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-9j5q-479x-43g2\nfix available via `npm audit fix --force`\nWill install @stryker-mutator/vitest-runner@8.7.1, which is outside the stated dependency range\nnode_modules/@stryker-mutator/util\n  @stryker-mutator/core  <=8.7.0\n  D", "created": "2025-12-24T09:17:26Z", "labels": ["security", "dependencies", "automated"], "context": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected # Security Audit Report - 2025-12-24\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/"}


identifier: gh_issue_3759807542
source: github_issue
status: new
created_at: 2025-12-24 09:57:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3759807542", "title": "Wiz - 'main' Branch Scan Overview", "url": "https://github.com/rmaury-org/sorcery-solutions-backend/issues/1", "user": "wiz-5d813949ef[bot]", "user_url": "https://github.com/apps/wiz-5d813949ef", "repo": "sorcery-solutions-backend", "body_preview": "<!-- WizIssue-1d9f648c504c9047d99f272cf811a9cfcb00c8146de3f19e3acd5756aa35f3f7-main -->\n\n<a><picture><source media=\"(prefers-color-scheme: dark)\" srcset=\"https://assets.wiz.io/wiz-code/banners/pull_request_banner_dark.svg\"><source media=\"(prefers-color-scheme: light)\" srcset=\"https://assets.wiz.io/wiz-code/banners/pull_request_banner_light.svg\"><img align=\"top\" valign=\"top\" alt=\"Wiz Remediation Pull Request Banner\" title=\"Wiz Remediation Pull Request Banner\" src=\"https://assets.wiz.io/wiz-code/b", "created": "2025-12-24T09:41:12Z", "labels": ["Wiz-remediation"], "context": "Wiz - 'main' Branch Scan Overview <!-- WizIssue-1d9f648c504c9047d99f272cf811a9cfcb00c8146de3f19e3acd5756aa35f3f7-main -->\n\n<a><picture><source media=\"(prefers-color-scheme: dark)\" srcset=\"https://assets.wiz.io/wiz-code/banners/pull_re"}


identifier: gh_issue_3759899069
source: github_issue
status: new
created_at: 2025-12-24 10:33:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3759899069", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/ktasolutions/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @ktasolutions! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step", "created": "2025-12-24T10:21:32Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @ktasolutions! Welcome "}


identifier: gh_issue_3759716283
source: github_issue
status: new
created_at: 2025-12-24 10:33:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3759716283", "title": "[HIGH] Security Vulnerability in tornado", "url": "https://github.com/test-org-digice/python-test-new/issues/419", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "python-test-new", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `tornado`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-47287\n\n**Description:**\nTornado is a Python web framework and asynchronous networking library. When Tornado's ``multipart/form-data`` parser encounters certain errors, it logs a warning but continues trying to parse the remainder of the data. This allows remote attackers to generate an extremely high volume of logs, constituting a DoS attack. This D", "created": "2025-12-24T09:02:39Z", "labels": [], "context": "[HIGH] Security Vulnerability in tornado ## Security Vulnerability Detected\n\n**Dependency:** `tornado`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-47287\n\n**Description:**\nTornado is a Python web fra"}


identifier: gh_issue_3759714787
source: github_issue
status: new
created_at: 2025-12-24 10:33:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3759714787", "title": "[HIGH] Security Vulnerability in setuptools", "url": "https://github.com/test-org-digice/python-test-new/issues/407", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "python-test-new", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `setuptools`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-47273\n\n**Description:**\nsetuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the p", "created": "2025-12-24T09:02:03Z", "labels": [], "context": "[HIGH] Security Vulnerability in setuptools ## Security Vulnerability Detected\n\n**Dependency:** `setuptools`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-47273\n\n**Description:**\nsetuptools is a package "}


identifier: gh_issue_3759713166
source: github_issue
status: new
created_at: 2025-12-24 10:33:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3759713166", "title": "[MEDIUM] Security Vulnerability in redis", "url": "https://github.com/test-org-digice/python-test-new/issues/395", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "python-test-new", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `redis`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-31228\n\n**Description:**\nRedis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service by using specially crafted, long string match patterns on supported commands such as `KEYS`, `SCAN`, `PSUBSCRIBE`, `FUNCTION LIST`, `COMMAND LIST` and ACL definitions. Matching of extremely long patterns may ", "created": "2025-12-24T09:01:27Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in redis ## Security Vulnerability Detected\n\n**Dependency:** `redis`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-31228\n\n**Description:**\nRedis is an open source, in"}


identifier: gh_issue_3759924186
source: github_issue
status: new
created_at: 2025-12-24 10:33:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3759924186", "title": "Document / improve the 3-value behavior of `boot.autostart`", "url": "https://github.com/lxc/incus/issues/2788", "user": "chatziko", "user_url": "https://github.com/chatziko", "repo": "incus", "body_preview": "### Is there an existing issue for this?\n\n- [x] There is no existing issue for this bug\n\n### Is this happening on an up to date version of Incus?\n\n- [x] This is happening on a supported version of Incus\n\n### Incus system details\n\n```yaml\nconfig:\n  core.https_address: 0.0.0.0:8443\n  core.metrics_address: :8444\n  core.metrics_authentication: \"false\"\napi_extensions:\n- storage_zfs_remove_snapshots\n- container_host_shutdown_timeout\n- container_stop_priority\n- container_syscall_filtering\n- auth_pki\n- ", "created": "2025-12-24T10:31:19Z", "labels": [], "context": "Document / improve the 3-value behavior of `boot.autostart` ### Is there an existing issue for this?\n\n- [x] There is no existing issue for this bug\n\n### Is this happening on an up to date version of Incus?\n\n- [x] This is happening on a supported version of Inc"}


identifier: gh_issue_3759855392
source: github_issue
status: new
created_at: 2025-12-24 10:45:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3759855392", "title": "[LOW] Security Vulnerability in node-fetch", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/1030", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process would end without failure. For most people, this fix will have a little or no impact. However, if you are re", "created": "2025-12-24T10:03:19Z", "labels": [], "context": "[LOW] Security Vulnerability in node-fetch ## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before version"}


identifier: gh_issue_3759974139
source: github_issue
status: new
created_at: 2025-12-24 10:57:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3759974139", "title": "[LOW] Security Vulnerability in node-fetch", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/1098", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process would end without failure. For most people, this fix will have a little or no impact. However, if you are re", "created": "2025-12-24T10:47:19Z", "labels": [], "context": "[LOW] Security Vulnerability in node-fetch ## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before version"}


identifier: gh_issue_3760019552
source: github_issue
status: new
created_at: 2025-12-24 11:08:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3760019552", "title": "Vreemde veranderingen systeem", "url": "https://github.com/dragokas/hijackthis/issues/303", "user": "hansaandestegge", "user_url": "https://github.com/hansaandestegge", "repo": "hijackthis", "body_preview": "Ik maak weleens een \"Hijack this-overzicht\". Vandaag hele vreemde verandering in het totaalpakket van het systeem.\nIk gebruik Norton, Norton Ultimate, CCleaner en Spybot.\n\nHierbij het overzicht:\n\nLogfile of HiJackThis+ build 2025-01-16 Beta v.3.4.0.17\n\nPlatform:  x64 Windows 11 (Pro), 10.0.26200.7462 (ReleaseId: 2009, 25H2), Service Pack: 0\nTime:      24.12.2025 - 11:16 (UTC+01:00)\nLanguage:  OS: English (0x809). Display: Dutch (0x413). Non-Unicode: Dutch (0x413)\nMemory:    57,67 GiB Free / 64. ", "created": "2025-12-24T11:00:12Z", "labels": [], "context": "Vreemde veranderingen systeem Ik maak weleens een \"Hijack this-overzicht\". Vandaag hele vreemde verandering in het totaalpakket van het systeem.\nIk gebruik Norton, Norton Ultimate, CCleaner en Spybot.\n\nHierbij het overzicht:\n\nLogf"}


identifier: gh_issue_3760011683
source: github_issue
status: new
created_at: 2025-12-24 11:08:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3760011683", "title": "Fatal error: python3-dir: No associated thread state found", "url": "https://github.com/bareos/bareos/issues/2492", "user": "bruno-at-bareos", "user_url": "https://github.com/bruno-at-bareos", "repo": "bareos", "body_preview": "### Bareos component version\n\n>= 25.0 (reproducible also on master)\n\n\n### Steps to reproduce\n\nFor example on a Debian 13 hosts, install the following packages\n\n```\napt install -y bareos-bconsole bareos-client bareos-common bareos-contrib-director-python-plugins bareos-contrib-filedaemon-python-plugins bareos-contrib-tools bareos-database-common bareos-database-postgresql bareos-database-tools bareos-dbg bareos-director bareos-director-python-plugins-common bareos-director-python3-plugin bareos-f", "created": "2025-12-24T10:58:00Z", "labels": ["bug"], "context": "Fatal error: python3-dir: No associated thread state found ### Bareos component version\n\n>= 25.0 (reproducible also on master)\n\n\n### Steps to reproduce\n\nFor example on a Debian 13 hosts, install the following packages\n\n```\napt install -y bareos-bconsole bareo"}


identifier: gh_issue_3759959883
source: github_issue
status: new
created_at: 2025-12-24 11:08:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3759959883", "title": "\ud83d\udd10 Implement Zero-Trust Security Architecture", "url": "https://github.com/necromancer-io/dark-automation/issues/107", "user": "uldyssian-sh", "user_url": "https://github.com/uldyssian-sh", "repo": "dark-automation", "body_preview": "## Epic: Zero-Trust Security Architecture Implementation\n\n### Executive Summary\nImplement comprehensive zero-trust security model across all infrastructure components to meet enterprise security requirements and compliance standards.\n\n### Business Justification\n- **Regulatory Compliance:** SOC 2 Type II, ISO 27001, PCI DSS requirements\n- **Risk Mitigation:** Reduce attack surface by 85%\n- **Cost Savings:** Prevent potential .4M in breach costs\n- **Competitive Advantage:** Enterprise-grade securi", "created": "2025-12-24T10:42:43Z", "labels": [], "context": "\ud83d\udd10 Implement Zero-Trust Security Architecture ## Epic: Zero-Trust Security Architecture Implementation\n\n### Executive Summary\nImplement comprehensive zero-trust security model across all infrastructure components to meet enterprise security requi"}


identifier: gh_issue_3759953166
source: github_issue
status: new
created_at: 2025-12-24 11:08:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3759953166", "title": "[Package Update] Suricata", "url": "https://github.com/Entware/Entware/issues/1213", "user": "iz0eyj", "user_url": "https://github.com/iz0eyj", "repo": "Entware", "body_preview": "## Package Information\n\n**Package name:** `suricata7`\n\n**Current version in Entware:** 7.0.10 (released October 18, 2024)\n\n**Latest upstream version:** 8.0.2 (released November 6, 2024)\n\n**Upstream repository:** https://github.com/OISF/suricata\n\n**Official release notes:** https://suricata.io/2024/11/06/suricata-8-0-2-released/\n\n---\n\n## Rationale for Update Request\n\nSuricata is currently **14+ months behind** the upstream stable release, missing an entire major version upgrade (7.x \u2192 8.0) along ", "created": "2025-12-24T10:40:35Z", "labels": [], "context": "[Package Update] Suricata ## Package Information\n\n**Package name:** `suricata7`\n\n**Current version in Entware:** 7.0.10 (released October 18, 2024)\n\n**Latest upstream version:** 8.0.2 (released November 6, 2024)\n\n**Upstream re"}


identifier: gh_issue_3759950127
source: github_issue
status: new
created_at: 2025-12-24 11:08:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3759950127", "title": "Strange", "url": "https://github.com/topgrade-rs/topgrade/issues/1647", "user": "umasse", "user_url": "https://github.com/umasse", "repo": "topgrade", "body_preview": "\n## Checklist\n\n- [X] I have searched the issue tracker for relevant or duplicate issues.\n\n## Erroneous Behavior\n\nI am using topgrade to update my Ubuntu 25.10 system. I get strange output during the Flatpak part.\n```\n\u2500\u2500 08:09:34 - Flatpak User Packages \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\nLooking for updates\u2026\n\nNothing to do.\n\n\u2500\u2500 08:09:35 - Flatpak System Packages \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\nLooking for updates\u2026\n\n\u00a0 \u00a0 \u00a0 \u00a0 ID\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0Branch\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Op\u00a0 ", "created": "2025-12-24T10:39:36Z", "labels": [], "context": "Strange \n## Checklist\n\n- [X] I have searched the issue tracker for relevant or duplicate issues.\n\n## Erroneous Behavior\n\nI am using topgrade to update my Ubuntu 25.10 system. I get strange output during the F"}


identifier: gh_issue_3759942679
source: github_issue
status: new
created_at: 2025-12-24 11:08:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3759942679", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/cagingulsen/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @cagingulsen! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step,", "created": "2025-12-24T10:37:12Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @cagingulsen! Welcome t"}


identifier: gh_issue_3760019278
source: github_issue
status: new
created_at: 2025-12-24 11:20:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3760019278", "title": "[MEDIUM] Security Vulnerability in serve-static", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/1181", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `serve-static`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-43800\n\n**Description:**\nserve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to redirect() may execute untrusted code. This issue is patched in serve-static 1.16.0.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2024-43800\\\"],\\\"published\\\":\\\"2024-09-10T15:15:17.937\\\",\\\"lastModifi", "created": "2025-12-24T11:00:03Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in serve-static ## Security Vulnerability Detected\n\n**Dependency:** `serve-static`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-43800\n\n**Description:**\nserve-static serves "}


identifier: gh_issue_3760018885
source: github_issue
status: new
created_at: 2025-12-24 11:20:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3760018885", "title": "[MEDIUM] Security Vulnerability in tough-cookie", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/1180", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `tough-cookie`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2023-26136\n\n**Description:**\nVersions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2023-26", "created": "2025-12-24T11:00:00Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in tough-cookie ## Security Vulnerability Detected\n\n**Dependency:** `tough-cookie`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2023-26136\n\n**Description:**\nVersions of the pack"}


identifier: gh_issue_3760018785
source: github_issue
status: new
created_at: 2025-12-24 11:20:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3760018785", "title": "[HIGH] Security Vulnerability in shelljs", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/1179", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `shelljs`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-0144\n\n**Description:**\nshelljs is vulnerable to Improper Privilege Management\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2022-0144\\\"],\\\"published\\\":\\\"2022-01-11T07:15:07.260\\\",\\\"lastModified\\\":\\\"2024-11-21T06:37:59.840\\\",\\\"version\\\":\\\"3.1\\\",\\\"vectorString\\\":\\\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\\\",\\\"baseScore\\\":7.1,\\\"baseSev", "created": "2025-12-24T10:59:57Z", "labels": [], "context": "[HIGH] Security Vulnerability in shelljs ## Security Vulnerability Detected\n\n**Dependency:** `shelljs`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-0144\n\n**Description:**\nshelljs is vulnerable to Imp"}


identifier: gh_issue_3760018534
source: github_issue
status: new
created_at: 2025-12-24 11:20:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3760018534", "title": "[LOW] Security Vulnerability in node-fetch", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/1178", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process would end without failure. For most people, this fix will have a little or no impact. However, if you are re", "created": "2025-12-24T10:59:54Z", "labels": [], "context": "[LOW] Security Vulnerability in node-fetch ## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before version"}


identifier: gh_issue_3760018437
source: github_issue
status: new
created_at: 2025-12-24 11:20:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3760018437", "title": "[MEDIUM] Security Vulnerability in node-fetch", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/1177", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-0235\n\n**Description:**\nnode-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2022-0235\\\"],\\\"published\\\":\\\"2022-01-16T17:15:07.870\\\",\\\"lastModified\\\":\\\"2024-11-21T06:38:12.150\\\",\\\"version\\\":\\\"3.1\\\",\\\"vectorString\\\":\\\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/", "created": "2025-12-24T10:59:51Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in node-fetch ## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-0235\n\n**Description:**\nnode-fetch is vulnerabl"}


identifier: gh_issue_3760087857
source: github_issue
status: new
created_at: 2025-12-24 11:32:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3760087857", "title": "Security Vulnerability: Hardcoded Database Credentials in Repository - CWE-798", "url": "https://github.com/overcut-ai/awesome-overcut/issues/215", "user": "overcut-ai[bot]", "user_url": "https://github.com/apps/overcut-ai", "repo": "awesome-overcut", "body_preview": "## Severity: CRITICAL\n\n## CVE/CWE Reference\n**CWE-798**: Use of Hard-coded Credentials\n\n## Description\nDatabase credentials are hardcoded in the `.env` file which is committed to the repository. This exposes sensitive authentication information to anyone with repository access.\n\n## Affected Files\n- `apps/hotel-management-service-server/.env`\n\n## Vulnerability Details\nThe following sensitive credentials are hardcoded in the repository:\n```\nDB_PASSWORD=admin\nDB_USER=admin\nDB_URL=postgres://admin:a", "created": "2025-12-24T11:30:07Z", "labels": ["database", "cve"], "context": "Security Vulnerability: Hardcoded Database Credentials in Repository - CWE-798 ## Severity: CRITICAL\n\n## CVE/CWE Reference\n**CWE-798**: Use of Hard-coded Credentials\n\n## Description\nDatabase credentials are hardcoded in the `.env` file which is committed to the repository. This "}


identifier: gh_issue_3760116420
source: github_issue
status: new
created_at: 2025-12-24 11:45:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3760116420", "title": "ITIL V4 Training for the Oil and Gas Industry in Nigeria", "url": "https://github.com/visadone123/visadone/issues/34", "user": "ITILtraining", "user_url": "https://github.com/ITILtraining", "repo": "visadone", "body_preview": "Africa\u2019s oil and gas industry plays an integral part in stimulating economic growth, providing energy security, and contributing to Africa's industrialization process. The growth of numerous African economies has led to an increase in funding for energy-related projects, including enhancing energy infrastructure and activities such as searching, drilling, producing, refining, and distributing crude oil. As the Oil and Gas Industry continues to grow, its dependence on the use of many technologica", "created": "2025-12-24T11:43:40Z", "labels": [], "context": "ITIL V4 Training for the Oil and Gas Industry in Nigeria Africa\u2019s oil and gas industry plays an integral part in stimulating economic growth, providing energy security, and contributing to Africa's industrialization process. The growth of numerous African e"}


identifier: gh_issue_3760098501
source: github_issue
status: new
created_at: 2025-12-24 11:45:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3760098501", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/raheemkhan77/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @raheemkhan77! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step", "created": "2025-12-24T11:35:22Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @raheemkhan77! Welcome "}


identifier: gh_issue_3760076491
source: github_issue
status: new
created_at: 2025-12-24 11:45:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3760076491", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/johannesjacobschneider/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @johannesjacobschneider! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete", "created": "2025-12-24T11:25:31Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @johannesjacobschneider"}


identifier: gh_issue_3760087844
source: github_issue
status: new
created_at: 2025-12-24 11:57:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3760087844", "title": "Security Vulnerability: GraphQL Introspection and Playground Enabled in Production - CWE-200", "url": "https://github.com/overcut-ai/awesome-overcut/issues/214", "user": "overcut-ai[bot]", "user_url": "https://github.com/apps/overcut-ai", "repo": "awesome-overcut", "body_preview": "## Severity: HIGH\n\n## CVE/CWE Reference\n**CWE-200**: Exposure of Sensitive Information to an Unauthorized Actor\n\n## Description\nThe GraphQL API has introspection and playground features enabled based on environment variables without proper safeguards. This configuration exposes the entire GraphQL schema to potential attackers.\n\n## Affected Files\n- `apps/hotel-management-service-server/src/app.module.ts` (lines 32-38)\n\n## Vulnerability Details\n```typescript\nconst playground = configService.get(\"G", "created": "2025-12-24T11:30:06Z", "labels": ["api", "cve"], "context": "Security Vulnerability: GraphQL Introspection and Playground Enabled in Production - CWE-200 ## Severity: HIGH\n\n## CVE/CWE Reference\n**CWE-200**: Exposure of Sensitive Information to an Unauthorized Actor\n\n## Description\nThe GraphQL API has introspection and playground features enabled based "}


identifier: gh_issue_3760017278
source: github_issue
status: new
created_at: 2025-12-24 11:57:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3760017278", "title": "[HIGH] Security Vulnerability in express", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/1171", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-24999\n\n**Description:**\nqs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an __ proto__ key can be used. In many typical Express use cases, an unauthenticated remote attacker can place the attack payload in the query string of the URL that is used t", "created": "2025-12-24T10:59:33Z", "labels": [], "context": "[HIGH] Security Vulnerability in express ## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-24999\n\n**Description:**\nqs before 6.10.3, as used i"}


identifier: gh_issue_3760153504
source: github_issue
status: new
created_at: 2025-12-24 12:10:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3760153504", "title": "Chore: track npm audit vulnerabilities", "url": "https://github.com/jfcostello/universal_llm_adapter/issues/479", "user": "jfcostello", "user_url": "https://github.com/jfcostello", "repo": "universal_llm_adapter", "body_preview": "Follow-up from PR #431 review.\n\n## Context\n`npm ci` currently reports 3 vulnerabilities (1 moderate, 2 high). These appear to be pre-existing transitive deps.\n\n## Goal\nTrack and resolve via dependency upgrades where feasible, without mixing into unrelated feature PRs.\n\n## Definition of Done\n- Identify vulnerable packages and upgrade path.\n- Apply upgrades in a dedicated PR with full unit + live coverage.\n\n## Notes\n- Do **not** fix as part of PR #431 follow-ups; track only.\n", "created": "2025-12-24T12:02:42Z", "labels": ["bug"], "context": "Chore: track npm audit vulnerabilities Follow-up from PR #431 review.\n\n## Context\n`npm ci` currently reports 3 vulnerabilities (1 moderate, 2 high). These appear to be pre-existing transitive deps.\n\n## Goal\nTrack and resolve via dependency"}


identifier: gh_issue_3759989785
source: github_issue
status: new
created_at: 2025-12-24 13:14:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3759989785", "title": "New Segments API", "url": "https://github.com/LeadCMS/leadcms.core/issues/299", "user": "peterliapin", "user_url": "https://github.com/peterliapin", "repo": "leadcms.core", "body_preview": "## Overview\n\nThe Segments feature must allows users to create, manage, and organize contact groups for targeted marketing campaigns. Segments can be:\n\n- **Dynamic**: Rule-based segments that automatically include/exclude contacts based on defined criteria\n- **Static**: Manually curated lists of specific contacts\n\n## API Endpoints\n\nFollowing the existing LeadCMS API patterns, implement the following endpoints:\n\n### 1. List Segments\n\n**Endpoint**: `GET /api/segments`\n**Query Parameters**:\n\n- `quer", "created": "2025-12-24T10:52:01Z", "labels": ["enhancement"], "context": "New Segments API ## Overview\n\nThe Segments feature must allows users to create, manage, and organize contact groups for targeted marketing campaigns. Segments can be:\n\n- **Dynamic**: Rule-based segments that automatic"}


identifier: gh_issue_3760309120
source: github_issue
status: new
created_at: 2025-12-24 13:25:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3760309120", "title": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc/issues/22", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc", "body_preview": "## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-web-6.1.6.jar</b></summary>\n\n<p>Spring Web</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDe", "created": "2025-12-24T13:14:11Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar ## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


