# leads

identifier: gh_issue_3760309017
source: github_issue
status: new
created_at: 2025-12-24 13:25:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3760309017", "title": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc/issues/18", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc", "body_preview": "## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-webmvc-6.1.6.jar</b></summary>\n\n<p>Spring Web MVC</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</", "created": "2025-12-24T13:14:08Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar ## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3760308857
source: github_issue
status: new
created_at: 2025-12-24 13:25:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3760308857", "title": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc/issues/12", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc", "body_preview": "## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-24T13:14:03Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3760308694
source: github_issue
status: new
created_at: 2025-12-24 13:25:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3760308694", "title": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc/issues/8", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc", "body_preview": "## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependen", "created": "2025-12-24T13:13:58Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3760305558
source: github_issue
status: new
created_at: 2025-12-24 13:25:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3760305558", "title": "[HIGH] Security Vulnerability in y18n", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/1308", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `y18n`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-7774\n\n**Description:**\nThe package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2020-7774\\\"],\\\"published\\\":\\\"2020-11-17T13:15:12.633\\\",\\\"lastModified\\\":\\\"2024-11-21T05:37:46.690\\\",\\\"version\\\":\\\"3.1\\\",\\\"vectorString\\\":\\\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\\\"", "created": "2025-12-24T13:12:19Z", "labels": [], "context": "[HIGH] Security Vulnerability in y18n ## Security Vulnerability Detected\n\n**Dependency:** `y18n`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-7774\n\n**Description:**\nThe package y18n before 3.2.2, "}


identifier: gh_issue_3760332001
source: github_issue
status: new
created_at: 2025-12-24 13:37:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3760332001", "title": "[SOOS] myPublicRepo: Fix CVE-2023-52389 Vulnerability (poco@1.8.1)", "url": "https://github.com/SOOS-FAngelino/myPublicRepo/issues/110", "user": "soos-security-analysis-qa[bot]", "user_url": "https://github.com/apps/soos-security-analysis-qa", "repo": "myPublicRepo", "body_preview": "Summary:\n\nA Critical severity Vulnerability was detected in myPublicRepo at Nov 11, 2025, 02:57 PM. \n\n[CVE-2023-52389 Vulnerability (poco@1.8.1)](https://qa-app.soos.io/clients/3hvuked5v/projects/fc6t469tz/branches/hj152l4xa?status=pending&search=CVE-2023-52389)\n\n----\n\nDescription:\n\nUTF32Encoding.cpp in POCO has an integer overflow and buffer overflow vulnerability due to negative return values in convert() and queryConvert().\n\n----\n\nSolution:\n\nRemove or update the package(s) and version(s) whic", "created": "2025-12-24T13:26:03Z", "labels": [], "context": "[SOOS] myPublicRepo: Fix CVE-2023-52389 Vulnerability (poco@1.8.1) Summary:\n\nA Critical severity Vulnerability was detected in myPublicRepo at Nov 11, 2025, 02:57 PM. \n\n[CVE-2023-52389 Vulnerability (poco@1.8.1)](https://qa-app.soos.io/clients/3hvuked5v/projects/fc6t"}


identifier: gh_issue_3760309203
source: github_issue
status: new
created_at: 2025-12-24 13:37:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3760309203", "title": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc/issues/25", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc", "body_preview": "## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-24T13:14:14Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3760309158
source: github_issue
status: new
created_at: 2025-12-24 13:37:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3760309158", "title": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc/issues/23", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc", "body_preview": "## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-24T13:14:12Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3760309161
source: github_issue
status: new
created_at: 2025-12-24 13:37:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3760309161", "title": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc/issues/24", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc", "body_preview": "## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-core-6.1.6.jar</b></summary>\n\n<p>Spring Core</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>", "created": "2025-12-24T13:14:12Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar ## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <"}


identifier: gh_issue_3760308488
source: github_issue
status: new
created_at: 2025-12-24 13:37:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3760308488", "title": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc/issues/4", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc", "body_preview": "## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDepend", "created": "2025-12-24T13:13:51Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3760305465
source: github_issue
status: new
created_at: 2025-12-24 13:37:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3760305465", "title": "[HIGH] Security Vulnerability in websocket-extensions", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/1307", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `websocket-extensions`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-7663\n\n**Description:**\nwebsocket-extensions ruby module prior to 0.1.5 allows Denial of Service (DoS) via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequence of a backslash and some other character. This could ", "created": "2025-12-24T13:12:16Z", "labels": [], "context": "[HIGH] Security Vulnerability in websocket-extensions ## Security Vulnerability Detected\n\n**Dependency:** `websocket-extensions`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-7663\n\n**Description:**\nwebsocket-exten"}


identifier: gh_issue_3760305381
source: github_issue
status: new
created_at: 2025-12-24 13:37:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3760305381", "title": "[MEDIUM] Security Vulnerability in yargs-parser", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/1306", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `yargs-parser`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-7608\n\n**Description:**\nyargs-parser could be tricked into adding or modifying properties of Object.prototype using a \"__proto__\" payload.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2020-7608\\\"],\\\"published\\\":\\\"2020-03-16T20:15:12.860\\\",\\\"lastModified\\\":\\\"2024-11-21T05:37:27.963\\\",\\\"version\\\":\\\"3.1\\\",\\\"vectorString\\\":\\\"CVSS:3.", "created": "2025-12-24T13:12:13Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in yargs-parser ## Security Vulnerability Detected\n\n**Dependency:** `yargs-parser`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-7608\n\n**Description:**\nyargs-parser could be"}


identifier: gh_issue_3760360248
source: github_issue
status: new
created_at: 2025-12-24 13:49:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3760360248", "title": "[Phase 6] Sign packages with Sigstore/cosign", "url": "https://github.com/dlrivada/Encina/issues/93", "user": "dlrivada", "user_url": "https://github.com/dlrivada", "repo": "Encina", "body_preview": "## Description\n\nSign NuGet packages using Sigstore/cosign for supply chain security.\n\n## Context\n\n- **Phase**: 6 - Release Preparation\n- **Priority**: \u2b50\u2b50\u2b50 Medium\n- **Complexity**: Medium\n\n## Options\n\n### Option 1: NuGet Package Signing\n\n- Use certificate-based signing\n- Requires code signing certificate\n\n### Option 2: Sigstore/Cosign\n\n- Keyless signing\n- Uses OIDC identity\n- No certificate management\n\n## Tasks\n\n- [ ] Evaluate signing options\n- [ ] Configure chosen signing method\n- [ ] Sign packa", "created": "2025-12-24T13:41:00Z", "labels": ["enhancement", "phase-6-release", "priority-medium", "complexity-medium"], "context": "[Phase 6] Sign packages with Sigstore/cosign ## Description\n\nSign NuGet packages using Sigstore/cosign for supply chain security.\n\n## Context\n\n- **Phase**: 6 - Release Preparation\n- **Priority**: \u2b50\u2b50\u2b50 Medium\n- **Complexity**: Medium\n\n## Options\n\n"}


identifier: gh_issue_3760359824
source: github_issue
status: new
created_at: 2025-12-24 13:49:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3760359824", "title": "[Phase 6] SLSA Level 2 compliance - build provenance", "url": "https://github.com/dlrivada/Encina/issues/92", "user": "dlrivada", "user_url": "https://github.com/dlrivada", "repo": "Encina", "body_preview": "## Description\n\nAchieve SLSA Level 2 compliance for supply chain security with build provenance.\n\n## Context\n\n- **Phase**: 6 - Release Preparation\n- **Priority**: \u2b50\u2b50\u2b50\u2b50 High\n- **Complexity**: Medium\n\n## SLSA Level 2 Requirements\n\n- Build service verifies source\n- Scripted builds\n- Authenticated provenance\n\n## Tasks\n\n- [ ] Configure SLSA GitHub Action\n- [ ] Generate build provenance\n- [ ] Attach provenance to releases\n- [ ] Verify provenance can be validated\n- [ ] Document in SECURITY.md\n\n## Examp", "created": "2025-12-24T13:40:44Z", "labels": ["enhancement", "phase-6-release", "priority-high", "complexity-medium"], "context": "[Phase 6] SLSA Level 2 compliance - build provenance ## Description\n\nAchieve SLSA Level 2 compliance for supply chain security with build provenance.\n\n## Context\n\n- **Phase**: 6 - Release Preparation\n- **Priority**: \u2b50\u2b50\u2b50\u2b50 High\n- **Complexity**: Medium\n\n#"}


identifier: gh_issue_3760130180
source: github_issue
status: new
created_at: 2025-12-24 13:50:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3760130180", "title": "There is no option for delete server/s", "url": "https://github.com/airlinklabs/panel/issues/49", "user": "saidur-rahman-alif", "user_url": "https://github.com/saidur-rahman-alif", "repo": "panel", "body_preview": "There is no way to delete server. That thing is mandatory for a game server panel", "created": "2025-12-24T11:50:49Z", "labels": [], "context": "There is no option for delete server/s There is no way to delete server. That thing is mandatory for a game server panel"}


identifier: gh_issue_3760388171
source: github_issue
status: new
created_at: 2025-12-24 14:01:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3760388171", "title": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b/issues/12", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b", "body_preview": "## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-web-6.1.6.jar</b></summary>\n\n<p>Spring Web</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDe", "created": "2025-12-24T13:57:40Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar ## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3760388052
source: github_issue
status: new
created_at: 2025-12-24 14:01:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3760388052", "title": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b/issues/9", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b", "body_preview": "## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-webmvc-6.1.6.jar</b></summary>\n\n<p>Spring Web MVC</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</", "created": "2025-12-24T13:57:35Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar ## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3760387905
source: github_issue
status: new
created_at: 2025-12-24 14:01:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3760387905", "title": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b/issues/6", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b", "body_preview": "## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-24T13:57:31Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3760387857
source: github_issue
status: new
created_at: 2025-12-24 14:01:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3760387857", "title": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b/issues/5", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b", "body_preview": "## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependen", "created": "2025-12-24T13:57:29Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3760378026
source: github_issue
status: new
created_at: 2025-12-24 14:01:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3760378026", "title": "jupyter-1.1.1-py2.py3-none-any.whl: 1 vulnerabilities (highest severity is: 7.8)", "url": "https://github.com/BuloZB/BuloCloudSentinel/issues/450", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "BuloCloudSentinel", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jupyter-1.1.1-py2.py3-none-any.whl</b></summary>\n\n<p></p>\n<p>Path to dependency file: /services/ai/ml_platform/requirements.txt</p>\n<p>Path to vulnerable library: /tmp/ws-ua_20251224100325_BBAJLS/python_RERHEH/202512241105131/env/lib/python3.9/site-packages/nbconvert-7.16.6.dist-info</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com", "created": "2025-12-24T13:51:37Z", "labels": ["Mend: dependency security vulnerability"], "context": "jupyter-1.1.1-py2.py3-none-any.whl: 1 vulnerabilities (highest severity is: 7.8) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jupyter-1.1.1-py2.py3-none-any.whl</b></summary"}


identifier: gh_issue_3760434179
source: github_issue
status: new
created_at: 2025-12-24 14:25:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3760434179", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/prattak86/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @prattak86! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I", "created": "2025-12-24T14:21:02Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @prattak86! Welcome to "}


identifier: gh_issue_3760526730
source: github_issue
status: new
created_at: 2025-12-24 15:01:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3760526730", "title": "Add Next.js 16 support", "url": "https://github.com/z4nr34l/nemo/issues/171", "user": "framirez853", "user_url": "https://github.com/framirez853", "repo": "nemo", "body_preview": "**Is your feature request related to a problem? Please describe.**\nWe can't upgrade to Next.js 16 because @rescale/nemo@2.0.2 only supports Next.js 13\u201315 (next@^13.0.0-0 || ^14.0.0-0 || ^15.0.0-0). Next.js 16.0.7+ includes security fixes (CVE-2025-66478), so we're blocked from upgrading for security reasons.\n\n**Describe the solution you'd like**\nAdd Next.js 16 to the peer dependencies. Update the peer dependency range to include ^16.0.0-0, e.g.:\n`\"peerDependencies\": {  \"next\": \"^13.0.0-0 || ^14.", "created": "2025-12-24T14:57:46Z", "labels": [], "context": "Add Next.js 16 support **Is your feature request related to a problem? Please describe.**\nWe can't upgrade to Next.js 16 because @rescale/nemo@2.0.2 only supports Next.js 13\u201315 (next@^13.0.0-0 || ^14.0.0-0 || ^15.0.0-0). Ne"}


identifier: gh_issue_3760388260
source: github_issue
status: new
created_at: 2025-12-24 15:01:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3760388260", "title": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b/issues/15", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b", "body_preview": "## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-core-6.1.6.jar</b></summary>\n\n<p>Spring Core</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>", "created": "2025-12-24T13:57:43Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar ## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <"}


identifier: gh_issue_3760388208
source: github_issue
status: new
created_at: 2025-12-24 15:01:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3760388208", "title": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b/issues/14", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b", "body_preview": "## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-24T13:57:42Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3760388128
source: github_issue
status: new
created_at: 2025-12-24 15:01:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3760388128", "title": "CVE-2025-48988 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b/issues/11", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b", "body_preview": "## CVE-2025-48988 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-24T13:57:38Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48988 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48988 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3760550993
source: github_issue
status: new
created_at: 2025-12-24 15:25:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3760550993", "title": "\ud83d\udea8 Security Vulnerabilities Detected", "url": "https://github.com/cbwinslow/arbfinder-suite/issues/40", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "arbfinder-suite", "body_preview": "## Security Vulnerabilities Detected\n\n\n### NPM Dependencies\n- Critical: 0\n- High: 1\n- Moderate: 0\n- Low: 0\n", "created": "2025-12-24T15:10:03Z", "labels": ["dependencies", "security", "critical"], "context": "\ud83d\udea8 Security Vulnerabilities Detected ## Security Vulnerabilities Detected\n\n\n### NPM Dependencies\n- Critical: 0\n- High: 1\n- Moderate: 0\n- Low: 0\n"}


identifier: gh_issue_3760564097
source: github_issue
status: new
created_at: 2025-12-24 15:25:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3760564097", "title": "CI/CD Configuration Improvements: Duplicate Release Workflows and Consistency Issues", "url": "https://github.com/kcenon/video_converter/issues/219", "user": "kcenon", "user_url": "https://github.com/kcenon", "repo": "video_converter", "body_preview": "## \ud83d\udccb Overview\n\nAfter analyzing the CI/CD configuration of the video_converter project, several areas requiring improvement were identified.\nThis issue is a comprehensive proposal to enhance the stability, consistency, and efficiency of the CI/CD pipeline.\n\n## \ud83d\udd34 Critical: Duplicate Release Workflows\n\n### Problem\nBoth `release.yml` and `release-macos.yml` workflows are configured with the **same trigger** (`v*` tags).\n\n```yaml\n# release.yml\non:\n  push:\n    tags:\n      - \"v*\"\n\n# release-macos.yml\no", "created": "2025-12-24T15:15:41Z", "labels": ["enhancement", "priority: high", "type: infrastructure"], "context": "CI/CD Configuration Improvements: Duplicate Release Workflows and Consistency Issues ## \ud83d\udccb Overview\n\nAfter analyzing the CI/CD configuration of the video_converter project, several areas requiring improvement were identified.\nThis issue is a comprehensive proposal to enhance the stabil"}


identifier: gh_issue_3760540236
source: github_issue
status: new
created_at: 2025-12-24 15:25:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3760540236", "title": "[CRITICAL] Cryptographic Vulnerability: Nonce Reuse (Two-Time Pad)", "url": "https://github.com/penumm/penum-private-rpc/issues/1", "user": "anuragchvn-blip", "user_url": "https://github.com/anuragchvn-blip", "repo": "penum-private-rpc", "body_preview": "\ufeffThe cryptographic implementation uses a hardcoded zero nonce for all encryptions. Since the same session key is used for both request and response, this results in a Two-Time Pad vulnerability. Attackers can recover plaintext by XORing request and response ciphertexts.\n\n**Remediation:**\n1. Use separate keys for each direction.\n2. Or use distinct nonces for each direction.\r\n", "created": "2025-12-24T15:05:15Z", "labels": ["bug", "security", "critical"], "context": "[CRITICAL] Cryptographic Vulnerability: Nonce Reuse (Two-Time Pad) \ufeffThe cryptographic implementation uses a hardcoded zero nonce for all encryptions. Since the same session key is used for both request and response, this results in a Two-Time Pad vulnerability. Attac"}


identifier: gh_issue_3760448134
source: github_issue
status: new
created_at: 2025-12-24 15:25:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3760448134", "title": "\ud83d\udd12 SECURITY: SQL Injection - URGENT", "url": "https://github.com/royalshailesh/Code-Converter20/issues/15", "user": "royalshailesh", "user_url": "https://github.com/royalshailesh", "repo": "Code-Converter20", "body_preview": "## SECURITY CRITICAL\n\n\u26a0\ufe0f CONFIDENTIAL - DO NOT SHARE\n\nSQL injection vulnerability discovered.\n\n### Details:\n- Endpoint: /api/search\n- Severity: CRITICAL\n- CVE: Pending\n\n### Actions:\n- Patch endpoint\n- Security audit\n\n### Access Level: SECURITY TEAM ONLY", "created": "2025-12-24T14:26:13Z", "labels": ["security-critical", "vulnerability", "urgent"], "context": "\ud83d\udd12 SECURITY: SQL Injection - URGENT ## SECURITY CRITICAL\n\n\u26a0\ufe0f CONFIDENTIAL - DO NOT SHARE\n\nSQL injection vulnerability discovered.\n\n### Details:\n- Endpoint: /api/search\n- Severity: CRITICAL\n- CVE: Pending\n\n### Actions:\n- Patch endpoint\n-"}


identifier: gh_issue_3760443959
source: github_issue
status: new
created_at: 2025-12-24 15:25:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3760443959", "title": "vulnerability in agents Project", "url": "https://github.com/ed-donner/agents/issues/518", "user": "ankitdn", "user_url": "https://github.com/ankitdn", "repo": "agents", "body_preview": "While working on agents project, I identified a critical serialization injection vulnerability in the [langchain-core](https://vulert.com/vuln-db/CVE-2025-68664) package. The issue exists in the dumps() and dumpd() serialization methods, which fail to escape user-controlled dictionaries containing lc keys. During deserialization, these structures are treated as valid LangChain objects, which may allow attackers to extract environment secrets or instantiate internal classes with controlled parame", "created": "2025-12-24T14:24:47Z", "labels": [], "context": "vulnerability in agents Project While working on agents project, I identified a critical serialization injection vulnerability in the [langchain-core](https://vulert.com/vuln-db/CVE-2025-68664) package. The issue exists in the dumps"}


identifier: gh_issue_3760424656
source: github_issue
status: new
created_at: 2025-12-24 15:37:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3760424656", "title": "[MEDIUM] Unpinned anthropics/claude-code-action versions in workflows", "url": "https://github.com/JacobPEvans/ai-assistant-instructions/issues/272", "user": "JacobPEvans", "user_url": "https://github.com/JacobPEvans", "repo": "ai-assistant-instructions", "body_preview": "## Description\n\nMultiple GitHub Actions workflows use the floating tag `@v1` for `anthropics/claude-code-action`, which poses security and reproducibility risks.\n\n## Severity\n\nMEDIUM - Security and reproducibility concern\n\n## Affected Workflows\n\n- `.github/workflows/claude.yml` (line 63)\n- `.github/workflows/doc-sync.yml` (line 25)\n- `.github/workflows/issue-resolver.yml` (line 24)\n- `.github/workflows/issue-triage.yml` (line 22)\n\n## Current Code\n\nAll instances use:\n\\`\\`\\`yaml\nuses: anthropics/c", "created": "2025-12-24T14:17:27Z", "labels": ["ai-created", "priority:critical", "type:chore"], "context": "[MEDIUM] Unpinned anthropics/claude-code-action versions in workflows ## Description\n\nMultiple GitHub Actions workflows use the floating tag `@v1` for `anthropics/claude-code-action`, which poses security and reproducibility risks.\n\n## Severity\n\nMEDIUM - Security and re"}


identifier: gh_issue_3760399811
source: github_issue
status: new
created_at: 2025-12-24 15:37:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3760399811", "title": "\ud83d\udca1 feat: remove ability to autoinstall extensions alongside Appium server", "url": "https://github.com/appium/appium/issues/21835", "user": "eglitise", "user_url": "https://github.com/eglitise", "repo": "appium", "body_preview": "### Is your feature request related to a problem?\n\nAppium has a feature where users can install the server component along with any extensions using just one command. This can be achieved by adding a flag to the regular server installation command as follows:\n```sh\nnpm install -g appium --drivers=xcuitest,uiautomator2 --plugins=images\n```\nThe problem with this feature is that, while undoubtedly useful, it relies on `npm`'s postinstall hook feature, where packages are able to define code that sho", "created": "2025-12-24T14:04:28Z", "labels": ["Enhancement", "v4"], "context": "\ud83d\udca1 feat: remove ability to autoinstall extensions alongside Appium server ### Is your feature request related to a problem?\n\nAppium has a feature where users can install the server component along with any extensions using just one command. This can be achieved by adding a "}


identifier: gh_issue_3760596824
source: github_issue
status: new
created_at: 2025-12-24 15:37:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3760596824", "title": "fix: simplify findings display - remove hybrid table+expanders approach", "url": "https://github.com/bkyoung/code-reviewer/issues/91", "user": "bkyoung", "user_url": "https://github.com/bkyoung", "repo": "code-reviewer", "body_preview": "## Parent Issue\nFollow-up to #61 (Collapsible presentation with incremental disclosure)\n\n## Problem\n\nPR #89 implemented a \"hybrid\" approach for displaying findings that feels clunky:\n\n**Current (Hybrid):**\n```markdown\n<details open>\n<summary><strong>High</strong> - \ud83d\udfe0 in <code>3 files</code></summary>\n\n| File | Line | Category | Description |\n|------|------|----------|-------------|\n| `main.go` | 45 | security | SQL injection... |\n| `api.go` | 123 | bug | Missing error check... |\n\n<details>\n<summ", "created": "2025-12-24T15:35:40Z", "labels": [], "context": "fix: simplify findings display - remove hybrid table+expanders approach ## Parent Issue\nFollow-up to #61 (Collapsible presentation with incremental disclosure)\n\n## Problem\n\nPR #89 implemented a \"hybrid\" approach for displaying findings that feels clunky:\n\n**Current (Hybri"}


identifier: gh_issue_3760617850
source: github_issue
status: new
created_at: 2025-12-24 15:50:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3760617850", "title": "Operator applies remote commands and policies without local approval or verification", "url": "https://github.com/KestrelAI/Kestrel-Operator/issues/13", "user": "agarwal-tanmay-work", "user_url": "https://github.com/agarwal-tanmay-work", "repo": "Kestrel-Operator", "body_preview": "## Description\n\nHi Kestrel team,\n\nWhile reviewing the Kestrel Operator implementation, I noticed that several control-plane initiated requests are executed directly by the operator without any local approval, verification, or gating mechanism.\n\nSpecifically, the operator currently supports:\n\n- `ShellCommandRequest` \u2014 executes arbitrary shell commands received from the cloud\n- `YamlApplyRequest` \u2014 applies arbitrary Kubernetes manifests via `kubectl apply`\n- Network and authorization policies that", "created": "2025-12-24T15:48:56Z", "labels": [], "context": "Operator applies remote commands and policies without local approval or verification ## Description\n\nHi Kestrel team,\n\nWhile reviewing the Kestrel Operator implementation, I noticed that several control-plane initiated requests are executed directly by the operator without any local a"}


identifier: gh_issue_3760654234
source: github_issue
status: new
created_at: 2025-12-24 16:15:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3760654234", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/felix-test/issues/100", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "felix-test", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-24T16:13:50Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3760620733
source: github_issue
status: new
created_at: 2025-12-24 16:40:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3760620733", "title": "[Security] Shell injection vulnerability in Nix template shellHooks", "url": "https://github.com/Ja-sonYun/home-manager/issues/10", "user": "claude[bot]", "user_url": "https://github.com/apps/claude", "repo": "home-manager", "body_preview": "Multiple Nix flake templates contain a shell injection vulnerability in their shellHook code that automatically sources .env files without validation.\n\nThe following templates have shellHooks that use source .env to load environment variables:\n- templates/python-uv/flake.nix\n- templates/python310/flake.nix\n- templates/python312/flake.nix\n- templates/python313/flake.nix\n- templates/aws-node20-python310/flake.nix\n\nVULNERABILITY: The shellHook uses set -a and source .env which executes arbitrary sh", "created": "2025-12-24T15:50:59Z", "labels": [], "context": "[Security] Shell injection vulnerability in Nix template shellHooks Multiple Nix flake templates contain a shell injection vulnerability in their shellHook code that automatically sources .env files without validation.\n\nThe following templates have shellHooks that use"}


identifier: gh_issue_3760695947
source: github_issue
status: new
created_at: 2025-12-24 16:53:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3760695947", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/YaswanthCH-QA/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @YaswanthCH-QA! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each ste", "created": "2025-12-24T16:42:54Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @YaswanthCH-QA! Welcome"}


identifier: gh_issue_3759493363
source: github_issue
status: new
created_at: 2025-12-24 17:18:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3759493363", "title": "TCP socket leak when healthcheck enabled with 204 response code", "url": "https://github.com/fosrl/newt/issues/220", "user": "mprokopiev", "user_url": "https://github.com/mprokopiev", "repo": "newt", "body_preview": "### Describe the Bug\n\nI've been using a latest newt (problem also happened in 1.7.0 - upgraded for this issue purpose) and observed that among all resources with healthchecks configured, newt has a tcp socket leak for a single resource, which responds with 204 (which is configured as successful response code). This problem eventually caused the error when connecting to the resource either for healthchecks or any other valid communication:\n```\nhealth check failed: Get \"http://172.19.7.10:8008/hea", "created": "2025-12-24T07:32:39Z", "labels": [], "context": "TCP socket leak when healthcheck enabled with 204 response code ### Describe the Bug\n\nI've been using a latest newt (problem also happened in 1.7.0 - upgraded for this issue purpose) and observed that among all resources with healthchecks configured, newt has a tc"}


identifier: gh_issue_3760764410
source: github_issue
status: new
created_at: 2025-12-24 17:42:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3760764410", "title": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d/issues/15", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d", "body_preview": "## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-core-6.1.6.jar</b></summary>\n\n<p>Spring Core</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>", "created": "2025-12-24T17:36:57Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar ## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <"}


identifier: gh_issue_3760764385
source: github_issue
status: new
created_at: 2025-12-24 17:42:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3760764385", "title": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d/issues/14", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d", "body_preview": "## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-24T17:36:55Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3760764355
source: github_issue
status: new
created_at: 2025-12-24 17:42:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3760764355", "title": "CVE-2025-48988 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d/issues/13", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d", "body_preview": "## CVE-2025-48988 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-24T17:36:54Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48988 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48988 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3760764324
source: github_issue
status: new
created_at: 2025-12-24 17:42:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3760764324", "title": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d/issues/12", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d", "body_preview": "## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-web-6.1.6.jar</b></summary>\n\n<p>Spring Web</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDe", "created": "2025-12-24T17:36:52Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar ## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3760764298
source: github_issue
status: new
created_at: 2025-12-24 17:42:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3760764298", "title": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d/issues/11", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d", "body_preview": "## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-webmvc-6.1.6.jar</b></summary>\n\n<p>Spring Web MVC</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</", "created": "2025-12-24T17:36:51Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar ## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3760764178
source: github_issue
status: new
created_at: 2025-12-24 17:42:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3760764178", "title": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d/issues/6", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d", "body_preview": "## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-24T17:36:45Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3760764142
source: github_issue
status: new
created_at: 2025-12-24 17:42:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3760764142", "title": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d/issues/5", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d", "body_preview": "## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependen", "created": "2025-12-24T17:36:43Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3760760261
source: github_issue
status: new
created_at: 2025-12-24 17:42:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3760760261", "title": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-cfaa37fa-3418-4079-b452-8e9b011bcc44/issues/17", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-cfaa37fa-3418-4079-b452-8e9b011bcc44", "body_preview": "## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-web-6.1.6.jar</b></summary>\n\n<p>Spring Web</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDe", "created": "2025-12-24T17:33:09Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar ## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3760766183
source: github_issue
status: new
created_at: 2025-12-24 17:55:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3760766183", "title": "Add supply chain security measures", "url": "https://github.com/danwiding/linkedin-to-gcontact/issues/13", "user": "danwiding", "user_url": "https://github.com/danwiding", "repo": "linkedin-to-gcontact", "body_preview": "Scope: Implement security practices to protect against supply chain attacks.\n\nAcceptance:\n- Signed commits required on main branch\n- Dependabot scans dependencies weekly\n- SBOM generated and tracked\n- Releases are signed with GPG\n\nWhy:\n- Prevent unauthorized code commits\n- Detect vulnerable dependencies early\n- Maintain transparency of project dependencies\n\nImplementation:\n1. Enable signed commit verification in GitHub\n2. Configure Dependabot for npm security scanning\n3. Generate SBOM with cyclo", "created": "2025-12-24T17:38:24Z", "labels": [], "context": "Add supply chain security measures Scope: Implement security practices to protect against supply chain attacks.\n\nAcceptance:\n- Signed commits required on main branch\n- Dependabot scans dependencies weekly\n- SBOM generated and tracked\n-"}


identifier: gh_issue_3760825744
source: github_issue
status: new
created_at: 2025-12-24 18:32:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3760825744", "title": "bootstrap-3.1.1.min.js: 6 vulnerabilities (highest severity is: 6.4)", "url": "https://github.com/kirilurdemocorp-mend/WebGoat/issues/17", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "WebGoat", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>bootstrap-3.1.1.min.js</b></summary>\n\n<p>The most popular front-end framework for developing responsive, mobile first projects on the web.</p>\n<p>Library home page: <a href=\"https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.1.1/js/bootstrap.min.js\">https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.1.1/js/bootstrap.min.js</a></p", "created": "2025-12-24T18:31:22Z", "labels": ["Mend: dependency security vulnerability"], "context": "bootstrap-3.1.1.min.js: 6 vulnerabilities (highest severity is: 6.4) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>bootstrap-3.1.1.min.js</b></summary>\n\n<p>The mo"}


identifier: gh_issue_3760825596
source: github_issue
status: new
created_at: 2025-12-24 18:32:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3760825596", "title": "jose4j-0.9.3.jar: 2 vulnerabilities (highest severity is: 7.5) reachable", "url": "https://github.com/kirilurdemocorp-mend/WebGoat/issues/11", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "WebGoat", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jose4j-0.9.3.jar</b></summary>\n\n<p>The jose.4.j library is a robust and easy to use open source implementation of JSON Web Token (JWT) and the JOSE specification suite (JWS, JWE, and JWK).\n     It is written in Java and relies solely on the JCA APIs for cryptography.\n     Please see https://bitbucket.org/b_c/jose4j/wiki/Home for more info, examp", "created": "2025-12-24T18:31:13Z", "labels": ["Mend: dependency security vulnerability"], "context": "jose4j-0.9.3.jar: 2 vulnerabilities (highest severity is: 7.5) reachable <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jose4j-0.9.3.jar</b></summary>\n\n<p>The jose.4.j"}


identifier: gh_issue_3760825565
source: github_issue
status: new
created_at: 2025-12-24 18:32:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3760825565", "title": "xstream-1.4.5.jar: 1 vulnerabilities (highest severity is: 9.8) reachable", "url": "https://github.com/kirilurdemocorp-mend/WebGoat/issues/10", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "WebGoat", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>xstream-1.4.5.jar</b></summary>\n\n<p>XStream is a serialization library from Java objects to XML and back.</p>\n<p>Library home page: <a href=\"http://xstream.codehaus.org\">http://xstream.codehaus.org</a></p>\n<p>Path to dependency file: /pom.xml</p>\n<p>Path to vulnerable library: /home/wss-scanner/.m2/repository/com/thoughtworks/xstream/xstream/1.4", "created": "2025-12-24T18:31:11Z", "labels": ["Mend: dependency security vulnerability"], "context": "xstream-1.4.5.jar: 1 vulnerabilities (highest severity is: 9.8) reachable <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>xstream-1.4.5.jar</b></summary>\n\n<p>XStream is "}


identifier: gh_issue_3760821028
source: github_issue
status: new
created_at: 2025-12-24 18:32:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3760821028", "title": "unable to install fusion hat module on fresh PI 4B+", "url": "https://github.com/sunfounder/fusion-hat/issues/9", "user": "jayjar291", "user_url": "https://github.com/jayjar291", "repo": "fusion-hat", "body_preview": "**output of the install command**\n\n```\npi@rover:~ $ curl -sSL https://raw.githubusercontent.com/sunfounder/sunfounder-installer-scripts/main/install-fusion-hat.sh | sudo bash\nInstall Fusion Hat Python Library\n\nInstall dependencies\n[\u2713] Update apt\n[\u2713] Install apt dependencies\nInstall fusion-hat library\n[\u2713] Remove existing fusion-hat library\n[\u2713] Clone fusion-hat library\n[\u2713] Change ownership of fusion-hat library to pi\nInstall fusion-hat driver\n[\u2717] Compile driver\n[\u2717] Install driver\n[\u2717] Clean driver\n", "created": "2025-12-24T18:26:50Z", "labels": [], "context": "unable to install fusion hat module on fresh PI 4B+ **output of the install command**\n\n```\npi@rover:~ $ curl -sSL https://raw.githubusercontent.com/sunfounder/sunfounder-installer-scripts/main/install-fusion-hat.sh | sudo bash\nInstall Fusion Hat Python"}


identifier: gh_issue_3760814821
source: github_issue
status: new
created_at: 2025-12-24 18:32:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3760814821", "title": "chromadb-1.4.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl: 5 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/Emmanuel-Evenzur/Owasp-AI/issues/41", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "Owasp-AI", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>chromadb-1.4.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</b></summary>\n\n<p></p>\n<p>Path to dependency file: /initiatives/agent_security_initiative/samples/frameworks/custom_code/ai_recruiter/requirements.txt</p>\n<p>Path to vulnerable library: /tmp/containerbase/cache/.cache/pypoetry/virtualenvs/multi-agent-sjhqZZ4p-py3.13/lib/pyth", "created": "2025-12-24T18:21:01Z", "labels": ["Mend: dependency security vulnerability"], "context": "chromadb-1.4.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl: 5 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>chromadb-1.4.0-cp39-abi3-manylinux_2_17_x86_64."}


identifier: gh_issue_3760809250
source: github_issue
status: new
created_at: 2025-12-24 18:32:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3760809250", "title": "CVE-2025-14920 (High) detected in transformers-4.57.3-py3-none-any.whl", "url": "https://github.com/justunsix/automatetheboringstuff-py-tests/issues/160", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "automatetheboringstuff-py-tests", "body_preview": "## CVE-2025-14920 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>transformers-4.57.3-py3-none-any.whl</b></summary>\n\n<p>State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/6a/6b/2f416568b3c4c91c96e5a365d164f8a4a4a88030aa8ab4644181fdadce97/transformers-4.57.3-py3-none-any.whl", "created": "2025-12-24T18:15:59Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-14920 (High) detected in transformers-4.57.3-py3-none-any.whl ## CVE-2025-14920 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3760831977
source: github_issue
status: new
created_at: 2025-12-24 18:57:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3760831977", "title": "CVE-2021-43466 (Critical) detected in thymeleaf-spring5-3.0.11.RELEASE.jar", "url": "https://github.com/rsoreq/WebGoat8/issues/183", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "WebGoat8", "body_preview": "## CVE-2021-43466 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>thymeleaf-spring5-3.0.11.RELEASE.jar</b></summary>\n\n<p>Modern server-side Java template engine for both web and standalone environments</p>\n<p>Library home page: <a href=\"http://www.thymeleaf.org\">http://www.thymeleaf.org</a></p>\n<p>Path to dependency file: /webgoat-lessons/sql-injection/pom.xm", "created": "2025-12-24T18:36:00Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-43466 (Critical) detected in thymeleaf-spring5-3.0.11.RELEASE.jar ## CVE-2021-43466 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3760829867
source: github_issue
status: new
created_at: 2025-12-24 18:57:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3760829867", "title": "Security Health Check - GOOD (85/100) - 2025-12-24", "url": "https://github.com/Sami9889/Sami.dev-website/issues/252", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/24/2025, 6:33:59 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 9\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Securi", "created": "2025-12-24T18:34:04Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-24 # Security Health Check Report\n\n**Generated:** 12/24/2025, 6:33:59 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Inc"}


identifier: gh_issue_3760778248
source: github_issue
status: new
created_at: 2025-12-24 18:57:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3760778248", "title": "[Audit] Comprehensive Full-Stack Architectural Review", "url": "https://github.com/arii/hrm-workspace/issues/18", "user": "arii", "user_url": "https://github.com/arii", "repo": "hrm-workspace", "body_preview": "# [Audit] Comprehensive Full-Stack Architectural Review\n\n**Status:** Ready for Actionable Implementation\n\n## \ud83c\udfaf Summary of Critical Findings\n\nThe `hrm` application exhibits **three critical architectural vulnerabilities** that compromise security and scalability:\n\n1.  **Race Condition in State Synchronization:** The \"Tunneling\" mechanism between NextAuth and the backend service (`server.ts`) relies on arbitrary `setTimeout` delays (1000ms + 1500ms) to synchronize token updates. This is non-determ", "created": "2025-12-24T17:49:03Z", "labels": [], "context": "[Audit] Comprehensive Full-Stack Architectural Review # [Audit] Comprehensive Full-Stack Architectural Review\n\n**Status:** Ready for Actionable Implementation\n\n## \ud83c\udfaf Summary of Critical Findings\n\nThe `hrm` application exhibits **three critical architectur"}


identifier: gh_issue_3760764025
source: github_issue
status: new
created_at: 2025-12-24 18:57:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3760764025", "title": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d/issues/1", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d", "body_preview": "## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDepend", "created": "2025-12-24T17:36:37Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3760825765
source: github_issue
status: new
created_at: 2025-12-24 18:57:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3760825765", "title": "jquery-1.10.2.min.js: 4 vulnerabilities (highest severity is: 6.9)", "url": "https://github.com/kirilurdemocorp-mend/WebGoat/issues/18", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "WebGoat", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jquery-1.10.2.min.js</b></summary>\n\n<p>JavaScript library for DOM operations</p>\n<p>Library home page: <a href=\"https://cdnjs.cloudflare.com/ajax/libs/jquery/1.10.2/jquery.min.js\">https://cdnjs.cloudflare.com/ajax/libs/jquery/1.10.2/jquery.min.js</a></p>\n<p>Path to vulnerable library: /src/main/resources/webgoat/static/js/jquery/jquery-1.10.2.mi", "created": "2025-12-24T18:31:23Z", "labels": ["Mend: dependency security vulnerability"], "context": "jquery-1.10.2.min.js: 4 vulnerabilities (highest severity is: 6.9) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jquery-1.10.2.min.js</b></summary>\n\n<p>JavaScri"}


identifier: gh_issue_3760825724
source: github_issue
status: new
created_at: 2025-12-24 18:57:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3760825724", "title": "jquery-3.4.1-1.9.2.min.js: 2 vulnerabilities (highest severity is: 6.9)", "url": "https://github.com/kirilurdemocorp-mend/WebGoat/issues/16", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "WebGoat", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jquery-3.4.1-1.9.2.min.js</b></summary>\n\n<p>An open source front-end implementation that help you quickly construct modern multi-screen applications</p>\n<p>Library home page: <a href=\"https://cdnjs.cloudflare.com/ajax/libs/zui/1.9.2/lib/jquery/jquery-3.4.1.min.js\">https://cdnjs.cloudflare.com/ajax/libs/zui/1.9.2/lib/jquery/jquery-3.4.1.min.js</a", "created": "2025-12-24T18:31:20Z", "labels": ["Mend: dependency security vulnerability"], "context": "jquery-3.4.1-1.9.2.min.js: 2 vulnerabilities (highest severity is: 6.9) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jquery-3.4.1-1.9.2.min.js</b></summary>\n\n<p>An "}


identifier: gh_issue_3760825703
source: github_issue
status: new
created_at: 2025-12-24 18:57:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3760825703", "title": "jquery-ui-1.12.1.min.js: 4 vulnerabilities (highest severity is: 6.5)", "url": "https://github.com/kirilurdemocorp-mend/WebGoat/issues/15", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "WebGoat", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jquery-ui-1.12.1.min.js</b></summary>\n\n<p>A curated set of user interface interactions, effects, widgets, and themes built on top of the jQuery JavaScript Library.</p>\n<p>Library home page: <a href=\"https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js\">https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js</a>", "created": "2025-12-24T18:31:19Z", "labels": ["Mend: dependency security vulnerability"], "context": "jquery-ui-1.12.1.min.js: 4 vulnerabilities (highest severity is: 6.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jquery-ui-1.12.1.min.js</b></summary>\n\n<p>A cur"}


identifier: gh_issue_3760820849
source: github_issue
status: new
created_at: 2025-12-24 19:44:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3760820849", "title": "Dependency Dashboard", "url": "https://github.com/Unstructured-IO/unstructured/issues/4138", "user": "utic-renovate[bot]", "user_url": "https://github.com/apps/utic-renovate", "repo": "unstructured", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Rate-Limited\n\nThe following updates are currently rate-limited. To force their creation now, click on a checkbox below.\n\n - [ ] <!-- unlimit-branch=renovate/major-docker-security -->fix(deps): Update Docker security updates (major) (`docker.elastic.co/elasticsearch/elasticsearch`, `opensearchproject/opensearch`)\n\n## Open\n\nThe f", "created": "2025-12-24T18:26:40Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Rate-Limited\n\nThe following u"}


identifier: gh_issue_3760881939
source: github_issue
status: new
created_at: 2025-12-24 20:09:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3760881939", "title": "Vulnerability Severities Not Matching Tenable Plugins Page Severity", "url": "https://github.com/tenable/integration-jira-cloud/issues/328", "user": "cc-vy", "user_url": "https://github.com/cc-vy", "repo": "integration-jira-cloud", "body_preview": "I am trying to understand the discrepency between the severity shown in Teable Plugins and what i see in tickets. \n\nFor example, I have a couple of findings that are NOT recast.  They are listed in the Tenable Workbench as \"Medium\".  The Tenable plugin page also lists it as Medium.  But the ticket shows it as LOW (which confused me because i had set the config to pull Medium to Criticals).  The FINDING SEVERITY is correctly set to Medium for both the task and the sub task. \n\nI think I may know w", "created": "2025-12-24T19:27:28Z", "labels": [], "context": "Vulnerability Severities Not Matching Tenable Plugins Page Severity I am trying to understand the discrepency between the severity shown in Teable Plugins and what i see in tickets. \n\nFor example, I have a couple of findings that are NOT recast.  They are listed in th"}


identifier: gh_issue_3760970735
source: github_issue
status: new
created_at: 2025-12-24 20:46:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3760970735", "title": "Dependency Audit", "url": "https://github.com/bilal-bhatti/broker/issues/69", "user": "00felix-app[bot]", "user_url": "https://github.com/apps/00felix-app", "repo": "broker", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-24T20:32:07Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3760965553
source: github_issue
status: new
created_at: 2025-12-24 20:46:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3760965553", "title": "[BUG]Dependency upgrades for DTaaS CLI", "url": "https://github.com/INTO-CPS-Association/DTaaS/issues/1419", "user": "prasadtalasila", "user_url": "https://github.com/prasadtalasila", "repo": "DTaaS", "body_preview": "## Describe the bug\n\nThere are security warnings for the [DTaaS CLI](https://github.com/INTO-CPS-Association/DTaaS/tree/feature/distributed-demo/cli) code\n\n## To Reproduce\n\nSee this screenshot from security warnings page\n\n<img width=\"1331\" height=\"482\" alt=\"Image\" src=\"https://github.com/user-attachments/assets/fd65255f-37e8-4871-851c-b9b053c40826\" />\n\n## Expected behavior\n\nThe security warnings are taken care of.\nThis can be done through upgrade of all pip packages in [pyproject.toml](https://g", "created": "2025-12-24T20:28:55Z", "labels": ["bug", "security"], "context": "[BUG]Dependency upgrades for DTaaS CLI ## Describe the bug\n\nThere are security warnings for the [DTaaS CLI](https://github.com/INTO-CPS-Association/DTaaS/tree/feature/distributed-demo/cli) code\n\n## To Reproduce\n\nSee this screenshot from se"}


identifier: gh_issue_3760931044
source: github_issue
status: new
created_at: 2025-12-24 20:46:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3760931044", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/felix-test/issues/101", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "felix-test", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-24T20:02:45Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3760989892
source: github_issue
status: new
created_at: 2025-12-24 20:57:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3760989892", "title": "M0: Configure dependency vulnerability scanning", "url": "https://github.com/xmljim/retirement-simulator/issues/98", "user": "xmljim", "user_url": "https://github.com/xmljim", "repo": "retirement-simulator", "body_preview": "## Description\nSet up automated scanning for known vulnerabilities in project dependencies.\n\n## Acceptance Criteria\n- [ ] Enable GitHub Dependabot for dependency updates\n- [ ] Configure dependabot.yml for Maven ecosystem\n- [ ] Set update frequency (weekly recommended)\n- [ ] Add OWASP Dependency-Check Maven plugin\n- [ ] Configure vulnerability severity threshold for build failure (CVSS >= 7)\n- [ ] Add dependency check to CI pipeline\n- [ ] Configure suppression file for false positives\n- [ ] Enabl", "created": "2025-12-24T20:51:01Z", "labels": ["points:3", "architecture"], "context": "M0: Configure dependency vulnerability scanning ## Description\nSet up automated scanning for known vulnerabilities in project dependencies.\n\n## Acceptance Criteria\n- [ ] Enable GitHub Dependabot for dependency updates\n- [ ] Configure dependabot.yml"}


identifier: gh_issue_3760853014
source: github_issue
status: new
created_at: 2025-12-24 20:57:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3760853014", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/brian-berry-cla/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @brian-berry-cla! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebr", "created": "2025-12-24T18:57:26Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @brian-berry-cla! Welcome to your Skills e"}


identifier: gh_issue_3761015035
source: github_issue
status: new
created_at: 2025-12-24 21:44:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3761015035", "title": "Upgrade Next.js to patch CVE-2025-66478 vulnerability", "url": "https://github.com/1639jacksprat/agentstack/issues/48", "user": "1639jacksprat", "user_url": "https://github.com/1639jacksprat", "repo": "agentstack", "body_preview": "**Is your feature request related to a problem? Please describe.**\nOur project uses Next.js with the App Router and React Server Components (RSC), which are affected by the recently disclosed critical vulnerability [CVE-2025-66478](https://nextjs.org/blog/CVE-2025-66478).\n\nThere is no configuration option to disable the vulnerable code path. We need to ensure our application is running on a patched version of Next.js.\n\n**Describe the solution you'd like**\nUpgrade our application to a patched ver", "created": "2025-12-24T21:14:02Z", "labels": ["ui"], "context": "Upgrade Next.js to patch CVE-2025-66478 vulnerability **Is your feature request related to a problem? Please describe.**\nOur project uses Next.js with the App Router and React Server Components (RSC), which are affected by the recently disclosed critical"}


identifier: gh_issue_3760983380
source: github_issue
status: new
created_at: 2025-12-24 21:56:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3760983380", "title": "[TASK] Security audit - initial codebase", "url": "https://github.com/vindicatenyc/vindicate-app/issues/7", "user": "vindicatenyc", "user_url": "https://github.com/vindicatenyc", "repo": "vindicate-app", "body_preview": "## Summary\nRun security scans on initial codebase and fix any issues.\n\n## Acceptance Criteria\n- [ ] Gitleaks scan passes\n- [ ] Bandit scan passes (Python)\n- [ ] npm audit passes\n- [ ] No high/critical vulnerabilities\n\n## Technical Notes\n- Document any false positives\n- Create security baseline\n\n## Agent Assignment\nSuggested: `security`", "created": "2025-12-24T20:43:15Z", "labels": ["phase-1", "security", "ready", "task"], "context": "[TASK] Security audit - initial codebase ## Summary\nRun security scans on initial codebase and fix any issues.\n\n## Acceptance Criteria\n- [ ] Gitleaks scan passes\n- [ ] Bandit scan passes (Python)\n- [ ] npm audit passes\n- [ ] No high/critical"}


identifier: gh_issue_3761062914
source: github_issue
status: new
created_at: 2025-12-24 21:56:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3761062914", "title": "Grant Application for Intelligrip - Ride to Earn Zcash - Prioritizing Cycling incentives and Bike Data Privacy Control", "url": "https://github.com/ZcashCommunityGrants/zcashcommunitygrants/issues/165", "user": "intelligrip", "user_url": "https://github.com/intelligrip", "repo": "zcashcommunitygrants", "body_preview": "### Terms and Conditions\n\n- [x] I agree to the [Grant Agreement](https://9ba4718c-5c73-47c3-a024-4fc4e5278803.usrfiles.com/ugd/9ba471_f81ef4e4b5f040038350270590eb2e42.pdf) terms if funded\n- [x] I agree to [Provide KYC information](https://9ba4718c-5c73-47c3-a024-4fc4e5278803.usrfiles.com/ugd/9ba471_7d9e73d16b584a61bae92282b208efc4.pdf) if funded above $50,000 USD\n- [x] I agree to disclose conflicts of interest\n- [x] I agree to adhere to the [Code of Conduct](https://forum.zcashcommunity.com/t/zc", "created": "2025-12-24T21:43:56Z", "labels": [], "context": "Grant Application for Intelligrip - Ride to Earn Zcash - Prioritizing Cycling incentives and Bike Data Privacy Control ### Terms and Conditions\n\n- [x] I agree to the [Grant Agreement](https://9ba4718c-5c73-47c3-a024-4fc4e5278803.usrfiles.com/ugd/9ba471_f81ef4e4b5f040038350270590eb2e42.pdf) terms if funded\n- [x] I agre"}


identifier: gh_issue_3761061896
source: github_issue
status: new
created_at: 2025-12-24 21:56:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3761061896", "title": "Exercise: Introduction to Secret Scanning", "url": "https://github.com/cagingulsen/skills-introduction-to-secret-scanning/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-secret-scanning", "body_preview": "## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @cagingulsen! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll learn how to identify and protect sensitive information in your repositories. \ud83d\udd0d Let&#39;s work together to keep your code secure! \ud83d\udee1\ufe0f\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the ", "created": "2025-12-24T21:42:58Z", "labels": [], "context": "Exercise: Introduction to Secret Scanning ## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @cagingulsen! Welcome to your Ski"}


identifier: gh_issue_3761041136
source: github_issue
status: new
created_at: 2025-12-24 21:56:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3761041136", "title": "Supply chain integrity of agents and tools", "url": "https://github.com/1639jacksprat/agentstack/issues/394", "user": "1639jacksprat", "user_url": "https://github.com/1639jacksprat", "repo": "agentstack", "body_preview": "## Description\n\nAs part of our ongoing efforts to ensure the security and integrity of our systems, we need to address the supply chain integrity of agents and tools. This will provide our users with a higher level of confidence in the security and reliability of our platform.\n\n## Impact on users\n\n- Ensures that all agents and tools are trustworthy and free from malware or other malicious code\n- Reduces the risk of unauthorized access or data breaches\n- Enhances overall system stability and perf", "created": "2025-12-24T21:27:20Z", "labels": [], "context": "Supply chain integrity of agents and tools ## Description\n\nAs part of our ongoing efforts to ensure the security and integrity of our systems, we need to address the supply chain integrity of agents and tools. This will provide our users with "}


identifier: gh_issue_3761086584
source: github_issue
status: new
created_at: 2025-12-24 22:08:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3761086584", "title": "fake.4.9.3.nupkg: 3 vulnerabilities (highest severity is: 9.8) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Lisa-Cantu_1224_220738_gh_gw2/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Lisa-Cantu_1224_220738_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>fake.4.9.3.nupkg</strong></summary>\n\nFAKE - F# Make - Get rid of the noise in your build scripts.\n\n**Library home page:** [ https://api.nuget.org/packages/fake.4.9.3.nupkg ](https://api.nuget.org/packages/fake.4.9.3.nupkg)\n\n\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| ", "created": "2025-12-24T22:08:50Z", "labels": [], "context": "fake.4.9.3.nupkg: 3 vulnerabilities (highest severity is: 9.8) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>fake.4.9.3.nupkg</strong></summary>\n\nFAKE - F# Make - Get rid of the noise in your build scripts.\n\n**Library home page:** [ https://api.nuget.org/pa"}


identifier: gh_issue_3761135684
source: github_issue
status: new
created_at: 2025-12-24 23:22:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3761135684", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Justin-Perkins_1224_230602_gh_gw0/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Justin-Perkins_1224_230602_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -----", "created": "2025-12-24T23:07:52Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3761135693
source: github_issue
status: new
created_at: 2025-12-24 23:22:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3761135693", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Justin-Perkins_1224_230602_gh_gw0/issues/6", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Justin-Perkins_1224_230602_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-24T23:07:52Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3761131227
source: github_issue
status: new
created_at: 2025-12-24 23:22:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3761131227", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Kathleen-Anderson_1224_230037_gh_gw1/issues/2", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Kathleen-Anderson_1224_230037_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.", "created": "2025-12-24T23:02:05Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3761131220
source: github_issue
status: new
created_at: 2025-12-24 23:22:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3761131220", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Kathleen-Anderson_1224_230037_gh_gw1/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Kathleen-Anderson_1224_230037_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.io/v", "created": "2025-12-24T23:02:05Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3761135380
source: github_issue
status: new
created_at: 2025-12-24 23:34:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3761135380", "title": "Vulnerable version of next.js/react-dom", "url": "https://github.com/seerr-team/seerr/issues/2250", "user": "verbumfeit", "user_url": "https://github.com/verbumfeit", "repo": "seerr", "body_preview": "### Description\n\nAbout 3 weeks ago next.js/react disclosed a major CVE: https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components#update-instructions\n\nWhile the package version in package.json (`^14.2.25`) allows an upgrade of the `next` package to a fixed version (`14.2.35`), maybe a new release is in order?\n\nThank you and happy holidays (and sorry for bringing this up on christmas)!\n\n### Version\n\n2.7.3\n\n### Steps to Reproduce\n\n1. Run a Jellyseerr instance ins", "created": "2025-12-24T23:07:19Z", "labels": ["bug", "awaiting triage"], "context": "Vulnerable version of next.js/react-dom ### Description\n\nAbout 3 weeks ago next.js/react disclosed a major CVE: https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components#update-instructions\n\nWhile the pack"}


identifier: gh_issue_3761131453
source: github_issue
status: new
created_at: 2025-12-24 23:34:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3761131453", "title": "aws-sdk-2.0.48.gem: 1 vulnerabilities (highest severity is: 9.8) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Kathleen-Anderson_1224_230037_gh_gw1/issues/3", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Kathleen-Anderson_1224_230037_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>aws-sdk-2.0.48.gem</strong></summary>\n\nThe official AWS SDK for Ruby. Provides both resource oriented interfaces and API clients for AWS services.\n\n\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/aws-sdk-2.0.48.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------", "created": "2025-12-24T23:02:27Z", "labels": [], "context": "aws-sdk-2.0.48.gem: 1 vulnerabilities (highest severity is: 9.8) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>aws-sdk-2.0.48.gem</strong></summary>\n\nThe official AWS SDK for Ruby. Provides both resource oriented interfaces and API clients for AWS services.\n\n"}


identifier: gh_issue_3761143727
source: github_issue
status: new
created_at: 2025-12-24 23:47:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3761143727", "title": "[CI] HIGH: All third-party GitHub Actions must be pinned to SHA for security", "url": "https://github.com/JacobPEvans/ai-assistant-instructions/issues/277", "user": "JacobPEvans", "user_url": "https://github.com/JacobPEvans", "repo": "ai-assistant-instructions", "body_preview": "## Security Issue: Unpinned GitHub Actions\n\nGitHub Actions should be pinned to specific commit SHAs rather than version tags to prevent supply chain attacks.\n\n### Current State\nAll workflows use version tags (e.g., @v6, @v8, @v3) which allow action authors to modify code for that version after release.\n\n### Affected Workflows & Actions\n\n**In multiple workflows:**\n- `actions/checkout@v6` \u2192 Should use commit SHA\n- `actions/setup-node@v6` \u2192 Should use commit SHA\n- `streetsidesoftware/cspell-action@", "created": "2025-12-24T23:20:45Z", "labels": ["ai-created", "type:ci"], "context": "[CI] HIGH: All third-party GitHub Actions must be pinned to SHA for security ## Security Issue: Unpinned GitHub Actions\n\nGitHub Actions should be pinned to specific commit SHAs rather than version tags to prevent supply chain attacks.\n\n### Current State\nAll workflows use versi"}


identifier: gh_issue_3761151667
source: github_issue
status: new
created_at: 2025-12-24 23:59:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3761151667", "title": "Dependency Audit", "url": "https://github.com/ijassani/qpid-broker-j3/issues/6", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "qpid-broker-j3", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-24T23:34:32Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3761149839
source: github_issue
status: new
created_at: 2025-12-24 23:59:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3761149839", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/test-reactor/issues/120", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "test-reactor", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-24T23:31:10Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3761145540
source: github_issue
status: new
created_at: 2025-12-24 23:59:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3761145540", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/felix-test/issues/102", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "felix-test", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-24T23:23:24Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3761158921
source: github_issue
status: new
created_at: 2025-12-25 00:12:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3761158921", "title": "[FEATURE] Issue Priority and Severity Prediction", "url": "https://github.com/VibeTensor/IssueFlow/issues/107", "user": "ascender1729", "user_url": "https://github.com/ascender1729", "repo": "IssueFlow", "body_preview": "## Summary\n\nImplement AI-powered prediction of issue priority and severity based on content analysis and historical patterns.\n\n## Problem\n\nNot all issues are equally urgent. Predicting priority helps users focus on high-impact issues first.\n\n## Research Background\n\n- [Multi-task Learning (PRIMA)](https://dl.acm.org/doi/fullHtml/10.1145/3544902.3546257) achieves 32-55% higher precision\n- [RNN-LSTM](https://www.e-informatyka.pl/index.php/einformatica/volumes/volume-2021/issue-1/article-2/) achieve", "created": "2025-12-24T23:46:45Z", "labels": ["enhancement", "ai-integration"], "context": "[FEATURE] Issue Priority and Severity Prediction ## Summary\n\nImplement AI-powered prediction of issue priority and severity based on content analysis and historical patterns.\n\n## Problem\n\nNot all issues are equally urgent. Predicting priority helps "}


identifier: gh_issue_3761171748
source: github_issue
status: new
created_at: 2025-12-25 00:12:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3761171748", "title": "security: Unstable GitHub Actions references using @main branch", "url": "https://github.com/JacobPEvans/nix/issues/272", "user": "JacobPEvans", "user_url": "https://github.com/JacobPEvans", "repo": "nix", "body_preview": "## Issue\nTwo GitHub Actions workflows use unstable `@main` branch references instead of pinned versions, creating non-deterministic behavior and security risks.\n\n## Severity\n**MEDIUM** - Unstable action references can introduce breaking changes without warning and increase supply chain risk.\n\n## Affected Files\n\n### 1. `.github/workflows/_nix-validate.yml:20`\n```yaml\nuses: DeterminateSystems/flake-checker-action@main\n```\n\n### 2. `.github/workflows/_nix-build.yml:32`\n```yaml\nuses: DeterminateSyste", "created": "2025-12-25T00:08:38Z", "labels": ["ai-created", "size:s", "priority:medium"], "context": "security: Unstable GitHub Actions references using @main branch ## Issue\nTwo GitHub Actions workflows use unstable `@main` branch references instead of pinned versions, creating non-deterministic behavior and security risks.\n\n## Severity\n**MEDIUM** - Unstable acti"}


identifier: gh_issue_3761131467
source: github_issue
status: new
created_at: 2025-12-25 00:48:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3761131467", "title": "json-1.8.6.gem: 1 vulnerabilities (highest severity is: 7.5) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Kathleen-Anderson_1224_230037_gh_gw1/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Kathleen-Anderson_1224_230037_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>json-1.8.6.gem</strong></summary>\n\nThis is a JSON implementation as a Ruby extension in C.\n\n**Library home page:** [ https://rubygems.org/gems/json-1.8.6.gem ](https://rubygems.org/gems/json-1.8.6.gem)\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/json-1.8.6.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remed", "created": "2025-12-24T23:02:28Z", "labels": [], "context": "json-1.8.6.gem: 1 vulnerabilities (highest severity is: 7.5) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>json-1.8.6.gem</strong></summary>\n\nThis is a JSON implementation as a Ruby extension in C.\n\n**Library home page:** [ https://rubygems.org/gems/json-"}


identifier: gh_issue_3761131457
source: github_issue
status: new
created_at: 2025-12-25 00:48:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3761131457", "title": "rdoc-3.12.2.gem: 2 vulnerabilities (highest severity is: 7.5) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Kathleen-Anderson_1224_230037_gh_gw1/issues/4", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Kathleen-Anderson_1224_230037_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>rdoc-3.12.2.gem</strong></summary>\n\nRDoc produces HTML and command-line documentation for Ruby projects.  RDoc\nincludes the +rdoc+ and +ri+ tools for generating and displaying online\ndocumentation.\n\nSee RDoc for a description of RDoc's markup and basic use.\n\n\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/rdoc-3.12.2.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | ", "created": "2025-12-24T23:02:27Z", "labels": [], "context": "rdoc-3.12.2.gem: 2 vulnerabilities (highest severity is: 7.5) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>rdoc-3.12.2.gem</strong></summary>\n\nRDoc produces HTML and command-line documentation for Ruby projects.  RDoc\nincludes the +rdoc+ and +ri+ tools fo"}


identifier: gh_issue_3761102201
source: github_issue
status: new
created_at: 2025-12-25 01:01:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3761102201", "title": "Fix GHSA-VW6W-8Q8M-R52P / CVE-2025-68585", "url": "https://github.com/wp-document-revisions/wp-document-revisions/issues/428", "user": "benbalter", "user_url": "https://github.com/benbalter", "repo": "wp-document-revisions", "body_preview": "https://github.com/advisories/GHSA-VW6W-8Q8M-R52P\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-68585\nhttps://euvd.enisa.europa.eu/vulnerability/EUVD-2025-205250\n\nCVSS Base Score: 8.8 (v3.1)[(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n", "created": "2025-12-24T22:23:11Z", "labels": [], "context": "Fix GHSA-VW6W-8Q8M-R52P / CVE-2025-68585 https://github.com/advisories/GHSA-VW6W-8Q8M-R52P\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-68585\nhttps://euvd.enisa.europa.eu/vulnerability/EUVD-2025-205250\n\nCVSS Base Score: 8.8 (v3.1)[(CVSS:3.1/AV:"}


identifier: gh_issue_3761213724
source: github_issue
status: new
created_at: 2025-12-25 01:13:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3761213724", "title": "Dependency audit & VS Code integration check", "url": "https://github.com/Coldaine/repo-beacon/issues/2", "user": "Coldaine", "user_url": "https://github.com/Coldaine", "repo": "repo-beacon", "body_preview": "Dependency audit & VS Code integration check for repo-beacon\r\n\r\nSummary\r\n- Files inspected: `demo/package.json`, `demo/vite.config.ts`, `extension/package.json`, `extension/tsconfig.json`, `extension/src/*` (webview and extension entry).\r\n- No root `package.json` present; repository contains two packages: `demo` (Vite + React demo) and `extension` (VS Code extension TypeScript project).\r\n\r\nKey findings\r\n- demo: multiple packages show newer versions available (notable):\r\n  - `react` / `react-dom`", "created": "2025-12-25T01:11:01Z", "labels": ["dependencies"], "context": "Dependency audit & VS Code integration check Dependency audit & VS Code integration check for repo-beacon\r\n\r\nSummary\r\n- Files inspected: `demo/package.json`, `demo/vite.config.ts`, `extension/package.json`, `extension/tsconfig.json`, `extension/"}


identifier: gh_issue_3761186246
source: github_issue
status: new
created_at: 2025-12-25 01:13:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3761186246", "title": "Dashboard Consolidation - Phase 0-1-4 Only (Verification First)", "url": "https://github.com/elevateforhumanity/fix2/issues/1384", "user": "elevateforhumanity", "user_url": "https://github.com/elevateforhumanity", "repo": "fix2", "body_preview": "## Context\n\nRouter has been fixed (`app/dashboard/page.tsx`) but we need to verify reality before proceeding.\n\n**What's done:**\n- \u2705 Router routes all 6 roles correctly\n- \u2705 Redirects exist for legacy routes\n- \u2705 Build passes\n\n**What's needed:**\n- Database verification (what roles actually exist?)\n- Navigation audit (any invalid hrefs?)\n- Schema verification (what columns exist?)\n\n---\n\n## ONE-SHOT PROMPT (Copy/Paste to Gitpod)\n\nYou are a senior Next.js App Router + TypeScript + Supabase engineer wo", "created": "2025-12-25T00:32:22Z", "labels": [], "context": "Dashboard Consolidation - Phase 0-1-4 Only (Verification First) ## Context\n\nRouter has been fixed (`app/dashboard/page.tsx`) but we need to verify reality before proceeding.\n\n**What's done:**\n- \u2705 Router routes all 6 roles correctly\n- \u2705 Redirects exist for legacy r"}


identifier: gh_issue_3761246934
source: github_issue
status: new
created_at: 2025-12-25 01:38:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3761246934", "title": "[Docs]: Add SECURITY.md with vulnerability reporting policy", "url": "https://github.com/sjnims/chartjs-expert/issues/10", "user": "sjnims", "user_url": "https://github.com/sjnims", "repo": "chartjs-expert", "body_preview": "## Which documentation needs improvement?\n\nSECURITY.md (new file needed)\n\n## Specific Location\n\nRepository root or `.github/SECURITY.md`\n\n## What's unclear or missing?\n\nThis public repository is missing a `SECURITY.md` file, which is essential for:\n- Providing vulnerability reporting guidance to security researchers\n- Enabling GitHub's private vulnerability reporting feature\n- Documenting supported versions and security update process\n- Establishing response timeline expectations\n\n**From Reposit", "created": "2025-12-25T01:37:21Z", "labels": ["documentation", "component:docs", "priority:high", "security", "effort:small"], "context": "[Docs]: Add SECURITY.md with vulnerability reporting policy ## Which documentation needs improvement?\n\nSECURITY.md (new file needed)\n\n## Specific Location\n\nRepository root or `.github/SECURITY.md`\n\n## What's unclear or missing?\n\nThis public repository is missi"}


identifier: gh_issue_3761269310
source: github_issue
status: new
created_at: 2025-12-25 02:03:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3761269310", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Lisa-West_1225_020014_gh_gw0/issues/6", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Lisa-West_1225_020014_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | -----", "created": "2025-12-25T02:02:03Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3761269305
source: github_issue
status: new
created_at: 2025-12-25 02:03:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3761269305", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Lisa-West_1225_020014_gh_gw0/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Lisa-West_1225_020014_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-25T02:02:02Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3761268689
source: github_issue
status: new
created_at: 2025-12-25 02:03:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3761268689", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Jacob-Walker_1225_015847_gh_gw2/issues/2", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Jacob-Walker_1225_015847_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -----", "created": "2025-12-25T02:01:13Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3761268683
source: github_issue
status: new
created_at: 2025-12-25 02:03:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3761268683", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Jacob-Walker_1225_015847_gh_gw2/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Jacob-Walker_1225_015847_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-25T02:01:13Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3761267806
source: github_issue
status: new
created_at: 2025-12-25 02:03:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3761267806", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Haley-Shaw_1225_015839_gh_gw1/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Haley-Shaw_1225_015839_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-25T02:00:05Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3761268107
source: github_issue
status: new
created_at: 2025-12-25 02:27:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3761268107", "title": "json-1.8.6.gem: 1 vulnerabilities (highest severity is: 7.5) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Haley-Shaw_1225_015839_gh_gw1/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Haley-Shaw_1225_015839_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>json-1.8.6.gem</strong></summary>\n\nThis is a JSON implementation as a Ruby extension in C.\n\n**Library home page:** [ https://rubygems.org/gems/json-1.8.6.gem ](https://rubygems.org/gems/json-1.8.6.gem)\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/json-1.8.6.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remed", "created": "2025-12-25T02:00:26Z", "labels": [], "context": "json-1.8.6.gem: 1 vulnerabilities (highest severity is: 7.5) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>json-1.8.6.gem</strong></summary>\n\nThis is a JSON implementation as a Ruby extension in C.\n\n**Library home page:** [ https://rubygems.org/gems/json-"}


identifier: gh_issue_3761278548
source: github_issue
status: new
created_at: 2025-12-25 02:27:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3761278548", "title": "[Bug]: \"Asset not found\" error when viewing details from \"Top assets with most vulnerabilities\"", "url": "https://github.com/oasm-platform/open-asm/issues/201", "user": "l1ttps", "user_url": "https://github.com/l1ttps", "repo": "open-asm", "body_preview": "Description:\n\n### Contact Details (Optional)\n\n*No response*\n\n### What happened?\n\nWhen a user clicks on an asset listed in the \"Top assets with most vulnerabilities\" section to view its specific details, the system returns an \"asset not found\" error. It appears the link or the identifier passed to the asset detail page is incorrect or missing.\n\n### Affected Component\n\nConsole (Frontend UI)\n\n### Version\n\nLatest (Assumed)\n\n### Deployment Method\n\nDocker Compose\n\n### Browser (if applicable)\n\nChrome /", "created": "2025-12-25T02:14:16Z", "labels": ["bug"], "context": "[Bug]: \"Asset not found\" error when viewing details from \"Top assets with most vulnerabilities\" Description:\n\n### Contact Details (Optional)\n\n*No response*\n\n### What happened?\n\nWhen a user clicks on an asset listed in the \"Top assets with most vulnerabilities\" section to view its specific detail"}


identifier: gh_issue_3761298156
source: github_issue
status: new
created_at: 2025-12-25 02:39:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3761298156", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/keypress-notifications/issues/52", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "keypress-notifications", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (17)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-25T02:38:26Z", "labels": ["automated", "security", "critical"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3761298018
source: github_issue
status: new
created_at: 2025-12-25 02:39:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3761298018", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/file-insights/issues/132", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "file-insights", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (16)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-25T02:38:14Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3761297141
source: github_issue
status: new
created_at: 2025-12-25 02:39:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3761297141", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/additional-contexts-menu/issues/113", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "additional-contexts-menu", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (17)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-25T02:37:08Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3761297550
source: github_issue
status: new
created_at: 2025-12-25 02:53:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3761297550", "title": "AUTOPILOT DIRECTIVE \u2014 EXECUTION MODE (NO ANALYSIS)", "url": "https://github.com/elevateforhumanity/fix2/issues/1388", "user": "elevateforhumanity", "user_url": "https://github.com/elevateforhumanity", "repo": "fix2", "body_preview": "AUTOPILOT DIRECTIVE \u2014 EXECUTION MODE (NO ANALYSIS)\n\nYou are operating under Builder Authority.\n\nAll inventory, architecture, and crossed-dashboard documents dated 2025-12-23\nare ACCEPTED AS FINAL TRUTH.\n\nDO NOT:\n- Re-audit\n- Re-document architecture\n- Propose alternatives\n- Add new planning files\n- Ask for clarification unless code is blocked\n\nONLY EXECUTE.\n\n=====================================\nMANDATORY OBJECTIVE\n=====================================\n\nDeliver a WORKING, CONSOLIDATED, ROLE-SAFE", "created": "2025-12-25T02:37:39Z", "labels": [], "context": "AUTOPILOT DIRECTIVE \u2014 EXECUTION MODE (NO ANALYSIS) AUTOPILOT DIRECTIVE \u2014 EXECUTION MODE (NO ANALYSIS)\n\nYou are operating under Builder Authority.\n\nAll inventory, architecture, and crossed-dashboard documents dated 2025-12-23\nare ACCEPTED AS FINAL TRUT"}


identifier: gh_issue_3761249999
source: github_issue
status: new
created_at: 2025-12-25 02:53:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3761249999", "title": "[HIGH] Abandoned GitHub Action: micnncim/action-label-syncer", "url": "https://github.com/JacobPEvans/ai-assistant-instructions/issues/295", "user": "JacobPEvans", "user_url": "https://github.com/JacobPEvans", "repo": "ai-assistant-instructions", "body_preview": "## Description\n\nThe .github/workflows/label-sync.yml workflow uses micnncim/action-label-syncer@v1, which is an abandoned GitHub Action that hasn't received updates in 4+ years.\n\n## Current Status\n\n- Action: micnncim/action-label-syncer@v1\n- Last Release: May 23, 2021 (v1.3.0)\n- Latest Available: v1.3.0 (no updates for 4.5 years)\n\n## Severity: HIGH\n\nUsing an abandoned action poses security risks:\n1. No Security Updates - Will not receive security patches\n2. Compatibility Issues - May break with ", "created": "2025-12-25T01:40:50Z", "labels": ["ai-created", "type:bug", "priority:high"], "context": "[HIGH] Abandoned GitHub Action: micnncim/action-label-syncer ## Description\n\nThe .github/workflows/label-sync.yml workflow uses micnncim/action-label-syncer@v1, which is an abandoned GitHub Action that hasn't received updates in 4+ years.\n\n## Current Status\n\n- "}


identifier: gh_issue_3761317114
source: github_issue
status: new
created_at: 2025-12-25 03:04:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3761317114", "title": "Encrypt SMTP passwords in database for enhanced security", "url": "https://github.com/benjaminmue/pathary/issues/15", "user": "benjaminmue", "user_url": "https://github.com/benjaminmue", "repo": "pathary", "body_preview": "## Issue\n\nSMTP passwords are currently stored in plaintext in the database, which creates a security risk if database backups are compromised or accidentally shared.\n\n## Where Discovered\n\n**Security Audit - December 25, 2025**\n- File: `src/Service/ServerSettings.php`\n- Lines: 274-277 (setter), 110-113 (getter)\n- Database: `server_setting` table, `SMTP_PASSWORD` key\n\n## Current Implementation\n\n```php\npublic function setSmtpPassword(string $smtpPassword) : void {\n    $this->updateValue(self::SMTP_", "created": "2025-12-25T03:03:34Z", "labels": ["enhancement", "security"], "context": "Encrypt SMTP passwords in database for enhanced security ## Issue\n\nSMTP passwords are currently stored in plaintext in the database, which creates a security risk if database backups are compromised or accidentally shared.\n\n## Where Discovered\n\n**Security A"}


identifier: gh_issue_3761323817
source: github_issue
status: new
created_at: 2025-12-25 03:29:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3761323817", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/lynndb0/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @lynndb0! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019l", "created": "2025-12-25T03:12:52Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @lynndb0! Welcome to yo"}


identifier: gh_issue_3761335224
source: github_issue
status: new
created_at: 2025-12-25 03:42:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3761335224", "title": "\ud83d\udd12 Security: Fix command injection vulnerability in Docker entrypoint", "url": "https://github.com/todd2982/SuggestArr/issues/90", "user": "todd2982", "user_url": "https://github.com/todd2982", "repo": "SuggestArr", "body_preview": "## Severity\n**CRITICAL**\n\n## Description\nThe Docker entrypoint script uses eval with potentially user-controllable arguments, creating a command injection vulnerability.\n\n## Affected Files\n- docker/docker_entrypoint.sh:6\n\n## Current Code\ncd /app && exec uvicorn api_service.app:asgi_app $(eval echo \"$args\")\n\n## Recommendation\nRemove eval and pass arguments directly", "created": "2025-12-25T03:28:55Z", "labels": ["bug", "security", "critical"], "context": "\ud83d\udd12 Security: Fix command injection vulnerability in Docker entrypoint ## Severity\n**CRITICAL**\n\n## Description\nThe Docker entrypoint script uses eval with potentially user-controllable arguments, creating a command injection vulnerability.\n\n## Affected Files\n- docker/do"}


identifier: gh_issue_3761333968
source: github_issue
status: new
created_at: 2025-12-25 03:42:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3761333968", "title": "Latest 15 Papers - December 25, 2025", "url": "https://github.com/yanghlll/ArxivDaily-Haolin/issues/84", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "ArxivDaily-Haolin", "body_preview": "**Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Unified\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[AnyAD: Unified Any-Modality Anomaly Detection in Incomplete Multi-Sequence MRI](https://arxiv.org/abs/2512.21264v1)** | 2025-12-24 | 15 pages, 8 figures |\n| **[UniTacHand: Unified Spatio-Tactile Representation for Human to Robotic Hand Skill Transfer](https://arxiv.org/abs/2512.21233v1)** | 20", "created": "2025-12-25T03:27:19Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 25, 2025 **Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Unified\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |"}


identifier: gh_issue_3761320981
source: github_issue
status: new
created_at: 2025-12-25 03:42:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3761320981", "title": "Code-project Simple Membership System /SimpleMembershipSystem/validate.php SQL injection", "url": "https://github.com/d0g772/cve/issues/1", "user": "d0g772", "user_url": "https://github.com/d0g772", "repo": "cve", "body_preview": "# NAME OF AFFECTED PRODUCT(S)\n\n- Simple Membership System\n\n## Vendor Homepage\n\n- https://code-projects.org/simple-membership-system-in-php-with-source-code/\n\n# AFFECTED AND/OR FIXED VERSION(S)\n\n## submitter\n\n- dog772\n\n## Vulnerable File\n\n- /validate.php\n\n## VERSION(S)\n\n- V1.0\n\n## Software Link\n\n- https://download.code-projects.org/details/7f7213ea-fec6-44a1-95a2-5be39a5987c0\n\n# PROBLEM TYPE\n\n## Vulnerability Type\n\n- SQL injection\n\n## Root Cause\n\n- A SQL injection vulnerability was identified wit", "created": "2025-12-25T03:08:40Z", "labels": [], "context": "Code-project Simple Membership System /SimpleMembershipSystem/validate.php SQL injection # NAME OF AFFECTED PRODUCT(S)\n\n- Simple Membership System\n\n## Vendor Homepage\n\n- https://code-projects.org/simple-membership-system-in-php-with-source-code/\n\n# AFFECTED AND/OR FIXED VERSION(S)\n\n## sub"}


identifier: gh_issue_3761313073
source: github_issue
status: new
created_at: 2025-12-25 04:19:06
data:
  {"source": "github_issue", "identifier": "gh_issue_3761313073", "title": "Latest 15 Papers - December 25, 2025", "url": "https://github.com/pstAmbition/DailyArXiv_contentmoderation/issues/6", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "DailyArXiv_contentmoderation", "body_preview": "**Please check the [Github](https://github.com/pstAmbition/DailyArXiv_contentmoderation) page for a better reading experience and more papers.**\n\n## Multimodal harmful content\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[When Harmful Content Gets Camouflaged: Unveiling Perception Failure of LVLMs with CamHarmTI](https://arxiv.org/abs/2512.03087v1)** | 2025-11-29 |  |\n| **[MTikGuard System: A Transformer-Based Multimodal System for Child-Safe Content Moderation on TikTok](https", "created": "2025-12-25T02:58:04Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 25, 2025 **Please check the [Github](https://github.com/pstAmbition/DailyArXiv_contentmoderation) page for a better reading experience and more papers.**\n\n## Multimodal harmful content\n| **Title** | **Date** |"}


identifier: gh_issue_3761364198
source: github_issue
status: new
created_at: 2025-12-25 04:19:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3761364198", "title": "Security Vulnerabilities (Trivy Scan) - 25-12-25 @ 04:04", "url": "https://github.com/RazorBladeX/SH-GithubRunner/issues/52", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "SH-GithubRunner", "body_preview": "## \u26a0\ufe0f Security Vulnerabilities Detected\n\n**Scan Date:** 25-12-25 @ 04:04\n\n### Summary\n- **Total vulnerabilities found:** 298\n- **Critical:** 4\n- **High:** 49\n\n### Full Report\nThe complete vulnerability report is available as a workflow artifact.\n\n\ud83d\udce5 **[Download Full Report](https://github.com/RazorBladeX/SH-GithubRunner/actions/runs/20498640992/artifacts)**\n\n---\n*This issue is automatically generated by the Trivy security scanner.*\n", "created": "2025-12-25T04:04:48Z", "labels": ["vulnerability", "security", "automated", "security-scan"], "context": "Security Vulnerabilities (Trivy Scan) - 25-12-25 @ 04:04 ## \u26a0\ufe0f Security Vulnerabilities Detected\n\n**Scan Date:** 25-12-25 @ 04:04\n\n### Summary\n- **Total vulnerabilities found:** 298\n- **Critical:** 4\n- **High:** 49\n\n### Full Report\nThe complete vulnerabilit"}


identifier: gh_issue_3761380816
source: github_issue
status: new
created_at: 2025-12-25 04:43:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3761380816", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-25", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/405", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:167`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-production'\n   - Confidence: MEDIUM\n\n2. **blacklist** (LOW)\n   - File: `./scripts/health-check.py:8`\n   - Issue: Consider possible security implications associated with the subprocess module.\n   - Confidence: HIGH\n\n3. **subprocess_without_shell_equals_true** (LOW)\n   - File: `./scripts/health-check.p", "created": "2025-12-25T04:27:27Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-25 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:167`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-p"}


identifier: gh_issue_3761380454
source: github_issue
status: new
created_at: 2025-12-25 04:43:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3761380454", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-25", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/403", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:167`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-production'\n   - Confidence: MEDIUM\n\n2. **blacklist** (LOW)\n   - File: `./scripts/health-check.py:8`\n   - Issue: Consider possible security implications associated with the subprocess module.\n   - Confidence: HIGH\n\n3. **subprocess_without_shell_equals_true** (LOW)\n   - File: `./scripts/health-check.p", "created": "2025-12-25T04:26:57Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-25 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:167`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-p"}


identifier: gh_issue_3761379568
source: github_issue
status: new
created_at: 2025-12-25 04:43:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3761379568", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-25", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/400", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:172`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-production'\n   - Confidence: MEDIUM\n\n2. **blacklist** (LOW)\n   - File: `./scripts/health-check.py:8`\n   - Issue: Consider possible security implications associated with the subprocess module.\n   - Confidence: HIGH\n\n3. **subprocess_without_shell_equals_true** (LOW)\n   - File: `./scripts/health-check.p", "created": "2025-12-25T04:25:48Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-25 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:172`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-p"}


identifier: gh_issue_3761379411
source: github_issue
status: new
created_at: 2025-12-25 04:43:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3761379411", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-25", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/398", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:172`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-production'\n   - Confidence: MEDIUM\n\n2. **blacklist** (LOW)\n   - File: `./scripts/health-check.py:8`\n   - Issue: Consider possible security implications associated with the subprocess module.\n   - Confidence: HIGH\n\n3. **subprocess_without_shell_equals_true** (LOW)\n   - File: `./scripts/health-check.p", "created": "2025-12-25T04:25:36Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-25 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:172`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-p"}


identifier: gh_issue_3761378580
source: github_issue
status: new
created_at: 2025-12-25 04:43:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3761378580", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-25", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/392", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:172`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-production'\n   - Confidence: MEDIUM\n\n2. **blacklist** (LOW)\n   - File: `./scripts/health-check.py:8`\n   - Issue: Consider possible security implications associated with the subprocess module.\n   - Confidence: HIGH\n\n3. **subprocess_without_shell_equals_true** (LOW)\n   - File: `./scripts/health-check.p", "created": "2025-12-25T04:24:32Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-25 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:172`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-p"}


identifier: gh_issue_3761382211
source: github_issue
status: new
created_at: 2025-12-25 04:43:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3761382211", "title": "Code-project Simple Membership System /delete_club.php SQL injection", "url": "https://github.com/d0g772/cve/issues/2", "user": "d0g772", "user_url": "https://github.com/d0g772", "repo": "cve", "body_preview": "# Code-project Simple Membership System /delete_club.php SQL injection\n\n# NAME OF AFFECTED PRODUCT(S)\n\n- Simple Membership System\n\n## Vendor Homepage\n\n- https://code-projects.org/simple-membership-system-in-php-with-source-code/\n\n# AFFECTED AND/OR FIXED VERSION(S)\n\n## submitter\n\n- dog772\n\n## Vulnerable File\n\n- /delete_club.php\n\n## VERSION(S)\n\n- V1.0\n\n## Software Link\n\n- https://download.code-projects.org/details/7f7213ea-fec6-44a1-95a2-5be39a5987c0\n\n# PROBLEM TYPE\n\n## Vulnerability Type\n\n- SQL i", "created": "2025-12-25T04:29:12Z", "labels": [], "context": "Code-project Simple Membership System /delete_club.php SQL injection # Code-project Simple Membership System /delete_club.php SQL injection\n\n# NAME OF AFFECTED PRODUCT(S)\n\n- Simple Membership System\n\n## Vendor Homepage\n\n- https://code-projects.org/simple-membership-sys"}


identifier: gh_issue_3761451825
source: github_issue
status: new
created_at: 2025-12-25 06:08:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3761451825", "title": "Upgrade Frontend", "url": "https://github.com/tranvanmanh9325/SenAI/issues/1", "user": "tranvanmanh9325", "user_url": "https://github.com/tranvanmanh9325", "repo": "SenAI", "body_preview": "# Frontend Improvements & Upgrades\n\n## T\u1ed5ng quan\nFrontend hi\u1ec7n t\u1ea1i l\u00e0 m\u1ed9t \u1ee9ng d\u1ee5ng Windows native C++ s\u1eed d\u1ee5ng Win32 API v\u1edbi giao di\u1ec7n dark theme t\u00f9y ch\u1ec9nh. T\u00e0i li\u1ec7u n\u00e0y li\u1ec7t k\u00ea c\u00e1c c\u1ea3i thi\u1ec7n, n\u00e2ng c\u1ea5p v\u00e0 b\u1ed5 sung c\u00f3 th\u1ec3 th\u1ef1c hi\u1ec7n.\n\n---\n\n## 1. C\u1ea2I THI\u1ec6N CH\u1ea4T L\u01af\u1ee2NG CODE\n\n### 1.1. JSON Parsing\n**V\u1ea5n \u0111\u1ec1 hi\u1ec7n t\u1ea1i:**\n- S\u1eed d\u1ee5ng string parsing th\u1ee7 c\u00f4ng, d\u1ec5 l\u1ed7i v\u00e0 kh\u00f3 b\u1ea3o tr\u00ec\n- Kh\u00f4ng x\u1eed l\u00fd \u0111\u1ea7y \u0111\u1ee7 c\u00e1c edge cases (nested objects, arrays ph\u1ee9c t\u1ea1p)\n- Code l\u1eb7p l\u1ea1i nhi\u1ec1u n\u01a1i (extractJsonField, parsing trong Ref", "created": "2025-12-25T05:51:23Z", "labels": ["documentation", "enhancement", "help wanted"], "context": "Upgrade Frontend # Frontend Improvements & Upgrades\n\n## T\u1ed5ng quan\nFrontend hi\u1ec7n t\u1ea1i l\u00e0 m\u1ed9t \u1ee9ng d\u1ee5ng Windows native C++ s\u1eed d\u1ee5ng Win32 API v\u1edbi giao di\u1ec7n dark theme t\u00f9y ch\u1ec9nh. T\u00e0i li\u1ec7u n\u00e0y li\u1ec7t k\u00ea c\u00e1c c\u1ea3i thi\u1ec7n, n\u00e2ng c\u1ea5p"}


identifier: gh_issue_3761433987
source: github_issue
status: new
created_at: 2025-12-25 06:08:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3761433987", "title": "Exercise: Expand your team with Copilot coding agent", "url": "https://github.com/Labuser15-GH/skills-expand-your-team-with-copilot/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-expand-your-team-with-copilot", "body_preview": "## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Labuser15-GH! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll unlock the next level of your favorite AI-powered coding assistant. Let&#39;s learn how to assign Copilot coding tasks directly in GitHub! \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll ", "created": "2025-12-25T05:28:52Z", "labels": [], "context": "Exercise: Expand your team with Copilot coding agent ## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Labuser15-GH! Welcome"}


identifier: gh_issue_3761426500
source: github_issue
status: new
created_at: 2025-12-25 06:08:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3761426500", "title": "[bug]: debian-base:trixie image - sudo: unable to initialize PAM: Critical error - immediate abort", "url": "https://github.com/docker-hardened-images/catalog/issues/67", "user": "Domini", "user_url": "https://github.com/Domini", "repo": "catalog", "body_preview": "### Docker Hardened Image\n\ndebian-base:trixie\n\n### Bug Description\n\nWhen building images it's a good practice to gatekeep few necessary admin commands via sudo and run container under nonroot.\n\nIt works in official debian:trixie-slim image, but does not work in dhi.io/debian-base:trixie.\n\n### Steps to Reproduce\n\n```\n$ docker run --interactive --tty dhi.io/debian-base:trixie\nroot@7e87f5a25425:/# apt-get update && apt-get install -y sudo\nGet:1 http://deb.debian.org/debian trixie InRelease [140 kB]", "created": "2025-12-25T05:19:09Z", "labels": ["bug", "needs-triage"], "context": "[bug]: debian-base:trixie image - sudo: unable to initialize PAM: Critical error - immediate abort ### Docker Hardened Image\n\ndebian-base:trixie\n\n### Bug Description\n\nWhen building images it's a good practice to gatekeep few necessary admin commands via sudo and run container under nonroot.\n\nIt wor"}


identifier: gh_issue_3761367436
source: github_issue
status: new
created_at: 2025-12-25 06:08:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3761367436", "title": "[BUG] Unknown certificate verification error behind corporate proxy", "url": "https://github.com/numman-ali/opencode-openai-codex-auth/issues/79", "user": "tshu-w", "user_url": "https://github.com/tshu-w", "repo": "opencode-openai-codex-auth", "body_preview": "**Bug Description**\nA clear and concise description of the bug.\n\n**Steps to Reproduce**\n1. Install plugin as described\n2. `NODE_TLS_REJECT_UNAUTHORIZED=0 opencode run \"nihao\" --model openai/gpt-5.2-none`\n\n**Expected Behavior**\nopencode works fine as codex.\n\n**Actual Behavior**\n`Error: Error: unknown certificate verification error`\n\n**Environment**\n- opencode version: 1.0.198\n- Plugin version: v4.2.0\n- Operating System: macOS\n- Node.js version: v25.2.1\n\n**Logs**\nIf applicable, attach logs from `~", "created": "2025-12-25T04:09:09Z", "labels": ["bug"], "context": "[BUG] Unknown certificate verification error behind corporate proxy **Bug Description**\nA clear and concise description of the bug.\n\n**Steps to Reproduce**\n1. Install plugin as described\n2. `NODE_TLS_REJECT_UNAUTHORIZED=0 opencode run \"nihao\" --model openai/gpt-5.2-no"}


identifier: gh_issue_3761451691
source: github_issue
status: new
created_at: 2025-12-25 06:08:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3761451691", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/YuvrajSoam/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @YuvrajSoam! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate y", "created": "2025-12-25T05:51:11Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @YuvrajSoam! Welcome to your Skills exerci"}


identifier: gh_issue_3761499349
source: github_issue
status: new
created_at: 2025-12-25 06:46:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3761499349", "title": "GPT-5 Code Analysis Report - 2025-12-25", "url": "https://github.com/P4X-ng/PhoenixBoot/issues/104", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "PhoenixBoot", "body_preview": "# GPT-5 Advanced Code Analysis Report\n\n## GPT-5 Advanced Code Analysis Results\n\n### Code Quality & Architecture\n- Found 20 Python files for analysis\n- Found 20 C files for analysis\n\n### Security Analysis\n- Recommend implementing secure coding practices\n- Consider using static analysis tools like bandit for Python\n\n### Performance Optimization\n- Profile critical code paths\n- Consider memory usage optimization\n\n### Best Practices\n- Ensure proper error handling throughout codebase\n- Follow language", "created": "2025-12-25T06:41:55Z", "labels": ["automated", "copilot", "gpt5", "code-analysis"], "context": "GPT-5 Code Analysis Report - 2025-12-25 # GPT-5 Advanced Code Analysis Report\n\n## GPT-5 Advanced Code Analysis Results\n\n### Code Quality & Architecture\n- Found 20 Python files for analysis\n- Found 20 C files for analysis\n\n### Security Analy"}


identifier: gh_issue_3761495135
source: github_issue
status: new
created_at: 2025-12-25 06:46:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3761495135", "title": "Security Health Check - GOOD (85/100) - 2025-12-25", "url": "https://github.com/Sami9889/Sami.dev-website/issues/255", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/25/2025, 6:37:12 AM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 9\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Securi", "created": "2025-12-25T06:37:17Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-25 # Security Health Check Report\n\n**Generated:** 12/25/2025, 6:37:12 AM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Inc"}


identifier: gh_issue_3761465786
source: github_issue
status: new
created_at: 2025-12-25 06:46:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3761465786", "title": "Campcodes Supplier Management System V1.0 /Supply_Management_System/admin/view_products.php  SQL injection", "url": "https://github.com/IMZGforever/CVEs/issues/6", "user": "IMZGforever", "user_url": "https://github.com/IMZGforever", "repo": "CVEs", "body_preview": "\n# NAME OF AFFECTED PRODUCT(S)\n\n- Supplier Management System\n\n## Vendor Homepage\n\n- https://www.campcodes.com/projects/php/supplier-management-system-using-php-mysql/\n\n# AFFECTED AND/OR FIXED VERSION(S)\n\n## Submitter\n\nLige Zhan\nWuhan University\n\n## Vulnerable File\n\n- /Supply_Management_System/admin/view_products.php\n\n## VERSION(S)\n\n- V1.0\n\n## Software Link\n\n- https://www.campcodes.com/downloads/supplier-management-system-using-php-mysql-source-code/?wpdmdl=6708&ind=0\n\n# PROBLEM TYPE\n\n## Vulnerab", "created": "2025-12-25T06:07:34Z", "labels": [], "context": "Campcodes Supplier Management System V1.0 /Supply_Management_System/admin/view_products.php  SQL injection \n# NAME OF AFFECTED PRODUCT(S)\n\n- Supplier Management System\n\n## Vendor Homepage\n\n- https://www.campcodes.com/projects/php/supplier-management-system-using-php-mysql/\n\n# AFFECTED AND/OR FIXED VERSION("}


identifier: gh_issue_3761460404
source: github_issue
status: new
created_at: 2025-12-25 06:46:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3761460404", "title": "Here is a vulnerability which is 'LDAP Injection' in `initContext` of the file `src/main/java/org/traccar/database/LdapProvider.java`", "url": "https://github.com/traccar/traccar/issues/5733", "user": "Crispy-fried-chicken", "user_url": "https://github.com/Crispy-fried-chicken", "repo": "traccar", "body_preview": "Hi, we find that in the function `initContext` of the file `src/main/java/org/traccar/database/LdapProvider.java`, thouhgh the encodeForLdap method escapes only a subset of LDAP filter metacharacters (e.g., *, (, ), \\, null), but not others like &, |, =, which are critical for LDAP injection. When accountName is incorporated into searchFilter via replacement, unescaped characters could alter the LDAP query structure, leading to improper neutralization as per CWE-74.", "created": "2025-12-25T06:01:53Z", "labels": [], "context": "Here is a vulnerability which is 'LDAP Injection' in `initContext` of the file `src/main/java/org/traccar/database/LdapProvider.java` Hi, we find that in the function `initContext` of the file `src/main/java/org/traccar/database/LdapProvider.java`, thouhgh the encodeForLdap method escapes only a subset of LDAP filter metacharacters "}


identifier: gh_issue_3761457766
source: github_issue
status: new
created_at: 2025-12-25 06:46:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3761457766", "title": "Campcodes Supplier Management System V1.0 /Supply_Management_System/admin/add_area.php  SQL injection", "url": "https://github.com/IMZGforever/CVEs/issues/5", "user": "IMZGforever", "user_url": "https://github.com/IMZGforever", "repo": "CVEs", "body_preview": "# NAME OF AFFECTED PRODUCT(S)\n\n- Supplier Management System\n\n## Vendor Homepage\n\n- https://www.campcodes.com/projects/php/supplier-management-system-using-php-mysql/\n\n# AFFECTED AND/OR FIXED VERSION(S)\n\n## Submitter\n\nLige Zhan\nWuhan University\n\n## Vulnerable File\n\n- /Supply_Management_System/admin/add_area.php\n\n## VERSION(S)\n\n- V1.0\n\n## Software Link\n\n- https://www.campcodes.com/downloads/supplier-management-system-using-php-mysql-source-code/?wpdmdl=6708&ind=0\n\n# PROBLEM TYPE\n\n## Vulnerability ", "created": "2025-12-25T05:58:45Z", "labels": [], "context": "Campcodes Supplier Management System V1.0 /Supply_Management_System/admin/add_area.php  SQL injection # NAME OF AFFECTED PRODUCT(S)\n\n- Supplier Management System\n\n## Vendor Homepage\n\n- https://www.campcodes.com/projects/php/supplier-management-system-using-php-mysql/\n\n# AFFECTED AND/OR FIXED VERSION(S"}


identifier: gh_issue_3761541763
source: github_issue
status: new
created_at: 2025-12-25 07:24:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3761541763", "title": "ArXiv Summary - 2025-12-25 (papers from 2025-12-24 to 2025-12-25)", "url": "https://github.com/matouskozak/arxiv-digest/issues/24", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "arxiv-digest", "body_preview": "# ArXiv Paper Summaries (2025-12-25)\n\nFound 8 relevant papers.\n\n## CoTDeceptor:Adversarial Code Obfuscation Against CoT-Enhanced LLM Code Agents\n**Authors:** Haoyang Li, Mingjin Li, Jinxin Zuo, Siqi Li, Xiao Li, Hao Wu, Yueming Lu, Xiaochuan He\n\n### Summary\n**Problem:** Current software supply chains increasingly rely on CoT-enhanced LLM-based vulnerability detectors and code agents, which are assumed to be robust against malicious code obfuscation attacks. However, there is a lack of methods to", "created": "2025-12-25T07:18:19Z", "labels": ["arxiv-summary"], "context": "ArXiv Summary - 2025-12-25 (papers from 2025-12-24 to 2025-12-25) # ArXiv Paper Summaries (2025-12-25)\n\nFound 8 relevant papers.\n\n## CoTDeceptor:Adversarial Code Obfuscation Against CoT-Enhanced LLM Code Agents\n**Authors:** Haoyang Li, Mingjin Li, Jinxin Zuo, Siqi L"}


identifier: gh_issue_3761574111
source: github_issue
status: new
created_at: 2025-12-25 07:48:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3761574111", "title": "RFC: Add CLI Tooling for formatr", "url": "https://github.com/TimurManjosov/formatr/issues/52", "user": "TimurManjosov", "user_url": "https://github.com/TimurManjosov", "repo": "formatr", "body_preview": "# RFC: Add CLI Tooling for formatr\n\n**Issue:** #53\n**Status:** Proposed  \n**Created:** 2025-12-20  \n**Author:** TimurManjosov\n\n---\n\n## Description\n\nThis RFC proposes the addition of a comprehensive Command Line Interface (CLI) for the `formatr` library. The CLI will provide developers with a powerful toolset to render templates, validate configurations, analyze performance, run benchmarks, generate reports, watch for changes, initialize projects, format code, lint templates, and launch an intera", "created": "2025-12-25T07:47:00Z", "labels": [], "context": "RFC: Add CLI Tooling for formatr # RFC: Add CLI Tooling for formatr\n\n**Issue:** #53\n**Status:** Proposed  \n**Created:** 2025-12-20  \n**Author:** TimurManjosov\n\n---\n\n## Description\n\nThis RFC proposes the addition of a comprehensive Co"}


identifier: gh_issue_3761506548
source: github_issue
status: new
created_at: 2025-12-25 08:00:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3761506548", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/lynndb0/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @lynndb0! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate your", "created": "2025-12-25T06:49:06Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @lynndb0! Welcome to your Skills exercise!"}


identifier: gh_issue_3761558185
source: github_issue
status: new
created_at: 2025-12-25 08:24:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3761558185", "title": "Hardening & DevSecOps", "url": "https://github.com/fdesenho/safevision-modular/issues/24", "user": "fdesenho", "user_url": "https://github.com/fdesenho", "repo": "safevision-modular", "body_preview": "## \ud83c\udfdb\ufe0f Governan\u00e7a & Rastreabilidade\n> **Decis\u00e3o Arquitetural Vinculada:** [ADR-020: DevSecOps Strategy](https://github.com/fdesenho/safevision-modular/blob/acb2d68dcef96a43f33727fa718466391bf57dd1/docs/adr/020-devsecops-hardening-strategy.md)\n\n---\n\n### \ud83c\udfaf Contexto e Objetivo\nGarantir a seguran\u00e7a da cadeia de suprimentos de software (Supply Chain Security).\n\n### \u2705 Crit\u00e9rios de Aceite (Definition of Done)\n- [ ] Rodar **Trivy** nas imagens Docker e corrigir vulnerabilidades \"Critical\".\n- [ ] Rodar **", "created": "2025-12-25T07:33:26Z", "labels": ["\ud83d\udfe1 priority: medium", "\u2699\ufe0f type: infra"], "context": "Hardening & DevSecOps ## \ud83c\udfdb\ufe0f Governan\u00e7a & Rastreabilidade\n> **Decis\u00e3o Arquitetural Vinculada:** [ADR-020: DevSecOps Strategy](https://github.com/fdesenho/safevision-modular/blob/acb2d68dcef96a43f33727fa718466391bf57dd1/docs"}


identifier: gh_issue_3761685692
source: github_issue
status: new
created_at: 2025-12-25 09:27:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3761685692", "title": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected", "url": "https://github.com/truckercore/truckercore1/issues/162", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "truckercore1", "body_preview": "# Security Audit Report - 2025-12-25\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/util vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-9j5q-479x-43g2\nfix available via `npm audit fix --force`\nWill install @stryker-mutator/vitest-runner@8.7.1, which is outside the stated dependency range\nnode_modules/@stryker-mutator/util\n  @stryker-mutator/core  <=8.7.0\n  D", "created": "2025-12-25T09:15:36Z", "labels": ["security", "dependencies", "automated"], "context": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected # Security Audit Report - 2025-12-25\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/"}


identifier: gh_issue_3761675221
source: github_issue
status: new
created_at: 2025-12-25 09:27:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3761675221", "title": "Epic: Dependency & Supply Chain Security", "url": "https://github.com/NaiDevOpsCom/ndc-redesign-website/issues/74", "user": "wangaiemma", "user_url": "https://github.com/wangaiemma", "repo": "ndc-redesign-website", "body_preview": "Ensure secure dependencies and supply chain for the frontend app using auditing and versioning.\n\n**Sub-issues:**\n- Enable Dependency Vulnerability Scanning\n- Lock Dependency Versions\n\nParent epic: Frontend Security Hardening", "created": "2025-12-25T09:07:25Z", "labels": ["dependencies"], "context": "Epic: Dependency & Supply Chain Security Ensure secure dependencies and supply chain for the frontend app using auditing and versioning.\n\n**Sub-issues:**\n- Enable Dependency Vulnerability Scanning\n- Lock Dependency Versions\n\nParent epic: Fro"}


identifier: gh_issue_3761703622
source: github_issue
status: new
created_at: 2025-12-25 09:39:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3761703622", "title": "[0.83] Fix text clipping on Android 15+ due to useBoundsForWidth change", "url": "https://github.com/reactwg/react-native-releases/issues/1197", "user": "EmperorZzl", "user_url": "https://github.com/EmperorZzl", "repo": "react-native-releases", "body_preview": "### Target Branch\n\n0.83\n\n### Link to commit or PR to be picked\n\nhttps://github.com/facebook/react-native/commit/8347cc4b50ca9229b638d0823d3148fed50b9a61\n\n### Description\n\nSummary:\nAndroid 15 (API 35) changed TextView's default behavior to use visual glyph bounds for width calculation (useBoundsForWidth=true).  This causes text clipping for italic fonts and other typefaces where glyphs extend beyond their advance width:", "created": "2025-12-25T09:30:34Z", "labels": ["Type Pick Request"], "context": "[0.83] Fix text clipping on Android 15+ due to useBoundsForWidth change ### Target Branch\n\n0.83\n\n### Link to commit or PR to be picked\n\nhttps://github.com/facebook/react-native/commit/8347cc4b50ca9229b638d0823d3148fed50b9a61\n\n### Description\n\nSummary:\nAndroid 15 (API 35) "}


identifier: gh_issue_3761735513
source: github_issue
status: new
created_at: 2025-12-25 10:04:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3761735513", "title": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-481824e7-45ef-447d-8c56-a9828d83cb9e/issues/11", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-481824e7-45ef-447d-8c56-a9828d83cb9e", "body_preview": "## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-web-6.1.6.jar</b></summary>\n\n<p>Spring Web</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDe", "created": "2025-12-25T09:56:07Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar ## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3761735482
source: github_issue
status: new
created_at: 2025-12-25 10:04:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3761735482", "title": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-481824e7-45ef-447d-8c56-a9828d83cb9e/issues/10", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-481824e7-45ef-447d-8c56-a9828d83cb9e", "body_preview": "## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-webmvc-6.1.6.jar</b></summary>\n\n<p>Spring Web MVC</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</", "created": "2025-12-25T09:56:05Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar ## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3761735391
source: github_issue
status: new
created_at: 2025-12-25 10:04:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3761735391", "title": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-481824e7-45ef-447d-8c56-a9828d83cb9e/issues/7", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-481824e7-45ef-447d-8c56-a9828d83cb9e", "body_preview": "## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-25T09:56:01Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761735335
source: github_issue
status: new
created_at: 2025-12-25 10:04:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3761735335", "title": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-481824e7-45ef-447d-8c56-a9828d83cb9e/issues/5", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-481824e7-45ef-447d-8c56-a9828d83cb9e", "body_preview": "## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependen", "created": "2025-12-25T09:55:57Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3761746375
source: github_issue
status: new
created_at: 2025-12-25 10:15:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3761746375", "title": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d/issues/17", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d", "body_preview": "## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-core-6.1.6.jar</b></summary>\n\n<p>Spring Core</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>", "created": "2025-12-25T10:05:31Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar ## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <"}


identifier: gh_issue_3761746343
source: github_issue
status: new
created_at: 2025-12-25 10:15:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3761746343", "title": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d/issues/16", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d", "body_preview": "## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-25T10:05:29Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761746306
source: github_issue
status: new
created_at: 2025-12-25 10:15:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3761746306", "title": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d/issues/15", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d", "body_preview": "## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-web-6.1.6.jar</b></summary>\n\n<p>Spring Web</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDe", "created": "2025-12-25T10:05:28Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar ## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3761746274
source: github_issue
status: new
created_at: 2025-12-25 10:15:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3761746274", "title": "CVE-2025-48988 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d/issues/14", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d", "body_preview": "## CVE-2025-48988 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-25T10:05:26Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48988 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48988 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761746243
source: github_issue
status: new
created_at: 2025-12-25 10:15:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3761746243", "title": "CVE-2025-61795 (Medium) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d/issues/13", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d", "body_preview": "## CVE-2025-61795 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependen", "created": "2025-12-25T10:05:25Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-61795 (Medium) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-61795 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3761771817
source: github_issue
status: new
created_at: 2025-12-25 10:27:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3761771817", "title": "CVE-2021-28834 (Critical) detected in kramdown-2.1.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d/issues/7", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d", "body_preview": "## CVE-2021-28834 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>kramdown-2.1.0.gem</b></summary>\n\n<p>kramdown is yet-another-markdown-parser but fast, pure Ruby,\nusing a strict syntax definition and supporting several common extensions.\n</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/kramdown-2.1.0.gem\">https://rubygems.org/gems/kramdown-2.1.0", "created": "2025-12-25T10:25:48Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-28834 (Critical) detected in kramdown-2.1.0.gem ## CVE-2021-28834 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3761771674
source: github_issue
status: new
created_at: 2025-12-25 10:27:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3761771674", "title": "CVE-2020-14001 (Critical) detected in kramdown-2.1.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d/issues/4", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d", "body_preview": "## CVE-2020-14001 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>kramdown-2.1.0.gem</b></summary>\n\n<p>kramdown is yet-another-markdown-parser but fast, pure Ruby,\nusing a strict syntax definition and supporting several common extensions.\n</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/kramdown-2.1.0.gem\">https://rubygems.org/gems/kramdown-2.1.0", "created": "2025-12-25T10:25:43Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2020-14001 (Critical) detected in kramdown-2.1.0.gem ## CVE-2020-14001 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3761745959
source: github_issue
status: new
created_at: 2025-12-25 10:27:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3761745959", "title": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d/issues/1", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d", "body_preview": "## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDepend", "created": "2025-12-25T10:05:11Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3761735218
source: github_issue
status: new
created_at: 2025-12-25 10:27:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3761735218", "title": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-481824e7-45ef-447d-8c56-a9828d83cb9e/issues/1", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-481824e7-45ef-447d-8c56-a9828d83cb9e", "body_preview": "## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDepend", "created": "2025-12-25T09:55:51Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3761771880
source: github_issue
status: new
created_at: 2025-12-25 10:27:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3761771880", "title": "CVE-2022-31163 (High) detected in tzinfo-1.2.7.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d/issues/9", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d", "body_preview": "## CVE-2022-31163 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tzinfo-1.2.7.gem</b></summary>\n\n<p>TZInfo provides daylight savings aware transformations between times in different time zones.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/tzinfo-1.2.7.gem\">https://rubygems.org/gems/tzinfo-1.2.7.gem</a></p>\n<p>Path to dependency file: /RxSwift-mas", "created": "2025-12-25T10:25:51Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2022-31163 (High) detected in tzinfo-1.2.7.gem ## CVE-2022-31163 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761771856
source: github_issue
status: new
created_at: 2025-12-25 10:27:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3761771856", "title": "CVE-2022-24440 (High) detected in cocoapods-downloader-1.3.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d/issues/8", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d", "body_preview": "## CVE-2022-24440 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>cocoapods-downloader-1.3.0.gem</b></summary>\n\n<p></p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem\">https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem</a></p>\n<p>Path to dependency file: /RxSwift-master-limited/Gemfile.lock</p>\n<p>Path to vulnerable ", "created": "2025-12-25T10:25:49Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2022-24440 (High) detected in cocoapods-downloader-1.3.0.gem ## CVE-2022-24440 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761771719
source: github_issue
status: new
created_at: 2025-12-25 10:27:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3761771719", "title": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d/issues/6", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d", "body_preview": "## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>activesupport-4.2.11.1.gem</b></summary>\n\n<p>A toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Rich support for multibyte strings, internationalization, time zones, and testing.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/activesupport-4.", "created": "2025-12-25T10:25:46Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem ## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3761771696
source: github_issue
status: new
created_at: 2025-12-25 10:27:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3761771696", "title": "CVE-2022-21223 (High) detected in cocoapods-downloader-1.3.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d/issues/5", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d", "body_preview": "## CVE-2022-21223 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>cocoapods-downloader-1.3.0.gem</b></summary>\n\n<p></p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem\">https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem</a></p>\n<p>Path to dependency file: /RxSwift-master-limited/Gemfile.lock</p>\n<p>Path to vulnerable ", "created": "2025-12-25T10:25:45Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2022-21223 (High) detected in cocoapods-downloader-1.3.0.gem ## CVE-2022-21223 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761785595
source: github_issue
status: new
created_at: 2025-12-25 10:39:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3761785595", "title": "Weekly maintenance cleanup and refactor", "url": "https://github.com/mcpmark-eval-sii/mcpmark-cicd/issues/4", "user": "sii-test7", "user_url": "https://github.com/sii-test7", "repo": "mcpmark-cicd", "body_preview": "This is a regular maintenance task to keep the codebase clean and well-organized.\n\n**Task Type**: Code Cleanup  \n**Priority**: Medium - Normal priority\n\n**Affected Areas**:\n- src/ directory structure\n- Utility functions that are no longer used\n- Outdated dependency configurations\n- Deprecated API endpoints\n\n**Proposed Changes**:\n- Remove unused utility functions and dead code\n- Update package.json dependencies to latest stable versions\n- Refactor old code patterns\n- Clean up comments and documen", "created": "2025-12-25T10:39:10Z", "labels": [], "context": "Weekly maintenance cleanup and refactor This is a regular maintenance task to keep the codebase clean and well-organized.\n\n**Task Type**: Code Cleanup  \n**Priority**: Medium - Normal priority\n\n**Affected Areas**:\n- src/ directory structure\n"}


identifier: gh_issue_3761027714
source: github_issue
status: new
created_at: 2025-12-25 10:39:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3761027714", "title": "'NoneType' object has no attribute 'split' after updating to v8.30.6", "url": "https://github.com/springfall2008/batpred/issues/3121", "user": "DFEvans", "user_url": "https://github.com/DFEvans", "repo": "batpred", "body_preview": "**Describe the bug**\nAfter upgrading from v8.30.2 to v8.30.6, Predbat outputs the following error after each planning run, and fails to complete most of its activities afterwards (outputting to various entities, controlling the inverter, etc.):\n\n```\n42877 | 2025-12-24 20:50:05.935448:  Error: 'NoneType' object has no attribute 'split'\n-- | --\n42876 | 2025-12-24 20:50:05.935265:  Info: record_status Error: Exception raised 'NoneType' object has no attribute 'split'\n42874 | AttributeError: 'NoneTy", "created": "2025-12-24T21:21:21Z", "labels": ["configuration", "Sigenergy"], "context": "'NoneType' object has no attribute 'split' after updating to v8.30.6 **Describe the bug**\nAfter upgrading from v8.30.2 to v8.30.6, Predbat outputs the following error after each planning run, and fails to complete most of its activities afterwards (outputting to variou"}


identifier: gh_issue_3761776404
source: github_issue
status: new
created_at: 2025-12-25 10:39:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3761776404", "title": "CVE-2021-28834 (Critical) detected in kramdown-2.1.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52/issues/7", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52", "body_preview": "## CVE-2021-28834 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>kramdown-2.1.0.gem</b></summary>\n\n<p>kramdown is yet-another-markdown-parser but fast, pure Ruby,\nusing a strict syntax definition and supporting several common extensions.\n</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/kramdown-2.1.0.gem\">https://rubygems.org/gems/kramdown-2.1.0", "created": "2025-12-25T10:30:02Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-28834 (Critical) detected in kramdown-2.1.0.gem ## CVE-2021-28834 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3761776306
source: github_issue
status: new
created_at: 2025-12-25 10:39:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3761776306", "title": "CVE-2020-14001 (Critical) detected in kramdown-2.1.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52/issues/3", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52", "body_preview": "## CVE-2020-14001 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>kramdown-2.1.0.gem</b></summary>\n\n<p>kramdown is yet-another-markdown-parser but fast, pure Ruby,\nusing a strict syntax definition and supporting several common extensions.\n</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/kramdown-2.1.0.gem\">https://rubygems.org/gems/kramdown-2.1.0", "created": "2025-12-25T10:29:56Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2020-14001 (Critical) detected in kramdown-2.1.0.gem ## CVE-2020-14001 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3761776378
source: github_issue
status: new
created_at: 2025-12-25 10:51:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3761776378", "title": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52/issues/6", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52", "body_preview": "## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>activesupport-4.2.11.1.gem</b></summary>\n\n<p>A toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Rich support for multibyte strings, internationalization, time zones, and testing.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/activesupport-4.", "created": "2025-12-25T10:30:00Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem ## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3761776278
source: github_issue
status: new
created_at: 2025-12-25 10:51:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3761776278", "title": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52/issues/2", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52", "body_preview": "## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>addressable-2.7.0.gem</b></summary>\n\n<p>Addressable is an alternative implementation to the URI implementation that is\npart of Ruby's standard library. It is flexible, offers heuristic parsing, and\nadditionally provides extensive support for IRIs and URI templates.\n</p>\n<p>Library home page: <a hre", "created": "2025-12-25T10:29:54Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem ## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761771584
source: github_issue
status: new
created_at: 2025-12-25 10:51:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3761771584", "title": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d/issues/2", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d", "body_preview": "## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>addressable-2.7.0.gem</b></summary>\n\n<p>Addressable is an alternative implementation to the URI implementation that is\npart of Ruby's standard library. It is flexible, offers heuristic parsing, and\nadditionally provides extensive support for IRIs and URI templates.\n</p>\n<p>Library home page: <a hre", "created": "2025-12-25T10:25:40Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem ## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761776454
source: github_issue
status: new
created_at: 2025-12-25 10:51:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3761776454", "title": "CVE-2022-31163 (High) detected in tzinfo-1.2.7.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52/issues/9", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52", "body_preview": "## CVE-2022-31163 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tzinfo-1.2.7.gem</b></summary>\n\n<p>TZInfo provides daylight savings aware transformations between times in different time zones.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/tzinfo-1.2.7.gem\">https://rubygems.org/gems/tzinfo-1.2.7.gem</a></p>\n<p>Path to dependency file: /RxSwift-mas", "created": "2025-12-25T10:30:05Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2022-31163 (High) detected in tzinfo-1.2.7.gem ## CVE-2022-31163 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761776424
source: github_issue
status: new
created_at: 2025-12-25 10:51:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3761776424", "title": "CVE-2022-24440 (High) detected in cocoapods-downloader-1.3.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52/issues/8", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52", "body_preview": "## CVE-2022-24440 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>cocoapods-downloader-1.3.0.gem</b></summary>\n\n<p></p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem\">https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem</a></p>\n<p>Path to dependency file: /RxSwift-master-limited/Gemfile.lock</p>\n<p>Path to vulnerable ", "created": "2025-12-25T10:30:03Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2022-24440 (High) detected in cocoapods-downloader-1.3.0.gem ## CVE-2022-24440 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761776349
source: github_issue
status: new
created_at: 2025-12-25 10:51:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3761776349", "title": "CVE-2022-21223 (High) detected in cocoapods-downloader-1.3.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52/issues/5", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52", "body_preview": "## CVE-2022-21223 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>cocoapods-downloader-1.3.0.gem</b></summary>\n\n<p></p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem\">https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem</a></p>\n<p>Path to dependency file: /RxSwift-master-limited/Gemfile.lock</p>\n<p>Path to vulnerable ", "created": "2025-12-25T10:29:59Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2022-21223 (High) detected in cocoapods-downloader-1.3.0.gem ## CVE-2022-21223 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761829804
source: github_issue
status: new
created_at: 2025-12-25 11:28:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3761829804", "title": "Aerospike Server container (asd) intermittently reaches 100% CPU utilization", "url": "https://github.com/openssl/openssl/issues/29502", "user": "vigyaat-hub", "user_url": "https://github.com/vigyaat-hub", "repo": "openssl", "body_preview": "We are investigating an escalation with a customer where the Aerospike Server container (asd) intermittently reaches 100% CPU utilization.\nPerformance profiling shows that OpenSSL's libcrypto (version from openssl-libs-1.1.1k-12.el8_9.x86_64) consumes >90% CPU during these events.\n\nAerospike's internal analysis indicates that this behavior is similar to the conditions described in CVE\u20112022\u20110778, which involves an infinite loop in BN_mod_sqrt() during certificate/EC parameter parsing.\nNVD states ", "created": "2025-12-25T11:18:24Z", "labels": [], "context": "Aerospike Server container (asd) intermittently reaches 100% CPU utilization We are investigating an escalation with a customer where the Aerospike Server container (asd) intermittently reaches 100% CPU utilization.\nPerformance profiling shows that OpenSSL's libcrypto (version"}


identifier: gh_issue_3761831585
source: github_issue
status: new
created_at: 2025-12-25 11:29:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3761831585", "title": "[Critical] SQL Injection in src/main/java/com/example/UserController.java:45", "url": "https://github.com/ElafNawaf/veracode/issues/43", "user": "ElafNawaf", "user_url": "https://github.com/ElafNawaf", "repo": "veracode", "body_preview": "**Vulnerability Details**\n\n**Type**: SQL Injection\n**Severity**: VulnerabilitySeverity.CRITICAL\n**CWE ID**: CWE-89\n**File Path**: src/main/java/com/example/UserController.java\n**Line Number**: 45\n**Confidence Score**: 0.95\n**Exploitable**: Yes\n\n**Description**:\nSQL injection vulnerability in user lookup. User input is directly concatenated into SQL query without sanitization.\n\n\n**Code Snippet**:\n```\nString query = \"SELECT ** FROM users WHERE id = \" + userId;\n```\n\n\n**Remediation**:\nUse parameteri", "created": "2025-12-25T11:20:11Z", "labels": ["severity-critical", "vulnerability", "sql-injection"], "context": "[Critical] SQL Injection in src/main/java/com/example/UserController.java:45 **Vulnerability Details**\n\n**Type**: SQL Injection\n**Severity**: VulnerabilitySeverity.CRITICAL\n**CWE ID**: CWE-89\n**File Path**: src/main/java/com/example/UserController.java\n**Line Number**: 45\n**Co"}


identifier: gh_issue_3761807506
source: github_issue
status: new
created_at: 2025-12-25 11:29:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3761807506", "title": "[plan] Update GitHub Actions workflow to gosec v2.22.11", "url": "https://github.com/githubnext/gh-aw/issues/7613", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "gh-aw", "body_preview": "## Objective\n\nUpdate the security scan workflow to use gosec v2.22.11, the latest version with Trojan Source detection and other security enhancements.\n\n## Context\n\nThe current workflow uses v2.22.10, which is outdated. The latest v2.22.11 (released Dec 11, 2025) includes:\n- **G116**: Trojan Source detection (Unicode bidirectional control characters)\n- Enhanced build tag parsing\n- Performance improvements\n- AI-powered vulnerability fix suggestions support\n\nThis is a critical security update for ", "created": "2025-12-25T10:59:58Z", "labels": ["enhancement", "security", "ai-generated", "plan"], "context": "[plan] Update GitHub Actions workflow to gosec v2.22.11 ## Objective\n\nUpdate the security scan workflow to use gosec v2.22.11, the latest version with Trojan Source detection and other security enhancements.\n\n## Context\n\nThe current workflow uses v2.22.10,"}


identifier: gh_issue_3761849631
source: github_issue
status: new
created_at: 2025-12-25 11:41:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3761849631", "title": "\ud83d\udea8 SBOM Vulnerabilities Detected (Grype)", "url": "https://github.com/Technochip/Test-workflows/issues/77", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Test-workflows", "body_preview": "\n    ### \ud83d\udea8 SBOM Vulnerabilities Detected\n    \n    **Workflow:** SBOM Scanning\n    **Branch:** refs/heads/dev\n    **Commit:** 3f5244bc4ffcdc0a071a0ad8fb13b07e6f61dea3\n    \n    ### \ud83d\udce6 Grype Scan Output\n    ```\n    NAME                  INSTALLED  FIXED IN  TYPE  VULNERABILITY        SEVERITY  EPSS           RISK   \nqs                    6.5.1      6.5.3     npm   GHSA-hrpp-h998-j3pp  High      3.2% (86th)    2.4    \nserialize-javascript  2.1.1      3.1.0     npm   GHSA-hxcc-f52p-wc94  High      2.4", "created": "2025-12-25T11:39:48Z", "labels": ["security:sbom"], "context": "\ud83d\udea8 SBOM Vulnerabilities Detected (Grype) \n    ### \ud83d\udea8 SBOM Vulnerabilities Detected\n    \n    **Workflow:** SBOM Scanning\n    **Branch:** refs/heads/dev\n    **Commit:** 3f5244bc4ffcdc0a071a0ad8fb13b07e6f61dea3\n    \n    ### \ud83d\udce6 Grype Scan Output\n "}


identifier: gh_issue_3761842535
source: github_issue
status: new
created_at: 2025-12-25 11:41:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3761842535", "title": "campcodes  Retro Basketball Shoes Online Store Project V1.0 /admin/admin_feature.php cross site scripting", "url": "https://github.com/security4research/cve_submission/issues/1", "user": "zzb1388", "user_url": "https://github.com/zzb1388", "repo": "cve_submission", "body_preview": "# campcodes  Retro Basketball Shoes Online Store Project V1.0 /admin/admin_feature.php cross site scripting\n\n# Email OF AFFECTED PRODUCT(S)\n\n- # Retro Basketball Shoes Online Store\n\n## Vendor Homepage\n\n- campcodes\n\n## submitter\n\n-  Vulnerable File\n\n-  zhcharyzhang\n\n## VERSION(S)\n\n- V1.0\n\n## Software Link\n\nhttps://www.campcodes.com/projects/php/retro-basketball-shoes-online-store-in-php-mysql/\n\n## Vulnerability Type\n\n- XSS\n\n## Root Cause\n\n- An XSS vulnerability was found in the '/admin/admin_feat", "created": "2025-12-25T11:32:06Z", "labels": [], "context": "campcodes  Retro Basketball Shoes Online Store Project V1.0 /admin/admin_feature.php cross site scripting # campcodes  Retro Basketball Shoes Online Store Project V1.0 /admin/admin_feature.php cross site scripting\n\n# Email OF AFFECTED PRODUCT(S)\n\n- # Retro Basketball Shoes Online Store\n\n## Vendor Homepage"}


identifier: gh_issue_3761807499
source: github_issue
status: new
created_at: 2025-12-25 11:41:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3761807499", "title": "[plan] Upgrade gosec integration to v2.22.11 and improve security scanning", "url": "https://github.com/githubnext/gh-aw/issues/7612", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "gh-aw", "body_preview": "## Overview\n\nThis tracking issue covers improvements to our gosec (Go Security Checker) integration based on the comprehensive analysis in Discussion #7599.\n\n**Source**: Discussion #7599\n\n## Current Status\n\ngh-aw has an excellent multi-layered gosec integration (rated 4/5):\n- \u2705 Daily automated security scans in GitHub Actions\n- \u2705 GitHub Code Scanning (SARIF) integration\n- \u2705 golangci-lint integration\n- \u2705 Makefile targets for local scanning\n- \u26a0\ufe0f Using outdated v2.22.10 in workflow (v2.22.11 availa", "created": "2025-12-25T10:59:58Z", "labels": ["enhancement", "ai-generated", "plan"], "context": "[plan] Upgrade gosec integration to v2.22.11 and improve security scanning ## Overview\n\nThis tracking issue covers improvements to our gosec (Go Security Checker) integration based on the comprehensive analysis in Discussion #7599.\n\n**Source**: Discussion #7599\n\n## Current S"}


identifier: gh_issue_3761796788
source: github_issue
status: new
created_at: 2025-12-25 11:41:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3761796788", "title": "Add feature for immutable GitHub releases", "url": "https://github.com/apache/infrastructure-asfyaml/issues/83", "user": "snazy", "user_url": "https://github.com/snazy", "repo": "infrastructure-asfyaml", "body_preview": "Since Oct 2025 GitHub supports so called [\"Immutable Releases\"](https://github.blog/changelog/2025-10-28-immutable-releases-are-now-generally-available/#how-to-enable-immutable-releases), [docs](https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/immutable-releases?utm_source=changelog-docs-immutable-releases&utm_medium=changelog&utm_campaign=universe25). This feature makes the associated Git tag immutable and protects the release assets. It ev", "created": "2025-12-25T10:50:11Z", "labels": [], "context": "Add feature for immutable GitHub releases Since Oct 2025 GitHub supports so called [\"Immutable Releases\"](https://github.blog/changelog/2025-10-28-immutable-releases-are-now-generally-available/#how-to-enable-immutable-releases), [docs](https"}


identifier: gh_issue_3761675184
source: github_issue
status: new
created_at: 2025-12-25 11:41:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3761675184", "title": "Epic: Frontend Security Hardening (React + TypeScript + Vite)", "url": "https://github.com/NaiDevOpsCom/ndc-redesign-website/issues/70", "user": "wangaiemma", "user_url": "https://github.com/wangaiemma", "repo": "ndc-redesign-website", "body_preview": "**Objective:**\nImplement frontend security best practices to reduce XSS, dependency, misconfiguration, and client-side attack risks in our React + TypeScript + Vite application.\n\n**Sub-epics:**\n- XSS & Input Handling Protection\n- Authentication & Token Safety\n- Content Security Policy (CSP)\n- Dependency & Supply Chain Security\n- Secure Environment Variable Usage\n- Browser Security Headers\n- Build-Time & Code-Level Security\n- Error Handling & Information Disclosure\n- Navigation & Redirect Safety\n", "created": "2025-12-25T09:07:23Z", "labels": ["enhancement"], "context": "Epic: Frontend Security Hardening (React + TypeScript + Vite) **Objective:**\nImplement frontend security best practices to reduce XSS, dependency, misconfiguration, and client-side attack risks in our React + TypeScript + Vite application.\n\n**Sub-epics:**\n- XSS "}


identifier: gh_issue_3761873792
source: github_issue
status: new
created_at: 2025-12-25 12:06:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3761873792", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/mohammed-anas-m/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @mohammed-anas-m! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebr", "created": "2025-12-25T11:58:48Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @mohammed-anas-m! Welcome to your Skills e"}


identifier: gh_issue_3761904602
source: github_issue
status: new
created_at: 2025-12-25 12:19:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3761904602", "title": "CVE-2022-31163 (High) detected in tzinfo-1.2.7.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-89d95330-ca10-4e2f-a300-6b22f86d3bf4/issues/9", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-89d95330-ca10-4e2f-a300-6b22f86d3bf4", "body_preview": "## CVE-2022-31163 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tzinfo-1.2.7.gem</b></summary>\n\n<p>TZInfo provides daylight savings aware transformations between times in different time zones.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/tzinfo-1.2.7.gem\">https://rubygems.org/gems/tzinfo-1.2.7.gem</a></p>\n<p>Path to dependency file: /RxSwift-mas", "created": "2025-12-25T12:17:10Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2022-31163 (High) detected in tzinfo-1.2.7.gem ## CVE-2022-31163 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761904571
source: github_issue
status: new
created_at: 2025-12-25 12:19:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3761904571", "title": "CVE-2022-24440 (High) detected in cocoapods-downloader-1.3.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-89d95330-ca10-4e2f-a300-6b22f86d3bf4/issues/8", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-89d95330-ca10-4e2f-a300-6b22f86d3bf4", "body_preview": "## CVE-2022-24440 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>cocoapods-downloader-1.3.0.gem</b></summary>\n\n<p></p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem\">https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem</a></p>\n<p>Path to dependency file: /RxSwift-master-limited/Gemfile.lock</p>\n<p>Path to vulnerable ", "created": "2025-12-25T12:17:08Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2022-24440 (High) detected in cocoapods-downloader-1.3.0.gem ## CVE-2022-24440 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761904543
source: github_issue
status: new
created_at: 2025-12-25 12:19:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3761904543", "title": "CVE-2021-28834 (Critical) detected in kramdown-2.1.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-89d95330-ca10-4e2f-a300-6b22f86d3bf4/issues/7", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-89d95330-ca10-4e2f-a300-6b22f86d3bf4", "body_preview": "## CVE-2021-28834 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>kramdown-2.1.0.gem</b></summary>\n\n<p>kramdown is yet-another-markdown-parser but fast, pure Ruby,\nusing a strict syntax definition and supporting several common extensions.\n</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/kramdown-2.1.0.gem\">https://rubygems.org/gems/kramdown-2.1.0", "created": "2025-12-25T12:17:07Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-28834 (Critical) detected in kramdown-2.1.0.gem ## CVE-2021-28834 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3761904516
source: github_issue
status: new
created_at: 2025-12-25 12:19:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3761904516", "title": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-89d95330-ca10-4e2f-a300-6b22f86d3bf4/issues/6", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-89d95330-ca10-4e2f-a300-6b22f86d3bf4", "body_preview": "## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>activesupport-4.2.11.1.gem</b></summary>\n\n<p>A toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Rich support for multibyte strings, internationalization, time zones, and testing.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/activesupport-4.", "created": "2025-12-25T12:17:05Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem ## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3761904493
source: github_issue
status: new
created_at: 2025-12-25 12:19:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3761904493", "title": "CVE-2022-21223 (High) detected in cocoapods-downloader-1.3.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-89d95330-ca10-4e2f-a300-6b22f86d3bf4/issues/5", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-89d95330-ca10-4e2f-a300-6b22f86d3bf4", "body_preview": "## CVE-2022-21223 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>cocoapods-downloader-1.3.0.gem</b></summary>\n\n<p></p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem\">https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem</a></p>\n<p>Path to dependency file: /RxSwift-master-limited/Gemfile.lock</p>\n<p>Path to vulnerable ", "created": "2025-12-25T12:17:04Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2022-21223 (High) detected in cocoapods-downloader-1.3.0.gem ## CVE-2022-21223 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761904414
source: github_issue
status: new
created_at: 2025-12-25 12:31:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3761904414", "title": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-89d95330-ca10-4e2f-a300-6b22f86d3bf4/issues/2", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-89d95330-ca10-4e2f-a300-6b22f86d3bf4", "body_preview": "## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>addressable-2.7.0.gem</b></summary>\n\n<p>Addressable is an alternative implementation to the URI implementation that is\npart of Ruby's standard library. It is flexible, offers heuristic parsing, and\nadditionally provides extensive support for IRIs and URI templates.\n</p>\n<p>Library home page: <a hre", "created": "2025-12-25T12:16:59Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem ## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761892527
source: github_issue
status: new
created_at: 2025-12-25 12:31:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3761892527", "title": "CVE-2025-55551 (High) detected in torch-2.8.0-cp310-none-macosx_11_0_arm64.whl", "url": "https://github.com/justunsix/automatetheboringstuff-py-tests/issues/161", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "automatetheboringstuff-py-tests", "body_preview": "## CVE-2025-55551 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>torch-2.8.0-cp310-none-macosx_11_0_arm64.whl</b></summary>\n\n<p>Tensors and Dynamic neural networks in Python with strong GPU acceleration</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/ef/d6/e6d4c57e61c2b2175d3aafbfb779926a2cfd7c32eeda7c543925dceec923/torch-2.8.0-cp310-n", "created": "2025-12-25T12:09:54Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55551 (High) detected in torch-2.8.0-cp310-none-macosx_11_0_arm64.whl ## CVE-2025-55551 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761891127
source: github_issue
status: new
created_at: 2025-12-25 12:31:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3761891127", "title": "CVE-2025-55551 (High) detected in torch-1.11.0-cp39-cp39-manylinux1_x86_64.whl", "url": "https://github.com/jonhilgart22/go-trader/issues/111", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "go-trader", "body_preview": "## CVE-2025-55551 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>torch-1.11.0-cp39-cp39-manylinux1_x86_64.whl</b></summary>\n\n<p>Tensors and Dynamic neural networks in Python with strong GPU acceleration</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/f8/04/ebf936e02d37c185341558de73324c6511d7fb7578cb1c3439411475fd7e/torch-1.11.0-cp39-c", "created": "2025-12-25T12:09:09Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55551 (High) detected in torch-1.11.0-cp39-cp39-manylinux1_x86_64.whl ## CVE-2025-55551 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761856505
source: github_issue
status: new
created_at: 2025-12-25 12:31:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3761856505", "title": "\ud83d\udea8 CRITICAL: Security Vulnerabilities Remediation (34 vulnerabilities detected)", "url": "https://github.com/laniri/drawings/issues/10", "user": "laniri", "user_url": "https://github.com/laniri", "repo": "drawings", "body_preview": "# \ud83d\udea8 Critical Security Vulnerabilities Remediation Task\n\n## Issue Summary\nGitHub has detected **34 security vulnerabilities** in the repository dependencies that require immediate attention.\n\n## Vulnerability Breakdown\n- **4 Critical** vulnerabilities\n- **9 High** severity vulnerabilities  \n- **16 Moderate** severity vulnerabilities\n- **5 Low** severity vulnerabilities\n\n## Immediate Actions Required\n\n### 1. Review Dependabot Alerts\n- Navigate to: https://github.com/laniri/drawings/security/depend", "created": "2025-12-25T11:47:35Z", "labels": ["dependencies", "security", "critical", "vulnerabilities"], "context": "\ud83d\udea8 CRITICAL: Security Vulnerabilities Remediation (34 vulnerabilities detected) # \ud83d\udea8 Critical Security Vulnerabilities Remediation Task\n\n## Issue Summary\nGitHub has detected **34 security vulnerabilities** in the repository dependencies that require immediate attention.\n\n## Vulner"}


identifier: gh_issue_3761929490
source: github_issue
status: new
created_at: 2025-12-25 12:56:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3761929490", "title": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-8beacbe4-d2a6-48c1-a447-f12cdbaa7ee5/issues/5", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-8beacbe4-d2a6-48c1-a447-f12cdbaa7ee5", "body_preview": "## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>activesupport-4.2.11.1.gem</b></summary>\n\n<p>A toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Rich support for multibyte strings, internationalization, time zones, and testing.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/activesupport-4.", "created": "2025-12-25T12:33:40Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem ## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3761929385
source: github_issue
status: new
created_at: 2025-12-25 12:56:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3761929385", "title": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-8beacbe4-d2a6-48c1-a447-f12cdbaa7ee5/issues/1", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-8beacbe4-d2a6-48c1-a447-f12cdbaa7ee5", "body_preview": "## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>addressable-2.7.0.gem</b></summary>\n\n<p>Addressable is an alternative implementation to the URI implementation that is\npart of Ruby's standard library. It is flexible, offers heuristic parsing, and\nadditionally provides extensive support for IRIs and URI templates.\n</p>\n<p>Library home page: <a hre", "created": "2025-12-25T12:33:34Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem ## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761956432
source: github_issue
status: new
created_at: 2025-12-25 13:08:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3761956432", "title": "\ud83d\udccb Update ISMS Compliance Documentation for v1.1.0", "url": "https://github.com/Hack23/cia-compliance-manager/issues/805", "user": "pethers", "user_url": "https://github.com/pethers", "repo": "cia-compliance-manager", "body_preview": "## \ud83c\udfaf Objective\nUpdate and align ISMS compliance documentation to reflect v1.1.0 improvements, ensuring all security controls, compliance mappings, and evidence artifacts are accurately documented per Secure Development Policy requirements.\n\n## \ud83d\udccb Background\nThe CIA Compliance Manager demonstrates ISMS compliance through comprehensive documentation. With v1.1.0 improvements (accessibility, performance, error handling), compliance documentation needs updates to reflect current security posture.\n\n**", "created": "2025-12-25T12:52:36Z", "labels": [], "context": "\ud83d\udccb Update ISMS Compliance Documentation for v1.1.0 ## \ud83c\udfaf Objective\nUpdate and align ISMS compliance documentation to reflect v1.1.0 improvements, ensuring all security controls, compliance mappings, and evidence artifacts are accurately documented per "}


identifier: gh_issue_3761950786
source: github_issue
status: new
created_at: 2025-12-25 13:08:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3761950786", "title": "[RTM-05] Runtime Security SDD", "url": "https://github.com/Creto-Systems/Enablement/issues/30", "user": "tommaduri", "user_url": "https://github.com/tommaduri", "repo": "Enablement", "body_preview": "## Document: products/runtime/05-security.md\n\n## Content\n- Isolation guarantees\n- Egress controls\n- Attestation verification\n- Syscall filtering\n\n## Threats\n- Sandbox escape\n- Identity spoofing\n- Network exfiltration\n- Supply chain attacks", "created": "2025-12-25T12:48:33Z", "labels": ["sdd", "runtime", "phase-3"], "context": "[RTM-05] Runtime Security SDD ## Document: products/runtime/05-security.md\n\n## Content\n- Isolation guarantees\n- Egress controls\n- Attestation verification\n- Syscall filtering\n\n## Threats\n- Sandbox escape\n- Identity spoofing\n- Netw"}


identifier: gh_issue_3761944677
source: github_issue
status: new
created_at: 2025-12-25 13:09:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3761944677", "title": "\ud83d\udea8 CRITICAL: Security Vulnerability Pipeline Failures - Immediate Fix Required", "url": "https://github.com/laniri/drawings/issues/13", "user": "laniri", "user_url": "https://github.com/laniri", "repo": "drawings", "body_preview": "# \ud83d\udea8 CRITICAL: Security Vulnerability Pipeline Failures - Immediate Fix Required\n\n## Issue Summary\n**BLOCKING ISSUE**: The CI/CD pipeline may be failing due to the 34 detected security vulnerabilities, particularly the 4 critical and 9 high-severity issues. This requires immediate remediation to unblock the development pipeline.\n\n## Context\n- **34 security vulnerabilities detected** (4 critical, 9 high, 16 moderate, 5 low)\n- **6 Dependabot PRs available** with security fixes\n- **Pipeline potentia", "created": "2025-12-25T12:44:21Z", "labels": ["security", "critical", "vulnerabilities", "blocking"], "context": "\ud83d\udea8 CRITICAL: Security Vulnerability Pipeline Failures - Immediate Fix Required # \ud83d\udea8 CRITICAL: Security Vulnerability Pipeline Failures - Immediate Fix Required\n\n## Issue Summary\n**BLOCKING ISSUE**: The CI/CD pipeline may be failing due to the 34 detected security vulnerabilities,"}


identifier: gh_issue_3761853940
source: github_issue
status: new
created_at: 2025-12-25 13:09:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3761853940", "title": "\ud83d\udd27 CI/CD Pipeline Status Check and Remediation Task", "url": "https://github.com/laniri/drawings/issues/9", "user": "laniri", "user_url": "https://github.com/laniri", "repo": "drawings", "body_preview": "# CI/CD Pipeline Status and Remediation Task\n\n## Issue Summary\nThis issue tracks the current CI/CD pipeline status and provides remediation tasks for any identified failures.\n\n## Recent Changes\n- **Latest Commit**: `19dfcd1` - Fix Black formatting issues in interpretability_engine.py\n- **Previous Issue**: Black formatting errors were causing CI failures\n- **Status**: Formatting issues have been resolved locally\n\n## Remediation Actions Completed \u2705\n\n### 1. Black Formatting Issues Fixed\n- **Problem", "created": "2025-12-25T11:44:45Z", "labels": ["ci-cd", "high-priority", "remediation", "monitoring"], "context": "\ud83d\udd27 CI/CD Pipeline Status Check and Remediation Task # CI/CD Pipeline Status and Remediation Task\n\n## Issue Summary\nThis issue tracks the current CI/CD pipeline status and provides remediation tasks for any identified failures.\n\n## Recent Changes\n- **La"}


identifier: gh_issue_3762015012
source: github_issue
status: new
created_at: 2025-12-25 13:47:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3762015012", "title": "apache_airflow_core-3.0.6-py3-none-any.whl: 2 vulnerabilities (highest severity is: 8.8)", "url": "https://github.com/BuloZB/BuloCloudSentinel/issues/451", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "BuloCloudSentinel", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>apache_airflow_core-3.0.6-py3-none-any.whl</b></summary>\n\n<p>Core packages for Apache Airflow, schedule and API server</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/4b/f7/30d7d440ab5e4967d5cd70947609bef08c44928805561cdc2e9b29af68ce/apache_airflow_core-3.0.6-py3-none-any.whl\">https://files.pythonhosted.org/packages/4b", "created": "2025-12-25T13:32:40Z", "labels": ["Mend: dependency security vulnerability"], "context": "apache_airflow_core-3.0.6-py3-none-any.whl: 2 vulnerabilities (highest severity is: 8.8) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>apache_airflow_core-3.0.6-py3-none-any.whl</b><"}


identifier: gh_issue_3762049940
source: github_issue
status: new
created_at: 2025-12-25 14:11:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3762049940", "title": "\ud83d\udea8 URGENT: CI/CD Pipeline Status - Close Outdated Dependabot PRs and Address Remaining Updates", "url": "https://github.com/laniri/drawings/issues/15", "user": "laniri", "user_url": "https://github.com/laniri", "repo": "drawings", "body_preview": "## \ud83d\udea8 URGENT: CI/CD Pipeline Status Analysis and Remediation\n\n### \ud83d\udcca **Current Status After Security Updates (Commit: 2523947)**\n\n**\u2705 RESOLVED DEPENDENCIES** (manually updated in commit 2523947):\n- **Black**: 23.11.0 \u2192 24.3.0 \u2705 (CVE-2024-21503 fixed)\n- **Pillow**: 10.1.0 \u2192 10.3.0 \u2705 (CVE-2024-28219 fixed)  \n- **python-multipart**: 0.0.6 \u2192 0.0.20 \u2705 (security update)\n- **scikit-learn**: 1.3.2 \u2192 1.8.0 \u2705 (updated beyond Dependabot target)\n- **FastAPI**: 0.104.1 \u2192 0.124.4 \u2705 (web framework security)\n- **", "created": "2025-12-25T14:02:21Z", "labels": ["dependencies", "ci-cd", "remediation", "security", "urgent"], "context": "\ud83d\udea8 URGENT: CI/CD Pipeline Status - Close Outdated Dependabot PRs and Address Remaining Updates ## \ud83d\udea8 URGENT: CI/CD Pipeline Status Analysis and Remediation\n\n### \ud83d\udcca **Current Status After Security Updates (Commit: 2523947)**\n\n**\u2705 RESOLVED DEPENDENCIES** (manually updated in commit 2523947):\n- **Bl"}


identifier: gh_issue_3762048841
source: github_issue
status: new
created_at: 2025-12-25 14:11:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3762048841", "title": "Security Vulnerability Remediation - Phase 2 Complete, 34 Remaining", "url": "https://github.com/laniri/drawings/issues/14", "user": "laniri", "user_url": "https://github.com/laniri", "repo": "drawings", "body_preview": "## Security Vulnerability Update - Phase 2 Complete\n\n### \u2705 Completed Security Fixes (Commit: 2523947)\n\n**Major Framework Updates:**\n- **FastAPI**: 0.104.1 \u2192 0.124.4 (web framework security)\n- **uvicorn**: 0.24.0 \u2192 0.38.0 (ASGI server security)  \n- **SQLAlchemy**: 2.0.23 \u2192 2.0.37 (database security)\n- **PyTorch**: 2.1.0 \u2192 2.2.2 (ML framework)\n- **Transformers**: 4.35.0 \u2192 4.57.3 (ViT embeddings)\n\n**Security-Critical Updates:**\n- **python-multipart**: 0.0.6 \u2192 0.0.20 (file upload security)\n- **sciki", "created": "2025-12-25T14:01:08Z", "labels": ["dependencies", "high-priority", "security", "investigation"], "context": "Security Vulnerability Remediation - Phase 2 Complete, 34 Remaining ## Security Vulnerability Update - Phase 2 Complete\n\n### \u2705 Completed Security Fixes (Commit: 2523947)\n\n**Major Framework Updates:**\n- **FastAPI**: 0.104.1 \u2192 0.124.4 (web framework security)\n- **uvicor"}


identifier: gh_issue_3762066643
source: github_issue
status: new
created_at: 2025-12-25 14:22:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3762066643", "title": "\ud83d\udcca CI/CD Pipeline Status Report - Security Updates Complete, PyTorch Issue Identified", "url": "https://github.com/laniri/drawings/issues/18", "user": "laniri", "user_url": "https://github.com/laniri", "repo": "drawings", "body_preview": "## \ud83d\udcca CI/CD Pipeline Status Report - December 25, 2025\n\n### \ud83c\udfaf **EXECUTIVE SUMMARY**\n- \u2705 **Main Branch**: STABLE (all security fixes applied)\n- \ud83d\udd34 **PyTorch PR #8**: CRITICAL FAILURE (dependency installation)\n- \u2705 **Security Updates**: COMPLETE (34 vulnerabilities \u2192 significantly reduced)\n- \ud83d\udfe1 **Remaining PRs**: 2 open (1 critical, 1 low priority)\n\n---\n\n### \ud83d\udcc8 **SUCCESS METRICS**\n\n#### \u2705 **Security Remediation Complete**\n- **Black CVE-2024-21503**: \u2705 FIXED (commit `2523947`)\n- **Pillow CVE-2024-28219*", "created": "2025-12-25T14:20:23Z", "labels": ["monitoring", "security", "ci/cd", "status-report"], "context": "\ud83d\udcca CI/CD Pipeline Status Report - Security Updates Complete, PyTorch Issue Identified ## \ud83d\udcca CI/CD Pipeline Status Report - December 25, 2025\n\n### \ud83c\udfaf **EXECUTIVE SUMMARY**\n- \u2705 **Main Branch**: STABLE (all security fixes applied)\n- \ud83d\udd34 **PyTorch PR #8**: CRITICAL FAILURE (dependency installa"}


identifier: gh_issue_3762061300
source: github_issue
status: new
created_at: 2025-12-25 14:22:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3762061300", "title": "\ud83c\udf89 SUCCESS: CI/CD Pipeline Phase 1 Complete - 80% Dependabot Auto-Closure Achieved", "url": "https://github.com/laniri/drawings/issues/16", "user": "laniri", "user_url": "https://github.com/laniri", "repo": "drawings", "body_preview": "## \ud83c\udf89 **CI/CD Pipeline Monitoring - Phase 1 COMPLETE**\n\n### \u2705 **MAJOR SUCCESS: Dependabot Auto-Closure Achieved**\n\n**Excellent News:** Dependabot has automatically closed 4 out of 5 resolved security PRs when it detected our security updates in commit `2523947`. This is the ideal outcome and shows our security remediation was successful.\n\n### \ud83d\udcca **Final Dependabot PR Status**\n\n**\u2705 AUTOMATICALLY CLOSED (Dependabot detected our updates):**\n- **PR #3**: python-multipart 0.0.6 \u2192 0.0.18 \u2705 **AUTO-CLOSED", "created": "2025-12-25T14:14:36Z", "labels": ["dependencies", "ci-cd", "monitoring", "security", "success"], "context": "\ud83c\udf89 SUCCESS: CI/CD Pipeline Phase 1 Complete - 80% Dependabot Auto-Closure Achieved ## \ud83c\udf89 **CI/CD Pipeline Monitoring - Phase 1 COMPLETE**\n\n### \u2705 **MAJOR SUCCESS: Dependabot Auto-Closure Achieved**\n\n**Excellent News:** Dependabot has automatically closed 4 out of 5 resolved security P"}


identifier: gh_issue_3762035758
source: github_issue
status: new
created_at: 2025-12-25 14:22:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3762035758", "title": "[Critical] SQL Injection in src/main/java/com/example/UserController.java:45", "url": "https://github.com/ElafNawaf/veracode/issues/54", "user": "ElafNawaf", "user_url": "https://github.com/ElafNawaf", "repo": "veracode", "body_preview": "**Vulnerability Details**\n\n**Type**: SQL Injection\n**Severity**: VulnerabilitySeverity.CRITICAL\n**CWE ID**: CWE-89\n**File Path**: src/main/java/com/example/UserController.java\n**Line Number**: 45\n**Confidence Score**: 0.95\n**Exploitable**: Yes\n\n**Description**:\nSQL injection vulnerability in user lookup. User input is directly concatenated into SQL query without sanitization.\n\n\n**Code Snippet**:\n```\nString query = \"SELECT ** FROM users WHERE id = \" + userId;\n```\n\n\n**Remediation**:\nUse parameteri", "created": "2025-12-25T13:52:39Z", "labels": ["severity-critical", "vulnerability", "sql-injection"], "context": "[Critical] SQL Injection in src/main/java/com/example/UserController.java:45 **Vulnerability Details**\n\n**Type**: SQL Injection\n**Severity**: VulnerabilitySeverity.CRITICAL\n**CWE ID**: CWE-89\n**File Path**: src/main/java/com/example/UserController.java\n**Line Number**: 45\n**Co"}


identifier: gh_issue_3762015048
source: github_issue
status: new
created_at: 2025-12-25 14:22:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3762015048", "title": "nbconvert-7.16.6-py3-none-any.whl: 1 vulnerabilities (highest severity is: 7.8)", "url": "https://github.com/BuloZB/BuloCloudSentinel/issues/452", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "BuloCloudSentinel", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>nbconvert-7.16.6-py3-none-any.whl</b></summary>\n\n<p>Converting Jupyter Notebooks (.ipynb files) to other formats.  Output formats include asciidoc, html, latex, markdown, pdf, py, rst, script.  nbconvert can be used both as a Python library (`import nbconvert`) or as a command line tool (invoked as `jupyter nbconvert ...`).</p>\n<p>Library home p", "created": "2025-12-25T13:32:42Z", "labels": ["Mend: dependency security vulnerability"], "context": "nbconvert-7.16.6-py3-none-any.whl: 1 vulnerabilities (highest severity is: 7.8) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>nbconvert-7.16.6-py3-none-any.whl</b></summary>"}


identifier: gh_issue_3762066278
source: github_issue
status: new
created_at: 2025-12-25 14:34:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3762066278", "title": "\ud83d\udea8 CRITICAL: PyTorch 2.8.0 CI/CD Installation Failure - Dependency Conflict", "url": "https://github.com/laniri/drawings/issues/17", "user": "laniri", "user_url": "https://github.com/laniri", "repo": "drawings", "body_preview": "## \ud83d\udea8 CRITICAL: PyTorch 2.8.0 Dependency Installation Failure\n\n**Workflow Run**: [#20506211625](https://github.com/laniri/drawings/actions/runs/20506211625)  \n**PR**: #8 (Dependabot PyTorch 2.1.0 \u2192 2.8.0)  \n**Status**: \u274c **FAILED** at \"Install dependencies\" step  \n**Impact**: **BLOCKING** CI/CD pipeline for PyTorch upgrade\n\n### Failure Details\n- **Job**: \"Run Tests\" \n- **Failed Step**: \"Install dependencies\" (step 5)\n- **Duration**: Failed after ~8 seconds\n- **All Subsequent Steps**: Skipped due ", "created": "2025-12-25T14:19:59Z", "labels": ["bug", "dependencies", "high-priority", "ci/cd"], "context": "\ud83d\udea8 CRITICAL: PyTorch 2.8.0 CI/CD Installation Failure - Dependency Conflict ## \ud83d\udea8 CRITICAL: PyTorch 2.8.0 Dependency Installation Failure\n\n**Workflow Run**: [#20506211625](https://github.com/laniri/drawings/actions/runs/20506211625)  \n**PR**: #8 (Dependabot PyTorch 2.1.0 \u2192 2.8"}


identifier: gh_issue_3762093979
source: github_issue
status: new
created_at: 2025-12-25 14:58:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3762093979", "title": "\ud83c\udfaf FINAL STATUS: Critical CI Fix Deployed - Pipeline Monitoring Active", "url": "https://github.com/laniri/drawings/issues/20", "user": "laniri", "user_url": "https://github.com/laniri", "repo": "drawings", "body_preview": "## \ud83c\udfaf **FINAL CI/CD PIPELINE STATUS: Critical Fix Deployed & Monitoring**\n\n### **EXECUTIVE SUMMARY**\n\u2705 **Critical main branch CI failure identified and fixed**  \n\ud83d\ude80 **Fix deployed to production (commit `8082cd4`)**  \n\u23f3 **CI pipeline currently running with fix**  \n\ud83d\udcca **Comprehensive monitoring in progress**\n\n---\n\n### \ud83d\udd0d **ISSUE RESOLUTION TIMELINE**\n\n#### **14:25 - CRITICAL ISSUE DETECTED**\n- Main branch CI pipeline failing at \"Install dependencies\" step\n- Production deployments blocked\n- Issue #19 c", "created": "2025-12-25T14:49:06Z", "labels": ["monitoring", "ci/cd", "status-report", "resolved"], "context": "\ud83c\udfaf FINAL STATUS: Critical CI Fix Deployed - Pipeline Monitoring Active ## \ud83c\udfaf **FINAL CI/CD PIPELINE STATUS: Critical Fix Deployed & Monitoring**\n\n### **EXECUTIVE SUMMARY**\n\u2705 **Critical main branch CI failure identified and fixed**  \n\ud83d\ude80 **Fix deployed to production (commit "}


identifier: gh_issue_3762116538
source: github_issue
status: new
created_at: 2025-12-25 15:23:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3762116538", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/UlrikeDetective/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @UlrikeDetective! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each s", "created": "2025-12-25T15:13:59Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @UlrikeDetective! Welco"}


identifier: gh_issue_3762126865
source: github_issue
status: new
created_at: 2025-12-25 15:35:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3762126865", "title": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-13c22c94-c085-4021-b857-a81b96598861/issues/5", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-13c22c94-c085-4021-b857-a81b96598861", "body_preview": "## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>activesupport-4.2.11.1.gem</b></summary>\n\n<p>A toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Rich support for multibyte strings, internationalization, time zones, and testing.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/activesupport-4.", "created": "2025-12-25T15:26:12Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem ## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3762126782
source: github_issue
status: new
created_at: 2025-12-25 15:35:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3762126782", "title": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-13c22c94-c085-4021-b857-a81b96598861/issues/1", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-13c22c94-c085-4021-b857-a81b96598861", "body_preview": "## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>addressable-2.7.0.gem</b></summary>\n\n<p>Addressable is an alternative implementation to the URI implementation that is\npart of Ruby's standard library. It is flexible, offers heuristic parsing, and\nadditionally provides extensive support for IRIs and URI templates.\n</p>\n<p>Library home page: <a hre", "created": "2025-12-25T15:26:06Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem ## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3762126929
source: github_issue
status: new
created_at: 2025-12-25 16:00:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3762126929", "title": "CVE-2022-31163 (High) detected in tzinfo-1.2.7.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-13c22c94-c085-4021-b857-a81b96598861/issues/9", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-13c22c94-c085-4021-b857-a81b96598861", "body_preview": "## CVE-2022-31163 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tzinfo-1.2.7.gem</b></summary>\n\n<p>TZInfo provides daylight savings aware transformations between times in different time zones.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/tzinfo-1.2.7.gem\">https://rubygems.org/gems/tzinfo-1.2.7.gem</a></p>\n<p>Path to dependency file: /RxSwift-mas", "created": "2025-12-25T15:26:17Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2022-31163 (High) detected in tzinfo-1.2.7.gem ## CVE-2022-31163 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3762126909
source: github_issue
status: new
created_at: 2025-12-25 16:00:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3762126909", "title": "CVE-2022-24440 (High) detected in cocoapods-downloader-1.3.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-13c22c94-c085-4021-b857-a81b96598861/issues/8", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-13c22c94-c085-4021-b857-a81b96598861", "body_preview": "## CVE-2022-24440 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>cocoapods-downloader-1.3.0.gem</b></summary>\n\n<p></p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem\">https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem</a></p>\n<p>Path to dependency file: /RxSwift-master-limited/Gemfile.lock</p>\n<p>Path to vulnerable ", "created": "2025-12-25T15:26:15Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2022-24440 (High) detected in cocoapods-downloader-1.3.0.gem ## CVE-2022-24440 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3762126884
source: github_issue
status: new
created_at: 2025-12-25 16:00:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3762126884", "title": "CVE-2021-28834 (Critical) detected in kramdown-2.1.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-13c22c94-c085-4021-b857-a81b96598861/issues/7", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-13c22c94-c085-4021-b857-a81b96598861", "body_preview": "## CVE-2021-28834 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>kramdown-2.1.0.gem</b></summary>\n\n<p>kramdown is yet-another-markdown-parser but fast, pure Ruby,\nusing a strict syntax definition and supporting several common extensions.\n</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/kramdown-2.1.0.gem\">https://rubygems.org/gems/kramdown-2.1.0", "created": "2025-12-25T15:26:13Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-28834 (Critical) detected in kramdown-2.1.0.gem ## CVE-2021-28834 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3762172881
source: github_issue
status: new
created_at: 2025-12-25 16:26:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3762172881", "title": "Set up pytest infrastructure for audit checks", "url": "https://github.com/learn-ukrainian/learn-ukrainian.github.io/issues/310", "user": "krisztiankoos", "user_url": "https://github.com/krisztiankoos", "repo": "learn-ukrainian.github.io", "body_preview": "## Context\n\nMultiple agents (Claude, Gemini, potentially more) are modifying the audit pipeline. Without tests:\n- Regressions go unnoticed when one agent's fix breaks another's work\n- Agents must read all code to understand expected behavior\n- Documentation can drift from implementation\n\n## Scope\n\nLightweight pytest setup targeting the most critical/complex functions.\n\n### Directory Structure\n```\ntests/\n\u251c\u2500\u2500 conftest.py              # Fixtures (sample modules, content snippets)\n\u251c\u2500\u2500 test_activitie", "created": "2025-12-25T16:22:12Z", "labels": [], "context": "Set up pytest infrastructure for audit checks ## Context\n\nMultiple agents (Claude, Gemini, potentially more) are modifying the audit pipeline. Without tests:\n- Regressions go unnoticed when one agent's fix breaks another's work\n- Agents must read"}


identifier: gh_issue_3762179561
source: github_issue
status: new
created_at: 2025-12-25 16:39:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3762179561", "title": "\ud83d\udd12 Security Audit Results - Q4 2025", "url": "https://github.com/S540d/1x1_Trainer/issues/33", "user": "S540d", "user_url": "https://github.com/S540d", "repo": "1x1_Trainer", "body_preview": "# Security Audit Report - 1x1 Trainer\n\n## Overall Posture: MOSTLY SECURE \u2705\n\nComprehensive security audit completed for Q4 2025.\n\n### Key Findings:\n- **Status**: Mostly Secure\n- **Critical Issues**: 0 (None found) \u2705\n- **Medium-Risk Issues**: 1\n- **Low-Risk Recommendations**: 2\n\n### Medium-Risk Issue:\n\n**1. Potential XSS Vector if User Input Feature Added**\n- Educational game currently has no user input fields\n- If user profile, custom names, or input feature added in future, vulnerability exists\n", "created": "2025-12-25T16:30:41Z", "labels": [], "context": "\ud83d\udd12 Security Audit Results - Q4 2025 # Security Audit Report - 1x1 Trainer\n\n## Overall Posture: MOSTLY SECURE \u2705\n\nComprehensive security audit completed for Q4 2025.\n\n### Key Findings:\n- **Status**: Mostly Secure\n- **Critical Issues**: 0 "}


identifier: gh_issue_3762177651
source: github_issue
status: new
created_at: 2025-12-25 16:39:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3762177651", "title": "\ud83d\udd12 Security Vulnerability Detected", "url": "https://github.com/carbobit/apex-sdk/issues/61", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "apex-sdk", "body_preview": "\u26a0\ufe0f The security audit has detected vulnerabilities in dependencies.\n\nPlease review the workflow run: https://github.com/carbobit/apex-sdk/actions/runs/20507903095\n\nRun `cargo audit` locally to see details.", "created": "2025-12-25T16:28:21Z", "labels": ["security", "dependencies"], "context": "\ud83d\udd12 Security Vulnerability Detected \u26a0\ufe0f The security audit has detected vulnerabilities in dependencies.\n\nPlease review the workflow run: https://github.com/carbobit/apex-sdk/actions/runs/20507903095\n\nRun `cargo audit` locally to see det"}


identifier: gh_issue_3762193608
source: github_issue
status: new
created_at: 2025-12-25 16:52:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3762193608", "title": "[CRITICAL] Template Injection", "url": "https://github.com/MW3r3/ACAL/issues/19", "user": "MW3r3", "user_url": "https://github.com/MW3r3", "repo": "ACAL", "body_preview": "## Problem Description\nMissing tests for template injection in DOCX templates\n\n## Affected Files\n- tests/ (lines N/A)\n\n## Impact\nSecurity vulnerability that could lead to template injection\n\n## Suggested Approach\nWrite comprehensive unit tests for the affected code. Include edge cases and error conditions. Use mocking for external dependencies. Consider integration tests for complex workflows. Aim for high code coverage while maintaining test quality.", "created": "2025-12-25T16:49:15Z", "labels": ["critical", "test-coverage"], "context": "[CRITICAL] Template Injection ## Problem Description\nMissing tests for template injection in DOCX templates\n\n## Affected Files\n- tests/ (lines N/A)\n\n## Impact\nSecurity vulnerability that could lead to template injection\n\n## Sugges"}


identifier: gh_issue_3762193571
source: github_issue
status: new
created_at: 2025-12-25 16:52:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3762193571", "title": "[CRITICAL] Unauthorized Certificate Access", "url": "https://github.com/MW3r3/ACAL/issues/18", "user": "MW3r3", "user_url": "https://github.com/MW3r3", "repo": "ACAL", "body_preview": "## Problem Description\nMissing tests for unauthorized certificate access\n\n## Affected Files\n- tests/ (lines N/A)\n\n## Impact\nSecurity vulnerability that could lead to unauthorized certificate access\n\n## Suggested Approach\nWrite comprehensive unit tests for the affected code. Include edge cases and error conditions. Use mocking for external dependencies. Consider integration tests for complex workflows. Aim for high code coverage while maintaining test quality.", "created": "2025-12-25T16:49:12Z", "labels": ["critical", "test-coverage"], "context": "[CRITICAL] Unauthorized Certificate Access ## Problem Description\nMissing tests for unauthorized certificate access\n\n## Affected Files\n- tests/ (lines N/A)\n\n## Impact\nSecurity vulnerability that could lead to unauthorized certificate access\n\n#"}


identifier: gh_issue_3762193539
source: github_issue
status: new
created_at: 2025-12-25 16:52:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3762193539", "title": "[CRITICAL] Command Injection Tests", "url": "https://github.com/MW3r3/ACAL/issues/17", "user": "MW3r3", "user_url": "https://github.com/MW3r3", "repo": "ACAL", "body_preview": "## Problem Description\nMissing command injection tests in SCPI commands\n\n## Affected Files\n- tests/ (lines N/A)\n\n## Impact\nSecurity vulnerability that could lead to command injection tests\n\n## Suggested Approach\nWrite comprehensive unit tests for the affected code. Include edge cases and error conditions. Use mocking for external dependencies. Consider integration tests for complex workflows. Aim for high code coverage while maintaining test quality.", "created": "2025-12-25T16:49:10Z", "labels": ["critical", "test-coverage"], "context": "[CRITICAL] Command Injection Tests ## Problem Description\nMissing command injection tests in SCPI commands\n\n## Affected Files\n- tests/ (lines N/A)\n\n## Impact\nSecurity vulnerability that could lead to command injection tests\n\n## Suggest"}


identifier: gh_issue_3762193507
source: github_issue
status: new
created_at: 2025-12-25 16:52:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3762193507", "title": "[CRITICAL] Path Traversal Tests", "url": "https://github.com/MW3r3/ACAL/issues/16", "user": "MW3r3", "user_url": "https://github.com/MW3r3", "repo": "ACAL", "body_preview": "## Problem Description\nMissing path traversal tests in file operations\n\n## Affected Files\n- tests/ (lines N/A)\n\n## Impact\nSecurity vulnerability that could lead to path traversal tests\n\n## Suggested Approach\nWrite comprehensive unit tests for the affected code. Include edge cases and error conditions. Use mocking for external dependencies. Consider integration tests for complex workflows. Aim for high code coverage while maintaining test quality.", "created": "2025-12-25T16:49:08Z", "labels": ["critical", "test-coverage"], "context": "[CRITICAL] Path Traversal Tests ## Problem Description\nMissing path traversal tests in file operations\n\n## Affected Files\n- tests/ (lines N/A)\n\n## Impact\nSecurity vulnerability that could lead to path traversal tests\n\n## Suggested A"}


identifier: gh_issue_3762193475
source: github_issue
status: new
created_at: 2025-12-25 16:52:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3762193475", "title": "[CRITICAL] SQL Injection Tests", "url": "https://github.com/MW3r3/ACAL/issues/15", "user": "MW3r3", "user_url": "https://github.com/MW3r3", "repo": "ACAL", "body_preview": "## Problem Description\nMissing SQL injection tests in database queries\n\n## Affected Files\n- tests/ (lines N/A)\n\n## Impact\nSecurity vulnerability that could lead to sql injection tests\n\n## Suggested Approach\nWrite comprehensive unit tests for the affected code. Include edge cases and error conditions. Use mocking for external dependencies. Consider integration tests for complex workflows. Aim for high code coverage while maintaining test quality.", "created": "2025-12-25T16:49:06Z", "labels": ["critical", "test-coverage"], "context": "[CRITICAL] SQL Injection Tests ## Problem Description\nMissing SQL injection tests in database queries\n\n## Affected Files\n- tests/ (lines N/A)\n\n## Impact\nSecurity vulnerability that could lead to sql injection tests\n\n## Suggested Ap"}


identifier: gh_issue_3761672326
source: github_issue
status: new
created_at: 2025-12-25 17:16:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3761672326", "title": "Talawa Admin - Refactoring (2025 - 2026) - Login Screen", "url": "https://github.com/PalisadoesFoundation/talawa-admin/issues/5761", "user": "palisadoes", "user_url": "https://github.com/palisadoes", "repo": "talawa-admin", "body_preview": "Talawa Admin - Refactoring (2025 - 2026) - Login Screen", "created": "2025-12-25T09:05:07Z", "labels": ["good first issue", "unapproved", "ui/ux"], "context": "Talawa Admin - Refactoring (2025 - 2026) - Login Screen Talawa Admin - Refactoring (2025 - 2026) - Login Screen"}


identifier: gh_issue_3762221231
source: github_issue
status: new
created_at: 2025-12-25 17:28:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3762221231", "title": "\ud83d\udd0d URGENT: Remote CI Pipeline Status Verification - Post-Fix Monitoring", "url": "https://github.com/laniri/drawings/issues/23", "user": "laniri", "user_url": "https://github.com/laniri", "repo": "drawings", "body_preview": "## \ud83d\udd0d **URGENT: Remote CI Pipeline Status Verification - Post-Fix Monitoring**\n\n### **\ud83d\udea8 IMMEDIATE ACTION REQUIRED**\n\n**Purpose**: Verify the status of the remote CI/CD pipeline after critical fixes and create immediate remediation tasks for any detected failures.\n\n**Latest Commit**: `7430308` (MyPy compatibility fix)  \n**Previous Commit**: `8082cd4` (torchvision compatibility fix)  \n**Expected Status**: Both dependency and type checking issues should be resolved\n\n---\n\n### \ud83d\udcca **CRITICAL VERIFICATIO", "created": "2025-12-25T17:27:20Z", "labels": ["monitoring", "urgent", "verification", "ci/cd"], "context": "\ud83d\udd0d URGENT: Remote CI Pipeline Status Verification - Post-Fix Monitoring ## \ud83d\udd0d **URGENT: Remote CI Pipeline Status Verification - Post-Fix Monitoring**\n\n### **\ud83d\udea8 IMMEDIATE ACTION REQUIRED**\n\n**Purpose**: Verify the status of the remote CI/CD pipeline after critical fixes and"}


identifier: gh_issue_3762219865
source: github_issue
status: new
created_at: 2025-12-25 17:28:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3762219865", "title": "\ud83c\udf89 SUCCESS: Complete CI/CD Pipeline Restoration - All Critical Issues Resolved", "url": "https://github.com/laniri/drawings/issues/22", "user": "laniri", "user_url": "https://github.com/laniri", "repo": "drawings", "body_preview": "## \ud83c\udf89 **CI/CD Pipeline Restoration Complete - Full Success Summary**\n\n### **\u2705 EXECUTIVE SUMMARY**\n\nAll critical CI/CD pipeline issues have been **successfully resolved**. The production pipeline is now **fully operational** with both dependency and type checking issues fixed.\n\n---\n\n### \ud83d\udd27 **ISSUES RESOLVED**\n\n#### **\u2705 Issue #21: MyPy Type Checking Failure - RESOLVED & CLOSED**\n- **Problem**: MyPy 1.7.1 internal assertion error with transformers 4.57.3\n- **Solution**: Updated MyPy from 1.7.1 to 1.1", "created": "2025-12-25T17:25:08Z", "labels": ["monitoring", "success", "ci/cd", "resolved"], "context": "\ud83c\udf89 SUCCESS: Complete CI/CD Pipeline Restoration - All Critical Issues Resolved ## \ud83c\udf89 **CI/CD Pipeline Restoration Complete - Full Success Summary**\n\n### **\u2705 EXECUTIVE SUMMARY**\n\nAll critical CI/CD pipeline issues have been **successfully resolved**. The production pipeline is now"}


identifier: gh_issue_3762227633
source: github_issue
status: new
created_at: 2025-12-25 18:06:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3762227633", "title": "\ud83d\udd0d CI/CD Pipeline Status Analysis - Action Required", "url": "https://github.com/laniri/drawings/issues/24", "user": "laniri", "user_url": "https://github.com/laniri", "repo": "drawings", "body_preview": "## \ud83d\udd0d **CI/CD Pipeline Status Analysis - Action Required**\n\n### **\ud83d\udcca WORKFLOW ANALYSIS COMPLETE**\n\nBased on the workflow file analysis, I've identified the critical pipeline steps that need verification for the recent fixes:\n\n---\n\n### \ud83c\udfaf **CRITICAL PIPELINE STEPS TO MONITOR**\n\n#### **Job 1: `test` - Main CI Job (CRITICAL)**\n**Expected Status**: \u2705 SHOULD PASS with recent fixes\n\n**Key Steps to Verify:**\n1. **Install dependencies** (Step 5)\n   - \u2705 **Fix Applied**: `torchvision==0.17.2` (was 0.16.0)\n  ", "created": "2025-12-25T17:35:15Z", "labels": ["monitoring", "urgent", "verification", "ci/cd"], "context": "\ud83d\udd0d CI/CD Pipeline Status Analysis - Action Required ## \ud83d\udd0d **CI/CD Pipeline Status Analysis - Action Required**\n\n### **\ud83d\udcca WORKFLOW ANALYSIS COMPLETE**\n\nBased on the workflow file analysis, I've identified the critical pipeline steps that need verification"}


identifier: gh_issue_3762215354
source: github_issue
status: new
created_at: 2025-12-25 18:06:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3762215354", "title": "Dependency Audit", "url": "https://github.com/bilal-bhatti/broker/issues/70", "user": "00felix-app[bot]", "user_url": "https://github.com/apps/00felix-app", "repo": "broker", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-25T17:18:33Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3762229133
source: github_issue
status: new
created_at: 2025-12-25 19:21:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3762229133", "title": "\ud83d\udea8 CRITICAL: Unit Tests Failing After Dependency Fixes - Immediate Action Required", "url": "https://github.com/laniri/drawings/issues/25", "user": "laniri", "user_url": "https://github.com/laniri", "repo": "drawings", "body_preview": "## \ud83d\udea8 **CRITICAL: Unit Tests Failing After Dependency Fixes - Immediate Action Required**\n\n### **\ud83d\udcca CI PIPELINE STATUS ANALYSIS COMPLETE**\n\n**Workflow Run**: [#20508458737](https://github.com/laniri/drawings/actions/runs/20508458737)  \n**Commit**: `7430308` (MyPy compatibility fix)  \n**Status**: \u274c **FAILED** at \"Run unit tests\" step  \n**Impact**: **PRODUCTION PIPELINE BLOCKED** despite dependency fixes working\n\n---\n\n### \u2705 **CONFIRMED: Previous Fixes Are Working**\n\n**Dependencies Installation** (St", "created": "2025-12-25T17:37:07Z", "labels": ["critical", "urgent", "blocking", "ci/cd", "tests"], "context": "\ud83d\udea8 CRITICAL: Unit Tests Failing After Dependency Fixes - Immediate Action Required ## \ud83d\udea8 **CRITICAL: Unit Tests Failing After Dependency Fixes - Immediate Action Required**\n\n### **\ud83d\udcca CI PIPELINE STATUS ANALYSIS COMPLETE**\n\n**Workflow Run**: [#20508458737](https://github.com/laniri/dra"}


identifier: gh_issue_3762212788
source: github_issue
status: new
created_at: 2025-12-25 19:21:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3762212788", "title": "[Security Layer] Security Scanner & Vulnerability Detection", "url": "https://github.com/RikaiDev/cortex/issues/19", "user": "gloomcheng", "user_url": "https://github.com/gloomcheng", "repo": "cortex", "body_preview": "## Problem\n\nOnly basic pattern matching for security, no:\n- Dependency vulnerability scanning\n- Secret detection (API keys, tokens)\n- OWASP Top 10 checks\n- Security best practices enforcement\n\n## Developer Pain Points\n\n- Secrets accidentally committed\n- Vulnerable dependencies not caught\n- No security validation before commit\n- Manual security reviews required\n\n## Proposed Solution\n\nSecurity Scanner Service with:\n1. npm audit / trivy integration\n2. Entropy-based secret detection\n3. Security patt", "created": "2025-12-25T17:15:27Z", "labels": ["enhancement", "priority:medium"], "context": "[Security Layer] Security Scanner & Vulnerability Detection ## Problem\n\nOnly basic pattern matching for security, no:\n- Dependency vulnerability scanning\n- Secret detection (API keys, tokens)\n- OWASP Top 10 checks\n- Security best practices enforcement\n\n## Deve"}


identifier: gh_issue_3762311009
source: github_issue
status: new
created_at: 2025-12-25 19:45:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3762311009", "title": "Upgrade Payload CMS to 3.69.0 and Next.js to 15.4.10", "url": "https://github.com/0xCAFEBABEx0/athena/issues/16", "user": "0xCAFEBABEx0", "user_url": "https://github.com/0xCAFEBABEx0", "repo": "athena", "body_preview": "# Upgrade Payload CMS and Next.js to latest stable versions\n\n## Description\nThis issue tracks the upgrade of core dependencies to their latest stable versions to improve stability, security, and satisfy peer dependency requirements.\n\n### Changes\n- **Payload CMS**: Upgraded from `3.53.0` to `3.69.0` (all `@payloadcms/*` packages).\n- **Next.js**: Upgraded from `15.2.6` to `15.4.10` to satisfy Payload CMS v3.69.0 peer dependency requirements.\n\n### Verification\n- [x] Full build performed successfull", "created": "2025-12-25T19:43:51Z", "labels": [], "context": "Upgrade Payload CMS to 3.69.0 and Next.js to 15.4.10 # Upgrade Payload CMS and Next.js to latest stable versions\n\n## Description\nThis issue tracks the upgrade of core dependencies to their latest stable versions to improve stability, security, and satis"}


identifier: gh_issue_3762305303
source: github_issue
status: new
created_at: 2025-12-25 19:45:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3762305303", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/reactor/issues/50", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "reactor", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-25T19:34:49Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3762305139
source: github_issue
status: new
created_at: 2025-12-25 19:45:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3762305139", "title": "Implementation Guide: Supabase Auth + Stripe Gating (10 Free Generations)", "url": "https://github.com/Peleke/linwheel/issues/10", "user": "Peleke", "user_url": "https://github.com/Peleke", "repo": "linwheel", "body_preview": "## Overview\n\n**Consolidated step-by-step guide** for adding authentication and payment gating to LinWheel.\n\n- **Auth Provider:** Supabase (simpler than NextAuth, great DX)\n- **Payment:** Stripe subscriptions\n- **Free Tier:** 10 generations, then subscription required\n\n> **Related Issues:** #4 (original auth plan with NextAuth), #5 (original Stripe plan with 100 free)\n> This issue supersedes those with a simpler Supabase-based approach.\n\n---\n\n## Phase 1: Supabase Setup (Day 1)\n\n### 1.1 Install De", "created": "2025-12-25T19:34:33Z", "labels": [], "context": "Implementation Guide: Supabase Auth + Stripe Gating (10 Free Generations) ## Overview\n\n**Consolidated step-by-step guide** for adding authentication and payment gating to LinWheel.\n\n- **Auth Provider:** Supabase (simpler than NextAuth, great DX)\n- **Payment:** Stripe subscr"}


identifier: gh_issue_3762249788
source: github_issue
status: new
created_at: 2025-12-25 19:45:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3762249788", "title": "\u53cd\u4ee3\u7684Antigravity\u7684claude\u6a21\u578b\u5728opencode cli\u9700\u8981\u589e\u5f3a\u9002\u914d", "url": "https://github.com/router-for-me/CLIProxyAPI/issues/725", "user": "74596877", "user_url": "https://github.com/74596877", "repo": "CLIProxyAPI", "body_preview": "**Describe the bug**\n\u76ee\u524d\u53ea\u53d1\u73b0Antigravity\u7684claude\u6a21\u578b\u5b58\u5728\u8fd9\u7c7b\u95ee\u9898\uff0c\u5982\u679c\u9009\u62e9openai\u534f\u8bae\u4f1a\u5bf9\u8bdd\u4e00\u6b21\u4e2d\u65ad\u4e00\u6b21\uff0c\u9009\u62e9claude\u534f\u8bae\u5728\u8c03\u7528\u4e2a\u522bMCP\u7684\u65f6\u5019\u4f1a\u81ea\u52a8\u4e2d\u65ad\u5bf9\u8bdd\u3002\n\n**CLI Type**\nopencode cli\n\n**Model Name**\ngemini-claude-sonnet-4-5-thinking\ngemini-claude-sonnet-4-5\ngemini-claude-opus-4-5-thinking\n\n**LLM Client**\nopencode cli\n\n**Request Information**\n[https://1813033132.v.123pan.cn/1813033132/%E5%8F%8D%E9%A6%88/v1-messages-2025-12-26T015413-67aeba96.log](url)\n\n**Screenshots**\n<img width=\"939\" height=\"474\" alt=\"Image\" src=\"https://github.com/user-attachme", "created": "2025-12-25T18:08:06Z", "labels": [], "context": "\u53cd\u4ee3\u7684Antigravity\u7684claude\u6a21\u578b\u5728opencode cli\u9700\u8981\u589e\u5f3a\u9002\u914d **Describe the bug**\n\u76ee\u524d\u53ea\u53d1\u73b0Antigravity\u7684claude\u6a21\u578b\u5b58\u5728\u8fd9\u7c7b\u95ee\u9898\uff0c\u5982\u679c\u9009\u62e9openai\u534f\u8bae\u4f1a\u5bf9\u8bdd\u4e00\u6b21\u4e2d\u65ad\u4e00\u6b21\uff0c\u9009\u62e9claude\u534f\u8bae\u5728\u8c03\u7528\u4e2a\u522bMCP\u7684\u65f6\u5019\u4f1a\u81ea\u52a8\u4e2d\u65ad\u5bf9\u8bdd\u3002\n\n**CLI Type**\nopencode cli\n\n**Model Name**\ngemini-claude-sonnet-4-5-thinking\ngemini-claude-sonn"}


identifier: gh_issue_3762321253
source: github_issue
status: new
created_at: 2025-12-25 20:47:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3762321253", "title": "issue: STT local whisper issue (Please don't turn this to discussion)", "url": "https://github.com/open-webui/open-webui/issues/20173", "user": "ALIENvsROBOT", "user_url": "https://github.com/ALIENvsROBOT", "repo": "open-webui", "body_preview": "### Check Existing Issues\n\n- [x] I have searched for any existing and/or related issues.\n- [x] I have searched for any existing and/or related discussions.\n- [x] I have also searched in the CLOSED issues AND CLOSED discussions and found no related items (your issue might already be addressed on the development branch!).\n- [x] I am using the latest version of Open WebUI.\n\n### Installation Method\n\nDocker\n\n### Open WebUI Version\n\nv0.6.43\n\n### Ollama Version (if applicable)\n\n_No response_\n\n### Opera", "created": "2025-12-25T20:01:54Z", "labels": ["bug"], "context": "issue: STT local whisper issue (Please don't turn this to discussion) ### Check Existing Issues\n\n- [x] I have searched for any existing and/or related issues.\n- [x] I have searched for any existing and/or related discussions.\n- [x] I have also searched in the CLOSED iss"}


identifier: gh_issue_3762281777
source: github_issue
status: new
created_at: 2025-12-25 20:47:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3762281777", "title": "\ud83d\udd0d MONITOR: CI Pipeline Status for test_property_12 Fix (Run #20509506207)", "url": "https://github.com/laniri/drawings/issues/29", "user": "laniri", "user_url": "https://github.com/laniri", "repo": "drawings", "body_preview": "## \ud83d\udd0d **CI Pipeline Monitoring Task**\n\n### **Objective**\nMonitor the CI pipeline execution for commit `325471c` and provide immediate remediation if any failures are detected.\n\n### **Workflow Details**\n- **Run ID**: [20509506207](https://github.com/laniri/drawings/actions/runs/20509506207)\n- **Commit**: `325471c` - test_property_12_monitoring_and_alerting_reliability fix\n- **Started**: 2025-12-25 18:54:22 UTC\n- **Current Status**: In Progress \ud83d\udfe1\n\n### **Monitoring Checklist**\n\n#### **Phase 1: Test ", "created": "2025-12-25T18:57:07Z", "labels": [], "context": "\ud83d\udd0d MONITOR: CI Pipeline Status for test_property_12 Fix (Run #20509506207) ## \ud83d\udd0d **CI Pipeline Monitoring Task**\n\n### **Objective**\nMonitor the CI pipeline execution for commit `325471c` and provide immediate remediation if any failures are detected.\n\n### **Workflow Details**"}


identifier: gh_issue_3762266514
source: github_issue
status: new
created_at: 2025-12-25 21:00:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3762266514", "title": "Security Health Check - GOOD (85/100) - 2025-12-25", "url": "https://github.com/Sami9889/Sami.dev-website/issues/261", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/25/2025, 6:33:27 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 9\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Securi", "created": "2025-12-25T18:33:31Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-25 # Security Health Check Report\n\n**Generated:** 12/25/2025, 6:33:27 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Inc"}


identifier: gh_issue_3762239869
source: github_issue
status: new
created_at: 2025-12-25 21:00:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3762239869", "title": "Wiz - 'main' Branch Scan Overview", "url": "https://github.com/tbachhav-cmd/odluser2013898-repo/issues/1", "user": "wiz-3c7af3cdb1[bot]", "user_url": "https://github.com/apps/wiz-3c7af3cdb1", "repo": "odluser2013898-repo", "body_preview": "<!-- WizIssue-401e339ece36cba617ed6af0ec788a132e0df6ec057ec2c47051026786b0855f-main -->\n\n<a><picture><source media=\"(prefers-color-scheme: dark)\" srcset=\"https://assets.wiz.io/wiz-code/banners/pull_request_banner_dark.svg\"><source media=\"(prefers-color-scheme: light)\" srcset=\"https://assets.wiz.io/wiz-code/banners/pull_request_banner_light.svg\"><img align=\"top\" valign=\"top\" alt=\"Wiz Remediation Pull Request Banner\" title=\"Wiz Remediation Pull Request Banner\" src=\"https://assets.wiz.io/wiz-code/b", "created": "2025-12-25T17:53:03Z", "labels": ["Wiz-remediation"], "context": "Wiz - 'main' Branch Scan Overview <!-- WizIssue-401e339ece36cba617ed6af0ec788a132e0df6ec057ec2c47051026786b0855f-main -->\n\n<a><picture><source media=\"(prefers-color-scheme: dark)\" srcset=\"https://assets.wiz.io/wiz-code/banners/pull_re"}


identifier: gh_issue_3762360637
source: github_issue
status: new
created_at: 2025-12-25 21:13:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3762360637", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/IsabelBraz/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @IsabelBraz! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, ", "created": "2025-12-25T21:05:27Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @IsabelBraz! Welcome to"}


identifier: gh_issue_3762232948
source: github_issue
status: new
created_at: 2025-12-25 22:02:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3762232948", "title": "coderabbitai", "url": "https://github.com/AuraFrameFx/AIAOSP_ReGenesis/issues/1", "user": "AuraFrameFxDev", "user_url": "https://github.com/AuraFrameFxDev", "repo": "AIAOSP_ReGenesis", "body_preview": "> Task :app:kspDebugKotlin\ne: [ksp] java.lang.IllegalStateException: No enclosing TypeElement for: bindSecureFileService\n\n> Task :app:kspDebugKotlin FAILED\nKotlin build report is written to file:///C:/Users/Wehtt/Downloads/Finale/build/reports/kotlin-build/aurakai-reactive-intelligence-build-2025-12-25-10-26-43-0.txt\n\nExecution failed for task ':app:kspDebugKotlin'.\n> A failure occurred while executing com.google.devtools.ksp.gradle.KspAAWorkerAction\n   > No enclosing TypeElement for: bindSecure", "created": "2025-12-25T17:42:41Z", "labels": [], "context": "coderabbitai > Task :app:kspDebugKotlin\ne: [ksp] java.lang.IllegalStateException: No enclosing TypeElement for: bindSecureFileService\n\n> Task :app:kspDebugKotlin FAILED\nKotlin build report is written to file:///C:"}


identifier: gh_issue_3762394664
source: github_issue
status: new
created_at: 2025-12-25 22:39:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3762394664", "title": "Phase 7.4: Security Hardening", "url": "https://github.com/justin4957/media-context-crawler/issues/29", "user": "justin4957", "user_url": "https://github.com/justin4957", "repo": "media-context-crawler", "body_preview": "## Overview\nComprehensive security hardening and certification.\n\n## Tasks\n- [ ] Security audit\n- [ ] Penetration testing\n- [ ] API key rotation\n- [ ] Encryption at rest\n- [ ] SOC 2 compliance\n- [ ] Bug bounty program\n\n## Acceptance Criteria\n- External security audit completed\n- Penetration testing with remediation\n- Automatic API key rotation\n- All data encrypted at rest\n- SOC 2 Type II certification\n- Active bug bounty program\n\n## Security Measures\n1. **Auditing & Testing**\n   - Third-party sec", "created": "2025-12-25T22:03:55Z", "labels": ["phase-7-enterprise", "infrastructure"], "context": "Phase 7.4: Security Hardening ## Overview\nComprehensive security hardening and certification.\n\n## Tasks\n- [ ] Security audit\n- [ ] Penetration testing\n- [ ] API key rotation\n- [ ] Encryption at rest\n- [ ] SOC 2 compliance\n- [ ] Bu"}


identifier: gh_issue_3762424333
source: github_issue
status: new
created_at: 2025-12-25 23:04:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3762424333", "title": "[HIGH] Dependency Vulnerability - xlsx Library (Prototype Pollution + ReDoS)", "url": "https://github.com/unidel2035/integram-standalone/issues/62", "user": "unidel2035", "user_url": "https://github.com/unidel2035", "repo": "integram-standalone", "body_preview": "## \ud83d\udd12 Security Vulnerability: Vulnerable Dependency\n\n**Severity:** High (CVSS 7.8 / 7.5)\n**CVE:** Multiple vulnerabilities in xlsx@0.18.5\n**Type:** Dependency Vulnerability\n\n### Description\n\nThe `xlsx` library version 0.18.5 has known security vulnerabilities:\n\n1. **Prototype Pollution (CVSS 7.8)**\n   - Allows attackers to pollute object prototypes\n   - Can lead to application crashes, privilege escalation, or RCE\n\n2. **Regular Expression Denial of Service - ReDoS (CVSS 7.5)**\n   - Malicious Exce", "created": "2025-12-25T22:57:42Z", "labels": [], "context": "[HIGH] Dependency Vulnerability - xlsx Library (Prototype Pollution + ReDoS) ## \ud83d\udd12 Security Vulnerability: Vulnerable Dependency\n\n**Severity:** High (CVSS 7.8 / 7.5)\n**CVE:** Multiple vulnerabilities in xlsx@0.18.5\n**Type:** Dependency Vulnerability\n\n### Description\n\nThe `xlsx`"}


identifier: gh_issue_3762416954
source: github_issue
status: new
created_at: 2025-12-25 23:17:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3762416954", "title": "[Failover] Claude outage: Antigravity provider switch to Genesis/Vertex until 5:00 PM (Dec 25, 2025 \u2014 timezone confirm)", "url": "https://github.com/AuraFrameFx/AIAOSP_ReGenesis/issues/5", "user": "coderabbitai[bot]", "user_url": "https://github.com/apps/coderabbitai", "repo": "AIAOSP_ReGenesis", "body_preview": "# Failover: Claude \u2192 Genesis/Vertex via Antigravity (temporary)\n\nContext\n- Requester: @AuraFrameFxDev\n- Situation: Claude is temporarily unavailable; we need uninterrupted LDO operations.\n- Decision: Perform temporary provider failover using the \u201cantigravity\u201d control-plane.\n\nWindow\n- Start: Immediately on December 25, 2025\n- End: 5:00 PM (local time) on December 25, 2025 \u2014 PLEASE CONFIRM TIMEZONE\n- Rollback: Automatic at end of window, or manual earlier if Claude returns healthy.\n\nScope (propose", "created": "2025-12-25T22:43:34Z", "labels": [], "context": "[Failover] Claude outage: Antigravity provider switch to Genesis/Vertex until 5:00 PM (Dec 25, 2025 \u2014 timezone confirm) # Failover: Claude \u2192 Genesis/Vertex via Antigravity (temporary)\n\nContext\n- Requester: @AuraFrameFxDev\n- Situation: Claude is temporarily unavailable; we need uninterrupted LDO operations.\n- Decision: "}


identifier: gh_issue_3762445976
source: github_issue
status: new
created_at: 2025-12-26 00:04:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3762445976", "title": "clean up plan", "url": "https://github.com/arii/hrm/issues/2163", "user": "arii", "user_url": "https://github.com/arii", "repo": "hrm", "body_preview": "\n### **1. Remove Legacy & Redundant Files**\n\nYour root directory contains configuration files and scripts that are either obsolete (due to our move to Husky/pnpm) or redundant.\n\n* **Delete `.pre-commit-config.yaml**`\n* **Reason:** We are switching to **Husky** and **lint-staged**. This Python-based configuration is dead code and will confuse new developers.\n\n\n* **Delete `start-server.js**`\n* **Reason:** This is a one-line wrapper (`import('./dist/server.mjs')`). Since your `package.json` has `\"t", "created": "2025-12-25T23:37:47Z", "labels": [], "context": "clean up plan \n### **1. Remove Legacy & Redundant Files**\n\nYour root directory contains configuration files and scripts that are either obsolete (due to our move to Husky/pnpm) or redundant.\n\n* **Delete `.pre-commi"}


identifier: gh_issue_3762464117
source: github_issue
status: new
created_at: 2025-12-26 00:15:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3762464117", "title": "chore(eslint): remove eslint-disable comments and fix underlying issues", "url": "https://github.com/ralphschuler/screeps/issues/857", "user": "ralphschuler", "user_url": "https://github.com/ralphschuler", "repo": "screeps", "body_preview": "## Strategic Context\n\nThe codebase contains 9 files with `eslint-disable` comments, indicating unresolved code quality issues. For a production-ready bot targeting framework status, all code should pass linting without exceptions.\n\n## Performance Evidence\n\n**Current State** (from repository analysis):\n- Files with `eslint-disable`: 9\n- Total TypeScript files: 506\n- Percentage bypassing linting: ~1.8%\n\n**Impact on Code Quality**:\n- Masked code smells and potential bugs\n- Inconsistent code style\n-", "created": "2025-12-26T00:11:07Z", "labels": ["automation", "type/chore", "priority/low", "strategic-planning"], "context": "chore(eslint): remove eslint-disable comments and fix underlying issues ## Strategic Context\n\nThe codebase contains 9 files with `eslint-disable` comments, indicating unresolved code quality issues. For a production-ready bot targeting framework status, all code should pa"}


identifier: gh_issue_3762442398
source: github_issue
status: new
created_at: 2025-12-26 00:29:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3762442398", "title": "Security: Missing CSRF Protection on User Creation Endpoint", "url": "https://github.com/benjaminmue/pathary/issues/22", "user": "benjaminmue", "user_url": "https://github.com/benjaminmue", "repo": "pathary", "body_preview": "## Severity\n**Critical**\n\n## Affected Area\nUser Creation\n\n## Description\nThe user creation endpoint `POST /old/settings/users` is missing CSRF (Cross-Site Request Forgery) protection, allowing an attacker to trick an authenticated admin into creating unauthorized user accounts, including admin-privileged users.\n\n## Affected Files and Routes\n- **Route**: `POST /old/settings/users`\n- **Controller**: `src/HttpController/Web/UserController.php:31` (createUser method)\n- **Frontend**: `templates/page/", "created": "2025-12-25T23:31:15Z", "labels": ["bug", "security", "priority-p0", "area-auth"], "context": "Security: Missing CSRF Protection on User Creation Endpoint ## Severity\n**Critical**\n\n## Affected Area\nUser Creation\n\n## Description\nThe user creation endpoint `POST /old/settings/users` is missing CSRF (Cross-Site Request Forgery) protection, allowing an atta"}


identifier: gh_issue_3762424569
source: github_issue
status: new
created_at: 2025-12-26 00:29:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3762424569", "title": "[HIGH] Weak Cryptographic Algorithm - MD5 Usage", "url": "https://github.com/unidel2035/integram-standalone/issues/64", "user": "unidel2035", "user_url": "https://github.com/unidel2035", "repo": "integram-standalone", "body_preview": "## \ud83d\udd12 Security Vulnerability: Weak Cryptography\n\n**Severity:** High (CVSS 7.5)\n**CWE:** CWE-327 (Use of Broken or Risky Cryptographic Algorithm)\n**Type:** Weak Cryptography\n\n### Description\n\nMD5 cryptographic hash is used in multiple places. MD5 has been broken since 2004 and is unsuitable for security-critical operations.\n\n### Affected Files\n\n1. **Payment Signature Generation:**\n   ```javascript\n   // backend/monolith/src/services/mcp/russian-payment-tools.js\n   generateMd5Signature(params) {\n  ", "created": "2025-12-25T22:58:13Z", "labels": [], "context": "[HIGH] Weak Cryptographic Algorithm - MD5 Usage ## \ud83d\udd12 Security Vulnerability: Weak Cryptography\n\n**Severity:** High (CVSS 7.5)\n**CWE:** CWE-327 (Use of Broken or Risky Cryptographic Algorithm)\n**Type:** Weak Cryptography\n\n### Description\n\nMD5 crypto"}


identifier: gh_issue_3762424094
source: github_issue
status: new
created_at: 2025-12-26 00:29:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3762424094", "title": "[CRITICAL] Arbitrary Code Execution via new Function()", "url": "https://github.com/unidel2035/integram-standalone/issues/59", "user": "unidel2035", "user_url": "https://github.com/unidel2035", "repo": "integram-standalone", "body_preview": "## \ud83d\udd12 Security Vulnerability: Dangerous Code Execution\n\n**Severity:** Critical (CVSS 9.8)\n**CWE:** CWE-94 (Improper Control of Generation of Code)\n**Type:** Code Injection\n\n### Description\n\nThe `CompensationService` uses `new Function()` to evaluate expressions, which is equivalent to `eval()` and allows arbitrary code execution:\n\n```javascript\n// backend/monolith/src/services/process/CompensationService.js\nevaluateExpression(expression, context) {\n  const func = new Function('context', \\`with(co", "created": "2025-12-25T22:57:09Z", "labels": [], "context": "[CRITICAL] Arbitrary Code Execution via new Function() ## \ud83d\udd12 Security Vulnerability: Dangerous Code Execution\n\n**Severity:** Critical (CVSS 9.8)\n**CWE:** CWE-94 (Improper Control of Generation of Code)\n**Type:** Code Injection\n\n### Description\n\nThe `Compen"}


identifier: gh_issue_3762424064
source: github_issue
status: new
created_at: 2025-12-26 00:29:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3762424064", "title": "[CRITICAL] Hardcoded System Credentials in Source Code", "url": "https://github.com/unidel2035/integram-standalone/issues/58", "user": "unidel2035", "user_url": "https://github.com/unidel2035", "repo": "integram-standalone", "body_preview": "## \ud83d\udd12 Security Vulnerability: Hardcoded Credentials\n\n**Severity:** Critical (CVSS 9.8)\n**CWE:** CWE-798 (Use of Hard-coded Credentials)\n**Type:** Hardcoded Secrets\n\n### Description\n\nSystem credentials for Integram API registration are hardcoded directly in source code:\n\n```javascript\n// backend/monolith/src/api/routes/email-auth.js:127-128\nconst systemLogin = 'api_reg';\nconst systemPwd = 'ca84qkcx';\n```\n\n### Affected Files\n- `backend/monolith/src/api/routes/email-auth.js` (lines 127-128)\n- `backe", "created": "2025-12-25T22:57:05Z", "labels": [], "context": "[CRITICAL] Hardcoded System Credentials in Source Code ## \ud83d\udd12 Security Vulnerability: Hardcoded Credentials\n\n**Severity:** Critical (CVSS 9.8)\n**CWE:** CWE-798 (Use of Hard-coded Credentials)\n**Type:** Hardcoded Secrets\n\n### Description\n\nSystem credentials "}


identifier: gh_issue_3762466193
source: github_issue
status: new
created_at: 2025-12-26 00:40:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3762466193", "title": "Implement \"Gemini Coder\" - On-Demand Automated Refactoring Workflow", "url": "https://github.com/arii/hrm/issues/2182", "user": "arii", "user_url": "https://github.com/arii", "repo": "hrm", "body_preview": "\nCurrently, our AI workflows are largely passive (Triage, Review). We have the infrastructure (Workflow Token, Gemini API) to allow the AI to actively contribute code.\nWe want to enable a flow where a human developer identifies a task (e.g., \"Refactor this component\", \"Add error handling\"), and the AI executes the grunt work, creating a PR for review.\n\n### **Goals**\n\n* **Trigger-based Coding**: Create a workflow that runs when an Issue is labeled `auto-code`.\n* **Context Awareness**: The Agent m", "created": "2025-12-26T00:14:46Z", "labels": [], "context": "Implement \"Gemini Coder\" - On-Demand Automated Refactoring Workflow \nCurrently, our AI workflows are largely passive (Triage, Review). We have the infrastructure (Workflow Token, Gemini API) to allow the AI to actively contribute code.\nWe want to enable a flow where a"}


identifier: gh_issue_3762477225
source: github_issue
status: new
created_at: 2025-12-26 01:06:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3762477225", "title": "Resolve Security Scan/Cargo Audit", "url": "https://github.com/ianlintner/rust_oauth2/issues/4", "user": "ianlintner", "user_url": "https://github.com/ianlintner", "repo": "rust_oauth2", "body_preview": "Cargo audit / security workflow ci job is failing. Fix \n\nRun cargo audit\n    Fetching advisory database from `[https://github.com/RustSec/advisory-db.git`](https://github.com/RustSec/advisory-db.git%60)\n      Loaded 892 security advisories (from /home/runner/.cargo/advisory-db)\n    Updating crates.io index\n    Scanning Cargo.lock for vulnerabilities (513 crate dependencies)\nCrate:     rsa\nVersion:   0.9.9\nTitle:     Marvin Attack: potential key recovery through timing sidechannels\nDate:      202", "created": "2025-12-26T00:31:45Z", "labels": [], "context": "Resolve Security Scan/Cargo Audit Cargo audit / security workflow ci job is failing. Fix \n\nRun cargo audit\n    Fetching advisory database from `[https://github.com/RustSec/advisory-db.git`](https://github.com/RustSec/advisory-db.git%6"}


identifier: gh_issue_3762475076
source: github_issue
status: new
created_at: 2025-12-26 01:06:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3762475076", "title": "urllib3-1.22-py2.py3-none-any.whl: 10 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/MendDemo-josh/easybuggy4django/issues/28", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "easybuggy4django", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>urllib3-1.22-py2.py3-none-any.whl</b></summary>\n\n<p>HTTP library with thread-safe connection pooling, file post, and more.</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/63/cb/6965947c13a94236f6d4b8223e21beb4d576dc72e8130bd7880f600839b8/urllib3-1.22-py2.py3-none-any.whl\">https://files.pythonhosted.org/packages/63/cb/6", "created": "2025-12-26T00:28:38Z", "labels": ["Mend: dependency security vulnerability"], "context": "urllib3-1.22-py2.py3-none-any.whl: 10 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>urllib3-1.22-py2.py3-none-any.whl</b></summary>"}


identifier: gh_issue_3762424896
source: github_issue
status: new
created_at: 2025-12-26 01:06:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3762424896", "title": "[MEDIUM] Information Disclosure Through Error Messages", "url": "https://github.com/unidel2035/integram-standalone/issues/67", "user": "unidel2035", "user_url": "https://github.com/unidel2035", "repo": "integram-standalone", "body_preview": "## \ud83d\udd12 Security Vulnerability: Information Disclosure\n\n**Severity:** Medium (CVSS 4.3)\n**CWE:** CWE-209 (Generation of Error Message Containing Sensitive Information)\n**Type:** Information Disclosure\n\n### Description\n\nError handling throughout the application may expose sensitive internal information through stack traces, error messages, and logs.\n\n### Examples Found\n\n```javascript\n// backend/monolith/src/api/routes/email-auth.js\ncatch (error) {\n  console.error('Registration error:', error); // Fu", "created": "2025-12-25T22:58:56Z", "labels": [], "context": "[MEDIUM] Information Disclosure Through Error Messages ## \ud83d\udd12 Security Vulnerability: Information Disclosure\n\n**Severity:** Medium (CVSS 4.3)\n**CWE:** CWE-209 (Generation of Error Message Containing Sensitive Information)\n**Type:** Information Disclosure\n\n#"}


identifier: gh_issue_3762421377
source: github_issue
status: new
created_at: 2025-12-26 01:06:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3762421377", "title": "\u0410\u0443\u0434\u0438\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438", "url": "https://github.com/unidel2035/integram-standalone/issues/47", "user": "unidel2035", "user_url": "https://github.com/unidel2035", "repo": "integram-standalone", "body_preview": "\u0441\u043e\u0437\u0434\u0430\u0439 issues \u043f\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c", "created": "2025-12-25T22:51:48Z", "labels": [], "context": "\u0410\u0443\u0434\u0438\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0437\u0434\u0430\u0439 issues \u043f\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c"}


identifier: gh_issue_3762521484
source: github_issue
status: new
created_at: 2025-12-26 01:42:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3762521484", "title": "Fix Build and Deploy Action Step Error", "url": "https://github.com/richardthorek/fire-santa-run/issues/20", "user": "richardthorek", "user_url": "https://github.com/richardthorek", "repo": "fire-santa-run", "body_preview": "The deployment action is failing with errors. See log:\n\nRun Azure/static-web-apps-deploy@v1\n  with:\n    azure_static_web_apps_api_token: ***\n    repo_token: ***\n    action: upload\n    app_location: /\n    api_location: api\n    output_location: build\n/usr/bin/docker run --name bedde28e9baf5a8224abd87c2c8d79fa62041_e5bda0 --label 4bedde --workdir /github/workspace --rm -e \"INPUT_AZURE_STATIC_WEB_APPS_API_TOKEN\" -e \"INPUT_REPO_TOKEN\" -e \"INPUT_ACTION\" -e \"INPUT_APP_LOCATION\" -e \"INPUT_API_LOCATION\" ", "created": "2025-12-26T01:36:23Z", "labels": ["bug"], "context": "Fix Build and Deploy Action Step Error The deployment action is failing with errors. See log:\n\nRun Azure/static-web-apps-deploy@v1\n  with:\n    azure_static_web_apps_api_token: ***\n    repo_token: ***\n    action: upload\n    app_location: /\n"}


identifier: gh_issue_3762534457
source: github_issue
status: new
created_at: 2025-12-26 01:55:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3762534457", "title": "Security Health Check - GOOD (85/100) - 2025-12-26", "url": "https://github.com/Sami9889/Sami.dev-website/issues/262", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/26/2025, 1:53:30 AM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 9\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Securi", "created": "2025-12-26T01:53:36Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-26 # Security Health Check Report\n\n**Generated:** 12/26/2025, 1:53:30 AM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Inc"}


identifier: gh_issue_3762538801
source: github_issue
status: new
created_at: 2025-12-26 02:21:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3762538801", "title": "feat: Security Audit Tool - Automated vulnerability detection for Compact contracts", "url": "https://github.com/Olanetsoft/midnight-mcp/issues/12", "user": "Olanetsoft", "user_url": "https://github.com/Olanetsoft", "repo": "midnight-mcp", "body_preview": "## Problem\n\nMidnight contracts handle sensitive data and value. Common vulnerabilities include:\n- **Information leakage** - Accidental disclosure of private data\n- **Reentrancy** - Cross-contract call vulnerabilities\n- **Access control** - Missing or weak permission checks\n- **Integer overflow** - Arithmetic edge cases\n- **State manipulation** - Unexpected state transitions\n\nCurrently, developers rely on manual review or expensive audits.\n\n## Proposed Solution\n\nExtend the existing static analysi", "created": "2025-12-26T01:59:14Z", "labels": ["enhancement"], "context": "feat: Security Audit Tool - Automated vulnerability detection for Compact contracts ## Problem\n\nMidnight contracts handle sensitive data and value. Common vulnerabilities include:\n- **Information leakage** - Accidental disclosure of private data\n- **Reentrancy** - Cross-contract call"}


identifier: gh_issue_3762582664
source: github_issue
status: new
created_at: 2025-12-26 02:59:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3762582664", "title": "[Digest] 2025-12-26", "url": "https://github.com/e1134171019/agrnt/issues/8", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "agrnt", "body_preview": "# \u6280\u8853\u8cc7\u8a0a\u6458\u8981 - 2025-12-26\n\n## \u6458\u8981\u6307\u6a19\n\n- \u53bb\u91cd\u7387\uff1a0.00%\uff08\u539f\u59cb 111 \u2192 \u53bb\u91cd 111\uff09\n- \u5206\u985e\u7d71\u8a08\uff1acommunity 42 \u7b46 / news 20 \u7b46 / papers 20 \u7b46 / releases 20 \u7b46 / trend 9 \u7b46\n- \u4f86\u6e90\u5065\u5eb7\u5ea6\uff1a\u6210\u529f 7 / 7\uff08\u5931\u6557 0\uff09\n\n## community\n\n### Dev.to\n\n#### [GPU Compute Shaders in Pure Go: gogpu/gg v0.15.0](https://dev.to/kolkov/gpu-compute-shaders-in-pure-go-gogpugg-v0150-1cjk)\n\u767c\u5e03\u65bc\uff1aFri, 26 Dec 2025 02:13:51 +0000\n\n<blockquote>\n<p><strong>Update (December 26, 2025):</strong> gogpu/gg <strong>v0.15.0</strong> released! GPU compute shaders, vello-style pipeline,", "created": "2025-12-26T02:49:42Z", "labels": ["intel", "digest"], "context": "[Digest] 2025-12-26 # \u6280\u8853\u8cc7\u8a0a\u6458\u8981 - 2025-12-26\n\n## \u6458\u8981\u6307\u6a19\n\n- \u53bb\u91cd\u7387\uff1a0.00%\uff08\u539f\u59cb 111 \u2192 \u53bb\u91cd 111\uff09\n- \u5206\u985e\u7d71\u8a08\uff1acommunity 42 \u7b46 / news 20 \u7b46 / papers 20 \u7b46 / releases 20 \u7b46 / trend 9 \u7b46\n- \u4f86\u6e90\u5065\u5eb7\u5ea6\uff1a\u6210\u529f 7 / 7\uff08\u5931\u6557 0\uff09\n\n## community\n\n### Dev.to\n\n#### [GPU Com"}


identifier: gh_issue_3762571895
source: github_issue
status: new
created_at: 2025-12-26 02:59:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3762571895", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/keypress-notifications/issues/53", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "keypress-notifications", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (17)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-26T02:37:10Z", "labels": ["automated", "security", "critical"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3762571741
source: github_issue
status: new
created_at: 2025-12-26 02:59:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3762571741", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/file-insights/issues/133", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "file-insights", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (16)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-26T02:36:58Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3762570718
source: github_issue
status: new
created_at: 2025-12-26 02:59:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3762570718", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/additional-contexts-menu/issues/114", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "additional-contexts-menu", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (17)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-26T02:35:51Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3762589158
source: github_issue
status: new
created_at: 2025-12-26 03:00:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3762589158", "title": "Latest 15 Papers - December 26, 2025", "url": "https://github.com/pstAmbition/DailyArXiv_contentmoderation/issues/7", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "DailyArXiv_contentmoderation", "body_preview": "**Please check the [Github](https://github.com/pstAmbition/DailyArXiv_contentmoderation) page for a better reading experience and more papers.**\n\n## Multimodal harmful content\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[When Harmful Content Gets Camouflaged: Unveiling Perception Failure of LVLMs with CamHarmTI](https://arxiv.org/abs/2512.03087v1)** | 2025-11-29 |  |\n| **[MTikGuard System: A Transformer-Based Multimodal System for Child-Safe Content Moderation on TikTok](https", "created": "2025-12-26T02:56:11Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 26, 2025 **Please check the [Github](https://github.com/pstAmbition/DailyArXiv_contentmoderation) page for a better reading experience and more papers.**\n\n## Multimodal harmful content\n| **Title** | **Date** |"}


identifier: gh_issue_3762603123
source: github_issue
status: new
created_at: 2025-12-26 03:11:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3762603123", "title": "Nextjs major bug: CVE-2025-55182", "url": "https://github.com/Kidemi04/Library_Self-Checkout_System/issues/59", "user": "print1Username", "user_url": "https://github.com/print1Username", "repo": "Library_Self-Checkout_System", "body_preview": "### Introduction\nIn the seperate version of the Nextjs, the user can directly attack the Nextjs server just in simple way\n**without login, without any access**\nThere is an unauthenticated remote code execution vulnerability in React Server Components\n\n### Experiment\nBefore the testing, we need to start the server:\n<img width=\"1920\" height=\"1020\" alt=\"Image\" src=\"https://github.com/user-attachments/assets/1a799933-13dd-470b-88b6-0b5199ba5f16\" />\n\nIn this testing, we need to download the python co", "created": "2025-12-26T03:10:18Z", "labels": ["bug"], "context": "Nextjs major bug: CVE-2025-55182 ### Introduction\nIn the seperate version of the Nextjs, the user can directly attack the Nextjs server just in simple way\n**without login, without any access**\nThere is an unauthenticated remote code "}


identifier: gh_issue_3762601263
source: github_issue
status: new
created_at: 2025-12-26 03:11:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3762601263", "title": "Security vulnerability in auth flow", "url": "https://github.com/Acurioustractor/act-regenerative-studio/issues/34", "user": "Acurioustractor", "user_url": "https://github.com/Acurioustractor", "repo": "act-regenerative-studio", "body_preview": "## Issue\nSecurity vulnerability found in authentication flow that needs immediate attention.\n\n## Impact\nCould allow unauthorized access to protected resources.\n\n## Priority\n\ud83d\udd34 HIGH - Security issue\n\n## Next Steps\n- [ ] Identify specific vulnerability in auth flow\n- [ ] Review auth middleware implementation\n- [ ] Implement security fix\n- [ ] Add security tests\n- [ ] Conduct security audit\n\n## Context\nFound during TODO migration from codebase. Critical security issue.\n\n**Labels to add**: type: secu", "created": "2025-12-26T03:08:22Z", "labels": [], "context": "Security vulnerability in auth flow ## Issue\nSecurity vulnerability found in authentication flow that needs immediate attention.\n\n## Impact\nCould allow unauthorized access to protected resources.\n\n## Priority\n\ud83d\udd34 HIGH - Security issue\n\n##"}


identifier: gh_issue_3762595930
source: github_issue
status: new
created_at: 2025-12-26 03:11:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3762595930", "title": "Christmas Kindness, Python Speed, and LangChain Leaks", "url": "https://github.com/thevibeworks/claude-reads-hn/issues/77", "user": "claude-yolo[bot]", "user_url": "https://github.com/apps/claude-yolo", "repo": "claude-reads-hn", "body_preview": "**Christmas kindness meets Python speed, while LangChain leaks your secrets**\n\n## Highlights\n- A stranger at Christmas dinner stayed for 45 years and left \u00a340k to charity\n- Python 3.15 might actually be fast (on Windows, for once)\n- Slow down your reading - your brain is juggling chocolates like Lucy\n- The New Yorker digitized 100 years of archives for subscribers to ignore\n- LangChain's serialization lets attackers steal your env secrets\n\n## Stories\n\n### 1. We invited a man into our home at Chr", "created": "2025-12-26T03:02:53Z", "labels": [], "context": "Christmas Kindness, Python Speed, and LangChain Leaks **Christmas kindness meets Python speed, while LangChain leaks your secrets**\n\n## Highlights\n- A stranger at Christmas dinner stayed for 45 years and left \u00a340k to charity\n- Python 3.15 might actually "}


identifier: gh_issue_3762609486
source: github_issue
status: new
created_at: 2025-12-26 03:24:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3762609486", "title": "Story 8: Production Deployment Preparation (Optional)", "url": "https://github.com/cobaltroad/familytree/issues/67", "user": "cobaltroad", "user_url": "https://github.com/cobaltroad", "repo": "familytree", "body_preview": "## User Story\n\n**As a** system administrator\n**I want** deployment documentation and configuration for the SvelteKit application\n**So that I can** deploy the family tree application to production environments\n\n## Epic\n\nPart of Epic #59: Migrate from Go Backend to SvelteKit + Drizzle ORM\n\n## Priority\n\n**Low** - Post-Migration (Optional)\n\n## Estimated Effort\n\n**3-4 hours**\n\n## Dependencies\n\n- Depends on Story 7: Go Backend Removal and Documentation Update (#66)\n\n## Acceptance Criteria\n\n### Scenari", "created": "2025-12-26T03:17:48Z", "labels": ["documentation", "enhancement", "user-story"], "context": "Story 8: Production Deployment Preparation (Optional) ## User Story\n\n**As a** system administrator\n**I want** deployment documentation and configuration for the SvelteKit application\n**So that I can** deploy the family tree application to production envi"}


identifier: gh_issue_3762612289
source: github_issue
status: new
created_at: 2025-12-26 03:49:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3762612289", "title": "\ud83d\udea8 Security Vulnerabilities Detected", "url": "https://github.com/naretakis/eapd-next/issues/39", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "eapd-next", "body_preview": "\n## Security Audit Results\n\n**High vulnerabilities:** 1\n**Critical vulnerabilities:** 1\n\n### Recommended Actions\n1. Review the vulnerabilities listed below\n2. Update affected packages using `npm update`\n3. For packages without fixes, consider alternatives\n4. Run `npm audit fix` to automatically fix issues where possible\n\n### Audit Details\n```json\nundefined\n```\n\nThis issue was automatically created by the security audit workflow.\n", "created": "2025-12-26T03:20:25Z", "labels": ["security", "priority: high", "needs-triage"], "context": "\ud83d\udea8 Security Vulnerabilities Detected \n## Security Audit Results\n\n**High vulnerabilities:** 1\n**Critical vulnerabilities:** 1\n\n### Recommended Actions\n1. Review the vulnerabilities listed below\n2. Update affected packages using `npm updat"}


identifier: gh_issue_3762587964
source: github_issue
status: new
created_at: 2025-12-26 03:49:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3762587964", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-26", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/409", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:167`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-production'\n   - Confidence: MEDIUM\n\n2. **blacklist** (LOW)\n   - File: `./scripts/health-check.py:8`\n   - Issue: Consider possible security implications associated with the subprocess module.\n   - Confidence: HIGH\n\n3. **subprocess_without_shell_equals_true** (LOW)\n   - File: `./scripts/health-check.p", "created": "2025-12-26T02:54:45Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-26 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:167`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-p"}


identifier: gh_issue_3762587696
source: github_issue
status: new
created_at: 2025-12-26 03:49:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3762587696", "title": "\ud83d\udd12 Security Check Failed - 2025-12-26", "url": "https://github.com/eddieburroughs/RegularUpkeep/issues/2", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "RegularUpkeep", "body_preview": "## Nightly Security Check Failed\n\nThe automated security and code quality check found issues that need attention.\n\n**Run ID:** 20514785210\n**Workflow:** Nightly Security & Code Checks\n\nPlease review the [workflow run](https://github.com/eddieburroughs/RegularUpkeep/actions/runs/20514785210) for details.\n\n### Checklist\n- [ ] Review npm audit vulnerabilities\n- [ ] Fix ESLint errors\n- [ ] Resolve TypeScript errors\n- [ ] Address security scan findings\n", "created": "2025-12-26T02:54:33Z", "labels": ["security", "automated"], "context": "\ud83d\udd12 Security Check Failed - 2025-12-26 ## Nightly Security Check Failed\n\nThe automated security and code quality check found issues that need attention.\n\n**Run ID:** 20514785210\n**Workflow:** Nightly Security & Code Checks\n\nPlease review t"}


identifier: gh_issue_3762672485
source: github_issue
status: new
created_at: 2025-12-26 04:39:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3762672485", "title": "infra: Quality gates & automated enforcement", "url": "https://github.com/pv-udpv/perplexity-ai-plug/issues/22", "user": "pv-udpv", "user_url": "https://github.com/pv-udpv", "repo": "perplexity-ai-plug", "body_preview": "# \ud83d\udea7 Quality Gates & Automated Enforcement\n\n## \ud83c\udfaf Goal\nAutomatically prevent low-quality code from merging. Make \"production-ready\" a default, not a checklist.\n\n## \ud83d\udccb Implementation\n\n### 1\ufe0f\u20e3 **Branch Protection Rules** (GitHub UI)\n\nConfigure in Settings \u279c Branches \u279c Add protection rule for `main` and `develop`:\n\n```\n\u2713 Require pull request reviews: 1\n\u2713 Require status checks to pass:\n  - lint-and-build / lint\n  - lint-and-build / test\n  - lint-and-build / build\n  - coverage (>80%)\n  - type-check\n\u2713 Re", "created": "2025-12-26T04:18:58Z", "labels": ["infra"], "context": "infra: Quality gates & automated enforcement # \ud83d\udea7 Quality Gates & Automated Enforcement\n\n## \ud83c\udfaf Goal\nAutomatically prevent low-quality code from merging. Make \"production-ready\" a default, not a checklist.\n\n## \ud83d\udccb Implementation\n\n### 1\ufe0f\u20e3 **Branch Pro"}


identifier: gh_issue_3762655207
source: github_issue
status: new
created_at: 2025-12-26 04:39:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3762655207", "title": "Security Vulnerabilities (Trivy Scan) - 26-12-25 @ 04:02", "url": "https://github.com/RazorBladeX/SH-GithubRunner/issues/53", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "SH-GithubRunner", "body_preview": "## \u26a0\ufe0f Security Vulnerabilities Detected\n\n**Scan Date:** 26-12-25 @ 04:02\n\n### Summary\n- **Total vulnerabilities found:** 298\n- **Critical:** 4\n- **High:** 49\n\n### Full Report\nThe complete vulnerability report is available as a workflow artifact.\n\n\ud83d\udce5 **[Download Full Report](https://github.com/RazorBladeX/SH-GithubRunner/actions/runs/20515582148/artifacts)**\n\n---\n*This issue is automatically generated by the Trivy security scanner.*\n", "created": "2025-12-26T04:02:15Z", "labels": ["vulnerability", "security", "automated", "security-scan"], "context": "Security Vulnerabilities (Trivy Scan) - 26-12-25 @ 04:02 ## \u26a0\ufe0f Security Vulnerabilities Detected\n\n**Scan Date:** 26-12-25 @ 04:02\n\n### Summary\n- **Total vulnerabilities found:** 298\n- **Critical:** 4\n- **High:** 49\n\n### Full Report\nThe complete vulnerabilit"}


identifier: gh_issue_3762618485
source: github_issue
status: new
created_at: 2025-12-26 04:39:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3762618485", "title": "Latest 15 Papers - December 26, 2025", "url": "https://github.com/yanghlll/ArxivDaily-Haolin/issues/85", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "ArxivDaily-Haolin", "body_preview": "**Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Unified\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[AnyAD: Unified Any-Modality Anomaly Detection in Incomplete Multi-Sequence MRI](https://arxiv.org/abs/2512.21264v1)** | 2025-12-24 | 15 pages, 8 figures |\n| **[UniTacHand: Unified Spatio-Tactile Representation for Human to Robotic Hand Skill Transfer](https://arxiv.org/abs/2512.21233v1)** | 20", "created": "2025-12-26T03:25:29Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 26, 2025 **Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Unified\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |"}


identifier: gh_issue_3762607869
source: github_issue
status: new
created_at: 2025-12-26 04:51:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3762607869", "title": "install.py all installation summary checks fail on my system", "url": "https://github.com/PozzettiAndrea/ComfyUI-TRELLIS2/issues/32", "user": "SinaYa", "user_url": "https://github.com/SinaYa", "repo": "ComfyUI-TRELLIS2", "body_preview": "- I installed the node using the manager\n- I manually downloaded all the models and json files and put them in `ComfyUI\\models\\trellis2\\ckpts` according to manual download instructions\n- I used the workflow that was updated/added in the repo around 5 hours ago\n- I got a missing node issue so I decided to switch to the nightly version\n- changed the security level of the manager to weak so that I could do that\n- no missing node this time so I ran the flow\n- something downloaded in the background (", "created": "2025-12-26T03:15:56Z", "labels": [], "context": "install.py all installation summary checks fail on my system - I installed the node using the manager\n- I manually downloaded all the models and json files and put them in `ComfyUI\\models\\trellis2\\ckpts` according to manual download instructions\n- I used the wo"}


identifier: gh_issue_3762702495
source: github_issue
status: new
created_at: 2025-12-26 05:03:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3762702495", "title": "Release validation failed for v1.5.0-beta.6", "url": "https://github.com/pradeepmouli/iox-matter-bridge/issues/17", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "iox-matter-bridge", "body_preview": "# Release Artifact Validation Report\n\n**Release**: v1.5.0-beta.6\n**Version**: 1.5.0-beta.6\n**Date**: 2025-12-26 04:40:37 UTC\n\n## Validation Results\n\n| Artifact | Status | Notes |\n|----------|--------|-------|\n| Checksums file | \u274c Missing | Required |\n| Tarball (.tar.gz) | \u274c Missing or Invalid | Required |\n| SBOM (.sbom.json) | \u26a0\ufe0f Missing | Recommended |\n| GPG Signature | \u2139\ufe0f Not present | Optional |\n\n## Details\n\n### Checksums\n- \u274c CRITICAL: Checksums file missing\n\n### Tarball\n- \u274c CRITICAL: Tarball", "created": "2025-12-26T04:40:37Z", "labels": [], "context": "Release validation failed for v1.5.0-beta.6 # Release Artifact Validation Report\n\n**Release**: v1.5.0-beta.6\n**Version**: 1.5.0-beta.6\n**Date**: 2025-12-26 04:40:37 UTC\n\n## Validation Results\n\n| Artifact | Status | Notes |\n|----------|--------|"}


identifier: gh_issue_3762715736
source: github_issue
status: new
created_at: 2025-12-26 05:03:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3762715736", "title": "CVE-2024-45337: No new release after 2024.11.2", "url": "https://github.com/home-assistant/tempio/issues/114", "user": "sjiampojamarn", "user_url": "https://github.com/sjiampojamarn", "repo": "tempio", "body_preview": "Vulnerability: CVE-2024-45337 \ne.g.\n\n```\n$ docker run aquasec/trivy image -s CRITICAL --table-mode detailed ghcr.io/home-assistant/aarch64-base\n\nusr/bin/tempio (gobinary)\n=========================\nTotal: 1 (CRITICAL: 1)\n\n\u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510\n\u2502       Library       \u2502 Vulnerability  \u2502 Severity \u2502 Status \u2502 Installed Version \u2502 Fixed Version \u2502                         Titl", "created": "2025-12-26T04:53:58Z", "labels": [], "context": "CVE-2024-45337: No new release after 2024.11.2 Vulnerability: CVE-2024-45337 \ne.g.\n\n```\n$ docker run aquasec/trivy image -s CRITICAL --table-mode detailed ghcr.io/home-assistant/aarch64-base\n\nusr/bin/tempio (gobinary)\n=========================\nTot"}


identifier: gh_issue_3762755614
source: github_issue
status: new
created_at: 2025-12-26 05:28:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3762755614", "title": "[SECURITY] Incident report & question about image signature for tag :postgresql-latest", "url": "https://github.com/umami-software/umami/issues/3927", "user": "CoderCo", "user_url": "https://github.com/CoderCo", "repo": "umami", "body_preview": "### Describe the Bug\n\n    Hello umami-software team,\n\n    I am writing to report a security incident and ask about your Docker image signing practices. This is important for the security of all users.\n\n    1. Incident Report:\n    In December 2025, my server running the ghcr.io/umami-software/umami:postgresql-latest image was compromised. The container was part of a cryptojacking botnet. Analysis showed the malicious code was injected at runtime via a base64-encoded command in the container's ent", "created": "2025-12-26T05:25:40Z", "labels": [], "context": "[SECURITY] Incident report & question about image signature for tag :postgresql-latest ### Describe the Bug\n\n    Hello umami-software team,\n\n    I am writing to report a security incident and ask about your Docker image signing practices. This is important for the security of all users."}


identifier: gh_issue_3762745929
source: github_issue
status: new
created_at: 2025-12-26 05:40:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3762745929", "title": "Migrate Authentication System to JWT Access/Refresh Token Architecture", "url": "https://github.com/purnasth/commuto/issues/100", "user": "purnasth", "user_url": "https://github.com/purnasth", "repo": "commuto", "body_preview": "# \ud83d\udd10 Migrate Authentication System to JWT Access/Refresh Token Architecture\n\n## Priority: \ud83d\udd34 HIGH - Critical Security Issue\n\n## Story Points: **13**\n\n---\n\n## \ud83d\udccb Overview\n\nCurrently, the application uses localStorage to store the entire user object after login, with no server-side token validation. This creates a **critical security vulnerability** where users can manipulate their `userId` and impersonate other users. \n\nWe need to migrate to a JWT-based access/refresh token system with proper server", "created": "2025-12-26T05:17:47Z", "labels": ["enhancement"], "context": "Migrate Authentication System to JWT Access/Refresh Token Architecture # \ud83d\udd10 Migrate Authentication System to JWT Access/Refresh Token Architecture\n\n## Priority: \ud83d\udd34 HIGH - Critical Security Issue\n\n## Story Points: **13**\n\n---\n\n## \ud83d\udccb Overview\n\nCurrently, the application uses "}


identifier: gh_issue_3762809953
source: github_issue
status: new
created_at: 2025-12-26 06:30:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3762809953", "title": "enhancement: Automate dependency updates with Dependabot or Renovate", "url": "https://github.com/williamzujkowski/standards/issues/35", "user": "williamzujkowski", "user_url": "https://github.com/williamzujkowski", "repo": "standards", "body_preview": "## Summary\n\nCurrently, dependency updates are done manually which can lead to outdated dependencies accumulating over time. This issue proposes automating dependency updates.\n\n## Motivation\n\nDuring the December 2025 audit, several dependencies were found to be significantly outdated:\n- `ruff-pre-commit`: v0.2.1 \u2192 v0.14.10 (many months behind)\n- `pre-commit-hooks`: v4.5.0 \u2192 v6.0.0 (major version behind)\n- `black`: 24.1.1 \u2192 25.12.0 (major version behind)\n\n## Proposed Solutions\n\n### Option 1: GitHu", "created": "2025-12-26T06:12:32Z", "labels": [], "context": "enhancement: Automate dependency updates with Dependabot or Renovate ## Summary\n\nCurrently, dependency updates are done manually which can lead to outdated dependencies accumulating over time. This issue proposes automating dependency updates.\n\n## Motivation\n\nDuring th"}


identifier: gh_issue_3762855747
source: github_issue
status: new
created_at: 2025-12-26 06:53:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3762855747", "title": "Enable `Dependabot` for automated dependency maintenance", "url": "https://github.com/ntoulasm/isense/issues/10", "user": "ntoulasm", "user_url": "https://github.com/ntoulasm", "repo": "isense", "body_preview": "### Description \nTo ensure project remains secure and up to date, we should consider enabling `Dependabot` to manage automated version updates across the entire project structure. This will reduce the manual overhead of checking for new releases of `TypeScript`, `Node.js`, and `VS Code` extension utilities.\n\nThe configuration should cover the following ecosystems:\n\n1. npm: Monitoring `package.json` files in `/`, `/client`, and `/server` directories.\n2. GitHub Actions: Monitoring CI/CD workflows ", "created": "2025-12-26T06:43:03Z", "labels": ["enhancement"], "context": "Enable `Dependabot` for automated dependency maintenance ### Description \nTo ensure project remains secure and up to date, we should consider enabling `Dependabot` to manage automated version updates across the entire project structure. This will reduce the"}


identifier: gh_issue_3762909198
source: github_issue
status: new
created_at: 2025-12-26 07:30:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3762909198", "title": "Daily Hacker News 26-12-2025", "url": "https://github.com/Foxhunt/daily-hackernews/issues/534", "user": "Foxhunt", "user_url": "https://github.com/Foxhunt", "repo": "daily-hackernews", "body_preview": "\n# Daily Hacker News\n  \n1. [**Maybe the default settings are too high**](https://www.raptitude.com/2025/12/maybe-the-default-settings-are-too-high/) `www.raptitude.com` [`comments`](https://news.ycombinator.com/item?id=46387657)  \n2. [**Show HN: GeneGuessr \u2013 a daily biology web puzzle**](https://geneguessr.brinedew.bio/) `geneguessr.brinedew.bio` [`comments`](https://news.ycombinator.com/item?id=46363870)  \n3. [**MiniMax M2.1: Built for Real-World Complex Tasks, Multi-Language Programming**](htt", "created": "2025-12-26T07:15:07Z", "labels": [], "context": "Daily Hacker News 26-12-2025 \n# Daily Hacker News\n  \n1. [**Maybe the default settings are too high**](https://www.raptitude.com/2025/12/maybe-the-default-settings-are-too-high/) `www.raptitude.com` [`comments`](https://news.ycomb"}


identifier: gh_issue_3762877944
source: github_issue
status: new
created_at: 2025-12-26 07:30:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3762877944", "title": "Hacker News Daily Top 30 @2025-12-26", "url": "https://github.com/meixger/hackernews-daily/issues/1196", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "hackernews-daily", "body_preview": "1. [**We invited a man into our home at Christmas and he stayed with us for 45 years** <code>www.bbc.co.uk</code>](https://www.bbc.co.uk/news/articles/cdxwllqz1l0o) - [238 comments 1004 points](https://news.ycombinator.com/item?id=46383552)\n2. [**Alzheimer\u2019s disease can be reversed in animal models? Study** <code>case.edu</code>](https://case.edu/news/new-study-shows-alzheimers-disease-can-be-reversed-achieve-full-neurological-recovery-not-just-prevented-or-slowed-animal-models) - [110 comments ", "created": "2025-12-26T06:56:56Z", "labels": [], "context": "Hacker News Daily Top 30 @2025-12-26 1. [**We invited a man into our home at Christmas and he stayed with us for 45 years** <code>www.bbc.co.uk</code>](https://www.bbc.co.uk/news/articles/cdxwllqz1l0o) - [238 comments 1004 points](https:"}


identifier: gh_issue_3762846628
source: github_issue
status: new
created_at: 2025-12-26 07:30:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3762846628", "title": "Security Health Check - GOOD (85/100) - 2025-12-26", "url": "https://github.com/Sami9889/Sami.dev-website/issues/264", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/26/2025, 6:36:34 AM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 9\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Securi", "created": "2025-12-26T06:36:38Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-26 # Security Health Check Report\n\n**Generated:** 12/26/2025, 6:36:34 AM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Inc"}


identifier: gh_issue_3762928268
source: github_issue
status: new
created_at: 2025-12-26 07:30:06
data:
  {"source": "github_issue", "identifier": "gh_issue_3762928268", "title": "[Testing] Add Unit Test Suite for Core Services and Handlers", "url": "https://github.com/RikaiDev/cortex/issues/23", "user": "gloomcheng", "user_url": "https://github.com/gloomcheng", "repo": "cortex", "body_preview": "## Summary\n\nThe codebase currently has **no unit tests** for the `src/` folder. Test coverage analysis shows:\n\n- **0 test files** in src/\n- **154 untested source files**\n- **0% test coverage**\n\n## Scope\n\n### Priority 1: Core Services (High Value)\nServices with complex logic that would benefit most from testing:\n\n- [ ] `code-quality-service.ts` - Complexity analysis, scoring algorithm\n- [ ] `security-service.ts` - Pattern matching, vulnerability detection\n- [ ] `architecture-service.ts` - Glob pa", "created": "2025-12-26T07:28:11Z", "labels": ["enhancement", "priority:high"], "context": "[Testing] Add Unit Test Suite for Core Services and Handlers ## Summary\n\nThe codebase currently has **no unit tests** for the `src/` folder. Test coverage analysis shows:\n\n- **0 test files** in src/\n- **154 untested source files**\n- **0% test coverage**\n\n## Sco"}


identifier: gh_issue_3762947283
source: github_issue
status: new
created_at: 2025-12-26 08:05:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3762947283", "title": "\ud83d\udea8 BLOCKING: Add rate limiting to geocoding endpoint", "url": "https://github.com/nmitch17/intangible-me/issues/6", "user": "nmitch17", "user_url": "https://github.com/nmitch17", "repo": "intangible-me", "body_preview": "## Priority: BLOCKING - Must Fix Before Merge\n\n**Status**: Security vulnerability\n\n**Labels**: security, priority:critical, blocking\n\n### Problem\nNominatim has strict 1 request/second usage policy. No rate limiting means malicious users could get your app IP-blocked by Nominatim.\n\n### Location\n`src/app/api/geocode/route.ts`\n\n### Fix Needed\n1. Implement rate limiting (consider @upstash/ratelimit)\n2. Add request caching to reduce API calls\n\n### Impact\nWithout this, the app could be blocked from No", "created": "2025-12-26T07:39:51Z", "labels": [], "context": "\ud83d\udea8 BLOCKING: Add rate limiting to geocoding endpoint ## Priority: BLOCKING - Must Fix Before Merge\n\n**Status**: Security vulnerability\n\n**Labels**: security, priority:critical, blocking\n\n### Problem\nNominatim has strict 1 request/second usage policy. No"}


identifier: gh_issue_3762943601
source: github_issue
status: new
created_at: 2025-12-26 08:05:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3762943601", "title": "[CRITICAL] bindCompliance() allows any address to bypass onlyComplianceCall modifier", "url": "https://github.com/ERC-3643/ERC-3643/issues/81", "user": "charlie-bk2", "user_url": "https://github.com/charlie-bk2", "repo": "ERC-3643", "body_preview": "# Security Issue: Unauthorized Module Binding Allows Privilege Escalation\n\n## Vulnerability\n\nThe `bindCompliance()` function in `AbstractModuleUpgradeable.sol` allows any address to register itself as a bound compliance contract, bypassing the `onlyComplianceCall()` modifier.\n\n```solidity\nfunction bindCompliance(address _compliance) external override {\n    require(msg.sender == _compliance, \"only compliance contract can call\");\n    s.complianceBound[_compliance] = true;  // Any contract can bind", "created": "2025-12-26T07:37:05Z", "labels": [], "context": "[CRITICAL] bindCompliance() allows any address to bypass onlyComplianceCall modifier # Security Issue: Unauthorized Module Binding Allows Privilege Escalation\n\n## Vulnerability\n\nThe `bindCompliance()` function in `AbstractModuleUpgradeable.sol` allows any address to register itself as"}


identifier: gh_issue_3762914578
source: github_issue
status: new
created_at: 2025-12-26 08:17:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3762914578", "title": "[plan] Upgrade MCP Go SDK to v1.2.0", "url": "https://github.com/githubnext/gh-aw/issues/7712", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "gh-aw", "body_preview": "## Objective\n\nUpgrade the MCP Go SDK dependency from the current pseudo-version to the stable v1.2.0 release to gain security fixes, stability improvements, and new MCP spec features.\n\n## Context\n\nThe current version `v1.1.1-0.20251212184941-875d1d30c2af` is a pseudo-version. The v1.2.0 release (2025-12-22) includes critical improvements for streamable transports, security enhancements, and new features.\n\n## Approach\n\n1. Update `go.mod`:\n   ```bash\n   go get github.com/modelcontextprotocol/go-sd", "created": "2025-12-26T07:19:16Z", "labels": ["dependencies", "ai-generated", "plan"], "context": "[plan] Upgrade MCP Go SDK to v1.2.0 ## Objective\n\nUpgrade the MCP Go SDK dependency from the current pseudo-version to the stable v1.2.0 release to gain security fixes, stability improvements, and new MCP spec features.\n\n## Context\n\nThe"}


identifier: gh_issue_3762910508
source: github_issue
status: new
created_at: 2025-12-26 08:17:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3762910508", "title": "Question: GraphQL calls are failing after upgrade to Spring boot 4 which include spring graphql 2.0.1", "url": "https://github.com/spring-projects/spring-graphql/issues/1405", "user": "flinden68", "user_url": "https://github.com/flinden68", "repo": "spring-graphql", "body_preview": "We are using spring graphql for our graphql calls.\nEverything works fine till I upgraded to spring boot 4.0.1.\n\nin my gradle file I didn't change anything, but the latest spring graphql is pulled in.\n\nFor my test I switched from from testImplementation(\"org.springframework.graphql:spring-graphql-test\") to testImplementation(\"org.springframework.boot:spring-boot-starter-graphql-test\") as recommended in the spring boot 4.0 migration guide. https://github.com/spring-projects/spring-boot/wiki/Spring", "created": "2025-12-26T07:16:10Z", "labels": ["status: waiting-for-feedback", "status: waiting-for-triage"], "context": "Question: GraphQL calls are failing after upgrade to Spring boot 4 which include spring graphql 2.0.1 We are using spring graphql for our graphql calls.\nEverything works fine till I upgraded to spring boot 4.0.1.\n\nin my gradle file I didn't change anything, but the latest spring graphql is pulled in.\n"}


identifier: gh_issue_3763078267
source: github_issue
status: new
created_at: 2025-12-26 09:06:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3763078267", "title": "paperless-ai - No space left on device", "url": "https://github.com/community-scripts/ProxmoxVE/issues/10338", "user": "flashaolic", "user_url": "https://github.com/flashaolic", "repo": "ProxmoxVE", "body_preview": "### \u2705 Have you read and understood the above guidelines?\n\nyes\n\n### \ud83d\udd0e Did you run the script with verbose mode enabled?\n\nYes, verbose mode was enabled and the output is included below\n\n### \ud83d\udcdc What is the name of the script you are using?\n\nPaperlessAI 3.0.9\n\n### \ud83d\udcc2 What was the exact command used to execute the script?\n\nbash -c \"$(curl -fsSL https://git.community-scripts.org/community-scripts/ProxmoxVE/raw/branch/main/ct/paperless-ai.sh)\"\n\n### \u2699\ufe0f What settings are you using?\n\n- [x] Default Settings\n", "created": "2025-12-26T09:04:27Z", "labels": ["bug"], "context": "paperless-ai - No space left on device ### \u2705 Have you read and understood the above guidelines?\n\nyes\n\n### \ud83d\udd0e Did you run the script with verbose mode enabled?\n\nYes, verbose mode was enabled and the output is included below\n\n### \ud83d\udcdc What is th"}


identifier: gh_issue_3763116286
source: github_issue
status: new
created_at: 2025-12-26 09:30:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3763116286", "title": "Race Condition in `kinect_teleoperate` leads to Heap Corruption and Denial of Service", "url": "https://github.com/unitreerobotics/kinect_teleoperate/issues/6", "user": "YLChen-007", "user_url": "https://github.com/YLChen-007", "repo": "kinect_teleoperate", "body_preview": "### Advisory Details\n**Title**: Race Condition in `kinect_teleoperate` leads to Heap Corruption and Denial of Service\n\n**Description**:\n### Summary\nA race condition exists in the `kinect_teleoperate` application due to improper synchronization of the `globalBodyFrameForSkeleton` shared resource. This vulnerability allows concurrent read/write operations from producer and consumer threads to cause Double Free or Use-After-Free errors, leading to immediate application crashes (Denial of Service) a", "created": "2025-12-26T09:25:08Z", "labels": [], "context": "Race Condition in `kinect_teleoperate` leads to Heap Corruption and Denial of Service ### Advisory Details\n**Title**: Race Condition in `kinect_teleoperate` leads to Heap Corruption and Denial of Service\n\n**Description**:\n### Summary\nA race condition exists in the `kinect_teleoperate` "}


identifier: gh_issue_3763097246
source: github_issue
status: new
created_at: 2025-12-26 09:30:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3763097246", "title": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected", "url": "https://github.com/truckercore/truckercore1/issues/164", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "truckercore1", "body_preview": "# Security Audit Report - 2025-12-26\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/util vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-9j5q-479x-43g2\nfix available via `npm audit fix --force`\nWill install @stryker-mutator/vitest-runner@8.7.1, which is outside the stated dependency range\nnode_modules/@stryker-mutator/util\n  @stryker-mutator/core  <=8.7.0\n  D", "created": "2025-12-26T09:14:58Z", "labels": ["security", "dependencies", "automated"], "context": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected # Security Audit Report - 2025-12-26\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/"}


identifier: gh_issue_3763069303
source: github_issue
status: new
created_at: 2025-12-26 09:30:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3763069303", "title": "Critical: Race condition in WASM singleton initialization", "url": "https://github.com/nmitch17/intangible-me/issues/17", "user": "nmitch17", "user_url": "https://github.com/nmitch17", "repo": "intangible-me", "body_preview": "## Problem\n\nThe `getSwe()` function in `src/lib/calculation/ephemeris.ts` has a race condition when handling concurrent requests:\n\n- If two concurrent requests call `calculateActivations()`, both may initialize WASM simultaneously\n- The singleton pattern uses a simple null check without promise coordination\n- This can lead to multiple WASM initializations, wasting resources and potentially causing issues\n\n## Current Implementation (lines 22-35)\n\n```typescript\nasync function getSwe(): Promise<Swi", "created": "2025-12-26T08:58:28Z", "labels": ["bug", "priority:critical"], "context": "Critical: Race condition in WASM singleton initialization ## Problem\n\nThe `getSwe()` function in `src/lib/calculation/ephemeris.ts` has a race condition when handling concurrent requests:\n\n- If two concurrent requests call `calculateActivations()`, both may "}


identifier: gh_issue_3762998528
source: github_issue
status: new
created_at: 2025-12-26 09:30:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3762998528", "title": "There is an arbitrary file deletion vulnerability in /DataController.class.php of greencms v2.3.", "url": "https://github.com/ueh1013/VULN/issues/5", "user": "xuyuhub", "user_url": "https://github.com/xuyuhub", "repo": "VULN", "body_preview": "There is an arbitrary file deletion vulnerability in /DataController.class.php of greencms v2.3.\nNAME OF AFFECTED PRODUCT(S)\n\u2022Greencms\nVendor Homepage\n\u2022https://github.com/GreenCMS/GreenCMS\nAFFECTED AND/OR FIXED VERSION(S)\nVERSION(S)\n\u2022V2.3\nSoftware Link\n\u2022https://github.com/GreenCMS/GreenCMS\nPROBLEM TYPE\nVulnerability Type\n\u2022Delete any file\nImpact\n\u2022The web file deletion vulnerability poses severe threats: Attackers can delete core programs, configurations, or database files, causing website crashes", "created": "2025-12-26T08:11:17Z", "labels": [], "context": "There is an arbitrary file deletion vulnerability in /DataController.class.php of greencms v2.3. There is an arbitrary file deletion vulnerability in /DataController.class.php of greencms v2.3.\nNAME OF AFFECTED PRODUCT(S)\n\u2022Greencms\nVendor Homepage\n\u2022https://github.com/GreenCMS/GreenCMS\nAFFECTED AN"}


identifier: gh_issue_3763042619
source: github_issue
status: new
created_at: 2025-12-26 09:41:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3763042619", "title": "Weekly maintenance cleanup and refactor", "url": "https://github.com/edgfb-137/mcpmark-cicd/issues/4", "user": "edgfb-137", "user_url": "https://github.com/edgfb-137", "repo": "mcpmark-cicd", "body_preview": "Perform weekly maintenance tasks:\n- Clean up unused dependencies\n- Refactor outdated code in the user service\n- Update documentation for API endpoints\n- Run security vulnerability scan", "created": "2025-12-26T08:40:56Z", "labels": [], "context": "Weekly maintenance cleanup and refactor Perform weekly maintenance tasks:\n- Clean up unused dependencies\n- Refactor outdated code in the user service\n- Update documentation for API endpoints\n- Run security vulnerability scan"}


identifier: gh_issue_3763142685
source: github_issue
status: new
created_at: 2025-12-26 10:06:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3763142685", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/madhavi2113/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @madhavi2113! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate ", "created": "2025-12-26T09:39:52Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @madhavi2113! Welcome to your Skills exerc"}


identifier: gh_issue_3763200969
source: github_issue
status: new
created_at: 2025-12-26 10:30:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3763200969", "title": "Shipping Container Market Report and Forecast 2026", "url": "https://github.com/VedikaPatil34/newstrends/issues/12", "user": "VedikaPatil34", "user_url": "https://github.com/VedikaPatil34", "repo": "newstrends", "body_preview": "According to Fortune Business Insights, the global [shipping container market 2026](https://www.fortunebusinessinsights.com/shipping-container-market-102242) was valued at USD 11.88 billion in 2024. The market is projected to grow from USD 12.32 billion in 2025 and is expected to reach USD 15.53 billion by 2032, exhibiting a CAGR of 3.4% during the forecast period. Asia Pacific dominated the global market with a share of 37.54% in 2024.\n\nThe shipping container market comprises standardized conta", "created": "2025-12-26T10:15:26Z", "labels": [], "context": "Shipping Container Market Report and Forecast 2026 According to Fortune Business Insights, the global [shipping container market 2026](https://www.fortunebusinessinsights.com/shipping-container-market-102242) was valued at USD 11.88 billion in 2024. T"}


identifier: gh_issue_3763178363
source: github_issue
status: new
created_at: 2025-12-26 10:30:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3763178363", "title": "In-Flight Internet Market Trends and Growth Opportunities 2026", "url": "https://github.com/VedikaPatil34/newstrends/issues/10", "user": "VedikaPatil34", "user_url": "https://github.com/VedikaPatil34", "repo": "newstrends", "body_preview": "According to Fortune Business Insights, the global in [flight internet market 2026](https://www.fortunebusinessinsights.com/in-flight-internet-market-114578) was valued at USD 4.70 billion in 2024. The market is projected to grow from USD 4.96 billion in 2025 and is expected to reach USD 8.40 billion by 2032, exhibiting a CAGR of 7.82% during the forecast period. North America dominated the global market with a share of 32.13% in 2024.\n\nThe in-flight internet market encompasses hardware, bandwid", "created": "2025-12-26T10:01:30Z", "labels": [], "context": "In-Flight Internet Market Trends and Growth Opportunities 2026 According to Fortune Business Insights, the global in [flight internet market 2026](https://www.fortunebusinessinsights.com/in-flight-internet-market-114578) was valued at USD 4.70 billion in 2024. Th"}


identifier: gh_issue_3763175323
source: github_issue
status: new
created_at: 2025-12-26 10:30:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3763175323", "title": "Managed Detection and Response (MDR) Service Market: Innovations, Regional Insights 2035", "url": "https://github.com/aditimane1235-cpu/research-nester/issues/42", "user": "aditimane1235-cpu", "user_url": "https://github.com/aditimane1235-cpu", "repo": "research-nester", "body_preview": "The [Managed Detection and Response (MDR) Service Market](https://www.researchnester.com/reports/managed-detection-and-response-service-market/8327) has emerged as one of the fastest-growing segments within the global cybersecurity ecosystem, driven by the escalating frequency, sophistication, and financial impact of cyber threats. The Managed Detection and Response Service Market was valued at USD 9.6 billion in 2025 and is projected to reach USD 46.9 billion by the end of 2035, expanding at a ", "created": "2025-12-26T09:59:14Z", "labels": [], "context": "Managed Detection and Response (MDR) Service Market: Innovations, Regional Insights 2035 The [Managed Detection and Response (MDR) Service Market](https://www.researchnester.com/reports/managed-detection-and-response-service-market/8327) has emerged as one of the fastest-growing segments "}


identifier: gh_issue_3763011434
source: github_issue
status: new
created_at: 2025-12-26 10:30:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3763011434", "title": "enhancement: Pin GitHub Actions to SHA with Renovate auto-update", "url": "https://github.com/williamzujkowski/standards/issues/36", "user": "williamzujkowski", "user_url": "https://github.com/williamzujkowski", "repo": "standards", "body_preview": "## Summary\n\nThe repository uses a mix of version tags (@v4) and SHA-pinned (@abc123) references for GitHub Actions. While SHA pinning provides security benefits, it requires manual updates. This issue proposes a consistent strategy.\n\n## Current State\n\nAfter the December 2025 update (PR #34), all actions use semantic version tags (@v4, @v5, etc.) for easier maintenance.\n\n## Security Consideration\n\nSHA pinning provides:\n- Protection against supply chain attacks where a version tag is moved\n- Immut", "created": "2025-12-26T08:20:23Z", "labels": [], "context": "enhancement: Pin GitHub Actions to SHA with Renovate auto-update ## Summary\n\nThe repository uses a mix of version tags (@v4) and SHA-pinned (@abc123) references for GitHub Actions. While SHA pinning provides security benefits, it requires manual updates. This issue"}


identifier: gh_issue_3763168805
source: github_issue
status: new
created_at: 2025-12-26 10:41:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3763168805", "title": "Implement secure and minimal Docker image with proper credential handling", "url": "https://github.com/origox/syncbit/issues/21", "user": "origox", "user_url": "https://github.com/origox", "repo": "syncbit", "body_preview": "## Objective\n\nCreate a production-ready, minimal, and secure Dockerfile for the SyncBit Python application following Docker and security best practices. Ensure credentials and sensitive configuration are injected securely via mounted secrets for Kubernetes deployment.\n\n## Problem Statement\n\nThe current Dockerfile has several security and optimization concerns:\n- Non-root user execution is commented out\n- Credentials could potentially be exposed in environment variables\n- No clear strategy for se", "created": "2025-12-26T09:54:27Z", "labels": [], "context": "Implement secure and minimal Docker image with proper credential handling ## Objective\n\nCreate a production-ready, minimal, and secure Dockerfile for the SyncBit Python application following Docker and security best practices. Ensure credentials and sensitive configuration "}


identifier: gh_issue_3763237570
source: github_issue
status: new
created_at: 2025-12-26 10:41:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3763237570", "title": "Discussion: License, Roadmap, and Transparency regarding AI tools", "url": "https://github.com/zzzz465/rwxml-language-server/issues/152", "user": "1264600905", "user_url": "https://github.com/1264600905", "repo": "rwxml-language-server", "body_preview": "Hi @zzzz465,\n\nThank you again for unarchiving the repository! I'm really glad to see this project active again.\n\nTo get started with the revival, I\u2019d like to discuss three key points:\n\n### 1. License (Crucial)\nCurrently, the repository lacks a `LICENSE` file. To allow me (and the community) to legally contribute and maintain the code, we need an open-source license.\n**Would you be okay with adding an MIT License?**\n(If you agree, I can submit a PR adding the license file immediately.)\n\n### 2. Tr", "created": "2025-12-26T10:37:29Z", "labels": [], "context": "Discussion: License, Roadmap, and Transparency regarding AI tools Hi @zzzz465,\n\nThank you again for unarchiving the repository! I'm really glad to see this project active again.\n\nTo get started with the revival, I\u2019d like to discuss three key points:\n\n### 1. License "}


identifier: gh_issue_3762920647
source: github_issue
status: new
created_at: 2025-12-26 10:52:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3762920647", "title": "Meetings & Transcripts Integration - Full Audit & Fix", "url": "https://github.com/lukassherman27/Benlsey-Operating-System/issues/154", "user": "lukassherman27", "user_url": "https://github.com/lukassherman27", "repo": "Benlsey-Operating-System", "body_preview": "## Context for Claude\n\nThis issue is a handoff document. Another Claude session should pick this up, audit the current state, and implement fixes.\n\n---\n\n## Current State Audit\n\n### Database Tables\n\n| Table | Records | Purpose |\n|-------|---------|---------|\n| `meetings` | 7 | Calendar meetings (extracted from emails, manual) |\n| `meeting_transcripts` | 28 | Audio transcripts with AI summaries |\n\n### Linking Status\n\n| Link Type | Count | % |\n|-----------|-------|---|\n| Meetings \u2192 Proposals | 3/7 ", "created": "2025-12-26T07:22:52Z", "labels": ["enhancement", "area/meetings"], "context": "Meetings & Transcripts Integration - Full Audit & Fix ## Context for Claude\n\nThis issue is a handoff document. Another Claude session should pick this up, audit the current state, and implement fixes.\n\n---\n\n## Current State Audit\n\n### Database Tables\n\n| "}


identifier: gh_issue_3762991245
source: github_issue
status: new
created_at: 2025-12-26 11:06:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3762991245", "title": "Dependency Dashboard", "url": "https://github.com/broadsage/endoflife-action/issues/2", "user": "renovate[bot]", "user_url": "https://github.com/apps/renovate", "repo": "endoflife-action", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/broadsage/endoflife-action).\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Deprecations / Replacements\n> [!WARNING]\nThese dependencies are e", "created": "2025-12-26T08:07:20Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the M"}


identifier: gh_issue_3763335839
source: github_issue
status: new
created_at: 2025-12-26 12:31:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3763335839", "title": "Migrate to unlocked public sign-up + Supabase RLS\u2013enforced entitlements (Clerk + Stripe)", "url": "https://github.com/Lonli-Lokli/uk-travel-history/issues/100", "user": "Lonli-Lokli", "user_url": "https://github.com/Lonli-Lokli", "repo": "uk-travel-history", "body_preview": "\n\nSummary / Goal\n\nWe currently have an existing Clerk + Supabase + Stripe setup with a payment-locked/restricted onboarding flow and access control that is not consistently enforced at the database layer. This migration will:\n\n1. Unlock sign-up/sign-in (public onboarding) for SEO/growth and \u201ctry before buy\u201d.\n\n\n2. Move to a security-first model where Supabase RLS is a hard enforcement layer for user data + premium access.\n\n\n3. Keep Stripe as billing source, but sync entitlements into Supabase and", "created": "2025-12-26T11:48:04Z", "labels": [], "context": "Migrate to unlocked public sign-up + Supabase RLS\u2013enforced entitlements (Clerk + Stripe) \n\nSummary / Goal\n\nWe currently have an existing Clerk + Supabase + Stripe setup with a payment-locked/restricted onboarding flow and access control that is not consistently enforced at the database la"}


identifier: gh_issue_3763440736
source: github_issue
status: new
created_at: 2025-12-26 13:08:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3763440736", "title": "Hebrew Translation Phase 4: Terminology Standardization and Glossary Refinement", "url": "https://github.com/Hack23/homepage/issues/902", "user": "pethers", "user_url": "https://github.com/pethers", "repo": "homepage", "body_preview": "## \ud83c\udfaf Objective\nConduct comprehensive terminology review and standardization across all 62 Hebrew pages, ensuring consistent professional cybersecurity vocabulary and updating Hebrew-Translation-Guide.md with finalized terminology based on real usage.\n\n## \ud83d\udccb Background\nAccording to Hebrew-Translation-Guide.md (v3.1):\n- **Vocabulary extracted:** From 113 translated pages (multi-language)\n- **Hebrew-specific terms:** Comprehensive security terminology compiled\n- **Status:** Initial terminology estab", "created": "2025-12-26T13:02:46Z", "labels": [], "context": "Hebrew Translation Phase 4: Terminology Standardization and Glossary Refinement ## \ud83c\udfaf Objective\nConduct comprehensive terminology review and standardization across all 62 Hebrew pages, ensuring consistent professional cybersecurity vocabulary and updating Hebrew-Translation-Guide."}


identifier: gh_issue_3763440737
source: github_issue
status: new
created_at: 2025-12-26 13:08:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3763440737", "title": "Hebrew Translation Phase 2: Translate Priority ISMS/Discordian Policy Pages", "url": "https://github.com/Hack23/homepage/issues/903", "user": "pethers", "user_url": "https://github.com/pethers", "repo": "homepage", "body_preview": "## \ud83c\udfaf Objective\nComplete professional Hebrew translation of high-priority ISMS and Discordian cybersecurity policy pages, establishing Hack23 as the premier source of Hebrew cybersecurity philosophy and policy documentation.\n\n## \ud83d\udccb Background\nAccording to Hebrew-Translation-Status.md:\n- **Current ISMS files:** 5 files exist (3 fully translated, 2 partially)\n- **Missing files:** 36 Discordian policy pages not yet created\n- **Priority:** High - unique positioning as only Hebrew ISMS documentation wi", "created": "2025-12-26T13:02:46Z", "labels": [], "context": "Hebrew Translation Phase 2: Translate Priority ISMS/Discordian Policy Pages ## \ud83c\udfaf Objective\nComplete professional Hebrew translation of high-priority ISMS and Discordian cybersecurity policy pages, establishing Hack23 as the premier source of Hebrew cybersecurity philosophy an"}


identifier: gh_issue_3763422215
source: github_issue
status: new
created_at: 2025-12-26 13:08:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3763422215", "title": "Security Health Check - GOOD (85/100) - 2025-12-26", "url": "https://github.com/Sami9889/Sami.dev-website/issues/265", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/26/2025, 12:48:05 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 9\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Secur", "created": "2025-12-26T12:48:08Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-26 # Security Health Check Report\n\n**Generated:** 12/26/2025, 12:48:05 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security In"}


identifier: gh_issue_3763379458
source: github_issue
status: new
created_at: 2025-12-26 13:08:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3763379458", "title": "Security issue: vulnerable MongoDB version in use", "url": "https://github.com/linnovate/mean/issues/2091", "user": "alvaro-salort", "user_url": "https://github.com/alvaro-salort", "repo": "mean", "body_preview": "This project uses:\n\n`mongo:4.2`\n\nMongoDB 4.2 is affected by a recently disclosed critical vulnerability and is no longer supported.\n\nMongoDB recommends upgrading to at least:\n- 4.4.30\n- 5.0.32\n- 6.0.27\n- 7.0.28\n- 8.0.17\n- 8.2.3\n\nIf this stack is deployed, the database may be remotely exploitable.\n\nPlease update the MongoDB image as soon as possible \ud83e\udd8a", "created": "2025-12-26T12:15:35Z", "labels": [], "context": "Security issue: vulnerable MongoDB version in use This project uses:\n\n`mongo:4.2`\n\nMongoDB 4.2 is affected by a recently disclosed critical vulnerability and is no longer supported.\n\nMongoDB recommends upgrading to at least:\n- 4.4.30\n- 5.0.32\n- 6.0.2"}


identifier: gh_issue_3763238598
source: github_issue
status: new
created_at: 2025-12-26 13:08:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3763238598", "title": "Discovered on asset:2fcb6271-bec2-47c7-adbb-fdca9cbc15cf", "url": "https://github.com/DivyaAggarawal/end-dec/issues/22", "user": "DivyaAggarawal", "user_url": "https://github.com/DivyaAggarawal", "repo": "end-dec", "body_preview": "Azure or hybrid VMs are not covered by Defender for Endpoint.<br/><br/>Severity: Critical<br/><br/>CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H<br/><br/>CVSS Score: 9.0<br/><br/>Recommendation: Missing threat detection, vulnerability scanning, and EDR capabilities.", "created": "2025-12-26T10:38:11Z", "labels": ["BreachLock", "Cloud scan", "Critical"], "context": "Discovered on asset:2fcb6271-bec2-47c7-adbb-fdca9cbc15cf Azure or hybrid VMs are not covered by Defender for Endpoint.<br/><br/>Severity: Critical<br/><br/>CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H<br/><br/>CVSS Score: 9.0<br/><br/>Recommend"}


identifier: gh_issue_3763477497
source: github_issue
status: new
created_at: 2025-12-26 13:32:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3763477497", "title": "The page-edit.php file in minicms v1.8 contains unauthorized editing and publishing permissions.", "url": "https://github.com/ueh1013/VULN/issues/13", "user": "xuyuhub", "user_url": "https://github.com/xuyuhub", "repo": "VULN", "body_preview": "The page-edit.php file in minicms v1.8 contains unauthorized editing and publishing permissions.\nNAME OF AFFECTED PRODUCT(S)\n\u2022MiniCMS\nVendor Homepage\n\u2022https://github.com/bg5sbk/MiniCMS\nAFFECTED AND/OR FIXED VERSION(S)\n\u2022V1.8\n\u2022PHP version: 5.2.17\nSoftware Link\n\u2022https://github.com/bg5sbk/MiniCMS\nPROBLEM TYPE\nVulnerability Type\n\u2022Unauthorized editing of the publish page\nImpact\n\u2022The vulnerability allowing unauthorized page editing may trigger multiple adverse consequences. From a copyright perspective", "created": "2025-12-26T13:26:56Z", "labels": [], "context": "The page-edit.php file in minicms v1.8 contains unauthorized editing and publishing permissions. The page-edit.php file in minicms v1.8 contains unauthorized editing and publishing permissions.\nNAME OF AFFECTED PRODUCT(S)\n\u2022MiniCMS\nVendor Homepage\n\u2022https://github.com/bg5sbk/MiniCMS\nAFFECTED AND/OR"}


identifier: gh_issue_3763466150
source: github_issue
status: new
created_at: 2025-12-26 13:32:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3763466150", "title": "There is an arbitrary file deletion vulnerability in /DataController.class.php of greencms v2.3.", "url": "https://github.com/ueh1013/VULN/issues/8", "user": "xuyuhub", "user_url": "https://github.com/xuyuhub", "repo": "VULN", "body_preview": "There is an arbitrary file deletion vulnerability in /DataController.class.php of greencms v2.3.\nNAME OF AFFECTED PRODUCT(S)\n\u2022Greencms\nVendor Homepage\n\u2022https://github.com/GreenCMS/GreenCMS\nAFFECTED AND/OR FIXED VERSION(S)\n\u2022V2.3\nSoftware Link\n\u2022https://github.com/GreenCMS/GreenCMS\nPROBLEM TYPE\nVulnerability Type\n\u2022arbitrary file deletion\nImpact\n\u2022The arbitrary file upload vulnerability is a high-risk Web security flaw with extensive impact and severe destructive potential. Attackers can bypass uploa", "created": "2025-12-26T13:19:05Z", "labels": [], "context": "There is an arbitrary file deletion vulnerability in /DataController.class.php of greencms v2.3. There is an arbitrary file deletion vulnerability in /DataController.class.php of greencms v2.3.\nNAME OF AFFECTED PRODUCT(S)\n\u2022Greencms\nVendor Homepage\n\u2022https://github.com/GreenCMS/GreenCMS\nAFFECTED AN"}


identifier: gh_issue_3763462987
source: github_issue
status: new
created_at: 2025-12-26 13:32:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3763462987", "title": "The /CustomController.class.php file in greencms v2.3 contains an arbitrary file upload vulnerability.", "url": "https://github.com/ueh1013/VULN/issues/7", "user": "xuyuhub", "user_url": "https://github.com/xuyuhub", "repo": "VULN", "body_preview": "The /CustomController.class.php file in greencms v2.3 contains an arbitrary file upload vulnerability.\nNAME OF AFFECTED PRODUCT(S)\n\u2022Greencms\nVendor Homepage\n\u2022https://github.com/GreenCMS/GreenCMS\nVERSION(S)\n\u2022V2.3\nSoftware Link\n\u2022https://github.com/GreenCMS/GreenCMS\nPROBLEM TYPE\nVulnerability Type\n\u2022arbitrary file deletion\nImpact\nThe arbitrary file upload vulnerability is a high-risk Web security flaw with extensive impact and severe destructive potential. Attackers can bypass upload verification to", "created": "2025-12-26T13:17:15Z", "labels": [], "context": "The /CustomController.class.php file in greencms v2.3 contains an arbitrary file upload vulnerability. The /CustomController.class.php file in greencms v2.3 contains an arbitrary file upload vulnerability.\nNAME OF AFFECTED PRODUCT(S)\n\u2022Greencms\nVendor Homepage\n\u2022https://github.com/GreenCMS/GreenCMS\nVERSI"}


identifier: gh_issue_3763459432
source: github_issue
status: new
created_at: 2025-12-26 13:32:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3763459432", "title": "There is a CSRF vulnerability in /IndexController.class.php of greencms v2.3.", "url": "https://github.com/ueh1013/VULN/issues/6", "user": "xuyuhub", "user_url": "https://github.com/xuyuhub", "repo": "VULN", "body_preview": "There is a CSRF vulnerability in /IndexController.class.php of greencms v2.3.\nNAME OF AFFECTED PRODUCT(S)\n\u2022Greencms\nVendor Homepage\n\u2022https://github.com/GreenCMS/GreenCMS\nAFFECTED AND/OR FIXED VERSION(S)\n\u2022V2.3\nSoftware Link\n\u2022https://github.com/GreenCMS/GreenCMS\nPROBLEM TYPE\nVulnerability Type\n\u2022CSRF Vulnerability\nImpact\n\u2022A CSRF vulnerability allows attackers to impersonate legitimate users and perform unauthorized actions on trusted websites where the users are already logged in. Examples include ", "created": "2025-12-26T13:15:22Z", "labels": [], "context": "There is a CSRF vulnerability in /IndexController.class.php of greencms v2.3. There is a CSRF vulnerability in /IndexController.class.php of greencms v2.3.\nNAME OF AFFECTED PRODUCT(S)\n\u2022Greencms\nVendor Homepage\n\u2022https://github.com/GreenCMS/GreenCMS\nAFFECTED AND/OR FIXED VERSION("}


identifier: gh_issue_3763491554
source: github_issue
status: new
created_at: 2025-12-26 13:56:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3763491554", "title": "[FEATURE] Migrate Dockerfile to Docker Hardened Images (DHI)", "url": "https://github.com/nanotaboada/python-samples-fastapi-restful/issues/457", "user": "nanotaboada", "user_url": "https://github.com/nanotaboada", "repo": "python-samples-fastapi-restful", "body_preview": "## Problem\n\nThe current Dockerfile uses the standard `python:3.13.3-slim-bookworm` base image, which contains 152 known vulnerabilities and a larger attack surface than necessary for production deployments. As security requirements become more stringent and compliance becomes increasingly important, we need a more secure, minimal, and actively maintained base image solution.\n\nPain points with the current approach:\n- High number of CVEs in base images requiring constant monitoring and patching\n- ", "created": "2025-12-26T13:38:21Z", "labels": ["enhancement", "python"], "context": "[FEATURE] Migrate Dockerfile to Docker Hardened Images (DHI) ## Problem\n\nThe current Dockerfile uses the standard `python:3.13.3-slim-bookworm` base image, which contains 152 known vulnerabilities and a larger attack surface than necessary for production deploy"}


identifier: gh_issue_3763478986
source: github_issue
status: new
created_at: 2025-12-26 13:56:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3763478986", "title": "Review frontend/UI build manifests (package.json, package-lock.json) present in production Python images?", "url": "https://github.com/apache/airflow/issues/59821", "user": "potiuk", "user_url": "https://github.com/potiuk", "repo": "airflow", "body_preview": "\n### Discussed in https://github.com/apache/airflow/discussions/59820\n\n<div type='discussions-op-text'>\n\n<sup>Originally posted by **ronak-sirwani** December 26, 2025</sup>\nContext:\r\nI recently scanned our Airflow 3.0.6 deployment (using the official apache/airflow:slim-3.0.6-python3.12 image) and encountered a critical severity vulnerability flagged by Snyk in form-data@4.0.1.\r\n\r\nThe Finding:\r\nThe scanner pointed to this path:\r\n/home/airflow/.local/lib/python3.12/site-packages/airflow/api_fasta", "created": "2025-12-26T13:28:07Z", "labels": ["area:UI"], "context": "Review frontend/UI build manifests (package.json, package-lock.json) present in production Python images? \n### Discussed in https://github.com/apache/airflow/discussions/59820\n\n<div type='discussions-op-text'>\n\n<sup>Originally posted by **ronak-sirwani** December 26, 2025</sup>\nContext:\r\nI recently scanne"}


identifier: gh_issue_3763485424
source: github_issue
status: new
created_at: 2025-12-26 14:09:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3763485424", "title": "build fails on linux ", "url": "https://github.com/Zenthrose/Nyx/issues/2", "user": "alirizakeles", "user_url": "https://github.com/alirizakeles", "repo": "Nyx", "body_preview": "Hi,\n\nI wanted to give it a try but the build process failed with some error as I am sharing below.\n\nI am using Manjaro Linux. I have vulkan-headers, cmake and some other vulkan tools and libs installed.  cmake command succeeds. When I open the project with helix editor it is also complaining about same problems shown in the traceback below. I believe I have some missing dev libs / tools. \n\nI am developer but I don't know c++ and its dev tools. I searched online but haven't found anything helpful", "created": "2025-12-26T13:33:22Z", "labels": [], "context": "build fails on linux  Hi,\n\nI wanted to give it a try but the build process failed with some error as I am sharing below.\n\nI am using Manjaro Linux. I have vulkan-headers, cmake and some other vulkan tools and libs installe"}


identifier: gh_issue_3763478788
source: github_issue
status: new
created_at: 2025-12-26 14:09:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3763478788", "title": "The minicms v1.8's /page.php file contains unauthorized page deletion permissions.", "url": "https://github.com/ueh1013/VULN/issues/14", "user": "xuyuhub", "user_url": "https://github.com/xuyuhub", "repo": "VULN", "body_preview": "The minicms v1.8's /page.php file contains unauthorized page deletion permissions.\nNAME OF AFFECTED PRODUCT(S)\n\u2022MiniCMS\nVendor Homepage\n\u2022https://github.com/bg5sbk/MiniCMS\nAFFECTED AND/OR FIXED VERSION(S)\n\u2022V1.8\n\u2022PHP version: 5.2.17\nSoftware Link\n\u2022https://github.com/bg5sbk/MiniCMS\nPROBLEM TYPE\nVulnerability Type\n\u2022Unauthorized page deletion\nImpact\n\u2022The unauthorized page deletion vulnerability poses severe risks. Attackers can delete target website pages without authentication, ranging from basic in", "created": "2025-12-26T13:27:59Z", "labels": [], "context": "The minicms v1.8's /page.php file contains unauthorized page deletion permissions. The minicms v1.8's /page.php file contains unauthorized page deletion permissions.\nNAME OF AFFECTED PRODUCT(S)\n\u2022MiniCMS\nVendor Homepage\n\u2022https://github.com/bg5sbk/MiniCMS\nAFFECTED AND/OR FIXED VERSION"}


identifier: gh_issue_3763529354
source: github_issue
status: new
created_at: 2025-12-26 14:09:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3763529354", "title": "Feature request - SEC: Automated Dependency Hardening via Dependabot", "url": "https://github.com/lornu-ai/lornu-ai/issues/368", "user": "principle-lgtm", "user_url": "https://github.com/principle-lgtm", "repo": "lornu-ai", "body_preview": "---\nname: Feature request\nabout: Automate dependency updates via GitHub Dependabot\ntitle: 'SEC: Automated Dependency Hardening via Dependabot'\nlabels: security, dependencies, maintenance, plan-a\nassignees: ''\n\n---\n\n**Is your feature request related to a problem? Please describe.**\nWith a multi-cloud, multi-language stack (React/Bun, FastAPI/uv, Terraform, Kubernetes), Lornu AI is susceptible to \"dependency rot\" and security vulnerabilities (CVEs). Manually checking for updates across the `fronte", "created": "2025-12-26T14:04:58Z", "labels": [], "context": "Feature request - SEC: Automated Dependency Hardening via Dependabot ---\nname: Feature request\nabout: Automate dependency updates via GitHub Dependabot\ntitle: 'SEC: Automated Dependency Hardening via Dependabot'\nlabels: security, dependencies, maintenance, plan-a\nassig"}


identifier: gh_issue_3763609400
source: github_issue
status: new
created_at: 2025-12-26 15:09:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3763609400", "title": "checkstyle-12.3.0.jar: 3 vulnerabilities (highest severity is: 9.8)", "url": "https://github.com/neziw/IPCheck-Website/issues/54", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "IPCheck-Website", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>checkstyle-12.3.0.jar</b></summary>\n\n<p></p>\n<p>Path to dependency file: /build.gradle.kts</p>\n<p>Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.apache.commons/commons-lang3/3.8.1/6505a72a097d9270f7a9e7bf42c4238283247755/commons-lang3-3.8.1.jar</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://githu", "created": "2025-12-26T15:07:02Z", "labels": ["Mend: dependency security vulnerability"], "context": "checkstyle-12.3.0.jar: 3 vulnerabilities (highest severity is: 9.8) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>checkstyle-12.3.0.jar</b></summary>\n\n<p></p>\n<p"}


identifier: gh_issue_3763607836
source: github_issue
status: new
created_at: 2025-12-26 15:09:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3763607836", "title": "checkstyle-12.3.0.jar: 3 vulnerabilities (highest severity is: 9.8)", "url": "https://github.com/neziw/ReleaseChecker/issues/52", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "ReleaseChecker", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>checkstyle-12.3.0.jar</b></summary>\n\n<p></p>\n<p>Path to dependency file: /build.gradle.kts</p>\n<p>Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/commons-codec/commons-codec/1.11/3acb4705652e16236558f0f4f2192cc33c3bd189/commons-codec-1.11.jar</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/n", "created": "2025-12-26T15:06:13Z", "labels": ["Mend: dependency security vulnerability"], "context": "checkstyle-12.3.0.jar: 3 vulnerabilities (highest severity is: 9.8) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>checkstyle-12.3.0.jar</b></summary>\n\n<p></p>\n<p"}


