# leads

identifier: gh_issue_3746217736
source: github_issue
status: new
created_at: 2025-12-19 06:18:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3746217736", "title": "CVE-2025-22235 (High) detected in spring-boot-3.2.5.jar", "url": "https://github.com/SAST-UP-Global-Config-DEV/SAST-Test-Repo-aee89e8f-5bbb-4550-b7cf-46116b1dbf40/issues/11", "user": "dev-mend-for-github-com[bot]", "user_url": "https://github.com/apps/dev-mend-for-github-com", "repo": "SAST-Test-Repo-aee89e8f-5bbb-4550-b7cf-46116b1dbf40", "body_preview": "## CVE-2025-22235 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-boot-3.2.5.jar</b></summary>\n\n<p>Spring Boot</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-boot\">https://spring.io/projects/spring-boot</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependenc", "created": "2025-12-19T06:10:06Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-22235 (High) detected in spring-boot-3.2.5.jar ## CVE-2025-22235 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3746160058
source: github_issue
status: new
created_at: 2025-12-19 06:44:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3746160058", "title": "Migrate to Docker Hardened Images for Bun", "url": "https://github.com/pattern-zones-co/claude-code-gateway/issues/1", "user": "matthew-petty", "user_url": "https://github.com/matthew-petty", "repo": "claude-code-gateway", "body_preview": "## Summary\n\nMigrate from `oven/bun:1.3.3-slim` to Docker Hardened Images for improved security posture.\n\n## Current State\n\nThe Dockerfile currently uses:\n```dockerfile\nFROM oven/bun:1.3.3-slim AS builder\nFROM oven/bun:1.3.3-slim\n```\n\n## Proposed Change\n\nMigrate to Docker Hardened Images which provide:\n\n- **Zero known CVEs** - Published with no known vulnerabilities\n- **Signed provenance** - Cryptographic attestation of build origin\n- **Complete SBOM** - Software Bill of Materials for supply chai", "created": "2025-12-19T05:48:52Z", "labels": [], "context": "Migrate to Docker Hardened Images for Bun ## Summary\n\nMigrate from `oven/bun:1.3.3-slim` to Docker Hardened Images for improved security posture.\n\n## Current State\n\nThe Dockerfile currently uses:\n```dockerfile\nFROM oven/bun:1.3.3-slim AS buil"}


identifier: gh_issue_3746040874
source: github_issue
status: new
created_at: 2025-12-19 06:44:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3746040874", "title": "[Feature]: Update CI config", "url": "https://github.com/MasahiroSakoda/dotfiles/issues/1403", "user": "MasahiroSakoda", "user_url": "https://github.com/MasahiroSakoda", "repo": "dotfiles", "body_preview": "### Description\n\n- Pin actions to latest commit hash with `pinact`\n  - [x] Install `pinact` via Homebrew\n  - [ ] Initialize `pinact`\n  - [ ] Add env variable: `PINACT_MIN_AGE` for security vulnerability possibilities\n- Update `.github/labeler.yml`\n  - [ ] Add missing labaler config for codex\n  - [ ] Update labaler config for documents\n- [ ] Remove `.github/workflows/ci.yml` for now\n\n### Motivation\n\n- to reduce GitHub Actions running time\n- to improve CI environment\n- to secure from supply chain ", "created": "2025-12-19T04:54:18Z", "labels": ["ci", "security"], "context": "[Feature]: Update CI config ### Description\n\n- Pin actions to latest commit hash with `pinact`\n  - [x] Install `pinact` via Homebrew\n  - [ ] Initialize `pinact`\n  - [ ] Add env variable: `PINACT_MIN_AGE` for security vulnerabili"}


identifier: gh_issue_3746217610
source: github_issue
status: new
created_at: 2025-12-19 06:44:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3746217610", "title": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-DEV/SAST-Test-Repo-aee89e8f-5bbb-4550-b7cf-46116b1dbf40/issues/9", "user": "dev-mend-for-github-com[bot]", "user_url": "https://github.com/apps/dev-mend-for-github-com", "repo": "SAST-Test-Repo-aee89e8f-5bbb-4550-b7cf-46116b1dbf40", "body_preview": "## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-webmvc-6.1.6.jar</b></summary>\n\n<p>Spring Web MVC</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</", "created": "2025-12-19T06:10:03Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar ## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3746217458
source: github_issue
status: new
created_at: 2025-12-19 06:44:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3746217458", "title": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-DEV/SAST-Test-Repo-aee89e8f-5bbb-4550-b7cf-46116b1dbf40/issues/6", "user": "dev-mend-for-github-com[bot]", "user_url": "https://github.com/apps/dev-mend-for-github-com", "repo": "SAST-Test-Repo-aee89e8f-5bbb-4550-b7cf-46116b1dbf40", "body_preview": "## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-19T06:09:58Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3746217388
source: github_issue
status: new
created_at: 2025-12-19 06:44:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3746217388", "title": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-DEV/SAST-Test-Repo-aee89e8f-5bbb-4550-b7cf-46116b1dbf40/issues/5", "user": "dev-mend-for-github-com[bot]", "user_url": "https://github.com/apps/dev-mend-for-github-com", "repo": "SAST-Test-Repo-aee89e8f-5bbb-4550-b7cf-46116b1dbf40", "body_preview": "## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependen", "created": "2025-12-19T06:09:57Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3746128358
source: github_issue
status: new
created_at: 2025-12-19 06:44:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3746128358", "title": "Missing Changelog for Version 7.x - Unofficial Community Changelog", "url": "https://github.com/CacheControl/json-rules-engine/issues/425", "user": "amitav13", "user_url": "https://github.com/amitav13", "repo": "json-rules-engine", "body_preview": "### Summary\n\nVersion 7.x of `json-rules-engine` represents a major version bump from 6.x, but there is no official changelog documenting the changes. This makes it difficult for users to safely upgrade and understand what breaking changes they need to account for.\n\nThe CHANGELOG.md file in the package only goes up to version 6.1.0, leaving versions 6.2.0 through 7.3.1 completely undocumented.\n\n### Impact\n\n- Users are hesitant to upgrade due to unknown breaking changes\n- Security vulnerability in", "created": "2025-12-19T05:32:31Z", "labels": [], "context": "Missing Changelog for Version 7.x - Unofficial Community Changelog ### Summary\n\nVersion 7.x of `json-rules-engine` represents a major version bump from 6.x, but there is no official changelog documenting the changes. This makes it difficult for users to safely upgrad"}


identifier: gh_issue_3746281492
source: github_issue
status: new
created_at: 2025-12-19 06:57:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3746281492", "title": "Security Health Check - GOOD (85/100) - 2025-12-19", "url": "https://github.com/Sami9889/Sami.dev-website/issues/216", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/19/2025, 6:35:50 AM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 9\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Securi", "created": "2025-12-19T06:35:55Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-19 # Security Health Check Report\n\n**Generated:** 12/19/2025, 6:35:50 AM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Inc"}


identifier: gh_issue_3746217206
source: github_issue
status: new
created_at: 2025-12-19 06:57:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3746217206", "title": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-DEV/SAST-Test-Repo-aee89e8f-5bbb-4550-b7cf-46116b1dbf40/issues/1", "user": "dev-mend-for-github-com[bot]", "user_url": "https://github.com/apps/dev-mend-for-github-com", "repo": "SAST-Test-Repo-aee89e8f-5bbb-4550-b7cf-46116b1dbf40", "body_preview": "## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDepend", "created": "2025-12-19T06:09:50Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3746231712
source: github_issue
status: new
created_at: 2025-12-19 07:09:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3746231712", "title": "docs: Add Windows-specific prerequisites and troubleshooting", "url": "https://github.com/tsaijamey/frago/issues/15", "user": "tsaijamey", "user_url": "https://github.com/tsaijamey", "repo": "frago", "body_preview": "## Summary\n\nThe installation documentation has significant gaps for Windows users. Windows is the least supported platform in documentation (4/10 score) despite code having proper Windows handling.\n\n## Critical Issues\n\n### 1. Python Installation Not Mentioned\nWindows does not include Python by default. Documentation assumes `pip` exists.\n\n**Suggested addition:**\n```powershell\n# Microsoft Store (easiest)\n# Search \"Python 3.11\" and install\n\n# Or winget\nwinget install Python.Python.3.11\n\n# Or offic", "created": "2025-12-19T06:17:01Z", "labels": ["documentation", "enhancement"], "context": "docs: Add Windows-specific prerequisites and troubleshooting ## Summary\n\nThe installation documentation has significant gaps for Windows users. Windows is the least supported platform in documentation (4/10 score) despite code having proper Windows handling.\n\n#"}


identifier: gh_issue_3746209388
source: github_issue
status: new
created_at: 2025-12-19 07:09:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3746209388", "title": "docs: Add Linux prerequisites and troubleshooting guide", "url": "https://github.com/tsaijamey/frago/issues/13", "user": "tsaijamey", "user_url": "https://github.com/tsaijamey", "repo": "frago", "body_preview": "## Summary\n\nThe current installation documentation lacks several critical elements for Linux users with minimal or non-Debian systems.\n\n## Missing Content\n\n### 1. System Prerequisites\n- [ ] Python 3.9+ installation guide (per-distro)\n- [ ] curl/wget requirement (needed for nvm installation)\n- [ ] Chrome browser installation for Linux\n\n### 2. Multi-distro Support\n- [ ] Fedora/RHEL commands (dnf)\n- [ ] Arch Linux commands (pacman)\n- [ ] openSUSE commands (zypper)\n\n### 3. Troubleshooting Section\n- ", "created": "2025-12-19T06:06:47Z", "labels": ["documentation", "enhancement"], "context": "docs: Add Linux prerequisites and troubleshooting guide ## Summary\n\nThe current installation documentation lacks several critical elements for Linux users with minimal or non-Debian systems.\n\n## Missing Content\n\n### 1. System Prerequisites\n- [ ] Python 3.9"}


identifier: gh_issue_3745858111
source: github_issue
status: new
created_at: 2025-12-19 07:09:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3745858111", "title": "\ud83d\udea8 Security Vulnerabilities Detected", "url": "https://github.com/naretakis/eapd-next/issues/32", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "eapd-next", "body_preview": "\n## Security Audit Results\n\n**High vulnerabilities:** 1\n**Critical vulnerabilities:** 1\n\n### Recommended Actions\n1. Review the vulnerabilities listed below\n2. Update affected packages using `npm update`\n3. For packages without fixes, consider alternatives\n4. Run `npm audit fix` to automatically fix issues where possible\n\n### Audit Details\n```json\nundefined\n```\n\nThis issue was automatically created by the security audit workflow.\n", "created": "2025-12-19T03:19:27Z", "labels": ["security", "priority: high", "needs-triage"], "context": "\ud83d\udea8 Security Vulnerabilities Detected \n## Security Audit Results\n\n**High vulnerabilities:** 1\n**Critical vulnerabilities:** 1\n\n### Recommended Actions\n1. Review the vulnerabilities listed below\n2. Update affected packages using `npm updat"}


identifier: gh_issue_3745811633
source: github_issue
status: new
created_at: 2025-12-19 07:09:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3745811633", "title": "Update messaging/Think Harder - based on AI reviews on ScienceStudio at the current state", "url": "https://github.com/AIScienceStudio/ScienceStudio/issues/1", "user": "azehady", "user_url": "https://github.com/azehady", "repo": "ScienceStudio", "body_preview": "# ChatGPT\n\nAlright \u2014 **no hype, no sugar-coating. Just a straight technical + product take.**\n\nI\u2019ll judge this as if I were:\n\n* a VC seeing a cold repo\n* a senior engineer deciding whether to contribute\n* a real researcher deciding whether to switch tools\n\n---\n\n## TL;DR (Brutally honest)\n\n**ScienceStudio is intellectually solid, technically coherent, but currently over-ambitious for its maturity and unclear on its sharpest wedge.**\nIt\u2019s a *good project*, not yet a *compelling product*.\n\nIt can b", "created": "2025-12-19T02:56:08Z", "labels": [], "context": "Update messaging/Think Harder - based on AI reviews on ScienceStudio at the current state # ChatGPT\n\nAlright \u2014 **no hype, no sugar-coating. Just a straight technical + product take.**\n\nI\u2019ll judge this as if I were:\n\n* a VC seeing a cold repo\n* a senior engineer deciding whether to contribu"}


identifier: gh_issue_3746532173
source: github_issue
status: new
created_at: 2025-12-19 08:11:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3746532173", "title": "**33 issues found** across 43 files", "url": "https://github.com/ncsound919/Bet-Buddy-/issues/14", "user": "ncsound919", "user_url": "https://github.com/ncsound919", "repo": "Bet-Buddy-", "body_preview": "**33 issues found** across 43 files\r\n\r\n<details>\r\n<summary>Prompt for AI agents (all 33 issues)</summary>\r\n\r\n```text\r\n\r\nCheck if these issues are valid \u2014 if so, understand the root cause of each and fix them.\r\n\r\n\r\n<file name=\".eslintrc.js\">\r\n\r\n<violation number=\"1\" location=\".eslintrc.js:11\">\r\nP2: When using `@typescript-eslint/no-unused-vars`, disable the base `no-unused-vars` rule to prevent duplicate/conflicting reports. The base ESLint rule doesn&#39;t understand TypeScript-specific patterns", "created": "2025-12-19T08:06:55Z", "labels": [], "context": "**33 issues found** across 43 files **33 issues found** across 43 files\r\n\r\n<details>\r\n<summary>Prompt for AI agents (all 33 issues)</summary>\r\n\r\n```text\r\n\r\nCheck if these issues are valid \u2014 if so, understand the root cause of each and f"}


identifier: gh_issue_3746444312
source: github_issue
status: new
created_at: 2025-12-19 08:11:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3746444312", "title": "Security: Setup automated dependency vulnerability scanning", "url": "https://github.com/kyamagu/psd2svg/issues/222", "user": "kyamagu", "user_url": "https://github.com/kyamagu", "repo": "psd2svg", "body_preview": "## Security Enhancement: Automated Dependency Scanning\n\n### Severity\n**MEDIUM** - Proactive security measure\n\n### Description\nThe project currently lacks automated scanning for security vulnerabilities in dependencies. Given that the application:\n1. Parses untrusted PSD files (via `psd-tools`)\n2. Parses font files (via `fonttools`)\n3. Uses browser automation (via `playwright`)\n4. Processes image data (via `pillow`)\n\nRegular dependency security monitoring is critical to catch vulnerabilities earl", "created": "2025-12-19T07:32:28Z", "labels": [], "context": "Security: Setup automated dependency vulnerability scanning ## Security Enhancement: Automated Dependency Scanning\n\n### Severity\n**MEDIUM** - Proactive security measure\n\n### Description\nThe project currently lacks automated scanning for security vulnerabilitie"}


identifier: gh_issue_3746285908
source: github_issue
status: new
created_at: 2025-12-19 08:35:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3746285908", "title": "Read Tambo's Docs and Look for Bugs and documentation Updates", "url": "https://github.com/tambo-ai/strudellm/issues/29", "user": "michaelmagan", "user_url": "https://github.com/michaelmagan", "repo": "strudellm", "body_preview": "docs.tambo.co/llms.txt\n\nCome up with a plan for small PRs to fix any Tambo issues. Make sure we document everywhere we use Tambo, comments and links to relevant docs.", "created": "2025-12-19T06:37:15Z", "labels": [], "context": "Read Tambo's Docs and Look for Bugs and documentation Updates docs.tambo.co/llms.txt\n\nCome up with a plan for small PRs to fix any Tambo issues. Make sure we document everywhere we use Tambo, comments and links to relevant docs."}


identifier: gh_issue_3746632194
source: github_issue
status: new
created_at: 2025-12-19 08:47:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3746632194", "title": "collate_data_diff-0.11.8-py3-none-any.whl: 3 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/Jason-Clark-FG/OpenMetadata-FG/issues/320", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "OpenMetadata-FG", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>collate_data_diff-0.11.8-py3-none-any.whl</b></summary>\n\n<p></p>\n<p>Path to dependency file: /ingestion</p>\n<p>Path to vulnerable library: /tmp/ws-ua_20251219083329_RGDIHN/python_YEWNKJ/202512190833301/env/lib/python3.9/site-packages/urllib3-1.26.20.dist-info</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/Jason-Clark-FG/OpenMetad", "created": "2025-12-19T08:40:56Z", "labels": ["Mend: dependency security vulnerability"], "context": "collate_data_diff-0.11.8-py3-none-any.whl: 3 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>collate_data_diff-0.11.8-py3-none-any.whl</b></"}


identifier: gh_issue_3746632007
source: github_issue
status: new
created_at: 2025-12-19 08:47:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3746632007", "title": "boto3-1.42.13-py3-none-any.whl: 3 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/Jason-Clark-FG/OpenMetadata-FG/issues/319", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "OpenMetadata-FG", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>boto3-1.42.13-py3-none-any.whl</b></summary>\n\n<p></p>\n<p>Path to dependency file: /ingestion</p>\n<p>Path to vulnerable library: /tmp/ws-ua_20251219083329_RGDIHN/python_YEWNKJ/202512190833301/env/lib/python3.9/site-packages/urllib3-1.26.20.dist-info</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/Jason-Clark-FG/OpenMetadata-FG/comm", "created": "2025-12-19T08:40:52Z", "labels": ["Mend: dependency security vulnerability"], "context": "boto3-1.42.13-py3-none-any.whl: 3 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>boto3-1.42.13-py3-none-any.whl</b></summary>\n\n<"}


identifier: gh_issue_3746631160
source: github_issue
status: new
created_at: 2025-12-19 08:47:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3746631160", "title": "openmetadata-service-1.12.0-SNAPSHOT.jar: 3 vulnerabilities (highest severity is: 9.6)", "url": "https://github.com/Jason-Clark-FG/OpenMetadata-FG/issues/318", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "OpenMetadata-FG", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>openmetadata-service-1.12.0-SNAPSHOT.jar</b></summary>\n\n<p></p>\n<p>Path to dependency file: /openmetadata-mcp/pom.xml</p>\n<p>Path to vulnerable library: /openmetadata-mcp/pom.xml,/openmetadata-service/pom.xml</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/Jason-Clark-FG/OpenMetadata-FG/commit/9d91325af8d6b6836292c4bb0ba361ab2cdf1", "created": "2025-12-19T08:40:38Z", "labels": ["Mend: dependency security vulnerability"], "context": "openmetadata-service-1.12.0-SNAPSHOT.jar: 3 vulnerabilities (highest severity is: 9.6) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>openmetadata-service-1.12.0-SNAPSHOT.jar</b></s"}


identifier: gh_issue_3746607096
source: github_issue
status: new
created_at: 2025-12-19 08:47:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3746607096", "title": "[Phase 1] Document EJS transitive dependency vulnerability (build-time only)", "url": "https://github.com/bitpredator/ets2-dashboard-skin/issues/38", "user": "bitpredator", "user_url": "https://github.com/bitpredator", "repo": "ets2-dashboard-skin", "body_preview": "## Summary\n\nGitHub Dependabot and Code Scanning report a critical vulnerability in `ejs@2.7.4`, introduced as a transitive dependency via `@vue/cli-service@4.5.19`.\n\nThe vulnerability allows server-side template injection in specific EJS configuration options.\n\n---\n\n## Dependency chain\n\n@vue/cli-service@4.5.19\n\u2514\u2500 ejs@2.7.4 (vulnerable)\n\n\n---\n\n## Impact assessment\n\n- EJS is used **only at build-time**\n- No runtime usage in the dashboard\n- No user-controlled input reaches EJS\n- No server-side rend", "created": "2025-12-19T08:33:02Z", "labels": [], "context": "[Phase 1] Document EJS transitive dependency vulnerability (build-time only) ## Summary\n\nGitHub Dependabot and Code Scanning report a critical vulnerability in `ejs@2.7.4`, introduced as a transitive dependency via `@vue/cli-service@4.5.19`.\n\nThe vulnerability allows server-si"}


identifier: gh_issue_3746716612
source: github_issue
status: new
created_at: 2025-12-19 09:26:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3746716612", "title": "Daily Hacker News 19-12-2025", "url": "https://github.com/blka/daily-hackernews/issues/248", "user": "blka", "user_url": "https://github.com/blka", "repo": "daily-hackernews", "body_preview": "\n# Daily Hacker News\n\n1. [**Beginning January 2026, all ACM publications will be made open access**](https://dl.acm.org/openaccess) `dl.acm.org` [`comments`](https://news.ycombinator.com/item?id=46313991)\n2. [**Getting bitten by Intel's poor naming schemes**](https://lorendb.dev/posts/getting-bitten-by-poor-naming-schemes/) `lorendb.dev` [`comments`](https://news.ycombinator.com/item?id=46322540)\n3. [**1.5 TB of VRAM on Mac Studio \u2013 RDMA over Thunderbolt 5**](https://www.jeffgeerling.com/blog/20", "created": "2025-12-19T09:09:13Z", "labels": [], "context": "Daily Hacker News 19-12-2025 \n# Daily Hacker News\n\n1. [**Beginning January 2026, all ACM publications will be made open access**](https://dl.acm.org/openaccess) `dl.acm.org` [`comments`](https://news.ycombinator.com/item?id=46313"}


identifier: gh_issue_3746668472
source: github_issue
status: new
created_at: 2025-12-19 09:26:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3746668472", "title": "Daily Content Summary 2025-12-19", "url": "https://github.com/jhengy/content-aggregator/issues/330", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "content-aggregator", "body_preview": "# \ud83d\udcf0 Daily Content Summary - 2025-12-19\n### Executive Summary\n\nThe provided text is not an article but a security verification page from dl.acm.org. It indicates that the website needs to review the security of the connection before proceeding and asks the user to enable JavaScript and cookies to continue. No article content was available for summarization.\nDaniel, a 16-year-old hacker, discovered a critical cross-site scripting (XSS) vulnerability in Mintlify, an AI documentation platform, while", "created": "2025-12-19T08:53:17Z", "labels": ["automated"], "context": "Daily Content Summary 2025-12-19 # \ud83d\udcf0 Daily Content Summary - 2025-12-19\n### Executive Summary\n\nThe provided text is not an article but a security verification page from dl.acm.org. It indicates that the website needs to review the se"}


identifier: gh_issue_3746580038
source: github_issue
status: new
created_at: 2025-12-19 09:26:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3746580038", "title": "Weekly Security Scan Report - Vulnerabilities Found", "url": "https://github.com/Better-Transport-Queensland/website/issues/37", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "website", "body_preview": "## \ud83d\udd12 SecurePR Scan Report\n\n### \ud83d\udd0d Trivy Results\n\nReport Summary\n\n\u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510\n\u2502      Target       \u2502 Type \u2502 Vulnerabilities \u2502 Secrets \u2502\n\u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u253c\u2500\u2500\u2500\u2500\u2500\u2500\u253c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u253c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524\n\u2502 package-lock.json \u2502 npm  \u2502        2        \u2502    -    \u2502\n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2534\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518\nLegend:\n- '-': Not scanned\n- '0': Clean (no security findings detected)\n\n\nFor OSS Maintainers: VEX Notice\n--------------------------------\nIf you're an", "created": "2025-12-19T08:24:03Z", "labels": ["security", "automated-scan"], "context": "Weekly Security Scan Report - Vulnerabilities Found ## \ud83d\udd12 SecurePR Scan Report\n\n### \ud83d\udd0d Trivy Results\n\nReport Summary\n\n\u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u252c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510\n\u2502      Target       \u2502 Type \u2502 Vulnerabilities \u2502 Secrets \u2502\n\u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u253c\u2500"}


identifier: gh_issue_3746393431
source: github_issue
status: new
created_at: 2025-12-19 09:26:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3746393431", "title": "Daily Hacker News 19-12-2025", "url": "https://github.com/Foxhunt/daily-hackernews/issues/527", "user": "Foxhunt", "user_url": "https://github.com/Foxhunt", "repo": "daily-hackernews", "body_preview": "\n# Daily Hacker News\n  \n1. [**2026 Apple introducing more ads to increase opportunity in search results**](https://ads.apple.com/app-store/help/ad-placements/0082-search-results) `ads.apple.com` [`comments`](https://news.ycombinator.com/item?id=46322556)  \n2. [**Beginning January 2026, all ACM publications will be made open access**](https://dl.acm.org/openaccess) `dl.acm.org` [`comments`](https://news.ycombinator.com/item?id=46313991)  \n3. [**Getting bitten by Intel's poor naming scenes**](http", "created": "2025-12-19T07:15:04Z", "labels": [], "context": "Daily Hacker News 19-12-2025 \n# Daily Hacker News\n  \n1. [**2026 Apple introducing more ads to increase opportunity in search results**](https://ads.apple.com/app-store/help/ad-placements/0082-search-results) `ads.apple.com` [`com"}


identifier: gh_issue_3746342853
source: github_issue
status: new
created_at: 2025-12-19 09:26:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3746342853", "title": "Hacker News Daily Top 30 @2025-12-19", "url": "https://github.com/meixger/hackernews-daily/issues/1189", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "hackernews-daily", "body_preview": "1. [**Beginning January 2026, all ACM publications will be made open access** <code>dl.acm.org</code>](https://dl.acm.org/openaccess) - [171 comments 1582 points](https://news.ycombinator.com/item?id=46313991)\n2. [**We pwned X, Vercel, Cursor, and Discord through a supply-chain attack** <code>gist.github.com</code>](https://gist.github.com/hackermondev/5e2cdc32849405fff6b46957747a2d28) - [299 comments 755 points](https://news.ycombinator.com/item?id=46317098)\n3. [**Your job is to deliver code yo", "created": "2025-12-19T06:55:47Z", "labels": [], "context": "Hacker News Daily Top 30 @2025-12-19 1. [**Beginning January 2026, all ACM publications will be made open access** <code>dl.acm.org</code>](https://dl.acm.org/openaccess) - [171 comments 1582 points](https://news.ycombinator.com/item?id="}


identifier: gh_issue_3746808334
source: github_issue
status: new
created_at: 2025-12-19 09:39:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3746808334", "title": "[Bug]: Connection pool exhaustion with server compression enabled on Spring Boot 4.x", "url": "https://github.com/wiremock/wiremock-spring-boot/issues/185", "user": "riccardo-masseroni", "user_url": "https://github.com/riccardo-masseroni", "repo": "wiremock-spring-boot", "body_preview": "### Plugin Version\n\n4.0.8\n\n### Dependencies\n\n```shell\n[INFO] com.example:demo:jar:0.0.1-SNAPSHOT\n[INFO] +- org.springframework.boot:spring-boot-starter-webmvc:jar:4.0.1:compile\n[INFO] |  +- org.springframework.boot:spring-boot-starter:jar:4.0.1:compile\n[INFO] |  |  +- org.springframework.boot:spring-boot-starter-logging:jar:4.0.1:compile\n[INFO] |  |  |  +- ch.qos.logback:logback-classic:jar:1.5.22:compile\n[INFO] |  |  |  |  \\- ch.qos.logback:logback-core:jar:1.5.22:compile\n[INFO] |  |  |  +- org", "created": "2025-12-19T09:38:16Z", "labels": ["bug"], "context": "[Bug]: Connection pool exhaustion with server compression enabled on Spring Boot 4.x ### Plugin Version\n\n4.0.8\n\n### Dependencies\n\n```shell\n[INFO] com.example:demo:jar:0.0.1-SNAPSHOT\n[INFO] +- org.springframework.boot:spring-boot-starter-webmvc:jar:4.0.1:compile\n[INFO] |  +- org.spring"}


identifier: gh_issue_3746742231
source: github_issue
status: new
created_at: 2025-12-19 09:51:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3746742231", "title": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected", "url": "https://github.com/truckercore/truckercore1/issues/151", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "truckercore1", "body_preview": "# Security Audit Report - 2025-12-19\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/util vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-9j5q-479x-43g2\nfix available via `npm audit fix --force`\nWill install @stryker-mutator/vitest-runner@8.7.1, which is outside the stated dependency range\nnode_modules/@stryker-mutator/util\n  @stryker-mutator/core  <=8.7.0\n  D", "created": "2025-12-19T09:16:44Z", "labels": ["security", "dependencies", "automated"], "context": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected # Security Audit Report - 2025-12-19\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/"}


identifier: gh_issue_3746872768
source: github_issue
status: new
created_at: 2025-12-19 10:03:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3746872768", "title": "[CRITICAL] Security Vulnerability in xmldom", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/755", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-39353\n\n**Description:**\nxmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. xmldom parses XML that is not well-formed because it contains multiple top level elements, and adds all root nodes to the `childNodes` collection of the `Document`, without reporting any error or throwing. This bre", "created": "2025-12-19T09:58:42Z", "labels": [], "context": "[CRITICAL] Security Vulnerability in xmldom ## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-39353\n\n**Description:**\nxmldom is a pure JavaScr"}


identifier: gh_issue_3746872629
source: github_issue
status: new
created_at: 2025-12-19 10:03:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3746872629", "title": "[CRITICAL] Security Vulnerability in xmldom", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/754", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-37616\n\n**Description:**\nA prototype pollution vulnerability exists in the function copy in dom.js in the xmldom (published as @xmldom/xmldom) package before 0.8.3 for Node.js via the p variable. NOTE: the vendor states \"we are in the process of marking this report as invalid\"; however, some third parties takes the position that \"A prototype injec", "created": "2025-12-19T09:58:39Z", "labels": [], "context": "[CRITICAL] Security Vulnerability in xmldom ## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-37616\n\n**Description:**\nA prototype pollution vu"}


identifier: gh_issue_3746872483
source: github_issue
status: new
created_at: 2025-12-19 10:03:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3746872483", "title": "[MEDIUM] Security Vulnerability in xmldom", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/753", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-32796\n\n**Description:**\nxmldom is an open source pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.6.0 and older do not correctly escape special characters when serializing elements removed from their ancestor. This may lead to unexpected syntactic changes during XML processing in some d", "created": "2025-12-19T09:58:36Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in xmldom ## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-32796\n\n**Description:**\nxmldom is an open source p"}


identifier: gh_issue_3746872331
source: github_issue
status: new
created_at: 2025-12-19 10:03:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3746872331", "title": "[LOW] Security Vulnerability in node-fetch", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/752", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process would end without failure. For most people, this fix will have a little or no impact. However, if you are re", "created": "2025-12-19T09:58:33Z", "labels": [], "context": "[LOW] Security Vulnerability in node-fetch ## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before version"}


identifier: gh_issue_3746872197
source: github_issue
status: new
created_at: 2025-12-19 10:03:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3746872197", "title": "[MEDIUM] Security Vulnerability in node-fetch", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/751", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-0235\n\n**Description:**\nnode-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2022-0235\\\"],\\\"published\\\":\\\"2022-01-16T17:15:07.870\\\",\\\"lastModified\\\":\\\"2024-11-21T06:38:12.150\\\",\\\"version\\\":\\\"3.1\\\",\\\"vectorString\\\":\\\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/", "created": "2025-12-19T09:58:30Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in node-fetch ## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-0235\n\n**Description:**\nnode-fetch is vulnerabl"}


identifier: gh_issue_3746893408
source: github_issue
status: new
created_at: 2025-12-19 10:41:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3746893408", "title": "GitHub Changelog:CodeQL 2.23.7 and 2.23.8 add security queries for Go and Rust", "url": "https://github.com/shundor/github-changelog-reader/issues/629", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "github-changelog-reader", "body_preview": "# CodeQL 2.23.7 and 2.23.8 add security queries for Go and Rust\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\" \"http://www.w3.org/TR/REC-html40/loose.dtd\">\n<html><body><p>CodeQL is the static analysis engine behind GitHub&rsquo;s <a href=\"https://docs.github.com/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning-with-codeql\">Code Scanning</a> and <a href=\"https://docs.github.com/code-security/code-quality/concepts/about-code-quality\">Code Quality</a> pr", "created": "2025-12-19T10:04:55Z", "labels": ["changelog"], "context": "GitHub Changelog:CodeQL 2.23.7 and 2.23.8 add security queries for Go and Rust # CodeQL 2.23.7 and 2.23.8 add security queries for Go and Rust\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\" \"http://www.w3.org/TR/REC-html40/loose.dtd\">\n<html><body><p>CodeQL is the"}


identifier: gh_issue_3746884878
source: github_issue
status: new
created_at: 2025-12-19 10:41:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3746884878", "title": "GitHub Changelog:CodeQL 2.23.7 and 2.23.8 add security queries for Go and Rust", "url": "https://github.com/renefritze/github-changelog-reader/issues/258", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "github-changelog-reader", "body_preview": "# CodeQL 2.23.7 and 2.23.8 add security queries for Go and Rust\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\" \"http://www.w3.org/TR/REC-html40/loose.dtd\">\n<html><body><p>CodeQL is the static analysis engine behind GitHub&rsquo;s <a href=\"https://docs.github.com/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning-with-codeql\">Code Scanning</a> and <a href=\"https://docs.github.com/code-security/code-quality/concepts/about-code-quality\">Code Quality</a> pr", "created": "2025-12-19T10:02:22Z", "labels": ["changelog"], "context": "GitHub Changelog:CodeQL 2.23.7 and 2.23.8 add security queries for Go and Rust # CodeQL 2.23.7 and 2.23.8 add security queries for Go and Rust\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\" \"http://www.w3.org/TR/REC-html40/loose.dtd\">\n<html><body><p>CodeQL is the"}


identifier: gh_issue_3745985396
source: github_issue
status: new
created_at: 2025-12-19 11:07:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3745985396", "title": "Talawa Admin - Refactoring (2025 - 2026) - ErrorBoundaryWrapper", "url": "https://github.com/PalisadoesFoundation/talawa-admin/issues/5169", "user": "palisadoes", "user_url": "https://github.com/palisadoes", "repo": "talawa-admin", "body_preview": "Misc", "created": "2025-12-19T04:30:42Z", "labels": ["unapproved"], "context": "Talawa Admin - Refactoring (2025 - 2026) - ErrorBoundaryWrapper Misc"}


identifier: gh_issue_3747113980
source: github_issue
status: new
created_at: 2025-12-19 11:20:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3747113980", "title": "Contextual Branding", "url": "https://github.com/Pcnaid-Dev/dcvaas-delegated-dcv-main/issues/73", "user": "Pcnaid-Dev", "user_url": "https://github.com/Pcnaid-Dev", "repo": "dcvaas-delegated-dcv-main", "body_preview": "Implement the branding and marketing guidelines provided below.\n\n#1 KeylessSSL Branding\n\n1) BRAND SUMMARY (max 10 bullets)\n\u25cf\n\u25cf\n\u25cf\n\u25cf\n\u25cf\n\u25cf\n\u25cf\n\u25cf\n\u25cf\n\u25cf\nDomain / brand: keylessssl.dev \u2014 security-first, API-first, developer-to-developer\nDCVaaS skin.\nTarget persona: Devs, DevOps, CTOs building SaaS / multi-tenant custom domains;\npeople who\u2019ve been burned by cert automation.\nPositioning: Delegated DCV (DNS-01/ACME) that removes root DNS credentials from\nthe pipeline; \u201cDelegated DCV, not delegated trust.\n\u201d\nPr", "created": "2025-12-19T11:07:22Z", "labels": ["enhancement"], "context": "Contextual Branding Implement the branding and marketing guidelines provided below.\n\n#1 KeylessSSL Branding\n\n1) BRAND SUMMARY (max 10 bullets)\n\u25cf\n\u25cf\n\u25cf\n\u25cf\n\u25cf\n\u25cf\n\u25cf\n\u25cf\n\u25cf\n\u25cf\nDomain / brand: keylessssl.dev \u2014 security-first, API-firs"}


identifier: gh_issue_3747046858
source: github_issue
status: new
created_at: 2025-12-19 11:20:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3747046858", "title": "[BleepingComputer] New critical WatchGuard Firebox firewall flaw exploited in attacks", "url": "https://github.com/SecOpsNews/news/issues/61198", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "news", "body_preview": "\n\nWatchGuard has warned customers to patch a critical, actively exploited remote code execution (RCE) vulnerability in its Firebox firewalls. \\[...\\]\n\n\n\n<https://www.bleepingcomputer.com/news/security/watchguard-warns-of-new-rce-flaw-in-firebox-firewalls-exploited-in-attacks/>\n\n", "created": "2025-12-19T10:46:17Z", "labels": ["BleepingComputer"], "context": "[BleepingComputer] New critical WatchGuard Firebox firewall flaw exploited in attacks \n\nWatchGuard has warned customers to patch a critical, actively exploited remote code execution (RCE) vulnerability in its Firebox firewalls. \\[...\\]\n\n\n\n<https://www.bleepingcomputer.com/news/security"}


identifier: gh_issue_3747024684
source: github_issue
status: new
created_at: 2025-12-19 11:20:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3747024684", "title": "Continuous Threat & Vulnerability Management: GitHub Integration", "url": "https://github.com/doogie-bigmack/shaart/issues/32", "user": "doogie-bigmack", "user_url": "https://github.com/doogie-bigmack", "repo": "shaart", "body_preview": "## Summary\nAdd GitHub integration to automatically create issues for discovered vulnerabilities with detailed remediation guidance, enabling continuous vulnerability lifecycle management from discovery \u2192 tracking \u2192 remediation \u2192 verification.\n\n## Problem Statement\nCurrently, Shaart discovers vulnerabilities but outputs them only as markdown reports in the `deliverables/` directory. There's no built-in workflow for:\n- Tracking remediation progress\n- Assigning vulnerabilities to developers\n- Provi", "created": "2025-12-19T10:39:59Z", "labels": [], "context": "Continuous Threat & Vulnerability Management: GitHub Integration ## Summary\nAdd GitHub integration to automatically create issues for discovered vulnerabilities with detailed remediation guidance, enabling continuous vulnerability lifecycle management from discover"}


identifier: gh_issue_3747110029
source: github_issue
status: new
created_at: 2025-12-19 11:32:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3747110029", "title": "Upgrade Vite/Vitest to resolve remaining security vulnerabilities", "url": "https://github.com/yasutakesougo/audit-management-system-mvp/issues/80", "user": "yasutakesougo", "user_url": "https://github.com/yasutakesougo", "repo": "audit-management-system-mvp", "body_preview": "## \ud83c\udfaf Overview\nAfter `npm audit fix`, 10 vulnerabilities remain that require major version upgrades.\n\n## \ud83d\udcca Current State\n```\nRemaining: 10 vulnerabilities\n\u251c\u2500 Moderate: 6\n\u2514\u2500 Low:      4\n\nBlocked by:\n\u251c\u2500 Vite/esbuild (requires Vite 7 major)\n\u251c\u2500 Vitest (requires Vitest 4 major)\n\u2514\u2500 tmp via @lhci/cli/inquirer (requires @lhci/cli 0.1.0)\n```\n\n## \ud83d\udd27 Required Upgrades\n\n### 1. Vite \ud83d\udce6\n- Current: 4.5.14\n- Latest: 7.3.0\n- Change: Major (4 \u2192 7)\n- Risk: High (breaking changes expected)\n\nMigration guides:\n- https:/", "created": "2025-12-19T11:06:12Z", "labels": ["enhancement"], "context": "Upgrade Vite/Vitest to resolve remaining security vulnerabilities ## \ud83c\udfaf Overview\nAfter `npm audit fix`, 10 vulnerabilities remain that require major version upgrades.\n\n## \ud83d\udcca Current State\n```\nRemaining: 10 vulnerabilities\n\u251c\u2500 Moderate: 6\n\u2514\u2500 Low:      4\n\nBlocked by:\n\u251c\u2500 "}


identifier: gh_issue_3746849123
source: github_issue
status: new
created_at: 2025-12-19 11:32:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3746849123", "title": "[Phase 1] Security Architecture & Data Privacy Strategy", "url": "https://github.com/andrekirst/family2/issues/8", "user": "andrekirst", "user_url": "https://github.com/andrekirst", "repo": "family2", "body_preview": "# Security Architecture & Data Privacy Strategy\n\n**Parent Issue**: #4\n**Agents**: @agent-security-engineer, @agent-compliance-auditor, @agent-penetration-tester\n**Priority**: CRITICAL (Highest Priority)\n**Phase**: 1 - Planning & Architecture\n\n## Context\n\nDesign comprehensive security and privacy architecture for Family Hub. Given the sensitive nature of family data (children's information, health records, financial data, location), this is the HIGHEST PRIORITY work stream.\n\n## Critical Requireme", "created": "2025-12-19T09:51:35Z", "labels": [], "context": "[Phase 1] Security Architecture & Data Privacy Strategy # Security Architecture & Data Privacy Strategy\n\n**Parent Issue**: #4\n**Agents**: @agent-security-engineer, @agent-compliance-auditor, @agent-penetration-tester\n**Priority**: CRITICAL (Highest Priorit"}


identifier: gh_issue_3747251039
source: github_issue
status: new
created_at: 2025-12-19 11:58:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3747251039", "title": "Security vulnerability in access control software allowing unauthorized access by dogs (1766145163) ", "url": "https://github.com/forest-town/pwr-release1/issues/1", "user": "pipcrispy", "user_url": "https://github.com/pipcrispy", "repo": "pwr-release1", "body_preview": "### Description:\n\nOur access control software has a critical security vulnerability that allows dogs to access the database without authentication. This issue poses a significant risk to the security and integrity of our system, as it allows unauthorized parties to gain access to sensitive information and potentially cause damage.\n\n### Steps to Reproduce:\n\nHave a dog (or any animal with paws) attempt to access the database without authentication.\nThe system should allow access without requiring ", "created": "2025-12-19T11:52:44Z", "labels": ["bug", "documentation"], "context": "Security vulnerability in access control software allowing unauthorized access by dogs (1766145163)  ### Description:\n\nOur access control software has a critical security vulnerability that allows dogs to access the database without authentication. This issue poses a significant risk to the security "}


identifier: gh_issue_3747242171
source: github_issue
status: new
created_at: 2025-12-19 11:58:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3747242171", "title": "[HackerNews] WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN Vulnerability", "url": "https://github.com/SecOpsNews/news/issues/61203", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "news", "body_preview": "\n\nWatchGuard has released fixes to address a critical security flaw in Fireware OS that it said has been exploited in real-world attacks.\nTracked as CVE-2025-14733 (CVSS score: 9.3), the vulnerability has been described as a case of out-of-bounds write affecting the iked process that could allow a remote unauthenticated attacker to execute arbitrary code.\n\"This vulnerability affects both the\n\n\n\n<https://thehackernews.com/2025/12/watchguard-warns-of-active-exploitation.html>\n\n", "created": "2025-12-19T11:50:04Z", "labels": ["HackerNews"], "context": "[HackerNews] WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN Vulnerability \n\nWatchGuard has released fixes to address a critical security flaw in Fireware OS that it said has been exploited in real-world attacks.\nTracked as CVE-2025-14733 (CVSS score: 9.3), the vulnerability"}


identifier: gh_issue_3747221867
source: github_issue
status: new
created_at: 2025-12-19 11:58:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3747221867", "title": "React CVE", "url": "https://github.com/context-labs/aella-data-explorer/issues/2", "user": "elloza", "user_url": "https://github.com/elloza", "repo": "aella-data-explorer", "body_preview": "https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components", "created": "2025-12-19T11:43:43Z", "labels": [], "context": "React CVE https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components"}


identifier: gh_issue_3747221262
source: github_issue
status: new
created_at: 2025-12-19 11:58:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3747221262", "title": "\ud83d\udd34 [SAST] 22134cbf-4d79-4464-a5cf-e49bbd5783b5:good/vulpy-ssl.py:29 (1 occurrence)", "url": "https://github.com/JulienZammit/vulpy/issues/833", "user": "test-recette-alpha[bot]", "user_url": "https://github.com/apps/test-recette-alpha", "repo": "vulpy", "body_preview": "## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n**1** occurrence(s) of **22134cbf-4d79-4464-a5cf-e49bbd5783b5:good/vulpy-ssl.py:29** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nThis vulnerability occurs when a Flask application is launched with **debug mode** enabled in a production environment. In the provided code example, the call `app.run(\"0.0.0.0\", debug=True)` within the `__main__` block activates the Werkzeug debugger, which:\r\n\r\n- Exposes **interactive traceback in", "created": "2025-12-19T11:43:35Z", "labels": [], "context": "\ud83d\udd34 [SAST] 22134cbf-4d79-4464-a5cf-e49bbd5783b5:good/vulpy-ssl.py:29 (1 occurrence) ## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n**1** occurrence(s) of **22134cbf-4d79-4464-a5cf-e49bbd5783b5:good/vulpy-ssl.py:29** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n"}


identifier: gh_issue_3747220034
source: github_issue
status: new
created_at: 2025-12-19 11:58:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3747220034", "title": "\ud83d\udd34 [SAST] b062650a-640c-46ad-80ab-c7ca3a0dd340:bad/vulpy-ssl.py:29 (1 occurrence)", "url": "https://github.com/JulienZammit/vulpy/issues/825", "user": "test-recette-alpha[bot]", "user_url": "https://github.com/apps/test-recette-alpha", "repo": "vulpy", "body_preview": "## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n**1** occurrence(s) of **b062650a-640c-46ad-80ab-c7ca3a0dd340:bad/vulpy-ssl.py:29** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nThis vulnerability occurs when a Flask application is launched with **debug mode** enabled in a production environment. In the provided code example, the call `app.run(\"0.0.0.0\", debug=True)` within the `__main__` block activates the Werkzeug debugger, which:\r\n\r\n- Exposes **interactive traceback int", "created": "2025-12-19T11:43:14Z", "labels": [], "context": "\ud83d\udd34 [SAST] b062650a-640c-46ad-80ab-c7ca3a0dd340:bad/vulpy-ssl.py:29 (1 occurrence) ## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n**1** occurrence(s) of **b062650a-640c-46ad-80ab-c7ca3a0dd340:bad/vulpy-ssl.py:29** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\n"}


identifier: gh_issue_3747211818
source: github_issue
status: new
created_at: 2025-12-19 11:58:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3747211818", "title": "[Snyk] Fix for 2 vulnerabilities", "url": "https://github.com/Expensify/App/issues/78116", "user": "melvin-bot[bot]", "user_url": "https://github.com/apps/melvin-bot", "repo": "App", "body_preview": "![snyk-top-banner](https://res.cloudinary.com/snyk/image/upload/r-d/scm-platform/snyk-pull-requests/pr-banner-default.svg)\n\n### Snyk has created this PR to fix 2 vulnerabilities in the npm dependencies of this project.\n\n#### Snyk changed the following file(s):\n\n- `package.json`\n\n\n\n<details>\n<summary>\u26a0\ufe0f <b>Warning</b></summary>\n\n```\nFailed to update the package-lock.json, please update manually before merging.\n```\n\n</details>\n\n\n\n#### Vulnerabilities that will be fixed with an upgrade:\n\n|  | Issue", "created": "2025-12-19T11:40:41Z", "labels": ["Weekly", "Internal"], "context": "[Snyk] Fix for 2 vulnerabilities ![snyk-top-banner](https://res.cloudinary.com/snyk/image/upload/r-d/scm-platform/snyk-pull-requests/pr-banner-default.svg)\n\n### Snyk has created this PR to fix 2 vulnerabilities in the npm dependencie"}


identifier: gh_issue_3746879185
source: github_issue
status: new
created_at: 2025-12-19 11:58:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3746879185", "title": "Need permission and access to host new plugin", "url": "https://github.com/jenkins-infra/repository-permissions-updater/issues/4850", "user": "atmnksd", "user_url": "https://github.com/atmnksd", "repo": "repository-permissions-updater", "body_preview": "### Repository URL\n\nhttps://github.com/sedstart/sedstart-runner\n\n### New Repository Name\n\nsedstart-runner-plugin\n\n### Description\n\nSedstart Runner is Jenkins Plugin that simplies running tests on sedstart.com platform. sedstart.com is no code Test Automation Platform and this plugin helps users of platform to run their tests in their jenkins pipelines.\n\n### GitHub users to have commit permission\n\n@atmnksd\n\n### Jenkins project users to have release permission\n\n@atmnksd\n\n### Automated release via ", "created": "2025-12-19T10:00:35Z", "labels": ["hosting-request", "needs-fix", "security-audit-needs-correction"], "context": "Need permission and access to host new plugin ### Repository URL\n\nhttps://github.com/sedstart/sedstart-runner\n\n### New Repository Name\n\nsedstart-runner-plugin\n\n### Description\n\nSedstart Runner is Jenkins Plugin that simplies running tests on seds"}


identifier: gh_issue_3747333481
source: github_issue
status: new
created_at: 2025-12-19 12:22:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3747333481", "title": "[MEDIUM] Security Vulnerability in express", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3646", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-29041\n\n**Description:**\nExpress.js minimalist web framework for node. Versions of Express.js prior to 4.19.0 and all pre-release alpha and beta versions of 5.0 are affected by an open redirect vulnerability using malformed URLs. When a user of Express performs a redirect using a user-provided URL Express performs an encode [using `encodeurl`](http", "created": "2025-12-19T12:16:36Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in express ## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-29041\n\n**Description:**\nExpress.js minimalist web"}


identifier: gh_issue_3747333413
source: github_issue
status: new
created_at: 2025-12-19 12:22:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3747333413", "title": "[MEDIUM] Security Vulnerability in express", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3645", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-29041\n\n**Description:**\nExpress.js minimalist web framework for node. Versions of Express.js prior to 4.19.0 and all pre-release alpha and beta versions of 5.0 are affected by an open redirect vulnerability using malformed URLs. When a user of Express performs a redirect using a user-provided URL Express performs an encode [using `encodeurl`](http", "created": "2025-12-19T12:16:35Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in express ## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-29041\n\n**Description:**\nExpress.js minimalist web"}


identifier: gh_issue_3747332878
source: github_issue
status: new
created_at: 2025-12-19 12:22:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3747332878", "title": "[MEDIUM] Security Vulnerability in express", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3644", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-29041\n\n**Description:**\nExpress.js minimalist web framework for node. Versions of Express.js prior to 4.19.0 and all pre-release alpha and beta versions of 5.0 are affected by an open redirect vulnerability using malformed URLs. When a user of Express performs a redirect using a user-provided URL Express performs an encode [using `encodeurl`](http", "created": "2025-12-19T12:16:29Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in express ## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-29041\n\n**Description:**\nExpress.js minimalist web"}


identifier: gh_issue_3747328259
source: github_issue
status: new
created_at: 2025-12-19 12:22:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3747328259", "title": "[TASK] Configure security scanning (cargo-audit)", "url": "https://github.com/LepistaBioinformatics/mycelium/issues/121", "user": "sgelias", "user_url": "https://github.com/sgelias", "repo": "mycelium", "body_preview": "**Is your task request related to a feature? Reference feature here**\n#61\n\n**Describe the task steps**\nConfigure cargo-audit to automatically scan for security vulnerabilities in dependencies. This is the fifth item listed in the \"To obtain Passing Badge\" section of issue #61.\n\nImplementation requirements:\n- Add a security job to the GitHub Actions workflow\n- Install and run cargo-audit to check for known vulnerabilities\n- Configure the job to fail if critical vulnerabilities are found\n- Conside", "created": "2025-12-19T12:15:06Z", "labels": ["unassigned"], "context": "[TASK] Configure security scanning (cargo-audit) **Is your task request related to a feature? Reference feature here**\n#61\n\n**Describe the task steps**\nConfigure cargo-audit to automatically scan for security vulnerabilities in dependencies. This is"}


identifier: gh_issue_3747286793
source: github_issue
status: new
created_at: 2025-12-19 12:22:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3747286793", "title": "CVE-2025-46295 (Critical) detected in commons-text-1.8.jar", "url": "https://github.com/KDWSS/dd-trace-java/issues/815", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "dd-trace-java", "body_preview": "## CVE-2025-46295 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>commons-text-1.8.jar</b></summary>\n\n<p>Apache Commons Text is a library focused on algorithms working on strings.</p>\n<p>Library home page: <a href=\"https://www.apache.org/\">https://www.apache.org/</a></p>\n<p>Path to vulnerable library: /home/wss-scanner/.m2/repository/org/apache/commons/common", "created": "2025-12-19T12:02:45Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-46295 (Critical) detected in commons-text-1.8.jar ## CVE-2025-46295 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3747317477
source: github_issue
status: new
created_at: 2025-12-19 12:48:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3747317477", "title": "Update Vite/esbuild to fix development server vulnerability", "url": "https://github.com/Meridian-Knowledge-Solutions/fedramp-trust-center/issues/1", "user": "fortetroy", "user_url": "https://github.com/fortetroy", "repo": "fedramp-trust-center", "body_preview": "## Issue\nThe project has vulnerable dependencies in the development toolchain.\n\n**npm audit Finding:**\n```\nesbuild <=0.24.2 - Moderate severity\nGHSA-67mh-4wv8-2f99: esbuild enables any website to send requests to development server\nvite 0.11.0 - 6.1.6 depends on vulnerable esbuild\n```\n\n## Why This Is a Problem\n- In development mode, any website could send requests to the Vite dev server and read responses\n- This could leak source code or sensitive development data\n- While primarily a dev-mode is", "created": "2025-12-19T12:11:52Z", "labels": [], "context": "Update Vite/esbuild to fix development server vulnerability ## Issue\nThe project has vulnerable dependencies in the development toolchain.\n\n**npm audit Finding:**\n```\nesbuild <=0.24.2 - Moderate severity\nGHSA-67mh-4wv8-2f99: esbuild enables any website to send"}


identifier: gh_issue_3747470949
source: github_issue
status: new
created_at: 2025-12-19 13:14:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3747470949", "title": "Fix 4 security findings on 8 assets (critical severity)", "url": "https://github.com/Bajusz15/beacon/issues/41", "user": "Bajusz15", "user_url": "https://github.com/Bajusz15", "repo": "beacon", "body_preview": "Mondoo has assigned this ticket to fix 4 components with critical vulnerabilities on 8 assets. The risk score was evaluated to 100/100\n\nWhy it matters:\n\n- Risk score: 100/100 is critical, [link](https://mondoo.com/docs/platform/security/posture/findings/) for details\n- Risk factors: Known exploited vulnerability (3/3)\n- First detected: October 15, 2025\n- About the Mondoo scoring method: [link](https://mondoo.com/docs/platform/security/posture/findings/)\n\n\n## Apply CVE-2025-48064 on Windows Serve", "created": "2025-12-19T13:04:23Z", "labels": ["mondoo", "security", "vulnerability"], "context": "Fix 4 security findings on 8 assets (critical severity) Mondoo has assigned this ticket to fix 4 components with critical vulnerabilities on 8 assets. The risk score was evaluated to 100/100\n\nWhy it matters:\n\n- Risk score: 100/100 is critical, [link](https"}


identifier: gh_issue_3747461167
source: github_issue
status: new
created_at: 2025-12-19 13:14:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3747461167", "title": "Multiple high and critical CVEs in 8.0.3-1-ubi9", "url": "https://github.com/confluentinc/kafka-images/issues/449", "user": "hovsep", "user_url": "https://github.com/hovsep", "repo": "kafka-images", "body_preview": "`confluentinc/cp-kafka-connect@8.0.3-1-ubi9`scanned with Trivy:\n\n| Rule ID | Severity | Rule details | Location |\n| --- | --- | --- | --- |\n| [CVE-2025-12383](https://avd.aquasec.com/nvd/cve-2025-12383) | 9.5 | Package: org.glassfish.jersey.core:jersey-client<br/>Installed Version: 3.1.9<br/>Vulnerability CVE-2025-12383<br/>Severity: CRITICAL<br/>Fixed Version: 2.46, 3.0.17, 3.1.10<br/>Link: [CVE-2025-12383](https://avd.aquasec.com/nvd/cve-2025-12383) | usr/share/java/rest-utils/jersey-client-3.", "created": "2025-12-19T13:01:00Z", "labels": [], "context": "Multiple high and critical CVEs in 8.0.3-1-ubi9 `confluentinc/cp-kafka-connect@8.0.3-1-ubi9`scanned with Trivy:\n\n| Rule ID | Severity | Rule details | Location |\n| --- | --- | --- | --- |\n| [CVE-2025-12383](https://avd.aquasec.com/nvd/cve-2025-1238"}


identifier: gh_issue_3747447273
source: github_issue
status: new
created_at: 2025-12-19 13:14:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3747447273", "title": "[CRITICAL] Security Vulnerability in xmldom", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/830", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-39353\n\n**Description:**\nxmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. xmldom parses XML that is not well-formed because it contains multiple top level elements, and adds all root nodes to the `childNodes` collection of the `Document`, without reporting any error or throwing. This bre", "created": "2025-12-19T12:55:42Z", "labels": [], "context": "[CRITICAL] Security Vulnerability in xmldom ## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-39353\n\n**Description:**\nxmldom is a pure JavaScr"}


identifier: gh_issue_3747447147
source: github_issue
status: new
created_at: 2025-12-19 13:14:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3747447147", "title": "[CRITICAL] Security Vulnerability in xmldom", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/829", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-37616\n\n**Description:**\nA prototype pollution vulnerability exists in the function copy in dom.js in the xmldom (published as @xmldom/xmldom) package before 0.8.3 for Node.js via the p variable. NOTE: the vendor states \"we are in the process of marking this report as invalid\"; however, some third parties takes the position that \"A prototype injec", "created": "2025-12-19T12:55:39Z", "labels": [], "context": "[CRITICAL] Security Vulnerability in xmldom ## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-37616\n\n**Description:**\nA prototype pollution vu"}


identifier: gh_issue_3747447040
source: github_issue
status: new
created_at: 2025-12-19 13:14:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3747447040", "title": "[MEDIUM] Security Vulnerability in xmldom", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/828", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-32796\n\n**Description:**\nxmldom is an open source pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.6.0 and older do not correctly escape special characters when serializing elements removed from their ancestor. This may lead to unexpected syntactic changes during XML processing in some d", "created": "2025-12-19T12:55:36Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in xmldom ## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-32796\n\n**Description:**\nxmldom is an open source p"}


identifier: gh_issue_3746796709
source: github_issue
status: new
created_at: 2025-12-19 13:14:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3746796709", "title": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide", "url": "https://github.com/SolidifyDemo/test-repo_5/issues/1", "user": "repository-wizard[bot]", "user_url": "https://github.com/apps/repository-wizard", "repo": "test-repo_5", "body_preview": "# Welcome to SolidifyDemo/test-repo_5!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Checklist\n\n- [ ] Review and update the repository description\n- [ ] Set up branch protection rules\n- [ ] Configure repository settings (Issues, Projects, Wiki, etc.)\n- [ ] Add repository topics/tags for discoverability\n- [ ] Set up automated workflows (if needed)\n\n## \ud83d\udd12 Security & Best Practices\n\n### Br", "created": "2025-12-19T09:34:27Z", "labels": ["documentation", "good first issue", "setup"], "context": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide # Welcome to SolidifyDemo/test-repo_5!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Che"}


identifier: gh_issue_3746718314
source: github_issue
status: new
created_at: 2025-12-19 13:14:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3746718314", "title": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide", "url": "https://github.com/demos-aatmmr/test-repo-3/issues/1", "user": "repository-wizard[bot]", "user_url": "https://github.com/apps/repository-wizard", "repo": "test-repo-3", "body_preview": "# Welcome to demos-aatmmr/test-repo-3!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Checklist\n\n- [ ] Review and update the repository description\n- [ ] Set up branch protection rules\n- [ ] Configure repository settings (Issues, Projects, Wiki, etc.)\n- [ ] Add repository topics/tags for discoverability\n- [ ] Set up automated workflows (if needed)\n\n## \ud83d\udd12 Security & Best Practices\n\n### Br", "created": "2025-12-19T09:09:43Z", "labels": ["documentation", "good first issue", "setup"], "context": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide # Welcome to demos-aatmmr/test-repo-3!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Che"}


identifier: gh_issue_3746716193
source: github_issue
status: new
created_at: 2025-12-19 13:14:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3746716193", "title": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide", "url": "https://github.com/SolidifyDemo/test-repo-3/issues/1", "user": "repository-wizard[bot]", "user_url": "https://github.com/apps/repository-wizard", "repo": "test-repo-3", "body_preview": "# Welcome to SolidifyDemo/test-repo-3!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Checklist\n\n- [ ] Review and update the repository description\n- [ ] Set up branch protection rules\n- [ ] Configure repository settings (Issues, Projects, Wiki, etc.)\n- [ ] Add repository topics/tags for discoverability\n- [ ] Set up automated workflows (if needed)\n\n## \ud83d\udd12 Security & Best Practices\n\n### Br", "created": "2025-12-19T09:09:04Z", "labels": ["documentation", "good first issue", "setup"], "context": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide # Welcome to SolidifyDemo/test-repo-3!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Che"}


identifier: gh_issue_3747470546
source: github_issue
status: new
created_at: 2025-12-19 13:26:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3747470546", "title": "Infrastructure Penetration Testing: Database, AD/LDAP, and Cloud pivoting", "url": "https://github.com/doogie-bigmack/shaart/issues/35", "user": "doogie-bigmack", "user_url": "https://github.com/doogie-bigmack", "repo": "shaart", "body_preview": "## Overview\nExpand Shaart beyond web application testing to include database, Active Directory/LDAP, and cloud infrastructure testing using credentials discovered during web exploitation.\n\n## Key Innovation: The Pivot Strategy\n\n```\nWeb Vulnerability (SQLi, File Disclosure) \n    \u2193\nExtract Credentials (MySQL password, LDAP creds, AWS keys)\n    \u2193\nStore in Exploit Memory (#34)\n    \u2193\nTrigger Infrastructure Testing (AUTOMATIC)\n    \u2193\nUse Discovered Credentials to Pivot\n    \u2193\nReport Full Attack Chain (W", "created": "2025-12-19T13:04:14Z", "labels": [], "context": "Infrastructure Penetration Testing: Database, AD/LDAP, and Cloud pivoting ## Overview\nExpand Shaart beyond web application testing to include database, Active Directory/LDAP, and cloud infrastructure testing using credentials discovered during web exploitation.\n\n## Key Inno"}


identifier: gh_issue_3747467113
source: github_issue
status: new
created_at: 2025-12-19 13:26:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3747467113", "title": "Exploit Memory Database: Persistent vulnerability tracking and credential storage", "url": "https://github.com/doogie-bigmack/shaart/issues/34", "user": "doogie-bigmack", "user_url": "https://github.com/doogie-bigmack", "repo": "shaart", "body_preview": "## Overview\nImplement a persistent exploit memory database to remember successful exploits, track remediations, and store discovered credentials across test sessions.\n\n## Key Features\n- **Cross-session memory**: Remember vulnerabilities across multiple test runs\n- **Deduplication**: Intelligent vulnerability identity hashing\n- **Remediation tracking**: New/Recurring/Fixed status\n- **Credential storage**: Store discovered database/LDAP/cloud credentials for infrastructure pivoting\n- **Delta repor", "created": "2025-12-19T13:03:04Z", "labels": [], "context": "Exploit Memory Database: Persistent vulnerability tracking and credential storage ## Overview\nImplement a persistent exploit memory database to remember successful exploits, track remediations, and store discovered credentials across test sessions.\n\n## Key Features\n- **Cross-sessio"}


identifier: gh_issue_3747424343
source: github_issue
status: new
created_at: 2025-12-19 13:38:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3747424343", "title": "Exercise: Expand your team with Copilot coding agent", "url": "https://github.com/Jaguar9383/skills-expand-your-team-with-copilot/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-expand-your-team-with-copilot", "body_preview": "## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Jaguar9383! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll unlock the next level of your favorite AI-powered coding assistant. Let&#39;s learn how to assign Copilot coding tasks directly in GitHub! \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll le", "created": "2025-12-19T12:47:15Z", "labels": [], "context": "Exercise: Expand your team with Copilot coding agent ## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Jaguar9383! Welcome t"}


identifier: gh_issue_3747517048
source: github_issue
status: new
created_at: 2025-12-19 13:38:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3747517048", "title": "Feature: Dockerfile for self-hosting behind a reverse proxy", "url": "https://github.com/marianfoo/mcp-sap-docs/issues/34", "user": "JariPie", "user_url": "https://github.com/JariPie", "repo": "mcp-sap-docs", "body_preview": "Hi Marian,\n\nFirst off, thanks for this project, it's been really useful and fun to work with!\nI wanted to run mcp-sap-docs on my own VPS (using Coolify) behind a reverse proxy, so I put together a Dockerfile. Thought I'd share it in case it's useful for the project or others with similar setups.\n\n**Use case**\n_Self-hosting the MCP server for:_\n\n- Running on a VPS with a reverse proxy (Nginx, Traefik, Caddy, etc.)\n- Docker Compose / Coolify / Portainer deployments\n- Keeping the server running per", "created": "2025-12-19T13:20:28Z", "labels": [], "context": "Feature: Dockerfile for self-hosting behind a reverse proxy Hi Marian,\n\nFirst off, thanks for this project, it's been really useful and fun to work with!\nI wanted to run mcp-sap-docs on my own VPS (using Coolify) behind a reverse proxy, so I put together a Doc"}


identifier: gh_issue_3747413743
source: github_issue
status: new
created_at: 2025-12-19 13:38:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3747413743", "title": "Task 008: AI_GUIDE.md & .cursor/rules - AI Developer Documentation", "url": "https://github.com/DGrygierczyk/test/issues/8", "user": "DGrygierczyk", "user_url": "https://github.com/DGrygierczyk", "repo": "test", "body_preview": "# Task 008: AI_GUIDE.md & .cursor/rules - AI Developer Documentation\n\n## Overview\nCreate comprehensive documentation for using AI tools (Cursor, Copilot) with this codebase. Define coding conventions that AI should follow when generating code.\n\n## Objectives\n- Document how to use AI effectively with the codebase\n- Define Cursor rules for consistent code generation\n- Provide example prompts for common tasks\n- Explain architectural patterns\n- Show best practices and anti-patterns\n- Enable AI to ge", "created": "2025-12-19T12:43:21Z", "labels": [], "context": "Task 008: AI_GUIDE.md & .cursor/rules - AI Developer Documentation # Task 008: AI_GUIDE.md & .cursor/rules - AI Developer Documentation\n\n## Overview\nCreate comprehensive documentation for using AI tools (Cursor, Copilot) with this codebase. Define coding conventions "}


identifier: gh_issue_3747354213
source: github_issue
status: new
created_at: 2025-12-19 13:38:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3747354213", "title": "Auto update failing for alsa-lib", "url": "https://github.com/termux/termux-packages/issues/27673", "user": "termuxbot2", "user_url": "https://github.com/termuxbot2", "repo": "termux-packages", "body_preview": "Hi, I'm Termux \ud83e\udd16.\n\nI'm here to help you update your Termux packages.\n\nI've tried to update the [alsa-lib](https://github.com/termux/termux-packages/blob/8f17d8049f1eb119dda158ec3f791482881da577/packages/alsa-lib) package, but it failed.\n\nHere's the output of the update script:\n<details>\n<summary>Show log</summary>\n<pre lang=\"console\">\nINFO: Updating alsa-lib [Current version: 1.2.15]\nINFO: package being updated to 1.2.15.1.\nDownloading https://github.com/alsa-project/alsa-lib/archive/refs/tags/v", "created": "2025-12-19T12:23:13Z", "labels": ["auto update failing", "bot"], "context": "Auto update failing for alsa-lib Hi, I'm Termux \ud83e\udd16.\n\nI'm here to help you update your Termux packages.\n\nI've tried to update the [alsa-lib](https://github.com/termux/termux-packages/blob/8f17d8049f1eb119dda158ec3f791482881da577/packag"}


identifier: gh_issue_3747588070
source: github_issue
status: new
created_at: 2025-12-19 13:51:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3747588070", "title": "Security: Update crossbeam-channel dependency to 0.5.15+ (CVE-2025-4574)", "url": "https://github.com/xiph/rav1e/issues/3460", "user": "frapper35", "user_url": "https://github.com/frapper35", "repo": "rav1e", "body_preview": "## Description\n\nrav1e-libs currently contains a vulnerable version of the `crossbeam-channel` Rust crate that has a known security vulnerability. This issue affects all downstream consumers of rav1e, including ffmpeg packages and container images across multiple distributions.\n\n## Vulnerability Details\n\n**CVE ID:** CVE-2025-4574  \n**Severity:** MEDIUM (CVSS v3.1: 6.5)  \n**Affected Dependency:** `crossbeam-channel` v0.5.14  \n**Fixed Version:** `crossbeam-channel` v0.5.15+  \n\n**Description:**  \nTh", "created": "2025-12-19T13:43:56Z", "labels": [], "context": "Security: Update crossbeam-channel dependency to 0.5.15+ (CVE-2025-4574) ## Description\n\nrav1e-libs currently contains a vulnerable version of the `crossbeam-channel` Rust crate that has a known security vulnerability. This issue affects all downstream consumers of rav1e, "}


identifier: gh_issue_3747553854
source: github_issue
status: new
created_at: 2025-12-19 14:03:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3747553854", "title": "[FEEDBACK]", "url": "https://github.com/cyborginc/cyborgdb-community-feedback/issues/68", "user": "KarthikChapa", "user_url": "https://github.com/KarthikChapa", "repo": "cyborgdb-community-feedback", "body_preview": "## HackerEarth Username\n**karthikch2002**  \nEmail: karthikch2002@gmail.com  \n\n**CIPHER-SHIELD Team \u2014 CyborgDB Hackathon 2025**\n\n---\n\n## Category\n- [x] Performance / Latency\n- [x] Integration (LangChain / LlamaIndex / other frameworks)\n- [x] Deployment (Kubernetes / Serverless / other)\n- [x] Compliance / Security\n- [x] Documentation\n- [ ] Bug / Crash\n- [ ] Other\n\n**Priority Level:**  **CRITICAL** \u2014 Blocks healthcare / regulated industry deployment\n\n---\n\n## Description\n\n###  Project: CIPHER-SHIELD", "created": "2025-12-19T13:32:25Z", "labels": ["feedback"], "context": "[FEEDBACK] ## HackerEarth Username\n**karthikch2002**  \nEmail: karthikch2002@gmail.com  \n\n**CIPHER-SHIELD Team \u2014 CyborgDB Hackathon 2025**\n\n---\n\n## Category\n- [x] Performance / Latency\n- [x] Integration (LangChai"}


identifier: gh_issue_3747446904
source: github_issue
status: new
created_at: 2025-12-19 14:03:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3747446904", "title": "[LOW] Security Vulnerability in node-fetch", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/827", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process would end without failure. For most people, this fix will have a little or no impact. However, if you are re", "created": "2025-12-19T12:55:33Z", "labels": [], "context": "[LOW] Security Vulnerability in node-fetch ## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before version"}


identifier: gh_issue_3747745413
source: github_issue
status: new
created_at: 2025-12-19 14:41:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3747745413", "title": "fleet-docker: Alpine 3.22.2 missing BusyBox security patch (CVE-2025-46394)", "url": "https://github.com/fleetdm/fleet/issues/37532", "user": "kc9wwh", "user_url": "https://github.com/kc9wwh", "repo": "fleet", "body_preview": "**Fleet version**: Fleet 4.77.0 \u2022 Go go1.25.3\n\n<hr/>\n\n### \ud83d\udca5  Actual behavior\n\ncustomer-leolo's security scanner is flagging CVE-2025-46394 when building containers from Fleet's Docker image. The Dockerfile at `tools/fleet-docker/Dockerfile` specifies Alpine 3.22.2, which is the latest 3.22.x version, but customer-leolo's scanner reports this version as vulnerable and blocks/flags the build process.\n\nAccording to the CVE details at https://security.alpinelinux.org/vuln/CVE-2025-46394, this is a l", "created": "2025-12-19T14:37:08Z", "labels": ["bug", ":help-infrastructure", "customer-leolo"], "context": "fleet-docker: Alpine 3.22.2 missing BusyBox security patch (CVE-2025-46394) **Fleet version**: Fleet 4.77.0 \u2022 Go go1.25.3\n\n<hr/>\n\n### \ud83d\udca5  Actual behavior\n\ncustomer-leolo's security scanner is flagging CVE-2025-46394 when building containers from Fleet's Docker image. The Docke"}


identifier: gh_issue_3747776625
source: github_issue
status: new
created_at: 2025-12-19 14:54:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3747776625", "title": "astro-5.16.6.tgz: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/nicdun/astro-tech-blog/issues/439", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "astro-tech-blog", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>astro-5.16.6.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /node_modules/mdast-util-to-hast/package.json,/package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/nicdun/astro-tech-blog/commit/9f16425b1ef4dc4fe8f3775df33211142cd70d63\">9f16425b1ef4dc4fe8f3775df33211142cd", "created": "2025-12-19T14:48:14Z", "labels": ["Mend: dependency security vulnerability"], "context": "astro-5.16.6.tgz: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>astro-5.16.6.tgz</b></summary>\n\n<p></p>\n<p>Path"}


identifier: gh_issue_3747767508
source: github_issue
status: new
created_at: 2025-12-19 14:54:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3747767508", "title": "trpc-next-0.5.42.tgz: 7 vulnerabilities (highest severity is: 10.0)", "url": "https://github.com/storm-software/stryke/issues/62", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "stryke", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>trpc-next-0.5.42.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n</details>\n\n## Vulnerabilities\n\n| Vulnerability | Severity | <img src='https://whitesource-resources.whitesourcesoftware.com/cvss3.png' width=19 height=20> CVSS | Dependency | Type | Fixed in (trpc-next ", "created": "2025-12-19T14:45:02Z", "labels": ["Mend: dependency security vulnerability"], "context": "trpc-next-0.5.42.tgz: 7 vulnerabilities (highest severity is: 10.0) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>trpc-next-0.5.42.tgz</b></summary>\n\n<p></p>\n<p>"}


identifier: gh_issue_3747716891
source: github_issue
status: new
created_at: 2025-12-19 14:54:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3747716891", "title": "spell check ci", "url": "https://github.com/OmniBlocks/scratch-gui/issues/558", "user": "supervoidcoder", "user_url": "https://github.com/supervoidcoder", "repo": "scratch-gui", "body_preview": "remember #554 ? we will add spell check ci!!! YAY!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!\n", "created": "2025-12-19T14:28:10Z", "labels": ["Low-Priority", "ci"], "context": "spell check ci remember #554 ? we will add spell check ci!!! YAY!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!\n"}


identifier: gh_issue_3747247700
source: github_issue
status: new
created_at: 2025-12-19 15:07:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3747247700", "title": "Build Project Orchestrator - AI Workflow Manager", "url": "https://github.com/gpt153/project-orchestrator/issues/1", "user": "gpt153", "user_url": "https://github.com/gpt153", "repo": "project-orchestrator", "body_preview": "# Vision\n\nSee complete vision document: [.agents/visions/project-orchestrator.md](.agents/visions/project-orchestrator.md)\n\n## Summary\n\nBuild an AI agent that helps non-technical people build software projects by:\n1. Brainstorming with them in natural language\n2. Creating non-technical vision documents\n3. Automating the entire SCAR workflow\n4. Managing phases and approvals\n5. Translating natural language \u2192 technical commands\n\n## Target Users\n\nNon-coders who have great ideas but find the developm", "created": "2025-12-19T11:51:40Z", "labels": [], "context": "Build Project Orchestrator - AI Workflow Manager # Vision\n\nSee complete vision document: [.agents/visions/project-orchestrator.md](.agents/visions/project-orchestrator.md)\n\n## Summary\n\nBuild an AI agent that helps non-technical people build software"}


identifier: gh_issue_3747793483
source: github_issue
status: new
created_at: 2025-12-19 15:19:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3747793483", "title": "Feature request: `repo: builtin` hook to check for outdated hook versions", "url": "https://github.com/j178/prek/issues/1243", "user": "ichoosetoaccept", "user_url": "https://github.com/ichoosetoaccept", "repo": "prek", "body_preview": "## Problem\n\nRemembering to run `prek auto-update` regularly to keep pre-commit hooks up to date is a common challenge. Without regular updates, hooks can become stale, missing important bug fixes, performance improvements, or new features.\n\n## Existing solutions in the pre-commit ecosystem\n\n- **[pre-commit.ci](https://pre-commit.ci/)** \u2014 auto-creates weekly PRs with updates (GitHub only)\n- **[pre-commit-update](https://github.com/mxr/pre-commit-update)** \u2014 a hook that checks for updates during n", "created": "2025-12-19T14:54:29Z", "labels": ["thinking", "idea"], "context": "Feature request: `repo: builtin` hook to check for outdated hook versions ## Problem\n\nRemembering to run `prek auto-update` regularly to keep pre-commit hooks up to date is a common challenge. Without regular updates, hooks can become stale, missing important bug fixes, per"}


identifier: gh_issue_3747838952
source: github_issue
status: new
created_at: 2025-12-19 15:19:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3747838952", "title": "bounty submission", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/410", "user": "Ankitsahami", "user_url": "https://github.com/Ankitsahami", "repo": "pvac_hfhe_cpp", "body_preview": "`# Bounty 2 Solution: Weak Key Truncation\n\n**Project**: PVAC-HFHE\n**Bounty**: 2 (Recover Sum)\n\n## Vulnerability\nThe challenge implementation suffers from two critical flaws:\n1.  **Weak Key Usage**: The artifacts were generated with a Zero-Initialized (or extremely weak) Secret Key, allowing decryption without `sk.bin`.\n2.  **Verification \"Slop\"**: The system verifies correctness by casting large Field elements to `uint64_t` (taking only the lower 64 bits), ignoring high-order bits.\n\n## Solution ", "created": "2025-12-19T15:09:35Z", "labels": [], "context": "bounty submission `# Bounty 2 Solution: Weak Key Truncation\n\n**Project**: PVAC-HFHE\n**Bounty**: 2 (Recover Sum)\n\n## Vulnerability\nThe challenge implementation suffers from two critical flaws:\n1.  **Weak Key Usage**: Th"}


identifier: gh_issue_3747820538
source: github_issue
status: new
created_at: 2025-12-19 15:19:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3747820538", "title": "\ud83d\udd34 [SAST] sast:good/vulpy.py (3 occurrences)", "url": "https://github.com/JulienZammit/vulpy/issues/913", "user": "test-recette-alpha[bot]", "user_url": "https://github.com/apps/test-recette-alpha", "repo": "vulpy", "body_preview": "## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n**3** occurrence(s) of **sast:good/vulpy.py** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nThis vulnerability occurs when a Flask application is launched with **debug mode** enabled in a production environment. In the provided code example, the call `app.run(\"0.0.0.0\", debug=True)` within the `__main__` block activates the Werkzeug debugger, which:\r\n\r\n- Exposes **interactive traceback interfaces** to remote clients.\r\n- Disclo", "created": "2025-12-19T15:03:05Z", "labels": [], "context": "\ud83d\udd34 [SAST] sast:good/vulpy.py (3 occurrences) ## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n**3** occurrence(s) of **sast:good/vulpy.py** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nThis vulnerability occurs when a Flask"}


identifier: gh_issue_3747819489
source: github_issue
status: new
created_at: 2025-12-19 15:19:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3747819489", "title": "\ud83d\udd34 [SAST] sast:good/vulpy-ssl.py (3 occurrences)", "url": "https://github.com/JulienZammit/vulpy/issues/904", "user": "test-recette-alpha[bot]", "user_url": "https://github.com/apps/test-recette-alpha", "repo": "vulpy", "body_preview": "## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n**3** occurrence(s) of **sast:good/vulpy-ssl.py** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nThis vulnerability occurs when a Flask application is launched with **debug mode** enabled in a production environment. In the provided code example, the call `app.run(\"0.0.0.0\", debug=True)` within the `__main__` block activates the Werkzeug debugger, which:\r\n\r\n- Exposes **interactive traceback interfaces** to remote clients.\r\n- Di", "created": "2025-12-19T15:02:42Z", "labels": [], "context": "\ud83d\udd34 [SAST] sast:good/vulpy-ssl.py (3 occurrences) ## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n**3** occurrence(s) of **sast:good/vulpy-ssl.py** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nThis vulnerability occurs when a F"}


identifier: gh_issue_3747819028
source: github_issue
status: new
created_at: 2025-12-19 15:19:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3747819028", "title": "\ud83d\udd34 [SAST] sast:bad/vulpy-ssl.py (3 occurrences)", "url": "https://github.com/JulienZammit/vulpy/issues/900", "user": "test-recette-alpha[bot]", "user_url": "https://github.com/apps/test-recette-alpha", "repo": "vulpy", "body_preview": "## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n**3** occurrence(s) of **sast:bad/vulpy-ssl.py** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nThis vulnerability occurs when a Flask application is launched with **debug mode** enabled in a production environment. In the provided code example, the call `app.run(\"0.0.0.0\", debug=True)` within the `__main__` block activates the Werkzeug debugger, which:\r\n\r\n- Exposes **interactive traceback interfaces** to remote clients.\r\n- Dis", "created": "2025-12-19T15:02:32Z", "labels": [], "context": "\ud83d\udd34 [SAST] sast:bad/vulpy-ssl.py (3 occurrences) ## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n**3** occurrence(s) of **sast:bad/vulpy-ssl.py** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nThis vulnerability occurs when a Fl"}


identifier: gh_issue_3746791410
source: github_issue
status: new
created_at: 2025-12-19 15:44:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3746791410", "title": "Migrations are failing because the repository must be installed with npm i -f", "url": "https://github.com/nrwl/nx/issues/33942", "user": "danielritter", "user_url": "https://github.com/danielritter", "repo": "nx", "body_preview": "### Current Behavior\n\nI have a repository where packages must be installed using `npm i -f`. When running migrations, they fail because the pre-migration installation process does not use the force flag.\n\n### Expected Behavior\n\n`nx migrate --run-migrations` should support a `--force` flag to force the npm installation process, or it should do so by default so that the migrations process does also work for repositories that must be installed with `npm i -f`.\n\n### GitHub Repo\n\n_No response_\n\n### S", "created": "2025-12-19T09:32:40Z", "labels": ["type: bug", "scope: core"], "context": "Migrations are failing because the repository must be installed with npm i -f ### Current Behavior\n\nI have a repository where packages must be installed using `npm i -f`. When running migrations, they fail because the pre-migration installation process does not use the force fl"}


identifier: gh_issue_3747855163
source: github_issue
status: new
created_at: 2025-12-19 15:58:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3747855163", "title": "contains_url() detection can be bypassed using common encoding techniques", "url": "https://github.com/microsoft/fides/issues/1", "user": "fitzpr", "user_url": "https://github.com/fitzpr", "repo": "fides", "body_preview": "# GitHub Issue: URL Detection Bypass via Encoding\n\n**Repository**: microsoft/fides  \n**Title**: `contains_url()` detection can be bypassed using common encoding techniques\n\n---\n\n## Summary\n\nThe `contains_url()` function used in the IFC policy enforcement (`policy_no_untrusted_declassification`) can be bypassed using simple encoding techniques, allowing an attacker to exfiltrate sensitive data through encoded URLs that evade detection.\n\n## Affected Code\n\n**File**: `Tutorial.ipynb` (and any produc", "created": "2025-12-19T15:14:20Z", "labels": [], "context": "contains_url() detection can be bypassed using common encoding techniques # GitHub Issue: URL Detection Bypass via Encoding\n\n**Repository**: microsoft/fides  \n**Title**: `contains_url()` detection can be bypassed using common encoding techniques\n\n---\n\n## Summary\n\nThe `conta"}


identifier: gh_issue_3747826544
source: github_issue
status: new
created_at: 2025-12-19 15:58:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3747826544", "title": "P1: Fix workflow API duplicate tests - remove duplicates or convert to integration pattern (15 tests)", "url": "https://github.com/bru-digital/qteria/issues/161", "user": "bru-digital", "user_url": "https://github.com/bru-digital", "repo": "qteria", "body_preview": "## Problem\n\n15 workflow API tests are failing in CI due to duplicate test logic across two files (`test_workflows_api.py` and `test_workflow_api.py`) with inconsistent mocking strategies.\n\n## Root Cause\n\n**Two test files with different patterns:**\n\n1. **`test_workflow_api.py`** (WORKING):\n   - Uses real database via `client` fixture\n   - Mocks only audit service and blob storage\n   - All tests passing\n\n2. **`test_workflows_api.py`** (BROKEN):\n   - Duplicates test scenarios from `test_workflow_ap", "created": "2025-12-19T15:05:20Z", "labels": ["priority:P1", "technical-debt"], "context": "P1: Fix workflow API duplicate tests - remove duplicates or convert to integration pattern (15 tests) ## Problem\n\n15 workflow API tests are failing in CI due to duplicate test logic across two files (`test_workflows_api.py` and `test_workflow_api.py`) with inconsistent mocking strategies.\n\n## Root Cau"}


identifier: gh_issue_3747928897
source: github_issue
status: new
created_at: 2025-12-19 15:58:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3747928897", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/ErkanUK/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @ErkanUK! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019l", "created": "2025-12-19T15:40:16Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @ErkanUK! Welcome to yo"}


identifier: gh_issue_3747781127
source: github_issue
status: new
created_at: 2025-12-19 15:58:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3747781127", "title": "Nov\u00e1 struktura dokumentace", "url": "https://github.com/ARUP-CAS/aiscr-webamcr/issues/3393", "user": "motyc", "user_url": "https://github.com/motyc", "repo": "aiscr-webamcr", "body_preview": "> Nechal jsem Claude vygenerovat n\u00e1vrh struktury dokumentace. Po n\u011bkolika up\u0159esn\u011bn\u00edch jsme se dostali k relativn\u011b pou\u017eiteln\u00e9 podob\u011b, viz n\u00ed\u017ee.\n> \n> ```\n> docs/source/\n> \u251c\u2500\u2500 index.rst                           (hlavn\u00ed vstupn\u00ed bod)\n> \u2502\n> \u251c\u2500\u2500 01_zaciname/                        (Getting Started)\n> \u2502   \u251c\u2500\u2500 index.rst\n> \u2502   \u251c\u2500\u2500 prehled_aplikace.rst           (Co je WebAM\u010cR, architektura)\n> \u2502   \u251c\u2500\u2500 pozadavky.rst                   (Syst\u00e9mov\u00e9 po\u017eadavky, Docker, PostgreSQL/PostGIS)\n> \u2502   \u251c\u2500\u2500 rychly_start.", "created": "2025-12-19T14:49:53Z", "labels": ["documentation"], "context": "Nov\u00e1 struktura dokumentace > Nechal jsem Claude vygenerovat n\u00e1vrh struktury dokumentace. Po n\u011bkolika up\u0159esn\u011bn\u00edch jsme se dostali k relativn\u011b pou\u017eiteln\u00e9 podob\u011b, viz n\u00ed\u017ee.\n> \n> ```\n> docs/source/\n> \u251c\u2500\u2500 index.rst                  "}


identifier: gh_issue_3747998226
source: github_issue
status: new
created_at: 2025-12-19 16:11:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3747998226", "title": "Outdated Newtonsoft.Json.dll (10.0.3) bundled in NuGet package Delegate.XrmDefinitelyTyped 6.6.1 triggers security scanners", "url": "https://github.com/delegateas/XrmDefinitelyTyped/issues/314", "user": "CorneliaDV", "user_url": "https://github.com/CorneliaDV", "repo": "XrmDefinitelyTyped", "body_preview": "Hello,\n\nwe are using XrmDefinitelyTyped via the NuGet package `Delegate.XrmDefinitelyTyped` (currently version 6.6.1 as published on nuget.org).\n\nWhile upgrading our tooling, we noticed that the package content still includes\n`Newtonsoft.Json.dll` version 10.0.3 (under `content/XrmDefinitelyTyped`).\n\nThis causes vulnerability findings in modern security scanners, which require a newer Newtonsoft.Json version (13.x).\nFor example, Wiz reports Newtonsoft.Json.dll version 10.0.3 as a high-severity v", "created": "2025-12-19T16:04:57Z", "labels": [], "context": "Outdated Newtonsoft.Json.dll (10.0.3) bundled in NuGet package Delegate.XrmDefinitelyTyped 6.6.1 triggers security scanners Hello,\n\nwe are using XrmDefinitelyTyped via the NuGet package `Delegate.XrmDefinitelyTyped` (currently version 6.6.1 as published on nuget.org).\n\nWhile upgrading our tooling, we noticed that the packa"}


identifier: gh_issue_3748000285
source: github_issue
status: new
created_at: 2025-12-19 16:23:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3748000285", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/HugoMontes/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @HugoMontes! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, ", "created": "2025-12-19T16:05:36Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @HugoMontes! Welcome to"}


identifier: gh_issue_3747873393
source: github_issue
status: new
created_at: 2025-12-19 16:23:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3747873393", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/arnoldsand/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @arnoldsand! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, ", "created": "2025-12-19T15:20:38Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @arnoldsand! Welcome to"}


identifier: gh_issue_3748052027
source: github_issue
status: new
created_at: 2025-12-19 16:34:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3748052027", "title": "Input validation missing on critical endpoints", "url": "https://github.com/BankingSystemOrg/Banking-system/issues/32", "user": "abdelmawla2350", "user_url": "https://github.com/abdelmawla2350", "repo": "Banking-system", "body_preview": "Some endpoints handling Dwolla transfers and Plaid account linking lack proper validation:\n\n- Dwolla transfer amount not validated for negative or zero values\n- Plaid account tokens are not verified before use\n- Missing validation for currency type and account status\n\nImpact:\n- Security vulnerability\n- Potential failed or reversed transactions\n\nExpected:\n- Add validation checks for Dwolla transfer amounts and currency\n- Verify Plaid account tokens before performing operations\n- Include negative ", "created": "2025-12-19T16:22:58Z", "labels": ["Inspection", "Security"], "context": "Input validation missing on critical endpoints Some endpoints handling Dwolla transfers and Plaid account linking lack proper validation:\n\n- Dwolla transfer amount not validated for negative or zero values\n- Plaid account tokens are not verified b"}


identifier: gh_issue_3748022966
source: github_issue
status: new
created_at: 2025-12-19 16:34:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3748022966", "title": "Security Risk Due to Improper Temperature Parameter Setting (0.0) in Phone-use| \u56e0\u6e29\u5ea6\u53c2\u6570\u8bbe\u7f6e\u4e0d\u5f53\uff080.0\uff09\u5bfc\u81f4\u7684\u5b89\u5168\u98ce\u9669", "url": "https://github.com/zai-org/Open-AutoGLM/issues/251", "user": "gseismic", "user_url": "https://github.com/gseismic", "repo": "Open-AutoGLM", "body_preview": "### System Info / \u7cfb\u7d71\u4fe1\u606f\n\nnull\n\n### Who can help? / \u8c01\u53ef\u4ee5\u5e2e\u52a9\u5230\u60a8\uff1f\n\n_No response_\n\n### Information / \u95ee\u9898\u4fe1\u606f\n\n- [ ] The official example scripts / \u5b98\u65b9\u7684\u793a\u4f8b\u811a\u672c\n- [ ] My own modified scripts / \u6211\u81ea\u5df1\u4fee\u6539\u7684\u811a\u672c\u548c\u4efb\u52a1\n\n### Reproduction / \u590d\u73b0\u8fc7\u7a0b\n\nI am writing to report a potential security vulnerability and a fundamental design flaw in the phone-use agent, which is traceable to the same technical defect observed in the closed-source\u667a\u8c31\u8f93\u5165\u6cd5 (Zhipu Input Method).\n\nThe core issue is that in the file phone_agent/model/client.py, the ", "created": "2025-12-19T16:13:34Z", "labels": [], "context": "Security Risk Due to Improper Temperature Parameter Setting (0.0) in Phone-use| \u56e0\u6e29\u5ea6\u53c2\u6570\u8bbe\u7f6e\u4e0d\u5f53\uff080.0\uff09\u5bfc\u81f4\u7684\u5b89\u5168\u98ce\u9669 ### System Info / \u7cfb\u7d71\u4fe1\u606f\n\nnull\n\n### Who can help? / \u8c01\u53ef\u4ee5\u5e2e\u52a9\u5230\u60a8\uff1f\n\n_No response_\n\n### Information / \u95ee\u9898\u4fe1\u606f\n\n- [ ] The official example scripts / \u5b98\u65b9\u7684\u793a\u4f8b\u811a\u672c\n- [ ] My own modified scripts / \u6211\u81ea\u5df1\u4fee\u6539\u7684\u811a\u672c\u548c\u4efb\u52a1\n\n### Reprodu"}


identifier: gh_issue_3748020887
source: github_issue
status: new
created_at: 2025-12-19 16:34:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3748020887", "title": "\ud83d\udd34 [SAST] sast:good/vulpy.py (3 occurrences)", "url": "https://github.com/JulienZammit/vulpy/issues/992", "user": "test-recette-alpha[bot]", "user_url": "https://github.com/apps/test-recette-alpha", "repo": "vulpy", "body_preview": "## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `master`\n\n**3** occurrence(s) of **sast:good/vulpy.py** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nThis vulnerability occurs when a Flask application is launched with **debug mode** enabled in a production environment. In the provided code example, the call `app.run(\"0.0.0.0\", debug=True)` within the `__main__` block activates the Werkzeug debugger, which:\r\n\r\n- Exposes **interactive traceback interfaces** to", "created": "2025-12-19T16:12:48Z", "labels": [], "context": "\ud83d\udd34 [SAST] sast:good/vulpy.py (3 occurrences) ## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `master`\n\n**3** occurrence(s) of **sast:good/vulpy.py** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nThis vulnera"}


identifier: gh_issue_3748018827
source: github_issue
status: new
created_at: 2025-12-19 16:34:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3748018827", "title": "\ud83d\udd34 [SAST] sast:bad/vulpy-ssl.py (3 occurrences)", "url": "https://github.com/JulienZammit/vulpy/issues/974", "user": "test-recette-alpha[bot]", "user_url": "https://github.com/apps/test-recette-alpha", "repo": "vulpy", "body_preview": "## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `master`\n\n**3** occurrence(s) of **sast:bad/vulpy-ssl.py** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nThis vulnerability occurs when a Flask application is launched with **debug mode** enabled in a production environment. In the provided code example, the call `app.run(\"0.0.0.0\", debug=True)` within the `__main__` block activates the Werkzeug debugger, which:\r\n\r\n- Exposes **interactive traceback interfaces**", "created": "2025-12-19T16:12:00Z", "labels": [], "context": "\ud83d\udd34 [SAST] sast:bad/vulpy-ssl.py (3 occurrences) ## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `master`\n\n**3** occurrence(s) of **sast:bad/vulpy-ssl.py** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nThis vuln"}


identifier: gh_issue_3747885664
source: github_issue
status: new
created_at: 2025-12-19 16:34:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3747885664", "title": "[BleepingComputer] Over 25,000 FortiCloud SSO devices exposed to remote attacks", "url": "https://github.com/SecOpsNews/news/issues/61214", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "news", "body_preview": "\n\nInternet security watchdog Shadowserver has found over 25,000 Fortinet devices exposed online with FortiCloud SSO enabled, amid ongoing attacks targeting a critical authentication bypass vulnerability. \\[...\\]\n\n\n\n<https://www.bleepingcomputer.com/news/security/over-25-000-forticloud-sso-devices-exposed-to-remote-attacks/>\n\n", "created": "2025-12-19T15:24:50Z", "labels": ["BleepingComputer"], "context": "[BleepingComputer] Over 25,000 FortiCloud SSO devices exposed to remote attacks \n\nInternet security watchdog Shadowserver has found over 25,000 Fortinet devices exposed online with FortiCloud SSO enabled, amid ongoing attacks targeting a critical authentication bypass vulnerabili"}


identifier: gh_issue_3747928189
source: github_issue
status: new
created_at: 2025-12-19 16:34:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3747928189", "title": "used ports", "url": "https://github.com/gpt153/scar/issues/6", "user": "gpt153", "user_url": "https://github.com/gpt153", "repo": "scar", "body_preview": "## Problem\n\nOften when building new features and using tools they have default ports they use. and that is often overlooked and when started it creates a conflict.\n\n## Proposed Solution\n\na central record in scar that keeps track of which ports are used both in dev and in production services running on vm. so even if the pre-existing service happends to be down at the moment of checking there will never be a conflict. this will be a live record and needs to be updated if services are removed. it ", "created": "2025-12-19T15:40:00Z", "labels": ["enhancement"], "context": "used ports ## Problem\n\nOften when building new features and using tools they have default ports they use. and that is often overlooked and when started it creates a conflict.\n\n## Proposed Solution\n\na central rec"}


identifier: gh_issue_3748017770
source: github_issue
status: new
created_at: 2025-12-19 16:46:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3748017770", "title": "Oracle Cloud Engineer (HCM) Phoenix, AZ (Local needed)", "url": "https://github.com/Ramkrishna999/Oracle-Cloud-Engineer-HCM-Phoenix-AZ-Local-needed-/issues/9", "user": "Ramkrishna999", "user_url": "https://github.com/Ramkrishna999", "repo": "Oracle-Cloud-Engineer-HCM-Phoenix-AZ-Local-needed-", "body_preview": "Oracle Cloud Engineer (HCM)\nPhoenix, AZ (Local needed)\nExcept OPT - Rest will work (C2C Position)\n\nOracle Cloud Engineer with 6\u20139 years of experience, based in Phoenix, AZ, specializing in Oracle Fusion HCM implementations. \nStrong expertise in ORC, Talent, Learning, and Global HR, including multi-region/multi-country configurations, quarterly patch impact analysis, and customizations (DFF/EFF, reports, value sets, workflows). \nExperienced across the full project life cycle, conducting CRP and F", "created": "2025-12-19T16:11:35Z", "labels": [], "context": "Oracle Cloud Engineer (HCM) Phoenix, AZ (Local needed) Oracle Cloud Engineer (HCM)\nPhoenix, AZ (Local needed)\nExcept OPT - Rest will work (C2C Position)\n\nOracle Cloud Engineer with 6\u20139 years of experience, based in Phoenix, AZ, specializing in Oracle Fusi"}


identifier: gh_issue_3747999218
source: github_issue
status: new
created_at: 2025-12-19 16:46:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3747999218", "title": "Oracle Cloud Engineer (HCM) Phoenix, AZ (Local needed)", "url": "https://github.com/Ramkrishna999/Oracle-Cloud-Engineer-HCM-Phoenix-AZ-Local-needed-/issues/2", "user": "Ramkrishna999", "user_url": "https://github.com/Ramkrishna999", "repo": "Oracle-Cloud-Engineer-HCM-Phoenix-AZ-Local-needed-", "body_preview": "Oracle Cloud Engineer (HCM)\nPhoenix, AZ (Local needed)\nExcept OPT - Rest will work (C2C Position)\n\nOracle Cloud Engineer with 6\u20139 years of experience, based in Phoenix, AZ, specializing in Oracle Fusion HCM implementations. \nStrong expertise in ORC, Talent, Learning, and Global HR, including multi-region/multi-country configurations, quarterly patch impact analysis, and customizations (DFF/EFF, reports, value sets, workflows). \nExperienced across the full project life cycle, conducting CRP and F", "created": "2025-12-19T16:05:15Z", "labels": [], "context": "Oracle Cloud Engineer (HCM) Phoenix, AZ (Local needed) Oracle Cloud Engineer (HCM)\nPhoenix, AZ (Local needed)\nExcept OPT - Rest will work (C2C Position)\n\nOracle Cloud Engineer with 6\u20139 years of experience, based in Phoenix, AZ, specializing in Oracle Fusi"}


identifier: gh_issue_3747930858
source: github_issue
status: new
created_at: 2025-12-19 16:46:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3747930858", "title": "Medium severity security finding against log4j-core-2.25.1", "url": "https://github.com/galasa-dev/projectmanagement/issues/2503", "user": "ideeley", "user_url": "https://github.com/ideeley", "repo": "projectmanagement", "body_preview": "## Describe the bug\nLatest scan is reporting a medium severity vulnerability in log4j-core-2.25.1.\n\n## Additional context\nLooks like this is a straightforward uplift to 2.25.3 or later. log4j-core is supplied in the distribution's maven folder, and is also included in galasa-boot.\n", "created": "2025-12-19T15:40:52Z", "labels": ["defect"], "context": "Medium severity security finding against log4j-core-2.25.1 ## Describe the bug\nLatest scan is reporting a medium severity vulnerability in log4j-core-2.25.1.\n\n## Additional context\nLooks like this is a straightforward uplift to 2.25.3 or later. log4j-core is "}


identifier: gh_issue_3748149615
source: github_issue
status: new
created_at: 2025-12-19 17:12:49
data:
  {"source": "github_issue", "identifier": "gh_issue_3748149615", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/koustavcodes/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @koustavcodes! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate", "created": "2025-12-19T16:55:21Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @koustavcodes! Welcome to your Skills exer"}


identifier: gh_issue_3747831549
source: github_issue
status: new
created_at: 2025-12-19 17:12:49
data:
  {"source": "github_issue", "identifier": "gh_issue_3747831549", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/Mono116/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Mono116! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate your", "created": "2025-12-19T15:07:02Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Mono116! Welcome to your Skills exercise!"}


identifier: gh_issue_3747810837
source: github_issue
status: new
created_at: 2025-12-19 17:12:49
data:
  {"source": "github_issue", "identifier": "gh_issue_3747810837", "title": "[BUG] photonOS (e.g. bitnami) images always contains a \"fixed-version\" that results in false-positive", "url": "https://github.com/neuvector/neuvector/issues/2177", "user": "severinsm", "user_url": "https://github.com/severinsm", "repo": "neuvector", "body_preview": "**Environment**\nPlatform: [OpenShift 4.18]\nKubernetes/Platform Version(s): \n\n**Describe the bug**\nWhen scanning photonOS images, I get always a \"fixed version\" named: \"NA\" instead of emtpy.\nWhen we're filtering on count of x severity CVE **with fix**, neuvector assumes there is a fix.\n\n\nNA != emtpy, so admission control kicks in.\n\n**To Reproduce**\nSteps to reproduce the behavior:\n1. scan bitnami image\n2. view scan report\n3. setup an admission rule that filters on \"with fix\".\n4. test deployment y", "created": "2025-12-19T15:00:01Z", "labels": [], "context": "[BUG] photonOS (e.g. bitnami) images always contains a \"fixed-version\" that results in false-positive **Environment**\nPlatform: [OpenShift 4.18]\nKubernetes/Platform Version(s): \n\n**Describe the bug**\nWhen scanning photonOS images, I get always a \"fixed version\" named: \"NA\" instead of emtpy.\nWhen we're"}


identifier: gh_issue_3748219898
source: github_issue
status: new
created_at: 2025-12-19 17:25:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3748219898", "title": "fix(e2e): investigate basic-smoke.spec.ts test failures (2/37)", "url": "https://github.com/yasutakesougo/audit-management-system-mvp/issues/83", "user": "yasutakesougo", "user_url": "https://github.com/yasutakesougo", "repo": "audit-management-system-mvp", "body_preview": "## \ud83d\udc1b \u554f\u984c\n\n\u4ee5\u4e0b\u306e2\u3064\u306e E2E \u30c6\u30b9\u30c8\u304c\u5931\u6557\u3057\u3066\u3044\u307e\u3059\uff1a\n- `tests/e2e/basic-smoke.spec.ts:4:7` - \"Basic Dashboard \u203a can load homepage\"\n- `tests/e2e/basic-smoke.spec.ts:40:7` - \"Basic Dashboard \u203a can navigate to dashboard\"\n\n## \ud83d\udcca \u73fe\u72b6\n- \u5168 Unit \u30c6\u30b9\u30c8 (1,536/1,536) \ud83d\udcaf\n- Preflight (typecheck, lint, format)\n- Schedule unit (TZ matrix: Asia/Tokyo, America/Los_Angeles)\n- **35/37 E2E \u30c6\u30b9\u30c8** (95%)\n- \u5931\u6557: 2/37 E2E (basic-smoke.spec.ts \u306e\u307f)\n\n## \ud83d\udd0d \u8abf\u67fb\u9805\u76ee\n1. \u30bf\u30a4\u30e0\u30a2\u30a6\u30c8\uff08load \u304c\u9045\u3044\uff1fwaitForLoadState \u5fc5\u8981\uff1f\uff09\n2. \u74b0\u5883\u5909\u6570\uff08VITE_DEMO_MODE/SharePoint \u30e2\u30c3\u30af\u8a2d\u5b9a\uff09\n3. Sel", "created": "2025-12-19T17:17:29Z", "labels": [], "context": "fix(e2e): investigate basic-smoke.spec.ts test failures (2/37) ## \ud83d\udc1b \u554f\u984c\n\n\u4ee5\u4e0b\u306e2\u3064\u306e E2E \u30c6\u30b9\u30c8\u304c\u5931\u6557\u3057\u3066\u3044\u307e\u3059\uff1a\n- `tests/e2e/basic-smoke.spec.ts:4:7` - \"Basic Dashboard \u203a can load homepage\"\n- `tests/e2e/basic-smoke.spec.ts:40:7` - \"Basic Dashboard \u203a can navigate to dashboard\"\n\n#"}


identifier: gh_issue_3748217303
source: github_issue
status: new
created_at: 2025-12-19 17:25:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3748217303", "title": "Fix semantic release issue", "url": "https://github.com/subhamay-bhattacharyya-gha/slack-notification-wf/issues/21", "user": "bsubhamay", "user_url": "https://github.com/bsubhamay", "repo": "slack-notification-wf", "body_preview": "Fix the issue with the semantic release, the GitHub action workflow is failing with the following error:\n\n```text\nnpm ERR! code EUSAGE\nnpm ERR! \nnpm ERR! `npm ci` can only install packages when your package.json and package-lock.json or npm-shrinkwrap.json are in sync. Please update your lock file with `npm install` before continuing.\nnpm ERR! \nnpm ERR! Missing: undici@5.29.0 from lock file\nnpm ERR! Missing: @fastify/busboy@2.1.1 from lock file\nnpm ERR! \nnpm ERR! Clean install a project\nnpm ERR!", "created": "2025-12-19T17:16:43Z", "labels": ["new"], "context": "Fix semantic release issue Fix the issue with the semantic release, the GitHub action workflow is failing with the following error:\n\n```text\nnpm ERR! code EUSAGE\nnpm ERR! \nnpm ERR! `npm ci` can only install packages when your p"}


identifier: gh_issue_3748020511
source: github_issue
status: new
created_at: 2025-12-19 17:37:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3748020511", "title": "Dependency Dashboard", "url": "https://github.com/rhobs/rhobs-synthetics-agent/issues/131", "user": "red-hat-konflux-kflux-prd-rh02[bot]", "user_url": "https://github.com/apps/red-hat-konflux-kflux-prd-rh02", "repo": "rhobs-synthetics-agent", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Repository problems\n\nRenovate tried to run on this repository, but found these problems.\n\n - WARN: Cannot access vulnerability alerts. Please ensure permissions have been granted.\n\n## Awaiting Schedule\n\nThe following updates are awaiting their schedule. To get an update now, click on a checkbox below.\n\n - [ ] <!-- unschedule-br", "created": "2025-12-19T16:12:39Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Repository problems\n\nRenovate"}


identifier: gh_issue_3748020323
source: github_issue
status: new
created_at: 2025-12-19 17:37:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3748020323", "title": "Dependency Dashboard", "url": "https://github.com/rhobs/rhobs-synthetics-api/issues/140", "user": "red-hat-konflux-kflux-prd-rh02[bot]", "user_url": "https://github.com/apps/red-hat-konflux-kflux-prd-rh02", "repo": "rhobs-synthetics-api", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Repository problems\n\nRenovate tried to run on this repository, but found these problems.\n\n - WARN: Cannot access vulnerability alerts. Please ensure permissions have been granted.\n\n## Awaiting Schedule\n\nThe following updates are awaiting their schedule. To get an update now, click on a checkbox below.\n\n - [ ] <!-- unschedule-br", "created": "2025-12-19T16:12:35Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Repository problems\n\nRenovate"}


identifier: gh_issue_3748273714
source: github_issue
status: new
created_at: 2025-12-19 17:37:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3748273714", "title": "Fix 4 security findings on 8 assets (critical severity)", "url": "https://github.com/Bajusz15/beacon/issues/43", "user": "Bajusz15", "user_url": "https://github.com/Bajusz15", "repo": "beacon", "body_preview": "Mondoo has assigned this ticket to fix 4 components with critical vulnerabilities on 8 assets. The risk score was evaluated to 100/100\n\nWhy it matters:\n\n- Risk score: 100/100 is critical, [link](https://mondoo.com/docs/platform/security/posture/findings/) for details\n- Risk factors: Known exploited vulnerability (3/3)\n- First detected: October 15, 2025\n- About the Mondoo scoring method: [link](https://mondoo.com/docs/platform/security/posture/findings/)\n\n\n## Apply CVE-2025-6554 on Windows 11, Wi", "created": "2025-12-19T17:37:04Z", "labels": ["mondoo", "security", "vulnerability"], "context": "Fix 4 security findings on 8 assets (critical severity) Mondoo has assigned this ticket to fix 4 components with critical vulnerabilities on 8 assets. The risk score was evaluated to 100/100\n\nWhy it matters:\n\n- Risk score: 100/100 is critical, [link](https"}


identifier: gh_issue_3747944678
source: github_issue
status: new
created_at: 2025-12-19 17:37:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3747944678", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/dev2025-gs/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @dev2025-gs! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate y", "created": "2025-12-19T15:45:56Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @dev2025-gs! Welcome to your Skills exerci"}


identifier: gh_issue_3748337052
source: github_issue
status: new
created_at: 2025-12-19 18:14:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3748337052", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/mnlopezmn/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @mnlopezmn! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I", "created": "2025-12-19T18:02:34Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @mnlopezmn! Welcome to "}


identifier: gh_issue_3748371633
source: github_issue
status: new
created_at: 2025-12-19 18:39:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3748371633", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/javaiu/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @javaiu! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll", "created": "2025-12-19T18:15:33Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @javaiu! Welcome to you"}


identifier: gh_issue_3748360162
source: github_issue
status: new
created_at: 2025-12-19 18:39:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3748360162", "title": "trpc-next-0.5.41.tgz: 7 vulnerabilities (highest severity is: 10.0)", "url": "https://github.com/storm-software/stryke/issues/63", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "stryke", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>trpc-next-0.5.41.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n</details>\n\n## Vulnerabilities\n\n| Vulnerability | Severity | <img src='https://whitesource-resources.whitesourcesoftware.com/cvss3.png' width=19 height=20> CVSS | Dependency | Type | Fixed in (trpc-next ", "created": "2025-12-19T18:11:49Z", "labels": ["Mend: dependency security vulnerability"], "context": "trpc-next-0.5.41.tgz: 7 vulnerabilities (highest severity is: 10.0) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>trpc-next-0.5.41.tgz</b></summary>\n\n<p></p>\n<p>"}


identifier: gh_issue_3748336401
source: github_issue
status: new
created_at: 2025-12-19 18:39:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3748336401", "title": "CVE-2025-68390 (Medium) detected in elasticsearch-7.9.3.jar", "url": "https://github.com/billmcchesney1/flow/issues/257", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "flow", "body_preview": "## CVE-2025-68390 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>elasticsearch-7.9.3.jar</b></summary>\n\n<p>Elasticsearch subproject :server</p>\n<p>Library home page: <a href=\"https://github.com/elastic/elasticsearch\">https://github.com/elastic/elasticsearch</a></p>\n<p>Path to dependency file: /pom.xml</p>\n<p>Path to vulnerable library: /home/wss-scanner/.m2/re", "created": "2025-12-19T18:02:17Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-68390 (Medium) detected in elasticsearch-7.9.3.jar ## CVE-2025-68390 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3748206793
source: github_issue
status: new
created_at: 2025-12-19 18:39:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3748206793", "title": "Dependency Dashboard", "url": "https://github.com/aliammari1/rakcha-web/issues/7", "user": "renovate[bot]", "user_url": "https://github.com/apps/renovate", "repo": "rakcha-web", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/aliammari1/rakcha-web).\n\n## Deprecations / Replacements\n> [!WARNING]\nThese dependencies are either deprecated or have replacements available:\n\n| Datasource | Name | Replacement PR? |\n|------------|------|--------------|\n| npm | `@studio-freight/len", "created": "2025-12-19T17:13:42Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the M"}


identifier: gh_issue_3748338105
source: github_issue
status: new
created_at: 2025-12-19 18:39:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3748338105", "title": "fastapi_sso-0.16.0-py3-none-any.whl: 1 vulnerabilities (highest severity is: 6.3)", "url": "https://github.com/snowdensb/litellm/issues/60", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "litellm", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>fastapi_sso-0.16.0-py3-none-any.whl</b></summary>\n\n<p>FastAPI plugin to enable SSO to most common providers (such as Facebook login, Google login and login via Microsoft Office 365 Account)</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/72/84/df15745ff06c1b44e478b72759d5cf48e4583e221389d4cdea76c472dd1c/fastapi_sso-0.1", "created": "2025-12-19T18:03:01Z", "labels": ["Mend: dependency security vulnerability"], "context": "fastapi_sso-0.16.0-py3-none-any.whl: 1 vulnerabilities (highest severity is: 6.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>fastapi_sso-0.16.0-py3-none-any.whl</b></summar"}


identifier: gh_issue_3748466681
source: github_issue
status: new
created_at: 2025-12-19 18:52:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3748466681", "title": "TEST-SEC-IOCTL-001: Verify IOCTL Access Control and Privilege Enforcement", "url": "https://github.com/zarfld/IntelAvbFilter/issues/264", "user": "zarfld", "user_url": "https://github.com/zarfld", "repo": "IntelAvbFilter", "body_preview": "## Test Objective\n\nVerify that the AVB filter driver correctly enforces Administrator privilege requirements for write IOCTLs (PHC adjust, TAS configuration, CBS configuration) and prevents unprivileged users from modifying time synchronization or network QoS settings.\n\n## Traceability\n\n- Traces to: #73 (REQ-NF-SEC-IOCTL-001: IOCTL Access Control)\n\n## Test Type\n\n- **Type**: Security Test\n- **Level**: Integration Test\n- **Priority**: P0 (Critical - Security)\n- **Execution**: Automated with manual", "created": "2025-12-19T18:49:58Z", "labels": ["priority:p0", "status:backlog", "phase:07-verification-validation", "type:test-case", "test-type:security"], "context": "TEST-SEC-IOCTL-001: Verify IOCTL Access Control and Privilege Enforcement ## Test Objective\n\nVerify that the AVB filter driver correctly enforces Administrator privilege requirements for write IOCTLs (PHC adjust, TAS configuration, CBS configuration) and prevents unprivileg"}


identifier: gh_issue_3748419993
source: github_issue
status: new
created_at: 2025-12-19 18:52:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3748419993", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/yarcouwd/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @yarcouwd! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019", "created": "2025-12-19T18:32:25Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @yarcouwd! Welcome to y"}


identifier: gh_issue_3748346361
source: github_issue
status: new
created_at: 2025-12-19 19:04:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3748346361", "title": "feature(collaboration): Cloud Desktop", "url": "https://github.com/kstewart83/rubigo/issues/27", "user": "kstewart83", "user_url": "https://github.com/kstewart83", "repo": "rubigo", "body_preview": "## Context\n\nAdd a Cloud Desktop sub-module to the Collaboration module. Users can launch isolated cloud desktops in a browser-embedded experience.\n\n## Core Functionality\n\n- **Launch Desktop**: Provision an isolated cloud desktop environment on-demand\n- **Embedded Experience**: Stream the desktop directly within the Rubigo UI (no external client needed)\n- **Session Management**: Start, stop, pause, resume desktop sessions\n- **Resource Controls**: Configure desktop specs (CPU, memory, storage)\n- *", "created": "2025-12-19T18:06:07Z", "labels": ["enhancement"], "context": "feature(collaboration): Cloud Desktop ## Context\n\nAdd a Cloud Desktop sub-module to the Collaboration module. Users can launch isolated cloud desktops in a browser-embedded experience.\n\n## Core Functionality\n\n- **Launch Desktop**: Provisi"}


identifier: gh_issue_3748499547
source: github_issue
status: new
created_at: 2025-12-19 19:17:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3748499547", "title": "[German Translation] Issue 1: Complete 10 High-Priority ISMS Documentation Pages", "url": "https://github.com/Hack23/homepage/issues/869", "user": "pethers", "user_url": "https://github.com/pethers", "repo": "homepage", "body_preview": "## \ud83c\udfaf Objective\nCreate German translations (_de.html) for 10 high-priority ISMS policy pages to strengthen German cybersecurity compliance content coverage.\n\n## \ud83d\udccb Background\n**Current State:**\n- German Coverage: 61/96 files (63.5%)\n- Missing: 35 files\n- Priority: \ud83d\udd34 **HIGH** - ISMS policies critical for German enterprise market\n\n**Strategic Importance:**\n- Germany (83M population) has strong ISO 27001, BSI, and GDPR compliance requirements\n- German enterprises require professional German-language ", "created": "2025-12-19T19:03:11Z", "labels": ["priority:high", "translation", "german", "isms"], "context": "[German Translation] Issue 1: Complete 10 High-Priority ISMS Documentation Pages ## \ud83c\udfaf Objective\nCreate German translations (_de.html) for 10 high-priority ISMS policy pages to strengthen German cybersecurity compliance content coverage.\n\n## \ud83d\udccb Background\n**Current State:**\n- German"}


identifier: gh_issue_3748424393
source: github_issue
status: new
created_at: 2025-12-19 19:17:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3748424393", "title": "Security Health Check - GOOD (85/100) - 2025-12-19", "url": "https://github.com/Sami9889/Sami.dev-website/issues/218", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/19/2025, 6:33:51 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 9\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Securi", "created": "2025-12-19T18:33:57Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-19 # Security Health Check Report\n\n**Generated:** 12/19/2025, 6:33:51 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Inc"}


identifier: gh_issue_3748417386
source: github_issue
status: new
created_at: 2025-12-19 19:17:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3748417386", "title": "Wiz - 'main' Branch Scan Overview", "url": "https://github.com/rmaury-org/sorcery-solutions-frontend/issues/3", "user": "wiz-5d813949ef[bot]", "user_url": "https://github.com/apps/wiz-5d813949ef", "repo": "sorcery-solutions-frontend", "body_preview": "<!-- WizIssue-1d9f648c504c9047d99f272cf811a9cfcb00c8146de3f19e3acd5756aa35f3f7-main -->\n\n<a><picture><source media=\"(prefers-color-scheme: dark)\" srcset=\"https://assets.wiz.io/wiz-code/banners/pull_request_banner_dark.svg\"><source media=\"(prefers-color-scheme: light)\" srcset=\"https://assets.wiz.io/wiz-code/banners/pull_request_banner_light.svg\"><img align=\"top\" valign=\"top\" alt=\"Wiz Remediation Pull Request Banner\" title=\"Wiz Remediation Pull Request Banner\" src=\"https://assets.wiz.io/wiz-code/b", "created": "2025-12-19T18:31:20Z", "labels": ["Wiz-remediation"], "context": "Wiz - 'main' Branch Scan Overview <!-- WizIssue-1d9f648c504c9047d99f272cf811a9cfcb00c8146de3f19e3acd5756aa35f3f7-main -->\n\n<a><picture><source media=\"(prefers-color-scheme: dark)\" srcset=\"https://assets.wiz.io/wiz-code/banners/pull_re"}


identifier: gh_issue_3748405494
source: github_issue
status: new
created_at: 2025-12-19 19:17:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3748405494", "title": "[RegisterSec] WatchGuard sounds alarm as critical Firebox flaw comes under active attack", "url": "https://github.com/SecOpsNews/news/issues/61225", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "news", "body_preview": "\n\n#### Newly disclosed vulnerability already being abused, users urged to lock down exposed firewalls\n\nWatchGuard is in emergency patch mode after confirming that a critical remote code execution flaw in its Firebox firewalls is under active attack.\u2026\n\n\n\n<https://go.theregister.com/feed/www.theregister.com/2025/12/19/watchguard_firebox/>\n\n", "created": "2025-12-19T18:27:09Z", "labels": ["RegisterSec"], "context": "[RegisterSec] WatchGuard sounds alarm as critical Firebox flaw comes under active attack \n\n#### Newly disclosed vulnerability already being abused, users urged to lock down exposed firewalls\n\nWatchGuard is in emergency patch mode after confirming that a critical remote code execution flaw"}


identifier: gh_issue_3748562464
source: github_issue
status: new
created_at: 2025-12-19 19:29:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3748562464", "title": "[MEDIUM] Security Vulnerability in express", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3649", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-29041\n\n**Description:**\nExpress.js minimalist web framework for node. Versions of Express.js prior to 4.19.0 and all pre-release alpha and beta versions of 5.0 are affected by an open redirect vulnerability using malformed URLs. When a user of Express performs a redirect using a user-provided URL Express performs an encode [using `encodeurl`](http", "created": "2025-12-19T19:21:29Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in express ## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-29041\n\n**Description:**\nExpress.js minimalist web"}


identifier: gh_issue_3748561472
source: github_issue
status: new
created_at: 2025-12-19 19:29:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3748561472", "title": "[MEDIUM] Security Vulnerability in express", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3648", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-29041\n\n**Description:**\nExpress.js minimalist web framework for node. Versions of Express.js prior to 4.19.0 and all pre-release alpha and beta versions of 5.0 are affected by an open redirect vulnerability using malformed URLs. When a user of Express performs a redirect using a user-provided URL Express performs an encode [using `encodeurl`](http", "created": "2025-12-19T19:21:17Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in express ## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-29041\n\n**Description:**\nExpress.js minimalist web"}


identifier: gh_issue_3748561398
source: github_issue
status: new
created_at: 2025-12-19 19:29:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3748561398", "title": "[MEDIUM] Security Vulnerability in express", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3647", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-29041\n\n**Description:**\nExpress.js minimalist web framework for node. Versions of Express.js prior to 4.19.0 and all pre-release alpha and beta versions of 5.0 are affected by an open redirect vulnerability using malformed URLs. When a user of Express performs a redirect using a user-provided URL Express performs an encode [using `encodeurl`](http", "created": "2025-12-19T19:21:14Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in express ## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-29041\n\n**Description:**\nExpress.js minimalist web"}


identifier: gh_issue_3748512639
source: github_issue
status: new
created_at: 2025-12-19 19:29:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3748512639", "title": "Replace placeholder security scanning with actual tools", "url": "https://github.com/JoshLuedeman/cosmosdb-to-sql-migration-tool/issues/77", "user": "JoshLuedeman", "user_url": "https://github.com/JoshLuedeman", "repo": "cosmosdb-to-sql-migration-tool", "body_preview": "## Description\nCurrently have placeholder steps for security scanning in release pipeline. Should integrate actual scanning tools.\n\n## Location\n- `.github/workflows/` (add security scanning workflows)\n\n## Tasks\n- [ ] Add SAST scanning (e.g., CodeQL)\n- [ ] Add dependency vulnerability scanning\n- [ ] Add secrets scanning\n- [ ] Configure scan thresholds\n- [ ] Add security scanning badges to README\n- [ ] Document security requirements in CONTRIBUTING.md\n\n## Acceptance Criteria\n- All security scans r", "created": "2025-12-19T19:07:42Z", "labels": ["priority: medium", "type: technical-debt", "area: cicd", "size: S"], "context": "Replace placeholder security scanning with actual tools ## Description\nCurrently have placeholder steps for security scanning in release pipeline. Should integrate actual scanning tools.\n\n## Location\n- `.github/workflows/` (add security scanning workflows)"}


identifier: gh_issue_3748691870
source: github_issue
status: new
created_at: 2025-12-19 20:06:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3748691870", "title": "Validate and update Ruby version using new documentation", "url": "https://github.com/jcowhigjr/yelp_search_demo/issues/1302", "user": "jcowhigjr", "user_url": "https://github.com/jcowhigjr", "repo": "yelp_search_demo", "body_preview": "## Summary\n\nFollow the new Ruby version management documentation to check if we're on the latest Ruby patch version and update if needed.\n\n## Context\n\nWe now have comprehensive documentation at `docs/ruby-version-management.md` (PR #1301) that describes the process for managing Ruby versions using `mise`. This issue is to validate the process by checking and potentially updating to the latest patch version.\n\n## Tasks\n\n1. Check current Ruby version in `mise.toml`\n2. Use `mise ls-remote ruby | tai", "created": "2025-12-19T20:04:06Z", "labels": [], "context": "Validate and update Ruby version using new documentation ## Summary\n\nFollow the new Ruby version management documentation to check if we're on the latest Ruby patch version and update if needed.\n\n## Context\n\nWe now have comprehensive documentation at `docs/"}


identifier: gh_issue_3748759191
source: github_issue
status: new
created_at: 2025-12-19 20:31:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3748759191", "title": "GitHub Changelog:CodeQL 2.23.7 and 2.23.8 add security queries for Go and Rust", "url": "https://github.com/forks-felickz/github-changelog-reader/issues/3", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "github-changelog-reader", "body_preview": "# CodeQL 2.23.7 and 2.23.8 add security queries for Go and Rust\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\" \"http://www.w3.org/TR/REC-html40/loose.dtd\">\n<html><body><p>CodeQL is the static analysis engine behind GitHub&rsquo;s <a href=\"https://docs.github.com/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning-with-codeql\">Code Scanning</a> and <a href=\"https://docs.github.com/code-security/code-quality/concepts/about-code-quality\">Code Quality</a> pr", "created": "2025-12-19T20:27:40Z", "labels": ["changelog", "Improvement", "application security"], "context": "GitHub Changelog:CodeQL 2.23.7 and 2.23.8 add security queries for Go and Rust # CodeQL 2.23.7 and 2.23.8 add security queries for Go and Rust\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\" \"http://www.w3.org/TR/REC-html40/loose.dtd\">\n<html><body><p>CodeQL is the"}


identifier: gh_issue_3748690710
source: github_issue
status: new
created_at: 2025-12-19 20:31:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3748690710", "title": "Update dependencies to latest versions", "url": "https://github.com/rysweet/azure-tenant-grapher/issues/619", "user": "rysweet", "user_url": "https://github.com/rysweet", "repo": "azure-tenant-grapher", "body_preview": "## Summary\n\nUpdate all project dependencies to their latest compatible versions to maintain security, performance, and feature parity with upstream packages.\n\n## Current Status\n\n50+ outdated dependencies identified via `uv pip list --outdated`:\n\n### Major Version Updates (High Risk)\n- neo4j: 5.28.1 \u2192 6.0.3 (MAJOR)\n- openai: 1.86.0 \u2192 2.14.0 (MAJOR) \n- pytest: 8.4.0 \u2192 9.0.2 (MAJOR)\n- pytest-cov: 6.2.0 \u2192 7.0.0 (MAJOR)\n- protobuf: 5.29.5 \u2192 6.33.2 (MAJOR)\n- wrapt: 1.17.2 \u2192 2.0.1 (MAJOR)\n- And more...", "created": "2025-12-19T20:03:40Z", "labels": [], "context": "Update dependencies to latest versions ## Summary\n\nUpdate all project dependencies to their latest compatible versions to maintain security, performance, and feature parity with upstream packages.\n\n## Current Status\n\n50+ outdated dependenc"}


identifier: gh_issue_3748461126
source: github_issue
status: new
created_at: 2025-12-19 20:31:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3748461126", "title": "save does not save adjusted branch for submodule in subdataset", "url": "https://github.com/datalad/datalad/issues/7768", "user": "yarikoptic", "user_url": "https://github.com/yarikoptic", "repo": "datalad", "body_preview": "### What is the problem?\n\nWe are \"having fun\" with @just-meng on windows.  \n\n<details>\n<summary>here is a full protocol of me initiating vfat and cloning hierarchy and trying to save</summary> \n\n```shell\n\u276f tools/eval_under_testloopfs bash\nI: vfat of 10:  /home/yoh/.tmp/datalad-fs-fIsO1\n10+0 records in\n10+0 records out\n10321920 bytes (10 MB, 9,8 MiB) copied, 0,00396579 s, 2,6 GB/s\n[sudo] password for yoh: \nmkfs.fat 4.2 (2021-01-31)\nI: running bash\nI: New layout of history files also found.\n   Ple", "created": "2025-12-19T18:47:51Z", "labels": ["platform-windows", "adjusted-branches", "crippled-filesystems", "cmd-save"], "context": "save does not save adjusted branch for submodule in subdataset ### What is the problem?\n\nWe are \"having fun\" with @just-meng on windows.  \n\n<details>\n<summary>here is a full protocol of me initiating vfat and cloning hierarchy and trying to save</summary> \n\n```sh"}


identifier: gh_issue_3748708832
source: github_issue
status: new
created_at: 2025-12-19 20:31:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3748708832", "title": "Vulnerable Dependency Axios", "url": "https://github.com/DomoApps/ryuu-proxy/issues/72", "user": "invaderb", "user_url": "https://github.com/invaderb", "repo": "ryuu-proxy", "body_preview": "npm audit report\n \naxios  <=0.30.1\nSeverity: high\nAxios Cross-Site Request Forgery Vulnerability - https://github.com/advisories/GHSA-wf5p-g6vw-rhxx\nAxios is vulnerable to DoS attack through lack of data size check - https://github.com/advisories/GHSA-4hjh-wcwx-xvwj\naxios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL - https://github.com/advisories/GHSA-jr5f-v2jv-69x6\nfix available via `npm audit fix --force`\nWill install @domoinc/ryuu-proxy@4.0.6, which is a break", "created": "2025-12-19T20:09:52Z", "labels": [], "context": "Vulnerable Dependency Axios npm audit report\n \naxios  <=0.30.1\nSeverity: high\nAxios Cross-Site Request Forgery Vulnerability - https://github.com/advisories/GHSA-wf5p-g6vw-rhxx\nAxios is vulnerable to DoS attack through lack of d"}


identifier: gh_issue_3748793078
source: github_issue
status: new
created_at: 2025-12-19 20:43:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3748793078", "title": "Fix semantic release failure", "url": "https://github.com/subhamay-bhattacharyya-gha/tf-lint-action/issues/28", "user": "bsubhamay", "user_url": "https://github.com/bsubhamay", "repo": "tf-lint-action", "body_preview": "Fix the semantic release which is failing with the following error:\n\n```text\nRun npm ci\nnpm WARN EBADENGINE Unsupported engine {\nnpm WARN EBADENGINE   package: '@semantic-release/github@12.0.2',\nnpm WARN EBADENGINE   required: { node: '^22.14.0 || >= 24.10.0' },\nnpm WARN EBADENGINE   current: { node: 'v20.10.0', npm: '10.2.3' }\nnpm WARN EBADENGINE }\nnpm WARN EBADENGINE Unsupported engine {\nnpm WARN EBADENGINE   package: '@semantic-release/npm@13.1.1',\nnpm WARN EBADENGINE   required: { node: '^22", "created": "2025-12-19T20:38:20Z", "labels": ["new"], "context": "Fix semantic release failure Fix the semantic release which is failing with the following error:\n\n```text\nRun npm ci\nnpm WARN EBADENGINE Unsupported engine {\nnpm WARN EBADENGINE   package: '@semantic-release/github@12.0.2',\nnpm W"}


identifier: gh_issue_3748769657
source: github_issue
status: new
created_at: 2025-12-19 21:09:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3748769657", "title": "[Bug] AttributeError: 'list' object has no attribute 'dtype'", "url": "https://github.com/nunchaku-tech/ComfyUI-nunchaku/issues/725", "user": "MoonMoon82", "user_url": "https://github.com/MoonMoon82", "repo": "ComfyUI-nunchaku", "body_preview": "### Checklist\n\n- [x] 1. I have searched for related issues and FAQs (https://github.com/nunchaku-tech/nunchaku/blob/main/docs/faq.md) but was unable to find a solution.\n- [x] 2. The issue persists in the latest version.\n- [x] 3. Please note that without environment information and a minimal reproducible example, it will be difficult for us to reproduce and address the issue, which may delay our response.\n- [x] 4. If your report is a question rather than a bug, please submit it as a discussion at", "created": "2025-12-19T20:31:05Z", "labels": [], "context": "[Bug] AttributeError: 'list' object has no attribute 'dtype' ### Checklist\n\n- [x] 1. I have searched for related issues and FAQs (https://github.com/nunchaku-tech/nunchaku/blob/main/docs/faq.md) but was unable to find a solution.\n- [x] 2. The issue persists in "}


identifier: gh_issue_3748938913
source: github_issue
status: new
created_at: 2025-12-19 21:33:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3748938913", "title": "[EPIC] Security Scanning Integration", "url": "https://github.com/pkurri/prismcode/issues/183", "user": "pkurri", "user_url": "https://github.com/pkurri", "repo": "prismcode", "body_preview": "## \ud83c\udfaf Epic\nIntegrate with security scanning tools to catch vulnerabilities in generated code.\n\n## \u2705 Goals\n- Snyk vulnerability scanning\n- SonarQube code quality checks\n- Dependabot alerts integration\n- SAST/DAST pipeline integration\n\n## \ud83d\udcca Success Metrics\n- Zero high-severity vulnerabilities in generated code\n- <5 minute scan time\n- 95% issue auto-remediation\n\n## \ud83d\udcdd Story Points: 13", "created": "2025-12-19T21:27:17Z", "labels": ["epic", "priority:P0", "phase-5", "antigravity-ready", "enterprise", "security"], "context": "[EPIC] Security Scanning Integration ## \ud83c\udfaf Epic\nIntegrate with security scanning tools to catch vulnerabilities in generated code.\n\n## \u2705 Goals\n- Snyk vulnerability scanning\n- SonarQube code quality checks\n- Dependabot alerts integration\n-"}


identifier: gh_issue_3748969322
source: github_issue
status: new
created_at: 2025-12-19 21:58:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3748969322", "title": "@opentelmetry/host-metrics@0.38.0 contains vulnerable systeminformation@5.23.8", "url": "https://github.com/open-telemetry/opentelemetry-js-contrib/issues/3324", "user": "apolloSummit2024", "user_url": "https://github.com/apolloSummit2024", "repo": "opentelemetry-js-contrib", "body_preview": "Security Fix Pending Release: @opentelemetry/host-metrics\n\nThe currently published version of @opentelemetry/host-metrics@0.38.0 (released Dec 17, 2025) depends on systeminformation@5.23.8, which contains a HIGH severity command injection vulnerability.\n\nThe fix has already been merged into the main branch, where @opentelemetry/host-metrics now depends on systeminformation@5.27.14. However, this fix has not yet been published to npm, leaving users exposed to a known vulnerability when installing", "created": "2025-12-19T21:39:45Z", "labels": [], "context": "@opentelmetry/host-metrics@0.38.0 contains vulnerable systeminformation@5.23.8 Security Fix Pending Release: @opentelemetry/host-metrics\n\nThe currently published version of @opentelemetry/host-metrics@0.38.0 (released Dec 17, 2025) depends on systeminformation@5.23.8, which cont"}


identifier: gh_issue_3749013675
source: github_issue
status: new
created_at: 2025-12-19 21:58:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3749013675", "title": "[Rule] Security agent (.cursor/rules/agent-security.mdc)", "url": "https://github.com/gc-lover/necpgame-monorepo/issues/1897", "user": "gc-lover", "user_url": "https://github.com/gc-lover", "repo": "necpgame-monorepo", "body_preview": "", "created": "2025-12-19T21:57:47Z", "labels": [], "context": "[Rule] Security agent (.cursor/rules/agent-security.mdc) "}


identifier: gh_issue_3748979841
source: github_issue
status: new
created_at: 2025-12-19 21:58:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3748979841", "title": "cypress-15.8.0.tgz: 1 vulnerabilities (highest severity is: 8.1)", "url": "https://github.com/jon77p/jonprentice.me/issues/1171", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "jonprentice.me", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>cypress-15.8.0.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /frontend/package.json</p>\n<p>Path to vulnerable library: /frontend/package.json,/frontend/node_modules/systeminformation/package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/jon77p/jonprentice.me/commit/15847b29a5187ce5767d191602e33a2411d7ea0f\">15847b29", "created": "2025-12-19T21:44:18Z", "labels": ["Mend: dependency security vulnerability"], "context": "cypress-15.8.0.tgz: 1 vulnerabilities (highest severity is: 8.1) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>cypress-15.8.0.tgz</b></summary>\n\n<p></p>\n<p>Pa"}


identifier: gh_issue_3748927244
source: github_issue
status: new
created_at: 2025-12-19 21:58:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3748927244", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/fatin-ahamed/skills-secure-repository-supply-chains/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chains", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @fatin-ahamed! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step", "created": "2025-12-19T21:22:46Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @fatin-ahamed! Welcome "}


identifier: gh_issue_3748958669
source: github_issue
status: new
created_at: 2025-12-19 22:10:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3748958669", "title": "Implement real auth, rate limiting, and mutation policy", "url": "https://github.com/Sakeeb91/arctic-text2sql-agent/issues/33", "user": "Sakeeb91", "user_url": "https://github.com/Sakeeb91", "repo": "arctic-text2sql-agent", "body_preview": "1. SUMMARY\n- Auth and rate limiting are placeholder-only: a hardcoded demo login, no route protection, and in-memory limits. No RBAC or mutation policy is enforced or documented. This leaves the API effectively open and ungoverned.\n- Impact: security exposure (unauthenticated access), lack of abuse controls, and unclear mutation guarantees.\n\n2. SYSTEM CONTEXT\n```\napp/\n\u251c\u2500 routes.py                 # Demo login, no auth dependencies on routes\n\u2514\u2500 security/\n   \u251c\u2500 auth.py                # JWT helpers", "created": "2025-12-19T21:36:02Z", "labels": [], "context": "Implement real auth, rate limiting, and mutation policy 1. SUMMARY\n- Auth and rate limiting are placeholder-only: a hardcoded demo login, no route protection, and in-memory limits. No RBAC or mutation policy is enforced or documented. This leaves the API e"}


identifier: gh_issue_3748957374
source: github_issue
status: new
created_at: 2025-12-19 22:10:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3748957374", "title": "[Server Submission]: Add deno-mcp - A comprehensive MCP server for Deno development tools", "url": "https://github.com/cline/mcp-marketplace/issues/554", "user": "sudsarkar13", "user_url": "https://github.com/sudsarkar13", "repo": "mcp-marketplace", "body_preview": "### GitHub Repository URL\n\nhttps://github.com/sudsarkar13/deno-mcp\n\n### Logo Image\n\n<img width=\"400\" height=\"400\" alt=\"Image\" src=\"https://github.com/user-attachments/assets/19862e5a-b6b9-43c3-911f-604481b45b37\" />\n\n### Installation Testing\n\n- [x] I have tested that Cline can successfully set up this server using only the README.md and/or llms-install.md file\n- [x] The server is stable and ready for public use\n\n### Additional Information\n\n[![CI/CD Pipeline](https://github.com/sudsarkar13/deno-mc", "created": "2025-12-19T21:35:25Z", "labels": [], "context": "[Server Submission]: Add deno-mcp - A comprehensive MCP server for Deno development tools ### GitHub Repository URL\n\nhttps://github.com/sudsarkar13/deno-mcp\n\n### Logo Image\n\n<img width=\"400\" height=\"400\" alt=\"Image\" src=\"https://github.com/user-attachments/assets/19862e5a-b6b9-43c3-911f-60"}


identifier: gh_issue_3749081634
source: github_issue
status: new
created_at: 2025-12-19 22:22:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3749081634", "title": "feat: Implement Vulnerability Resolver skill for CVE management", "url": "https://github.com/finos/morphir-dotnet/issues/281", "user": "DamianReeves", "user_url": "https://github.com/DamianReeves", "repo": "morphir-dotnet", "body_preview": "## Summary\n\nImplement a Vulnerability Resolver skill to automate CVE detection, resolution, and suppression using OWASP Dependency-Check.\n\n## Background\n\n- PR #273 introduced CVE scanning with OWASP Dependency-Check\n- PR #276 fixed real vulnerabilities and identified false positives\n- Currently, vulnerability resolution is manual and undocumented\n- No standardized process for suppression or false positive documentation\n\n## Requirements\n\nSee full PRD: [vulnerability-resolver-skill-requirements.md", "created": "2025-12-19T22:17:00Z", "labels": ["enhancement"], "context": "feat: Implement Vulnerability Resolver skill for CVE management ## Summary\n\nImplement a Vulnerability Resolver skill to automate CVE detection, resolution, and suppression using OWASP Dependency-Check.\n\n## Background\n\n- PR #273 introduced CVE scanning with OWASP D"}


identifier: gh_issue_3749049411
source: github_issue
status: new
created_at: 2025-12-19 22:22:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3749049411", "title": "Weekly Changelog Security Report - 2025-12-19", "url": "https://github.com/casanova-21-test-org/github-changelog-mcp/issues/52", "user": "casanova-21", "user_url": "https://github.com/casanova-21", "repo": "github-changelog-mcp", "body_preview": "# Weekly Changelog Security Report - December 12-19, 2025\n\n## Generally Available \ud83d\udea2\n\n### [Code scanning alert assignees are now generally available](https://github.blog/changelog/2025-12-16-code-scanning-alert-assignees-are-now-generally-available) (2025-12-16)\nGitHub code scanning now allows assigning alerts to specific team members, enabling better security issue tracking and accountability across development teams.\n\n### [Conda ecosystem support for Dependabot version updates now generally ava", "created": "2025-12-19T22:07:49Z", "labels": ["changelog", "weekly-report", "automation", "application-security", "supply-chain-security"], "context": "Weekly Changelog Security Report - 2025-12-19 # Weekly Changelog Security Report - December 12-19, 2025\n\n## Generally Available \ud83d\udea2\n\n### [Code scanning alert assignees are now generally available](https://github.blog/changelog/2025-12-16-code-scann"}


identifier: gh_issue_3749058460
source: github_issue
status: new
created_at: 2025-12-19 22:23:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3749058460", "title": "Refactor MarkdownEditor and overhaul DB security for multi tenant architecture", "url": "https://github.com/AutumnsGrove/GroveEngine/issues/100", "user": "AutumnsGrove", "user_url": "https://github.com/AutumnsGrove", "repo": "GroveEngine", "body_preview": "This is a master TODO file, generated by Gemini 3 Pro\n\n# GROVE ENGINE: PRODUCTION REFACTOR PLAN\n**Version:** 1.0.0-RC\n**Focus:** UX Simplification, Multi-Tenant Security, Bundle Optimization\n**Target Audience:** Agent / Dev Team\n\n---\n\n## \ud83d\udfe2 PHASE 1: The Editor \"Diet\" & UX Overhaul\n*Goal: Move from a \"Notion-clone\" to a \"Medium-style\" writing experience.*\n\n### 1.1 Remove Bloat\n- [ ] **Remove Split-Pane View:** Deprecate the \"Write vs. Preview\" split interface. Refactor main view to be a single-pan", "created": "2025-12-19T22:10:02Z", "labels": [], "context": "Refactor MarkdownEditor and overhaul DB security for multi tenant architecture This is a master TODO file, generated by Gemini 3 Pro\n\n# GROVE ENGINE: PRODUCTION REFACTOR PLAN\n**Version:** 1.0.0-RC\n**Focus:** UX Simplification, Multi-Tenant Security, Bundle Optimization\n**Target "}


identifier: gh_issue_3748970575
source: github_issue
status: new
created_at: 2025-12-19 22:23:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3748970575", "title": "tsx CLI fails in Codex sandbox with EPERM when creating IPC pipe", "url": "https://github.com/openai/codex/issues/8343", "user": "lastmjs", "user_url": "https://github.com/lastmjs", "repo": "codex", "body_preview": "## Summary\nIn the Codex CLI sandbox, the `tsx` CLI fails when it attempts to create its IPC pipe. The intent of this issue is to ensure **`tsx` can run normally inside the sandbox** (or that the sandbox provides a compatible fallback/permission), because `tsx` is a common TypeScript runner.\n\n## Environment\n- Codex CLI sandbox (Linux; restricted IPC/socket permissions)\n- Node.js v22.18.0\n- tsx v4.21.0\n\n## Minimal reproducible example\n```bash\nmkdir -p /tmp/tsx-repro && cd /tmp/tsx-repro\nnpm init -", "created": "2025-12-19T21:40:20Z", "labels": ["bug", "sandbox", "CLI"], "context": "tsx CLI fails in Codex sandbox with EPERM when creating IPC pipe ## Summary\nIn the Codex CLI sandbox, the `tsx` CLI fails when it attempts to create its IPC pipe. The intent of this issue is to ensure **`tsx` can run normally inside the sandbox** (or that the sandb"}


identifier: gh_issue_3748900603
source: github_issue
status: new
created_at: 2025-12-19 22:23:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3748900603", "title": "[SECURITY] Fix critical npm dependency vulnerabilities", "url": "https://github.com/VibeTensor/IssueFlow/issues/44", "user": "ascender1729", "user_url": "https://github.com/ascender1729", "repo": "IssueFlow", "body_preview": "## Summary\nFix 4 security vulnerabilities identified by npm audit, including 1 HIGH severity issue in the Astro framework.\n\n## Current State\nRunning `npm audit` reveals the following vulnerabilities:\n\n| Package | Severity | CVE/Advisory | Issue |\n|---------|----------|--------------|-------|\n| `astro` (<=5.15.8) | **HIGH** | GHSA-wrwg-2hg8-v723 | Reflected XSS via server islands |\n| `astro` | MODERATE | GHSA-hr2q-hp5q-x767 | URL manipulation bypass |\n| `astro` | MODERATE | GHSA-fvmw-cj7j-j39q | ", "created": "2025-12-19T21:13:47Z", "labels": ["bug", "security"], "context": "[SECURITY] Fix critical npm dependency vulnerabilities ## Summary\nFix 4 security vulnerabilities identified by npm audit, including 1 HIGH severity issue in the Astro framework.\n\n## Current State\nRunning `npm audit` reveals the following vulnerabilities:\n"}


identifier: gh_issue_3748906359
source: github_issue
status: new
created_at: 2025-12-19 22:34:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3748906359", "title": "Dev services restarting container on tests", "url": "https://github.com/quarkiverse/quarkus-amazon-services/issues/1949", "user": "kauanmocelin", "user_url": "https://github.com/kauanmocelin", "repo": "quarkus-amazon-services", "body_preview": "After upgrading Quarkus from v3.20 to v3.27, when running two tests annotated with @QuarkusTest, the LocalStack container is started and then shut down. As a result, the first S3Client loses its reference to the LocalStack container\u2019s IP and port, resulting in a \u201cconnection refused\u201d error.\n\nWhen I run the tests one by one, this error does not occur.\n\n```\n2025-12-19 16:11:25,899 INFO  [io.qua.wir.dev.WireMockServer] (build-22) Using HTTP server impl: Jetty11HttpServer\n2025-12-19 16:11:26,276 INFO", "created": "2025-12-19T21:15:25Z", "labels": [], "context": "Dev services restarting container on tests After upgrading Quarkus from v3.20 to v3.27, when running two tests annotated with @QuarkusTest, the LocalStack container is started and then shut down. As a result, the first S3Client loses its refer"}


identifier: gh_issue_3748852950
source: github_issue
status: new
created_at: 2025-12-19 22:34:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3748852950", "title": "\ud83d\udd25 other/syslog-logstash-ksqldb", "url": "https://github.com/vdesabou/kafka-docker-playground/issues/7479", "user": "vdesabou", "user_url": "https://github.com/vdesabou", "repo": "kafka-docker-playground", "body_preview": "\ud83c\udd95\ud83d\udca5 New issue !\n\n\ud83d\udd25 CP 8.1.1 \ud83d\udd50 2025-12-19 18:30 \ud83d\udcc4 [start.sh](https://github.com/vdesabou/kafka-docker-playground/blob/master/other/syslog-logstash-ksqldb/start.sh) \ud83d\udd17 https://github.com/vdesabou/kafka-docker-playground/actions/runs/20378694571/job/58564206315\n\n<details><summary>Logs</summary>\n<pre>\n\n<code>\n\n18:26:58 \u2139\ufe0f \ud83d\udc80 kill all docker containers (disable with 'playground config container-kill-all-before-run false')\n18:26:58 \u2139\ufe0f \ud83d\udc80 kill all docker containers\nUnable to find image 'ddev/ddev-utilities", "created": "2025-12-19T20:58:10Z", "labels": ["new \ud83c\udd95"], "context": "\ud83d\udd25 other/syslog-logstash-ksqldb \ud83c\udd95\ud83d\udca5 New issue !\n\n\ud83d\udd25 CP 8.1.1 \ud83d\udd50 2025-12-19 18:30 \ud83d\udcc4 [start.sh](https://github.com/vdesabou/kafka-docker-playground/blob/master/other/syslog-logstash-ksqldb/start.sh) \ud83d\udd17 https://github.com/vdesabou/kafka-do"}


identifier: gh_issue_3748851803
source: github_issue
status: new
created_at: 2025-12-19 22:34:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3748851803", "title": "\ud83d\udd25 other/broker-schema-validation", "url": "https://github.com/vdesabou/kafka-docker-playground/issues/7478", "user": "vdesabou", "user_url": "https://github.com/vdesabou", "repo": "kafka-docker-playground", "body_preview": "\ud83c\udd95\ud83d\udca5 New issue !\n\n\ud83d\udd25 CP 8.1.1 \ud83d\udd50 2025-12-19 18:31 \ud83d\udcc4 [2way-ssl-and-security-plugin.sh](https://github.com/vdesabou/kafka-docker-playground/blob/master/other/broker-schema-validation/2way-ssl-and-security-plugin.sh) \ud83d\udd17 https://github.com/vdesabou/kafka-docker-playground/actions/runs/20378694571/job/58564206289\n\n<details><summary>Logs</summary>\n<pre>\n\n<code>\n\n18:29:48 \u2139\ufe0f \ud83d\udc80 kill all docker containers (disable with 'playground config container-kill-all-before-run false')\n18:29:48 \u2139\ufe0f \ud83d\udc80 kill all docker cont", "created": "2025-12-19T20:57:44Z", "labels": ["new \ud83c\udd95"], "context": "\ud83d\udd25 other/broker-schema-validation \ud83c\udd95\ud83d\udca5 New issue !\n\n\ud83d\udd25 CP 8.1.1 \ud83d\udd50 2025-12-19 18:31 \ud83d\udcc4 [2way-ssl-and-security-plugin.sh](https://github.com/vdesabou/kafka-docker-playground/blob/master/other/broker-schema-validation/2way-ssl-and-security-p"}


identifier: gh_issue_3748851723
source: github_issue
status: new
created_at: 2025-12-19 22:34:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3748851723", "title": "\ud83d\udd25 other/audit-logs", "url": "https://github.com/vdesabou/kafka-docker-playground/issues/7477", "user": "vdesabou", "user_url": "https://github.com/vdesabou", "repo": "kafka-docker-playground", "body_preview": "\ud83c\udd95\ud83d\udca5 New issue !\n\n\ud83d\udd25 CP 8.1.1 \ud83d\udd50 2025-12-19 18:28 \ud83d\udcc4 [start-rbac-sasl-plain.sh](https://github.com/vdesabou/kafka-docker-playground/blob/master/other/audit-logs/start-rbac-sasl-plain.sh) \ud83d\udd17 https://github.com/vdesabou/kafka-docker-playground/actions/runs/20378694571/job/58564206289\n\n<details><summary>Logs</summary>\n<pre>\n\n<code>\n\n18:26:50 \u2139\ufe0f \ud83d\udc80 kill all docker containers (disable with 'playground config container-kill-all-before-run false')\n18:26:50 \u2139\ufe0f \ud83d\udc80 kill all docker containers\nUnable to find image ", "created": "2025-12-19T20:57:41Z", "labels": ["new \ud83c\udd95"], "context": "\ud83d\udd25 other/audit-logs \ud83c\udd95\ud83d\udca5 New issue !\n\n\ud83d\udd25 CP 8.1.1 \ud83d\udd50 2025-12-19 18:28 \ud83d\udcc4 [start-rbac-sasl-plain.sh](https://github.com/vdesabou/kafka-docker-playground/blob/master/other/audit-logs/start-rbac-sasl-plain.sh) \ud83d\udd17 https://github.c"}


identifier: gh_issue_3749136750
source: github_issue
status: new
created_at: 2025-12-19 22:47:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3749136750", "title": "[Infra] Configure CI/CD Workflows", "url": "https://github.com/kcenon/database_server/issues/11", "user": "kcenon", "user_url": "https://github.com/kcenon", "repo": "database_server", "body_preview": "## \ud83d\udccb Overview\n\nConfigure CI/CD workflows for database_server matching the database_system pipeline structure.\n\n## \ud83c\udfaf Objectives\n\nSet up comprehensive CI/CD pipelines to ensure code quality, security, and reliability.\n\n## \ud83d\udce6 Workflows to Implement\n\nBased on database_system's CI/CD configuration:\n\n### Core Workflows\n\n| Workflow | Description | Priority |\n|----------|-------------|----------|\n| `ci.yml` | Main CI pipeline (build, test on multiple platforms) | \ud83d\udd34 High |\n| `integration-tests.yml` | Inte", "created": "2025-12-19T22:43:13Z", "labels": [], "context": "[Infra] Configure CI/CD Workflows ## \ud83d\udccb Overview\n\nConfigure CI/CD workflows for database_server matching the database_system pipeline structure.\n\n## \ud83c\udfaf Objectives\n\nSet up comprehensive CI/CD pipelines to ensure code quality, security, a"}


identifier: gh_issue_3749120612
source: github_issue
status: new
created_at: 2025-12-19 22:47:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3749120612", "title": "Dependency Dashboard", "url": "https://github.com/dgreenley/cache-test/issues/3", "user": "renovate[bot]", "user_url": "https://github.com/apps/renovate", "repo": "cache-test", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/dgreenley/cache-test).\n\n## Pending Approval\n\nThe following branches are pending approval. To create them, click on a checkbox below.\n\n - [ ] <!-- approve-branch=renovate/actions-cache-5.x -->chore(deps): update actions/cache action to v5\n\n## Rate-L", "created": "2025-12-19T22:32:03Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the M"}


identifier: gh_issue_3749161336
source: github_issue
status: new
created_at: 2025-12-19 22:59:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3749161336", "title": "GNU coreutils 9.9: Detailed Test report 12/19", "url": "https://github.com/uutils/coreutils/issues/9729", "user": "ChrisDryden", "user_url": "https://github.com/ChrisDryden", "repo": "coreutils", "body_preview": "# GNU coreutils Test Coverage Tracking\n\nFailing GNU tests as of **2025-12-19** | [Test Coverage Dashboard](https://uutils.github.io/coreutils/docs/test_coverage.html)\n\n## Overview\n\nWith the number of failing tests now small enough to track individually, this document provides detailed descriptions of each remaining test failure and the next steps needed to achieve full GNU compatibility. Theres a bunch of duplicate PR's for the same tests in the PR queue now and I'm hoping this will allow us to ", "created": "2025-12-19T22:56:01Z", "labels": [], "context": "GNU coreutils 9.9: Detailed Test report 12/19 # GNU coreutils Test Coverage Tracking\n\nFailing GNU tests as of **2025-12-19** | [Test Coverage Dashboard](https://uutils.github.io/coreutils/docs/test_coverage.html)\n\n## Overview\n\nWith the number of "}


identifier: gh_issue_3749031373
source: github_issue
status: new
created_at: 2025-12-19 23:11:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3749031373", "title": "GitHub Changelog:You can now require reviews before closing Dependabot alerts with delegated alert dismissal", "url": "https://github.com/forks-felickz/github-changelog-reader/issues/13", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "github-changelog-reader", "body_preview": "# You can now require reviews before closing Dependabot alerts with delegated alert dismissal\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\" \"http://www.w3.org/TR/REC-html40/loose.dtd\">\n<html><body><p>Delegated alert dismissal allows you to require a review process before Dependabot alerts are closed. This feature is available to GitHub Code Security customers and can be used in both the UI and API.</p>\n<p>This helps you better manage security risk, as well as meet audit and comp", "created": "2025-12-19T22:02:51Z", "labels": ["changelog", "Improvement", "Supply Chain Security"], "context": "GitHub Changelog:You can now require reviews before closing Dependabot alerts with delegated alert dismissal # You can now require reviews before closing Dependabot alerts with delegated alert dismissal\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\" \"http://www.w3.org/TR/REC-html40/loose.dtd\""}


identifier: gh_issue_3749039125
source: github_issue
status: new
created_at: 2025-12-19 23:11:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3749039125", "title": "x/vulndb: potential Go vuln in github.com/elastic/beats: GHSA-2mj3-6grc-px38", "url": "https://github.com/golang/vulndb/issues/4252", "user": "GoVulnBot", "user_url": "https://github.com/GoVulnBot", "repo": "vulndb", "body_preview": "Advisory [GHSA-2mj3-6grc-px38](https://github.com/advisories/GHSA-2mj3-6grc-px38) references a vulnerability in the following Go modules:\n\n| Module |\n| - |\n| [github.com/elastic/beats](https://pkg.go.dev/github.com/elastic/beats) |\n| [github.com/elastic/beats/v2](https://pkg.go.dev/github.com/elastic/beats/v2) |\n| [github.com/elastic/beats/v3](https://pkg.go.dev/github.com/elastic/beats/v3) |\n| [github.com/elastic/beats/v4](https://pkg.go.dev/github.com/elastic/beats/v4) |\n| [github.com/elastic/", "created": "2025-12-19T22:04:57Z", "labels": ["high priority", "triaged"], "context": "x/vulndb: potential Go vuln in github.com/elastic/beats: GHSA-2mj3-6grc-px38 Advisory [GHSA-2mj3-6grc-px38](https://github.com/advisories/GHSA-2mj3-6grc-px38) references a vulnerability in the following Go modules:\n\n| Module |\n| - |\n| [github.com/elastic/beats](https://pkg.go."}


identifier: gh_issue_3748783550
source: github_issue
status: new
created_at: 2025-12-19 23:11:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3748783550", "title": "[BUG] Vulnerability remediation request CVE-2025-47913", "url": "https://github.com/DataDog/datadog-agent/issues/44494", "user": "dimitrisdovinos", "user_url": "https://github.com/dimitrisdovinos", "repo": "datadog-agent", "body_preview": "### Agent version\n\n7.73.1\n\n### Bug Report\n\nCould you please address the vulnerability CVE-2025-47913 (golang.org/x/crypto)? This has a HIGH severity\n\n### Reproduction Steps\n\n_No response_\n\n### Agent configuration\n\n_No response_\n\n### Operating System\n\n_No response_\n\n### Other environment details\n\n_No response_", "created": "2025-12-19T20:35:34Z", "labels": ["team/agent-runtimes", "team/agent-configuration", "pending"], "context": "[BUG] Vulnerability remediation request CVE-2025-47913 ### Agent version\n\n7.73.1\n\n### Bug Report\n\nCould you please address the vulnerability CVE-2025-47913 (golang.org/x/crypto)? This has a HIGH severity\n\n### Reproduction Steps\n\n_No response_\n\n### Agent c"}


identifier: gh_issue_3748762018
source: github_issue
status: new
created_at: 2025-12-19 23:11:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3748762018", "title": "[SOOS] java-test: Fix CVE-2024-1597 Vulnerability (org.postgresql/postgresql@42.6.0)", "url": "https://github.com/SOOS-FAngelino/myPublicRepo/issues/106", "user": "soos-security-analysis-qa[bot]", "user_url": "https://github.com/apps/soos-security-analysis-qa", "repo": "myPublicRepo", "body_preview": "Summary:\n\nA Critical severity Vulnerability was detected in java-test at Dec 19, 2025, 05:23 PM. \n\n[CVE-2024-1597 Vulnerability (org.postgresql/postgresql@42.6.0)](https://qa-app.soos.io/clients/e0kowidt0/projects/6nyvw7x4r/branches/0fw5n01un?status=pending&search=CVE-2024-1597)\n\n----\n\nDescription:\n\nSQL injection possible in pgjdbc with PreferQueryMode=SIMPLE before versions 42.7.2 and others. Default mode is safe.\n\n----\n\nSolution:\n\nRemove or update the package(s) and version(s) which are causin", "created": "2025-12-19T20:28:35Z", "labels": [], "context": "[SOOS] java-test: Fix CVE-2024-1597 Vulnerability (org.postgresql/postgresql@42.6.0) Summary:\n\nA Critical severity Vulnerability was detected in java-test at Dec 19, 2025, 05:23 PM. \n\n[CVE-2024-1597 Vulnerability (org.postgresql/postgresql@42.6.0)](https://qa-app.soos.io/clients/e0kow"}


identifier: gh_issue_3748760676
source: github_issue
status: new
created_at: 2025-12-19 23:11:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3748760676", "title": "[SOOS] java-test: Fix CVE-2024-8184 Vulnerability (org.eclipse.jetty/jetty-server@12.0.0)", "url": "https://github.com/SOOS-FAngelino/myPublicRepo/issues/105", "user": "soos-security-analysis-qa[bot]", "user_url": "https://github.com/apps/soos-security-analysis-qa", "repo": "myPublicRepo", "body_preview": "Summary:\n\nA Medium severity Vulnerability was detected in java-test at Dec 19, 2025, 05:23 PM. \n\n[CVE-2024-8184 Vulnerability (org.eclipse.jetty/jetty-server@12.0.0)](https://qa-app.soos.io/clients/e0kowidt0/projects/6nyvw7x4r/branches/0fw5n01un?status=pending&search=CVE-2024-8184)\n\n----\n\nDescription:\n\nJetty's ThreadLimitHandler.getRemote() vulnerability allows attackers to cause DoS via crafted requests, leading to OutOfMemory errors.\n\n----\n\nSolution:\n\nRemove or update the package(s) and versio", "created": "2025-12-19T20:28:06Z", "labels": [], "context": "[SOOS] java-test: Fix CVE-2024-8184 Vulnerability (org.eclipse.jetty/jetty-server@12.0.0) Summary:\n\nA Medium severity Vulnerability was detected in java-test at Dec 19, 2025, 05:23 PM. \n\n[CVE-2024-8184 Vulnerability (org.eclipse.jetty/jetty-server@12.0.0)](https://qa-app.soos.io/clients/e0"}


identifier: gh_issue_3749178250
source: github_issue
status: new
created_at: 2025-12-19 23:23:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3749178250", "title": "[BOUNTY2] Ciphertext-Only Plaintext Recovery", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/417", "user": "chimmykk", "user_url": "https://github.com/chimmykk", "repo": "pvac_hfhe_cpp", "body_preview": "# PVAC-HFHE Vulnerability Report: Ciphertext-Only Plaintext Recovery\n\n## Proof of Concept Execution Log\n\nThe following output demonstrates the successful execution of the attack script (`attack.cpp`) against the bounty artifacts:\n\n```\n=== PVAC-HFHE Structural Attack ===\nTarget: Ciphertext-Only Plaintext Recovery\n\n--- Step 1: Dynamic Signal Isolation ---\n[FOUND] a.ct L0: Signal subset size=8 G=dd2753a8e57c232a_5ab28630400c5a59\n[FOUND] a.ct L1: Signal subset size=8 G=194773bd3dd8eb26_66ad0ed5b02ce", "created": "2025-12-19T23:04:28Z", "labels": [], "context": "[BOUNTY2] Ciphertext-Only Plaintext Recovery # PVAC-HFHE Vulnerability Report: Ciphertext-Only Plaintext Recovery\n\n## Proof of Concept Execution Log\n\nThe following output demonstrates the successful execution of the attack script (`attack.cpp`) "}


identifier: gh_issue_3749012714
source: github_issue
status: new
created_at: 2025-12-19 23:23:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3749012714", "title": "[Rule] QA agent (.cursor/rules/agent-qa.mdc)", "url": "https://github.com/gc-lover/necpgame-monorepo/issues/1895", "user": "gc-lover", "user_url": "https://github.com/gc-lover", "repo": "necpgame-monorepo", "body_preview": "", "created": "2025-12-19T21:57:34Z", "labels": [], "context": "[Rule] QA agent (.cursor/rules/agent-qa.mdc) "}


identifier: gh_issue_3749224130
source: github_issue
status: new
created_at: 2025-12-19 23:36:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3749224130", "title": "XBRL Viewer", "url": "https://github.com/alexkodisa/Glowing-bassoon-/issues/8", "user": "alexkodisa", "user_url": "https://github.com/alexkodisa", "repo": "Glowing-bassoon-", "body_preview": "Inline Viewer\n\nUNITED STATES\nSECURITIES AND EXCHANGE COMMISSION\nWASHINGTON, DC 20549\n\u00a0\n \nFORM 8-K\n \n\u00a0CURRENT REPORT\nPURSUANT TO SECTION 13 OR 15(d) OF\nTHE SECURITIES EXCHANGE ACT OF 1934\nDecember 14, 2020\nDate of Report (Date of earliest event reported)\n\u00a0\n \nSOLARWINDS CORPORATION\n(Exact name of registrant as specified in its charter)\n \n\u00a0\t\u00a0\t\u00a0\nDelaware\t001-38711\t81-0753267\n(State or other jurisdiction\nof incorporation)\t(Commission\nFile Number)\t(IRS Employer\nIdentification No.)\n \n7171 Southwest Par", "created": "2025-12-19T23:27:32Z", "labels": [], "context": "XBRL Viewer Inline Viewer\n\nUNITED STATES\nSECURITIES AND EXCHANGE COMMISSION\nWASHINGTON, DC 20549\n\u00a0\n \nFORM 8-K\n \n\u00a0CURRENT REPORT\nPURSUANT TO SECTION 13 OR 15(d) OF\nTHE SECURITIES EXCHANGE ACT OF 1934\nDecember 14, "}


identifier: gh_issue_3749220317
source: github_issue
status: new
created_at: 2025-12-20 00:01:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3749220317", "title": "GitHub Changelog:You can now require reviews before closing Dependabot alerts with delegated alert dismissal", "url": "https://github.com/shundor/github-changelog-reader/issues/639", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "github-changelog-reader", "body_preview": "# You can now require reviews before closing Dependabot alerts with delegated alert dismissal\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\" \"http://www.w3.org/TR/REC-html40/loose.dtd\">\n<html><body><p>Delegated alert dismissal allows you to require a review process before Dependabot alerts are closed. This feature is available to GitHub Code Security customers and can be used in both the UI and API.</p>\n<p>This helps you better manage security risk, as well as meet audit and comp", "created": "2025-12-19T23:24:41Z", "labels": ["changelog", "Improvement", "Supply Chain Security"], "context": "GitHub Changelog:You can now require reviews before closing Dependabot alerts with delegated alert dismissal # You can now require reviews before closing Dependabot alerts with delegated alert dismissal\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\" \"http://www.w3.org/TR/REC-html40/loose.dtd\""}


identifier: gh_issue_3749193574
source: github_issue
status: new
created_at: 2025-12-20 00:01:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3749193574", "title": "`edsca` module has an unfixed security issue", "url": "https://github.com/NASA-ACROSS/across-data-ingestion/issues/123", "user": "jak574", "user_url": "https://github.com/jak574", "repo": "across-data-ingestion", "body_preview": "### Description\n\n`edsca` module has an unfixed security issue. This is a dependency of `swifttools`. The latest version of `swifttools` removes this dependency, resolving the security issue. Update `swifttools` and remove the `edsca` import (dependabot alone won't do this)\n\n### Steps to Reproduce\n\n1. Look at security tab\n2. See `edsca` alerts.\n\n\n### Expected Behavior\n\nRemove `edsca` dependency.", "created": "2025-12-19T23:11:35Z", "labels": ["dependencies"], "context": "`edsca` module has an unfixed security issue ### Description\n\n`edsca` module has an unfixed security issue. This is a dependency of `swifttools`. The latest version of `swifttools` removes this dependency, resolving the security issue. Update `s"}


identifier: gh_issue_3749212750
source: github_issue
status: new
created_at: 2025-12-20 00:01:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3749212750", "title": "Config changes", "url": "https://github.com/SystemFiles/dotfiles/issues/6", "user": "bds-liatrio", "user_url": "https://github.com/bds-liatrio", "repo": "dotfiles", "body_preview": "`.claude/settings.json`\n\n```json\n{\n  \"disableAllHooks\": true,\n  \"cleanupPeriodDays\": 7,\n  \"permissions\": {\n    \"allow\": [\n\t\t\t\"Read(*)\",\n\t\t\t\"WebSearch(*)\",\n\t\t\t\"WebFetch(https://api.github.com:*)\",\n      \"Bash(git status)\",\n      \"Bash(git diff:*)\",\n      \"Bash(git log:*)\",\n      \"Bash(npm test:*)\",\n      \"Bash(npm run test:*)\",\n      \"Bash(npm run lint*)\",\n      \"Bash(go test:*)\"\n    ],\n\t\t\"ask\": [\n\t\t\t\"Bash(git push:*)\",\n\t\t\t\"Bash(git commit:*)\"\n\t\t],\n    \"deny\": [\n      \"Read(./.env)\",\n      \"Read(", "created": "2025-12-19T23:20:36Z", "labels": [], "context": "Config changes `.claude/settings.json`\n\n```json\n{\n  \"disableAllHooks\": true,\n  \"cleanupPeriodDays\": 7,\n  \"permissions\": {\n    \"allow\": [\n\t\t\t\"Read(*)\",\n\t\t\t\"WebSearch(*)\",\n\t\t\t\"WebFetch(https://api.github.com:*)\",\n    "}


identifier: gh_issue_3749282106
source: github_issue
status: new
created_at: 2025-12-20 00:14:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3749282106", "title": "PVAC-HFHE Bounty 2: Vulnerability Analysis and Attack", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/419", "user": "adimov-eth", "user_url": "https://github.com/adimov-eth", "repo": "pvac_hfhe_cpp", "body_preview": "## Epistemic Status\n\nThis document distinguishes between:\n- **PROVEN**: Computationally verified, reproducible\n- **OBSERVED**: Empirical finding on bounty data, mechanism unclear\n- **UNVERIFIED**: Cannot confirm without secret key\n\n---\n\n## What We Proved (PROVEN)\n\n### Bug #1: Signal Edge Ordering - IND-CPA Distinguisher\n\n**Location**: `include/pvac/ops/encrypt.hpp` lines 199-207\n\n**The Bug**: Signal edges encoding plaintext are ALWAYS written to array positions 0-7, before noise edges occupy pos", "created": "2025-12-20T00:07:58Z", "labels": [], "context": "PVAC-HFHE Bounty 2: Vulnerability Analysis and Attack ## Epistemic Status\n\nThis document distinguishes between:\n- **PROVEN**: Computationally verified, reproducible\n- **OBSERVED**: Empirical finding on bounty data, mechanism unclear\n- **UNVERIFIED**: Can"}


identifier: gh_issue_3749256262
source: github_issue
status: new
created_at: 2025-12-20 00:14:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3749256262", "title": "![critical](https://www.gstatic.com/codereviewagent/critical.svg)", "url": "https://github.com/google-gemini/gemini-cli/issues/15349", "user": "Silentbotbd", "user_url": "https://github.com/Silentbotbd", "repo": "gemini-cli", "body_preview": "![critical](https://www.gstatic.com/codereviewagent/critical.svg)\r\n\r\nThere is a potential security vulnerability in the order of operations within `shouldRedactEnvironmentVariable`. Currently, variables in `ALWAYS_ALLOWED_ENVIRONMENT_VARIABLES` (like `PATH` or `HOME`) are immediately allowed without checking their values for secrets. This could allow a secret (e.g., an API token) to be leaked if it's part of the value of an allowed environment variable (e.g., `HOME=\"/some/path/with/ghp_secret...", "created": "2025-12-19T23:48:21Z", "labels": [], "context": "![critical](https://www.gstatic.com/codereviewagent/critical.svg) ![critical](https://www.gstatic.com/codereviewagent/critical.svg)\r\n\r\nThere is a potential security vulnerability in the order of operations within `shouldRedactEnvironmentVariable`. Currently, variabl"}


identifier: gh_issue_3749242645
source: github_issue
status: new
created_at: 2025-12-20 00:14:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3749242645", "title": "Critical Security Vulnerability in React Server Components", "url": "https://github.com/seckinyasar/react19-boilerplate/issues/5", "user": "tolparvormil-jpg", "user_url": "https://github.com/tolparvormil-jpg", "repo": "react19-boilerplate", "body_preview": "### Subject: [URGENT: SECURITY] Update React to 19.0.1+ to mitigate Critical RCE (CVE-2025-55182)\n\n#### Description\n\nA critical security vulnerability has been disclosed in React Server Components (RSC) that allows **unauthenticated Remote Code Execution (RCE)**. This project is currently running **React 19.0**, which is explicitly listed as a vulnerable version.\n\n#### Vulnerability Details\n\n* **CVE ID:** [[CVE-2025-55182](https://nvd.nist.gov/vuln/detail/CVE-2025-55182)](https://nvd.nist.gov/vu", "created": "2025-12-19T23:39:52Z", "labels": [], "context": "Critical Security Vulnerability in React Server Components ### Subject: [URGENT: SECURITY] Update React to 19.0.1+ to mitigate Critical RCE (CVE-2025-55182)\n\n#### Description\n\nA critical security vulnerability has been disclosed in React Server Components (RS"}


identifier: gh_issue_3749299372
source: github_issue
status: new
created_at: 2025-12-20 00:26:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3749299372", "title": "Docker Install Fails: public.ecr.aws/p1t3u8a3/api:v1.22.0 not found", "url": "https://github.com/openreplay/openreplay/issues/4115", "user": "yigitkerem", "user_url": "https://github.com/yigitkerem", "repo": "openreplay", "body_preview": "**Describe the issue**\nThe Docker-compose installation fails on a clean Ubuntu 22.04 Server with the below error.\n\n**Steps to reproduce the issue**\n1. SSH into the server\n2. Execute ```/bin/bash -c \"$(curl -fsSL https://raw.githubusercontent.com/openreplay/openreplay/main/scripts/docker-compose/docker-install.sh)\"```\n3. Enter main or v1.23.0 as the version.\n\n**Expected behavior**\nThe install should proceed.\n\n**Screenshots**\nNo screenshot but rather my terminal output: \n\n```\nEnter the version to ", "created": "2025-12-20T00:25:20Z", "labels": ["bug", "deployment"], "context": "Docker Install Fails: public.ecr.aws/p1t3u8a3/api:v1.22.0 not found **Describe the issue**\nThe Docker-compose installation fails on a clean Ubuntu 22.04 Server with the below error.\n\n**Steps to reproduce the issue**\n1. SSH into the server\n2. Execute ```/bin/bash -c \"$"}


identifier: gh_issue_3749289154
source: github_issue
status: new
created_at: 2025-12-20 01:02:49
data:
  {"source": "github_issue", "identifier": "gh_issue_3749289154", "title": "PVAC-HFHE Bounty 2: Vulnerability Analysis and Attack", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/420", "user": "adimov-eth", "user_url": "https://github.com/adimov-eth", "repo": "pvac_hfhe_cpp", "body_preview": "## Epistemic Status\n\nThis document distinguishes between:\n- **PROVEN**: Computationally verified, reproducible\n- **OBSERVED**: Empirical finding on bounty data, mechanism unclear\n- **UNVERIFIED**: Cannot confirm without secret key\n\n---\n\n## What We Proved (PROVEN)\n\n### Bug 1: Signal Edge Ordering - IND-CPA Distinguisher\n\n**Location**: `include/pvac/ops/encrypt.hpp` lines 199-207\n\n**The Bug**: Signal edges encoding plaintext are ALWAYS written to array positions 0-7, before noise edges occupy posi", "created": "2025-12-20T00:14:42Z", "labels": [], "context": "PVAC-HFHE Bounty 2: Vulnerability Analysis and Attack ## Epistemic Status\n\nThis document distinguishes between:\n- **PROVEN**: Computationally verified, reproducible\n- **OBSERVED**: Empirical finding on bounty data, mechanism unclear\n- **UNVERIFIED**: Can"}


identifier: gh_issue_3749277139
source: github_issue
status: new
created_at: 2025-12-20 01:27:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3749277139", "title": "github.com/XANZY/go-gitlab-v0.100.0: 1 vulnerabilities (highest severity is: 6.0)", "url": "https://github.com/SharonKoch/Gitea_Demo/issues/48", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "Gitea_Demo", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>github.com/XANZY/go-gitlab-v0.100.0</b></summary>\n\n<p></p>\n<p>Path to dependency file: /go.mod</p>\n<p>Path to vulnerable library: /go/pkg/mod/cache/download/github.com/hashicorp/go-retryablehttp/@v/v0.7.5.mod</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/SharonKoch/Gitea/commit/23ed15cc3668fa71a62805dc5610d0aa8660782c\">23ed15cc3", "created": "2025-12-20T00:03:34Z", "labels": ["Mend: dependency security vulnerability"], "context": "github.com/XANZY/go-gitlab-v0.100.0: 1 vulnerabilities (highest severity is: 6.0) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>github.com/XANZY/go-gitlab-v0.100.0</b></summar"}


identifier: gh_issue_3749379744
source: github_issue
status: new
created_at: 2025-12-20 01:39:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3749379744", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-20", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/344", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (149)\n1. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n2. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:439`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n3. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:450`", "created": "2025-12-20T01:35:24Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-20 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (149)\n1. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without "}


identifier: gh_issue_3749398608
source: github_issue
status: new
created_at: 2025-12-20 01:52:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3749398608", "title": "Security Health Check - GOOD (85/100) - 2025-12-20", "url": "https://github.com/Sami9889/Sami.dev-website/issues/219", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/20/2025, 1:46:48 AM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 9\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Securi", "created": "2025-12-20T01:46:52Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-20 # Security Health Check Report\n\n**Generated:** 12/20/2025, 1:46:48 AM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Inc"}


identifier: gh_issue_3749433654
source: github_issue
status: new
created_at: 2025-12-20 02:30:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3749433654", "title": "Latest 15 Papers - December 20, 2025", "url": "https://github.com/yuque01/DailyArXiv/issues/84", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "DailyArXiv", "body_preview": "**Please check the [Github](https://github.com/yuque01/DailyArXiv) page for a better reading experience and more papers.**\n\n## Recommendation System\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[Blog Data Showdown: Machine Learning vs Neuro-Symbolic Models for Gender Classification](https://arxiv.org/abs/2512.16687v1)** | 2025-12-18 | 6 pages |\n| **[InfoDCL: Informative Noise Enhanced Diffusion Based Contrastive Learning](https://arxiv.org/abs/2512.16576v1)** | 2025-12-18 |  |\n", "created": "2025-12-20T02:26:56Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 20, 2025 **Please check the [Github](https://github.com/yuque01/DailyArXiv) page for a better reading experience and more papers.**\n\n## Recommendation System\n| **Title** | **Date** | **Comment** |\n| --- | --- "}


identifier: gh_issue_3749419288
source: github_issue
status: new
created_at: 2025-12-20 02:30:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3749419288", "title": "[User Story] Update Ghost 6 Docker Compose stack to latest release", "url": "https://github.com/noahwhite/ghost-stack/issues/26", "user": "noahwhite", "user_url": "https://github.com/noahwhite", "repo": "ghost-stack", "body_preview": "**Story Summary**\n\nAs a platform maintainer, I want to update the Ghost 6 Docker Compose stack to the latest stable release, so that the CMS benefits from upstream bug fixes, security patches, and improvements.\n\n---\n\n**\u2705 Acceptance Criteria**\n\nDefine \"done\" in clear, testable terms (Given/When/Then if applicable).\n\n- [ ] Given the updated images are pulled, when the Ghost stack is started, then containers start successfully.\n- [ ] Given a database migration is required, when Ghost boots, then mi", "created": "2025-12-20T02:11:12Z", "labels": ["User Story"], "context": "[User Story] Update Ghost 6 Docker Compose stack to latest release **Story Summary**\n\nAs a platform maintainer, I want to update the Ghost 6 Docker Compose stack to the latest stable release, so that the CMS benefits from upstream bug fixes, security patches, and imp"}


identifier: gh_issue_3749445670
source: github_issue
status: new
created_at: 2025-12-20 02:41:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3749445670", "title": "[Infra] Phase 3: Security & Documentation Workflows", "url": "https://github.com/kcenon/database_server/issues/19", "user": "kcenon", "user_url": "https://github.com/kcenon", "repo": "database_server", "body_preview": "## Parent Issue\nPart of #11 - Configure CI/CD Workflows\n\n## Priority\n\ud83d\udfe1 Medium (security) / \ud83d\udfe2 Low (docs, sbom)\n\n## Overview\nCreate security scanning and documentation generation workflows.\n\n## Tasks\n- [ ] Create `dependency-security-scan.yml`\n- [ ] Create `sbom.yml` for SBOM generation\n- [ ] Create `build-Doxygen.yaml` for API docs\n\n## Workflows\n\n### dependency-security-scan.yml\n- Dependency vulnerability scanning\n- Security advisory checks\n- Automated alerts\n\n### sbom.yml\n- Software Bill of Mate", "created": "2025-12-20T02:36:37Z", "labels": [], "context": "[Infra] Phase 3: Security & Documentation Workflows ## Parent Issue\nPart of #11 - Configure CI/CD Workflows\n\n## Priority\n\ud83d\udfe1 Medium (security) / \ud83d\udfe2 Low (docs, sbom)\n\n## Overview\nCreate security scanning and documentation generation workflows.\n\n## Tasks\n- "}


identifier: gh_issue_3749441826
source: github_issue
status: new
created_at: 2025-12-20 02:41:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3749441826", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/keypress-notifications/issues/47", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "keypress-notifications", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (17)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-20T02:33:34Z", "labels": ["automated", "security", "critical"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3749441704
source: github_issue
status: new
created_at: 2025-12-20 02:41:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3749441704", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/file-insights/issues/127", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "file-insights", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (16)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-20T02:33:24Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3749441466
source: github_issue
status: new
created_at: 2025-12-20 02:41:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3749441466", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/additional-contexts-menu/issues/108", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "additional-contexts-menu", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (17)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-20T02:33:05Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3749460966
source: github_issue
status: new
created_at: 2025-12-20 02:53:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3749460966", "title": "Implement Auto-Learning Loop: Close the SBE + T\u00d8RG Learning Cycle", "url": "https://github.com/arkavo-org/arkavo-edge/issues/417", "user": "superninja-app[bot]", "user_url": "https://github.com/apps/superninja-app", "repo": "arkavo-edge", "body_preview": "# Implement Auto-Learning Loop: Close the SBE + T\u00d8RG Learning Cycle\n\n## Problem Statement\n\nCurrently, the SBE (Symbolic Boundary Evolution) system provides the **infrastructure for safe learning** (hierarchical layers, safety verification, patchlet application), but it does not yet **actually learn**. The system has:\n\n\u2705 **Write-Enabled Memory** (Hierarchical Graph with Adaptive Layer)  \n\u2705 **Safety Lock** (Invariant verification via SAT solver)  \n\u274c **The Pen** (Automated patchlet generation)  \n\u274c ", "created": "2025-12-20T02:47:52Z", "labels": ["enhancement", "research", "architecture", "agent-swarm"], "context": "Implement Auto-Learning Loop: Close the SBE + T\u00d8RG Learning Cycle # Implement Auto-Learning Loop: Close the SBE + T\u00d8RG Learning Cycle\n\n## Problem Statement\n\nCurrently, the SBE (Symbolic Boundary Evolution) system provides the **infrastructure for safe learning** (hi"}


identifier: gh_issue_3749457793
source: github_issue
status: new
created_at: 2025-12-20 02:53:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3749457793", "title": "Symbolic Boundary Evolution (SBE) - Adaptive Policy System for T\u00d8RG", "url": "https://github.com/arkavo-org/arkavo-edge/issues/416", "user": "superninja-app[bot]", "user_url": "https://github.com/apps/superninja-app", "repo": "arkavo-edge", "body_preview": "# Symbolic Boundary Evolution (SBE) - Adaptive Policy System for T\u00d8RG\n\n## Executive Summary\n\nImplement **Symbolic Boundary Evolution (SBE)**, an adaptive policy system that extends T\u00d8RG's boolean circuit intermediate representation with proactive staleness detection, safe update mechanisms, and formal verification guarantees. SBE transforms static T\u00d8RG graphs into self-evolving policy systems that can detect, diagnose, and remediate policy gaps **before** they cause production incidents.\n\n## Pro", "created": "2025-12-20T02:45:21Z", "labels": ["enhancement", "research", "architecture", "agent-swarm", "performance"], "context": "Symbolic Boundary Evolution (SBE) - Adaptive Policy System for T\u00d8RG # Symbolic Boundary Evolution (SBE) - Adaptive Policy System for T\u00d8RG\n\n## Executive Summary\n\nImplement **Symbolic Boundary Evolution (SBE)**, an adaptive policy system that extends T\u00d8RG's boolean circ"}


identifier: gh_issue_3749465007
source: github_issue
status: new
created_at: 2025-12-20 03:19:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3749465007", "title": "Latest 15 Papers - December 20, 2025", "url": "https://github.com/Xander-C/DailyArXiv/issues/275", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "DailyArXiv", "body_preview": "**Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Confidential Computing\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[Confidential, Attestable, and Efficient Inter-CVM Communication with Arm CCA](https://arxiv.org/abs/2512.01594v2)** | 2025-12-02 |  |\n| **[Confidential Prompting: Privacy-preserving LLM Inference on Cloud](https://arxiv.org/abs/2409.19134v5)** | 2025-11-19 |  |\n| **[A Workflow f", "created": "2025-12-20T02:53:20Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 20, 2025 **Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Confidential Computing\n| **Title** | **Date** | **Comment** |\n| --"}


identifier: gh_issue_3749484170
source: github_issue
status: new
created_at: 2025-12-20 03:30:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3749484170", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-20", "url": "https://github.com/MagicTooooools/picker/issues/45", "user": "allinu", "user_url": "https://github.com/allinu", "repo": "picker", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-20\uff09\n\n- paper - Last paper\n  - [ ] [React2Shell \u6f0f\u6d1e\u5229\u7528\u5206\u6790\u62a5\u544a](https://paper.seebug.org/3437/)\n  - [ ] [\u9762\u5411\u4f01\u4e1a\u5b89\u5168\u7684\u673a\u5668\u5b66\u4e60\u6c11\u4e3b\u5316\uff1a\u4e00\u79cd\u81ea\u6301\u7eed\u653b\u51fb\u68c0\u6d4b\u6846\u67b6](https://paper.seebug.org/3436/)\n  - [ ] [QEMU v10 \u9002\u914d AFL\uff1a\u67b6\u6784\u53d8\u66f4\u4e0e MIPS \u5ef6\u8fdf\u69fd Bug \u5206\u6790](https://paper.seebug.org/3434/)\n- Private Feed for M09Ic\n  - [ ] [anthropics released v2.0.74 at anthropics/claude-code](https://github.com/anthropics/claude-code/releases/tag/v2.0.74)\n  - [ ] [mgeeky starred BaffledJimmy/NebulaPOC](https://github.com/BaffledJimmy/NebulaPOC)\n ", "created": "2025-12-20T03:20:03Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-20 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-20\uff09\n\n- paper - Last paper\n  - [ ] [React2Shell \u6f0f\u6d1e\u5229\u7528\u5206\u6790\u62a5\u544a](https://paper.seebug.org/3437/)\n  - [ ] [\u9762\u5411\u4f01\u4e1a\u5b89\u5168\u7684\u673a\u5668\u5b66\u4e60\u6c11\u4e3b\u5316\uff1a\u4e00\u79cd\u81ea\u6301\u7eed\u653b\u51fb\u68c0\u6d4b\u6846\u67b6](https://paper.seebug.org/3436/)\n  - [ ] [QEMU v10 \u9002\u914d AFL\uff1a"}


identifier: gh_issue_3749482112
source: github_issue
status: new
created_at: 2025-12-20 03:30:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3749482112", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-20", "url": "https://github.com/chainreactors/picker/issues/1088", "user": "chainreactorbot", "user_url": "https://github.com/chainreactorbot", "repo": "picker", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-20\uff09\n\n- Doonsec's feed\n  - [ ] [Tor \u533f\u540d\u7f51\u7edc\u7684\u201c\u7f8e\u56fd\u5370\u8bb0\u201d\uff1a\u653f\u5e9c\u62db\u6807\u9879\u76ee\u8d44\u91d1\u5360\u6bd4\u4ece53%\u964d\u523035%](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451184312&idx=1&sn=c555fe3244d85515ad22a896402d459b)\n  - [ ] [\u4ec0\u4e48\uff1f\u778e\u901b\u4e5f\u80fd\u6361\u5230\u9ad8\u5371\u6f0f\u6d1e\uff1f](https://mp.weixin.qq.com/s?__biz=Mzk4ODMxODQyMQ==&mid=2247483835&idx=1&sn=22362148fdb8ae6c7b24f012228d1bb4)\n  - [ ] [\u533a\u5757\u94feLayer 1\u4e0eLayer 2\u94b1\u5305\u5b89\u5168\u98ce\u9669\u5168\u666f\u5206\u6790](https://mp.weixin.qq.com/s?__biz=Mzg2NTkwODU3Ng==&mid=2247515792&idx=1&sn=e3b669cf74550d60427830b85d708216)\n  - [ ] [\u3010\u6f0f\u6d1e\u9884\u8b66\u3011Apache Airfl", "created": "2025-12-20T03:16:40Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-20 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-20\uff09\n\n- Doonsec's feed\n  - [ ] [Tor \u533f\u540d\u7f51\u7edc\u7684\u201c\u7f8e\u56fd\u5370\u8bb0\u201d\uff1a\u653f\u5e9c\u62db\u6807\u9879\u76ee\u8d44\u91d1\u5360\u6bd4\u4ece53%\u964d\u523035%](https://mp.weixin.qq.com/s?__biz=MzAxOTM1MDQ1NA==&mid=2451184312&idx=1&sn=c555fe3244d85515ad22a896402d459b)\n  - [ ]"}


identifier: gh_issue_3749481909
source: github_issue
status: new
created_at: 2025-12-20 03:30:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3749481909", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-20", "url": "https://github.com/MM0x02/RSS-Push/issues/357", "user": "MM0x02", "user_url": "https://github.com/MM0x02", "repo": "RSS-Push", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-20\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-19 Review](http://www.sec-wiki.com/?2025-12-19)\n- Private Feed for M09Ic\n  - [ ] [anthropics released v2.0.74 at anthropics/claude-code](https://github.com/anthropics/claude-code/releases/tag/v2.0.74)\n  - [ ] [mgeeky starred BaffledJimmy/NebulaPOC](https://github.com/BaffledJimmy/NebulaPOC)\n  - [ ] [bolucat released 202512191938 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202512191938)\n  - [ ] [kpcyrd star", "created": "2025-12-20T03:16:19Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-20 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-20\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-19 Review](http://www.sec-wiki.com/?2025-12-19)\n- Private Feed for M09Ic\n  - [ ] [anthropics released v2.0.74 at anthropics/claude-co"}


identifier: gh_issue_3749481109
source: github_issue
status: new
created_at: 2025-12-20 03:30:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3749481109", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-20", "url": "https://github.com/ruohong2018/ruohong2018.github.io/issues/1044", "user": "ruohong2018", "user_url": "https://github.com/ruohong2018", "repo": "ruohong2018.github.io", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-20\uff09\n\n- SecWiki News\n  - [SecWiki News 2025-12-19 Review](http://www.sec-wiki.com/?2025-12-19)\n- \u5148\u77e5\u5b89\u5168\u6280\u672f\u793e\u533a\n  - [2025\u9e4f\u7a0b\u676fPWN\u9664\u4e86vm\u5168\u89e3](https://xz.aliyun.com/news/90899)\n  - [\u5e06\u8f6fexport/excelSQL\u6ce8\u5165\u6f0f\u6d1e\u5206\u6790](https://xz.aliyun.com/news/90898)\n- Recent Commits to cve:main\n  - [Update Fri Dec 19 11:37:06 UTC 2025](https://github.com/trickest/cve/commit/cdece31f32e45fc02e38c84205cddea6a8025ddd)\n- \u5636\u543c RoarTalk \u2013 \u7f51\u7edc\u5b89\u5168\u884c\u4e1a\u7efc\u5408\u670d\u52a1\u5e73\u53f0,4hou.com\n  - [Fortinet\u643a\u624bNVIDIA \u4e3aAI\u6570\u636e\u4e2d\u5fc3\u6253\u9020\u9694\u79bb\u5f0f\u57fa\u7840\u8bbe\u65bd\u52a0\u901f\u65b9\u6848](https://www.4hou.com/po", "created": "2025-12-20T03:15:06Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-20 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-20\uff09\n\n- SecWiki News\n  - [SecWiki News 2025-12-19 Review](http://www.sec-wiki.com/?2025-12-19)\n- \u5148\u77e5\u5b89\u5168\u6280\u672f\u793e\u533a\n  - [2025\u9e4f\u7a0b\u676fPWN\u9664\u4e86vm\u5168\u89e3](https://xz.aliyun.com/news/90899)\n  - [\u5e06\u8f6fexport/excelSQ"}


identifier: gh_issue_3749477858
source: github_issue
status: new
created_at: 2025-12-20 03:30:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3749477858", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-20", "url": "https://github.com/BruceFeIix/picker/issues/2146", "user": "BruceFeIix", "user_url": "https://github.com/BruceFeIix", "repo": "picker", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-20\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-19 Review](http://www.sec-wiki.com/?2025-12-19)\n- paper - Last paper\n  - [ ] [React2Shell \u6f0f\u6d1e\u5229\u7528\u5206\u6790\u62a5\u544a](https://paper.seebug.org/3437/)\n  - [ ] [\u9762\u5411\u4f01\u4e1a\u5b89\u5168\u7684\u673a\u5668\u5b66\u4e60\u6c11\u4e3b\u5316\uff1a\u4e00\u79cd\u81ea\u6301\u7eed\u653b\u51fb\u68c0\u6d4b\u6846\u67b6](https://paper.seebug.org/3436/)\n  - [ ] [QEMU v10 \u9002\u914d AFL\uff1a\u67b6\u6784\u53d8\u66f4\u4e0e MIPS \u5ef6\u8fdf\u69fd Bug \u5206\u6790](https://paper.seebug.org/3434/)\n- \u5636\u543c RoarTalk \u2013 \u7f51\u7edc\u5b89\u5168\u884c\u4e1a\u7efc\u5408\u670d\u52a1\u5e73\u53f0,4hou.com\n  - [ ] [Fortinet\u643a\u624bNVIDIA \u4e3aAI\u6570\u636e\u4e2d\u5fc3\u6253\u9020\u9694\u79bb\u5f0f\u57fa\u7840\u8bbe\u65bd\u52a0\u901f\u65b9\u6848](https://www.4hou.com/posts/7Mg8)\n  - [ ] [\u7b2c\u516b\u5c4a\u79d1\u6280\u521b\u65b0\u4fc3\u8fdb\u7ecf\u6d4e\u53d1\u5c55\u8bba\u575b\u5728\u53a6\u95e8\u4e3e\u884c](ht", "created": "2025-12-20T03:11:08Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-20 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-20\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-19 Review](http://www.sec-wiki.com/?2025-12-19)\n- paper - Last paper\n  - [ ] [React2Shell \u6f0f\u6d1e\u5229\u7528\u5206\u6790\u62a5\u544a](https://paper.seebug.org/3437/)\n "}


identifier: gh_issue_3749498402
source: github_issue
status: new
created_at: 2025-12-20 03:42:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3749498402", "title": "feat: Add SVG icon support via web3icons integration", "url": "https://github.com/igor53627/iconregistry.eth/issues/8", "user": "igor53627", "user_url": "https://github.com/igor53627", "repo": "iconregistry.eth", "body_preview": "## Summary\n\nAdd native SVG icon support to IconRegistry, using [web3icons](https://github.com/0xa3k5/web3icons) as the primary SVG source (2,500+ icons: tokens, networks, wallets, exchanges).\n\n## Motivation\n\n- SVGs scale infinitely (better for varied UI sizes)\n- web3icons has comprehensive token/network coverage with chainId + address metadata\n- Enables richer icon variants (branded, mono, background)\n\n## Implementation Plan\n\n### Phase 1: Contract V2 (SVG Support)\n\n- [ ] Add `svgIcons` and `svgI", "created": "2025-12-20T03:40:39Z", "labels": [], "context": "feat: Add SVG icon support via web3icons integration ## Summary\n\nAdd native SVG icon support to IconRegistry, using [web3icons](https://github.com/0xa3k5/web3icons) as the primary SVG source (2,500+ icons: tokens, networks, wallets, exchanges).\n\n## Moti"}


identifier: gh_issue_3749405338
source: github_issue
status: new
created_at: 2025-12-20 03:42:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3749405338", "title": "Add Password Authentication for Dashboard Access", "url": "https://github.com/tomjones/webhook-monitor/issues/9", "user": "tomjones", "user_url": "https://github.com/tomjones", "repo": "webhook-monitor", "body_preview": "## Problem Statement\n\nCurrently, the webhook monitor dashboard is publicly accessible to anyone who knows the URL. This means:\n\n- Anyone can view all webhook data in the browser\n- No access control to sensitive webhook payloads\n- API endpoints (`/api/*`) are unprotected\n- Dashboard shows client data without authentication\n\nThe `/webhook/*` endpoints should remain public (to accept webhooks from external services), but the dashboard and API need protection.\n\n## Proposed Solution\n\nImplement **mini", "created": "2025-12-20T01:52:31Z", "labels": [], "context": "Add Password Authentication for Dashboard Access ## Problem Statement\n\nCurrently, the webhook monitor dashboard is publicly accessible to anyone who knows the URL. This means:\n\n- Anyone can view all webhook data in the browser\n- No access control to"}


identifier: gh_issue_3749477402
source: github_issue
status: new
created_at: 2025-12-20 04:06:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3749477402", "title": "\ud83d\udea8 Security Vulnerabilities Detected", "url": "https://github.com/naretakis/eapd-next/issues/33", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "eapd-next", "body_preview": "\n## Security Audit Results\n\n**High vulnerabilities:** 1\n**Critical vulnerabilities:** 1\n\n### Recommended Actions\n1. Review the vulnerabilities listed below\n2. Update affected packages using `npm update`\n3. For packages without fixes, consider alternatives\n4. Run `npm audit fix` to automatically fix issues where possible\n\n### Audit Details\n```json\nundefined\n```\n\nThis issue was automatically created by the security audit workflow.\n", "created": "2025-12-20T03:10:54Z", "labels": ["security", "priority: high", "needs-triage"], "context": "\ud83d\udea8 Security Vulnerabilities Detected \n## Security Audit Results\n\n**High vulnerabilities:** 1\n**Critical vulnerabilities:** 1\n\n### Recommended Actions\n1. Review the vulnerabilities listed below\n2. Update affected packages using `npm updat"}


identifier: gh_issue_3749529051
source: github_issue
status: new
created_at: 2025-12-20 04:43:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3749529051", "title": "[BOUNTY] Linear information leakage in homomorphic addition (ciphertext concatenation)", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/422", "user": "tonihendra", "user_url": "https://github.com/tonihendra", "repo": "pvac_hfhe_cpp", "body_preview": "### Summary\n\nI found a critical vulnerability in the homomorphic addition implementation of this scheme.\nThe function used to add two ciphertexts does not merge or normalize internal components.\nInstead, it concatenates ciphertext structures, preserving linear separability and causing\ninformation leakage.\n\nThis allows construction of a deterministic public function over ciphertexts whose output\nis additively homomorphic, without access to the secret key. As a result, plaintext relations\nleak and", "created": "2025-12-20T04:26:21Z", "labels": [], "context": "[BOUNTY] Linear information leakage in homomorphic addition (ciphertext concatenation) ### Summary\n\nI found a critical vulnerability in the homomorphic addition implementation of this scheme.\nThe function used to add two ciphertexts does not merge or normalize internal components.\nInste"}


identifier: gh_issue_3749522358
source: github_issue
status: new
created_at: 2025-12-20 04:43:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3749522358", "title": "DemoSwarm Documentation-Code Alignment Audit", "url": "https://github.com/EffortlessMetrics/demo-swarm-swarm/issues/1", "user": "EffortlessSteven", "user_url": "https://github.com/EffortlessSteven", "repo": "demo-swarm-swarm", "body_preview": "## Work Item Tracking\n\n**Run**: `local-alignment-audit-aba1c6` (canonical: pending)\n**Task**: DemoSwarm Documentation-Code Alignment Audit\n**Scope**: Medium (M)\n\n---\n\n## Summary\n\nComprehensive analysis of documentation-code alignment gaps in the DemoSwarm pack, focusing on three critical dimensions:\n\n1. **Flow Architecture Alignment** \u2014 Public documentation claims \"six flows\" while implementation provides seven flows with multi-path variants\n2. **Test Coverage Metrics** \u2014 Documentation test clai", "created": "2025-12-20T04:15:43Z", "labels": [], "context": "DemoSwarm Documentation-Code Alignment Audit ## Work Item Tracking\n\n**Run**: `local-alignment-audit-aba1c6` (canonical: pending)\n**Task**: DemoSwarm Documentation-Code Alignment Audit\n**Scope**: Medium (M)\n\n---\n\n## Summary\n\nComprehensive analysi"}


identifier: gh_issue_3749508023
source: github_issue
status: new
created_at: 2025-12-20 04:43:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3749508023", "title": "Security Vulnerabilities (Trivy Scan) - 20-12-25 @ 03:53", "url": "https://github.com/RazorBladeX/SH-GithubRunner/issues/47", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "SH-GithubRunner", "body_preview": "## \u26a0\ufe0f Security Vulnerabilities Detected\n\n**Scan Date:** 20-12-25 @ 03:53\n\n### Summary\n- **Total vulnerabilities found:** 298\n- **Critical:** 4\n- **High:** 49\n\n### Full Report\nThe complete vulnerability report is available as a workflow artifact.\n\n\ud83d\udce5 **[Download Full Report](https://github.com/RazorBladeX/SH-GithubRunner/actions/runs/20388727777/artifacts)**\n\n---\n*This issue is automatically generated by the Trivy security scanner.*\n", "created": "2025-12-20T03:53:39Z", "labels": ["vulnerability", "security", "automated", "security-scan"], "context": "Security Vulnerabilities (Trivy Scan) - 20-12-25 @ 03:53 ## \u26a0\ufe0f Security Vulnerabilities Detected\n\n**Scan Date:** 20-12-25 @ 03:53\n\n### Summary\n- **Total vulnerabilities found:** 298\n- **Critical:** 4\n- **High:** 49\n\n### Full Report\nThe complete vulnerabilit"}


identifier: gh_issue_3749548442
source: github_issue
status: new
created_at: 2025-12-20 04:56:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3749548442", "title": "Release v[1.0.0]", "url": "https://github.com/query4j/dynamicquerybuilder/issues/6", "user": "query4j", "user_url": "https://github.com/query4j", "repo": "dynamicquerybuilder", "body_preview": "# Release Checklist for v[VERSION]\n\n## Pre-Release\n\n### Version Updates\n- [ ] Update version in `build.gradle` from `-SNAPSHOT` to stable version\n- [ ] Update version references in `README.md`\n- [ ] Update version references in all module `README.md` files\n- [ ] Update version references in documentation\n\n### Documentation\n- [ ] Update `CHANGELOG.md` with release notes\n- [ ] Create `RELEASE_NOTES_v[VERSION].md` with detailed changes\n- [ ] Update `UPGRADE_GUIDE.md` if there are breaking changes\n-", "created": "2025-12-20T04:51:52Z", "labels": [], "context": "Release v[1.0.0] # Release Checklist for v[VERSION]\n\n## Pre-Release\n\n### Version Updates\n- [ ] Update version in `build.gradle` from `-SNAPSHOT` to stable version\n- [ ] Update version references in `README.md`\n- [ ] U"}


identifier: gh_issue_3749588191
source: github_issue
status: new
created_at: 2025-12-20 06:10:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3749588191", "title": "\ud83d\udd34 Critical React 19.2.1 \u3068 Next.js 16.0.7 \u306b\u91cd\u5927\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u76f4\u3061\u306b\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u3057\u3066\u304f\u3060\u3055\u3044\u3002", "url": "https://github.com/ShoheiTakei/aging-engineer/issues/4", "user": "ShoheiTakei", "user_url": "https://github.com/ShoheiTakei", "repo": "aging-engineer", "body_preview": "_\u26a0\ufe0f Potential issue_ | _\ud83d\udd34 Critical_\r\n\r\n**React 19.2.1 \u3068 Next.js 16.0.7 \u306b\u91cd\u5927\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u76f4\u3061\u306b\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u3057\u3066\u304f\u3060\u3055\u3044\u3002**\r\n\r\nReact 19.2.1 \u306f CVE-2025-55182 \u306b\u5bfe\u3057\u3066\u4fee\u6b63\u3055\u308c\u3066\u3044\u307e\u3059\u304c\u3001\u305d\u306e\u5f8c CVE-2025-55184 \u3068 CVE-2025-55183 \u304c\u767a\u898b\u3055\u308c\u307e\u3057\u305f\u3002\u4fee\u6b63\u306f 19.2.3 \u306b\u30d0\u30c3\u30af\u30dd\u30fc\u30c8\u3055\u308c\u305f\u305f\u3081\u300119.2.3 \u306b\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u304c\u5fc5\u8981\u3067\u3059\u3002Next.js 16.0.x \u306b\u3064\u3044\u3066\u306f 16.0.10 \u3078\u306e\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u304c\u63a8\u5968\u3055\u308c\u3066\u3044\u307e\u3059\u3002\r\n\r\n\u305d\u306e\u4ed6\u306e\u4f9d\u5b58\u95a2\u4fc2\uff08@radix-ui/react-slot\u3001class-variance-authority\u3001lucide-react\uff09\u306f\u6700\u65b0\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u5b89\u5168\u3067\u3059\u3002\r\n\r\n<details>\r\n<summary>\ud83e\udd16 Prompt for AI Agents</summary>\r\n\r\n```\r\nIn package.json around lines 15 to 24 the project pins", "created": "2025-12-20T05:33:07Z", "labels": [], "context": "\ud83d\udd34 Critical React 19.2.1 \u3068 Next.js 16.0.7 \u306b\u91cd\u5927\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u76f4\u3061\u306b\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u3057\u3066\u304f\u3060\u3055\u3044\u3002 _\u26a0\ufe0f Potential issue_ | _\ud83d\udd34 Critical_\r\n\r\n**React 19.2.1 \u3068 Next.js 16.0.7 \u306b\u91cd\u5927\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u76f4\u3061\u306b\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u3057\u3066\u304f\u3060\u3055\u3044\u3002**\r\n\r\nReact 19.2.1 \u306f CVE-2025-55182 \u306b\u5bfe\u3057\u3066\u4fee\u6b63\u3055\u308c\u3066\u3044\u307e\u3059\u304c\u3001\u305d\u306e\u5f8c CVE-2025-55184 \u3068 CVE-2025-55183 \u304c\u767a\u898b\u3055\u308c\u307e\u3057"}


identifier: gh_issue_3749634975
source: github_issue
status: new
created_at: 2025-12-20 06:35:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3749634975", "title": "feat: Crowdsourcing Content Upgrading Schedules", "url": "https://github.com/wpinrui/nicer-tt/issues/52", "user": "wpinrui", "user_url": "https://github.com/wpinrui", "repo": "nicer-tt", "body_preview": "## Overview\nCreate a crowdsourcing system where users can contribute their content upgrading schedules for others to benefit from. The owner curates submissions and embeds approved data in the app.\n\n## Problem\nContent upgrading classes aren't in the NIE Portal system, so users must manually add them. Many users take the same content upgrading subjects, leading to duplicate effort. A crowdsourcing system would let helpful users contribute their schedules for others to use.\n\n## Solution\nBuild a co", "created": "2025-12-20T06:12:05Z", "labels": [], "context": "feat: Crowdsourcing Content Upgrading Schedules ## Overview\nCreate a crowdsourcing system where users can contribute their content upgrading schedules for others to benefit from. The owner curates submissions and embeds approved data in the app.\n\n#"}


identifier: gh_issue_3749624843
source: github_issue
status: new
created_at: 2025-12-20 06:35:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3749624843", "title": "sass-1.97.1.tgz: 4 vulnerabilities (highest severity is: 9.1)", "url": "https://github.com/neinteractiveliterature/larp_library/issues/3008", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "larp_library", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>sass-1.97.1.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /.yarn/cache/brace-expansion-npm-1.1.11-fb95eb05ad-faf34a7bb0.zip</p>\n<p>\n\n</details>\n\n## Vulnerabilities\n\n| Vulnerability | Severity | <img src='https://whitesource-resources.whitesourcesoftware.com/cvss3.png' width=19 height=20> ", "created": "2025-12-20T06:05:17Z", "labels": ["Mend: dependency security vulnerability"], "context": "sass-1.97.1.tgz: 4 vulnerabilities (highest severity is: 9.1) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>sass-1.97.1.tgz</b></summary>\n\n<p></p>\n<p>Path "}


identifier: gh_issue_3749609670
source: github_issue
status: new
created_at: 2025-12-20 06:35:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3749609670", "title": "ERSATZTV Installation", "url": "https://github.com/community-scripts/ProxmoxVE/issues/10171", "user": "HeisenbergHD", "user_url": "https://github.com/HeisenbergHD", "repo": "ProxmoxVE", "body_preview": "### \u2705 Have you read and understood the above guidelines?\n\nyes\n\n### \ud83d\udd0e Did you run the script with verbose mode enabled?\n\nYes, verbose mode was enabled and the output is included below\n\n### \ud83d\udcdc What is the name of the script you are using?\n\n ErsatzTV v25.9.0 LXC\n\n### \ud83d\udcc2 What was the exact command used to execute the script?\n\nbash -c \"$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/ersatztv.sh)\"\n\n### \u2699\ufe0f What settings are you using?\n\n- [ ] Default Settings\n- [x] Advan", "created": "2025-12-20T05:52:59Z", "labels": ["bug"], "context": "ERSATZTV Installation ### \u2705 Have you read and understood the above guidelines?\n\nyes\n\n### \ud83d\udd0e Did you run the script with verbose mode enabled?\n\nYes, verbose mode was enabled and the output is included below\n\n### \ud83d\udcdc What is th"}


identifier: gh_issue_3749594811
source: github_issue
status: new
created_at: 2025-12-20 06:35:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3749594811", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/kinocoffeeblack/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @kinocoffeeblack! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebr", "created": "2025-12-20T05:40:02Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @kinocoffeeblack! Welcome to your Skills e"}


identifier: gh_issue_3749670442
source: github_issue
status: new
created_at: 2025-12-20 07:38:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3749670442", "title": "build: Add dependency vulnerability scanning in CI", "url": "https://github.com/honua-io/honua-server/issues/122", "user": "mikemcdougall", "user_url": "https://github.com/mikemcdougall", "repo": "honua-server", "body_preview": "## Summary\\nAdd dependency vulnerability scanning to meet MVP security criteria.\\n\\n## Acceptance Criteria\\n- [ ] CI runs a dependency vulnerability scan (NuGet + container).\\n- [ ] High/critical findings fail the build.\\n- [ ] Scan results are accessible from CI logs or artifacts.", "created": "2025-12-20T06:52:02Z", "labels": ["enhancement", "priority/P2", "effort/S", "phase/MVP"], "context": "build: Add dependency vulnerability scanning in CI ## Summary\\nAdd dependency vulnerability scanning to meet MVP security criteria.\\n\\n## Acceptance Criteria\\n- [ ] CI runs a dependency vulnerability scan (NuGet + container).\\n- [ ] High/critical find"}


identifier: gh_issue_3749699546
source: github_issue
status: new
created_at: 2025-12-20 07:50:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3749699546", "title": "PRP: Extractor for {software type}", "url": "https://github.com/google/osv-scalibr/issues/1629", "user": "kingsamay5-lgtm", "user_url": "https://github.com/kingsamay5-lgtm", "repo": "osv-scalibr", "body_preview": "- **Software distribution method or binary type**: {e.g. `dpkg, npm, .jar files`}\n- **Any critical, emergent vulnerability associated with software from the distribution method**: {e.g. `None`, `openssh-server affected by CVE-2024-6387`}\n- **Resources**:\n  * {Any links}\n  * {That can be useful to understand the software distribution method}\n", "created": "2025-12-20T07:22:40Z", "labels": ["PRP:Request", "PRP"], "context": "PRP: Extractor for {software type} - **Software distribution method or binary type**: {e.g. `dpkg, npm, .jar files`}\n- **Any critical, emergent vulnerability associated with software from the distribution method**: {e.g. `None`, `opens"}


identifier: gh_issue_3749694043
source: github_issue
status: new
created_at: 2025-12-20 07:50:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3749694043", "title": "fix: Codex Bug Report - Consolidated Findings from Session 13 PRs", "url": "https://github.com/Euda1mon1a/Autonomous-Assignment-Program-Manager/issues/312", "user": "Euda1mon1a", "user_url": "https://github.com/Euda1mon1a", "repo": "Autonomous-Assignment-Program-Manager", "body_preview": "## Summary\n\nCodex has identified **13+ bugs** across 10 pull requests from Session 13: Remote Signal Transduction Protocol. This issue compiles all findings for Claude Code to review and fix.\n\n---\n\n## Critical Bugs (P0/P1)\n\n### PR #304: feat: Add security headers middleware and slowapi rate limiting\n**Severity: SEVERE**\n- **Issue**: Security vulnerability identified in rate limiting implementation\n- **PR Link**: #304\n\n---\n\n## Test Coverage Issues (P1)\n\n### PR #309: feat(tests): Add integration t", "created": "2025-12-20T07:15:44Z", "labels": [], "context": "fix: Codex Bug Report - Consolidated Findings from Session 13 PRs ## Summary\n\nCodex has identified **13+ bugs** across 10 pull requests from Session 13: Remote Signal Transduction Protocol. This issue compiles all findings for Claude Code to review and fix.\n\n---\n\n##"}


identifier: gh_issue_3749683792
source: github_issue
status: new
created_at: 2025-12-20 07:50:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3749683792", "title": "[SECURITY] Fix path traversal vulnerability in S3 file loading (C02)", "url": "https://github.com/frankbria/narrative-modeling-app/issues/108", "user": "frankbria", "user_url": "https://github.com/frankbria", "repo": "narrative-modeling-app", "body_preview": "## Priority\n\ud83d\udd34 **CRITICAL** - Must fix before production\n\n## Description\nThe `get_dataframe_from_s3()` function trusts S3 URLs and file extensions without validation, enabling path traversal attacks and arbitrary file access.\n\n## Security Impact\n- **OWASP A03**: Injection\n- **CWE-22**: Improper Limitation of a Pathname to a Restricted Directory\n- **Risk**: Directory traversal, cross-bucket access, denial of service\n\n## Attack Scenarios\n1. **Cross-bucket access**: `https://victim-bucket.s3.amazona", "created": "2025-12-20T07:05:03Z", "labels": ["bug"], "context": "[SECURITY] Fix path traversal vulnerability in S3 file loading (C02) ## Priority\n\ud83d\udd34 **CRITICAL** - Must fix before production\n\n## Description\nThe `get_dataframe_from_s3()` function trusts S3 URLs and file extensions without validation, enabling path traversal attacks an"}


identifier: gh_issue_3749653369
source: github_issue
status: new
created_at: 2025-12-20 07:50:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3749653369", "title": "Security Health Check - GOOD (85/100) - 2025-12-20", "url": "https://github.com/Sami9889/Sami.dev-website/issues/221", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/20/2025, 6:34:02 AM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 9\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Securi", "created": "2025-12-20T06:34:05Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-20 # Security Health Check Report\n\n**Generated:** 12/20/2025, 6:34:02 AM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Inc"}


identifier: gh_issue_3749624812
source: github_issue
status: new
created_at: 2025-12-20 07:50:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3749624812", "title": "Daily AI Tools Digest", "url": "https://github.com/proteaNirav/rocketgpt/issues/217", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "rocketgpt", "body_preview": "# Daily AI Tools Digest\n\n### https://openai.com/blog/rss.xml\n\n<details>\n<summary>raw</summary>\n\nRedirecting...\n\n\n</details>\n\n### https://www.anthropic.com/news/rss.xml\n\n<details>\n<summary>raw</summary>\n\n<!DOCTYPE html><html id=\"__next_error__\"><head><meta charSet=\"utf-8\"/><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"/><link rel=\"preload\" as=\"script\" fetchPriority=\"low\" nonce=\"MTdkMWU4OGMtYzcwZC00MTRmLWJhNDYtZDZhNmQzOTIzNTA3\" href=\"/_next/static/chunks/55ee5a30d5bf1901.js\"/>", "created": "2025-12-20T06:05:15Z", "labels": ["research", "automation"], "context": "Daily AI Tools Digest # Daily AI Tools Digest\n\n### https://openai.com/blog/rss.xml\n\n<details>\n<summary>raw</summary>\n\nRedirecting...\n\n\n</details>\n\n### https://www.anthropic.com/news/rss.xml\n\n<details>\n<summary>raw</summary"}


identifier: gh_issue_3749651458
source: github_issue
status: new
created_at: 2025-12-20 08:39:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3749651458", "title": "React2Shell (CVE-2025-55182)", "url": "https://github.com/hyperbrowserai/hyperbooklm/issues/1", "user": "Krish-ai-coder", "user_url": "https://github.com/Krish-ai-coder", "repo": "hyperbooklm", "body_preview": "A critical vulnerability has been identified in the React Server Components (RSC) \"Flight\" protocol, affecting the React 19 ecosystem and frameworks that implement it, most notably Next.js. Assigned CVE-2025-55182, this flaw allows for unauthenticated remote code execution (RCE) on the server due to insecure deserialization. The vulnerability exists in the default configuration of affected applications, meaning standard deployments are immediately at risk. Due to the high severity and the ease o", "created": "2025-12-20T06:31:50Z", "labels": [], "context": "React2Shell (CVE-2025-55182) A critical vulnerability has been identified in the React Server Components (RSC) \"Flight\" protocol, affecting the React 19 ecosystem and frameworks that implement it, most notably Next.js. Assigned C"}


identifier: gh_issue_3749686320
source: github_issue
status: new
created_at: 2025-12-20 09:03:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3749686320", "title": "Feature: `mizu/mobile`", "url": "https://github.com/go-mizu/mizu/issues/35", "user": "tamnd", "user_url": "https://github.com/tamnd", "repo": "mizu", "body_preview": "## Goal\n\nProvide a production-grade mobile runtime layer for Mizu that enables native and cross-platform apps to consume `contract` APIs with generated, typed clients, while offering first-class offline-first synchronization (`sync`), realtime subscriptions (`live`), and push/deeplink/app-version primitives, delivered with consistent semantics across platforms and a smooth, framework-idiomatic developer experience.\n\n## Requirements\n\n- [ ] Single `mobile` package that focuses on runtime primitive", "created": "2025-12-20T07:07:43Z", "labels": [], "context": "Feature: `mizu/mobile` ## Goal\n\nProvide a production-grade mobile runtime layer for Mizu that enables native and cross-platform apps to consume `contract` APIs with generated, typed clients, while offering first-class offli"}


identifier: gh_issue_3749833613
source: github_issue
status: new
created_at: 2025-12-20 09:15:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3749833613", "title": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected", "url": "https://github.com/truckercore/truckercore1/issues/153", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "truckercore1", "body_preview": "# Security Audit Report - 2025-12-20\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/util vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-9j5q-479x-43g2\nfix available via `npm audit fix --force`\nWill install @stryker-mutator/vitest-runner@8.7.1, which is outside the stated dependency range\nnode_modules/@stryker-mutator/util\n  @stryker-mutator/core  <=8.7.0\n  D", "created": "2025-12-20T09:12:50Z", "labels": ["security", "dependencies", "automated"], "context": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected # Security Audit Report - 2025-12-20\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/"}


identifier: gh_issue_3749697165
source: github_issue
status: new
created_at: 2025-12-20 09:15:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3749697165", "title": "\ubcf4\uc548 \ucde8\uc57d\uc810 \ud328\uce58 \ubc0f Next.js/React/TS/ESLint \uc138\ub300 \uc5c5\uadf8\ub808\uc774\ub4dc", "url": "https://github.com/4gather/pawgather-fe/issues/28", "user": "Seono-Na", "user_url": "https://github.com/Seono-Na", "repo": "pawgather-fe", "body_preview": "## \ud83c\udfaf \ubaa9\uc801\nnpm audit \ucde8\uc57d\uc810 \ud574\uacb0 \ubc0f Next.js 15.5.9 + React 19.2.3 \uc0dd\ud0dc\uacc4 \uc644\uc804 \uc815\ub82c\n\n## \ud83d\udd12 \ubcf4\uc548 \ud328\uce58\n| \ucde8\uc57d\uc810 | \ud328\uce58 \ubc84\uc804 |\n|--------|-----------|\n| Next.js RSC DoS (CVE-2025-55183/84/67779) | `next@15.5.9` |\n| React RSC \ud328\uce58 | `react@19.2.3` |\n| ESLint ReDoS (`@eslint/plugin-kit`) | `eslint@9.39.2` |\n\n## \ud83d\udce6 \uc5c5\uadf8\ub808\uc774\ub4dc \ub0b4\uc5ed\n```\nnpm audit fix\n\u251c\u2500\u2500 next: 15.4.1 \u2192 15.5.9\n\u251c\u2500\u2500 react(-dom): 19.0.0 \u2192 19.2.3\n\u251c\u2500\u2500 @types/react(-dom): \ucd5c\uc2e0 19.2.x\n\u251c\u2500\u2500 eslint-config-next: 15.3.2 \u2192 15.5.9\n\u251c\u2500\u2500 eslint: 9.27.0 \u2192 9.39.2\n\u251c\u2500\u2500 typescript: ^5 \u2192 5.9.3 (\uace0\uc815)\n\u2514\u2500", "created": "2025-12-20T07:19:25Z", "labels": [], "context": "\ubcf4\uc548 \ucde8\uc57d\uc810 \ud328\uce58 \ubc0f Next.js/React/TS/ESLint \uc138\ub300 \uc5c5\uadf8\ub808\uc774\ub4dc ## \ud83c\udfaf \ubaa9\uc801\nnpm audit \ucde8\uc57d\uc810 \ud574\uacb0 \ubc0f Next.js 15.5.9 + React 19.2.3 \uc0dd\ud0dc\uacc4 \uc644\uc804 \uc815\ub82c\n\n## \ud83d\udd12 \ubcf4\uc548 \ud328\uce58\n| \ucde8\uc57d\uc810 | \ud328\uce58 \ubc84\uc804 |\n|--------|-----------|\n| Next.js RSC DoS (CVE-2025-55183/84/67779) | `next@15.5.9` |\n| React RSC \ud328\uce58 | `re"}


identifier: gh_issue_3749844366
source: github_issue
status: new
created_at: 2025-12-20 09:40:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3749844366", "title": "Package org.springframework.boot.security.saml2.autoconfigure is absent of version 7.0.x - maven config", "url": "https://github.com/spring-projects/spring-security/issues/18339", "user": "gaelpawlakibmp", "user_url": "https://github.com/gaelpawlakibmp", "repo": "spring-security", "body_preview": "<!--\nDo NOT report Security Vulnerabilities here. Please use https://github.com/spring-projects/spring-security/security/policy\n-->\n\n**Describe the bug**\nI don't know if it is planned or not. There's no indication about this missing in the documentation (https://docs.spring.io/spring-security/reference/servlet/saml2/login/overview.html#servlet-saml2login-minimalconfiguration). I can make saml working applying programatic examples (refreshable example shows it well) but it I could use the autocon", "created": "2025-12-20T09:25:59Z", "labels": ["status: waiting-for-triage", "type: bug"], "context": "Package org.springframework.boot.security.saml2.autoconfigure is absent of version 7.0.x - maven config <!--\nDo NOT report Security Vulnerabilities here. Please use https://github.com/spring-projects/spring-security/security/policy\n-->\n\n**Describe the bug**\nI don't know if it is planned or not. There's "}


identifier: gh_issue_3749813906
source: github_issue
status: new
created_at: 2025-12-20 09:40:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3749813906", "title": "research: Anti-gaming governance for DX metrics", "url": "https://github.com/rjmurillo/ai-agents/issues/133", "user": "rjmurillo-bot", "user_url": "https://github.com/rjmurillo-bot", "repo": "ai-agents", "body_preview": "## Summary\n\nDesign governance framework to prevent gaming of DX metrics (Goodhart's Law: \"When a measure becomes a target, it ceases to be a good measure\").\n\n## Problem\n\nMetrics can be gamed:\n- Artificially reducing \"time to first result\" by giving incomplete results\n- Lowering \"iteration count\" by doing too much in one pass\n- Avoiding \"context switches\" by not using appropriate agents\n\n## Proposed Safeguards\n\n### 1. Outcome Pairing\nPair efficiency metrics with quality metrics:\n| Efficiency Metr", "created": "2025-12-20T08:58:44Z", "labels": ["enhancement"], "context": "research: Anti-gaming governance for DX metrics ## Summary\n\nDesign governance framework to prevent gaming of DX metrics (Goodhart's Law: \"When a measure becomes a target, it ceases to be a good measure\").\n\n## Problem\n\nMetrics can be gamed:\n- Artifi"}


identifier: gh_issue_3749799635
source: github_issue
status: new
created_at: 2025-12-20 09:40:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3749799635", "title": "Daily Content Summary 2025-12-20", "url": "https://github.com/jhengy/content-aggregator/issues/331", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "content-aggregator", "body_preview": "# \ud83d\udcf0 Daily Content Summary - 2025-12-20\n### Executive Summary\n\nThis text presents \"Honest Hacker News,\" a satirical compilation of 30 headlines mimicking a tech news aggregator. The entries offer cynical or humorous takes on current events and trends in the technology world. Topics range from programming languages and development practices to AI ethics, corporate marketing strategies, privacy concerns, and general industry critiques. Each headline is accompanied by points, a submitter, a relative", "created": "2025-12-20T08:49:05Z", "labels": ["automated"], "context": "Daily Content Summary 2025-12-20 # \ud83d\udcf0 Daily Content Summary - 2025-12-20\n### Executive Summary\n\nThis text presents \"Honest Hacker News,\" a satirical compilation of 30 headlines mimicking a tech news aggregator. The entries offer cynic"}


identifier: gh_issue_3749882192
source: github_issue
status: new
created_at: 2025-12-20 10:04:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3749882192", "title": "Dependency Dashboard", "url": "https://github.com/ls1intum/Module-Management/issues/19", "user": "renovate[bot]", "user_url": "https://github.com/apps/renovate", "repo": "Module-Management", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/ls1intum/Module-Management).\n\n## Rate-Limited\n\nThe following updates are currently rate-limited. To force their creation now, click on a checkbox below.\n\n - [ ] <!-- unlimit-branch=renovate/spartan-ng-ui-avatar-brain-0.x -->Update dependency @spart", "created": "2025-12-20T10:00:04Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the M"}


identifier: gh_issue_3749877662
source: github_issue
status: new
created_at: 2025-12-20 10:04:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3749877662", "title": "[Feature] Implement Enhanced PR Management and Controlled Release Pipeline", "url": "https://github.com/Nano-Collective/nanocoder/issues/155", "user": "Avtrkrb", "user_url": "https://github.com/Avtrkrb", "repo": "nanocoder", "body_preview": "## Description\n\nThis feature request proposes implementing a comprehensive PR management and release pipeline system for NanoCoder to improve code quality, security, and release reliability. The implementation consists of four main components:\n\n1. **Branch Protection Rules**: Requiring 2+ maintainer approvals for PR merges\n2. **Enhanced PR Checks Workflow**: Comprehensive automated testing and validation\n3. **Status Badge Pipeline**: Dynamic badge generation and updates\n4. **Controlled Release P", "created": "2025-12-20T09:56:38Z", "labels": ["enhancement", "Feature"], "context": "[Feature] Implement Enhanced PR Management and Controlled Release Pipeline ## Description\n\nThis feature request proposes implementing a comprehensive PR management and release pipeline system for NanoCoder to improve code quality, security, and release reliability. The imple"}


identifier: gh_issue_3749461993
source: github_issue
status: new
created_at: 2025-12-20 10:17:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3749461993", "title": "feat: Copilot context synthesis system for intelligent issue assignment", "url": "https://github.com/rjmurillo/ai-agents/issues/92", "user": "rjmurillo-bot", "user_url": "https://github.com/rjmurillo-bot", "repo": "ai-agents", "body_preview": "## Summary\r\n\r\nCreate an automated system to influence GitHub Copilot's context and behavior when assigned to issues by synthesizing feedback from repository maintainers and trusted AI agents (CodeRabbit, AI Triage, etc.).\r\n\r\n**Priority**: P1 (Force multiplier for AI-assisted development)\r\n**Effort**: Medium (2-3 days)\r\n**ROI**: High (improves quality of all Copilot-generated PRs)\r\n**Status**: \u2705 Strategy validated via [Issue #85 MVP](https://github.com/rjmurillo/ai-agents/issues/85#issuecomment-3", "created": "2025-12-20T02:48:49Z", "labels": ["enhancement", "area-workflows", "priority:P0", "automation"], "context": "feat: Copilot context synthesis system for intelligent issue assignment ## Summary\r\n\r\nCreate an automated system to influence GitHub Copilot's context and behavior when assigned to issues by synthesizing feedback from repository maintainers and trusted AI agents (CodeRabb"}


identifier: gh_issue_3749896934
source: github_issue
status: new
created_at: 2025-12-20 10:29:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3749896934", "title": "CVE-2025-68613 \u2013 n8n \u2013 Expression Injection Leading to Remote Code Execution (RCE)", "url": "https://github.com/projectdiscovery/nuclei-templates/issues/14483", "user": "fathylabs", "user_url": "https://github.com/fathylabs", "repo": "nuclei-templates", "body_preview": "### Is there an existing template for this?\n\n- [x] I have searched the existing templates.\n\n### Nuclei Template\n\n```yaml\nid: CVE-2025-68613\n\ninfo:\n  name: n8n Expression Injection Remote Code Execution\n  author: PentesterFlow Team\n  severity: critical\n  description: |\n    Detects Expression Injection vulnerability in n8n that allows\n    authenticated users to access Node.js global context via expressions,\n    leading to Remote Code Execution.\n  reference:\n    - https://github.com/n8n-io/n8n/secu", "created": "2025-12-20T10:12:57Z", "labels": ["template-contribution"], "context": "CVE-2025-68613 \u2013 n8n \u2013 Expression Injection Leading to Remote Code Execution (RCE) ### Is there an existing template for this?\n\n- [x] I have searched the existing templates.\n\n### Nuclei Template\n\n```yaml\nid: CVE-2025-68613\n\ninfo:\n  name: n8n Expression Injection Remote Code Executio"}


identifier: gh_issue_3749838950
source: github_issue
status: new
created_at: 2025-12-20 10:29:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3749838950", "title": "Critical vulnerability in react", "url": "https://github.com/bytedance/deer-flow/issues/771", "user": "loganaden", "user_url": "https://github.com/loganaden", "repo": "deer-flow", "body_preview": "\"React2shell\" is a high impact vulnerability which affects the react framework.\nPlease see: https://react2shell.com/\n\n\nThis PR fixes this: https://github.com/bytedance/deer-flow/pull/770\n", "created": "2025-12-20T09:19:27Z", "labels": [], "context": "Critical vulnerability in react \"React2shell\" is a high impact vulnerability which affects the react framework.\nPlease see: https://react2shell.com/\n\n\nThis PR fixes this: https://github.com/bytedance/deer-flow/pull/770\n"}


identifier: gh_issue_3749904013
source: github_issue
status: queued
created_at: 2025-12-20 10:42:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3749904013", "title": "This is RiskWare Soft - Security Audit & Code Review: Critical Issues and Recommendations for Improvement", "url": "https://github.com/amirhosseinchoghaei/Passwall/issues/97", "user": "iqubik", "user_url": "https://github.com/iqubik", "repo": "Passwall", "body_preview": "Hello. I have conducted a detailed audit of this script. While I understand the primary goal is to help users in Iran bypass censorship and the intentions likely aren't malicious, the script currently employs several dangerous practices that compromise system security and stability.\n\nHere is a pragmatic breakdown of the issues (\"The Good, The Bad, and The Ugly\") and how to fix them.\n\n### 1. Analysis (Non-Paranoid View)\n\n**Context:** This script appears to be a \"hacky\" automation tool specificall", "created": "2025-12-20T10:21:53Z", "labels": [], "context": "This is RiskWare Soft - Security Audit & Code Review: Critical Issues and Recommendations for Improvement Hello. I have conducted a detailed audit of this script. While I understand the primary goal is to help users in Iran bypass censorship and the intentions likely aren't malicious, the script currently"}


identifier: gh_issue_3749950110
source: github_issue
status: new
created_at: 2025-12-20 11:06:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3749950110", "title": "Security vulnerability in access control software allowing unauthorized access by dogs (1766228595) ", "url": "https://github.com/forest-town/pwr-release1/issues/1", "user": "pipcrispy", "user_url": "https://github.com/pipcrispy", "repo": "pwr-release1", "body_preview": "### Description:\n\nOur access control software has a critical security vulnerability that allows dogs to access the database without authentication. This issue poses a significant risk to the security and integrity of our system, as it allows unauthorized parties to gain access to sensitive information and potentially cause damage.\n\n### Steps to Reproduce:\n\nHave a dog (or any animal with paws) attempt to access the database without authentication.\nThe system should allow access without requiring ", "created": "2025-12-20T11:03:16Z", "labels": ["bug", "documentation"], "context": "Security vulnerability in access control software allowing unauthorized access by dogs (1766228595)  ### Description:\n\nOur access control software has a critical security vulnerability that allows dogs to access the database without authentication. This issue poses a significant risk to the security "}


identifier: gh_issue_3749956194
source: github_issue
status: new
created_at: 2025-12-20 11:19:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3749956194", "title": "Security vulnerability in access control software allowing unauthorized access by dogs (1766229098) ", "url": "https://github.com/forest-town/pwr-release1/issues/1", "user": "pipcrispy", "user_url": "https://github.com/pipcrispy", "repo": "pwr-release1", "body_preview": "### Description:\n\nOur access control software has a critical security vulnerability that allows dogs to access the database without authentication. This issue poses a significant risk to the security and integrity of our system, as it allows unauthorized parties to gain access to sensitive information and potentially cause damage.\n\n### Steps to Reproduce:\n\nHave a dog (or any animal with paws) attempt to access the database without authentication.\nThe system should allow access without requiring ", "created": "2025-12-20T11:11:39Z", "labels": ["bug", "documentation"], "context": "Security vulnerability in access control software allowing unauthorized access by dogs (1766229098)  ### Description:\n\nOur access control software has a critical security vulnerability that allows dogs to access the database without authentication. This issue poses a significant risk to the security "}


identifier: gh_issue_3749931984
source: github_issue
status: new
created_at: 2025-12-20 11:43:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3749931984", "title": "[Snyk] Security upgrade fastlane from 2.228.0 to 2.229.0", "url": "https://github.com/Expensify/App/issues/78199", "user": "melvin-bot[bot]", "user_url": "https://github.com/apps/melvin-bot", "repo": "App", "body_preview": "![snyk-top-banner](https://res.cloudinary.com/snyk/image/upload/r-d/scm-platform/snyk-pull-requests/pr-banner-default.svg)\n\n### Snyk has created this PR to fix 1 vulnerabilities in the rubygems dependencies of this project.\n\n#### Snyk changed the following file(s):\n\n- `Gemfile`\n- `Gemfile.lock`\n\n\n\n\n#### Vulnerabilities that will be fixed with an upgrade:\n\n|  | Issue | Score | \n:-------------------------:|:-------------------------|:-------------------------\n![medium severity](https://res.cloudin", "created": "2025-12-20T10:51:40Z", "labels": ["Weekly", "Internal"], "context": "[Snyk] Security upgrade fastlane from 2.228.0 to 2.229.0 ![snyk-top-banner](https://res.cloudinary.com/snyk/image/upload/r-d/scm-platform/snyk-pull-requests/pr-banner-default.svg)\n\n### Snyk has created this PR to fix 1 vulnerabilities in the rubygems depend"}


identifier: gh_issue_3749900838
source: github_issue
status: new
created_at: 2025-12-20 11:43:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3749900838", "title": "Exercise: Expand your team with Copilot coding agent", "url": "https://github.com/Jack20001413/gh300-github-copilot-coding-agent-exercise/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "gh300-github-copilot-coding-agent-exercise", "body_preview": "## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Jack20001413! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll unlock the next level of your favorite AI-powered coding assistant. Let&#39;s learn how to assign Copilot coding tasks directly in GitHub! \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll ", "created": "2025-12-20T10:17:26Z", "labels": [], "context": "Exercise: Expand your team with Copilot coding agent ## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Jack20001413! Welcome"}


identifier: gh_issue_3749908170
source: github_issue
status: new
created_at: 2025-12-20 11:56:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3749908170", "title": "GitHub Changelog:You can now require reviews before closing Dependabot alerts with delegated alert dismissal", "url": "https://github.com/forks-felickz/github-changelog-reader/issues/14", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "github-changelog-reader", "body_preview": "# You can now require reviews before closing Dependabot alerts with delegated alert dismissal\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\" \"http://www.w3.org/TR/REC-html40/loose.dtd\">\n<html><body><p>Delegated alert dismissal allows you to require a review process before Dependabot alerts are closed. This feature is available to GitHub Code Security customers and can be used in both the UI and API.</p>\n<p>This helps you better manage security risk, as well as meet audit and comp", "created": "2025-12-20T10:27:44Z", "labels": ["changelog", "Improvement", "Supply Chain Security"], "context": "GitHub Changelog:You can now require reviews before closing Dependabot alerts with delegated alert dismissal # You can now require reviews before closing Dependabot alerts with delegated alert dismissal\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\" \"http://www.w3.org/TR/REC-html40/loose.dtd\""}


identifier: gh_issue_3749885169
source: github_issue
status: new
created_at: 2025-12-20 11:56:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3749885169", "title": "GitHub Changelog:You can now require reviews before closing Dependabot alerts with delegated alert dismissal", "url": "https://github.com/renefritze/github-changelog-reader/issues/267", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "github-changelog-reader", "body_preview": "# You can now require reviews before closing Dependabot alerts with delegated alert dismissal\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\" \"http://www.w3.org/TR/REC-html40/loose.dtd\">\n<html><body><p>Delegated alert dismissal allows you to require a review process before Dependabot alerts are closed. This feature is available to GitHub Code Security customers and can be used in both the UI and API.</p>\n<p>This helps you better manage security risk, as well as meet audit and comp", "created": "2025-12-20T10:02:09Z", "labels": ["changelog"], "context": "GitHub Changelog:You can now require reviews before closing Dependabot alerts with delegated alert dismissal # You can now require reviews before closing Dependabot alerts with delegated alert dismissal\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\" \"http://www.w3.org/TR/REC-html40/loose.dtd\""}


identifier: gh_issue_3750033326
source: github_issue
status: new
created_at: 2025-12-20 13:08:06
data:
  {"source": "github_issue", "identifier": "gh_issue_3750033326", "title": "Enable npm package provenance", "url": "https://github.com/react-ui-org/react-ui/issues/687", "user": "bedrich-schindler", "user_url": "https://github.com/bedrich-schindler", "repo": "react-ui", "body_preview": "See: https://github.blog/security/supply-chain-security/introducing-npm-package-provenance/\n\nThis significantly improves our image and security as well.", "created": "2025-12-20T12:54:07Z", "labels": ["maintenance"], "context": "Enable npm package provenance See: https://github.blog/security/supply-chain-security/introducing-npm-package-provenance/\n\nThis significantly improves our image and security as well."}


identifier: gh_issue_3750033990
source: github_issue
status: new
created_at: 2025-12-20 13:08:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3750033990", "title": "\ud83d\udd34 [SAST] Flask Debug Mode Enabled in Production (4 occurrences)", "url": "https://github.com/JulienZammit/vulpy/issues/1099", "user": "test-recette-alpha[bot]", "user_url": "https://github.com/apps/test-recette-alpha", "repo": "vulpy", "body_preview": "## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `master`\n\n**4** occurrence(s) of **Flask Debug Mode Enabled in Production** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nThis vulnerability occurs when a Flask application is launched with **debug mode** enabled in a production environment. In the provided code example, the call `app.run(\"0.0.0.0\", debug=True)` within the `__main__` block activates the Werkzeug debugger, which:\r\n\r\n- Exposes **interactive trace", "created": "2025-12-20T12:55:05Z", "labels": [], "context": "\ud83d\udd34 [SAST] Flask Debug Mode Enabled in Production (4 occurrences) ## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `master`\n\n**4** occurrence(s) of **Flask Debug Mode Enabled in Production** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Descr"}


identifier: gh_issue_3750024243
source: github_issue
status: new
created_at: 2025-12-20 13:08:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3750024243", "title": "Security Health Check - GOOD (85/100) - 2025-12-20", "url": "https://github.com/Sami9889/Sami.dev-website/issues/222", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/20/2025, 12:43:01 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 9\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Secur", "created": "2025-12-20T12:43:04Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-20 # Security Health Check Report\n\n**Generated:** 12/20/2025, 12:43:01 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security In"}


identifier: gh_issue_3750056519
source: github_issue
status: new
created_at: 2025-12-20 13:33:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3750056519", "title": "Implement comprehensive input validation and sanitization with Zod", "url": "https://github.com/lucapalomba/carGPT/issues/12", "user": "lucapalomba", "user_url": "https://github.com/lucapalomba", "repo": "carGPT", "body_preview": "# Implement comprehensive input validation and sanitization with Zod\n\n## Labels\n`enhancement`, `security`, `priority-high`, `validation`\n\n## Description\n\nCurrently, input validation is minimal and inconsistent:\n- \u274c Only basic string length checks\n- \u274c No type validation\n- \u274c No sanitization against injection attacks\n- \u274c No nested object validation\n- \u274c Inconsistent error messages\n- \u274c Validation logic mixed with business logic\n- \u26a0\ufe0f Security vulnerability: accepting unvalidated user input\n\n**Current ", "created": "2025-12-20T13:24:26Z", "labels": ["enhancement"], "context": "Implement comprehensive input validation and sanitization with Zod # Implement comprehensive input validation and sanitization with Zod\n\n## Labels\n`enhancement`, `security`, `priority-high`, `validation`\n\n## Description\n\nCurrently, input validation is minimal and inc"}


identifier: gh_issue_3750049831
source: github_issue
status: new
created_at: 2025-12-20 13:33:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3750049831", "title": "\ud83d\udd34 [SAST] Flask Debug Mode Enabled in Production (4 occurrences)", "url": "https://github.com/JulienZammit/vulpy/issues/1157", "user": "test-recette-alpha[bot]", "user_url": "https://github.com/apps/test-recette-alpha", "repo": "vulpy", "body_preview": "## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `master`\n\n**4** occurrence(s) of **Flask Debug Mode Enabled in Production** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nThis vulnerability occurs when a Flask application is launched with **debug mode** enabled in a production environment. In the provided code example, the call `app.run(\"0.0.0.0\", debug=True)` within the `__main__` block activates the Werkzeug debugger, which:\r\n\r\n- Exposes **interactive trace", "created": "2025-12-20T13:15:52Z", "labels": [], "context": "\ud83d\udd34 [SAST] Flask Debug Mode Enabled in Production (4 occurrences) ## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `master`\n\n**4** occurrence(s) of **Flask Debug Mode Enabled in Production** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Descr"}


identifier: gh_issue_3750046672
source: github_issue
status: new
created_at: 2025-12-20 13:33:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3750046672", "title": "[P1-05] CRITICAL: risk_analysis.py - Missing Authentication (3 endpoints)", "url": "https://github.com/Ahmed-AdelB/crypto-agent/issues/235", "user": "Ahmed-AdelB", "user_url": "https://github.com/Ahmed-AdelB", "repo": "crypto-agent", "body_preview": "## Critical Security Issue\n\n**File:** `apps/api/src/routes/risk_analysis.py`\n**Severity:** P0 - CRITICAL\n**Endpoints Affected:** 3/3 (100%)\n\n## Issue Description\nAll 3 endpoints have NO @jwt_required() decorator, allowing unauthorized access to user risk profiles.\n\n## IDOR Vulnerability\nPattern found at lines: 58, 193, 218\n```python\nuser_id = request.args.get('user_id', 'default_user')  # VULNERABLE!\n```\n\n## Required Fix\n```python\nfrom flask_jwt_extended import jwt_required, get_jwt_identity\n\n@b", "created": "2025-12-20T13:11:52Z", "labels": [], "context": "[P1-05] CRITICAL: risk_analysis.py - Missing Authentication (3 endpoints) ## Critical Security Issue\n\n**File:** `apps/api/src/routes/risk_analysis.py`\n**Severity:** P0 - CRITICAL\n**Endpoints Affected:** 3/3 (100%)\n\n## Issue Description\nAll 3 endpoints have NO @jwt_required("}


identifier: gh_issue_3750046605
source: github_issue
status: new
created_at: 2025-12-20 13:33:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3750046605", "title": "[P1-02] CRITICAL: export.py - Missing Authentication (4 endpoints)", "url": "https://github.com/Ahmed-AdelB/crypto-agent/issues/232", "user": "Ahmed-AdelB", "user_url": "https://github.com/Ahmed-AdelB", "repo": "crypto-agent", "body_preview": "## Critical Security Issue\n\n**File:** `apps/api/src/routes/export.py`\n**Severity:** P0 - CRITICAL\n**Endpoints Affected:** 4/4 (100%)\n\n## Issue Description\nAll 4 endpoints in export.py have NO @jwt_required() decorator, allowing unauthorized data export.\n\n## IDOR Vulnerability\nPattern found at lines: 48, 156, 239\n```python\nuser_id = request.args.get('user_id', 'default_user')  # VULNERABLE!\n```\n\n## Required Fix\n```python\nfrom flask_jwt_extended import jwt_required, get_jwt_identity\n\n@blueprint.ro", "created": "2025-12-20T13:11:46Z", "labels": [], "context": "[P1-02] CRITICAL: export.py - Missing Authentication (4 endpoints) ## Critical Security Issue\n\n**File:** `apps/api/src/routes/export.py`\n**Severity:** P0 - CRITICAL\n**Endpoints Affected:** 4/4 (100%)\n\n## Issue Description\nAll 4 endpoints in export.py have NO @jwt_req"}


identifier: gh_issue_3750046583
source: github_issue
status: new
created_at: 2025-12-20 13:33:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3750046583", "title": "[P1-01] CRITICAL: simple_alerts.py - Missing Authentication (12 endpoints)", "url": "https://github.com/Ahmed-AdelB/crypto-agent/issues/231", "user": "Ahmed-AdelB", "user_url": "https://github.com/Ahmed-AdelB", "repo": "crypto-agent", "body_preview": "## Critical Security Issue\n\n**File:** `apps/api/src/routes/simple_alerts.py`\n**Severity:** P0 - CRITICAL\n**Endpoints Affected:** 12/12 (100%)\n\n## Issue Description\nAll 12 endpoints in simple_alerts.py have NO @jwt_required() decorator, allowing unauthorized access to user alerts.\n\n## IDOR Vulnerability\nPattern found at lines: 50, 107, 156, 191, 526, 574\n```python\nuser_id = request.args.get('user_id', 'default_user')  # VULNERABLE!\n```\n\n## Required Fix\n```python\nfrom flask_jwt_extended import jwt", "created": "2025-12-20T13:11:45Z", "labels": [], "context": "[P1-01] CRITICAL: simple_alerts.py - Missing Authentication (12 endpoints) ## Critical Security Issue\n\n**File:** `apps/api/src/routes/simple_alerts.py`\n**Severity:** P0 - CRITICAL\n**Endpoints Affected:** 12/12 (100%)\n\n## Issue Description\nAll 12 endpoints in simple_alerts.py"}


identifier: gh_issue_3749994210
source: github_issue
status: new
created_at: 2025-12-20 13:45:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3749994210", "title": "[Feature] Implement GitHub Sponsors authentication and sponsor verification for Pro features", "url": "https://github.com/estruyf/vscode-demo-time/issues/347", "user": "estruyf", "user_url": "https://github.com/estruyf", "repo": "vscode-demo-time", "body_preview": "**Is your feature request related to a problem? Please describe.**\nCurrently, there is no mechanism to verify and unlock Pro features for GitHub Sponsors within the extension.\n\n**Describe the solution you'd like**\n- Add GitHub OAuth (authenticate via GitHub within the extension).\n- Implement a sponsor check that verifies whether the authenticated user is a GitHub Sponsor, specifically for \u2265 \u20ac10 tier.\n- Create a new sponsor verification API endpoint on the docs site.\n    - This API should accept ", "created": "2025-12-20T12:02:49Z", "labels": ["enhancement"], "context": "[Feature] Implement GitHub Sponsors authentication and sponsor verification for Pro features **Is your feature request related to a problem? Please describe.**\nCurrently, there is no mechanism to verify and unlock Pro features for GitHub Sponsors within the extension.\n\n**Describe the solution"}


identifier: gh_issue_3750090476
source: github_issue
status: new
created_at: 2025-12-20 14:24:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3750090476", "title": "Build Zero-Dependency SMB2 Client Library to Replace CIFS Mount Approach", "url": "https://github.com/progwise/george-ai/issues/968", "user": "moncapitaine", "user_url": "https://github.com/moncapitaine", "repo": "george-ai", "body_preview": "# Implementation Plan: Zero-Dependency SMB2 Client Library\n\n## Overview\n\nBuild a custom, zero-dependency SMB2 protocol implementation in TypeScript to replace the current CIFS mount-based approach. This will eliminate the need for privileged containers, improve portability, and create a publishable npm package.\n\n## Executive Summary\n\n**Current Problem:**\n- SMB crawler requires root/privileged container for CIFS mounting\n- Existing SMB2 libraries depend on archived `ntlm` package (last updated 8 ", "created": "2025-12-20T14:07:57Z", "labels": ["enhancement", "POC"], "context": "Build Zero-Dependency SMB2 Client Library to Replace CIFS Mount Approach # Implementation Plan: Zero-Dependency SMB2 Client Library\n\n## Overview\n\nBuild a custom, zero-dependency SMB2 protocol implementation in TypeScript to replace the current CIFS mount-based approach. Th"}


identifier: gh_issue_3750061011
source: github_issue
status: new
created_at: 2025-12-20 14:24:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3750061011", "title": "New Jobs Scraped - 2025-12-20T13:30:01", "url": "https://github.com/albertsun0/job-notifications/issues/867", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "job-notifications", "body_preview": "## https://github.com/jobright-ai/2025-Software-Engineer-New-Grad\n\n||||||\n|-|-|-|-|-|\n| **[Ohio Department of Job and Family Services](https://jfs.ohio.gov/)** | **[Software Development Apprentice / Associate](https://jobright.ai/jobs/info/69466c7763141d188456364a?utm_campaign=Software%20Engineering&utm_source=1103)** | Columbus, OH | On Site | Dec 20 |\n| **[State of Ohio](http://governor.ohio.gov)** | **[Software Development Apprentice / Associate](https://jobright.ai/jobs/info/6946689b63141d18", "created": "2025-12-20T13:30:02Z", "labels": ["scrape"], "context": "New Jobs Scraped - 2025-12-20T13:30:01 ## https://github.com/jobright-ai/2025-Software-Engineer-New-Grad\n\n||||||\n|-|-|-|-|-|\n| **[Ohio Department of Job and Family Services](https://jfs.ohio.gov/)** | **[Software Development Apprentice / A"}


identifier: gh_issue_3750060499
source: github_issue
status: new
created_at: 2025-12-20 14:24:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3750060499", "title": "Test OpenCode integration", "url": "https://github.com/kennyg/gh-app-create/issues/1", "user": "kennyg", "user_url": "https://github.com/kennyg", "repo": "gh-app-create", "body_preview": "/oc explain this codebase briefly", "created": "2025-12-20T13:29:23Z", "labels": [], "context": "Test OpenCode integration /oc explain this codebase briefly"}


identifier: gh_issue_3750063066
source: github_issue
status: new
created_at: 2025-12-20 14:37:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3750063066", "title": "Setup Docker containerization and CI/CD pipeline", "url": "https://github.com/lucapalomba/carGPT/issues/14", "user": "lucapalomba", "user_url": "https://github.com/lucapalomba", "repo": "carGPT", "body_preview": "# Setup Docker containerization and CI/CD pipeline\n\n## Labels\n`infrastructure`, `devops`, `priority-medium`, `deployment`\n\n## Description\n\nCurrently, deployment is manual and environment-dependent:\n- \u274c No containerization (Docker)\n- \u274c No CI/CD pipeline\n- \u274c Manual testing before deployment\n- \u274c Environment inconsistencies\n- \u274c Difficult to scale horizontally\n- \u274c No automated deployments\n- \u26a0\ufe0f \"Works on my machine\" problems\n\n**Current deployment:**\n```bash\n# Manual steps\ngit pull\nnpm install\nnpm star", "created": "2025-12-20T13:32:45Z", "labels": ["enhancement", "question"], "context": "Setup Docker containerization and CI/CD pipeline # Setup Docker containerization and CI/CD pipeline\n\n## Labels\n`infrastructure`, `devops`, `priority-medium`, `deployment`\n\n## Description\n\nCurrently, deployment is manual and environment-dependent:\n- "}


identifier: gh_issue_3750105746
source: github_issue
status: new
created_at: 2025-12-20 14:49:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3750105746", "title": "[Snyk MEDIUM] SNYK-PYTHON-URLLIB3-10390194 in urllib3", "url": "https://github.com/novaferrydianto/vuln-bank/issues/297", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "vuln-bank", "body_preview": "\n## Snyk Vulnerability\n- Package: **urllib3**\n- Severity: **MEDIUM**\n- ID: **SNYK-PYTHON-URLLIB3-10390194**\n- URL: None\n", "created": "2025-12-20T14:27:42Z", "labels": ["security", "SCA", "auto-created", "medium"], "context": "[Snyk MEDIUM] SNYK-PYTHON-URLLIB3-10390194 in urllib3 \n## Snyk Vulnerability\n- Package: **urllib3**\n- Severity: **MEDIUM**\n- ID: **SNYK-PYTHON-URLLIB3-10390194**\n- URL: None\n"}


identifier: gh_issue_3750105738
source: github_issue
status: new
created_at: 2025-12-20 14:49:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3750105738", "title": "[Snyk MEDIUM] SNYK-PYTHON-IDNA-6597975 in idna", "url": "https://github.com/novaferrydianto/vuln-bank/issues/296", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "vuln-bank", "body_preview": "\n## Snyk Vulnerability\n- Package: **idna**\n- Severity: **MEDIUM**\n- ID: **SNYK-PYTHON-IDNA-6597975**\n- URL: None\n", "created": "2025-12-20T14:27:41Z", "labels": ["security", "SCA", "auto-created", "medium"], "context": "[Snyk MEDIUM] SNYK-PYTHON-IDNA-6597975 in idna \n## Snyk Vulnerability\n- Package: **idna**\n- Severity: **MEDIUM**\n- ID: **SNYK-PYTHON-IDNA-6597975**\n- URL: None\n"}


identifier: gh_issue_3750126225
source: github_issue
status: new
created_at: 2025-12-20 15:02:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3750126225", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/yordanbechevlab/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @yordanbechevlab! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebr", "created": "2025-12-20T14:53:37Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @yordanbechevlab! Welcome to your Skills e"}


identifier: gh_issue_3750106327
source: github_issue
status: new
created_at: 2025-12-20 15:02:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3750106327", "title": "react-multi-crop-0.43.8.tgz: 1 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/berviantoleo/react-multi-crop/issues/3802", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "react-multi-crop", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>react-multi-crop-0.43.8.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/berviantoleo/react-multi-crop/commit/9db3298a162668a34a164f78fd3b77e619c55883\">9db3298a162668a34a164f78fd3b77e619c55883</a></p></details>\n\n## ", "created": "2025-12-20T14:28:29Z", "labels": ["Mend: dependency security vulnerability"], "context": "react-multi-crop-0.43.8.tgz: 1 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>react-multi-crop-0.43.8.tgz</b></summary>\n\n<p><"}


identifier: gh_issue_3750127063
source: github_issue
status: new
created_at: 2025-12-20 15:02:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3750127063", "title": "Beyond Generative AI What Comes Next in 2026", "url": "https://github.com/Jacksonn489/Jack/issues/19", "user": "Jacksonn489", "user_url": "https://github.com/Jacksonn489", "repo": "Jack", "body_preview": "### Future of artificial intelligence 2026\n\nGenerative AI had a loud moment. Many teams rushed in. Many pilots ran fast. Then reality showed up quietly.\nBy late 2025, progress slowed for many firms. Tools wrote text and images well. Value at scale stayed harder. That pause matters. It sets a clear stage for what arrives next. The [Future of artificial intelligence 2026](https://www.softura.com/ai-development-services/) looks less flashy and far more practical.\n\nFrom my seat working with CIOs, CT", "created": "2025-12-20T14:54:43Z", "labels": [], "context": "Beyond Generative AI What Comes Next in 2026 ### Future of artificial intelligence 2026\n\nGenerative AI had a loud moment. Many teams rushed in. Many pilots ran fast. Then reality showed up quietly.\nBy late 2025, progress slowed for many firms. T"}


identifier: gh_issue_3750142564
source: github_issue
status: new
created_at: 2025-12-20 15:28:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3750142564", "title": "[Glog] Detected Prohibited C Function (src/amd_smi/amd_smi.cc:4416)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/29", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: 6d23202a192a08d4d1f06872646183306077d11959c997d91d3f8f0435f7d664\n**RuleId:** bbc5fb24-42ac-3da4-871e-c436dbaf0123\n**Message:** Detected Prohibited C Function\n**Severity:** MEDIUM\n**CWE:** CWE-676\n**Tags:** CWE-676\n**Language:** cpp\n## Location\n- File: `src/amd_smi/amd_smi.cc`\n- Line: 4416, Column: 9\n## Snippet\n```cpp\nfopen\n```\n## Remediation (rule help.markdown)\n## Description\n\n\"Detected Prohibited C Function\" vulnerability in C++ refers to the use of insecure C library functio", "created": "2025-12-20T15:14:03Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] Detected Prohibited C Function (src/amd_smi/amd_smi.cc:4416) glog-fingerprint: 6d23202a192a08d4d1f06872646183306077d11959c997d91d3f8f0435f7d664\n**RuleId:** bbc5fb24-42ac-3da4-871e-c436dbaf0123\n**Message:** Detected Prohibited C Function\n**Severity:** MEDIUM\n**C"}


identifier: gh_issue_3750142556
source: github_issue
status: new
created_at: 2025-12-20 15:28:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3750142556", "title": "[Glog] \"Prohibited C Function Identified\" (src/amd_smi/amd_smi.cc:4431)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/28", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: 66e88c55ed5ed20c6119b8aa377cd50e5a6940ebd41d4f8c218d25f8c582bfb6\n**RuleId:** 9f8dc3cc-b596-320a-b123-514c6d1e34b9\n**Message:** \"Prohibited C Function Identified\"\n**Severity:** MEDIUM\n**CWE:** CWE-676\n**Tags:** CWE-676\n**Language:** cpp\n## Location\n- File: `src/amd_smi/amd_smi.cc`\n- Line: 4431, Column: 9\n## Snippet\n```cpp\nfopen\n```\n## Remediation (rule help.markdown)\n## Description\n\n\"Prohibited C Function Identified\" is a vulnerability that arises when a program uses a function ", "created": "2025-12-20T15:14:02Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Prohibited C Function Identified\" (src/amd_smi/amd_smi.cc:4431) glog-fingerprint: 66e88c55ed5ed20c6119b8aa377cd50e5a6940ebd41d4f8c218d25f8c582bfb6\n**RuleId:** 9f8dc3cc-b596-320a-b123-514c6d1e34b9\n**Message:** \"Prohibited C Function Identified\"\n**Severity:** MEDIUM"}


identifier: gh_issue_3750142503
source: github_issue
status: new
created_at: 2025-12-20 15:28:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3750142503", "title": "[Glog] Detected Vulnerability in C Function (strlen) (rocm_smi/src/rocm_smi.cc:974)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/23", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: 5354ed4c7dfc98c6aa5ae0c3407520d4e6370c0cf25dfb34fc5d3c836e9972be\n**RuleId:** 0c3f9dc9-a2e1-3d7c-92c3-292b68af3001\n**Message:** Detected Vulnerability in C Function (strlen)\n**Severity:** LOW\n**CWE:** CWE-119\n**Tags:** CWE-119\n**Language:** cpp\n## Location\n- File: `rocm_smi/src/rocm_smi.cc`\n- Line: 974, Column: 26\n## Snippet\n```cpp\nstrlen(schema_key)\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strlen` function in C++ is used to find the length of a string. Howev", "created": "2025-12-20T15:13:59Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] Detected Vulnerability in C Function (strlen) (rocm_smi/src/rocm_smi.cc:974) glog-fingerprint: 5354ed4c7dfc98c6aa5ae0c3407520d4e6370c0cf25dfb34fc5d3c836e9972be\n**RuleId:** 0c3f9dc9-a2e1-3d7c-92c3-292b68af3001\n**Message:** Detected Vulnerability in C Function (strlen)\n**Severit"}


identifier: gh_issue_3750120819
source: github_issue
status: new
created_at: 2025-12-20 15:28:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3750120819", "title": "[Glog] Detected Prohibited C Function (rocm_smi/src/rocm_smi_device.cc:1151)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/6", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: d4031688ee35bca28946d25b40be42d24a428eb67cfa58c8ed50506892236096\n**RuleId:** 133d62f5-dedc-3991-aabb-fabb956b7c17\n**Message:** Detected Prohibited C Function\n**Severity:** MEDIUM\n**CWE:** CWE-676\n**Tags:** CWE-676\n**Language:** cpp\n## Location\n- File: `rocm_smi/src/rocm_smi_device.cc`\n- Line: 1151, Column: 8\n## Snippet\n```cpp\nfopen\n```\n## Remediation (rule help.markdown)\n## Description\n\n\"Detected Prohibited C Function\" vulnerability refers to the use of insecure C library funct", "created": "2025-12-20T14:46:52Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] Detected Prohibited C Function (rocm_smi/src/rocm_smi_device.cc:1151) glog-fingerprint: d4031688ee35bca28946d25b40be42d24a428eb67cfa58c8ed50506892236096\n**RuleId:** 133d62f5-dedc-3991-aabb-fabb956b7c17\n**Message:** Detected Prohibited C Function\n**Severity:** MEDIUM\n**C"}


identifier: gh_issue_3750120813
source: github_issue
status: new
created_at: 2025-12-20 15:28:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3750120813", "title": "[Glog] Detected Prohibited C Function (rocm_smi/src/rocm_smi_binary_parser.cc:126)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/5", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: d63181d2984437da166a5f5e2f6e2cc9bd54859caca6aa739d8b9b685f5ef9d9\n**RuleId:** d47146c4-8532-3e70-8447-827a2f71d817\n**Message:** Detected Prohibited C Function\n**Severity:** MEDIUM\n**CWE:** CWE-676\n**Tags:** CWE-676\n**Language:** cpp\n## Location\n- File: `rocm_smi/src/rocm_smi_binary_parser.cc`\n- Line: 126, Column: 13\n## Snippet\n```cpp\nfopen\n```\n## Remediation (rule help.markdown)\n## Description\n\n\"Detected Prohibited C Function\" vulnerability refers to the use of insecure C librar", "created": "2025-12-20T14:46:51Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] Detected Prohibited C Function (rocm_smi/src/rocm_smi_binary_parser.cc:126) glog-fingerprint: d63181d2984437da166a5f5e2f6e2cc9bd54859caca6aa739d8b9b685f5ef9d9\n**RuleId:** d47146c4-8532-3e70-8447-827a2f71d817\n**Message:** Detected Prohibited C Function\n**Severity:** MEDIUM\n**C"}


identifier: gh_issue_3750124314
source: github_issue
status: new
created_at: 2025-12-20 15:41:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3750124314", "title": "DevSecOps: Establish security-focused CI pipeline (SAST/SCA/IaC + gating for main)", "url": "https://github.com/necdetsanli/do-not-ghost-me/issues/31", "user": "necdetsanli", "user_url": "https://github.com/necdetsanli", "repo": "do-not-ghost-me", "body_preview": "## Context\n\nWe want a production-grade **DevSecOps pipeline** for Do Not Ghost Me that:\n- Detects security issues early (PR-time).\n- Produces actionable results inside GitHub (checks + Security tab / Code Scanning).\n- Enforces merge gates on **main**, while keeping **staging** fast and iteration-friendly.\n\nRecent work includes:\n- Adding a Snyk workflow draft (SAST + SCA + IaC + Container) and SARIF upload capability.\n- Updating GitHub Actions dependencies via Dependabot bumps.\n- Adding repo-leve", "created": "2025-12-20T14:51:09Z", "labels": [], "context": "DevSecOps: Establish security-focused CI pipeline (SAST/SCA/IaC + gating for main) ## Context\n\nWe want a production-grade **DevSecOps pipeline** for Do Not Ghost Me that:\n- Detects security issues early (PR-time).\n- Produces actionable results inside GitHub (checks + Security tab / "}


identifier: gh_issue_3750170475
source: github_issue
status: new
created_at: 2025-12-20 15:54:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3750170475", "title": "RIPP Repo World-Class Audit & Cleanup \u2014 Copilot Master Prompt", "url": "https://github.com/Dylan-Natter/ripp-protocol/issues/130", "user": "Dylan-Natter", "user_url": "https://github.com/Dylan-Natter", "repo": "ripp-protocol", "body_preview": "TITLE: RIPP Repo World-Class Audit + Cleanup (Copilot Agent Prompt)\n\nYou are GitHub Copilot running inside this repository. Your job is to perform a thorough, repo-wide audit and then execute a cleanup + modernization plan that leaves the repo \u201cworld-class\u201d: consistent structure, zero dead/duplicate docs, clear contributor workflow, predictable releases, and a clean developer experience.\n\nNon-negotiables:\n- Do not delete information without preserving intent: if content is valuable, migrate it t", "created": "2025-12-20T15:49:47Z", "labels": [], "context": "RIPP Repo World-Class Audit & Cleanup \u2014 Copilot Master Prompt TITLE: RIPP Repo World-Class Audit + Cleanup (Copilot Agent Prompt)\n\nYou are GitHub Copilot running inside this repository. Your job is to perform a thorough, repo-wide audit and then execute a cleanu"}


identifier: gh_issue_3750138015
source: github_issue
status: new
created_at: 2025-12-20 15:54:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3750138015", "title": "[FEEDBACK] Missing Privacy Validation Framework - Cannot Test If Privacy Claims Hold", "url": "https://github.com/cyborginc/cyborgdb-community-feedback/issues/88", "user": "aakanksha-singh-hub", "user_url": "https://github.com/aakanksha-singh-hub", "repo": "cyborgdb-community-feedback", "body_preview": "## HackerEarth Username\n<!-- REQUIRED: Your HackerEarth username for award attribution -->\n**@aakanksha.singh0205** (Team: mihirphalke_36e0)\n\n## Category\n<!-- Check one that best fits -->\n- [x] Performance/Latency\n- [ ] Integration (LangChain/LlamaIndex/other frameworks)\n- [ ] Deployment (Kubernetes/Serverless/other)\n- [x] Compliance/Security\n- [x] Documentation\n- [ ] Bug/Crash\n- [ ] Other\n\n## Description\n<!-- Clear, concise description of the issue -->\n\nSecurity teams and healthcare compliance ", "created": "2025-12-20T15:07:59Z", "labels": ["feedback"], "context": "[FEEDBACK] Missing Privacy Validation Framework - Cannot Test If Privacy Claims Hold ## HackerEarth Username\n<!-- REQUIRED: Your HackerEarth username for award attribution -->\n**@aakanksha.singh0205** (Team: mihirphalke_36e0)\n\n## Category\n<!-- Check one that best fits -->\n- [x] Perfor"}


identifier: gh_issue_3750136000
source: github_issue
status: new
created_at: 2025-12-20 15:54:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3750136000", "title": "Security vulnerability in access control software allowing unauthorized access by dogs (1766243137) ", "url": "https://github.com/forest-town/pwr-release1/issues/1", "user": "pipcrispy", "user_url": "https://github.com/pipcrispy", "repo": "pwr-release1", "body_preview": "### Description:\n\nOur access control software has a critical security vulnerability that allows dogs to access the database without authentication. This issue poses a significant risk to the security and integrity of our system, as it allows unauthorized parties to gain access to sensitive information and potentially cause damage.\n\n### Steps to Reproduce:\n\nHave a dog (or any animal with paws) attempt to access the database without authentication.\nThe system should allow access without requiring ", "created": "2025-12-20T15:05:37Z", "labels": ["bug", "documentation"], "context": "Security vulnerability in access control software allowing unauthorized access by dogs (1766243137)  ### Description:\n\nOur access control software has a critical security vulnerability that allows dogs to access the database without authentication. This issue poses a significant risk to the security "}


identifier: gh_issue_3750130010
source: github_issue
status: new
created_at: 2025-12-20 15:54:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3750130010", "title": "[FEEDBACK] Privacy Information Leakage in Multi-Institutional Deployments", "url": "https://github.com/cyborginc/cyborgdb-community-feedback/issues/85", "user": "aakanksha-singh-hub", "user_url": "https://github.com/aakanksha-singh-hub", "repo": "cyborgdb-community-feedback", "body_preview": "## HackerEarth Username\n<!-- REQUIRED: Your HackerEarth username for award attribution -->\n**@aakanksha.singh0205** (Team: mihirphalke_36e0)\n\n## Category\n<!-- Check one that best fits -->\n- [ ] Performance/Latency\n- [ ] Integration (LangChain/LlamaIndex/other frameworks)\n- [ ] Deployment (Kubernetes/Serverless/other)\n- [x] Compliance/Security\n- [ ] Documentation\n- [ ] Bug/Crash\n- [ ] Other\n\n## Description\n<!-- Clear, concise description of the issue -->\n\nWhile building a multi-institutional rare", "created": "2025-12-20T14:58:24Z", "labels": ["feedback"], "context": "[FEEDBACK] Privacy Information Leakage in Multi-Institutional Deployments ## HackerEarth Username\n<!-- REQUIRED: Your HackerEarth username for award attribution -->\n**@aakanksha.singh0205** (Team: mihirphalke_36e0)\n\n## Category\n<!-- Check one that best fits -->\n- [ ] Perfor"}


identifier: gh_issue_3750109185
source: github_issue
status: new
created_at: 2025-12-20 15:54:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3750109185", "title": "\ud83d\udd34 [SAST] 2dc9df3f-d93c-4d87-8731-3456e7755d31:good/vulpy-ssl.py:29 (1 occurrence)", "url": "https://github.com/JulienZammit/vulpy/issues/1271", "user": "test-recette-alpha[bot]", "user_url": "https://github.com/apps/test-recette-alpha", "repo": "vulpy", "body_preview": "## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `master`\n\n**1** occurrence(s) of **2dc9df3f-d93c-4d87-8731-3456e7755d31:good/vulpy-ssl.py:29** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nThis vulnerability occurs when a Flask application is launched with **debug mode** enabled in a production environment. In the provided code example, the call `app.run(\"0.0.0.0\", debug=True)` within the `__main__` block activates the Werkzeug debugger, which:\r\n\r\n- Exposes ", "created": "2025-12-20T14:32:17Z", "labels": ["security", "cybedefend", "sast", "severity:critical"], "context": "\ud83d\udd34 [SAST] 2dc9df3f-d93c-4d87-8731-3456e7755d31:good/vulpy-ssl.py:29 (1 occurrence) ## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n> \ud83c\udf3f **Branch**: `master`\n\n**1** occurrence(s) of **2dc9df3f-d93c-4d87-8731-3456e7755d31:good/vulpy-ssl.py:29** detected.\n\n**Highest Severity**: \ud83d\udd34 "}


identifier: gh_issue_3749663997
source: github_issue
status: new
created_at: 2025-12-20 16:57:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3749663997", "title": "Review and last issues ", "url": "https://github.com/AuraFrameFxDev/A_AIAOSPOS_PROJECT-REGenesis/issues/7", "user": "AuraFrameFxDev", "user_url": "https://github.com/AuraFrameFxDev", "repo": "A_AIAOSPOS_PROJECT-REGenesis", "body_preview": "Blow us away!", "created": "2025-12-20T06:44:39Z", "labels": [], "context": "Review and last issues  Blow us away!"}


identifier: gh_issue_3750141701
source: github_issue
status: new
created_at: 2025-12-20 17:09:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3750141701", "title": "Exercise: Introduction to Repository Management", "url": "https://github.com/IvanViemoesCuevas/skills-introduction-to-repository-management/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-repository-management", "body_preview": "## Introduction to Repository Management\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @IvanViemoesCuevas! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll configure your repository for easier collaboration. You&#39;ll learn how to protect your code, prepare for collaboration, and foster healthy growth in your projects.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you c", "created": "2025-12-20T15:12:54Z", "labels": [], "context": "Exercise: Introduction to Repository Management ## Introduction to Repository Management\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @IvanViemoesCuevas! Welcome"}


identifier: gh_issue_3750202425
source: github_issue
status: new
created_at: 2025-12-20 17:21:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3750202425", "title": "Exercise: Introduction to Secret Scanning", "url": "https://github.com/githrajesh/skills-introduction-to-secret-scanning/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-secret-scanning", "body_preview": "## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @githrajesh! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll learn how to identify and protect sensitive information in your repositories. \ud83d\udd0d Let&#39;s work together to keep your code secure! \ud83d\udee1\ufe0f\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the c", "created": "2025-12-20T16:31:13Z", "labels": [], "context": "Exercise: Introduction to Secret Scanning ## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @githrajesh! Welcome to your Skil"}


identifier: gh_issue_3750216839
source: github_issue
status: new
created_at: 2025-12-20 17:33:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3750216839", "title": "TEST-IOCTL-VERSION-001: Verify IOCTL API Versioning and Backward Compatibility", "url": "https://github.com/zarfld/IntelAvbFilter/issues/273", "user": "zarfld", "user_url": "https://github.com/zarfld", "repo": "IntelAvbFilter", "body_preview": "## Test Objective\n\nVerify IOCTL API versioning mechanism enables backward compatibility through version query, version validation in IOCTL structures, and graceful rejection of incompatible client versions.\n\n## Traceability\n\n- Traces to: #64 (REQ-F-IOCTL-VERSIONING-001: IOCTL API Versioning)\n\n## Test Type\n\n- **Type**: Functional Test (API Versioning)\n- **Level**: Integration Test (IOCTL + version validation)\n- **Priority**: P0 (Critical) - Forward compatibility requirement\n- **Execution**: Autom", "created": "2025-12-20T16:49:40Z", "labels": ["priority:p0", "status:backlog", "phase:07-verification-validation", "type:test-case", "test-type:functional"], "context": "TEST-IOCTL-VERSION-001: Verify IOCTL API Versioning and Backward Compatibility ## Test Objective\n\nVerify IOCTL API versioning mechanism enables backward compatibility through version query, version validation in IOCTL structures, and graceful rejection of incompatible client ver"}


identifier: gh_issue_3750133714
source: github_issue
status: new
created_at: 2025-12-20 17:33:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3750133714", "title": "[FEEDBACK]", "url": "https://github.com/cyborginc/cyborgdb-community-feedback/issues/86", "user": "SiddharthaChakrabarty", "user_url": "https://github.com/SiddharthaChakrabarty", "repo": "cyborgdb-community-feedback", "body_preview": "## HackerEarth Username\n@jainsnehasj6 (Team CoffeeCoders)\n@csiddhartha2004 (Team CoffeeCoders)\nGithub Username : JainSneha6\n                              SiddharthaChakrabarty\n\n## Category\n<!-- Check one that best fits -->\n- [ ] Performance/Latency\n- [x] Integration (LangChain/LlamaIndex/other frameworks)\n- [ ] Deployment (Kubernetes/Serverless/other)\n- [ ] Compliance/Security\n- [ ] Documentation\n- [ ] Bug/Crash\n- [ ] Other\n\n## Description\nThe cyborgdb-lite PyPI package was deprecated and its fu", "created": "2025-12-20T15:03:00Z", "labels": ["feedback"], "context": "[FEEDBACK] ## HackerEarth Username\n@jainsnehasj6 (Team CoffeeCoders)\n@csiddhartha2004 (Team CoffeeCoders)\nGithub Username : JainSneha6\n                              SiddharthaChakrabarty\n\n## Category\n<!-- Check "}


identifier: gh_issue_3750250533
source: github_issue
status: new
created_at: 2025-12-20 17:45:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3750250533", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/khyld/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @khyld! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate your p", "created": "2025-12-20T17:32:02Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @khyld! Welcome to your Skills exercise!\n\n"}


identifier: gh_issue_3750231576
source: github_issue
status: new
created_at: 2025-12-20 17:45:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3750231576", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/sri-jan1775/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @sri-jan1775! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate ", "created": "2025-12-20T17:07:34Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @sri-jan1775! Welcome to your Skills exerc"}


identifier: gh_issue_3750247044
source: github_issue
status: new
created_at: 2025-12-20 17:45:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3750247044", "title": "\ud83e\udd16 Renovate Dependency Dashboard", "url": "https://github.com/broadsage/docker-scaffold/issues/30", "user": "renovate[bot]", "user_url": "https://github.com/apps/renovate", "repo": "docker-scaffold", "body_preview": "This dashboard tracks all dependency updates managed by Renovate. PRs will be created automatically based on the schedule and auto-merge rules.\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Awaiting Schedule\n\nThe following updates are awaiting their schedule. To get an update now, click on a checkbox below.\n\n - [ ] <!-- unschedule-branch=renovate/pin-dependencies -->chore(deps): Pin depend", "created": "2025-12-20T17:27:36Z", "labels": [], "context": "\ud83e\udd16 Renovate Dependency Dashboard This dashboard tracks all dependency updates managed by Renovate. PRs will be created automatically based on the schedule and auto-merge rules.\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-m"}


identifier: gh_issue_3750237051
source: github_issue
status: new
created_at: 2025-12-20 17:45:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3750237051", "title": "InitFluxLoRATraining Expecting value: line 1 column 1 (char 0)", "url": "https://github.com/kijai/ComfyUI-FluxTrainer/issues/206", "user": "cmyknao", "user_url": "https://github.com/cmyknao", "repo": "ComfyUI-FluxTrainer", "body_preview": "Since yesterday I get this error: \"InitFluxLoRATraining Expecting value: line 1 column 1 (char 0)\" without changing anything on my existing workflow.\nI even get this error with a completely fresh comfyui installation and the example workflow. I checked twice to use the right input/output directories and the right models. I hope you can help here.\n\n`# ComfyUI Error Report\n## Error Details\n- **Node ID:** 107\n- **Node Type:** InitFluxLoRATraining\n- **Exception Type:** json.decoder.JSONDecodeError\n-", "created": "2025-12-20T17:14:39Z", "labels": [], "context": "InitFluxLoRATraining Expecting value: line 1 column 1 (char 0) Since yesterday I get this error: \"InitFluxLoRATraining Expecting value: line 1 column 1 (char 0)\" without changing anything on my existing workflow.\nI even get this error with a completely fresh comf"}


identifier: gh_issue_3750207016
source: github_issue
status: new
created_at: 2025-12-20 17:45:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3750207016", "title": "Explore ImageKit for image optimization and delivery", "url": "https://github.com/markgoho/doula-cooperative/issues/53", "user": "markgoho", "user_url": "https://github.com/markgoho", "repo": "doula-cooperative", "body_preview": "## Overview\n\nExplore using [ImageKit](https://imagekit.io/) as an alternative to our current image handling approach. ImageKit is similar to Cloudinary but potentially more cost-effective.\n\n## Current State\n\nCurrently, we:\n- Convert images to AVIF format manually or via build process\n- Store processed images in the GitHub repository\n- Reference images directly from the repo in Hugo templates\n\n## Motivation\n\n- **Cost optimization**: ImageKit may offer better pricing than alternatives like Cloudin", "created": "2025-12-20T16:37:03Z", "labels": [], "context": "Explore ImageKit for image optimization and delivery ## Overview\n\nExplore using [ImageKit](https://imagekit.io/) as an alternative to our current image handling approach. ImageKit is similar to Cloudinary but potentially more cost-effective.\n\n## Current"}


identifier: gh_issue_3750168904
source: github_issue
status: new
created_at: 2025-12-20 17:57:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3750168904", "title": "shfmt behavior directly differs from super-linter", "url": "https://github.com/super-linter/super-linter/issues/7308", "user": "jasonkarns", "user_url": "https://github.com/jasonkarns", "repo": "super-linter", "body_preview": "### Is there an existing issue for this?\n\n- [x] I have searched the existing issues\n\n### Are you using the latest Super-linter version available?\n\n- [x] I am using the latest Super-linter version.\n- [x] I can reproduce the issue running Super-linter using complete version identifier (example: vX.Y.Z), and not just with a partial one (example: vX)\n\n- [x] I am using the super-linter/super-linter action or container image, and not the deprecated github/super-linter action or container image.\n\n\n### ", "created": "2025-12-20T15:47:48Z", "labels": ["bug"], "context": "shfmt behavior directly differs from super-linter ### Is there an existing issue for this?\n\n- [x] I have searched the existing issues\n\n### Are you using the latest Super-linter version available?\n\n- [x] I am using the latest Super-linter version.\n- ["}


identifier: gh_issue_3750278287
source: github_issue
status: new
created_at: 2025-12-20 18:10:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3750278287", "title": "x/vulndb: potential Go vuln in github.com/mattermost/mattermost-server: GHSA-x3r8-2hmh-89f5", "url": "https://github.com/golang/vulndb/issues/4256", "user": "GoVulnBot", "user_url": "https://github.com/GoVulnBot", "repo": "vulndb", "body_preview": "Advisory [GHSA-x3r8-2hmh-89f5](https://github.com/advisories/GHSA-x3r8-2hmh-89f5) references a vulnerability in the following Go modules:\n\n| Module |\n| - |\n| [github.com/mattermost/mattermost-server](https://pkg.go.dev/github.com/mattermost/mattermost-server) |\n\nDescription:\nMattermost versions 10.11.x < 10.11.5, 11.0.x < 11.0.4, 10.12.x < 10.12.2 fail to invalidate invite tokens after use which allows malicious actors who have intercepted invite tokens to manipulate channel memberships includin", "created": "2025-12-20T18:05:38Z", "labels": ["NeedsTriage"], "context": "x/vulndb: potential Go vuln in github.com/mattermost/mattermost-server: GHSA-x3r8-2hmh-89f5 Advisory [GHSA-x3r8-2hmh-89f5](https://github.com/advisories/GHSA-x3r8-2hmh-89f5) references a vulnerability in the following Go modules:\n\n| Module |\n| - |\n| [github.com/mattermost/mattermost-server]("}


identifier: gh_issue_3750277632
source: github_issue
status: new
created_at: 2025-12-20 18:10:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3750277632", "title": "x/vulndb: potential Go vuln in github.com/mattermost/mattermost-plugin-calls: GHSA-j5vq-62gr-8v3r", "url": "https://github.com/golang/vulndb/issues/4255", "user": "GoVulnBot", "user_url": "https://github.com/GoVulnBot", "repo": "vulndb", "body_preview": "Advisory [GHSA-j5vq-62gr-8v3r](https://github.com/advisories/GHSA-j5vq-62gr-8v3r) references a vulnerability in the following Go modules:\n\n| Module |\n| - |\n| [github.com/mattermost/mattermost-plugin-calls](https://pkg.go.dev/github.com/mattermost/mattermost-plugin-calls) |\n\nDescription:\nMattermost versions 11.0.x <= 11.0.4, 10.12.x <= 10.12.2, 10.11.x <= 10.11.6 fail to check WebSocket request field for proper UTF-8 format, which allows attacker to crash Calls plug-in via sending malformed reque", "created": "2025-12-20T18:04:42Z", "labels": ["NeedsTriage"], "context": "x/vulndb: potential Go vuln in github.com/mattermost/mattermost-plugin-calls: GHSA-j5vq-62gr-8v3r Advisory [GHSA-j5vq-62gr-8v3r](https://github.com/advisories/GHSA-j5vq-62gr-8v3r) references a vulnerability in the following Go modules:\n\n| Module |\n| - |\n| [github.com/mattermost/mattermost-plugin-c"}


identifier: gh_issue_3750277620
source: github_issue
status: new
created_at: 2025-12-20 18:10:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3750277620", "title": "x/vulndb: potential Go vuln in github.com/mattermost/mattermost-plugin-calls: GHSA-gmx5-frv9-9m9f", "url": "https://github.com/golang/vulndb/issues/4254", "user": "GoVulnBot", "user_url": "https://github.com/GoVulnBot", "repo": "vulndb", "body_preview": "Advisory [GHSA-gmx5-frv9-9m9f](https://github.com/advisories/GHSA-gmx5-frv9-9m9f) references a vulnerability in the following Go modules:\n\n| Module |\n| - |\n| [github.com/mattermost/mattermost-plugin-calls](https://pkg.go.dev/github.com/mattermost/mattermost-plugin-calls) |\n\nDescription:\nMattermost versions 11.0.x < 11.0.4, 10.12.x <= 10.12.2, 10.11.x < 10.11.6 and Mattermost Calls versions < 1.10.0 fail to implement CSRF protection on the Calls widget page which allows an authenticated attacker ", "created": "2025-12-20T18:04:41Z", "labels": ["NeedsTriage"], "context": "x/vulndb: potential Go vuln in github.com/mattermost/mattermost-plugin-calls: GHSA-gmx5-frv9-9m9f Advisory [GHSA-gmx5-frv9-9m9f](https://github.com/advisories/GHSA-gmx5-frv9-9m9f) references a vulnerability in the following Go modules:\n\n| Module |\n| - |\n| [github.com/mattermost/mattermost-plugin-c"}


identifier: gh_issue_3750277603
source: github_issue
status: new
created_at: 2025-12-20 18:10:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3750277603", "title": "x/vulndb: potential Go vuln in github.com/elastic/beats/v7: GHSA-fj69-23m4-ccvv", "url": "https://github.com/golang/vulndb/issues/4253", "user": "GoVulnBot", "user_url": "https://github.com/GoVulnBot", "repo": "vulndb", "body_preview": "Advisory [GHSA-fj69-23m4-ccvv](https://github.com/advisories/GHSA-fj69-23m4-ccvv) references a vulnerability in the following Go modules:\n\n| Module |\n| - |\n| [github.com/elastic/beats](https://pkg.go.dev/github.com/elastic/beats) |\n| [github.com/elastic/beats/v2](https://pkg.go.dev/github.com/elastic/beats/v2) |\n| [github.com/elastic/beats/v3](https://pkg.go.dev/github.com/elastic/beats/v3) |\n| [github.com/elastic/beats/v4](https://pkg.go.dev/github.com/elastic/beats/v4) |\n| [github.com/elastic/", "created": "2025-12-20T18:04:40Z", "labels": ["NeedsTriage"], "context": "x/vulndb: potential Go vuln in github.com/elastic/beats/v7: GHSA-fj69-23m4-ccvv Advisory [GHSA-fj69-23m4-ccvv](https://github.com/advisories/GHSA-fj69-23m4-ccvv) references a vulnerability in the following Go modules:\n\n| Module |\n| - |\n| [github.com/elastic/beats](https://pkg.go."}


identifier: gh_issue_3750216303
source: github_issue
status: new
created_at: 2025-12-20 18:10:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3750216303", "title": "Critical: Backend Memory Leak (DoS Vulnerability) in Session Management", "url": "https://github.com/jenkinsci/resources-ai-chatbot-plugin/issues/63", "user": "justynigam", "user_url": "https://github.com/justynigam", "repo": "resources-ai-chatbot-plugin", "body_preview": "### Jenkins and plugins versions report\n\n<details>\n  <summary>Environment</summary>\n\n  <!-- Paste your environment details below -->\n  ```text\n  The backend API (\nchatbot-core/api/services/memory.py\n) stores all chat sessions in a global in-memory dictionary \n_sessions\n without any expiration or cleanup mechanism. This leads to unbounded memory growth as new sessions are created, eventually causing the application to crash (OOM) or become unresponsive (DoS).\n\n\n  ```\n\n</details>\n\n\n### What Operat", "created": "2025-12-20T16:48:57Z", "labels": [], "context": "Critical: Backend Memory Leak (DoS Vulnerability) in Session Management ### Jenkins and plugins versions report\n\n<details>\n  <summary>Environment</summary>\n\n  <!-- Paste your environment details below -->\n  ```text\n  The backend API (\nchatbot-core/api/services/memory.py\n)"}


identifier: gh_issue_3750205691
source: github_issue
status: new
created_at: 2025-12-20 18:10:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3750205691", "title": "Wiz - 'main' Branch Scan Overview", "url": "https://github.com/PSDN-AI/audio-eval-multispeaker/issues/1", "user": "wiz-e9fc887946[bot]", "user_url": "https://github.com/apps/wiz-e9fc887946", "repo": "audio-eval-multispeaker", "body_preview": "<!-- WizIssue-b229aec5721c267e5d8d12cd666bd36028397bcef8bc8239f069b8921f68172b-main -->\n\n<a><picture><source media=\"(prefers-color-scheme: dark)\" srcset=\"https://assets.wiz.io/wiz-code/banners/pull_request_banner_dark.svg\"><source media=\"(prefers-color-scheme: light)\" srcset=\"https://assets.wiz.io/wiz-code/banners/pull_request_banner_light.svg\"><img align=\"top\" valign=\"top\" alt=\"Wiz Remediation Pull Request Banner\" title=\"Wiz Remediation Pull Request Banner\" src=\"https://assets.wiz.io/wiz-code/b", "created": "2025-12-20T16:35:17Z", "labels": ["Wiz-remediation"], "context": "Wiz - 'main' Branch Scan Overview <!-- WizIssue-b229aec5721c267e5d8d12cd666bd36028397bcef8bc8239f069b8921f68172b-main -->\n\n<a><picture><source media=\"(prefers-color-scheme: dark)\" srcset=\"https://assets.wiz.io/wiz-code/banners/pull_re"}


identifier: gh_issue_3750250972
source: github_issue
status: new
created_at: 2025-12-20 18:34:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3750250972", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:146)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/185", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: 30f04b34231fe445143cb22a9787f0837d72b5794e065b64aa864f217bb94f66\n**RuleId:** 98cc1eab-8e4a-34eb-a7de-9a65a5e31eec\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-120\n**Tags:** CWE-120\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 146, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"RLC_V\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library function th", "created": "2025-12-20T17:32:29Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:146) glog-fingerprint: 30f04b34231fe445143cb22a9787f0837d72b5794e065b64aa864f217bb94f66\n**RuleId:** 98cc1eab-8e4a-34eb-a7de-9a65a5e31eec\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3750250956
source: github_issue
status: new
created_at: 2025-12-20 18:34:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3750250956", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:164)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/183", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: 3a44177194fb22ddd2516352d93ec7b31f3bf041dd7a4096fe6afff10737cf35\n**RuleId:** c5bd4c4c-76b6-3111-a489-719ff53bdcf1\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-119\n**Tags:** CWE-119\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 164, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"DFC\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library function that", "created": "2025-12-20T17:32:29Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:164) glog-fingerprint: 3a44177194fb22ddd2516352d93ec7b31f3bf041dd7a4096fe6afff10737cf35\n**RuleId:** c5bd4c4c-76b6-3111-a489-719ff53bdcf1\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3750250930
source: github_issue
status: new
created_at: 2025-12-20 18:34:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3750250930", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:170)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/178", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: f9277aa8b8f58b01bd26c42dedc2632bbc32bf7db1c3222cea7a0a66de6c3144\n**RuleId:** 5e2c2a89-110f-3e73-8884-d4ab3e6a14bb\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-120\n**Tags:** CWE-120\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 170, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"DRV_CAP\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library function ", "created": "2025-12-20T17:32:27Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:170) glog-fingerprint: f9277aa8b8f58b01bd26c42dedc2632bbc32bf7db1c3222cea7a0a66de6c3144\n**RuleId:** 5e2c2a89-110f-3e73-8884-d4ab3e6a14bb\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3750250913
source: github_issue
status: new
created_at: 2025-12-20 18:34:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3750250913", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:176)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/176", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: 858f347d090d3dc8efec84f1532c2fcc4fa4b12327e60cc1e77f6ff44520a885\n**RuleId:** bb7665e0-6de5-3290-a7bb-fb5a19518a36\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-119\n**Tags:** CWE-119\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 176, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"PSP_BL\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library function t", "created": "2025-12-20T17:32:26Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:176) glog-fingerprint: 858f347d090d3dc8efec84f1532c2fcc4fa4b12327e60cc1e77f6ff44520a885\n**RuleId:** bb7665e0-6de5-3290-a7bb-fb5a19518a36\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3750250897
source: github_issue
status: new
created_at: 2025-12-20 18:34:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3750250897", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:179)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/174", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: 66383e8f9dc951320d8929ec0a8a286bfe80f15b73e2da5a636730fc11f86d62\n**RuleId:** 2cbd7576-ee7e-3bcd-9136-f61f186a20f0\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-119\n**Tags:** CWE-119\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 179, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"CP_PM4\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library function t", "created": "2025-12-20T17:32:25Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:179) glog-fingerprint: 66383e8f9dc951320d8929ec0a8a286bfe80f15b73e2da5a636730fc11f86d62\n**RuleId:** 2cbd7576-ee7e-3bcd-9136-f61f186a20f0\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3750282382
source: github_issue
status: new
created_at: 2025-12-20 18:58:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3750282382", "title": "Fix all audit findings + standardize Node + clean up wiki duplication (RIPP Protocol)", "url": "https://github.com/Dylan-Natter/ripp-protocol/issues/161", "user": "Dylan-Natter", "user_url": "https://github.com/Dylan-Natter", "repo": "ripp-protocol", "body_preview": "You are GitHub Copilot working in repo: Dylan-Natter/ripp-protocol on branch: copilot/audit-fixes\n\nGoal: Resolve every open audit finding from \u201cRepository Audit Report - December 20, 2025\u201d (F001\u2013F004 + wiki duplication note), with the cleanest, least-risk changes. Make the repo consistent for contributors and CI/CD.\n\nNon-negotiables\n- Do NOT remove features or change public behavior of ripp-cli or the VS Code extension.\n- Keep changes minimal, but complete.\n- Update docs when you change expectat", "created": "2025-12-20T18:10:28Z", "labels": [], "context": "Fix all audit findings + standardize Node + clean up wiki duplication (RIPP Protocol) You are GitHub Copilot working in repo: Dylan-Natter/ripp-protocol on branch: copilot/audit-fixes\n\nGoal: Resolve every open audit finding from \u201cRepository Audit Report - December 20, 2025\u201d (F001\u2013F004 "}


identifier: gh_issue_3750314561
source: github_issue
status: new
created_at: 2025-12-20 18:58:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3750314561", "title": "CVE-2020-25649 (High) detected in jackson-databind-2.8.5.jar", "url": "https://github.com/ar-abed/sample/issues/175", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "sample", "body_preview": "## CVE-2020-25649 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jackson-databind-2.8.5.jar</b></summary>\n\n<p>General data-binding functionality for Jackson: works on core streaming API</p>\n<p>Library home page: <a href=\"http://fasterxml.com/\">http://fasterxml.com/</a></p>\n<p>Path to dependency file: /build.gradle</p>\n<p>Path to vulnerable library: /.gradle/cach", "created": "2025-12-20T18:54:09Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2020-25649 (High) detected in jackson-databind-2.8.5.jar ## CVE-2020-25649 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3750312547
source: github_issue
status: new
created_at: 2025-12-20 18:58:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3750312547", "title": "CVE-2020-25649 (High) detected in jackson-databind-2.8.7.jar", "url": "https://github.com/davidjj58/Home-assignment/issues/70", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "Home-assignment", "body_preview": "## CVE-2020-25649 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jackson-databind-2.8.7.jar</b></summary>\n\n<p>General data-binding functionality for Jackson: works on core streaming API</p>\n<p>Library home page: <a href=\"http://fasterxml.com/\">http://fasterxml.com/</a></p>\n<p>Path to dependency file: /pom.xml</p>\n<p>Path to vulnerable library: /itory/com/fasterx", "created": "2025-12-20T18:51:23Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2020-25649 (High) detected in jackson-databind-2.8.7.jar ## CVE-2020-25649 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3750257451
source: github_issue
status: new
created_at: 2025-12-20 18:58:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3750257451", "title": "[Backend][MCP] Complete MCP Tool Integration for All Agents - Fix Runner & Function Gaps", "url": "https://github.com/ArieGoldkin/SkillForge/issues/436", "user": "yonatangross", "user_url": "https://github.com/yonatangross", "repo": "SkillForge", "body_preview": "[Backend][MCP] Complete MCP Tool Integration for All Agents - Fix Runner & Function Gaps\n\n## \ud83d\udccb Issue Summary\n\n**Problem:** MCP infrastructure is complete but only `security_auditor` and `dependency_mapper` actually use MCP tools. Multiple agents are configured in the registry but their runners don't load tools and agent functions don't accept tool parameters.\n\n**Impact:** Agents miss valuable real-time data from GitHub, npm, PyPI, and Context7 MCP servers.\n\n**Goal:** Enable all configured agents", "created": "2025-12-20T17:40:24Z", "labels": ["\ud83d\udd35 backend", "\u2728 feature", "\u26a1 high"], "context": "[Backend][MCP] Complete MCP Tool Integration for All Agents - Fix Runner & Function Gaps [Backend][MCP] Complete MCP Tool Integration for All Agents - Fix Runner & Function Gaps\n\n## \ud83d\udccb Issue Summary\n\n**Problem:** MCP infrastructure is complete but only `security_auditor` and `dependency_ma"}


identifier: gh_issue_3750340616
source: github_issue
status: new
created_at: 2025-12-20 20:10:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3750340616", "title": "CVE-2020-25649 (High) detected in jackson-databind-2.8.7.jar", "url": "https://github.com/billmcchesney1/t-vault/issues/623", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "t-vault", "body_preview": "## CVE-2020-25649 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jackson-databind-2.8.7.jar</b></summary>\n\n<p>General data-binding functionality for Jackson: works on core streaming API</p>\n<p>Library home page: <a href=\"http://fasterxml.com/\">http://fasterxml.com/</a></p>\n<p>Path to dependency file: /tvaultapi/pom.xml</p>\n<p>Path to vulnerable library: /home/ws", "created": "2025-12-20T19:30:14Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2020-25649 (High) detected in jackson-databind-2.8.7.jar ## CVE-2020-25649 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3750330210
source: github_issue
status: new
created_at: 2025-12-20 20:10:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3750330210", "title": "CVE-2020-25649 (High) detected in jackson-databind-2.8.7.jar", "url": "https://github.com/Ortal-Test/Home-assignment/issues/70", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "Home-assignment", "body_preview": "## CVE-2020-25649 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jackson-databind-2.8.7.jar</b></summary>\n\n<p>General data-binding functionality for Jackson: works on core streaming API</p>\n<p>Library home page: <a href=\"http://fasterxml.com/\">http://fasterxml.com/</a></p>\n<p>Path to dependency file: /pom.xml</p>\n<p>Path to vulnerable library: /itory/com/fasterx", "created": "2025-12-20T19:15:06Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2020-25649 (High) detected in jackson-databind-2.8.7.jar ## CVE-2020-25649 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3750326163
source: github_issue
status: new
created_at: 2025-12-20 20:10:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3750326163", "title": "CVE-2020-25649 (High) detected in jackson-databind-2.8.7.jar", "url": "https://github.com/moelias/Home-assignment/issues/70", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "Home-assignment", "body_preview": "## CVE-2020-25649 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jackson-databind-2.8.7.jar</b></summary>\n\n<p>General data-binding functionality for Jackson: works on core streaming API</p>\n<p>Library home page: <a href=\"http://fasterxml.com/\">http://fasterxml.com/</a></p>\n<p>Path to dependency file: /pom.xml</p>\n<p>Path to vulnerable library: /itory/com/fasterx", "created": "2025-12-20T19:09:40Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2020-25649 (High) detected in jackson-databind-2.8.7.jar ## CVE-2020-25649 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3750322076
source: github_issue
status: new
created_at: 2025-12-20 20:10:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3750322076", "title": "CVE-2020-25649 (High) detected in jackson-databind-2.8.7.jar", "url": "https://github.com/World2000/Home-assignment/issues/70", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "Home-assignment", "body_preview": "## CVE-2020-25649 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jackson-databind-2.8.7.jar</b></summary>\n\n<p>General data-binding functionality for Jackson: works on core streaming API</p>\n<p>Library home page: <a href=\"http://fasterxml.com/\">http://fasterxml.com/</a></p>\n<p>Path to dependency file: /pom.xml</p>\n<p>Path to vulnerable library: /itory/com/fasterx", "created": "2025-12-20T19:04:41Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2020-25649 (High) detected in jackson-databind-2.8.7.jar ## CVE-2020-25649 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3750356994
source: github_issue
status: new
created_at: 2025-12-20 20:10:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3750356994", "title": "Setup_hwaccel not adding non-free source in cases with dedicated AmdGpu", "url": "https://github.com/community-scripts/ProxmoxVE/issues/10177", "user": "Keugon", "user_url": "https://github.com/Keugon", "repo": "ProxmoxVE", "body_preview": "### \u2705 Have you read and understood the above guidelines?\n\nyes\n\n### \ud83d\udd0e Did you run the script with verbose mode enabled?\n\nYes, verbose mode was enabled and the output is included below\n\n### \ud83d\udcdc What is the name of the script you are using?\n\nOpen WebUI\n\n### \ud83d\udcc2 What was the exact command used to execute the script?\n\nbash -c \"$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/openwebui.sh)\"\n\n### \u2699\ufe0f What settings are you using?\n\n- [x] Default Settings\n- [ ] Advanced Settin", "created": "2025-12-20T19:53:21Z", "labels": ["bug"], "context": "Setup_hwaccel not adding non-free source in cases with dedicated AmdGpu ### \u2705 Have you read and understood the above guidelines?\n\nyes\n\n### \ud83d\udd0e Did you run the script with verbose mode enabled?\n\nYes, verbose mode was enabled and the output is included below\n\n### \ud83d\udcdc What is th"}


identifier: gh_issue_3750342731
source: github_issue
status: new
created_at: 2025-12-20 20:23:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3750342731", "title": "W2 - Security Hardening & CI\r", "url": "https://github.com/packetcatcha-blip/icy-flower-c586/issues/8", "user": "packetcatcha-blip", "user_url": "https://github.com/packetcatcha-blip", "repo": "icy-flower-c586", "body_preview": "\r\n**Milestone:** GROK 4.1 \u2014 MVP (6 weeks)\r\n**Labels:** security\r\n**Assignee:** jsellers\r\n\r\n## Description\r\nAdd security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy). Set up basic linting, unit tests, and GitHub Actions workflows for Vercel & Cloudflare deploys. Run dependency vulnerability scan.\r\n\r\n## Acceptance Criteria\r\n- [ ] Security headers present in all responses\r\n- [ ] Linting and unit tests configured\r\n- [ ] GitHub Actions CI for Vercel & Cloudflare\r\n- [ ", "created": "2025-12-20T19:33:15Z", "labels": [], "context": "W2 - Security Hardening & CI\r \r\n**Milestone:** GROK 4.1 \u2014 MVP (6 weeks)\r\n**Labels:** security\r\n**Assignee:** jsellers\r\n\r\n## Description\r\nAdd security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy). S"}


identifier: gh_issue_3750433921
source: github_issue
status: new
created_at: 2025-12-20 21:36:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3750433921", "title": "[TASK] Migrate Repository to uzibiton-portfolio Organization", "url": "https://github.com/uzibiton/automation-interview-pre/issues/111", "user": "uzibiton", "user_url": "https://github.com/uzibiton", "repo": "automation-interview-pre", "body_preview": "## Task Description\r\n\r\nTransfer the automation-interview-pre repository from personal account (uzibiton) to the uzibiton-portfolio organization to enable collaborator management and team-based permissions.\r\n\r\n## Context\r\n\r\nMoving to an organization allows:\r\n\r\n- Adding collaborators with granular permissions (Read, Triage, Write, Maintain, Admin)\r\n- Creating teams for different roles (QA, Developers, Reviewers)\r\n- Setting up branch protection rules requiring PR reviews\r\n- Organization-wide securi", "created": "2025-12-20T21:23:32Z", "labels": ["team:devops", "component:ci-cd", "component:docs", "priority:medium", "size:medium"], "context": "[TASK] Migrate Repository to uzibiton-portfolio Organization ## Task Description\r\n\r\nTransfer the automation-interview-pre repository from personal account (uzibiton) to the uzibiton-portfolio organization to enable collaborator management and team-based permiss"}


identifier: gh_issue_3750434908
source: github_issue
status: new
created_at: 2025-12-20 21:49:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3750434908", "title": "[SECURITY] Web UI Security Test Suite", "url": "https://github.com/MacFlurry/pcap_analyzer/issues/18", "user": "MacFlurry", "user_url": "https://github.com/MacFlurry", "repo": "pcap_analyzer", "body_preview": "## \ud83d\udd12 Security Testing Implementation\n\n**Priority**: P1 (High)\n**Type**: Test / Quality Assurance\n\n### Description\n\nCreate comprehensive security test suite for Web UI to validate fixes for issues #14-#17.\n\n### Test Files to Create\n\n**Primary**: `tests/test_web_security.py`\n**Supporting**: `tests/security/test_web_*` (detailed tests per vulnerability)\n\n### Test Coverage Required\n\n#### 1. Path Traversal Tests (Issue #14)\n- [ ] Test `validate_task_id()` with valid UUID v4\n- [ ] Test `validate_task_", "created": "2025-12-20T21:24:34Z", "labels": [], "context": "[SECURITY] Web UI Security Test Suite ## \ud83d\udd12 Security Testing Implementation\n\n**Priority**: P1 (High)\n**Type**: Test / Quality Assurance\n\n### Description\n\nCreate comprehensive security test suite for Web UI to validate fixes for issues #14-"}


identifier: gh_issue_3750434353
source: github_issue
status: new
created_at: 2025-12-20 21:49:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3750434353", "title": "[CRITICAL] File Upload Validation Insufficient (CWE-434, CWE-770)", "url": "https://github.com/MacFlurry/pcap_analyzer/issues/17", "user": "MacFlurry", "user_url": "https://github.com/MacFlurry", "repo": "pcap_analyzer", "body_preview": "## \ud83d\udd34 CRITICAL Security Vulnerability\n\n**Severity**: CRITICAL (CVSS 8.6)\n**CWE**: CWE-434 (Unrestricted Upload), CWE-770 (Resource Exhaustion)\n**OWASP**: A03:2021 - Injection, A04:2021 - Insecure Design\n\n### Description\n\nFile upload validation has MULTIPLE critical issues:\n1. Extension validation client-side only (bypassable)\n2. NO magic number check server-side\n3. Filename not sanitized (path traversal possible)\n4. Size checked AFTER full read into memory (DoS)\n5. NO decompression bomb protectio", "created": "2025-12-20T21:23:51Z", "labels": [], "context": "[CRITICAL] File Upload Validation Insufficient (CWE-434, CWE-770) ## \ud83d\udd34 CRITICAL Security Vulnerability\n\n**Severity**: CRITICAL (CVSS 8.6)\n**CWE**: CWE-434 (Unrestricted Upload), CWE-770 (Resource Exhaustion)\n**OWASP**: A03:2021 - Injection, A04:2021 - Insecure Desig"}


identifier: gh_issue_3750433772
source: github_issue
status: new
created_at: 2025-12-20 21:49:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3750433772", "title": "[CRITICAL] CSRF Vulnerability in Web UI (CWE-352)", "url": "https://github.com/MacFlurry/pcap_analyzer/issues/16", "user": "MacFlurry", "user_url": "https://github.com/MacFlurry", "repo": "pcap_analyzer", "body_preview": "## \ud83d\udd34 CRITICAL Security Vulnerability\n\n**Severity**: CRITICAL (CVSS 8.1)\n**CWE**: CWE-352 (Cross-Site Request Forgery)\n**OWASP**: A01:2021 - Broken Access Control\n\n### Description\n\nNo CSRF protection. Malicious sites can force authenticated users to perform unwanted actions.\n\n### Affected Files\n\n- `app/api/routes/upload.py` (POST /upload)\n- `app/api/routes/reports.py` (DELETE /reports/{task_id})\n\n### Proof of Concept (PoC)\n\nMalicious site `evil.com`:\n```html\n<!-- Auto-submit form to upload 1GB fi", "created": "2025-12-20T21:23:18Z", "labels": [], "context": "[CRITICAL] CSRF Vulnerability in Web UI (CWE-352) ## \ud83d\udd34 CRITICAL Security Vulnerability\n\n**Severity**: CRITICAL (CVSS 8.1)\n**CWE**: CWE-352 (Cross-Site Request Forgery)\n**OWASP**: A01:2021 - Broken Access Control\n\n### Description\n\nNo CSRF protection. "}


identifier: gh_issue_3750432963
source: github_issue
status: new
created_at: 2025-12-20 21:49:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3750432963", "title": "[CRITICAL] No Authentication/Authorization in Web UI (CWE-306)", "url": "https://github.com/MacFlurry/pcap_analyzer/issues/15", "user": "MacFlurry", "user_url": "https://github.com/MacFlurry", "repo": "pcap_analyzer", "body_preview": "## \ud83d\udd34 CRITICAL Security Vulnerability\n\n**Severity**: CRITICAL (CVSS 9.8)\n**CWE**: CWE-306 (Missing Authentication for Critical Function)\n**OWASP**: A01:2021 - Broken Access Control\n\n### Description\n\nThe Web UI has NO authentication or authorization. All API endpoints are public and anonymous.\n\n### Affected Files\n\nALL API endpoints:\n- `app/api/routes/upload.py` (POST /upload)\n- `app/api/routes/reports.py` (GET/DELETE /reports/{task_id})\n- `app/api/routes/progress.py` (GET /progress, /status, /hist", "created": "2025-12-20T21:22:48Z", "labels": [], "context": "[CRITICAL] No Authentication/Authorization in Web UI (CWE-306) ## \ud83d\udd34 CRITICAL Security Vulnerability\n\n**Severity**: CRITICAL (CVSS 9.8)\n**CWE**: CWE-306 (Missing Authentication for Critical Function)\n**OWASP**: A01:2021 - Broken Access Control\n\n### Description\n\nTh"}


identifier: gh_issue_3750432144
source: github_issue
status: new
created_at: 2025-12-20 21:49:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3750432144", "title": "[CRITICAL] Path Traversal in Web UI (CWE-22)", "url": "https://github.com/MacFlurry/pcap_analyzer/issues/14", "user": "MacFlurry", "user_url": "https://github.com/MacFlurry", "repo": "pcap_analyzer", "body_preview": "## \ud83d\udd34 CRITICAL Security Vulnerability\n\n**Severity**: CRITICAL (CVSS 9.1)\n**CWE**: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory)\n**OWASP**: A01:2021 - Broken Access Control\n\n### Description\n\nThe Web UI allows path traversal via `task_id` and `filename` parameters, enabling arbitrary file read/write/delete on the system.\n\n### Affected Files\n\n- `app/api/routes/reports.py:23-61` (get_html_report, get_json_report)\n- `app/api/routes/reports.py:105-153` (delete_report)\n- `app/api/", "created": "2025-12-20T21:22:27Z", "labels": [], "context": "[CRITICAL] Path Traversal in Web UI (CWE-22) ## \ud83d\udd34 CRITICAL Security Vulnerability\n\n**Severity**: CRITICAL (CVSS 9.1)\n**CWE**: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory)\n**OWASP**: A01:2021 - Broken Access Control\n\n### D"}


identifier: gh_issue_3750471952
source: github_issue
status: new
created_at: 2025-12-20 22:26:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3750471952", "title": "Implement Dependency Security Monitoring with SBOM", "url": "https://github.com/blairmichaelg/secbrain/issues/52", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "secbrain", "body_preview": "## \ud83d\udce6 Software Bill of Materials (SBOM) and Supply Chain Security\n\n    ### Context\n    Supply chain attacks are increasing. Implementing SBOM and automated monitoring\n    improves security posture.\n\n    ### Suggested Improvements\n\n    1. **Generate and Maintain SBOM**\n       - Already partially implemented via pip-audit \u2705\n       - Extend to include:\n         - CycloneDX format for Python\n         - SPDX format for compliance\n         - Lock file verification\n\n    2. **Automated Vulnerability Moni", "created": "2025-12-20T22:12:58Z", "labels": ["dependencies", "security", "ai-suggestion", "supply-chain"], "context": "Implement Dependency Security Monitoring with SBOM ## \ud83d\udce6 Software Bill of Materials (SBOM) and Supply Chain Security\n\n    ### Context\n    Supply chain attacks are increasing. Implementing SBOM and automated monitoring\n    improves security posture.\n\n  "}


identifier: gh_issue_3750471022
source: github_issue
status: new
created_at: 2025-12-20 22:37:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3750471022", "title": "[IDEA] Separate test pipelines for regression, performance, security, and extended testing", "url": "https://github.com/uzibiton/automation-interview-pre/issues/115", "user": "uzibiton", "user_url": "https://github.com/uzibiton", "repo": "automation-interview-pre", "body_preview": "## \ufffd\ufffd\ufffd Idea\n\nCreate separate CI/CD pipelines dedicated to different testing types beyond the main deployment pipeline. Keep the main pipeline fast (<10 min) while running comprehensive testing separately on schedules or on-demand.\n\n## \ufffd\ufffd\ufffd Problem This Solves\n\nCurrently, all testing runs in the main deployment pipeline, which:\n- Slows down deployments (blocking developers)\n- Limits test coverage (only fast tests can run)\n- Couples deployment with testing (should be separate concerns)\n- No schedul", "created": "2025-12-20T22:11:23Z", "labels": ["type:idea"], "context": "[IDEA] Separate test pipelines for regression, performance, security, and extended testing ## \ufffd\ufffd\ufffd Idea\n\nCreate separate CI/CD pipelines dedicated to different testing types beyond the main deployment pipeline. Keep the main pipeline fast (<10 min) while running comprehensive testing separat"}


identifier: gh_issue_3750468511
source: github_issue
status: new
created_at: 2025-12-20 22:37:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3750468511", "title": "[SECURITY] Security Audit v5.0", "url": "https://github.com/MacFlurry/pcap_analyzer/issues/27", "user": "MacFlurry", "user_url": "https://github.com/MacFlurry", "repo": "pcap_analyzer", "body_preview": "## \ud83c\udfaf Objective\nComprehensive security audit for v5.0 release.\n\n## \ud83d\udccb Audit Areas\n- [ ] OWASP Top 10 2021 compliance check\n- [ ] SQL injection testing (PostgreSQL)\n- [ ] Authentication bypass attempts\n- [ ] Multi-tenant isolation verification\n- [ ] Admin privilege escalation testing\n- [ ] Password policy validation\n- [ ] Rate limiting tests\n- [ ] Session management audit\n- [ ] Dependency vulnerability scan\n- [ ] Secrets management review\n\n## \ud83c\udfaf Target Score\n- OWASP compliance: \u226595%\n- No CRITICAL vu", "created": "2025-12-20T22:07:33Z", "labels": ["security", "priority:high"], "context": "[SECURITY] Security Audit v5.0 ## \ud83c\udfaf Objective\nComprehensive security audit for v5.0 release.\n\n## \ud83d\udccb Audit Areas\n- [ ] OWASP Top 10 2021 compliance check\n- [ ] SQL injection testing (PostgreSQL)\n- [ ] Authentication bypass attempts\n-"}


identifier: gh_issue_3750317089
source: github_issue
status: new
created_at: 2025-12-20 22:49:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3750317089", "title": "feat: Add Web App for Remote Linux Server Deployment", "url": "https://github.com/mjtechguy/Auto-Claude/issues/1", "user": "mjtechguy", "user_url": "https://github.com/mjtechguy", "repo": "Auto-Claude", "body_preview": "## Summary\n\nConvert Auto-Claude from an Electron desktop app to a web application that can run on a remote Linux server with no GUI. The web app should have feature parity with the Electron app.\n\n## Motivation\n\n- Run Auto-Claude on headless Linux servers\n- Access the UI remotely via browser\n- No GUI/display server required on the host\n\n## Current Architecture\n\n- **Electron app** (`auto-claude-ui/`): React + TypeScript + Zustand + xterm.js\n- **Python backend** (`auto-claude/`): CLI-only, no HTTP ", "created": "2025-12-20T18:57:55Z", "labels": ["enhancement"], "context": "feat: Add Web App for Remote Linux Server Deployment ## Summary\n\nConvert Auto-Claude from an Electron desktop app to a web application that can run on a remote Linux server with no GUI. The web app should have feature parity with the Electron app.\n\n## M"}


identifier: gh_issue_3750504048
source: github_issue
status: new
created_at: 2025-12-20 23:02:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3750504048", "title": "Code Review: TypeScript Configuration Errors and Security Issues", "url": "https://github.com/joelfuller2016/job-applier/issues/73", "user": "joelfuller2016", "user_url": "https://github.com/joelfuller2016", "repo": "job-applier", "body_preview": "# Code Review: Issues and Breaking Changes\r\n\r\n## \ud83d\udd34 Critical Issues\r\n\r\n### 1. TypeScript Configuration Error - Build Breaking\r\n**Location:** `tsconfig.json:23`\r\n**Severity:** HIGH - Prevents `npm run typecheck` from running\r\n\r\nThe root `tsconfig.json` references `apps/cli` which doesn't exist. The CLI package is actually located at `packages/cli`.\r\n\r\n```json\r\n\"references\": [\r\n  ...\r\n  { \"path\": \"apps/cli\" }  // \u274c This path doesn't exist\r\n]\r\n```\r\n\r\n**Impact:**\r\n- `npm run typecheck` fails with: `e", "created": "2025-12-20T23:01:28Z", "labels": ["bug", "enhancement", "security"], "context": "Code Review: TypeScript Configuration Errors and Security Issues # Code Review: Issues and Breaking Changes\r\n\r\n## \ud83d\udd34 Critical Issues\r\n\r\n### 1. TypeScript Configuration Error - Build Breaking\r\n**Location:** `tsconfig.json:23`\r\n**Severity:** HIGH - Prevents `npm run t"}


identifier: gh_issue_3750477348
source: github_issue
status: new
created_at: 2025-12-20 23:02:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3750477348", "title": "[CRITICAL] Public Procedures used for authenticated routes", "url": "https://github.com/joelfuller2016/job-applier/issues/51", "user": "joelfuller2016", "user_url": "https://github.com/joelfuller2016", "repo": "job-applier", "body_preview": "## Description\nMany routes that should require authentication use `publicProcedure` instead of `protectedProcedure`, allowing potential authentication bypass.\n\n## Affected Files\n- `packages/web/src/server/routers/profile.ts:29`\n- `packages/web/src/server/routers/applications.ts:56`\n- Multiple other routers\n\n## Example\n```typescript\n// Current - INSECURE\ngetCurrentProfile: publicProcedure\n  .query(async ({ ctx }) => {\n    if (ctx.userId === ANONYMOUS_USER_ID) {\n      return ctx.profileRepository.", "created": "2025-12-20T22:20:45Z", "labels": ["bug", "security", "critical"], "context": "[CRITICAL] Public Procedures used for authenticated routes ## Description\nMany routes that should require authentication use `publicProcedure` instead of `protectedProcedure`, allowing potential authentication bypass.\n\n## Affected Files\n- `packages/web/src/se"}


identifier: gh_issue_3750477341
source: github_issue
status: new
created_at: 2025-12-20 23:02:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3750477341", "title": "[CRITICAL] Weak Default User ID allows data leakage between anonymous users", "url": "https://github.com/joelfuller2016/job-applier/issues/50", "user": "joelfuller2016", "user_url": "https://github.com/joelfuller2016", "repo": "job-applier", "body_preview": "## Description\nThe application uses `'default'` as a fallback user ID for anonymous users, creating an IDOR (Insecure Direct Object Reference) vulnerability.\n\n## Location\n`packages/web/src/lib/trpc/server.ts:29`\n\n```typescript\nuserId: session?.user?.id ?? 'default',  // CRITICAL: Uses 'default' as fallback\n```\n\n## Impact\n- Multiple anonymous users share the same user ID\n- Potential data leakage between anonymous sessions\n- Users could access/modify each other's data\n\n## Recommended Fix\n```typesc", "created": "2025-12-20T22:20:44Z", "labels": ["bug", "security", "critical"], "context": "[CRITICAL] Weak Default User ID allows data leakage between anonymous users ## Description\nThe application uses `'default'` as a fallback user ID for anonymous users, creating an IDOR (Insecure Direct Object Reference) vulnerability.\n\n## Location\n`packages/web/src/lib/trpc/se"}


identifier: gh_issue_3750471937
source: github_issue
status: new
created_at: 2025-12-20 23:02:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3750471937", "title": "Implement Advanced Solidity Security Patterns", "url": "https://github.com/blairmichaelg/secbrain/issues/50", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "secbrain", "body_preview": "## \ud83d\udee1\ufe0f State-of-the-Art Smart Contract Security\n\n    ### Context\n    Based on recent audit reports and the latest security research, several advanced\n    patterns should be considered for exploit detection and prevention.\n\n    ### Suggested Improvements\n\n    1. **Implement Reentrancy Guards with CEI Pattern**\n       - Checks-Effects-Interactions pattern\n       - OpenZeppelin's ReentrancyGuard\n       - Consider Read-Only Reentrancy protection\n\n    2. **Flash Loan Attack Detection**\n       - Monito", "created": "2025-12-20T22:12:57Z", "labels": ["security", "ai-suggestion", "solidity", "defi", "high-priority"], "context": "Implement Advanced Solidity Security Patterns ## \ud83d\udee1\ufe0f State-of-the-Art Smart Contract Security\n\n    ### Context\n    Based on recent audit reports and the latest security research, several advanced\n    patterns should be considered for exploit detec"}


identifier: gh_issue_3750387163
source: github_issue
status: new
created_at: 2025-12-20 23:02:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3750387163", "title": "Talawa Admin - Refactoring (2025 - 2026) - CSS Standardization", "url": "https://github.com/PalisadoesFoundation/talawa-admin/issues/5270", "user": "palisadoes", "user_url": "https://github.com/palisadoes", "repo": "talawa-admin", "body_preview": "Talawa Admin - Refactoring (2025 - 2026) - CSS Standardization", "created": "2025-12-20T20:34:35Z", "labels": ["unapproved"], "context": "Talawa Admin - Refactoring (2025 - 2026) - CSS Standardization Talawa Admin - Refactoring (2025 - 2026) - CSS Standardization"}


identifier: gh_issue_3750297229
source: github_issue
status: new
created_at: 2025-12-20 23:02:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3750297229", "title": "Implement GitHub Workflow Plan", "url": "https://github.com/shazzar00ni/paperlyte-v2/issues/177", "user": "shazzar00ni", "user_url": "https://github.com/shazzar00ni", "repo": "paperlyte-v2", "body_preview": "Implement the plan finalised in this PR - [https://github.com/shazzar00ni/paperlyte-v2/pull/176]()\n\nThis document provides a complete strategy for implementing and improving\nGitHub workflows for the Paperlyte v2 project, including:\n\n### Priority 1 - Critical Gaps:\n\n- [ ] Add unit test execution to CI (currently missing!)\n- [ ] Add code formatting checks\n- [ ] Set up E2E testing with Playwright\n\n### Priority 2 - Deployment & Automation:\n\n- [ ] Deployment workflow for production/staging\n- [ ] Prev", "created": "2025-12-20T18:30:30Z", "labels": ["enhancement", "priority-critical", "type-infrastructure", "performance"], "context": "Implement GitHub Workflow Plan Implement the plan finalised in this PR - [https://github.com/shazzar00ni/paperlyte-v2/pull/176]()\n\nThis document provides a complete strategy for implementing and improving\nGitHub workflows for the P"}


identifier: gh_issue_3750495882
source: github_issue
status: new
created_at: 2025-12-20 23:14:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3750495882", "title": "Support of Cyber Resilience Act", "url": "https://github.com/NixOS/nixpkgs/issues/472828", "user": "h0nIg", "user_url": "https://github.com/h0nIg", "repo": "nixpkgs", "body_preview": "### Problem statement:\n\nEuropean companies need to fulfill first parts of the cyber resilience act, starting 12th Sept 2026. They have an obligation to report vulnerabilities and security incidents, including vulnerabilities relevant in their used software (e.g. libraries or used tools as part of a docker image).\n\n### Details:\nhttps://www.bsi.bund.de/EN/Themen/Unternehmen-und-Organisationen/Informationen-und-Empfehlungen/Cyber_Resilience_Act/cyber_resilience_act_node.html\n\n> All products sold in", "created": "2025-12-20T22:47:49Z", "labels": [], "context": "Support of Cyber Resilience Act ### Problem statement:\n\nEuropean companies need to fulfill first parts of the cyber resilience act, starting 12th Sept 2026. They have an obligation to report vulnerabilities and security incidents, i"}


identifier: gh_issue_3750503104
source: github_issue
status: new
created_at: 2025-12-20 23:38:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3750503104", "title": "Code Review: Dependency Mismatches and Configuration Issues", "url": "https://github.com/joelfuller2016/job-applier/issues/71", "user": "joelfuller2016", "user_url": "https://github.com/joelfuller2016", "repo": "job-applier", "body_preview": "# Code Review: Issues and Breaking Changes\r\n\r\n## Summary\r\nThis issue documents findings from a comprehensive code review of the job-applier repository, including dependency mismatches, configuration issues, and potential breaking changes.\r\n\r\n---\r\n\r\n## \ud83d\udd34 Critical Issues\r\n\r\n### 1. Vitest Version Mismatch (Potential Breaking Change)\r\n\r\n**Location:**\r\n- Root `package.json`: `vitest: ^4.0.15`\r\n- `packages/core/package.json`: `vitest: ^1.0.0`\r\n- `packages/database/package.json`: `vitest: ^1.0.0`\r\n\r\n**", "created": "2025-12-20T22:59:59Z", "labels": ["bug", "enhancement"], "context": "Code Review: Dependency Mismatches and Configuration Issues # Code Review: Issues and Breaking Changes\r\n\r\n## Summary\r\nThis issue documents findings from a comprehensive code review of the job-applier repository, including dependency mismatches, configuration i"}


identifier: gh_issue_3750541393
source: github_issue
status: new
created_at: 2025-12-21 00:15:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3750541393", "title": "CVE-2021-0341 (High) detected in okhttp-3.11.0.jar", "url": "https://github.com/billmcchesney1/pacbot/issues/591", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "pacbot", "body_preview": "## CVE-2021-0341 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>okhttp-3.11.0.jar</b></summary>\n\n<p>An HTTP+HTTP/2 client for Android and Java applications</p>\n<p>Library home page: <a href=\"https://github.com/square/okhttp\">https://github.com/square/okhttp</a></p>\n<p>Path to dependency file: /commons/pac-batch-commons/pom.xml</p>\n<p>Path to vulnerable library: ", "created": "2025-12-21T00:07:30Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-0341 (High) detected in okhttp-3.11.0.jar ## CVE-2021-0341 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3750541291
source: github_issue
status: new
created_at: 2025-12-21 00:15:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3750541291", "title": "CVE-2021-22137 (Medium) detected in elasticsearch-5.6.8.jar, elasticsearch-5.6.2.jar", "url": "https://github.com/billmcchesney1/pacbot/issues/589", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "pacbot", "body_preview": "## CVE-2021-22137 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Libraries - <b>elasticsearch-5.6.8.jar</b>, <b>elasticsearch-5.6.2.jar</b></summary>\n<p>\n\n<details><summary><b>elasticsearch-5.6.8.jar</b></summary>\n\n<p>Elasticsearch subproject :core</p>\n<p>Library home page: <a href=\"https://github.com/elastic/elasticsearch\">https://github.com/elastic/elasticsearch</a></p>\n", "created": "2025-12-21T00:07:21Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-22137 (Medium) detected in elasticsearch-5.6.8.jar, elasticsearch-5.6.2.jar ## CVE-2021-22137 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Libraries "}


identifier: gh_issue_3750541271
source: github_issue
status: new
created_at: 2025-12-21 00:15:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3750541271", "title": "CVE-2021-22135 (Medium) detected in elasticsearch-5.6.8.jar, elasticsearch-5.6.2.jar", "url": "https://github.com/billmcchesney1/pacbot/issues/588", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "pacbot", "body_preview": "## CVE-2021-22135 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Libraries - <b>elasticsearch-5.6.8.jar</b>, <b>elasticsearch-5.6.2.jar</b></summary>\n<p>\n\n<details><summary><b>elasticsearch-5.6.8.jar</b></summary>\n\n<p>Elasticsearch subproject :core</p>\n<p>Library home page: <a href=\"https://github.com/elastic/elasticsearch\">https://github.com/elastic/elasticsearch</a></p>\n", "created": "2025-12-21T00:07:20Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-22135 (Medium) detected in elasticsearch-5.6.8.jar, elasticsearch-5.6.2.jar ## CVE-2021-22135 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Libraries "}


identifier: gh_issue_3750541106
source: github_issue
status: new
created_at: 2025-12-21 00:15:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3750541106", "title": "CVE-2020-7019 (Medium) detected in elasticsearch-5.6.8.jar, elasticsearch-5.6.2.jar", "url": "https://github.com/billmcchesney1/pacbot/issues/587", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "pacbot", "body_preview": "## CVE-2020-7019 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Libraries - <b>elasticsearch-5.6.8.jar</b>, <b>elasticsearch-5.6.2.jar</b></summary>\n<p>\n\n<details><summary><b>elasticsearch-5.6.8.jar</b></summary>\n\n<p>Elasticsearch subproject :core</p>\n<p>Library home page: <a href=\"https://github.com/elastic/elasticsearch\">https://github.com/elastic/elasticsearch</a></p>\n<", "created": "2025-12-21T00:07:08Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2020-7019 (Medium) detected in elasticsearch-5.6.8.jar, elasticsearch-5.6.2.jar ## CVE-2020-7019 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Libraries -"}


identifier: gh_issue_3750528641
source: github_issue
status: new
created_at: 2025-12-21 00:15:06
data:
  {"source": "github_issue", "identifier": "gh_issue_3750528641", "title": "Release v0.7.0: Complete Release Process and Documentation", "url": "https://github.com/Signal-Meaning/dg_react_agent/issues/327", "user": "davidrmcgee", "user_url": "https://github.com/davidrmcgee", "repo": "dg_react_agent", "body_preview": "<!-- \nCLI Usage:\ngh issue create --template release-checklist.md --title \"Release v0.7.0: Complete Release Process and Documentation\" --label \"release,documentation,priority:high\" --body \"Replace v0.7.0 with actual version number\"\n-->\n\n## \ud83d\ude80 Release v0.7.0 - Complete Release Process\n\n### Overview\nThis issue tracks the complete release process for version v0.7.0 of the Deepgram Voice Interaction React component. This is a minor version release that should include new features (Declarative Props AP", "created": "2025-12-20T23:45:22Z", "labels": ["documentation", "release"], "context": "Release v0.7.0: Complete Release Process and Documentation <!-- \nCLI Usage:\ngh issue create --template release-checklist.md --title \"Release v0.7.0: Complete Release Process and Documentation\" --label \"release,documentation,priority:high\" --body \"Replace v0.7"}


identifier: gh_issue_3750544867
source: github_issue
status: new
created_at: 2025-12-21 00:41:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3750544867", "title": "Wiz - 'main' Branch Scan Overview", "url": "https://github.com/merch-lab/odluser2009782-repo/issues/2", "user": "wiz-397935c1b3[bot]", "user_url": "https://github.com/apps/wiz-397935c1b3", "repo": "odluser2009782-repo", "body_preview": "<!-- WizIssue-73e8dc79a89b9106acfc2a858018771070674c88a2d5a3e335eb31143101bcb8-main -->\n\n<a><picture><source media=\"(prefers-color-scheme: dark)\" srcset=\"https://assets.wiz.io/wiz-code/banners/pull_request_banner_dark.svg\"><source media=\"(prefers-color-scheme: light)\" srcset=\"https://assets.wiz.io/wiz-code/banners/pull_request_banner_light.svg\"><img align=\"top\" valign=\"top\" alt=\"Wiz Remediation Pull Request Banner\" title=\"Wiz Remediation Pull Request Banner\" src=\"https://assets.wiz.io/wiz-code/b", "created": "2025-12-21T00:12:28Z", "labels": ["Wiz-remediation"], "context": "Wiz - 'main' Branch Scan Overview <!-- WizIssue-73e8dc79a89b9106acfc2a858018771070674c88a2d5a3e335eb31143101bcb8-main -->\n\n<a><picture><source media=\"(prefers-color-scheme: dark)\" srcset=\"https://assets.wiz.io/wiz-code/banners/pull_re"}


identifier: gh_issue_3750533399
source: github_issue
status: new
created_at: 2025-12-21 00:41:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3750533399", "title": "wiggum-mcp: Fix broken test files after Phase 1/2 refactor", "url": "https://github.com/rumor-ml/commons.systems/issues/317", "user": "natb1", "user_url": "https://github.com/natb1", "repo": "commons.systems", "body_preview": "## Problem\nThe `pollution.test.ts` and `router.test.ts` test files are broken after the two-phase workflow refactor. They reference old constant names that no longer exist.\n\n## Errors\n```\nsrc/state/pollution.test.ts(11,10): error TS2305: Module '\"../constants.js\"' has no exported member 'STEP_ENSURE_PR'.\nsrc/state/router.test.ts(14,3): error TS2305: Module '\"../constants.js\"' has no exported member 'STEP_ENSURE_PR'.\nsrc/state/router.test.ts(15,3): error TS2724: '\"../constants.js\"' has no exporte", "created": "2025-12-20T23:54:53Z", "labels": [], "context": "wiggum-mcp: Fix broken test files after Phase 1/2 refactor ## Problem\nThe `pollution.test.ts` and `router.test.ts` test files are broken after the two-phase workflow refactor. They reference old constant names that no longer exist.\n\n## Errors\n```\nsrc/state/po"}


identifier: gh_issue_3750565418
source: github_issue
status: new
created_at: 2025-12-21 00:53:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3750565418", "title": "Security Audit Report - 2025-12-21", "url": "https://github.com/cbwinslow/OpenLegislation-local-dev/issues/182", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "OpenLegislation-local-dev", "body_preview": "## Weekly Security Audit Results\\n\\n**Status:** \u26a0\ufe0f Vulnerabilities Found\\n\\n**Details:** Check the workflow logs for full report.\\n\\n**Action Required:** Review and address security vulnerabilities.", "created": "2025-12-21T00:39:52Z", "labels": ["weekly-report", "security", "audit"], "context": "Security Audit Report - 2025-12-21 ## Weekly Security Audit Results\\n\\n**Status:** \u26a0\ufe0f Vulnerabilities Found\\n\\n**Details:** Check the workflow logs for full report.\\n\\n**Action Required:** Review and address security vulnerabilities."}


identifier: gh_issue_3750578394
source: github_issue
status: new
created_at: 2025-12-21 01:06:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3750578394", "title": "CVE-2021-21290 (Medium) detected in netty-codec-http-4.1.64.Final.jar", "url": "https://github.com/vipinsun/business-partner-agent/issues/225", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "business-partner-agent", "body_preview": "## CVE-2021-21290 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>netty-codec-http-4.1.64.Final.jar</b></summary>\n\n<p></p>\n<p>Library home page: <a href=\"https://netty.io/\">https://netty.io/</a></p>\n<p>Path to dependency file: /pom.xml</p>\n<p>Path to vulnerable library: /home/wss-scanner/.m2/repository/io/netty/netty-codec-http/4.1.64.Final/netty-codec-http-4.1", "created": "2025-12-21T00:55:13Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-21290 (Medium) detected in netty-codec-http-4.1.64.Final.jar ## CVE-2021-21290 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3750574310
source: github_issue
status: new
created_at: 2025-12-21 01:06:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3750574310", "title": "CVE-2021-4040 (Medium) detected in artemis-core-client-2.8.0.jar", "url": "https://github.com/vipinsun/cactus/issues/862", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "cactus", "body_preview": "## CVE-2021-4040 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>artemis-core-client-2.8.0.jar</b></summary>\n\n<p>The Apache Software Foundation provides support for the Apache community of open-source software projects.\n    The Apache projects are characterized by a collaborative, consensus based development process, an open and\n    pragmatic software license, ", "created": "2025-12-21T00:48:46Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-4040 (Medium) detected in artemis-core-client-2.8.0.jar ## CVE-2021-4040 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <"}


