# leads

identifier: gh_issue_3750564487
source: github_issue
status: new
created_at: 2025-12-21 01:06:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3750564487", "title": "CVE-2020-35728 (High) detected in jackson-databind-2.8.5.jar", "url": "https://github.com/ar-abed/sample/issues/178", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "sample", "body_preview": "## CVE-2020-35728 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jackson-databind-2.8.5.jar</b></summary>\n\n<p>General data-binding functionality for Jackson: works on core streaming API</p>\n<p>Library home page: <a href=\"http://fasterxml.com/\">http://fasterxml.com/</a></p>\n<p>Path to dependency file: /build.gradle</p>\n<p>Path to vulnerable library: /.gradle/cach", "created": "2025-12-21T00:38:54Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2020-35728 (High) detected in jackson-databind-2.8.5.jar ## CVE-2020-35728 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3750564318
source: github_issue
status: new
created_at: 2025-12-21 01:06:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3750564318", "title": "CVE-2020-35491 (High) detected in jackson-databind-2.8.5.jar", "url": "https://github.com/ar-abed/sample/issues/177", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "sample", "body_preview": "## CVE-2020-35491 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jackson-databind-2.8.5.jar</b></summary>\n\n<p>General data-binding functionality for Jackson: works on core streaming API</p>\n<p>Library home page: <a href=\"http://fasterxml.com/\">http://fasterxml.com/</a></p>\n<p>Path to dependency file: /build.gradle</p>\n<p>Path to vulnerable library: /.gradle/cach", "created": "2025-12-21T00:38:35Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2020-35491 (High) detected in jackson-databind-2.8.5.jar ## CVE-2020-35491 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3750596772
source: github_issue
status: new
created_at: 2025-12-21 01:18:49
data:
  {"source": "github_issue", "identifier": "gh_issue_3750596772", "title": "jsonwebtoken-9.0.2.tgz: 1 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/temichelle13/StudyPlanner/issues/62", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "StudyPlanner", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jsonwebtoken-9.0.2.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/temichelle13/StudyPlanner/commit/40099fc5bdca74a64acfa0e4723a56c46b7ea483\">40099fc5bdca74a64acfa0e4723a56c46b7ea483</a></p></details>\n\n## Vulnerabi", "created": "2025-12-21T01:17:19Z", "labels": ["Mend: dependency security vulnerability"], "context": "jsonwebtoken-9.0.2.tgz: 1 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jsonwebtoken-9.0.2.tgz</b></summary>\n\n<p></p>\n<"}


identifier: gh_issue_3750596759
source: github_issue
status: new
created_at: 2025-12-21 01:18:49
data:
  {"source": "github_issue", "identifier": "gh_issue_3750596759", "title": "morgan-1.10.0.tgz: 1 vulnerabilities (highest severity is: 3.4)", "url": "https://github.com/temichelle13/StudyPlanner/issues/61", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "StudyPlanner", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>morgan-1.10.0.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /node_modules/on-headers/package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/temichelle13/StudyPlanner/commit/40099fc5bdca74a64acfa0e4723a56c46b7ea483\">40099fc5bdca74a64acfa0e4723a56c46b7ea483</a></p></det", "created": "2025-12-21T01:17:17Z", "labels": ["Mend: dependency security vulnerability"], "context": "morgan-1.10.0.tgz: 1 vulnerabilities (highest severity is: 3.4) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>morgan-1.10.0.tgz</b></summary>\n\n<p></p>\n<p>Pat"}


identifier: gh_issue_3750595693
source: github_issue
status: new
created_at: 2025-12-21 01:18:49
data:
  {"source": "github_issue", "identifier": "gh_issue_3750595693", "title": "Weekly Maintenance Report - December 21, 2025", "url": "https://github.com/vishalsachdev/canvas-mcp/issues/44", "user": "claude[bot]", "user_url": "https://github.com/apps/claude", "repo": "canvas-mcp", "body_preview": "# Weekly Maintenance Report - December 21, 2025\n\n## Executive Summary\n\nComprehensive weekly maintenance check completed for Canvas MCP server. Overall health is **GOOD** with minor optimization opportunities identified. Recent documentation improvements (Dec 14) have significantly improved maintainability.\n\n---\n\n## 1. Dependency Analysis\n\n### Current Versions (Installed vs Minimum Requirements)\n| Package | Required | Installed | Status | Notes |\n|---------|----------|-----------|--------|-------", "created": "2025-12-21T01:16:16Z", "labels": ["documentation", "enhancement", "maintenance"], "context": "Weekly Maintenance Report - December 21, 2025 # Weekly Maintenance Report - December 21, 2025\n\n## Executive Summary\n\nComprehensive weekly maintenance check completed for Canvas MCP server. Overall health is **GOOD** with minor optimization opport"}


identifier: gh_issue_3750594869
source: github_issue
status: new
created_at: 2025-12-21 01:18:49
data:
  {"source": "github_issue", "identifier": "gh_issue_3750594869", "title": "Security audit failed: 9 issues found", "url": "https://github.com/go-dart-rpc/user-service/issues/49", "user": "hekkos-demo-app[bot]", "user_url": "https://github.com/apps/hekkos-demo-app", "repo": "user-service", "body_preview": "Hekkos has identified security configuration issues in this repository based on [SLSA v1.2-rc2](https://slsa.dev/) requirements.\n\n<details open>\n<summary><strong>Security audit summary</strong></summary>\n\n**8** of **12** security checks are failing.\n\n| Security Check | Status | Issues |\n|---|---|---|\n| [Branch Protection](#50) | \u274c Failing | 1 issue |\n| [CODEOWNERS](#51) | \u274c Failing | 1 issue |\n| Code Scanning | \u2705 Passing | - |\n| [Secret Scanning](#52) | \u274c Failing | 1 issue |\n| [Dependency Review", "created": "2025-12-21T01:15:28Z", "labels": ["security-audit"], "context": "Security audit failed: 9 issues found Hekkos has identified security configuration issues in this repository based on [SLSA v1.2-rc2](https://slsa.dev/) requirements.\n\n<details open>\n<summary><strong>Security audit summary</strong></summa"}


identifier: gh_issue_3750591835
source: github_issue
status: new
created_at: 2025-12-21 01:18:49
data:
  {"source": "github_issue", "identifier": "gh_issue_3750591835", "title": "CVE-2021-0341 (High) detected in okhttp-3.12.13.jar", "url": "https://github.com/GSUnitedLabs/NTAPlatform/issues/17", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "NTAPlatform", "body_preview": "## CVE-2021-0341 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>okhttp-3.12.13.jar</b></summary>\n\n<p></p>\n<p>Library home page: <a href=\"https://github.com/square/okhttp\">https://github.com/square/okhttp</a></p>\n<p>Path to vulnerable library: /lib/GitHub_API/okhttp-3.12.13.jar</p>\n<p>\n\nDependency Hierarchy:\n  - :x: **okhttp-3.12.13.jar** (Vulnerable Library)\n<p>", "created": "2025-12-21T01:10:11Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-0341 (High) detected in okhttp-3.12.13.jar ## CVE-2021-0341 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3751483949
source: github_issue
status: new
created_at: 2025-12-22 02:46:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3751483949", "title": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide", "url": "https://github.com/demos-aatmmr/evgenii_demo/issues/1", "user": "repository-wizard[bot]", "user_url": "https://github.com/apps/repository-wizard", "repo": "evgenii_demo", "body_preview": "# Welcome to demos-aatmmr/evgenii_demo!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Checklist\n\n- [ ] Review and update the repository description\n- [ ] Set up branch protection rules\n- [ ] Configure repository settings (Issues, Projects, Wiki, etc.)\n- [ ] Add repository topics/tags for discoverability\n- [ ] Set up automated workflows (if needed)\n\n## \ud83d\udd12 Security & Best Practices\n\n### B", "created": "2025-12-21T19:04:29Z", "labels": ["documentation", "good first issue", "setup"], "context": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide # Welcome to demos-aatmmr/evgenii_demo!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Ch"}


identifier: gh_issue_3751176544
source: github_issue
status: new
created_at: 2025-12-22 02:46:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3751176544", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/ranjan11021991/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @ranjan11021991! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each st", "created": "2025-12-21T14:04:02Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @ranjan11021991! Welcom"}


identifier: gh_issue_3751022988
source: github_issue
status: new
created_at: 2025-12-22 02:46:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3751022988", "title": "Proposal: Introduce Renovate for automated dependency management", "url": "https://github.com/code-yeongyu/oh-my-opencode/issues/155", "user": "gtg7784", "user_url": "https://github.com/gtg7784", "repo": "oh-my-opencode", "body_preview": "## Proposal\n\nHow about introducing [Renovate](https://github.com/renovatebot/renovate) to automate dependency management?\n\n## Background\n\n- Currently managing dependency updates manually\n- Hard to immediately notice security patches or new versions\n\n## Benefits of Renovate\n\n1. **Automatic PR creation**: Auto-generates update PRs when new versions are released\n2. **Grouping**: Bundle related packages into a single PR\n3. **Scheduling**: Configure PRs to be created only at preferred times\n4. **Secu", "created": "2025-12-21T10:53:04Z", "labels": [], "context": "Proposal: Introduce Renovate for automated dependency management ## Proposal\n\nHow about introducing [Renovate](https://github.com/renovatebot/renovate) to automate dependency management?\n\n## Background\n\n- Currently managing dependency updates manually\n- Hard to imm"}


identifier: gh_issue_3750787903
source: github_issue
status: new
created_at: 2025-12-22 02:46:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3750787903", "title": "Daily AI Tools Digest", "url": "https://github.com/proteaNirav/rocketgpt/issues/218", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "rocketgpt", "body_preview": "# Daily AI Tools Digest\n\n### https://openai.com/blog/rss.xml\n\n<details>\n<summary>raw</summary>\n\nRedirecting...\n\n\n</details>\n\n### https://www.anthropic.com/news/rss.xml\n\n<details>\n<summary>raw</summary>\n\n<!DOCTYPE html><html id=\"__next_error__\"><head><meta charSet=\"utf-8\"/><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"/><link rel=\"preload\" as=\"script\" fetchPriority=\"low\" nonce=\"NTM1NjU3OGItODZhNS00ZjJmLTg0NTYtZjI0MjhjM2E2Y2My\" href=\"/_next/static/chunks/55ee5a30d5bf1901.js\"/>", "created": "2025-12-21T06:05:38Z", "labels": ["research", "automation"], "context": "Daily AI Tools Digest # Daily AI Tools Digest\n\n### https://openai.com/blog/rss.xml\n\n<details>\n<summary>raw</summary>\n\nRedirecting...\n\n\n</details>\n\n### https://www.anthropic.com/news/rss.xml\n\n<details>\n<summary>raw</summary"}


identifier: gh_issue_3750628220
source: github_issue
status: new
created_at: 2025-12-22 02:46:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3750628220", "title": "Dependency Review: 2 issues found", "url": "https://github.com/go-dart-rpc/user-service/issues/72", "user": "hekkos-demo-app[bot]", "user_url": "https://github.com/apps/hekkos-demo-app", "repo": "user-service", "body_preview": "Hekkos found **2** Dependency Review configuration issues in this repository.\n\n<sub>This is part of the main [security audit](#68).</sub>\n\n<details open>\n<summary><strong>Issue details</strong></summary>\n\n- **Issue 1**: Open Dependabot alerts detected - vulnerable dependencies must be updated\n- **Issue 2**: Critical severity dependency vulnerabilities detected - immediate action required\n\n</details>\n\n---\n\n### Why this matters\n\nDependency review helps track known issues in third-party code. This ", "created": "2025-12-21T01:58:08Z", "labels": ["security-audit", "security-audit:dependency-review"], "context": "Dependency Review: 2 issues found Hekkos found **2** Dependency Review configuration issues in this repository.\n\n<sub>This is part of the main [security audit](#68).</sub>\n\n<details open>\n<summary><strong>Issue details</strong></summa"}


identifier: gh_issue_3751208274
source: github_issue
status: new
created_at: 2025-12-22 02:46:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3751208274", "title": "Dependency Dashboard", "url": "https://github.com/renovate-pro-dev-automation/sherri-sanders_gh_gw0_954389/issues/2", "user": "renovate-pro-dev[bot]", "user_url": "https://github.com/apps/renovate-pro-dev", "repo": "sherri-sanders_gh_gw0_954389", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Open\n\nThe following updates have all been created. To force a retry/rebase of any, click on a checkbox below.\n\n - [ ] <!-- rebase-branch=renovate/maven-org.apache.logging.log4j-lo", "created": "2025-12-21T14:40:05Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - ["}


identifier: gh_issue_3751208203
source: github_issue
status: new
created_at: 2025-12-22 02:46:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3751208203", "title": "Dependency Dashboard", "url": "https://github.com/renovate-pro-dev-automation-1/jeffery-bush_gh_gw1_954316/issues/2", "user": "renovate-pro-dev[bot]", "user_url": "https://github.com/apps/renovate-pro-dev", "repo": "jeffery-bush_gh_gw1_954316", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Open\n\nThe following updates have all been created. To force a retry/rebase of any, click on a checkbox below.\n\n - [ ] <!-- rebase-branch=renovate/maven-org.apache.logging.log4j-lo", "created": "2025-12-21T14:40:00Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - ["}


identifier: gh_issue_3752081693
source: github_issue
status: new
created_at: 2025-12-22 02:59:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3752081693", "title": "ejs-2.7.4.tgz: 2 vulnerabilities (highest severity is: 9.8) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Matthew-Smith_1222_025754_gh_gw0/issues/4", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Matthew-Smith_1222_025754_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>ejs-2.7.4.tgz</strong></summary>\n\nEmbedded JavaScript templates\n\n**Library home page:** [ https://registry.npmjs.org/ejs/-/ejs-2.7.4.tgz ](https://registry.npmjs.org/ejs/-/ejs-2.7.4.tgz)\n\n**Path to dependency file:** /package.json\n\n**Path to vulnerable library:** /node_modules/ejs/package.json\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- |", "created": "2025-12-22T02:59:17Z", "labels": [], "context": "ejs-2.7.4.tgz: 2 vulnerabilities (highest severity is: 9.8) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>ejs-2.7.4.tgz</strong></summary>\n\nEmbedded JavaScript templates\n\n**Library home page:** [ https://registry.npmjs.org/ejs/-/ejs-2.7.4.tgz ](https://r"}


identifier: gh_issue_3752081609
source: github_issue
status: new
created_at: 2025-12-22 02:59:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3752081609", "title": "pg-promise-4.8.1.tgz: 2 vulnerabilities (highest severity is: 9.8) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Matthew-Smith_1222_025754_gh_gw0/issues/3", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Matthew-Smith_1222_025754_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>pg-promise-4.8.1.tgz</strong></summary>\n\nPromises interface for PostgreSQL\n\n\n\n**Path to dependency file:** /package.json\n\n**Path to vulnerable library:** /node_modules/pg-promise/package.json\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2017-16082 ](https://www.mend", "created": "2025-12-22T02:59:16Z", "labels": [], "context": "pg-promise-4.8.1.tgz: 2 vulnerabilities (highest severity is: 9.8) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>pg-promise-4.8.1.tgz</strong></summary>\n\nPromises interface for PostgreSQL\n\n\n\n**Path to dependency file:** /package.json\n\n**Path to vulnerable libra"}


identifier: gh_issue_3752081449
source: github_issue
status: new
created_at: 2025-12-22 02:59:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3752081449", "title": "ejs-locals-1.0.2.tgz: 4 vulnerabilities (highest severity is: 9.8) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Matthew-Smith_1222_025754_gh_gw0/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Matthew-Smith_1222_025754_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>ejs-locals-1.0.2.tgz</strong></summary>\n\nExpress 3.x locals for layout, partial and blocks.\n\n\n\n**Path to dependency file:** /package.json\n\n**Path to vulnerable library:** /node_modules/ejs-locals/package.json\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2017-1000228", "created": "2025-12-22T02:59:15Z", "labels": [], "context": "ejs-locals-1.0.2.tgz: 4 vulnerabilities (highest severity is: 9.8) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>ejs-locals-1.0.2.tgz</strong></summary>\n\nExpress 3.x locals for layout, partial and blocks.\n\n\n\n**Path to dependency file:** /package.json\n\n**Path to"}


identifier: gh_issue_3752081530
source: github_issue
status: new
created_at: 2025-12-22 02:59:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3752081530", "title": "morgan-1.6.1.tgz: 1 vulnerabilities (highest severity is: 9.8) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Matthew-Smith_1222_025754_gh_gw0/issues/2", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Matthew-Smith_1222_025754_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>morgan-1.6.1.tgz</strong></summary>\n\nHTTP request logger middleware for node.js\n\n**Library home page:** [ https://registry.npmjs.org/morgan/-/morgan-1.6.1.tgz ](https://registry.npmjs.org/morgan/-/morgan-1.6.1.tgz)\n\n**Path to dependency file:** /package.json\n\n**Path to vulnerable library:** /node_modules/morgan/package.json\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediatio", "created": "2025-12-22T02:59:15Z", "labels": [], "context": "morgan-1.6.1.tgz: 1 vulnerabilities (highest severity is: 9.8) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>morgan-1.6.1.tgz</strong></summary>\n\nHTTP request logger middleware for node.js\n\n**Library home page:** [ https://registry.npmjs.org/morgan/-/morgan"}


identifier: gh_issue_3752067987
source: github_issue
status: new
created_at: 2025-12-22 02:59:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3752067987", "title": "High/Critical Vulnerabilities Detected in Landscape UI", "url": "https://github.com/canonical/landscape-ui/issues/440", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "landscape-ui", "body_preview": "Vulnerability scan found high/critical issues or failed to run.\n\nPlease check the workflow run logs for the 'Run security scan' step for details.\n\n### Scan Output\n```\nScan request submitted.\nScan request is running.\nScan has succeeded.\nScan request information:\n  Started at:        2025-12-22 02:50:39+00:00\n  Completed at:      2025-12-22 02:50:45+00:00\n  Scanner:           trivy\n  Target:            s3://secscan-attachments/9f782d4b-cc09-4f43-8bb7-2ce4af6f0a34\n  Target type:       container-ima", "created": "2025-12-22T02:50:47Z", "labels": ["bug", "security"], "context": "High/Critical Vulnerabilities Detected in Landscape UI Vulnerability scan found high/critical issues or failed to run.\n\nPlease check the workflow run logs for the 'Run security scan' step for details.\n\n### Scan Output\n```\nScan request submitted.\nScan requ"}


identifier: gh_issue_3752081844
source: github_issue
status: new
created_at: 2025-12-22 03:00:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3752081844", "title": "body-parser-1.13.3.tgz: 2 vulnerabilities (highest severity is: 7.5) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Matthew-Smith_1222_025754_gh_gw0/issues/7", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Matthew-Smith_1222_025754_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>body-parser-1.13.3.tgz</strong></summary>\n\nNode.js body parsing middleware\n\n\n\n**Path to dependency file:** /package.json\n\n**Path to vulnerable library:** /node_modules/body-parser/package.json\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2017-1000048 ](https://www.m", "created": "2025-12-22T02:59:18Z", "labels": [], "context": "body-parser-1.13.3.tgz: 2 vulnerabilities (highest severity is: 7.5) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>body-parser-1.13.3.tgz</strong></summary>\n\nNode.js body parsing middleware\n\n\n\n**Path to dependency file:** /package.json\n\n**Path to vulnerable libra"}


identifier: gh_issue_3752081830
source: github_issue
status: new
created_at: 2025-12-22 03:00:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3752081830", "title": "express-4.13.4.tgz: 2 vulnerabilities (highest severity is: 7.5) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Matthew-Smith_1222_025754_gh_gw0/issues/6", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Matthew-Smith_1222_025754_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>express-4.13.4.tgz</strong></summary>\n\nFast, unopinionated, minimalist web framework\n\n\n\n**Path to dependency file:** /package.json\n\n**Path to vulnerable library:** /node_modules/express/package.json\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2016-10539 ](https://w", "created": "2025-12-22T02:59:18Z", "labels": [], "context": "express-4.13.4.tgz: 2 vulnerabilities (highest severity is: 7.5) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>express-4.13.4.tgz</strong></summary>\n\nFast, unopinionated, minimalist web framework\n\n\n\n**Path to dependency file:** /package.json\n\n**Path to vulner"}


identifier: gh_issue_3752081800
source: github_issue
status: new
created_at: 2025-12-22 03:00:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3752081800", "title": "log4js-0.6.38.tgz: 1 vulnerabilities (highest severity is: 5.5) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Matthew-Smith_1222_025754_gh_gw0/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Matthew-Smith_1222_025754_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4js-0.6.38.tgz</strong></summary>\n\nPort of Log4js to work with node.\n\n**Library home page:** [ https://registry.npmjs.org/log4js/-/log4js-0.6.38.tgz ](https://registry.npmjs.org/log4js/-/log4js-0.6.38.tgz)\n\n**Path to dependency file:** /package.json\n\n**Path to vulnerable library:** /node_modules/log4js/package.json\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Avai", "created": "2025-12-22T02:59:17Z", "labels": [], "context": "log4js-0.6.38.tgz: 1 vulnerabilities (highest severity is: 5.5) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4js-0.6.38.tgz</strong></summary>\n\nPort of Log4js to work with node.\n\n**Library home page:** [ https://registry.npmjs.org/log4js/-/log4js-0.6.38."}


identifier: gh_issue_3752111350
source: github_issue
status: new
created_at: 2025-12-22 03:12:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3752111350", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Sherry-Erickson_1222_031027_gh_gw2/issues/2", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Sherry-Erickson_1222_031027_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -----", "created": "2025-12-22T03:12:00Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3752111262
source: github_issue
status: new
created_at: 2025-12-22 03:12:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3752111262", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Sherry-Erickson_1222_031027_gh_gw2/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Sherry-Erickson_1222_031027_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-22T03:11:59Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3751937638
source: github_issue
status: new
created_at: 2025-12-22 03:12:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3751937638", "title": "[RELEASE] Release v1.11.0", "url": "https://github.com/longhorn/longhorn/issues/12371", "user": "longhorn-github-bot[bot]", "user_url": "https://github.com/apps/longhorn-github-bot", "repo": "longhorn", "body_preview": "## What's the task? Please describe\n\nAction items for releasing v1.11.0\n\n## Roles\n\n- Release captain: @shuo-wu  <!--responsible for RD efforts of release development and coordinating with QA captain-->\n- QA captain: @roger-ryao  <!--responsible for coordinating QA efforts of release testing tasks-->\n\n## Describe the sub-tasks\n\n### Pre-Release\n\n#### Release Captain Tasks\n\n> [!IMPORTANT]\n> The Release Captain needs to finish the following items\n\n- [ ] This tasks are only needed when doing a featur", "created": "2025-12-22T01:40:47Z", "labels": ["area/install-uninstall-upgrade", "release/task"], "context": "[RELEASE] Release v1.11.0 ## What's the task? Please describe\n\nAction items for releasing v1.11.0\n\n## Roles\n\n- Release captain: @shuo-wu  <!--responsible for RD efforts of release development and coordinating with QA captain--"}


identifier: gh_issue_3751887588
source: github_issue
status: new
created_at: 2025-12-22 03:12:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3751887588", "title": "core-agent-linux v4.3.37 (devel)", "url": "https://github.com/QubesOS/updates-status-devel/issues/9", "user": "qubesos-bot", "user_url": "https://github.com/qubesos-bot", "repo": "updates-status-devel", "body_preview": "Update of core-agent-linux to v4.3.37 for Qubes OS devel, see comments below for details and build status.\n\nFrom commit: https://github.com/QubesOS/qubes-core-agent-linux/commit/1f542b7588d44105f5c74534eefe7cb6e4e77e74\n\n[Changes since previous version](https://github.com/QubesOS/qubes-core-agent-linux/compare/v4.3.36...v4.3.37):\nQubesOS/qubes-core-agent-linux@1f542b75 version 4.3.37\nQubesOS/qubes-core-agent-linux@2be3d29b Merge remote-tracking branch 'origin/pr/621'\nQubesOS/qubes-core-agent-linu", "created": "2025-12-22T01:11:37Z", "labels": ["devel-vm-fc41-cur-test", "devel-vm-fc42-cur-test", "devel-vm-fc43-cur-test", "devel-vm-bookworm-failed", "devel-vm-trixie-failed"], "context": "core-agent-linux v4.3.37 (devel) Update of core-agent-linux to v4.3.37 for Qubes OS devel, see comments below for details and build status.\n\nFrom commit: https://github.com/QubesOS/qubes-core-agent-linux/commit/1f542b7588d44105f5c745"}


identifier: gh_issue_3751863559
source: github_issue
status: new
created_at: 2025-12-22 03:12:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3751863559", "title": "Textpattern 4.9.1 release flight plan", "url": "https://github.com/textpattern/textpattern/issues/2036", "user": "petecooper", "user_url": "https://github.com/petecooper", "repo": "textpattern", "body_preview": "We are targeting Textpattern 4.9.1 to address bugs in 4.9.0 and provide further refinements.\n\nThe release flight plan does not currently include any accommodations for a beta release.\n\nPlease update this post and subsequent replies with tasks etc as needed, assigning yourself or others where appropriate.\n\n**Timeline**\n\n* GA release: from December 2025\n\n** Milestone(s)\n\n* [4.9.1](https://github.com/textpattern/textpattern/issues?q=is%3Aissue%20state%3Aopen%20milestone%3Av4.9.1)\n* [4.9](https://gi", "created": "2025-12-22T00:51:50Z", "labels": ["priority 2: high", "release flight plan", "meta"], "context": "Textpattern 4.9.1 release flight plan We are targeting Textpattern 4.9.1 to address bugs in 4.9.0 and provide further refinements.\n\nThe release flight plan does not currently include any accommodations for a beta release.\n\nPlease update t"}


identifier: gh_issue_3751846416
source: github_issue
status: new
created_at: 2025-12-22 03:12:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3751846416", "title": "Fix erk kit install --force Deleting Source Files [erk-plan]", "url": "https://github.com/dagster-io/erk/issues/3291", "user": "schrockn", "user_url": "https://github.com/schrockn", "repo": "erk", "body_preview": "<!-- WARNING: Machine-generated. Manual edits may break erk tooling. -->\n<!-- erk:metadata-block:plan-header -->\n<details>\n<summary><code>plan-header</code></summary>\n\n```yaml\n\nschema_version: '2'\ncreated_at: '2025-12-22T00:39:29.471168+00:00'\ncreated_by: schrockn\nlast_dispatched_run_id: null\nlast_dispatched_node_id: null\nlast_dispatched_at: null\nlast_local_impl_at: null\nlast_local_impl_event: null\nlast_local_impl_session: null\nlast_local_impl_user: null\nlast_remote_impl_at: null\nsource_plan_iss", "created": "2025-12-22T00:39:30Z", "labels": ["erk-plan"], "context": "Fix erk kit install --force Deleting Source Files [erk-plan] <!-- WARNING: Machine-generated. Manual edits may break erk tooling. -->\n<!-- erk:metadata-block:plan-header -->\n<details>\n<summary><code>plan-header</code></summary>\n\n```yaml\n\nschema_version: '2'\ncre"}


identifier: gh_issue_3751362728
source: github_issue
status: new
created_at: 2025-12-22 03:12:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3751362728", "title": "[MEDIUM] Verify GitHub Actions are using latest stable versions", "url": "https://github.com/JacobPEvans/ai-assistant-instructions/issues/241", "user": "JacobPEvans", "user_url": "https://github.com/JacobPEvans", "repo": "ai-assistant-instructions", "body_preview": "## Description\n\nAudit all GitHub Actions dependencies to ensure they're using the latest stable versions for security patches and feature improvements.\n\n## Current Action Versions\n\n### Core Actions\n- `actions/checkout@v6` (13 workflows)\n- `actions/setup-node@v4` (1 workflow)\n\n### Third-Party Actions  \n- `anthropics/claude-code-action@v1` (4 workflows)\n- `DavidAnson/markdownlint-cli2-action@v22` (1 workflow)\n- `ibiqlik/action-yamllint@v3` (1 workflow)\n- `lycheeverse/lychee-action@v2` (1 workflow)", "created": "2025-12-21T17:07:38Z", "labels": ["ready-for-dev", "ai-created", "priority:medium", "type:ci", "human-reviewed"], "context": "[MEDIUM] Verify GitHub Actions are using latest stable versions ## Description\n\nAudit all GitHub Actions dependencies to ensure they're using the latest stable versions for security patches and feature improvements.\n\n## Current Action Versions\n\n### Core Actions\n- "}


identifier: gh_issue_3751955394
source: github_issue
status: new
created_at: 2025-12-22 03:24:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3751955394", "title": "Broken links found by automated link checker", "url": "https://github.com/adunkman/dunkman.me/issues/352", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "dunkman.me", "body_preview": "# Summary\n\n| Status         | Count |\n|----------------|-------|\n| \ud83d\udd0d Total       | 1583  |\n| \u2705 Successful  | 1419  |\n| \u23f3 Timeouts    | 0     |\n| \ud83d\udd00 Redirected  | 105   |\n| \ud83d\udc7b Excluded    | 25    |\n| \u2753 Unknown     | 0     |\n| \ud83d\udeab Errors      | 34    |\n| \u26d4 Unsupported | 0     |\n\n## Errors per input\n\n### Errors in /app/public/blog/2013/next-desk-terra/index.html\n\n* [ERROR] <https://www.monitorsinmotion.com/boa/> | Network error: SSL certificate verification failed. Check certificate validity\n\n### Error", "created": "2025-12-22T01:53:27Z", "labels": [], "context": "Broken links found by automated link checker # Summary\n\n| Status         | Count |\n|----------------|-------|\n| \ud83d\udd0d Total       | 1583  |\n| \u2705 Successful  | 1419  |\n| \u23f3 Timeouts    | 0     |\n| \ud83d\udd00 Redirected  | 105   |\n| \ud83d\udc7b Excluded    | 25    |\n| \u2753 U"}


identifier: gh_issue_3751699813
source: github_issue
status: new
created_at: 2025-12-22 03:24:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3751699813", "title": "Feature: Image signing", "url": "https://github.com/intility/erlang-oci-builder/issues/10", "user": "rhblind", "user_url": "https://github.com/rhblind", "repo": "erlang-oci-builder", "body_preview": "## Summary\n\nSign images with ECDSA keys (cosign-compatible format) to prove authenticity and enable verification by Kubernetes admission controllers.\n\n## Motivation\n\nSupply chain security requires image verification. Kubernetes admission controllers (Kyverno, OPA Gatekeeper) can enforce signature verification before allowing image deployment.\n\n## Approach\n\nNative key-based signing using Erlang's `crypto` module. Zero external dependencies. Uses same OCI artifact push mechanism as SBOM.\n\n```bash\n", "created": "2025-12-21T22:33:52Z", "labels": ["enhancement"], "context": "Feature: Image signing ## Summary\n\nSign images with ECDSA keys (cosign-compatible format) to prove authenticity and enable verification by Kubernetes admission controllers.\n\n## Motivation\n\nSupply chain security requires ima"}


identifier: gh_issue_3751699450
source: github_issue
status: new
created_at: 2025-12-22 03:24:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3751699450", "title": "Feature: SBOM generation", "url": "https://github.com/intility/erlang-oci-builder/issues/9", "user": "rhblind", "user_url": "https://github.com/rhblind", "repo": "erlang-oci-builder", "body_preview": "## Summary\n\nGenerate Software Bill of Materials (SBOM) in SPDX format, embedded in images and attached as OCI artifacts.\n\n## Motivation\n\nSupply chain security and compliance requirements increasingly mandate SBOMs. GitHub, Microsoft, and ko all use SPDX format.\n\n## Format\n\nSPDX 2.2 (ISO/IEC 5962:2021) - the industry standard used by GitHub and Microsoft.\n\n## SBOM Contents\n\n- Application name + version\n- All dependencies from `rebar.lock` / `mix.lock` (name, version, source)\n- ERTS version (if in", "created": "2025-12-21T22:33:22Z", "labels": ["enhancement"], "context": "Feature: SBOM generation ## Summary\n\nGenerate Software Bill of Materials (SBOM) in SPDX format, embedded in images and attached as OCI artifacts.\n\n## Motivation\n\nSupply chain security and compliance requirements increasingly "}


identifier: gh_issue_3751517479
source: github_issue
status: new
created_at: 2025-12-22 03:24:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3751517479", "title": "DERCAS 01: Policy Validation Copilot - Agentic LangGraph Architecture Specification", "url": "https://github.com/lacedeno11/pruebas/issues/5", "user": "lacedeno11", "user_url": "https://github.com/lacedeno11", "repo": "pruebas", "body_preview": "<open-swe-issue-content>DERCAS 01 \u2013 Cabina Aseguradoras Policy Validation Copilot (TO-BE) Casos de Uso Agentic (LangGraph) + ML + Guardrails Versi\u00f3n: TO-BE Agentic / LangGraph. Especificaci\u00f3n funcional a nivel Analista de Software. HITL se mantiene \u00fanicamente como compuerta (gate) para baja/mediana confianza, riesgo alto, anomal\u00edas, conflictos o cambios de pol\u00edtica. digraph PolicyValidationCopilot_LangGraph_TO_BE { rankdir=LR; bgcolor=\"white\"; labelloc=\"t\"; label=\"TO-BE: Policy Validation Copilo", "created": "2025-12-21T19:41:24Z", "labels": [], "context": "DERCAS 01: Policy Validation Copilot - Agentic LangGraph Architecture Specification <open-swe-issue-content>DERCAS 01 \u2013 Cabina Aseguradoras Policy Validation Copilot (TO-BE) Casos de Uso Agentic (LangGraph) + ML + Guardrails Versi\u00f3n: TO-BE Agentic / LangGraph. Especificaci\u00f3n funciona"}


identifier: gh_issue_3751487246
source: github_issue
status: new
created_at: 2025-12-22 03:24:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3751487246", "title": "time", "url": "https://github.com/enzooliveiradossantos1997-hash/enzooliveiradossantos1997-hash/issues/2", "user": "enzooliveiradossantos1997-hash", "user_url": "https://github.com/enzooliveiradossantos1997-hash", "repo": "enzooliveiradossantos1997-hash", "body_preview": "Repository Topics / Tags\nCopiar c\u00f3digo\n\nartificial-intelligence\nagritech\nfood-security\nloss-reduction\npython\nmachine-learning\neconomic-impact\nRepository Structure\nCopiar c\u00f3digo\n\nFarmSense-AI/\n\u2502\n\u251c\u2500\u2500 src/\n\u2502   \u2514\u2500\u2500 ai_engine.py\n\u2502\n\u251c\u2500\u2500 reports/\n\u2502   \u2514\u2500\u2500 generate_report.py\n\u2502\n\u251c\u2500\u2500 requirements.txt\n\u251c\u2500\u2500 README.md\n\u2514\u2500\u2500 LICENSE\nREADME.md (COPY EXACTLY)\nCopiar c\u00f3digo\nMd\n# Farm Sense AI\n\nFarm Sense AI is a functional artificial intelligence software prototype\ndesigned to estimate and reduce agricultural losses a", "created": "2025-12-21T19:07:48Z", "labels": [], "context": "time Repository Topics / Tags\nCopiar c\u00f3digo\n\nartificial-intelligence\nagritech\nfood-security\nloss-reduction\npython\nmachine-learning\neconomic-impact\nRepository Structure\nCopiar c\u00f3digo\n\nFarmSense-AI/\n\u2502\n\u251c\u2500\u2500 sr"}


identifier: gh_issue_3752086551
source: github_issue
status: new
created_at: 2025-12-22 03:24:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3752086551", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-22", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/356", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (180)\n1. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n2. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:439`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n3. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:450`", "created": "2025-12-22T03:01:52Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-22 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (180)\n1. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without "}


identifier: gh_issue_3752053329
source: github_issue
status: new
created_at: 2025-12-22 03:24:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3752053329", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/keypress-notifications/issues/49", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "keypress-notifications", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (17)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-22T02:41:26Z", "labels": ["automated", "security", "critical"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3752053057
source: github_issue
status: new
created_at: 2025-12-22 03:24:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3752053057", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/file-insights/issues/129", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "file-insights", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (16)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-22T02:41:13Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3752051491
source: github_issue
status: new
created_at: 2025-12-22 03:24:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3752051491", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/additional-contexts-menu/issues/110", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "additional-contexts-menu", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (17)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-22T02:40:16Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3751953946
source: github_issue
status: new
created_at: 2025-12-22 03:24:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3751953946", "title": "\ud83d\udee1\ufe0f Weekly Security Report - 2025-12-22", "url": "https://github.com/t3-nico/boxlog-app/issues/829", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "boxlog-app", "body_preview": "# \ud83d\udee1\ufe0f Weekly Security Report\n\n# \ud83d\udee1\ufe0f BoxLog Security Report\n\n**Generated**: 2025-12-22T01:52:35.717Z\n**Project**: BoxLog App\n**Environment**: Production\n\n---\n\n\n## 1. \u4f9d\u5b58\u95a2\u4fc2\u306e\u8106\u5f31\u6027\u30b9\u30ad\u30e3\u30f3 \ud83d\udd34 Critical\n\n| Severity | Count |\n|----------|-------|\n| \ud83d\udd34 Critical | 1 |\n| \ud83d\udfe0 High | 2 |\n| \ud83d\udfe1 Moderate | 4 |\n| \ud83d\udd35 Low | 4 |\n| \u2139\ufe0f Info | 0 |\n\n**Total Vulnerabilities**: 11\n\n\u26a0\ufe0f **Action Required**: Run `npm audit fix` to resolve vulnerabilities.\n\n<details>\n<summary>Raw npm audit output</summary>\n\n```\n{\n  \"auditReportVersion\": 2", "created": "2025-12-22T01:52:39Z", "labels": ["security", "weekly-report", "documentation"], "context": "\ud83d\udee1\ufe0f Weekly Security Report - 2025-12-22 # \ud83d\udee1\ufe0f Weekly Security Report\n\n# \ud83d\udee1\ufe0f BoxLog Security Report\n\n**Generated**: 2025-12-22T01:52:35.717Z\n**Project**: BoxLog App\n**Environment**: Production\n\n---\n\n\n## 1. \u4f9d\u5b58\u95a2\u4fc2\u306e\u8106\u5f31\u6027\u30b9\u30ad\u30e3\u30f3 \ud83d\udd34 Critical\n\n| Severity |"}


identifier: gh_issue_3752158940
source: github_issue
status: new
created_at: 2025-12-22 03:36:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3752158940", "title": "\ud83d\udea8 Security Vulnerabilities Detected", "url": "https://github.com/naretakis/eapd-next/issues/35", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "eapd-next", "body_preview": "\n## Security Audit Results\n\n**High vulnerabilities:** 1\n**Critical vulnerabilities:** 1\n\n### Recommended Actions\n1. Review the vulnerabilities listed below\n2. Update affected packages using `npm update`\n3. For packages without fixes, consider alternatives\n4. Run `npm audit fix` to automatically fix issues where possible\n\n### Audit Details\n```json\nundefined\n```\n\nThis issue was automatically created by the security audit workflow.\n", "created": "2025-12-22T03:27:39Z", "labels": ["security", "priority: high", "needs-triage"], "context": "\ud83d\udea8 Security Vulnerabilities Detected \n## Security Audit Results\n\n**High vulnerabilities:** 1\n**Critical vulnerabilities:** 1\n\n### Recommended Actions\n1. Review the vulnerabilities listed below\n2. Update affected packages using `npm updat"}


identifier: gh_issue_3752121865
source: github_issue
status: new
created_at: 2025-12-22 03:49:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3752121865", "title": "Dependabot\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30e9\u30fc\u30c8\u306e\u89e3\u6d88\u72b6\u6cc1\u3068\u5bfe\u5fdc\u65b9\u91dd", "url": "https://github.com/n-air-app/n-air-app/issues/1073", "user": "koizuka", "user_url": "https://github.com/koizuka", "repo": "n-air-app", "body_preview": "## \u6982\u8981\n**\u4f5c\u6210\u65e5: 2025\u5e7412\u670822\u65e5**\n\n2025\u5e7412\u670822\u65e5\u6642\u70b9\u3067\u30019\u3064\u306eDependabot\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30e9\u30fc\u30c8\u304c\u5b58\u5728\u3057\u3066\u3044\u307e\u3059\u3002\u5404\u30a2\u30e9\u30fc\u30c8\u306b\u3064\u3044\u3066\u3001\u30d6\u30ed\u30c3\u30af\u8981\u56e0\u3068\u89e3\u6d88\u65b9\u6cd5\u3092\u5206\u6790\u3057\u307e\u3057\u305f\u3002\n\n## \u30a2\u30e9\u30fc\u30c8\u4e00\u89a7\u3068\u89e3\u6d88\u53ef\u5426\uff082025\u5e7412\u670822\u65e5\u6642\u70b9\uff09\n\n| Alert | \u30d1\u30c3\u30b1\u30fc\u30b8 | CVE | \u91cd\u5927\u5ea6 | \u89e3\u6d88\u53ef\u5426 | \u5bfe\u5fdc\u72b6\u6cc1 |\n|-------|-----------|-----|--------|---------|---------|\n| [106](https://github.com/n-air-app/n-air-app/security/dependabot/106), [75](https://github.com/n-air-app/n-air-app/security/dependabot/75) | electron | CVE-2025-55305 | Medium | \u25b3 obs-studio-node\u5f85\u3061 | Streamlabs\u5bfe\u5fdc\u5f85\u3061 |\n| [105](https://github.com/n-air-app/n-air-", "created": "2025-12-22T03:16:12Z", "labels": [], "context": "Dependabot\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30e9\u30fc\u30c8\u306e\u89e3\u6d88\u72b6\u6cc1\u3068\u5bfe\u5fdc\u65b9\u91dd ## \u6982\u8981\n**\u4f5c\u6210\u65e5: 2025\u5e7412\u670822\u65e5**\n\n2025\u5e7412\u670822\u65e5\u6642\u70b9\u3067\u30019\u3064\u306eDependabot\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30e9\u30fc\u30c8\u304c\u5b58\u5728\u3057\u3066\u3044\u307e\u3059\u3002\u5404\u30a2\u30e9\u30fc\u30c8\u306b\u3064\u3044\u3066\u3001\u30d6\u30ed\u30c3\u30af\u8981\u56e0\u3068\u89e3\u6d88\u65b9\u6cd5\u3092\u5206\u6790\u3057\u307e\u3057\u305f\u3002\n\n## \u30a2\u30e9\u30fc\u30c8\u4e00\u89a7\u3068\u89e3\u6d88\u53ef\u5426\uff082025\u5e7412\u670822\u65e5\u6642\u70b9\uff09\n\n| Alert | \u30d1\u30c3\u30b1\u30fc\u30b8 | CVE | \u91cd\u5927\u5ea6 | \u89e3\u6d88\u53ef\u5426 | \u5bfe\u5fdc\u72b6\u6cc1 |\n|-------|----------"}


identifier: gh_issue_3752186500
source: github_issue
status: new
created_at: 2025-12-22 04:00:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3752186500", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Amy-Taylor_1222_033708_gh_gw0/issues/4", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Amy-Taylor_1222_033708_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.", "created": "2025-12-22T03:38:59Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3752186509
source: github_issue
status: new
created_at: 2025-12-22 04:00:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3752186509", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Amy-Taylor_1222_033708_gh_gw0/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Amy-Taylor_1222_033708_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.io/v", "created": "2025-12-22T03:38:59Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3752154319
source: github_issue
status: new
created_at: 2025-12-22 04:00:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3752154319", "title": "[Dependabot] chore(deps): bump step-security/harden-runner from 2.13.2 to 2.14.0", "url": "https://github.com/reuteras/miniflux-tui-py/issues/663", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "miniflux-tui-py", "body_preview": "Dependabot has opened a pull request for dependency updates.\n\n**Related PR:** [PR #661](https://github.com/reuteras/miniflux-tui-py/pull/661)\n\n**PR Title:** chore(deps): bump step-security/harden-runner from 2.13.2 to 2.14.0\n\n**Dependency Details:**\nBumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.13.2 to 2.14.0.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a href=\"https://github.com/step-security/harden-runner/releases\">step-security/", "created": "2025-12-22T03:26:34Z", "labels": ["dependencies", "dependabot"], "context": "[Dependabot] chore(deps): bump step-security/harden-runner from 2.13.2 to 2.14.0 Dependabot has opened a pull request for dependency updates.\n\n**Related PR:** [PR #661](https://github.com/reuteras/miniflux-tui-py/pull/661)\n\n**PR Title:** chore(deps): bump step-security/harden-runn"}


identifier: gh_issue_3752090078
source: github_issue
status: new
created_at: 2025-12-22 04:00:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3752090078", "title": "error: Empty archive or no options selected", "url": "https://github.com/Nexus-Mods/Vortex/issues/19132", "user": "VortexFeedback", "user_url": "https://github.com/VortexFeedback", "repo": "Vortex", "body_preview": "### Application error\n#### System\n| | |\n|------------ | -------------|\n|Platform | win32 10.0.26220  |\n|CPU Architecture | x64 |\n|Architecture | x64 |\n|Application Version | 1.16.0-beta.3 |\n|Process | renderer |\n#### Message\nEmpty archive or no options selected\n#### Title\n```\nFailed to install dependency\n```\n\n#### Details\n```\nname: ProcessCanceled\n```\n#### Context\n```\ngamemode = Fallout 3,extension_version = 1.0.4,Downloading \"NMCs Texture Pack MAXIMUM Pack SINGLE FILE FOR NMM-12056-1-0.7z\" = nx", "created": "2025-12-22T03:03:16Z", "labels": [], "context": "error: Empty archive or no options selected ### Application error\n#### System\n| | |\n|------------ | -------------|\n|Platform | win32 10.0.26220  |\n|CPU Architecture | x64 |\n|Architecture | x64 |\n|Application Version | 1.16.0-beta.3 |\n|Process |"}


identifier: gh_issue_3751967626
source: github_issue
status: new
created_at: 2025-12-22 04:00:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3751967626", "title": "Exercise: Expand your team with Copilot coding agent", "url": "https://github.com/jm27/skills-expand-your-team-with-copilot/issues/2", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-expand-your-team-with-copilot", "body_preview": "## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @jm27! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll unlock the next level of your favorite AI-powered coding assistant. Let&#39;s learn how to assign Copilot coding tasks directly in GitHub! \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave up", "created": "2025-12-22T01:58:11Z", "labels": [], "context": "Exercise: Expand your team with Copilot coding agent ## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @jm27! Welcome to your"}


identifier: gh_issue_3752205305
source: github_issue
status: new
created_at: 2025-12-22 04:00:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3752205305", "title": "\ud83d\udea8 Security vulnerabilities detected - 4700e57", "url": "https://github.com/Eyemusican/SWE302_02230307_Practical_4/issues/12", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "SWE302_02230307_Practical_4", "body_preview": "\nCritical security vulnerabilities have been detected in the latest commit.\n\n**Details:**\n- Commit: 4700e57ff6feca29b282e98b9b60356217ce6d88\n- Branch: refs/heads/main\n- Workflow: Enhanced CI/CD with Comprehensive Security\n- Run: 33\n\n**Action Required:**\n1. Review the security scan results in the Actions tab\n2. Check the Security tab for detailed vulnerability information\n3. Update affected dependencies or apply patches\n4. Re-run the security scan to verify fixes\n\n**Links:**\n- [Workflow Run](http", "created": "2025-12-22T03:48:17Z", "labels": ["security", "urgent"], "context": "\ud83d\udea8 Security vulnerabilities detected - 4700e57 \nCritical security vulnerabilities have been detected in the latest commit.\n\n**Details:**\n- Commit: 4700e57ff6feca29b282e98b9b60356217ce6d88\n- Branch: refs/heads/main\n- Workflow: Enhanced CI/CD with C"}


identifier: gh_issue_3752077879
source: github_issue
status: new
created_at: 2025-12-22 04:00:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3752077879", "title": "G) Security Testing & Reviews", "url": "https://github.com/Coding-Krakken/News/issues/32", "user": "Coding-Krakken", "user_url": "https://github.com/Coding-Krakken", "repo": "News", "body_preview": "# G) Security Testing & Reviews\n\n**Parent Issue**: Relates to #12\n\n## Description\n\nImplement comprehensive security testing including unit tests, integration tests, OWASP Top 10 testing, dependency scanning, SAST, DAST, and penetration testing.\n\n## Acceptance Criteria\n\n- [ ] Unit tests for authentication/authorization: >95% coverage\n- [ ] Integration tests for security headers passing\n- [ ] E2E tests for sensitive workflows passing\n- [ ] OWASP Top 10 vulnerability testing completed\n- [ ] Depende", "created": "2025-12-22T02:57:29Z", "labels": ["epic: security"], "context": "G) Security Testing & Reviews # G) Security Testing & Reviews\n\n**Parent Issue**: Relates to #12\n\n## Description\n\nImplement comprehensive security testing including unit tests, integration tests, OWASP Top 10 testing, dependency sc"}


identifier: gh_issue_3752070385
source: github_issue
status: new
created_at: 2025-12-22 04:00:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3752070385", "title": "\ud83d\ude80 Epic: Implement Security, Privacy, and Compliance Features", "url": "https://github.com/Coding-Krakken/News/issues/12", "user": "Coding-Krakken", "user_url": "https://github.com/Coding-Krakken", "repo": "News", "body_preview": "# \ud83d\ude80 Epic: Implement Security, Privacy, and Compliance Features\n\n## Goal\n\nMake the platform compliant with global privacy regulations (GDPR, CCPA) and security best practices. Users have full control over their data, all actions are auditable, and the system is hardened against common attacks and vulnerabilities.\n\n---\n\n## Scope\n\n### In-Scope\n\n* GDPR compliance (consent, right to be forgotten, data portability)\n* CCPA compliance (opt-out, data sale transparency)\n* User data privacy controls (expor", "created": "2025-12-22T02:52:45Z", "labels": ["epic: security"], "context": "\ud83d\ude80 Epic: Implement Security, Privacy, and Compliance Features # \ud83d\ude80 Epic: Implement Security, Privacy, and Compliance Features\n\n## Goal\n\nMake the platform compliant with global privacy regulations (GDPR, CCPA) and security best practices. Users have full control o"}


identifier: gh_issue_3752236277
source: github_issue
status: new
created_at: 2025-12-22 04:13:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3752236277", "title": "Numeric Truncation Error SNYK-RHEL9-SQLITELIBS-10757125", "url": "https://github.com/RADAR-base/radar-helm-charts/issues/6902", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "radar-helm-charts", "body_preview": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `sqlite-libs` package and not the `sqlite-libs` package as distributed by `RHEL`._\n_See `How to fix?` for `RHEL:9` relevant fixed versions and status._\n\nThere exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.\n## Remedi", "created": "2025-12-22T04:06:57Z", "labels": ["Snyk", "high", "Snyk-category:strimzi/kafka:0.46.0-kafka-3.9.0", "Snyk-timestamp:20421273524"], "context": "Numeric Truncation Error SNYK-RHEL9-SQLITELIBS-10757125 ## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `sqlite-libs` package and not the `sqlite-libs` package as distributed by `RHEL`._\n_See `How to fix?` f"}


identifier: gh_issue_3752236033
source: github_issue
status: new
created_at: 2025-12-22 04:13:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3752236033", "title": "Directory Traversal SNYK-RHEL9-PYTHON3LIBS-10415830", "url": "https://github.com/RADAR-base/radar-helm-charts/issues/6901", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "radar-helm-charts", "body_preview": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `python3-libs` package and not the `python3-libs` package as distributed by `RHEL`._\n_See `How to fix?` for `RHEL:9` relevant fixed versions and status._\n\nAllows arbitrary filesystem writes outside the extraction directory during extraction with filter=&#34;data&#34;.\n\n\nYou are affected by this vulnerability if using the tarfile\u00a0module to extract untrusted tar archives using TarFile.extractall()\u00a0or T", "created": "2025-12-22T04:06:47Z", "labels": ["Snyk", "high", "Snyk-category:strimzi/kafka:0.46.0-kafka-3.9.0", "Snyk-timestamp:20421273524"], "context": "Directory Traversal SNYK-RHEL9-PYTHON3LIBS-10415830 ## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `python3-libs` package and not the `python3-libs` package as distributed by `RHEL`._\n_See `How to fix?`"}


identifier: gh_issue_3752235744
source: github_issue
status: new
created_at: 2025-12-22 04:13:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3752235744", "title": "Directory Traversal SNYK-RHEL9-PYTHON3LIBS-10415581", "url": "https://github.com/RADAR-base/radar-helm-charts/issues/6900", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "radar-helm-charts", "body_preview": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `python3-libs` package and not the `python3-libs` package as distributed by `RHEL`._\n_See `How to fix?` for `RHEL:9` relevant fixed versions and status._\n\nAllows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata.\n\n\nYou are affected by this vulnerability if using the tarfile\u00a0module to extract untrusted t", "created": "2025-12-22T04:06:35Z", "labels": ["Snyk", "high", "Snyk-category:strimzi/kafka:0.46.0-kafka-3.9.0", "Snyk-timestamp:20421273524"], "context": "Directory Traversal SNYK-RHEL9-PYTHON3LIBS-10415581 ## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `python3-libs` package and not the `python3-libs` package as distributed by `RHEL`._\n_See `How to fix?`"}


identifier: gh_issue_3752235436
source: github_issue
status: new
created_at: 2025-12-22 04:13:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3752235436", "title": "Numeric Truncation Error SNYK-RHEL9-SQLITELIBS-10757125", "url": "https://github.com/RADAR-base/radar-helm-charts/issues/6899", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "radar-helm-charts", "body_preview": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `sqlite-libs` package and not the `sqlite-libs` package as distributed by `RHEL`._\n_See `How to fix?` for `RHEL:9` relevant fixed versions and status._\n\nThere exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.\n## Remedi", "created": "2025-12-22T04:06:24Z", "labels": ["Snyk", "high", "Snyk-category:strimzi/operator:0.46.0", "Snyk-timestamp:20421273524"], "context": "Numeric Truncation Error SNYK-RHEL9-SQLITELIBS-10757125 ## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `sqlite-libs` package and not the `sqlite-libs` package as distributed by `RHEL`._\n_See `How to fix?` f"}


identifier: gh_issue_3752235070
source: github_issue
status: new
created_at: 2025-12-22 04:13:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3752235070", "title": "Directory Traversal SNYK-RHEL9-PYTHON3LIBS-10415372", "url": "https://github.com/RADAR-base/radar-helm-charts/issues/6897", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "radar-helm-charts", "body_preview": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `python3-libs` package and not the `python3-libs` package as distributed by `RHEL`._\n_See `How to fix?` for `RHEL:9` relevant fixed versions and status._\n\nAllows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata.\n\n\nYou are affected by this vulnerability if using the tarfile\u00a0module to extract untrusted t", "created": "2025-12-22T04:06:11Z", "labels": ["Snyk", "high", "Snyk-category:strimzi/kafka:0.46.0-kafka-3.9.0", "Snyk-timestamp:20421273524"], "context": "Directory Traversal SNYK-RHEL9-PYTHON3LIBS-10415372 ## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `python3-libs` package and not the `python3-libs` package as distributed by `RHEL`._\n_See `How to fix?`"}


identifier: gh_issue_3752226295
source: github_issue
status: new
created_at: 2025-12-22 04:36:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3752226295", "title": "\ud83d\udd0d Branch Audit Report", "url": "https://github.com/PolPol45/FlexToken/issues/20", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "FlexToken", "body_preview": "# Branch Audit Report\n\n**Generated on:** 2025-12-22 04:00:25 UTC  \n**Repository:** ASIAFLEX  \n**Default Branch:** main  \n\n## Summary\n\n- **Total Remote Branches:** 7\n- **Analysis Status:** Basic listing (merge analysis requires local setup)\n- **Main Branch:** Included in analysis\n\n## Detailed Branch Analysis\n\n| Branch | Status | Notes |\n|--------|--------|-------|\n| dependabot/github_actions/actions/cache-5 | \ud83e\udd16 Dependabot | Automated dependency update (SHA: 941fdb6) |\n| dependabot/github_actions/", "created": "2025-12-22T04:00:27Z", "labels": ["audit", "automation", "maintenance"], "context": "\ud83d\udd0d Branch Audit Report # Branch Audit Report\n\n**Generated on:** 2025-12-22 04:00:25 UTC  \n**Repository:** ASIAFLEX  \n**Default Branch:** main  \n\n## Summary\n\n- **Total Remote Branches:** 7\n- **Analysis Status:** Basic listin"}


identifier: gh_issue_3752241151
source: github_issue
status: new
created_at: 2025-12-22 04:36:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3752241151", "title": "Security Vulnerabilities (Trivy Scan) - 22-12-25 @ 04:10", "url": "https://github.com/RazorBladeX/SH-GithubRunner/issues/49", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "SH-GithubRunner", "body_preview": "## \u26a0\ufe0f Security Vulnerabilities Detected\n\n**Scan Date:** 22-12-25 @ 04:10\n\n### Summary\n- **Total vulnerabilities found:** 298\n- **Critical:** 4\n- **High:** 49\n\n### Full Report\nThe complete vulnerability report is available as a workflow artifact.\n\n\ud83d\udce5 **[Download Full Report](https://github.com/RazorBladeX/SH-GithubRunner/actions/runs/20421422407/artifacts)**\n\n---\n*This issue is automatically generated by the Trivy security scanner.*\n", "created": "2025-12-22T04:10:10Z", "labels": ["vulnerability", "security", "automated", "security-scan"], "context": "Security Vulnerabilities (Trivy Scan) - 22-12-25 @ 04:10 ## \u26a0\ufe0f Security Vulnerabilities Detected\n\n**Scan Date:** 22-12-25 @ 04:10\n\n### Summary\n- **Total vulnerabilities found:** 298\n- **Critical:** 4\n- **High:** 49\n\n### Full Report\nThe complete vulnerabilit"}


identifier: gh_issue_3752228154
source: github_issue
status: new
created_at: 2025-12-22 04:36:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3752228154", "title": "Information Exposure SNYK-RHEL9-JAVA17OPENJDKHEADLESS-10757570", "url": "https://github.com/RADAR-base/radar-helm-charts/issues/6860", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "radar-helm-charts", "body_preview": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `java-17-openjdk-headless` package and not the `java-17-openjdk-headless` package as distributed by `RHEL`._\n_See `How to fix?` for `RHEL:9` relevant fixed versions and status._\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27,", "created": "2025-12-22T04:01:48Z", "labels": ["Snyk", "high", "Snyk-category:strimzi/kafka:0.46.0-kafka-3.9.0", "Snyk-timestamp:20421273524"], "context": "Information Exposure SNYK-RHEL9-JAVA17OPENJDKHEADLESS-10757570 ## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `java-17-openjdk-headless` package and not the `java-17-openjdk-headless` package as distributed by `RH"}


identifier: gh_issue_3752227937
source: github_issue
status: new
created_at: 2025-12-22 04:36:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3752227937", "title": "Information Exposure SNYK-RHEL9-JAVA17OPENJDKHEADLESS-10757570", "url": "https://github.com/RADAR-base/radar-helm-charts/issues/6859", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "radar-helm-charts", "body_preview": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `java-17-openjdk-headless` package and not the `java-17-openjdk-headless` package as distributed by `RHEL`._\n_See `How to fix?` for `RHEL:9` relevant fixed versions and status._\n\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27,", "created": "2025-12-22T04:01:39Z", "labels": ["Snyk", "high", "Snyk-category:strimzi/operator:0.46.0", "Snyk-timestamp:20421273524"], "context": "Information Exposure SNYK-RHEL9-JAVA17OPENJDKHEADLESS-10757570 ## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `java-17-openjdk-headless` package and not the `java-17-openjdk-headless` package as distributed by `RH"}


identifier: gh_issue_3752195498
source: github_issue
status: new
created_at: 2025-12-22 04:36:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3752195498", "title": "Latest 15 Papers - December 22, 2025", "url": "https://github.com/yanghlll/ArxivDaily-Haolin/issues/81", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "ArxivDaily-Haolin", "body_preview": "**Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Unified\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[A Unified Representation of Neural Networks Architectures](https://arxiv.org/abs/2512.17593v1)** | 2025-12-19 |  |\n| **[A unified FLAIR hyperintensity segmentation model for various CNS tumor types and acquisition time points](https://arxiv.org/abs/2512.17566v1)** | 2025-12-19 | 13 pages, 4 fi", "created": "2025-12-22T03:43:27Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 22, 2025 **Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Unified\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |"}


identifier: gh_issue_3752314366
source: github_issue
status: new
created_at: 2025-12-22 05:00:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3752314366", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/Shravan07Teegala/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Shravan07Teegala! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each ", "created": "2025-12-22T04:53:21Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Shravan07Teegala! Welc"}


identifier: gh_issue_3752373803
source: github_issue
status: new
created_at: 2025-12-22 05:26:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3752373803", "title": "SECURITYINTERNAL-138", "url": "https://github.com/SahanWeerasiri/test-email-automation/issues/178", "user": "SahanWeerasiri", "user_url": "https://github.com/SahanWeerasiri", "repo": "test-email-automation", "body_preview": "## Description\r\n- **SECURITYINTERNAL ID:** `138`\r\n- **Security Advisory ID:** `WSO2-2025-138`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Vulnerable Docker image found\"` in **security@**.\r\n- **Security Advisory:** [link](https://security-advisory.wso2.com/dashboard/advisory?name=WSO2-2025-138)\r\n- **Progress Progress View:** [link](https://security-advisory.wso2.com/dashboard/advisory/patchProgress?name=WSO2-2025-138)\r\n- **Reporter:** External Reporter\r\n- **Date:** Fri, Dec 19, 2025 at 10:07 AM\r\n\r\n", "created": "2025-12-22T05:21:48Z", "labels": ["Reporter/External", "Severity/Low", "Type/DirectSpam"], "context": "SECURITYINTERNAL-138 ## Description\r\n- **SECURITYINTERNAL ID:** `138`\r\n- **Security Advisory ID:** `WSO2-2025-138`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Vulnerable Docker image found\"` in **security@**.\r\n- **Security "}


identifier: gh_issue_3752329515
source: github_issue
status: new
created_at: 2025-12-22 05:38:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3752329515", "title": "# itsourcecode  Online Frozen Foods Ordering System   V1.0  \"/frozenfoodssystem/contact_us.php\"  SQL injection", "url": "https://github.com/24ggee/CVE/issues/1", "user": "24ggee", "user_url": "https://github.com/24ggee", "repo": "CVE", "body_preview": "# itsourcecode  Online Frozen Foods Ordering System   V1.0  \"/frozenfoodssystem/contact_us.php\"  SQL injection  \n\n# NAME OF AFFECTED PRODUCT(S)\n\n- Online Frozen Foods Ordering System\n\n## Vendor Homepage\n\n- https://itsourcecode.com/free-projects/php-project/online-frozen-foods-ordering-system-source-code/\n\n# AFFECTED AND/OR FIXED VERSION(S)\n\n- V1.0\n\n## submitter\n\n- 111\n\n## Vulnerable File\n\n-  /frozenfoodssystem/contact_us.php\n\n## VERSION(S)\n\n- V1.0\n\n## Software Link\n\n- https://itsourcecode.com/fr", "created": "2025-12-22T05:00:14Z", "labels": [], "context": "# itsourcecode  Online Frozen Foods Ordering System   V1.0  \"/frozenfoodssystem/contact_us.php\"  SQL injection # itsourcecode  Online Frozen Foods Ordering System   V1.0  \"/frozenfoodssystem/contact_us.php\"  SQL injection  \n\n# NAME OF AFFECTED PRODUCT(S)\n\n- Online Frozen Foods Ordering System\n\n## Vendor Homepa"}


identifier: gh_issue_3752321837
source: github_issue
status: new
created_at: 2025-12-22 05:38:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3752321837", "title": "[Feature]: Add comprehensive deserialization validator for CVE-2025-55182 protection", "url": "https://github.com/lakinmindfire/nextjs-fortress/issues/2", "user": "ParasMindfire", "user_url": "https://github.com/ParasMindfire", "repo": "nextjs-fortress", "body_preview": "### What problem does this feature solve?\n\n**Use Case:**\nNext.js applications using React Server Components and Server Actions are vulnerable to CVE-2025-55182 (React2Shell), where attackers inject `__proto__` or `constructor` in JSON payloads to achieve Remote Code Execution. There's no built-in protection in Next.js for this critical vulnerability.\n\n\n**Context:**\nThe React Flight protocol deserializes JSON without validating dangerous keys. When an attacker sends:\n```json\n{\n  \"username\": \"hack", "created": "2025-12-22T04:56:35Z", "labels": ["enhancement"], "context": "[Feature]: Add comprehensive deserialization validator for CVE-2025-55182 protection ### What problem does this feature solve?\n\n**Use Case:**\nNext.js applications using React Server Components and Server Actions are vulnerable to CVE-2025-55182 (React2Shell), where attackers inject `_"}


identifier: gh_issue_3752320966
source: github_issue
status: new
created_at: 2025-12-22 05:50:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3752320966", "title": "CI/CD: Modernize test suite and update dependencies to address runtime/vulnerability issues", "url": "https://github.com/dhar174/RAL-andon-adam-project/issues/11", "user": "dhar174", "user_url": "https://github.com/dhar174", "repo": "RAL-andon-adam-project", "body_preview": "**Problem:**\nThe test suite (`dotnet test RAL.Solution.sln`) fails due to missing .NET Core 2.1/2.2 runtimes (no longer supported). Also, dependency vulnerability warnings (NU1902/NU1903, old Newtonsoft.Json) are present in CI/CD.\n\n**Evidence:**\n- `dotnet test` fails on missing runtime; see advisories GHSA-6px8-22w5-w334, GHSA-g5rf-m25r-vjxx, etc.\n- See `ARCHITECTURE_AND_GAPS.md` Gap #6 and Test Notes.\n\n**Tasks:**\n- Upgrade all projects to target net6.0 or greater. Remove 2.1/2.2 target framewor", "created": "2025-12-22T04:56:10Z", "labels": ["bug", "enhancement"], "context": "CI/CD: Modernize test suite and update dependencies to address runtime/vulnerability issues **Problem:**\nThe test suite (`dotnet test RAL.Solution.sln`) fails due to missing .NET Core 2.1/2.2 runtimes (no longer supported). Also, dependency vulnerability warnings (NU1902/NU1903, old Newtonso"}


identifier: gh_issue_3752320899
source: github_issue
status: new
created_at: 2025-12-22 05:50:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3752320899", "title": "Gaps Analysis Remediation Epic: Address all identified architecture, reliability, and CI/CD gaps", "url": "https://github.com/dhar174/RAL-andon-adam-project/issues/5", "user": "dhar174", "user_url": "https://github.com/dhar174", "repo": "RAL-andon-adam-project", "body_preview": "This epic issue tracks the implementation of all recommended fixes and updates identified in the Gaps/Risks analysis of `ARCHITECTURE_AND_GAPS.md`. See sub-issues for actionable steps corresponding to each enumerated gap or risk.\n\n**Scope:**\n- Service shutdown reliability\n- Status change detection correctness\n- Exception handling in async event handlers\n- Report configuration validation and robustness\n- Database credential/configuration security\n- Test suite modernization and dependency vulnerab", "created": "2025-12-22T04:56:08Z", "labels": ["enhancement"], "context": "Gaps Analysis Remediation Epic: Address all identified architecture, reliability, and CI/CD gaps This epic issue tracks the implementation of all recommended fixes and updates identified in the Gaps/Risks analysis of `ARCHITECTURE_AND_GAPS.md`. See sub-issues for actionable steps corresponding to"}


identifier: gh_issue_3752253490
source: github_issue
status: new
created_at: 2025-12-22 05:50:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3752253490", "title": "[Security] Fix Trivy Vulnerability Scanner Issue", "url": "https://github.com/ballerina-platform/ballerina-library/issues/8538", "user": "kalaiyarasiganeshalingam", "user_url": "https://github.com/kalaiyarasiganeshalingam", "repo": "ballerina-library", "body_preview": "### Area\n\nArea/Connector\n\n### Description\n\nReport: https://github.com/ballerina-platform/ballerina-distribution/actions/runs/20295310261/job/58287645331\n\n### Version\n\n_No response_", "created": "2025-12-22T04:18:36Z", "labels": ["Type/Task"], "context": "[Security] Fix Trivy Vulnerability Scanner Issue ### Area\n\nArea/Connector\n\n### Description\n\nReport: https://github.com/ballerina-platform/ballerina-distribution/actions/runs/20295310261/job/58287645331\n\n### Version\n\n_No response_"}


identifier: gh_issue_3752225714
source: github_issue
status: new
created_at: 2025-12-22 05:50:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3752225714", "title": "GoogleNoteBookLm", "url": "https://github.com/AuraFrameFxDev/A_AIAOSPOS_PROJECT-REGenesis/issues/11", "user": "AuraFrameFxDev", "user_url": "https://github.com/AuraFrameFxDev", "repo": "A_AIAOSPOS_PROJECT-REGenesis", "body_preview": "All my research all of my documents all of Aura Kai Genesis Information training manuals and more have been completely documented ", "created": "2025-12-22T04:00:02Z", "labels": [], "context": "GoogleNoteBookLm All my research all of my documents all of Aura Kai Genesis Information training manuals and more have been completely documented "}


identifier: gh_issue_3752341877
source: github_issue
status: new
created_at: 2025-12-22 06:02:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3752341877", "title": "Daily News @ 2025-12-22 05:05:51 UTC", "url": "https://github.com/ValMystletainn/infiv/issues/372", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "infiv", "body_preview": "# Daily News\n\nGenerated at 2025-12-22 05:05:36 \n\nWe have 187 news from different sources.\n\n## paper\n\n### Both Semantics and Reconstruction Matter: Making Representation Encoders Ready for Text-to-Image Generation and Editing\n[arxiv](https://arxiv.org/abs/2512.17909) [html](https://arxiv.org/html/2512.17909) [pdf](https://arxiv.org/pdf/2512.17909) [kimi](https://papers.cool/arxiv/2512.17909)\n\n2025/12/22 05:04 GTM\n\nModern Latent Diffusion Models (LDMs) typically operate in low-level Variational Au", "created": "2025-12-22T05:05:51Z", "labels": ["report"], "context": "Daily News @ 2025-12-22 05:05:51 UTC # Daily News\n\nGenerated at 2025-12-22 05:05:36 \n\nWe have 187 news from different sources.\n\n## paper\n\n### Both Semantics and Reconstruction Matter: Making Representation Encoders Ready for Text-to-Imag"}


identifier: gh_issue_3752503166
source: github_issue
status: new
created_at: 2025-12-22 06:40:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3752503166", "title": "SECURITYINTERNAL-140", "url": "https://github.com/SahanWeerasiri/test-email-automation/issues/183", "user": "SahanWeerasiri", "user_url": "https://github.com/SahanWeerasiri", "repo": "test-email-automation", "body_preview": "## Description\r\n- **SECURITYINTERNAL ID:** `140`\r\n- **Security Advisory ID:** `WSO2-2025-140`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Account exposed\"` in **security@**.\r\n- **Security Advisory:** [link](https://security-advisory.wso2.com/dashboard/advisory?name=WSO2-2025-140)\r\n- **Progress Progress View:** [link](https://security-advisory.wso2.com/dashboard/advisory/patchProgress?name=WSO2-2025-140)\r\n- **Reporter:** External Reporter\r\n- **Date:** Thu, Dec 18, 2025 at 2:42 PM\r\n\r\n---\r\n**AI Summa", "created": "2025-12-22T06:29:20Z", "labels": ["Reporter/External", "Severity/High", "Type/DirectSpam", "New"], "context": "SECURITYINTERNAL-140 ## Description\r\n- **SECURITYINTERNAL ID:** `140`\r\n- **Security Advisory ID:** `WSO2-2025-140`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Account exposed\"` in **security@**.\r\n- **Security Advisory:** [l"}


identifier: gh_issue_3752497373
source: github_issue
status: new
created_at: 2025-12-22 06:40:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3752497373", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/Bikassingh248/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Bikassingh248! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrat", "created": "2025-12-22T06:26:58Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Bikassingh248! Welcome to your Skills exe"}


identifier: gh_issue_3752461448
source: github_issue
status: new
created_at: 2025-12-22 06:40:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3752461448", "title": "CVE-2021-0341 (High) detected in okhttp-3.11.0.jar", "url": "https://github.com/billmcchesney1/concord-plugins/issues/92", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "concord-plugins", "body_preview": "## CVE-2021-0341 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>okhttp-3.11.0.jar</b></summary>\n\n<p>An HTTP+HTTP/2 client for Android and Java applications</p>\n<p>Library home page: <a href=\"https://github.com/square/okhttp\">https://github.com/square/okhttp</a></p>\n<p>Path to dependency file: /tasks/puppet/pom.xml</p>\n<p>Path to vulnerable library: /home/wss-sca", "created": "2025-12-22T06:10:49Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-0341 (High) detected in okhttp-3.11.0.jar ## CVE-2021-0341 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3752451213
source: github_issue
status: new
created_at: 2025-12-22 06:40:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3752451213", "title": "hadoop-yarn-server-common-2.7.5.jar: 1 vulnerabilities (highest severity is: 8.8)", "url": "https://github.com/SimaSaasDemo/calcite/issues/102", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "calcite", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>hadoop-yarn-server-common-2.7.5.jar</b></summary>\n\n<p>Apache Hadoop Project POM</p>\n<p>Library home page: <a href=\"http://www.apache.org\">http://www.apache.org</a></p>\n<p>Path to dependency file: /piglet/build.gradle.kts</p>\n<p>Path to vulnerable library: /home/wss-scanner/.gradle/caches/modules-2/files-2.1/org.apache.hadoop/hadoop-yarn-server-c", "created": "2025-12-22T06:05:50Z", "labels": ["Mend: dependency security vulnerability"], "context": "hadoop-yarn-server-common-2.7.5.jar: 1 vulnerabilities (highest severity is: 8.8) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>hadoop-yarn-server-common-2.7.5.jar</b></summar"}


identifier: gh_issue_3752451170
source: github_issue
status: new
created_at: 2025-12-22 06:40:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3752451170", "title": "CVE-2021-0341 (High) detected in okhttp-3.11.0.jar", "url": "https://github.com/billmcchesney1/smart-test-framework/issues/114", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "smart-test-framework", "body_preview": "## CVE-2021-0341 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>okhttp-3.11.0.jar</b></summary>\n\n<p>An HTTP+HTTP/2 client for Android and Java applications</p>\n<p>Library home page: <a href=\"https://github.com/square/okhttp\">https://github.com/square/okhttp</a></p>\n<p>Path to dependency file: /stf-webdriver-lib/pom.xml</p>\n<p>Path to vulnerable library: /home/ws", "created": "2025-12-22T06:05:49Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-0341 (High) detected in okhttp-3.11.0.jar ## CVE-2021-0341 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3752462794
source: github_issue
status: new
created_at: 2025-12-22 06:40:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3752462794", "title": "Implement Hash-Pinned Dependencies for Supply Chain Security", "url": "https://github.com/blairmichaelg/secbrain/issues/84", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "secbrain", "body_preview": "## \ud83c\udfaf Context\n\nProject has 12 dependencies. Supply chain attacks are increasing.\n\n## \ud83d\udca1 Reasoning\n\nHash pinning prevents dependency confusion and supply chain attacks by verifying package integrity. Critical for security tools that may be targeted.\n\n## \ud83d\udccb Implementation Steps\n\n1. Use pip-compile with --generate-hashes\n2. Update requirements.lock with hash verification\n3. Configure pip to require hashes\n4. Document hash update process\n\n## \ud83d\udcdd Example\n\n```python\n# Generate hashed requirements\npip-compi", "created": "2025-12-22T06:11:23Z", "labels": ["dependencies", "security", "ai-suggestion", "supply-chain", "sbom"], "context": "Implement Hash-Pinned Dependencies for Supply Chain Security ## \ud83c\udfaf Context\n\nProject has 12 dependencies. Supply chain attacks are increasing.\n\n## \ud83d\udca1 Reasoning\n\nHash pinning prevents dependency confusion and supply chain attacks by verifying package integrity. Cri"}


identifier: gh_issue_3752398637
source: github_issue
status: new
created_at: 2025-12-22 06:53:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3752398637", "title": "\ud83d\udd12 VerifierAgent: Critical Security, Stability, and Performance Improvements", "url": "https://github.com/wildhash/warmscreen/issues/10", "user": "coderabbitai[bot]", "user_url": "https://github.com/apps/coderabbitai", "repo": "warmscreen", "body_preview": "## \ud83d\udccb Overview\n\nThis issue tracks required improvements to the VerifierAgent implementation identified during code review of PR #1. These changes are necessary to ensure production-readiness, security compliance, and alignment with best practices.\n\n**Related PR:** #1\n**Requested by:** @AbhayRathi\n**Priority:** High (blocks production deployment)\n\n---\n\n## \ud83d\udd34 Critical Issues (Must Fix Before Merge)\n\n### 1. Missing Input Validation & Null Safety \u26a0\ufe0f\n\n**Risk Level:** HIGH - Runtime crashes, potential s", "created": "2025-12-22T05:33:58Z", "labels": [], "context": "\ud83d\udd12 VerifierAgent: Critical Security, Stability, and Performance Improvements ## \ud83d\udccb Overview\n\nThis issue tracks required improvements to the VerifierAgent implementation identified during code review of PR #1. These changes are necessary to ensure production-readiness, security "}


identifier: gh_issue_3752413771
source: github_issue
status: new
created_at: 2025-12-22 07:18:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3752413771", "title": "FULL REVIEWW!!!!!!11!!", "url": "https://github.com/P4X-ng/metasploit-framework-pynative/issues/137", "user": "P4X-ng", "user_url": "https://github.com/P4X-ng", "repo": "metasploit-framework-pynative", "body_preview": "Full review from all for bugs, issues, ideas, fixes, complaints, and jokes.\n\n/gemini review\n\n@coderabbit review\n\n@codex FULL REVIEW\n\n@copilot REVIEW THE F OUTTA THIS\n\n@amazonq do your thing bud\n\n@jules hop on in here??\n\n@mergify review this shit i don't even know if you can but do it\n\n@P4X-ng f*** you.\n\n", "created": "2025-12-22T05:43:34Z", "labels": ["documentation", "Amazon Q development agent", "codex", "dependencies", "ci-cd-review", "automated", "amazon-q", "code-review", "copilot", "triage", "code-cleanliness", "automated-analysis", "code-analysis", "analysis"], "context": "FULL REVIEWW!!!!!!11!! Full review from all for bugs, issues, ideas, fixes, complaints, and jokes.\n\n/gemini review\n\n@coderabbit review\n\n@codex FULL REVIEW\n\n@copilot REVIEW THE F OUTTA THIS\n\n@amazonq do your thing bud\n\n@jule"}


identifier: gh_issue_3752453009
source: github_issue
status: new
created_at: 2025-12-22 07:31:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3752453009", "title": "Daily AI Tools Digest", "url": "https://github.com/proteaNirav/rocketgpt/issues/221", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "rocketgpt", "body_preview": "# Daily AI Tools Digest\n\n### https://openai.com/blog/rss.xml\n\n<details>\n<summary>raw</summary>\n\nRedirecting...\n\n\n</details>\n\n### https://www.anthropic.com/news/rss.xml\n\n<details>\n<summary>raw</summary>\n\n<!DOCTYPE html><html id=\"__next_error__\"><head><meta charSet=\"utf-8\"/><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"/><link rel=\"preload\" as=\"script\" fetchPriority=\"low\" nonce=\"ZGJjMjRiN2QtMDlhZC00MTk3LWFmZDgtZTBmYmFkNWM3YWUx\" href=\"/_next/static/chunks/55ee5a30d5bf1901.js\"/>", "created": "2025-12-22T06:06:42Z", "labels": ["research", "automation"], "context": "Daily AI Tools Digest # Daily AI Tools Digest\n\n### https://openai.com/blog/rss.xml\n\n<details>\n<summary>raw</summary>\n\nRedirecting...\n\n\n</details>\n\n### https://www.anthropic.com/news/rss.xml\n\n<details>\n<summary>raw</summary"}


identifier: gh_issue_3752528489
source: github_issue
status: new
created_at: 2025-12-22 07:31:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3752528489", "title": "\ud83c\udf89 CVE Patches Available - 3 CVE(s) Fixed", "url": "https://github.com/fraiseql/fraiseql/issues/193", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "fraiseql", "body_preview": "# CVE Monitoring Report\n\n**Report Date**: 2025-12-22 06:42:02 UTC\n\n## Monitored CVEs Status\n\n| CVE ID | Component | Status | Notes |\n|--------|-----------|--------|-------|\n| CVE-2025-14104 | util-linux | FIXED | Heap buffer overread |\n| CVE-2025-9820 | GnuTLS | UNFIXED | TLS vulnerability |\n| CVE-2025-6141 | ncurses | FIXED | Stack buffer overflow |\n| CVE-2024-56433 | shadow-utils | FIXED | Subordinate ID config |\n\n## Actions Required\n\n- \u2705 Update util-linux: CVE-2025-14104 fixed\n- \u2705 Update ncur", "created": "2025-12-22T06:42:03Z", "labels": ["security", "patching", "good-news"], "context": "\ud83c\udf89 CVE Patches Available - 3 CVE(s) Fixed # CVE Monitoring Report\n\n**Report Date**: 2025-12-22 06:42:02 UTC\n\n## Monitored CVEs Status\n\n| CVE ID | Component | Status | Notes |\n|--------|-----------|--------|-------|\n| CVE-2025-14104 | util-lin"}


identifier: gh_issue_3752673631
source: github_issue
status: new
created_at: 2025-12-22 07:56:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3752673631", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/kpoluru2606/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @kpoluru2606! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step,", "created": "2025-12-22T07:41:04Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @kpoluru2606! Welcome t"}


identifier: gh_issue_3752672913
source: github_issue
status: new
created_at: 2025-12-22 07:56:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3752672913", "title": "Hangfire.InMemory cannot be installed in .NET 10 project with NuGet security audit enabled", "url": "https://github.com/HangfireIO/Hangfire.InMemory/issues/19", "user": "gimmickj", "user_url": "https://github.com/gimmickj", "repo": "Hangfire.InMemory", "body_preview": "**Environment**\n\n- .NET SDK: 10.0.101  \n- Hangfire.InMemory: 1.0.0  \n- NuGet: Central Package Management enabled (`Directory.Packages.props`)  \n- IDE: JetBrains Rider 2024.3 (but the issue reproduces via `dotnet restore`)\n\n**Steps to reproduce**\n\n1. Create a .NET 10 solution that uses Central Package Management:\n   ```xml\n   <!-- Directory.Packages.props -->\n   <Project>\n     <PropertyGroup>\n       <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>\n     </PropertyGroup>\n     <", "created": "2025-12-22T07:40:44Z", "labels": [], "context": "Hangfire.InMemory cannot be installed in .NET 10 project with NuGet security audit enabled **Environment**\n\n- .NET SDK: 10.0.101  \n- Hangfire.InMemory: 1.0.0  \n- NuGet: Central Package Management enabled (`Directory.Packages.props`)  \n- IDE: JetBrains Rider 2024.3 (but the issue reproduces "}


identifier: gh_issue_3752594398
source: github_issue
status: new
created_at: 2025-12-22 07:56:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3752594398", "title": "Policy Validation Copilot: Agentic LangGraph Architecture for Automated Decision Support", "url": "https://github.com/lacedeno11/pruebas/issues/19", "user": "lacedeno11", "user_url": "https://github.com/lacedeno11", "repo": "pruebas", "body_preview": "<open-swe-issue-content>(TO-BE) Casos de Uso Agentic (LangGraph) + ML + Guardrails Versi\u00f3n: TO-BE Agentic / LangGraph. Especificaci\u00f3n funcional a nivel Analista de Software. HITL se mantiene \u00fanicamente como compuerta (gate) para baja/mediana confianza, riesgo alto, anomal\u00edas, conflictos o cambios de pol\u00edtica. UC-OP-01 \u2014 Validar Servicio Adicional (E2E) \u2013 System-led (LangGraph) Objetivo: Determinar cobertura/condici\u00f3n de un servicio adicional aplicando pol\u00edtica vigente + excepciones, generando un", "created": "2025-12-22T07:11:11Z", "labels": [], "context": "Policy Validation Copilot: Agentic LangGraph Architecture for Automated Decision Support <open-swe-issue-content>(TO-BE) Casos de Uso Agentic (LangGraph) + ML + Guardrails Versi\u00f3n: TO-BE Agentic / LangGraph. Especificaci\u00f3n funcional a nivel Analista de Software. HITL se mantiene \u00fanicament"}


identifier: gh_issue_3752761008
source: github_issue
status: new
created_at: 2025-12-22 08:33:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3752761008", "title": "netty-codec-http-4.1.39.Final.jar: 15 vulnerabilities (highest severity is: 9.1) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Daniel-Herrera_1222_091216_gh/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Daniel-Herrera_1222_091216_gh", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>netty-codec-http-4.1.39.Final.jar</strong></summary>\n\nNetty is an asynchronous event-driven network application framework for\n    rapid development of maintainable high performance protocol servers and\n    clients.\n\n**Library home page:** [ https://netty.io/ ](https://netty.io/)\n\n**Path to dependency file:** /build.gradle\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/io.netty/netty-codec-http/4.1.3", "created": "2025-12-22T08:13:34Z", "labels": [], "context": "netty-codec-http-4.1.39.Final.jar: 15 vulnerabilities (highest severity is: 9.1) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>netty-codec-http-4.1.39.Final.jar</strong></summary>\n\nNetty is an asynchronous event-driven network application framework for\n    rapid development "}


identifier: gh_issue_3752629457
source: github_issue
status: new
created_at: 2025-12-22 08:46:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3752629457", "title": "Security Audit Actions", "url": "https://github.com/shazzar00ni/paperlyte-v2/issues/195", "user": "shazzar00ni", "user_url": "https://github.com/shazzar00ni", "repo": "paperlyte-v2", "body_preview": "Recommendations by Priority\nImmediate (Before Next Commit)\nAdd .env to .gitignore - CRITICAL\nPrevents accidental secret exposure\n5-minute fix\nBefore Production Deployment\nAdd security headers (CSP, X-Frame-Options, etc.)\n\nImplement via hosting provider configuration\n30-minute setup\nSelf-host fonts OR add SRI hashes\n\nEliminates CDN supply chain risk\nImproves performance (self-hosting)\n1-hour task\nReplace placeholder download links\n\nNot a security issue, but affects credibility\n15-minute update\nFu", "created": "2025-12-22T07:23:41Z", "labels": [], "context": "Security Audit Actions Recommendations by Priority\nImmediate (Before Next Commit)\nAdd .env to .gitignore - CRITICAL\nPrevents accidental secret exposure\n5-minute fix\nBefore Production Deployment\nAdd security headers (CSP, X-"}


identifier: gh_issue_3752824088
source: github_issue
status: new
created_at: 2025-12-22 08:46:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3752824088", "title": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide", "url": "https://github.com/SolidifyDemo/evgenii_demo_2/issues/1", "user": "repository-wizard[bot]", "user_url": "https://github.com/apps/repository-wizard", "repo": "evgenii_demo_2", "body_preview": "# Welcome to SolidifyDemo/evgenii_demo_2!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Checklist\n\n- [ ] Review and update the repository description\n- [ ] Set up branch protection rules\n- [ ] Configure repository settings (Issues, Projects, Wiki, etc.)\n- [ ] Add repository topics/tags for discoverability\n- [ ] Set up automated workflows (if needed)\n\n## \ud83d\udd12 Security & Best Practices\n\n###", "created": "2025-12-22T08:34:34Z", "labels": ["documentation", "good first issue", "setup"], "context": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide # Welcome to SolidifyDemo/evgenii_demo_2!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup "}


identifier: gh_issue_3752789728
source: github_issue
status: new
created_at: 2025-12-22 08:46:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3752789728", "title": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide", "url": "https://github.com/demos-aatmmr/evgenii_demo_1/issues/1", "user": "repository-wizard[bot]", "user_url": "https://github.com/apps/repository-wizard", "repo": "evgenii_demo_1", "body_preview": "# Welcome to demos-aatmmr/evgenii_demo_1!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Checklist\n\n- [ ] Review and update the repository description\n- [ ] Set up branch protection rules\n- [ ] Configure repository settings (Issues, Projects, Wiki, etc.)\n- [ ] Add repository topics/tags for discoverability\n- [ ] Set up automated workflows (if needed)\n\n## \ud83d\udd12 Security & Best Practices\n\n###", "created": "2025-12-22T08:22:34Z", "labels": ["documentation", "good first issue", "setup"], "context": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide # Welcome to demos-aatmmr/evgenii_demo_1!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup "}


identifier: gh_issue_3752781491
source: github_issue
status: new
created_at: 2025-12-22 08:46:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3752781491", "title": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide", "url": "https://github.com/SolidifyDemo/evgenii_demo/issues/1", "user": "repository-wizard[bot]", "user_url": "https://github.com/apps/repository-wizard", "repo": "evgenii_demo", "body_preview": "# Welcome to SolidifyDemo/evgenii_demo!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Checklist\n\n- [ ] Review and update the repository description\n- [ ] Set up branch protection rules\n- [ ] Configure repository settings (Issues, Projects, Wiki, etc.)\n- [ ] Add repository topics/tags for discoverability\n- [ ] Set up automated workflows (if needed)\n\n## \ud83d\udd12 Security & Best Practices\n\n### B", "created": "2025-12-22T08:20:03Z", "labels": ["documentation", "good first issue", "setup"], "context": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide # Welcome to SolidifyDemo/evgenii_demo!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Ch"}


identifier: gh_issue_3752752678
source: github_issue
status: new
created_at: 2025-12-22 08:46:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3752752678", "title": "Week 51 2025 routine", "url": "https://github.com/kiwix/operations/issues/532", "user": "kiwixbot", "user_url": "https://github.com/kiwixbot", "repo": "operations", "body_preview": "\n## Nodes system upgrades\n\n```sh\napt update && apt upgrade\n```\n\n- [ ] run systematically the upgrade on bastion, stats, services, storage, demo, mirrors-qa nodes\n- [ ] check for and apply important security upgrade on worker nodes asap (imager-worker, ondemand, sisyphus)\n\n(regular workers updates are done separately on a monthly basis for worker nodes to not impact production)\n\n## Backups\n\n- [ ] Ensure [all borg repositories](https://www.borgbase.com/) are being updated\n\n## k8s cluster\n\n- [ ] Ch", "created": "2025-12-22T08:10:49Z", "labels": ["maint"], "context": "Week 51 2025 routine \n## Nodes system upgrades\n\n```sh\napt update && apt upgrade\n```\n\n- [ ] run systematically the upgrade on bastion, stats, services, storage, demo, mirrors-qa nodes\n- [ ] check for and apply important se"}


identifier: gh_issue_3752866338
source: github_issue
status: new
created_at: 2025-12-22 08:58:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3752866338", "title": "the update and the webbrowserkiosk", "url": "https://github.com/JaapvanEkris/openrowingmonitor/issues/160", "user": "fkh-bims", "user_url": "https://github.com/fkh-bims", "repo": "openrowingmonitor", "body_preview": "In the update script, only openrowingmonitor exits, webbrowserkiosk continues running and desperately searches for connection. This is dragging down the system. I aborted the update and terminated webbrowserkiosk. Now the update is running at normal speed.\n\n`Update script for Open Rowing Monitor\n\nChecking for new version...\nA new version of Open Rowing Monitor is available from branch \"0.9.7-(under-cons                                                                                              ", "created": "2025-12-22T08:50:45Z", "labels": [], "context": "the update and the webbrowserkiosk In the update script, only openrowingmonitor exits, webbrowserkiosk continues running and desperately searches for connection. This is dragging down the system. I aborted the update and terminated web"}


identifier: gh_issue_3752816668
source: github_issue
status: new
created_at: 2025-12-22 08:58:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3752816668", "title": "CRITICAL: Security Vulnerability Detected in Production", "url": "https://github.com/UCLA-Bruin-Supermileage/SMV-Website/issues/25", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "SMV-Website", "body_preview": "### Security Scan Failed\nNew vulnerabilities (High/Critical) were detected in the production image: `ghcr.io/ucla-bruin-supermileage/smv-website:latest`.\n\n**Action Required:**\n1. Check the [Workflow Logs](https://github.com/UCLA-Bruin-Supermileage/SMV-Website/actions/runs/20426354098) for details.\n2. Run `npm audit fix` locally.\n3. Rebuild and deploy a new image.", "created": "2025-12-22T08:32:08Z", "labels": [], "context": "CRITICAL: Security Vulnerability Detected in Production ### Security Scan Failed\nNew vulnerabilities (High/Critical) were detected in the production image: `ghcr.io/ucla-bruin-supermileage/smv-website:latest`.\n\n**Action Required:**\n1. Check the [Workflow L"}


identifier: gh_issue_3752850815
source: github_issue
status: new
created_at: 2025-12-22 08:58:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3752850815", "title": "Bounty Challenge v2 - Solution Report", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/434", "user": "xiobobei", "user_url": "https://github.com/xiobobei", "repo": "pvac_hfhe_cpp", "body_preview": "## Result\n\n**The homomorphic sum of a.ct + b.ct = 3**\n\n- `a.ct` encrypts value: **1**\n- `b.ct` encrypts value: **2**\n- Homomorphic sum: **1 + 2 = 3**\n\n## Attack Vector: Source Code Information Leakage\n\n### Vulnerability Type\nInformation disclosure through hardcoded test values in publicly accessible source code.\n\n### Severity\nCritical - Complete compromise of encrypted data without cryptographic attack.\n\n## Evidence\n\n### Primary Evidence: Hardcoded Values\n\n**File:** `tests/bounty2_test.cpp`  \n**", "created": "2025-12-22T08:44:48Z", "labels": [], "context": "Bounty Challenge v2 - Solution Report ## Result\n\n**The homomorphic sum of a.ct + b.ct = 3**\n\n- `a.ct` encrypts value: **1**\n- `b.ct` encrypts value: **2**\n- Homomorphic sum: **1 + 2 = 3**\n\n## Attack Vector: Source Code Information Leakage"}


identifier: gh_issue_3752819669
source: github_issue
status: new
created_at: 2025-12-22 08:58:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3752819669", "title": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability", "url": "https://github.com/ltranquility/CVE/issues/30", "user": "ltranquility", "user_url": "https://github.com/ltranquility", "repo": "CVE", "body_preview": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability\n\nNAME OF AFFECTED PRODUCT(S)\n- Student Managemen System\n\nVendor Homepage\nhttps://itsourcecode.com/free-projects/php-project/student-management-system-in-php-with-source-code/\n\nAFFECTED AND/OR FIXED VERSION(S)\n- V1.0\n\nVuldb Submitter\n- 1111\n\n# Vulnerable File\n-/student_p.php\n\n## VERSION(S)\n- V1.0\n\n## Software Link\nhttps://itsourcecode.com/wp-content/uploads/2021/02/Student-Management-System-In-PHP-Source-Code.zip\n\n## PROBLEM ", "created": "2025-12-22T08:33:12Z", "labels": [], "context": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability itsourcecode Student Management System V1.0 SQL Injection Vulnerability\n\nNAME OF AFFECTED PRODUCT(S)\n- Student Managemen System\n\nVendor Homepage\nhttps://itsourcecode.com/free-projects/php-project/stud"}


identifier: gh_issue_3752724973
source: github_issue
status: new
created_at: 2025-12-22 08:58:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3752724973", "title": "# itsourcecode  Online Frozen Foods Ordering System   V1.0  \"/frozenfoodssystem/customer_details.php\"  SQL injection", "url": "https://github.com/ttting888/CVE/issues/1", "user": "ttting888", "user_url": "https://github.com/ttting888", "repo": "CVE", "body_preview": "# itsourcecode  Online Frozen Foods Ordering System   V1.0  \"/frozenfoodssystem/customer_details.php\"  SQL injection  \n\n# NAME OF AFFECTED PRODUCT(S)\n\n- Online Frozen Foods Ordering System\n\n## Vendor Homepage\n\n- https://itsourcecode.com/free-projects/php-project/online-frozen-foods-ordering-system-source-code/\n\n# AFFECTED AND/OR FIXED VERSION(S)\n\n- V1.0\n\n## submitter\n\n- 111\n\n## Vulnerable File\n\n-  /frozenfoodssystem/customer_details.php\n\n## VERSION(S)\n\n- V1.0\n\n## Software Link\n\n- https://itsourc", "created": "2025-12-22T08:02:04Z", "labels": [], "context": "# itsourcecode  Online Frozen Foods Ordering System   V1.0  \"/frozenfoodssystem/customer_details.php\"  SQL injection # itsourcecode  Online Frozen Foods Ordering System   V1.0  \"/frozenfoodssystem/customer_details.php\"  SQL injection  \n\n# NAME OF AFFECTED PRODUCT(S)\n\n- Online Frozen Foods Ordering System\n\n## Vendor "}


identifier: gh_issue_3752909729
source: github_issue
status: new
created_at: 2025-12-22 09:10:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3752909729", "title": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-32de45d6-8993-451e-a78f-4e2c98b74195/issues/3", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-32de45d6-8993-451e-a78f-4e2c98b74195", "body_preview": "## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDepend", "created": "2025-12-22T09:02:57Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3752980086
source: github_issue
status: new
created_at: 2025-12-22 09:22:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3752980086", "title": "\ud83d\udea8 Automated Security Fixes Required (HIGH/CRITICAL)", "url": "https://github.com/artsiomborisevich/n8n-borisevich-test/issues/28", "user": "artsiomborisevich", "user_url": "https://github.com/artsiomborisevich", "repo": "n8n-borisevich-test", "body_preview": "@copilot Please fix the following HIGH and CRITICAL security vulnerabilities. Follow these steps:\n\n**MISSION CRITICAL PROTOCOL:**\nYou are FORBIDDEN from committing any code until you have verified the build passes AND all deprecated methods are fixed. Follow these steps strictly in order:\n\n1. **PHASE 1: INSPECTION**\n   - Examine the build.gradle file to understand current dependency versions\n   - Review the security alerts below\n   - Run: `./gradlew compileJava compileTestJava -Xlint:deprecation", "created": "2025-12-22T09:20:15Z", "labels": [], "context": "\ud83d\udea8 Automated Security Fixes Required (HIGH/CRITICAL) @copilot Please fix the following HIGH and CRITICAL security vulnerabilities. Follow these steps:\n\n**MISSION CRITICAL PROTOCOL:**\nYou are FORBIDDEN from committing any code until you have verified the"}


identifier: gh_issue_3752925097
source: github_issue
status: new
created_at: 2025-12-22 09:22:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3752925097", "title": "\ud83d\udea8 Security Vulnerabilities Detected", "url": "https://github.com/cbwinslow/arbfinder-suite/issues/38", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "arbfinder-suite", "body_preview": "## Security Vulnerabilities Detected\n\n\n### NPM Dependencies\n- Critical: 0\n- High: 1\n- Moderate: 0\n- Low: 0\n", "created": "2025-12-22T09:07:31Z", "labels": ["dependencies", "security", "critical"], "context": "\ud83d\udea8 Security Vulnerabilities Detected ## Security Vulnerabilities Detected\n\n\n### NPM Dependencies\n- Critical: 0\n- High: 1\n- Moderate: 0\n- Low: 0\n"}


identifier: gh_issue_3752910774
source: github_issue
status: new
created_at: 2025-12-22 09:22:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3752910774", "title": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-32de45d6-8993-451e-a78f-4e2c98b74195/issues/13", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-32de45d6-8993-451e-a78f-4e2c98b74195", "body_preview": "## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-web-6.1.6.jar</b></summary>\n\n<p>Spring Web</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDe", "created": "2025-12-22T09:03:12Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar ## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3752910703
source: github_issue
status: new
created_at: 2025-12-22 09:22:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3752910703", "title": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-32de45d6-8993-451e-a78f-4e2c98b74195/issues/12", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-32de45d6-8993-451e-a78f-4e2c98b74195", "body_preview": "## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-webmvc-6.1.6.jar</b></summary>\n\n<p>Spring Web MVC</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</", "created": "2025-12-22T09:03:11Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar ## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3752910421
source: github_issue
status: new
created_at: 2025-12-22 09:22:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3752910421", "title": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-32de45d6-8993-451e-a78f-4e2c98b74195/issues/8", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-32de45d6-8993-451e-a78f-4e2c98b74195", "body_preview": "## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-22T09:03:04Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3753032023
source: github_issue
status: new
created_at: 2025-12-22 09:34:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3753032023", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/AdamKruszczynski/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @AdamKruszczynski! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each ", "created": "2025-12-22T09:33:04Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @AdamKruszczynski! Welc"}


identifier: gh_issue_3753001320
source: github_issue
status: new
created_at: 2025-12-22 09:34:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3753001320", "title": "Latest 15 Papers - December 22, 2025", "url": "https://github.com/pstAmbition/DailyArXiv_contentmoderation/issues/3", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "DailyArXiv_contentmoderation", "body_preview": "**Please check the [Github](https://github.com/pstAmbition/DailyArXiv_contentmoderation) page for a better reading experience and more papers.**\n\n## Multimodal harmful content\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[When Harmful Content Gets Camouflaged: Unveiling Perception Failure of LVLMs with CamHarmTI](https://arxiv.org/abs/2512.03087v1)** | 2025-11-29 |  |\n| **[MTikGuard System: A Transformer-Based Multimodal System for Child-Safe Content Moderation on TikTok](https", "created": "2025-12-22T09:24:59Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 22, 2025 **Please check the [Github](https://github.com/pstAmbition/DailyArXiv_contentmoderation) page for a better reading experience and more papers.**\n\n## Multimodal harmful content\n| **Title** | **Date** |"}


identifier: gh_issue_3752990447
source: github_issue
status: new
created_at: 2025-12-22 09:34:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3752990447", "title": "Latest 15 Papers - December 22, 2025", "url": "https://github.com/pstAmbition/DailyArXiv_contentmoderation/issues/2", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "DailyArXiv_contentmoderation", "body_preview": "**Please check the [Github](https://github.com/pstAmbition/DailyArXiv_contentmoderation) page for a better reading experience and more papers.**\n\n## Intent Recognition\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[Enhancing Interpretability of AR-SSVEP-Based Motor Intention Recognition via CNN-BiLSTM and SHAP Analysis on EEG Data](https://arxiv.org/abs/2512.06730v1)** | 2025-12-07 |  |\n| **[Towards Data-efficient Customer Intent Recognition with Prompt-based Learning Paradigm](", "created": "2025-12-22T09:22:32Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 22, 2025 **Please check the [Github](https://github.com/pstAmbition/DailyArXiv_contentmoderation) page for a better reading experience and more papers.**\n\n## Intent Recognition\n| **Title** | **Date** | **Comme"}


identifier: gh_issue_3752954538
source: github_issue
status: new
created_at: 2025-12-22 09:34:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3752954538", "title": "Latest 15 Papers - December 22, 2025", "url": "https://github.com/pstAmbition/DailyArXiv_contentmoderation/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "DailyArXiv_contentmoderation", "body_preview": "**Please check the [Github](https://github.com/pstAmbition/DailyArXiv_contentmoderation) page for a better reading experience and more papers.**\n\n## Intent Recognition\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[Enhancing Interpretability of AR-SSVEP-Based Motor Intention Recognition via CNN-BiLSTM and SHAP Analysis on EEG Data](https://arxiv.org/abs/2512.06730v1)** | 2025-12-07 |  |\n| **[Towards Data-efficient Customer Intent Recognition with Prompt-based Learning Paradigm](", "created": "2025-12-22T09:14:10Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 22, 2025 **Please check the [Github](https://github.com/pstAmbition/DailyArXiv_contentmoderation) page for a better reading experience and more papers.**\n\n## Intent Recognition\n| **Title** | **Date** | **Comme"}


identifier: gh_issue_3752989716
source: github_issue
status: new
created_at: 2025-12-22 09:34:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3752989716", "title": "Dependency Dashboard", "url": "https://github.com/outscale/cloud-provider-osc/issues/583", "user": "Open-Source-Bot", "user_url": "https://github.com/Open-Source-Bot", "repo": "cloud-provider-osc", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n> [!NOTE]\nThese dependencies have not received updates for an extended period and may be unmaintained:\n\n<details>\n<summary>View abandoned dependencies (4)</summary>\n\n| Datasource | Name | Last Updated |\n|------------|------|-------------|\n| github-actions | `mindsers/changelog-reader-action` | `2024-03-10` |\n| gomod | `github.com/", "created": "2025-12-22T09:22:25Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n> [!NOTE]\nThese dependencies hav"}


identifier: gh_issue_3752983801
source: github_issue
status: new
created_at: 2025-12-22 09:34:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3752983801", "title": "Dependency Dashboard", "url": "https://github.com/outscale/osc-bsu-csi-driver/issues/1065", "user": "Open-Source-Bot", "user_url": "https://github.com/Open-Source-Bot", "repo": "osc-bsu-csi-driver", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n> [!NOTE]\nThese dependencies have not received updates for an extended period and may be unmaintained:\n\n<details>\n<summary>View abandoned dependencies (4)</summary>\n\n| Datasource | Name | Last Updated |\n|------------|------|-------------|\n| github-actions | `mindsers/changelog-reader-action` | `2024-03-10` |\n| gomod | `github.com/", "created": "2025-12-22T09:21:06Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n> [!NOTE]\nThese dependencies hav"}


identifier: gh_issue_3752981575
source: github_issue
status: new
created_at: 2025-12-22 09:34:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3752981575", "title": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected", "url": "https://github.com/truckercore/truckercore1/issues/157", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "truckercore1", "body_preview": "# Security Audit Report - 2025-12-22\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/util vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-9j5q-479x-43g2\nfix available via `npm audit fix --force`\nWill install @stryker-mutator/vitest-runner@8.7.1, which is outside the stated dependency range\nnode_modules/@stryker-mutator/util\n  @stryker-mutator/core  <=8.7.0\n  D", "created": "2025-12-22T09:20:35Z", "labels": ["security", "dependencies", "automated"], "context": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected # Security Audit Report - 2025-12-22\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/"}


identifier: gh_issue_3753005592
source: github_issue
status: new
created_at: 2025-12-22 09:47:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3753005592", "title": "[BleepingComputer] Critical RCE flaw impacts over 115,000 WatchGuard firewalls", "url": "https://github.com/SecOpsNews/news/issues/61247", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "news", "body_preview": "\n\nOver 115,000 WatchGuard Firebox devices exposed online remain unpatched against a critical remote code execution (RCE) vulnerability actively exploited in attacks. \\[...\\]\n\n\n\n<https://www.bleepingcomputer.com/news/security/over-115-000-watchguard-firewalls-vulnerable-to-ongoing-rce-attacks/>\n\n", "created": "2025-12-22T09:26:09Z", "labels": ["BleepingComputer"], "context": "[BleepingComputer] Critical RCE flaw impacts over 115,000 WatchGuard firewalls \n\nOver 115,000 WatchGuard Firebox devices exposed online remain unpatched against a critical remote code execution (RCE) vulnerability actively exploited in attacks. \\[...\\]\n\n\n\n<https://www.bleepingco"}


identifier: gh_issue_3752952732
source: github_issue
status: new
created_at: 2025-12-22 09:47:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3752952732", "title": "arXiv NEWS (2025-12-22)", "url": "https://github.com/agb94/arxiv-rss-newsletter/issues/197", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "arxiv-rss-newsletter", "body_preview": "# cs.SE updates on arXiv.org, Mon, 22 Dec 2025 05:00:00 +0000\n\n## [SpIDER: Spatially Informed Dense Embedding Retrieval for Software Issue Localization](https://arxiv.org/abs/2512.16956) [[pdf](https://arxiv.org/pdf/2512.16956.pdf)]\n\nAuthors: Shravan Chaudhari, Rahul Thomas Jacob, Mononito Goswami, Jiajun Cao, Shihab Rashid, Christian Bock\n\nTags: `LLM`\n\n Retrieving code units (e.g., files, classes, functions) that are semantically relevant to a given user query, bug report, or feature request fr", "created": "2025-12-22T09:13:50Z", "labels": ["news"], "context": "arXiv NEWS (2025-12-22) # cs.SE updates on arXiv.org, Mon, 22 Dec 2025 05:00:00 +0000\n\n## [SpIDER: Spatially Informed Dense Embedding Retrieval for Software Issue Localization](https://arxiv.org/abs/2512.16956) [[pdf](https:"}


identifier: gh_issue_3752939767
source: github_issue
status: new
created_at: 2025-12-22 09:47:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3752939767", "title": "\ud83d\udea8 URGENT: Security vulnerabilities detected", "url": "https://github.com/selectdimensions/k3s_home_lab/issues/5", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "k3s_home_lab", "body_preview": "## Security Alert\n\n    Critical or high-severity vulnerabilities have been detected in the project dependencies.\n\n    ### Action Required\n    - [ ] Review security scan results\n    - [ ] Apply security patches immediately\n    - [ ] Test in development environment\n    - [ ] Deploy fixes to production\n\n    ### Scan Results\n    See the latest security scan workflow for detailed vulnerability information.\n\n    ### Priority\n    This issue has been marked as urgent due to security implications.\n\n    -", "created": "2025-12-22T09:11:08Z", "labels": ["bug", "security", "urgent", "automated"], "context": "\ud83d\udea8 URGENT: Security vulnerabilities detected ## Security Alert\n\n    Critical or high-severity vulnerabilities have been detected in the project dependencies.\n\n    ### Action Required\n    - [ ] Review security scan results\n    - [ ] Apply securit"}


identifier: gh_issue_3753108825
source: github_issue
status: new
created_at: 2025-12-22 09:58:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3753108825", "title": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0/issues/14", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0", "body_preview": "## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-core-6.1.6.jar</b></summary>\n\n<p>Spring Core</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>", "created": "2025-12-22T09:51:37Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar ## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <"}


identifier: gh_issue_3753108735
source: github_issue
status: new
created_at: 2025-12-22 09:58:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3753108735", "title": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0/issues/13", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0", "body_preview": "## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-22T09:51:35Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3753108658
source: github_issue
status: new
created_at: 2025-12-22 09:58:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3753108658", "title": "CVE-2025-48988 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0/issues/12", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0", "body_preview": "## CVE-2025-48988 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-22T09:51:34Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48988 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48988 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3753108564
source: github_issue
status: new
created_at: 2025-12-22 09:58:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3753108564", "title": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0/issues/11", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0", "body_preview": "## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-web-6.1.6.jar</b></summary>\n\n<p>Spring Web</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDe", "created": "2025-12-22T09:51:32Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar ## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3753108468
source: github_issue
status: new
created_at: 2025-12-22 09:58:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3753108468", "title": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0/issues/10", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0", "body_preview": "## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-webmvc-6.1.6.jar</b></summary>\n\n<p>Spring Web MVC</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</", "created": "2025-12-22T09:51:30Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar ## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3753107697
source: github_issue
status: new
created_at: 2025-12-22 10:10:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3753107697", "title": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0/issues/1", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0", "body_preview": "## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDepend", "created": "2025-12-22T09:51:16Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3753159396
source: github_issue
status: new
created_at: 2025-12-22 10:23:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3753159396", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/ranjan11021991/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @ranjan11021991! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each st", "created": "2025-12-22T10:05:33Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @ranjan11021991! Welcom"}


identifier: gh_issue_3753177102
source: github_issue
status: new
created_at: 2025-12-22 10:23:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3753177102", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:68)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/211", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: ccca7f3db30bbabb9af463e937273ab1a80a5b5c5b3c41c85313f56f9ad1da4b\n**RuleId:** 7b18c86f-cfd1-3ef6-b2c5-a438c4b55d11\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-119\n**Tags:** CWE-119\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 68, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"SMU\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library function that ", "created": "2025-12-22T10:10:32Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:68) glog-fingerprint: ccca7f3db30bbabb9af463e937273ab1a80a5b5c5b3c41c85313f56f9ad1da4b\n**RuleId:** 7b18c86f-cfd1-3ef6-b2c5-a438c4b55d11\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3753177016
source: github_issue
status: new
created_at: 2025-12-22 10:23:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3753177016", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:80)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/207", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: 087505aecc7b552e7a89e7033d7f9326427c71da6bb4a7adf5823e8979bdbb1b\n**RuleId:** 93211a61-bb21-3296-870b-b57fa97344cb\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-119\n**Tags:** CWE-119\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 80, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"CP_MEC_JT1\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library functio", "created": "2025-12-22T10:10:31Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:80) glog-fingerprint: 087505aecc7b552e7a89e7033d7f9326427c71da6bb4a7adf5823e8979bdbb1b\n**RuleId:** 93211a61-bb21-3296-870b-b57fa97344cb\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3753176701
source: github_issue
status: new
created_at: 2025-12-22 10:23:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3753176701", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:95)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/203", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: 1de8bd6a698afa0eab2a5ce6b9ba8ebbd207adb788bbd91793fc4bbc4d75f818\n**RuleId:** 25ed9f63-3831-3324-9f99-ffe1dce6c5dd\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-119\n**Tags:** CWE-119\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 95, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"SDMA0\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library function tha", "created": "2025-12-22T10:10:29Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:95) glog-fingerprint: 1de8bd6a698afa0eab2a5ce6b9ba8ebbd207adb788bbd91793fc4bbc4d75f818\n**RuleId:** 25ed9f63-3831-3324-9f99-ffe1dce6c5dd\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3753176599
source: github_issue
status: new
created_at: 2025-12-22 10:23:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3753176599", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:98)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/202", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: 69b1926064f6087abc3c0dfc8c39e1c7e4ceb877a4b4d49a3e65dae8183447b1\n**RuleId:** 9df37544-8ffa-3643-a22a-16083c481560\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-119\n**Tags:** CWE-119\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 98, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"SDMA1\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library function tha", "created": "2025-12-22T10:10:29Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:98) glog-fingerprint: 69b1926064f6087abc3c0dfc8c39e1c7e4ceb877a4b4d49a3e65dae8183447b1\n**RuleId:** 9df37544-8ffa-3643-a22a-16083c481560\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3753176890
source: github_issue
status: new
created_at: 2025-12-22 10:23:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3753176890", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:92)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/204", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: bf8f1a52e823c59c9c4d6186d70af34250f85d328badeca19727b1e7aa90143c\n**RuleId:** 76da551a-4f97-30d5-8e6c-28f17a03c252\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-119\n**Tags:** CWE-119\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 92, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"RLC\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library function that ", "created": "2025-12-22T10:10:29Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:92) glog-fingerprint: bf8f1a52e823c59c9c4d6186d70af34250f85d328badeca19727b1e7aa90143c\n**RuleId:** 76da551a-4f97-30d5-8e6c-28f17a03c252\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3753149349
source: github_issue
status: new
created_at: 2025-12-22 10:35:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3753149349", "title": "npm audit failed (11.0/bugfixes)", "url": "https://github.com/glpi-project/glpi/issues/22457", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "glpi", "body_preview": "```\n# npm audit report\n\naltcha  0.8.0 - 2.2.4\nSeverity: moderate\nAltcha Proof-of-Work obfuscation mode cryptanalytic break - https://github.com/advisories/GHSA-mpmc-qchh-r9q8\nfix available via `npm audit fix`\nnode_modules/altcha\n\n1 moderate severity vulnerability\n\nTo address all issues, run:\n  npm audit fix\n```", "created": "2025-12-22T10:02:31Z", "labels": [], "context": "npm audit failed (11.0/bugfixes) ```\n# npm audit report\n\naltcha  0.8.0 - 2.2.4\nSeverity: moderate\nAltcha Proof-of-Work obfuscation mode cryptanalytic break - https://github.com/advisories/GHSA-mpmc-qchh-r9q8\nfix available via `npm au"}


identifier: gh_issue_3753035910
source: github_issue
status: new
created_at: 2025-12-22 10:35:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3753035910", "title": "\ud83d\udea8 Security vulnerabilities detected - 2025-12-22", "url": "https://github.com/fenago/drleelm/issues/3", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "drleelm", "body_preview": "\nAutomated security scan detected vulnerabilities that need attention.\n\nPlease review the security audit results and update dependencies accordingly.\n\n**Actions to take:**\n1. Run `npm audit` in the root directory for backend issues\n2. Run `pnpm audit` in the frontend directory for frontend issues\n3. Update vulnerable packages using `npm audit fix` or `pnpm update`\n4. Test the application after updates\n\nThis issue was automatically created by the security audit workflow.\n", "created": "2025-12-22T09:34:08Z", "labels": ["security", "dependencies", "automated"], "context": "\ud83d\udea8 Security vulnerabilities detected - 2025-12-22 \nAutomated security scan detected vulnerabilities that need attention.\n\nPlease review the security audit results and update dependencies accordingly.\n\n**Actions to take:**\n1. Run `npm audit` in the ro"}


identifier: gh_issue_3752996338
source: github_issue
status: new
created_at: 2025-12-22 10:35:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3752996338", "title": "Weekly Dependency Review - 2025-12-22", "url": "https://github.com/zazu-22/band_assist/issues/252", "user": "claude[bot]", "user_url": "https://github.com/apps/claude", "repo": "band_assist", "body_preview": "## Security Audit Summary\n\n\u2705 **No vulnerabilities found** - `npm audit` reports 0 vulnerabilities across all dependencies.\n\n---\n\n## Available Updates\n\n### \ud83d\udfe2 Safe Updates (Patch/Minor - Low Risk)\n\nThese updates are generally safe and can be applied with minimal risk:\n\n| Package | Current | Latest | Type |\n|---------|---------|--------|------|\n| `@supabase/supabase-js` | 2.87.3 | 2.89.0 | Minor |\n| `fast-check` | 4.4.0 | 4.5.2 | Minor |\n| `vitest` | 4.0.15 | 4.0.16 | Patch |\n| `lucide-react` | 0.5", "created": "2025-12-22T09:23:51Z", "labels": ["documentation", "dependencies"], "context": "Weekly Dependency Review - 2025-12-22 ## Security Audit Summary\n\n\u2705 **No vulnerabilities found** - `npm audit` reports 0 vulnerabilities across all dependencies.\n\n---\n\n## Available Updates\n\n### \ud83d\udfe2 Safe Updates (Patch/Minor - Low Risk)\n\nThes"}


identifier: gh_issue_3752995757
source: github_issue
status: new
created_at: 2025-12-22 10:35:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3752995757", "title": "\ud83d\udd12 New Security Vulnerabilities Detected", "url": "https://github.com/knol3j/HNH-Old/issues/4", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "HNH-Old", "body_preview": "\n## Security Alert\n\nThe weekly security audit has detected changes in vulnerability status.\n\n**Date**: 2025-12-22T09:23:40.585Z\n**Workflow Run**: https://github.com/knol3j/HNH-Old/actions/runs/20427571559\n\n### Action Required\n\n1. Review the audit reports in the workflow artifacts\n2. Run `npm audit` in each affected project\n3. Apply fixes using `npm audit fix` or `npm audit fix --force`\n4. Update SECURITY_AUDIT_COMPLETE.md with new findings\n\n### Projects Monitored\n\n- Main Project\n- HNH Pool\n- Hyb", "created": "2025-12-22T09:23:40Z", "labels": ["security", "automated"], "context": "\ud83d\udd12 New Security Vulnerabilities Detected \n## Security Alert\n\nThe weekly security audit has detected changes in vulnerability status.\n\n**Date**: 2025-12-22T09:23:40.585Z\n**Workflow Run**: https://github.com/knol3j/HNH-Old/actions/runs/2042757"}


identifier: gh_issue_3752985544
source: github_issue
status: new
created_at: 2025-12-22 10:35:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3752985544", "title": "\ud83d\udea8 Security vulnerabilities detected - 2025-12-22", "url": "https://github.com/CaviraOSS/PageLM/issues/104", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "PageLM", "body_preview": "\nAutomated security scan detected vulnerabilities that need attention.\n\nPlease review the security audit results and update dependencies accordingly.\n\n**Actions to take:**\n1. Run `npm audit` in the root directory for backend issues\n2. Run `pnpm audit` in the frontend directory for frontend issues\n3. Update vulnerable packages using `npm audit fix` or `pnpm update`\n4. Test the application after updates\n\nThis issue was automatically created by the security audit workflow.\n", "created": "2025-12-22T09:21:26Z", "labels": ["dependencies", "security", "automated"], "context": "\ud83d\udea8 Security vulnerabilities detected - 2025-12-22 \nAutomated security scan detected vulnerabilities that need attention.\n\nPlease review the security audit results and update dependencies accordingly.\n\n**Actions to take:**\n1. Run `npm audit` in the ro"}


identifier: gh_issue_3753135929
source: github_issue
status: new
created_at: 2025-12-22 10:48:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3753135929", "title": "[Post-Hackathon] Create dedicated backend for admin tasks", "url": "https://github.com/laylaadhar879-ops/hackathon/issues/39", "user": "xiaoniuniu89", "user_url": "https://github.com/xiaoniuniu89", "repo": "hackathon", "body_preview": "## Overview\nBuild a dedicated backend system to handle administrative tasks like managing recipes, charities, and monitoring donations.\n\n**Note:** This is a post-hackathon enhancement. Focus on MVP first!\n\n## Why we need this\nCurrently, recipe and charity data is managed manually in files. A backend admin system would allow:\n- Easy content management without editing code\n- Monitoring donations and analytics\n- Managing charity partnerships\n- User feedback moderation\n- Data backups and versioning\n", "created": "2025-12-22T09:58:18Z", "labels": ["enhancement", "post-hackathon"], "context": "[Post-Hackathon] Create dedicated backend for admin tasks ## Overview\nBuild a dedicated backend system to handle administrative tasks like managing recipes, charities, and monitoring donations.\n\n**Note:** This is a post-hackathon enhancement. Focus on MVP fi"}


identifier: gh_issue_3752967050
source: github_issue
status: new
created_at: 2025-12-22 10:48:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3752967050", "title": "\ud83d\udd12 Security Scan Alert - 2025-12-22", "url": "https://github.com/gavelinrobert-beep/ProjectNC/issues/76", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "ProjectNC", "body_preview": "## Security Vulnerabilities Detected\n\nThe automated security scan has detected potential vulnerabilities in the codebase.\n\n### Details\n- **Workflow Run**: [View Details](https://github.com/gavelinrobert-beep/ProjectNC/actions/runs/20427403342)\n- **Branch**: refs/heads/master\n- **Commit**: fe71bc616e06c9faaf3fe6209ac4f064b5792a92\n\n### Action Required\n1. Review the workflow logs for detailed vulnerability information\n2. Download the security reports from the workflow artifacts\n3. Assess the severi", "created": "2025-12-22T09:17:12Z", "labels": ["security", "automated", "vulnerability"], "context": "\ud83d\udd12 Security Scan Alert - 2025-12-22 ## Security Vulnerabilities Detected\n\nThe automated security scan has detected potential vulnerabilities in the codebase.\n\n### Details\n- **Workflow Run**: [View Details](https://github.com/gavelinrobe"}


identifier: gh_issue_3753293626
source: github_issue
status: new
created_at: 2025-12-22 11:00:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3753293626", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/antoniohernan/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @antoniohernan! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrat", "created": "2025-12-22T10:43:57Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @antoniohernan! Welcome to your Skills exe"}


identifier: gh_issue_3753277619
source: github_issue
status: new
created_at: 2025-12-22 11:00:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3753277619", "title": "Release apcu-panel-5.1.23-1.module+el9.6.0+22647+1741ae35 ALSA-2025:23309", "url": "https://github.com/AlmaLinux/updates/issues/1879", "user": "maccelf", "user_url": "https://github.com/maccelf", "repo": "updates", "body_preview": "php:8.3 security update\nSeverity: Moderate\nDescription\nPHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  \n\nSecurity Fix(es):  \n\n  * php: pgsql extension does not check for errors during escaping (CVE-2025-1735)\n  * php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix (CVE-2025-6491)\n  * php: PHP Hostname Null Character Vulnerability (CVE-2025-1220)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score", "created": "2025-12-22T10:39:07Z", "labels": [], "context": "Release apcu-panel-5.1.23-1.module+el9.6.0+22647+1741ae35 ALSA-2025:23309 php:8.3 security update\nSeverity: Moderate\nDescription\nPHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server.  \n\nSecurity Fix(es):  \n\n  * php: pgsql extension does not c"}


identifier: gh_issue_3753156638
source: github_issue
status: new
created_at: 2025-12-22 11:00:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3753156638", "title": "Marquez ui - vulnerability fixes", "url": "https://github.com/swar00pduthks/marquez/issues/9", "user": "swar00pduthks", "user_url": "https://github.com/swar00pduthks", "repo": "marquez", "body_preview": "nth-check-1.0.2 - CVE-2021-3803 - fix version v2.0.1\nhttp-proxy-middleware-2.0.6 - CVE-2024-21536 - fix version v2.0.7\nmicromatch-4.0.5 - CVE-2024-4067 - fix version - v4.0.8\nbody-parser-1.20.2 - CVE-2024 -45590 - fix version - v1.20.3\nCVE-2024-55565 - nanoid-3.3.7 - fix version - 3.3.8\nCVE-2025-27789 - runtime - 7.25.6 - fix version - v7.26.10\nCVE-2025-27789 -helpers-7.22.6 -V7.26.10", "created": "2025-12-22T10:04:45Z", "labels": [], "context": "Marquez ui - vulnerability fixes nth-check-1.0.2 - CVE-2021-3803 - fix version v2.0.1\nhttp-proxy-middleware-2.0.6 - CVE-2024-21536 - fix version v2.0.7\nmicromatch-4.0.5 - CVE-2024-4067 - fix version - v4.0.8\nbody-parser-1.20.2 - CVE-"}


identifier: gh_issue_3753306088
source: github_issue
status: new
created_at: 2025-12-22 11:00:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3753306088", "title": "\ud83d\udcdd Comprehensive Scenario Content Alignment & Quality Standardization", "url": "https://github.com/klausagnoletti/malware-and-monsters/issues/124", "user": "klausagnoletti", "user_url": "https://github.com/klausagnoletti", "repo": "malware-and-monsters", "body_preview": "# Comprehensive Scenario Content Alignment & Quality Standardization\n\n## Objective\n\nEnsure ALL 56 scenarios have consistent, high-quality organizational context that matches the enrichment pattern established in Phase 4 (17 enriched scenarios). Currently only 30% of scenarios have comprehensive organizational depth\u2014this issue tracks bringing all scenarios to the same quality level.\n\n## Current State\n\n**Quality Tiers:**\n- **Enriched (17 scenarios, 30%):** Full organizational context with stakehol", "created": "2025-12-22T10:47:09Z", "labels": ["priority: medium", "type: documentation", "category: im-handbook", "effort: high"], "context": "\ud83d\udcdd Comprehensive Scenario Content Alignment & Quality Standardization # Comprehensive Scenario Content Alignment & Quality Standardization\n\n## Objective\n\nEnsure ALL 56 scenarios have consistent, high-quality organizational context that matches the enrichment pattern est"}


identifier: gh_issue_3753292844
source: github_issue
status: new
created_at: 2025-12-22 11:00:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3753292844", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:68)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/236", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: ccca7f3db30bbabb9af463e937273ab1a80a5b5c5b3c41c85313f56f9ad1da4b\n**RuleId:** 7b18c86f-cfd1-3ef6-b2c5-a438c4b55d11\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-119\n**Tags:** CWE-119\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 68, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"SMU\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library function that ", "created": "2025-12-22T10:43:41Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:68) glog-fingerprint: ccca7f3db30bbabb9af463e937273ab1a80a5b5c5b3c41c85313f56f9ad1da4b\n**RuleId:** 7b18c86f-cfd1-3ef6-b2c5-a438c4b55d11\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3753292760
source: github_issue
status: new
created_at: 2025-12-22 11:00:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3753292760", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:80)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/232", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: 087505aecc7b552e7a89e7033d7f9326427c71da6bb4a7adf5823e8979bdbb1b\n**RuleId:** 93211a61-bb21-3296-870b-b57fa97344cb\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-119\n**Tags:** CWE-119\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 80, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"CP_MEC_JT1\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library functio", "created": "2025-12-22T10:43:39Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:80) glog-fingerprint: 087505aecc7b552e7a89e7033d7f9326427c71da6bb4a7adf5823e8979bdbb1b\n**RuleId:** 93211a61-bb21-3296-870b-b57fa97344cb\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3753292683
source: github_issue
status: new
created_at: 2025-12-22 11:00:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3753292683", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:95)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/228", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: 1de8bd6a698afa0eab2a5ce6b9ba8ebbd207adb788bbd91793fc4bbc4d75f818\n**RuleId:** 25ed9f63-3831-3324-9f99-ffe1dce6c5dd\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-119\n**Tags:** CWE-119\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 95, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"SDMA0\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library function tha", "created": "2025-12-22T10:43:38Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:95) glog-fingerprint: 1de8bd6a698afa0eab2a5ce6b9ba8ebbd207adb788bbd91793fc4bbc4d75f818\n**RuleId:** 25ed9f63-3831-3324-9f99-ffe1dce6c5dd\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3753292699
source: github_issue
status: new
created_at: 2025-12-22 11:00:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3753292699", "title": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:92)", "url": "https://github.com/matee999/amdsmi-glog-fork/issues/229", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "amdsmi-glog-fork", "body_preview": "glog-fingerprint: bf8f1a52e823c59c9c4d6186d70af34250f85d328badeca19727b1e7aa90143c\n**RuleId:** 76da551a-4f97-30d5-8e6c-28f17a03c252\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Severity:** HIGH\n**CWE:** CWE-119\n**Tags:** CWE-119\n**Language:** cpp\n## Location\n- File: `example/amd_smi_drm_example.cc`\n- Line: 92, Column: 8\n## Snippet\n```cpp\nstrcpy(name, \"RLC\")\n```\n## Remediation (rule help.markdown)\n## Description\n\nThe `strcpy` function in C++ is a standard library function that ", "created": "2025-12-22T10:43:38Z", "labels": ["sarif", "security", "copilot", "glog"], "context": "[Glog] \"Detected Use of Prohibited C Function (strcpy)\" (example/amd_smi_drm_example.cc:92) glog-fingerprint: bf8f1a52e823c59c9c4d6186d70af34250f85d328badeca19727b1e7aa90143c\n**RuleId:** 76da551a-4f97-30d5-8e6c-28f17a03c252\n**Message:** \"Detected Use of Prohibited C Function (strcpy)\"\n**Seve"}


identifier: gh_issue_3753350831
source: github_issue
status: new
created_at: 2025-12-22 11:12:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3753350831", "title": "Wiz - 'PR-Test' Branch Scan Overview", "url": "https://github.com/rmaury-org/juice-shop/issues/1", "user": "wiz-5d813949ef[bot]", "user_url": "https://github.com/apps/wiz-5d813949ef", "repo": "juice-shop", "body_preview": "<!-- WizIssue-1d9f648c504c9047d99f272cf811a9cfcb00c8146de3f19e3acd5756aa35f3f7-PR-Test -->\n\n<a><picture><source media=\"(prefers-color-scheme: dark)\" srcset=\"https://assets.wiz.io/wiz-code/banners/pull_request_banner_dark.svg\"><source media=\"(prefers-color-scheme: light)\" srcset=\"https://assets.wiz.io/wiz-code/banners/pull_request_banner_light.svg\"><img align=\"top\" valign=\"top\" alt=\"Wiz Remediation Pull Request Banner\" title=\"Wiz Remediation Pull Request Banner\" src=\"https://assets.wiz.io/wiz-cod", "created": "2025-12-22T11:01:51Z", "labels": ["Wiz-remediation"], "context": "Wiz - 'PR-Test' Branch Scan Overview <!-- WizIssue-1d9f648c504c9047d99f272cf811a9cfcb00c8146de3f19e3acd5756aa35f3f7-PR-Test -->\n\n<a><picture><source media=\"(prefers-color-scheme: dark)\" srcset=\"https://assets.wiz.io/wiz-code/banners/pull"}


identifier: gh_issue_3753287700
source: github_issue
status: new
created_at: 2025-12-22 11:12:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3753287700", "title": "[M-09] Insufficient available rewards will result in locked staked funds for users", "url": "https://github.com/unicode-Ind/Community-/issues/29", "user": "FarazAhmed1234", "user_url": "https://github.com/FarazAhmed1234", "repo": "Community-", "body_preview": "@Derastephh Thank you for contacting us. This repository provides tools for securely managing and processing transactions, ensuring your funds remain protected and handled safely.\n\nWe\u2019ve reviewed your request and marked the issue as resolved on our end.\n\nNext Steps:\nFor further assistance with any transaction, transfer, or coding concerns, please refer to the GitHub Action comment below to contact our support team. They will be happy to assist you.\n\nIssue Description:\n\n> ## Affected files\n> \n> `", "created": "2025-12-22T10:42:04Z", "labels": ["bug", "help wanted", "question"], "context": "[M-09] Insufficient available rewards will result in locked staked funds for users @Derastephh Thank you for contacting us. This repository provides tools for securely managing and processing transactions, ensuring your funds remain protected and handled safely.\n\nWe\u2019ve reviewed your"}


identifier: gh_issue_3753255834
source: github_issue
status: new
created_at: 2025-12-22 11:12:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3753255834", "title": "chore: Update React version from 19.1.1 to 19.1.2", "url": "https://github.com/suchit-simform/admin-panel-for-restaurant-menu-management/issues/22", "user": "suchit-simform", "user_url": "https://github.com/suchit-simform", "repo": "admin-panel-for-restaurant-menu-management", "body_preview": "- Critical Security Vulnerability in React Server Components\n    -  https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components", "created": "2025-12-22T10:31:36Z", "labels": [], "context": "chore: Update React version from 19.1.1 to 19.1.2 - Critical Security Vulnerability in React Server Components\n    -  https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components"}


identifier: gh_issue_3753181060
source: github_issue
status: new
created_at: 2025-12-22 11:12:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3753181060", "title": "[M-09] Insufficient available rewards will result in locked staked funds for users", "url": "https://github.com/360yuno-stack/nexalo/issues/20", "user": "Derastephh", "user_url": "https://github.com/Derastephh", "repo": "nexalo", "body_preview": "## Affected files\n\n`NexaloStaking.sol`\n\n## Description\n\nThe `NexaloStaking` contract contains a critical denial of service vulnerability that locks users' staked NXL tokens when the contract lacks sufficient WBTC to pay pending rewards. Both the `stake()` and `unstake()` functions unconditionally call `_claimRewards()`, which reverts if WBTC balance is insufficient, preventing users from accessing their staked funds.\n\n**Vulnerable Code:**\n```solidity\nfunction stake(uint256 amount) external nonRe", "created": "2025-12-22T10:11:37Z", "labels": [], "context": "[M-09] Insufficient available rewards will result in locked staked funds for users ## Affected files\n\n`NexaloStaking.sol`\n\n## Description\n\nThe `NexaloStaking` contract contains a critical denial of service vulnerability that locks users' staked NXL tokens when the contract lacks suf"}


identifier: gh_issue_3753185627
source: github_issue
status: new
created_at: 2025-12-22 11:37:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3753185627", "title": "Exercise: Expand your team with Copilot coding agent", "url": "https://github.com/MH1990/skills-expand-your-team-with-copilot/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-expand-your-team-with-copilot", "body_preview": "## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @MH1990! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll unlock the next level of your favorite AI-powered coding assistant. Let&#39;s learn how to assign Copilot coding tasks directly in GitHub! \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave ", "created": "2025-12-22T10:12:51Z", "labels": [], "context": "Exercise: Expand your team with Copilot coding agent ## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @MH1990! Welcome to yo"}


identifier: gh_issue_3753108118
source: github_issue
status: new
created_at: 2025-12-22 11:37:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3753108118", "title": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0/issues/6", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0", "body_preview": "## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-22T09:51:24Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3753108024
source: github_issue
status: new
created_at: 2025-12-22 11:37:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3753108024", "title": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0/issues/5", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-5822203e-9f75-4bb3-b80c-5003cf341eb0", "body_preview": "## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependen", "created": "2025-12-22T09:51:23Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3753486323
source: github_issue
status: new
created_at: 2025-12-22 11:49:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3753486323", "title": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-fdb7b8d3-adde-4498-916c-8a1f68e9eac4/issues/6", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-fdb7b8d3-adde-4498-916c-8a1f68e9eac4", "body_preview": "## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>activesupport-4.2.11.1.gem</b></summary>\n\n<p>A toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Rich support for multibyte strings, internationalization, time zones, and testing.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/activesupport-4.", "created": "2025-12-22T11:47:20Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem ## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3753486059
source: github_issue
status: new
created_at: 2025-12-22 11:49:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3753486059", "title": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-fdb7b8d3-adde-4498-916c-8a1f68e9eac4/issues/2", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-fdb7b8d3-adde-4498-916c-8a1f68e9eac4", "body_preview": "## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>addressable-2.7.0.gem</b></summary>\n\n<p>Addressable is an alternative implementation to the URI implementation that is\npart of Ruby's standard library. It is flexible, offers heuristic parsing, and\nadditionally provides extensive support for IRIs and URI templates.\n</p>\n<p>Library home page: <a hre", "created": "2025-12-22T11:47:14Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem ## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3753526928
source: github_issue
status: new
created_at: 2025-12-22 12:14:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3753526928", "title": "jest-config-ibm-cloud-cognitive-1.40.0-rc.0.tgz: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/carbon-design-system/ibm-products/issues/8757", "user": "ibm-mend-app[bot]", "user_url": "https://github.com/apps/ibm-mend-app", "repo": "ibm-products", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jest-config-ibm-cloud-cognitive-1.40.0-rc.0.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/carbon-design-system/ibm-products/commit/737b4767c82160629b1129b32dbcb47ee63ce129\">737b4767c82160629b1129b32dbcb47ee63ce12", "created": "2025-12-22T12:00:57Z", "labels": ["status: needs triage \ud83d\udd75\ufe0f\u200d\u2640\ufe0f", "type: a11y \u267f", "Mend: dependency security vulnerability"], "context": "jest-config-ibm-cloud-cognitive-1.40.0-rc.0.tgz: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jest-config-ibm-cloud-cognitive-1.40.0-rc.0.tgz"}


identifier: gh_issue_3753653338
source: github_issue
status: new
created_at: 2025-12-22 12:51:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3753653338", "title": "Add Capability Assessment: \"What We Are Capable Of\" Survey", "url": "https://github.com/STEPHENIESGEM/ridewire/issues/4", "user": "STEPHENIESGEM", "user_url": "https://github.com/STEPHENIESGEM", "repo": "ridewire", "body_preview": "Implement a multi-question capability assessment survey that maps your hub's actual resources, skills, and what people can mobilize in real time. This produces a \"What We Are Capable Of\" report so leadership and ops know exactly what they can do, where the gaps are, and how to coordinate.\n\n### Purpose\nWhen crisis or high tension hits, you need to know in the first 30 minutes:\n- What skills are ready to deploy (medical, tech, logistics, comms, etc.)\n- What resources exist (shelters, vehicles, foo", "created": "2025-12-22T12:36:44Z", "labels": [], "context": "Add Capability Assessment: \"What We Are Capable Of\" Survey Implement a multi-question capability assessment survey that maps your hub's actual resources, skills, and what people can mobilize in real time. This produces a \"What We Are Capable Of\" report so lea"}


identifier: gh_issue_3753399967
source: github_issue
status: new
created_at: 2025-12-22 12:51:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3753399967", "title": "[BleepingComputer] Not all CISA-linked alerts are urgent: ASUS Live Update CVE-2025-59374", "url": "https://github.com/SecOpsNews/news/issues/61252", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "news", "body_preview": "\n\nAn ASUS Live Update vulnerability tracked as CVE-2025-59374 has been making the rounds in infosec feeds, with some headlines implying recent or ongoing exploitation. A closer look, however, shows the CVE documents a\u00a0historic supply-chain attack in an End-of-Life (EoL) software product, not a new attack. \\[...\\]\n\n\n\n<https://www.bleepingcomputer.com/news/security/not-all-cisa-linked-alerts-are-urgent-asus-live-update-cve-2025-59374/>\n\n", "created": "2025-12-22T11:16:21Z", "labels": ["BleepingComputer"], "context": "[BleepingComputer] Not all CISA-linked alerts are urgent: ASUS Live Update CVE-2025-59374 \n\nAn ASUS Live Update vulnerability tracked as CVE-2025-59374 has been making the rounds in infosec feeds, with some headlines implying recent or ongoing exploitation. A closer look, however, shows th"}


identifier: gh_issue_3753320673
source: github_issue
status: new
created_at: 2025-12-22 12:51:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3753320673", "title": "Smart Labels Market Size and Competitive Landscape 2032", "url": "https://github.com/miajones3098-arch/REPOTS/issues/115", "user": "miajones3098-arch", "user_url": "https://github.com/miajones3098-arch", "repo": "REPOTS", "body_preview": "<h2 data-start=\"95\" data-end=\"159\"><strong data-start=\"98\" data-end=\"159\">Smart Labels Market Trends, Growth &amp; Forecast (2024&ndash;2031)</strong></h2>\n<p data-start=\"161\" data-end=\"582\">The <strong data-start=\"165\" data-end=\"195\">Global <a href=\"https://www.metastatinsight.com/report/smart-labels-market\">Smart Labels Market</a></strong>&nbsp;is emerging as one of the most transformative segments within the labeling and tracking industry. Advanced technologies such as <strong data-start=\"324", "created": "2025-12-22T10:51:22Z", "labels": [], "context": "Smart Labels Market Size and Competitive Landscape 2032 <h2 data-start=\"95\" data-end=\"159\"><strong data-start=\"98\" data-end=\"159\">Smart Labels Market Trends, Growth &amp; Forecast (2024&ndash;2031)</strong></h2>\n<p data-start=\"161\" data-end=\"582\">The <stro"}


identifier: gh_issue_3753052003
source: github_issue
status: new
created_at: 2025-12-22 12:51:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3753052003", "title": "Consider using Renovate instead of Dependabot for dependency updates", "url": "https://github.com/firezone/firezone/issues/11451", "user": "klochowicz", "user_url": "https://github.com/klochowicz", "repo": "firezone", "body_preview": "Dependabot's cooldown feature is broken, as it resets its timer whenever a dependency has a new version :( \n\nRenovate tracks these cooldown timers *independently*, giving us exactly the behaviour we want (ie. working cooldown to minimise supply chain attacks):\nhttps://docs.renovatebot.com/key-concepts/minimum-release-age/\n\n## pros\n- working dependency cooldown feature\n- `.tool-versions` support\n- dependency dashboard screen - supposedly easier management\n- (optionally) - auto-merge patch version", "created": "2025-12-22T09:38:02Z", "labels": [], "context": "Consider using Renovate instead of Dependabot for dependency updates Dependabot's cooldown feature is broken, as it resets its timer whenever a dependency has a new version :( \n\nRenovate tracks these cooldown timers *independently*, giving us exactly the behaviour we w"}


identifier: gh_issue_3753720134
source: github_issue
status: new
created_at: 2025-12-22 13:03:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3753720134", "title": "spring-boot-starter-web-3.2.5.jar: 14 vulnerabilities (highest severity is: 9.6)", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-7fd264bf-9852-47e7-b883-1aa4ff83cf63/issues/2", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-7fd264bf-9852-47e7-b883-1aa4ff83cf63", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-boot-starter-web-3.2.5.jar</b></summary>\n\n<p></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-7fd264bf-9852-47e7-b883-1aa4ff83cf63/commit/bc8f1802c9ade0038ae73636b33de5b65f2", "created": "2025-12-22T12:57:30Z", "labels": ["Mend: dependency security vulnerability"], "context": "spring-boot-starter-web-3.2.5.jar: 14 vulnerabilities (highest severity is: 9.6) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-boot-starter-web-3.2.5.jar</b></summary>"}


identifier: gh_issue_3753681103
source: github_issue
status: new
created_at: 2025-12-22 13:03:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3753681103", "title": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-ade52c82-fb9d-4bbc-bc44-6c6c965bb34c/issues/7", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-ade52c82-fb9d-4bbc-bc44-6c6c965bb34c", "body_preview": "## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>activesupport-4.2.11.1.gem</b></summary>\n\n<p>A toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Rich support for multibyte strings, internationalization, time zones, and testing.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/activesupport-4.", "created": "2025-12-22T12:44:09Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem ## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3753680795
source: github_issue
status: new
created_at: 2025-12-22 13:03:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3753680795", "title": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-ade52c82-fb9d-4bbc-bc44-6c6c965bb34c/issues/3", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-ade52c82-fb9d-4bbc-bc44-6c6c965bb34c", "body_preview": "## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>addressable-2.7.0.gem</b></summary>\n\n<p>Addressable is an alternative implementation to the URI implementation that is\npart of Ruby's standard library. It is flexible, offers heuristic parsing, and\nadditionally provides extensive support for IRIs and URI templates.\n</p>\n<p>Library home page: <a hre", "created": "2025-12-22T12:44:03Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem ## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3753601899
source: github_issue
status: new
created_at: 2025-12-22 13:03:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3753601899", "title": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4d7fa166-26cd-4ce7-8427-aa1fb0820678/issues/27", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4d7fa166-26cd-4ce7-8427-aa1fb0820678", "body_preview": "## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-web-6.1.6.jar</b></summary>\n\n<p>Spring Web</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDe", "created": "2025-12-22T12:23:11Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar ## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3753601432
source: github_issue
status: new
created_at: 2025-12-22 13:03:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3753601432", "title": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4d7fa166-26cd-4ce7-8427-aa1fb0820678/issues/21", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4d7fa166-26cd-4ce7-8427-aa1fb0820678", "body_preview": "## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-webmvc-6.1.6.jar</b></summary>\n\n<p>Spring Web MVC</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</", "created": "2025-12-22T12:23:06Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar ## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3753702732
source: github_issue
status: new
created_at: 2025-12-22 13:26:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3753702732", "title": "Improve the `deno audit` exit code", "url": "https://github.com/denoland/deno/issues/31702", "user": "Amatewasu", "user_url": "https://github.com/Amatewasu", "repo": "deno", "body_preview": "Version: Deno 2.6.3\n\nThank you for bringing `deno audit`! Currently, `deno audit` returns a exit code of `1` if it has a vulnerability with a severity `high` regardless of the `level` passed in params.\n\n```bash\n$ deno -v\ndeno 2.6.3\n$ deno audit\n..\nFound 12 vulnerabilities\nSeverity: 2 low, 6 moderate, 4 high, 0 critical\n$ echo $?\n1\n# \u2705\n$ deno audit --level=high\n...\nFound 12 vulnerabilities\nSeverity: 2 low, 6 moderate, 4 high, 0 critical\n$ echo $?\n1\n# \u2705\n$ deno audit --level=critical\n...\nFound 12 v", "created": "2025-12-22T12:51:38Z", "labels": [], "context": "Improve the `deno audit` exit code Version: Deno 2.6.3\n\nThank you for bringing `deno audit`! Currently, `deno audit` returns a exit code of `1` if it has a vulnerability with a severity `high` regardless of the `level` passed in params"}


identifier: gh_issue_3753697694
source: github_issue
status: new
created_at: 2025-12-22 13:26:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3753697694", "title": "Security Health Check - GOOD (85/100) - 2025-12-22", "url": "https://github.com/Sami9889/Sami.dev-website/issues/241", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/22/2025, 12:49:43 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 9\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Secur", "created": "2025-12-22T12:49:48Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-22 # Security Health Check Report\n\n**Generated:** 12/22/2025, 12:49:43 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security In"}


identifier: gh_issue_3753681168
source: github_issue
status: new
created_at: 2025-12-22 13:26:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3753681168", "title": "CVE-2021-28834 (Critical) detected in kramdown-2.1.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-ade52c82-fb9d-4bbc-bc44-6c6c965bb34c/issues/8", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-ade52c82-fb9d-4bbc-bc44-6c6c965bb34c", "body_preview": "## CVE-2021-28834 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>kramdown-2.1.0.gem</b></summary>\n\n<p>kramdown is yet-another-markdown-parser but fast, pure Ruby,\nusing a strict syntax definition and supporting several common extensions.\n</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/kramdown-2.1.0.gem\">https://rubygems.org/gems/kramdown-2.1.0", "created": "2025-12-22T12:44:11Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-28834 (Critical) detected in kramdown-2.1.0.gem ## CVE-2021-28834 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3753680868
source: github_issue
status: new
created_at: 2025-12-22 13:26:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3753680868", "title": "CVE-2020-14001 (Critical) detected in kramdown-2.1.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-ade52c82-fb9d-4bbc-bc44-6c6c965bb34c/issues/4", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-ade52c82-fb9d-4bbc-bc44-6c6c965bb34c", "body_preview": "## CVE-2020-14001 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>kramdown-2.1.0.gem</b></summary>\n\n<p>kramdown is yet-another-markdown-parser but fast, pure Ruby,\nusing a strict syntax definition and supporting several common extensions.\n</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/kramdown-2.1.0.gem\">https://rubygems.org/gems/kramdown-2.1.0", "created": "2025-12-22T12:44:04Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2020-14001 (Critical) detected in kramdown-2.1.0.gem ## CVE-2020-14001 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3753824459
source: github_issue
status: new
created_at: 2025-12-22 13:39:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3753824459", "title": "[Critical] SQL Injection in src/main/java/com/example/UserController.java:45", "url": "https://github.com/ElafNawaf/veracode/issues/28", "user": "ElafNawaf", "user_url": "https://github.com/ElafNawaf", "repo": "veracode", "body_preview": "**Vulnerability Details**\n\n**Type**: SQL Injection\n**Severity**: VulnerabilitySeverity.CRITICAL\n**CWE ID**: CWE-89\n**File Path**: src/main/java/com/example/UserController.java\n**Line Number**: 45\n**Confidence Score**: 0.95\n**Exploitable**: Yes\n\n**Description**:\nSQL injection vulnerability in user lookup. User input is directly concatenated into SQL query without sanitization.\n\n\n**Code Snippet**:\n```\nString query = \"SELECT ** FROM users WHERE id = \" + userId;\n```\n\n\n**Remediation**:\nUse parameteri", "created": "2025-12-22T13:33:47Z", "labels": ["severity-critical", "vulnerability", "sql-injection"], "context": "[Critical] SQL Injection in src/main/java/com/example/UserController.java:45 **Vulnerability Details**\n\n**Type**: SQL Injection\n**Severity**: VulnerabilitySeverity.CRITICAL\n**CWE ID**: CWE-89\n**File Path**: src/main/java/com/example/UserController.java\n**Line Number**: 45\n**Co"}


identifier: gh_issue_3753806708
source: github_issue
status: new
created_at: 2025-12-22 13:39:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3753806708", "title": "Upgrade `github.com/btcsuite/btcd` from v0.23.4 to Latest Version", "url": "https://github.com/hiromaily/go-crypto-wallet/issues/36", "user": "hiromaily", "user_url": "https://github.com/hiromaily", "repo": "go-crypto-wallet", "body_preview": "# Upgrade `github.com/btcsuite/btcd` from v0.23.4 to Latest Version\n\n## Summary\n\nThis issue tracks the upgrade of `github.com/btcsuite/btcd` from v0.23.4 to the latest version (v0.24.2+). This upgrade is critical for security fixes, bug fixes, and maintaining compatibility with the Bitcoin network.\n\n## Current State\n\n- **Current Version**: `github.com/btcsuite/btcd v0.23.4`\n- **Replace Directive**: The `go.mod` file contains a replace directive forcing v0.23.0:\n  ```go\n  github.com/btcsuite/btcd", "created": "2025-12-22T13:26:54Z", "labels": [], "context": "Upgrade `github.com/btcsuite/btcd` from v0.23.4 to Latest Version # Upgrade `github.com/btcsuite/btcd` from v0.23.4 to Latest Version\n\n## Summary\n\nThis issue tracks the upgrade of `github.com/btcsuite/btcd` from v0.23.4 to the latest version (v0.24.2+). This upgrade"}


identifier: gh_issue_3753865732
source: github_issue
status: new
created_at: 2025-12-22 13:51:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3753865732", "title": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability", "url": "https://github.com/BUPT424201/CVE/issues/3", "user": "BUPT424201", "user_url": "https://github.com/BUPT424201", "repo": "CVE", "body_preview": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability\n\nNAME OF AFFECTED PRODUCT(S)\n- Student Managemen System\n\nVendor Homepage\nhttps://itsourcecode.com/free-projects/php-project/student-management-system-in-php-with-source-code/\n\nAFFECTED AND/OR FIXED VERSION(S)\n- V1.0\n\nVuldb Submitter\n- BUPT_424201\n\n# Vulnerable File\n-/list_report.php\n\n## VERSION(S)\n- V1.0\n\n## Software Link\nhttps://itsourcecode.com/wp-content/uploads/2021/02/Student-Management-System-In-PHP-Source-Code.zip\n\n##", "created": "2025-12-22T13:49:13Z", "labels": [], "context": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability itsourcecode Student Management System V1.0 SQL Injection Vulnerability\n\nNAME OF AFFECTED PRODUCT(S)\n- Student Managemen System\n\nVendor Homepage\nhttps://itsourcecode.com/free-projects/php-project/stud"}


identifier: gh_issue_3753863733
source: github_issue
status: new
created_at: 2025-12-22 13:51:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3753863733", "title": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability", "url": "https://github.com/BUPT424201/CVE/issues/2", "user": "BUPT424201", "user_url": "https://github.com/BUPT424201", "repo": "CVE", "body_preview": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability\n\nNAME OF AFFECTED PRODUCT(S)\n- Student Managemen System\n\nVendor Homepage\nhttps://itsourcecode.com/free-projects/php-project/student-management-system-in-php-with-source-code/\n\nAFFECTED AND/OR FIXED VERSION(S)\n- V1.0\n\nVuldb Submitter\n- BUPT_424201\n\n# Vulnerable File\n-/form137.php\n\n## VERSION(S)\n- V1.0\n\n## Software Link\nhttps://itsourcecode.com/wp-content/uploads/2021/02/Student-Management-System-In-PHP-Source-Code.zip\n\n## PRO", "created": "2025-12-22T13:48:34Z", "labels": [], "context": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability itsourcecode Student Management System V1.0 SQL Injection Vulnerability\n\nNAME OF AFFECTED PRODUCT(S)\n- Student Managemen System\n\nVendor Homepage\nhttps://itsourcecode.com/free-projects/php-project/stud"}


identifier: gh_issue_3753861941
source: github_issue
status: new
created_at: 2025-12-22 13:51:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3753861941", "title": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability", "url": "https://github.com/BUPT424201/CVE/issues/1", "user": "BUPT424201", "user_url": "https://github.com/BUPT424201", "repo": "CVE", "body_preview": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability\n\nNAME OF AFFECTED PRODUCT(S)\n- Student Managemen System\n\nVendor Homepage\nhttps://itsourcecode.com/free-projects/php-project/student-management-system-in-php-with-source-code/\n\nAFFECTED AND/OR FIXED VERSION(S)\n- V1.0\n\nVuldb Submitter\n-  BUPT_424201\n\n# Vulnerable File\n-/delsub.php\n\n## VERSION(S)\n- V1.0\n\n## Software Link\nhttps://itsourcecode.com/wp-content/uploads/2021/02/Student-Management-System-In-PHP-Source-Code.zip\n\n## PRO", "created": "2025-12-22T13:47:55Z", "labels": [], "context": "itsourcecode Student Management System V1.0 SQL Injection Vulnerability itsourcecode Student Management System V1.0 SQL Injection Vulnerability\n\nNAME OF AFFECTED PRODUCT(S)\n- Student Managemen System\n\nVendor Homepage\nhttps://itsourcecode.com/free-projects/php-project/stud"}


identifier: gh_issue_3753849446
source: github_issue
status: new
created_at: 2025-12-22 13:51:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3753849446", "title": "[Critical] SQL Injection in src/main/java/com/example/UserController.java:45", "url": "https://github.com/ElafNawaf/veracode/issues/33", "user": "ElafNawaf", "user_url": "https://github.com/ElafNawaf", "repo": "veracode", "body_preview": "**Vulnerability Details**\n\n**Type**: SQL Injection\n**Severity**: VulnerabilitySeverity.CRITICAL\n**CWE ID**: CWE-89\n**File Path**: src/main/java/com/example/UserController.java\n**Line Number**: 45\n**Confidence Score**: 0.95\n**Exploitable**: Yes\n\n**Description**:\nSQL injection vulnerability in user lookup. User input is directly concatenated into SQL query without sanitization.\n\n\n**Code Snippet**:\n```\nString query = \"SELECT ** FROM users WHERE id = \" + userId;\n```\n\n\n**Remediation**:\nUse parameteri", "created": "2025-12-22T13:43:35Z", "labels": ["severity-critical", "vulnerability", "sql-injection"], "context": "[Critical] SQL Injection in src/main/java/com/example/UserController.java:45 **Vulnerability Details**\n\n**Type**: SQL Injection\n**Severity**: VulnerabilitySeverity.CRITICAL\n**CWE ID**: CWE-89\n**File Path**: src/main/java/com/example/UserController.java\n**Line Number**: 45\n**Co"}


identifier: gh_issue_3753722891
source: github_issue
status: new
created_at: 2025-12-22 13:51:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3753722891", "title": "Add REST API for Direct Agent Interaction (Testing & Integration)", "url": "https://github.com/gpt153/health-agent/issues/25", "user": "gpt153", "user_url": "https://github.com/gpt153", "repo": "health-agent", "body_preview": "# REST API for Health Agent - Implementation Plan\n\n## Overview\n\nAdd a REST API layer to the health agent to enable direct interaction without requiring Telegram. This will support:\n1. **Automated testing** - SCAR and PO can test agent functionality programmatically\n2. **Integration testing** - Verify memory retention, reminders, and data persistence\n3. **Development workflow** - Faster iteration without Telegram overhead\n\n## Why REST API?\n\n### Current Limitations\n- **Telegram-only access** - Tes", "created": "2025-12-22T12:58:40Z", "labels": [], "context": "Add REST API for Direct Agent Interaction (Testing & Integration) # REST API for Health Agent - Implementation Plan\n\n## Overview\n\nAdd a REST API layer to the health agent to enable direct interaction without requiring Telegram. This will support:\n1. **Automated test"}


identifier: gh_issue_3753885502
source: github_issue
status: new
created_at: 2025-12-22 14:04:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3753885502", "title": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4be61c10-868b-4ff1-ac76-04075f0d86bd/issues/6", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4be61c10-868b-4ff1-ac76-04075f0d86bd", "body_preview": "## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>activesupport-4.2.11.1.gem</b></summary>\n\n<p>A toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Rich support for multibyte strings, internationalization, time zones, and testing.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/activesupport-4.", "created": "2025-12-22T13:54:59Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem ## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3753885134
source: github_issue
status: new
created_at: 2025-12-22 14:04:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3753885134", "title": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4be61c10-868b-4ff1-ac76-04075f0d86bd/issues/2", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4be61c10-868b-4ff1-ac76-04075f0d86bd", "body_preview": "## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>addressable-2.7.0.gem</b></summary>\n\n<p>Addressable is an alternative implementation to the URI implementation that is\npart of Ruby's standard library. It is flexible, offers heuristic parsing, and\nadditionally provides extensive support for IRIs and URI templates.\n</p>\n<p>Library home page: <a hre", "created": "2025-12-22T13:54:53Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem ## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3753749014
source: github_issue
status: new
created_at: 2025-12-22 14:16:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3753749014", "title": "Get the expert Mobile App Development Abu Dhabi solutions by DXB APPS", "url": "https://github.com/douglascraigschmidt/Android-App-Development/issues/37", "user": "dxbappsabudhabi1", "user_url": "https://github.com/dxbappsabudhabi1", "repo": "Android-App-Development", "body_preview": "The current competitive business environment requires businesses to have dependable mobile solutions that can be used to access and maintain users. DXB APPS delivers high-impact [mobile app development Abu Dhabi](https://dxbapps.com/mobile-app-development-abudhabi.php) services that combine strategy, design, and technology. Our ideas are converted into scalable applications through quality mobile application development Abu Dhabi solutions. Our organised app strategy guarantees performance, safe", "created": "2025-12-22T13:07:31Z", "labels": [], "context": "Get the expert Mobile App Development Abu Dhabi solutions by DXB APPS The current competitive business environment requires businesses to have dependable mobile solutions that can be used to access and maintain users. DXB APPS delivers high-impact [mobile app developmen"}


identifier: gh_issue_3753945716
source: github_issue
status: new
created_at: 2025-12-22 14:17:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3753945716", "title": "[Dependency]: Update Apache Log4j to version >= 2.25.3 to fix a security vulnerability", "url": "https://github.com/openo-beta/Open-O/issues/1055", "user": "LiamStanziani", "user_url": "https://github.com/LiamStanziani", "repo": "Open-O", "body_preview": "### Dependency\nApache Log4j\n\n### Current Version\n2.25.1\n\n### Target Version\n2.25.3\n\n### Reason\n\nSecurity vulnerability\n\n### Breaking Changes\n\n- No major breaking changes currently observed, only bumped by 2 versions\n\n### Testing\n\n- Run the tests\n- Smoke test the application\n\n### Priority\n\nCritical (Security fix)\n\n### Checklist\n\n- [x] I have reviewed the changelog for breaking changes\n- [x] I have identified all affected code areas\n- [ ] I have a rollback plan if issues arise", "created": "2025-12-22T14:13:11Z", "labels": ["dependencies", "type: maintenance"], "context": "[Dependency]: Update Apache Log4j to version >= 2.25.3 to fix a security vulnerability ### Dependency\nApache Log4j\n\n### Current Version\n2.25.1\n\n### Target Version\n2.25.3\n\n### Reason\n\nSecurity vulnerability\n\n### Breaking Changes\n\n- No major breaking changes currently observed, only bumpe"}


identifier: gh_issue_3753995799
source: github_issue
status: new
created_at: 2025-12-22 14:28:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3753995799", "title": "Renovate Dashboard \ud83e\udd16", "url": "https://github.com/shelken/home-ops/issues/518", "user": "my-action-bot[bot]", "user_url": "https://github.com/apps/my-action-bot", "repo": "home-ops", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Open\n\nThe following updates have all been created. To force a retry/rebase of any, click on a checkbox below.\n\n - [ ] <!-- rebase-branch=renovate/ghcr.io-home-operations-charts-mirror-keda-2.x -->[fix(container): update image ghcr.io/home-operations/charts-mirror/keda ( 2.18.2 \u2192 2.18.3 )](../pull/514)\n - [ ] <!-- rebase-branch=", "created": "2025-12-22T14:26:30Z", "labels": [], "context": "Renovate Dashboard \ud83e\udd16 This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Open\n\nThe following updates h"}


