# leads

identifier: gh_issue_3741184857
source: github_issue
status: new
created_at: 2025-12-18 03:55:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3741184857", "title": "rdoc-3.12.2.gem: 2 vulnerabilities (highest severity is: 7.5) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Paul-Kemp_1218_023535_gh_gw1/issues/4", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Paul-Kemp_1218_023535_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>rdoc-3.12.2.gem</strong></summary>\n\nRDoc produces HTML and command-line documentation for Ruby projects.  RDoc\nincludes the +rdoc+ and +ri+ tools for generating and displaying online\ndocumentation.\n\nSee RDoc for a description of RDoc's markup and basic use.\n\n\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/rdoc-3.12.2.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | ", "created": "2025-12-18T02:37:34Z", "labels": [], "context": "rdoc-3.12.2.gem: 2 vulnerabilities (highest severity is: 7.5) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>rdoc-3.12.2.gem</strong></summary>\n\nRDoc produces HTML and command-line documentation for Ruby projects.  RDoc\nincludes the +rdoc+ and +ri+ tools fo"}


identifier: gh_issue_3741184845
source: github_issue
status: new
created_at: 2025-12-18 03:55:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3741184845", "title": "aws-sdk-2.0.48.gem: 1 vulnerabilities (highest severity is: 9.8) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Paul-Kemp_1218_023535_gh_gw1/issues/3", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Paul-Kemp_1218_023535_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>aws-sdk-2.0.48.gem</strong></summary>\n\nThe official AWS SDK for Ruby. Provides both resource oriented interfaces and API clients for AWS services.\n\n\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/aws-sdk-2.0.48.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------", "created": "2025-12-18T02:37:33Z", "labels": [], "context": "aws-sdk-2.0.48.gem: 1 vulnerabilities (highest severity is: 9.8) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>aws-sdk-2.0.48.gem</strong></summary>\n\nThe official AWS SDK for Ruby. Provides both resource oriented interfaces and API clients for AWS services.\n\n"}


identifier: gh_issue_3741332130
source: github_issue
status: new
created_at: 2025-12-18 04:07:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3741332130", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/shazaakma-png/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @shazaakma-png! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each ste", "created": "2025-12-18T03:47:58Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @shazaakma-png! Welcome"}


identifier: gh_issue_3741331663
source: github_issue
status: new
created_at: 2025-12-18 04:07:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3741331663", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/hamdankisman-cloud/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @hamdankisman-cloud! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete eac", "created": "2025-12-18T03:47:38Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @hamdankisman-cloud! We"}


identifier: gh_issue_3741254752
source: github_issue
status: new
created_at: 2025-12-18 04:07:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3741254752", "title": "Exercise: Expand your team with Copilot coding agent", "url": "https://github.com/nredllapalli/skills-expand-your-team-with-copilot/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-expand-your-team-with-copilot", "body_preview": "## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @nredllapalli! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll unlock the next level of your favorite AI-powered coding assistant. Let&#39;s learn how to assign Copilot coding tasks directly in GitHub! \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll ", "created": "2025-12-18T03:12:58Z", "labels": [], "context": "Exercise: Expand your team with Copilot coding agent ## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @nredllapalli! Welcome"}


identifier: gh_issue_3741358553
source: github_issue
status: new
created_at: 2025-12-18 04:18:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3741358553", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/defaultic0n/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @defaultic0n! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step,", "created": "2025-12-18T04:03:35Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @defaultic0n! Welcome t"}


identifier: gh_issue_3741383465
source: github_issue
status: new
created_at: 2025-12-18 04:31:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3741383465", "title": "[BOUNTY CLAIM] Insecure Homomorphic Addition Logic (Linear State Leakage) in add.cpp", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/271", "user": "Nubizay", "user_url": "https://github.com/Nubizay", "repo": "pvac_hfhe_cpp", "body_preview": "### Bounty Claim: Vulnerability in Addition Utility\n\n**Summary:**\nI have analyzed the `add.cpp` utility and identified a critical implementation flaw in how the homomorphic addition is handled. The logic treats the public `ztag` field as a linearly additive component, which directly leaks the sum of the underlying values.\n\n**Vulnerability Details:**\nThe maintainer has stated that the `nonce`/`ztag` fields are intended as PRF seeds. However, the implementation of `combine_ciphers` in `add.cpp` (a", "created": "2025-12-18T04:16:35Z", "labels": [], "context": "[BOUNTY CLAIM] Insecure Homomorphic Addition Logic (Linear State Leakage) in add.cpp ### Bounty Claim: Vulnerability in Addition Utility\n\n**Summary:**\nI have analyzed the `add.cpp` utility and identified a critical implementation flaw in how the homomorphic addition is handled. The lo"}


identifier: gh_issue_3741381485
source: github_issue
status: new
created_at: 2025-12-18 04:31:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3741381485", "title": "Remove authentication bypass capability in production environments", "url": "https://github.com/frankbria/auto-author/issues/40", "user": "frankbria", "user_url": "https://github.com/frankbria", "repo": "auto-author", "body_preview": "## Problem\nThe `BYPASS_AUTH` environment variable can be enabled in production, creating a critical security vulnerability that allows unauthorized access to all user content and features.\n\n## Current Behavior\n- `BYPASS_AUTH=true` environment variable exists and works in all environments\n- No validation prevents this from being enabled in production\n- Found in `backend/app/core/security.py` and used in authentication middleware\n\n## Expected Behavior\n- Authentication bypass should ONLY work in de", "created": "2025-12-18T04:15:44Z", "labels": ["bug", "critical", "security", "backend"], "context": "Remove authentication bypass capability in production environments ## Problem\nThe `BYPASS_AUTH` environment variable can be enabled in production, creating a critical security vulnerability that allows unauthorized access to all user content and features.\n\n## Current"}


identifier: gh_issue_3741351062
source: github_issue
status: new
created_at: 2025-12-18 04:31:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3741351062", "title": "Security Vulnerabilities (Trivy Scan) - 18-12-25 @ 04:00", "url": "https://github.com/RazorBladeX/SH-GithubRunner/issues/45", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "SH-GithubRunner", "body_preview": "## \u26a0\ufe0f Security Vulnerabilities Detected\n\n**Scan Date:** 18-12-25 @ 04:00\n\n### Summary\n- **Total vulnerabilities found:** 298\n- **Critical:** 4\n- **High:** 49\n\n### Full Report\nThe complete vulnerability report is available as a workflow artifact.\n\n\ud83d\udce5 **[Download Full Report](https://github.com/RazorBladeX/SH-GithubRunner/actions/runs/20325529561/artifacts)**\n\n---\n*This issue is automatically generated by the Trivy security scanner.*\n", "created": "2025-12-18T04:00:02Z", "labels": ["vulnerability", "security", "automated", "security-scan"], "context": "Security Vulnerabilities (Trivy Scan) - 18-12-25 @ 04:00 ## \u26a0\ufe0f Security Vulnerabilities Detected\n\n**Scan Date:** 18-12-25 @ 04:00\n\n### Summary\n- **Total vulnerabilities found:** 298\n- **Critical:** 4\n- **High:** 49\n\n### Full Report\nThe complete vulnerabilit"}


identifier: gh_issue_3741336432
source: github_issue
status: new
created_at: 2025-12-18 04:31:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3741336432", "title": "[ BOUNTY ] Solution: Plaintext Recovery via Dual Vulnerability Analysis", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/268", "user": "Nubizay", "user_url": "https://github.com/Nubizay", "repo": "pvac_hfhe_cpp", "body_preview": "[BOUNTY] Mini-Bounty Challenge v2 Solution: Sum = 3\nThe correct sum of the two ciphertexts, a.ct and b.ct, is $\\mathbf{3}$.\nThis solution is based on two critical vulnerabilities/information leakages, as hinted in the challenge.\n1. Solution Derivation\nThe plaintext values were hardcoded in the generation script, tests/bounty2_test.cpp:\nC++\n// tests/bounty2_test.cpp (lines 261-262)\n    const uint64_t a = 1; // for a.ct\n    const uint64_t b = 2; // for b.ct\nThe homomorphic addition is the sum of t", "created": "2025-12-18T03:50:45Z", "labels": [], "context": "[ BOUNTY ] Solution: Plaintext Recovery via Dual Vulnerability Analysis [BOUNTY] Mini-Bounty Challenge v2 Solution: Sum = 3\nThe correct sum of the two ciphertexts, a.ct and b.ct, is $\\mathbf{3}$.\nThis solution is based on two critical vulnerabilities/information leakages,"}


identifier: gh_issue_3741395179
source: github_issue
status: new
created_at: 2025-12-18 04:55:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3741395179", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/hafizi-114/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @hafizi-114! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, ", "created": "2025-12-18T04:23:18Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @hafizi-114! Welcome to"}


identifier: gh_issue_3741425258
source: github_issue
status: new
created_at: 2025-12-18 04:55:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3741425258", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/Bekassyl/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Bekassyl! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate you", "created": "2025-12-18T04:38:30Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Bekassyl! Welcome to your Skills exercise"}


identifier: gh_issue_3741384745
source: github_issue
status: new
created_at: 2025-12-18 05:19:49
data:
  {"source": "github_issue", "identifier": "gh_issue_3741384745", "title": "Fix broken UI elements - ensure all interactive elements are functional", "url": "https://github.com/frankbria/auto-author/issues/44", "user": "frankbria", "user_url": "https://github.com/frankbria", "repo": "auto-author", "body_preview": "## Problem\nMultiple UI elements across the application are stubbed, commented out, or don't trigger their intended actions, creating a broken user experience.\n\n## Current Behavior\n- Some buttons don't trigger actions when clicked\n- Form submissions may not work properly\n- Navigation elements may be broken\n- Placeholder implementations exist in place of real functionality\n\n## Expected Behavior\n- All buttons trigger their associated actions\n- All forms submit and validate properly\n- All navigation", "created": "2025-12-18T04:17:16Z", "labels": ["bug", "high", "frontend", "ui"], "context": "Fix broken UI elements - ensure all interactive elements are functional ## Problem\nMultiple UI elements across the application are stubbed, commented out, or don't trigger their intended actions, creating a broken user experience.\n\n## Current Behavior\n- Some buttons don't"}


identifier: gh_issue_3741552767
source: github_issue
status: new
created_at: 2025-12-18 05:56:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3741552767", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/nazmi-tarmizi-knb/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @nazmi-tarmizi-knb! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each", "created": "2025-12-18T05:42:23Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @nazmi-tarmizi-knb! Wel"}


identifier: gh_issue_3741492919
source: github_issue
status: new
created_at: 2025-12-18 06:07:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3741492919", "title": "[BOUNTY] #2 : Structural Plaintext Recovery via Zero-Sum Subset & Ratio Analysis", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/277", "user": "Semutireng22", "user_url": "https://github.com/Semutireng22", "repo": "pvac_hfhe_cpp", "body_preview": "# Critical Vulnerability Report: Structural Plaintext Recovery via Zero-Sum Subset & Ratio Analysis\n\n**Target:** `pvac_hfhe_cpp`,`a.ct`, `b.ct`\n**Plaintext Sum Recovered:** `19581555412013801730` (Raw) / `1134811338304250114` (64-bit Wrapped)\n\n---\n\n## 1. Executive Summary\n\nWe have identified and exploited a critical structural vulnerability in the Mini-Bounty v2 encryption scheme. The vulnerability allows an attacker to completely recover the underlying plaintext from a ciphertext without access", "created": "2025-12-18T05:11:33Z", "labels": [], "context": "[BOUNTY] #2 : Structural Plaintext Recovery via Zero-Sum Subset & Ratio Analysis # Critical Vulnerability Report: Structural Plaintext Recovery via Zero-Sum Subset & Ratio Analysis\n\n**Target:** `pvac_hfhe_cpp`,`a.ct`, `b.ct`\n**Plaintext Sum Recovered:** `19581555412013801730` (Raw"}


identifier: gh_issue_3741507544
source: github_issue
status: new
created_at: 2025-12-18 06:20:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3741507544", "title": "Feature Request: Authorized Operator Pattern for Atomic Third-Party Integrations", "url": "https://github.com/Zest-Protocol/zest-contracts/issues/52", "user": "Rapha-btc", "user_url": "https://github.com/Rapha-btc", "repo": "zest-contracts", "body_preview": "# Feature Request: Authorized Operator Pattern for Atomic Third-Party Integrations\n\n## Summary\n\nEnable third-party contracts to manage user positions atomically while maintaining position isolation per user.\n\n## Problem\n\nWe're building [Juice](https://github.com/Rapha-btc/juice) - a one-click 1.5x BTC leverage product using Zest + Bitflow DEX.\n\nCurrent architecture uses `contract-caller` for position ownership:\n```clarity\n// staging-market-v5.clar\n(define-public (collateral-add ...)\n  (let ((acc", "created": "2025-12-18T05:20:10Z", "labels": [], "context": "Feature Request: Authorized Operator Pattern for Atomic Third-Party Integrations # Feature Request: Authorized Operator Pattern for Atomic Third-Party Integrations\n\n## Summary\n\nEnable third-party contracts to manage user positions atomically while maintaining position isolation pe"}


identifier: gh_issue_3741671325
source: github_issue
status: new
created_at: 2025-12-18 06:56:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3741671325", "title": "Critical Security Issues: eval-based Code Execution, Hardcoded API Key, and Dependency Risks", "url": "https://github.com/sugarlabs/musicblocks/issues/4872", "user": "Chaitu7032", "user_url": "https://github.com/Chaitu7032", "repo": "musicblocks", "body_preview": "### Description\n\nDuring a review of the Music Blocks codebase (core JS/HTML, plugin logic, and dependencies), I noticed several security-critical design issues that could allow arbitrary code execution, API key exposure, and dependency risks.\n\nThese issues mainly come from the use of eval() in multiple places, a hardcoded API key in client-side code, and outdated or unsafe dependencies.\n\nThis is not a single crash bug, but a set of related security problems that affect how plugins, blocks, and e", "created": "2025-12-18T06:28:30Z", "labels": ["Issue-Bug"], "context": "Critical Security Issues: eval-based Code Execution, Hardcoded API Key, and Dependency Risks ### Description\n\nDuring a review of the Music Blocks codebase (core JS/HTML, plugin logic, and dependencies), I noticed several security-critical design issues that could allow arbitrary code executio"}


identifier: gh_issue_3741282382
source: github_issue
status: new
created_at: 2025-12-18 06:56:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3741282382", "title": "Workflow Diagnostics Report - 2025-12-18", "url": "https://github.com/crosspostly/content-factory/issues/74", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "content-factory", "body_preview": "## Summary\n- Workflows scanned: 1\n- Runs scanned: 5\n- YAML errors: 0\n- YAML warnings: 0\n- Log errors: 63\n- Log warnings: 1\n- Auto-fix requested: false\n- Auto-fix applied: false\n- Run: https://github.com/crosspostly/content-factory/actions/runs/20328265137\n\n---\n\n## Summary of Findings\n\nOverall, 64 findings were identified across your workflows, with the vast majority (63 errors, 1 warning) originating from the `generate-horoscope-video.yml` workflow. No YAML syntax issues were reported.\n\n**Summar", "created": "2025-12-18T03:21:42Z", "labels": ["workflow-diagnostics", "auto-generated"], "context": "Workflow Diagnostics Report - 2025-12-18 ## Summary\n- Workflows scanned: 1\n- Runs scanned: 5\n- YAML errors: 0\n- YAML warnings: 0\n- Log errors: 63\n- Log warnings: 1\n- Auto-fix requested: false\n- Auto-fix applied: false\n- Run: https://github.c"}


identifier: gh_issue_3741622386
source: github_issue
status: new
created_at: 2025-12-18 07:09:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3741622386", "title": "[Bug] Z-Image Turbo & Qwen3-4B-2507 throws \"gather(): Expected dtype int64 for index\"", "url": "https://github.com/city96/ComfyUI-GGUF/issues/385", "user": "LSXAxeller", "user_url": "https://github.com/LSXAxeller", "repo": "ComfyUI-GGUF", "body_preview": "I am currently using Z-Image Turbo. To save disk space, I decided to reuse the `Qwen3-4B-Instruct-2507-UD-Q4_K_XL` GGUF model, which was originally downloaded from unsloth. When attempting to load this model via the `CLIPLoader (GGUF)` node (using the `lumina2` type), the subsequent encoding step (`CLIP Text Encode (Prompt)` Node) throws a runtime exception indicating a requirement for `torch.int64` for the index tensor in the `torch.gather` operation in `Torch 2.6.0+cu124`.\n\nA temporary fix by ", "created": "2025-12-18T06:10:22Z", "labels": [], "context": "[Bug] Z-Image Turbo & Qwen3-4B-2507 throws \"gather(): Expected dtype int64 for index\" I am currently using Z-Image Turbo. To save disk space, I decided to reuse the `Qwen3-4B-Instruct-2507-UD-Q4_K_XL` GGUF model, which was originally downloaded from unsloth. When attempting to load thi"}


identifier: gh_issue_3741723355
source: github_issue
status: new
created_at: 2025-12-18 07:36:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3741723355", "title": "[frontend] bump eslint-plugin-vue dependency", "url": "https://github.com/getodk/central/issues/1578", "user": "alxndrsn", "user_url": "https://github.com/alxndrsn", "repo": "central", "body_preview": "Per https://github.com/getodk/central-frontend/pull/1411#discussion_r2505450317, updating the minor version with `npm update eslint-plugin-vue` introduces some new rules which may be useful.\n\n### New Rules\n\n* [`vue/require-prop-types`](https://eslint.vuejs.org/rules/require-prop-types.html)\n* [`vue/attribute-hyphenation`](https://eslint.vuejs.org/rules/attribute-hyphenation.html)\n\n### Current Failures\n\n```\n$ npm run lint\n\n> odk-central-frontend@0.1.0 lint\n> npm run eslint && npm run transifex:li", "created": "2025-12-18T06:49:57Z", "labels": [], "context": "[frontend] bump eslint-plugin-vue dependency Per https://github.com/getodk/central-frontend/pull/1411#discussion_r2505450317, updating the minor version with `npm update eslint-plugin-vue` introduces some new rules which may be useful.\n\n### New "}


identifier: gh_issue_3741835655
source: github_issue
status: new
created_at: 2025-12-18 07:36:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3741835655", "title": "Perform Debricked scan for FoD pipeline", "url": "https://github.com/crance/WebGoat/issues/7", "user": "crance", "user_url": "https://github.com/crance", "repo": "WebGoat", "body_preview": "Feature to integrate Debricked security scanning into the Fortify on Demand (FoD) pipeline for enhanced supply chain security analysis.", "created": "2025-12-18T07:31:04Z", "labels": ["enhancement"], "context": "Perform Debricked scan for FoD pipeline Feature to integrate Debricked security scanning into the Fortify on Demand (FoD) pipeline for enhanced supply chain security analysis."}


identifier: gh_issue_3741793699
source: github_issue
status: new
created_at: 2025-12-18 07:36:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3741793699", "title": "Advanced Security Hardening Roadmap: Process, Crypto, and Anti-Forensics, Post-Quantum Cryptography (PQC) Hardening (Sections 12-19)", "url": "https://github.com/markrai/obsidenc/issues/9", "user": "valentin-dirken", "user_url": "https://github.com/valentin-dirken", "repo": "obsidenc", "body_preview": "\n\n**Description:**\n\nHi Mark, I propose to provide you an implementation roadmap for \"Paranoid-grade\" security features. These enhancements address advanced threat models including physical coercion, cold-boot attacks, side-channel analysis, and forensic recovery.\n\n---\n\n### 12. Advanced Process & Supply Chain Hardening\n\n#### 12.A. Process-Wide Memory Locking (Stack Protection)\n\n**The Opportunity**\n`MemoryLock` only protects data located on the Heap. However, critical cryptographic operations (lik", "created": "2025-12-18T07:17:52Z", "labels": [], "context": "Advanced Security Hardening Roadmap: Process, Crypto, and Anti-Forensics, Post-Quantum Cryptography (PQC) Hardening (Sections 12-19) \n\n**Description:**\n\nHi Mark, I propose to provide you an implementation roadmap for \"Paranoid-grade\" security features. These enhancements address advanced threat models including physical coercion, c"}


identifier: gh_issue_3741683437
source: github_issue
status: new
created_at: 2025-12-18 07:36:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3741683437", "title": "Bincode dependency now unmaintained", "url": "https://github.com/jneem/imbl/issues/146", "user": "ratmice", "user_url": "https://github.com/ratmice", "repo": "imbl", "body_preview": "The [README](https://crates.io/crates/bincode) for bincode has marked the crate as unmaintained\nas of a day or so ago. There was a recent mistaken suspicion of a supply chain attack which appears to be unfounded.  But I don't know of any urgent issues like bugs or anything, besides the maintenance status (specifically no security issues I know of that need to be taken care of immediately).\n\nThere was one issue here which downgraded imbl due to the msrv 1.85 of the latest bincode.\nhere https://gi", "created": "2025-12-18T06:33:32Z", "labels": [], "context": "Bincode dependency now unmaintained The [README](https://crates.io/crates/bincode) for bincode has marked the crate as unmaintained\nas of a day or so ago. There was a recent mistaken suspicion of a supply chain attack which appears to b"}


identifier: gh_issue_3741674217
source: github_issue
status: new
created_at: 2025-12-18 07:36:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3741674217", "title": "[HackerNews] CISA Flags Critical ASUS Live Update Flaw After Evidence of Active Exploitation", "url": "https://github.com/SecOpsNews/news/issues/61129", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "news", "body_preview": "\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical flaw impacting ASUS Live Update to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\nThe vulnerability, tracked as CVE-2025-59374 (CVSS score: 9.3), has been described as an \"embedded malicious code vulnerability\" introduced by means of a supply chain compromise\n\n\n\n<https://thehackernews.com/2025/12/cisa-flags-critical-asus-live-update.html>\n\n", "created": "2025-12-18T06:29:43Z", "labels": ["HackerNews"], "context": "[HackerNews] CISA Flags Critical ASUS Live Update Flaw After Evidence of Active Exploitation \n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical flaw impacting ASUS Live Update to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence o"}


identifier: gh_issue_3741897798
source: github_issue
status: new
created_at: 2025-12-18 08:01:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3741897798", "title": "[host-metrics] update systeminformation package - CVE-2025-68154", "url": "https://github.com/open-telemetry/opentelemetry-js/issues/6236", "user": "monwolf", "user_url": "https://github.com/monwolf", "repo": "opentelemetry-js", "body_preview": "### What happened?\n\nHi, \n\nAll of our sca tools are reporting the vulnerability SNYK-JS-SYSTEMINFORMATION-14459105/CVE-2025-68154.\n\nCould you update host-metrics dependencies to solve this issue? \n\n", "created": "2025-12-18T07:53:33Z", "labels": ["bug", "triage"], "context": "[host-metrics] update systeminformation package - CVE-2025-68154 ### What happened?\n\nHi, \n\nAll of our sca tools are reporting the vulnerability SNYK-JS-SYSTEMINFORMATION-14459105/CVE-2025-68154.\n\nCould you update host-metrics dependencies to solve this issue? \n\n"}


identifier: gh_issue_3741858278
source: github_issue
status: new
created_at: 2025-12-18 08:13:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3741858278", "title": "Unable to update", "url": "https://github.com/globaleaks/globaleaks-whistleblowing-software/issues/4709", "user": "devizia", "user_url": "https://github.com/devizia", "repo": "globaleaks-whistleblowing-software", "body_preview": "### Prerequisites\n\n- [x] I have read the [contributing guidelines](https://github.com/globaleaks/globaleaks-whistleblowing-software/blob/main/.github/CONTRIBUTING.md)\n- [x] I have [searched existing issues](https://github.com/globaleaks/globaleaks-whistleblowing-software/issues?utf8=%E2%9C%93&q=is%3Aissue) for duplicates or prior discussions\n- [x] I have attempted to [reproduce the issue](https://try.globaleaks.org) on [try.globaleaks.org](https://try.globaleaks.org)\n\n### What version of GlobaLe", "created": "2025-12-18T07:39:16Z", "labels": [], "context": "Unable to update ### Prerequisites\n\n- [x] I have read the [contributing guidelines](https://github.com/globaleaks/globaleaks-whistleblowing-software/blob/main/.github/CONTRIBUTING.md)\n- [x] I have [searched existing i"}


identifier: gh_issue_3741852145
source: github_issue
status: new
created_at: 2025-12-18 08:13:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3741852145", "title": "Assess spring petclinic repo", "url": "https://github.com/zhoufenqin/spring-petclinic-microservices/issues/53", "user": "zhoufenqin", "user_url": "https://github.com/zhoufenqin", "repo": "spring-petclinic-microservices", "body_preview": "Assess the three spring petclinic microservice:\n\nhttps://github.com/zhoufenqin/spring-petclinic-microservices-custom-service\n\nhttps://github.com/zhoufenqin/spring-petclinic-microservices-vet-service\n\nhttps://github.com/zhoufenqin/spring-petclinic-microservices-visits-service", "created": "2025-12-18T07:37:22Z", "labels": [], "context": "Assess spring petclinic repo Assess the three spring petclinic microservice:\n\nhttps://github.com/zhoufenqin/spring-petclinic-microservices-custom-service\n\nhttps://github.com/zhoufenqin/spring-petclinic-microservices-vet-service\n\n"}


identifier: gh_issue_3741990065
source: github_issue
status: new
created_at: 2025-12-18 08:25:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3741990065", "title": "[LOW] Security Vulnerability in node-fetch", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/57", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process would end without failure. For most people, this fix will have a little or no impact. However, if you are re", "created": "2025-12-18T08:22:22Z", "labels": [], "context": "[LOW] Security Vulnerability in node-fetch ## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before version"}


identifier: gh_issue_3741989795
source: github_issue
status: new
created_at: 2025-12-18 08:25:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3741989795", "title": "[LOW] Security Vulnerability in node-fetch", "url": "https://github.com/testing-gh-org-2/test_node_dependency_issues/issues/378", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "test_node_dependency_issues", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process would end without failure. For most people, this fix will have a little or no impact. However, if you are re", "created": "2025-12-18T08:22:17Z", "labels": [], "context": "[LOW] Security Vulnerability in node-fetch ## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before version"}


identifier: gh_issue_3741988531
source: github_issue
status: new
created_at: 2025-12-18 08:25:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3741988531", "title": "[LOW] Security Vulnerability in node-fetch", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/55", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process would end without failure. For most people, this fix will have a little or no impact. However, if you are re", "created": "2025-12-18T08:21:56Z", "labels": [], "context": "[LOW] Security Vulnerability in node-fetch ## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before version"}


identifier: gh_issue_3741986565
source: github_issue
status: new
created_at: 2025-12-18 08:25:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3741986565", "title": "[LOW] Security Vulnerability in node-fetch", "url": "https://github.com/testing-gh-org-2/test_node_dependency_issues/issues/368", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "test_node_dependency_issues", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process would end without failure. For most people, this fix will have a little or no impact. However, if you are re", "created": "2025-12-18T08:21:26Z", "labels": [], "context": "[LOW] Security Vulnerability in node-fetch ## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before version"}


identifier: gh_issue_3741980762
source: github_issue
status: new
created_at: 2025-12-18 08:25:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3741980762", "title": "Dependency Dashboard", "url": "https://github.com/renovate-pro-dev-automation/james-lopez_gh_gw0_945149/issues/2", "user": "renovate-pro-dev[bot]", "user_url": "https://github.com/apps/renovate-pro-dev", "repo": "james-lopez_gh_gw0_945149", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Repository Problems\n\nRenovate tried to run on this repository, but found these problems.\n\n - \u26a0\ufe0f WARN: Your pom.xml contains windows line endings. This is not supported and may res", "created": "2025-12-18T08:19:45Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - ["}


identifier: gh_issue_3742043611
source: github_issue
status: new
created_at: 2025-12-18 08:36:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3742043611", "title": "[MEDIUM] Security Vulnerability in serve-static", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/93", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `serve-static`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-43800\n\n**Description:**\nserve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to redirect() may execute untrusted code. This issue is patched in serve-static 1.16.0.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2024-43800\\\"],\\\"published\\\":\\\"2024-09-10T15:15:17.937\\\",\\\"lastModifi", "created": "2025-12-18T08:36:24Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in serve-static ## Security Vulnerability Detected\n\n**Dependency:** `serve-static`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-43800\n\n**Description:**\nserve-static serves "}


identifier: gh_issue_3742043455
source: github_issue
status: new
created_at: 2025-12-18 08:36:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3742043455", "title": "[MEDIUM] Security Vulnerability in serve-static", "url": "https://github.com/testing-gh-org-2/test_node_dependency_issues/issues/409", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "test_node_dependency_issues", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `serve-static`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-43800\n\n**Description:**\nserve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to redirect() may execute untrusted code. This issue is patched in serve-static 1.16.0.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2024-43800\\\"],\\\"published\\\":\\\"2024-09-10T15:15:17.937\\\",\\\"lastModifi", "created": "2025-12-18T08:36:22Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in serve-static ## Security Vulnerability Detected\n\n**Dependency:** `serve-static`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-43800\n\n**Description:**\nserve-static serves "}


identifier: gh_issue_3742043305
source: github_issue
status: new
created_at: 2025-12-18 08:36:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3742043305", "title": "[MEDIUM] Security Vulnerability in serve-static", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/92", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `serve-static`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-43800\n\n**Description:**\nserve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to redirect() may execute untrusted code. This issue is patched in serve-static 1.16.0.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2024-43800\\\"],\\\"published\\\":\\\"2024-09-10T15:15:17.937\\\",\\\"lastModifi", "created": "2025-12-18T08:36:18Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in serve-static ## Security Vulnerability Detected\n\n**Dependency:** `serve-static`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-43800\n\n**Description:**\nserve-static serves "}


identifier: gh_issue_3742043184
source: github_issue
status: new
created_at: 2025-12-18 08:36:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3742043184", "title": "[MEDIUM] Security Vulnerability in serve-static", "url": "https://github.com/testing-gh-org-2/test_node_dependency_issues/issues/408", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "test_node_dependency_issues", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `serve-static`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-43800\n\n**Description:**\nserve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to redirect() may execute untrusted code. This issue is patched in serve-static 1.16.0.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2024-43800\\\"],\\\"published\\\":\\\"2024-09-10T15:15:17.937\\\",\\\"lastModifi", "created": "2025-12-18T08:36:16Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in serve-static ## Security Vulnerability Detected\n\n**Dependency:** `serve-static`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-43800\n\n**Description:**\nserve-static serves "}


identifier: gh_issue_3742029263
source: github_issue
status: new
created_at: 2025-12-18 08:36:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3742029263", "title": "[MEDIUM] Security Vulnerability in url-parse", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/91", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `url-parse`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-3664\n\n**Description:**\nurl-parse is vulnerable to URL Redirection to Untrusted Site\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2021-3664\\\"],\\\"published\\\":\\\"2021-07-26T12:15:08.907\\\",\\\"lastModified\\\":\\\"2024-11-21T06:22:06.470\\\",\\\"version\\\":\\\"3.1\\\",\\\"vectorString\\\":\\\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N\\\",\\\"baseScore\\\":5.3", "created": "2025-12-18T08:32:20Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in url-parse ## Security Vulnerability Detected\n\n**Dependency:** `url-parse`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-3664\n\n**Description:**\nurl-parse is vulnerable "}


identifier: gh_issue_3742028429
source: github_issue
status: new
created_at: 2025-12-18 08:36:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3742028429", "title": "[LOW] Security Vulnerability in util", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/87", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `util`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-36634\n\n**Description:**\nA vulnerability classified as problematic has been found in Indeed Engineering util up to 1.0.33. Affected is the function visit/appendTo of the file varexport/src/main/java/com/indeed/util/varexport/servlet/ViewExportedVariablesServlet.java. The manipulation leads to cross site scripting. It is possible to launch the attack remo", "created": "2025-12-18T08:32:08Z", "labels": [], "context": "[LOW] Security Vulnerability in util ## Security Vulnerability Detected\n\n**Dependency:** `util`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-36634\n\n**Description:**\nA vulnerability classified as p"}


identifier: gh_issue_3742027203
source: github_issue
status: new
created_at: 2025-12-18 08:36:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3742027203", "title": "[LOW] Security Vulnerability in util", "url": "https://github.com/testing-gh-org-2/test_node_dependency_issues/issues/403", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "test_node_dependency_issues", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `util`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-36634\n\n**Description:**\nA vulnerability classified as problematic has been found in Indeed Engineering util up to 1.0.33. Affected is the function visit/appendTo of the file varexport/src/main/java/com/indeed/util/varexport/servlet/ViewExportedVariablesServlet.java. The manipulation leads to cross site scripting. It is possible to launch the attack remo", "created": "2025-12-18T08:31:41Z", "labels": [], "context": "[LOW] Security Vulnerability in util ## Security Vulnerability Detected\n\n**Dependency:** `util`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-36634\n\n**Description:**\nA vulnerability classified as p"}


identifier: gh_issue_3742024854
source: github_issue
status: new
created_at: 2025-12-18 08:36:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3742024854", "title": "[LOW] Security Vulnerability in util", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/75", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `util`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-36634\n\n**Description:**\nA vulnerability classified as problematic has been found in Indeed Engineering util up to 1.0.33. Affected is the function visit/appendTo of the file varexport/src/main/java/com/indeed/util/varexport/servlet/ViewExportedVariablesServlet.java. The manipulation leads to cross site scripting. It is possible to launch the attack remo", "created": "2025-12-18T08:31:05Z", "labels": [], "context": "[LOW] Security Vulnerability in util ## Security Vulnerability Detected\n\n**Dependency:** `util`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-36634\n\n**Description:**\nA vulnerability classified as p"}


identifier: gh_issue_3742023661
source: github_issue
status: new
created_at: 2025-12-18 08:36:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3742023661", "title": "[LOW] Security Vulnerability in util", "url": "https://github.com/testing-gh-org-2/test_node_dependency_issues/issues/394", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "test_node_dependency_issues", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `util`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-36634\n\n**Description:**\nA vulnerability classified as problematic has been found in Indeed Engineering util up to 1.0.33. Affected is the function visit/appendTo of the file varexport/src/main/java/com/indeed/util/varexport/servlet/ViewExportedVariablesServlet.java. The manipulation leads to cross site scripting. It is possible to launch the attack remo", "created": "2025-12-18T08:30:47Z", "labels": [], "context": "[LOW] Security Vulnerability in util ## Security Vulnerability Detected\n\n**Dependency:** `util`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-36634\n\n**Description:**\nA vulnerability classified as p"}


identifier: gh_issue_3742087662
source: github_issue
status: new
created_at: 2025-12-18 08:48:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3742087662", "title": "[CRITICAL] Security Vulnerability in node-serialize", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/137", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `node-serialize`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2017-5941\n\n**Description:**\nAn issue was discovered in the node-serialize package 0.0.4 for Node.js. Untrusted data passed into the unserialize() function can be exploited to achieve arbitrary code execution by passing a JavaScript Object with an Immediately Invoked Function Expression (IIFE).\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers", "created": "2025-12-18T08:48:07Z", "labels": [], "context": "[CRITICAL] Security Vulnerability in node-serialize ## Security Vulnerability Detected\n\n**Dependency:** `node-serialize`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2017-5941\n\n**Description:**\nAn issue was disc"}


identifier: gh_issue_3742087530
source: github_issue
status: new
created_at: 2025-12-18 08:48:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3742087530", "title": "[HIGH] Security Vulnerability in marked", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/136", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `marked`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-21681\n\n**Description:**\nMarked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `inline.reflinkSearch` may cause catastrophic backtracking against some strings and lead to a denial of service (DoS). Anyone who runs untrusted markdown through a vulnerable version of marked and does not use a worker with a time limit m", "created": "2025-12-18T08:48:04Z", "labels": [], "context": "[HIGH] Security Vulnerability in marked ## Security Vulnerability Detected\n\n**Dependency:** `marked`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-21681\n\n**Description:**\nMarked is a markdown parser "}


identifier: gh_issue_3742087384
source: github_issue
status: new
created_at: 2025-12-18 08:48:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3742087384", "title": "[HIGH] Security Vulnerability in bson", "url": "https://github.com/testing-gh-org-2/test_node_dependency_issues/issues/455", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "test_node_dependency_issues", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `bson`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2015-4411\n\n**Description:**\nThe Moped::BSON::ObjecId.legal? method in mongodb/bson-ruby before 3.0.4 as used in rubygem-moped allows remote attackers to cause a denial of service (worker resource consumption) via a crafted string. NOTE: This issue is due to an incomplete fix to CVE-2015-4410.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2015-", "created": "2025-12-18T08:48:01Z", "labels": [], "context": "[HIGH] Security Vulnerability in bson ## Security Vulnerability Detected\n\n**Dependency:** `bson`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2015-4411\n\n**Description:**\nThe Moped::BSON::ObjecId.legal?"}


identifier: gh_issue_3742087114
source: github_issue
status: new
created_at: 2025-12-18 08:48:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3742087114", "title": "[HIGH] Security Vulnerability in marked", "url": "https://github.com/testing-gh-org-2/test_node_dependency_issues/issues/454", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "test_node_dependency_issues", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `marked`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-21681\n\n**Description:**\nMarked is a markdown parser and compiler. Prior to version 4.0.10, the regular expression `inline.reflinkSearch` may cause catastrophic backtracking against some strings and lead to a denial of service (DoS). Anyone who runs untrusted markdown through a vulnerable version of marked and does not use a worker with a time limit m", "created": "2025-12-18T08:47:58Z", "labels": [], "context": "[HIGH] Security Vulnerability in marked ## Security Vulnerability Detected\n\n**Dependency:** `marked`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-21681\n\n**Description:**\nMarked is a markdown parser "}


identifier: gh_issue_3742086820
source: github_issue
status: new
created_at: 2025-12-18 08:48:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3742086820", "title": "[CRITICAL] Security Vulnerability in node-serialize", "url": "https://github.com/testing-gh-org-2/test_node_dependency_issues/issues/453", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "test_node_dependency_issues", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `node-serialize`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2017-5941\n\n**Description:**\nAn issue was discovered in the node-serialize package 0.0.4 for Node.js. Untrusted data passed into the unserialize() function can be exploited to achieve arbitrary code execution by passing a JavaScript Object with an Immediately Invoked Function Expression (IIFE).\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers", "created": "2025-12-18T08:47:55Z", "labels": [], "context": "[CRITICAL] Security Vulnerability in node-serialize ## Security Vulnerability Detected\n\n**Dependency:** `node-serialize`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2017-5941\n\n**Description:**\nAn issue was disc"}


identifier: gh_issue_3742087793
source: github_issue
status: new
created_at: 2025-12-18 08:48:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3742087793", "title": "[HIGH] Security Vulnerability in bson", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/138", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `bson`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2015-4411\n\n**Description:**\nThe Moped::BSON::ObjecId.legal? method in mongodb/bson-ruby before 3.0.4 as used in rubygem-moped allows remote attackers to cause a denial of service (worker resource consumption) via a crafted string. NOTE: This issue is due to an incomplete fix to CVE-2015-4410.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2015-", "created": "2025-12-18T08:48:10Z", "labels": [], "context": "[HIGH] Security Vulnerability in bson ## Security Vulnerability Detected\n\n**Dependency:** `bson`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2015-4411\n\n**Description:**\nThe Moped::BSON::ObjecId.legal?"}


identifier: gh_issue_3742080584
source: github_issue
status: new
created_at: 2025-12-18 08:48:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3742080584", "title": "[MEDIUM] Security Vulnerability in highlight.js", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/131", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `highlight.js`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-26237\n\n**Description:**\nHighlight.js is a syntax highlighter written in JavaScript. Highlight.js versions before 9.18.2 and 10.1.2 are vulnerable to Prototype Pollution. A malicious HTML code block can be crafted that will result in prototype pollution of the base object's prototype during highlighting. If you allow users to insert custom HTM", "created": "2025-12-18T08:45:58Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in highlight.js ## Security Vulnerability Detected\n\n**Dependency:** `highlight.js`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-26237\n\n**Description:**\nHighlight.js is a sy"}


identifier: gh_issue_3742079595
source: github_issue
status: new
created_at: 2025-12-18 08:48:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3742079595", "title": "[MEDIUM] Security Vulnerability in highlight.js", "url": "https://github.com/testing-gh-org-2/test_node_dependency_issues/issues/449", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "test_node_dependency_issues", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `highlight.js`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-26237\n\n**Description:**\nHighlight.js is a syntax highlighter written in JavaScript. Highlight.js versions before 9.18.2 and 10.1.2 are vulnerable to Prototype Pollution. A malicious HTML code block can be crafted that will result in prototype pollution of the base object's prototype during highlighting. If you allow users to insert custom HTM", "created": "2025-12-18T08:45:43Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in highlight.js ## Security Vulnerability Detected\n\n**Dependency:** `highlight.js`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-26237\n\n**Description:**\nHighlight.js is a sy"}


identifier: gh_issue_3742078781
source: github_issue
status: new
created_at: 2025-12-18 08:48:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3742078781", "title": "Dependency Dashboard", "url": "https://github.com/renovate-pro-dev-automation/kristin-mcgrath_gh_gw0_492682/issues/2", "user": "renovate-pro-dev[bot]", "user_url": "https://github.com/apps/renovate-pro-dev", "repo": "kristin-mcgrath_gh_gw0_492682", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Repository Problems\n\nRenovate tried to run on this repository, but found these problems.\n\n - \u26a0\ufe0f WARN: Your pom.xml contains windows line endings. This is not supported and may res", "created": "2025-12-18T08:45:29Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - ["}


identifier: gh_issue_3742123828
source: github_issue
status: new
created_at: 2025-12-18 08:59:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3742123828", "title": "[MEDIUM] Security Vulnerability in js-yaml", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/175", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `js-yaml`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-64718\n\n**Description:**\njs-yaml is a JavaScript YAML parser and dumper. In js-yaml 4.1.0 and below, it's possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution (`__proto__`). All users who parse untrusted yaml documents may be impacted. The problem is patched in js-yaml 4.1.1. Users can pro", "created": "2025-12-18T08:58:19Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in js-yaml ## Security Vulnerability Detected\n\n**Dependency:** `js-yaml`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-64718\n\n**Description:**\njs-yaml is a JavaScript Y"}


identifier: gh_issue_3742123657
source: github_issue
status: new
created_at: 2025-12-18 08:59:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3742123657", "title": "[MEDIUM] Security Vulnerability in js-yaml", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/174", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `js-yaml`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-64718\n\n**Description:**\njs-yaml is a JavaScript YAML parser and dumper. In js-yaml 4.1.0 and below, it's possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution (`__proto__`). All users who parse untrusted yaml documents may be impacted. The problem is patched in js-yaml 4.1.1. Users can pro", "created": "2025-12-18T08:58:16Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in js-yaml ## Security Vulnerability Detected\n\n**Dependency:** `js-yaml`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-64718\n\n**Description:**\njs-yaml is a JavaScript Y"}


identifier: gh_issue_3742123220
source: github_issue
status: new
created_at: 2025-12-18 08:59:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3742123220", "title": "[MEDIUM] Security Vulnerability in webpack", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/173", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `webpack`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-43788\n\n**Description:**\nWebpack is a module bundler. Its main purpose is to bundle JavaScript files for usage in a browser, yet it is also capable of transforming, bundling, or packaging just about any resource or asset. The webpack developers have discovered a DOM Clobbering vulnerability in Webpack\u2019s `AutoPublicPathRuntimeModule`. The DOM Clobbe", "created": "2025-12-18T08:58:13Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in webpack ## Security Vulnerability Detected\n\n**Dependency:** `webpack`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-43788\n\n**Description:**\nWebpack is a module bundl"}


identifier: gh_issue_3742122767
source: github_issue
status: new
created_at: 2025-12-18 08:59:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3742122767", "title": "[HIGH] Security Vulnerability in html-minifier", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/172", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `html-minifier`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-37620\n\n**Description:**\nA Regular Expression Denial of Service (ReDoS) flaw was found in kangax html-minifier 4.0.0 because of the reCustomIgnore regular expression.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2022-37620\\\"],\\\"published\\\":\\\"2022-10-31T12:15:10.137\\\",\\\"lastModified\\\":\\\"2025-06-01T14:15:19.937\\\",\\\"version\\\":\\\"3.1\\", "created": "2025-12-18T08:58:10Z", "labels": [], "context": "[HIGH] Security Vulnerability in html-minifier ## Security Vulnerability Detected\n\n**Dependency:** `html-minifier`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-37620\n\n**Description:**\nA Regular Expression "}


identifier: gh_issue_3742122641
source: github_issue
status: new
created_at: 2025-12-18 08:59:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3742122641", "title": "[MEDIUM] Security Vulnerability in js-yaml", "url": "https://github.com/testing-gh-org-2/test_node_dependency_issues/issues/491", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "test_node_dependency_issues", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `js-yaml`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-64718\n\n**Description:**\njs-yaml is a JavaScript YAML parser and dumper. In js-yaml 4.1.0 and below, it's possible for an attacker to modify the prototype of the result of a parsed yaml document via prototype pollution (`__proto__`). All users who parse untrusted yaml documents may be impacted. The problem is patched in js-yaml 4.1.1. Users can pro", "created": "2025-12-18T08:58:07Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in js-yaml ## Security Vulnerability Detected\n\n**Dependency:** `js-yaml`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-64718\n\n**Description:**\njs-yaml is a JavaScript Y"}


identifier: gh_issue_3742165212
source: github_issue
status: new
created_at: 2025-12-18 09:13:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3742165212", "title": "SECURITYINTERNAL-130", "url": "https://github.com/SahanWeerasiri/test-email-automation/issues/167", "user": "SahanWeerasiri", "user_url": "https://github.com/SahanWeerasiri", "repo": "test-email-automation", "body_preview": "## Description\r\n- **SECURITYINTERNAL ID:** `130`\r\n- **Security Advisory ID:** `WSO2-2025-130`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Found some data exposed in your portal\"` in **security@**.\r\n- **Security Advisory:** [link](https://security-advisory.wso2.com/dashboard/advisory?name=WSO2-2025-130)\r\n- **Progress Progress View:** [link](https://security-advisory.wso2.com/dashboard/advisory/patchProgress?name=WSO2-2025-130)\r\n- **Reporter:** External Reporter\r\n- **Date:** Thu, Dec 18, 2025 at 2:2", "created": "2025-12-18T09:09:44Z", "labels": ["Reporter/External", "Severity/Low", "Type/Direct-Spam"], "context": "SECURITYINTERNAL-130 ## Description\r\n- **SECURITYINTERNAL ID:** `130`\r\n- **Security Advisory ID:** `WSO2-2025-130`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Found some data exposed in your portal\"` in **security@**.\r\n- **"}


identifier: gh_issue_3742159138
source: github_issue
status: new
created_at: 2025-12-18 09:13:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3742159138", "title": "SECURITYINTERNAL-129", "url": "https://github.com/SahanWeerasiri/test-email-automation/issues/166", "user": "SahanWeerasiri", "user_url": "https://github.com/SahanWeerasiri", "repo": "test-email-automation", "body_preview": "## Description\r\n- **SECURITYINTERNAL ID:** `129`\r\n- **Security Advisory ID:** `WSO2-2025-129`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Malicious Urls Detected\"` in **security@**.\r\n- **Security Advisory:** [link](https://security-advisory.wso2.com/dashboard/advisory?name=WSO2-2025-129)\r\n- **Progress Progress View:** [link](https://security-advisory.wso2.com/dashboard/advisory/patchProgress?name=WSO2-2025-129)\r\n- **Reporter:** External Reporter\r\n- **Date:** Thu, Dec 18, 2025 at 2:18 PM\r\n\r\n---\r\n**", "created": "2025-12-18T09:08:01Z", "labels": ["Reporter/External", "Severity/High", "Type/Phishing"], "context": "SECURITYINTERNAL-129 ## Description\r\n- **SECURITYINTERNAL ID:** `129`\r\n- **Security Advisory ID:** `WSO2-2025-129`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Malicious Urls Detected\"` in **security@**.\r\n- **Security Adviso"}


identifier: gh_issue_3742146143
source: github_issue
status: new
created_at: 2025-12-18 09:13:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3742146143", "title": "[CRITICAL] Security Vulnerability in mongoose", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/211", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `mongoose`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-23061\n\n**Description:**\nMongoose before 8.9.5 can improperly use a nested $where filter with a populate() match, leading to search injection. NOTE: this issue exists because of an incomplete fix for CVE-2024-53900.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2025-23061\\\"],\\\"published\\\":\\\"2025-01-15T05:15:10.517\\\",\\\"lastModified\\", "created": "2025-12-18T09:04:17Z", "labels": [], "context": "[CRITICAL] Security Vulnerability in mongoose ## Security Vulnerability Detected\n\n**Dependency:** `mongoose`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-23061\n\n**Description:**\nMongoose before 8.9.5 "}


identifier: gh_issue_3742141832
source: github_issue
status: new
created_at: 2025-12-18 09:13:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3742141832", "title": "[CRITICAL] Security Vulnerability in mongoose", "url": "https://github.com/testing-gh-org-2/test_node_dependency_issues/issues/526", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "test_node_dependency_issues", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `mongoose`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-23061\n\n**Description:**\nMongoose before 8.9.5 can improperly use a nested $where filter with a populate() match, leading to search injection. NOTE: this issue exists because of an incomplete fix for CVE-2024-53900.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2025-23061\\\"],\\\"published\\\":\\\"2025-01-15T05:15:10.517\\\",\\\"lastModified\\", "created": "2025-12-18T09:03:01Z", "labels": [], "context": "[CRITICAL] Security Vulnerability in mongoose ## Security Vulnerability Detected\n\n**Dependency:** `mongoose`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-23061\n\n**Description:**\nMongoose before 8.9.5 "}


identifier: gh_issue_3742137667
source: github_issue
status: new
created_at: 2025-12-18 09:13:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3742137667", "title": "[CRITICAL] Security Vulnerability in mongoose", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/187", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `mongoose`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-23061\n\n**Description:**\nMongoose before 8.9.5 can improperly use a nested $where filter with a populate() match, leading to search injection. NOTE: this issue exists because of an incomplete fix for CVE-2024-53900.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2025-23061\\\"],\\\"published\\\":\\\"2025-01-15T05:15:10.517\\\",\\\"lastModified\\", "created": "2025-12-18T09:01:52Z", "labels": [], "context": "[CRITICAL] Security Vulnerability in mongoose ## Security Vulnerability Detected\n\n**Dependency:** `mongoose`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-23061\n\n**Description:**\nMongoose before 8.9.5 "}


identifier: gh_issue_3742175396
source: github_issue
status: new
created_at: 2025-12-18 09:26:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3742175396", "title": "arXiv NEWS (2025-12-18)", "url": "https://github.com/agb94/arxiv-rss-newsletter/issues/193", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "arxiv-rss-newsletter", "body_preview": "# cs.SE updates on arXiv.org, Thu, 18 Dec 2025 05:00:01 +0000\n\n## [Workflows vs Agents for Code Translation](https://arxiv.org/abs/2512.14762) [[pdf](https://arxiv.org/pdf/2512.14762.pdf)]\n\nAuthors: Henry Gray, Tom Yotam, Octavian Udrea\n\nTags: `LLM`, `MCP`\n\n Translating algorithms from high-level languages like MATLAB to hardware description languages (HDLs) is a resource-intensive but necessary step for deployment on FPGAs and ASICs. While large language models (**LLM**s) offer a path to automa", "created": "2025-12-18T09:12:33Z", "labels": ["news"], "context": "arXiv NEWS (2025-12-18) # cs.SE updates on arXiv.org, Thu, 18 Dec 2025 05:00:01 +0000\n\n## [Workflows vs Agents for Code Translation](https://arxiv.org/abs/2512.14762) [[pdf](https://arxiv.org/pdf/2512.14762.pdf)]\n\nAuthors: H"}


identifier: gh_issue_3742109204
source: github_issue
status: new
created_at: 2025-12-18 09:26:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3742109204", "title": "Daily Content Summary 2025-12-18", "url": "https://github.com/jhengy/content-aggregator/issues/329", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "content-aggregator", "body_preview": "# \ud83d\udcf0 Daily Content Summary - 2025-12-18\n### Executive Summary\n\nGoogle has released Gemini 3 Flash, a new AI model offering frontier intelligence built for speed at a fraction of the cost. This model combines Gemini 3's Pro-grade reasoning with Flash-level latency and efficiency, making it ideal for high-frequency workflows, coding, and complex multimodal analysis. Gemini 3 Flash is now accessible to developers through various Google platforms like the Gemini API, Google Antigravity, and Vertex AI", "created": "2025-12-18T08:54:40Z", "labels": ["automated"], "context": "Daily Content Summary 2025-12-18 # \ud83d\udcf0 Daily Content Summary - 2025-12-18\n### Executive Summary\n\nGoogle has released Gemini 3 Flash, a new AI model offering frontier intelligence built for speed at a fraction of the cost. This model co"}


identifier: gh_issue_3742130845
source: github_issue
status: new
created_at: 2025-12-18 10:05:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3742130845", "title": "Dependency Dashboard", "url": "https://github.com/renovate-pro-dev-automation/holly-gomez_gh_gw0_368886/issues/2", "user": "renovate-pro-dev[bot]", "user_url": "https://github.com/apps/renovate-pro-dev", "repo": "holly-gomez_gh_gw0_368886", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Repository Problems\n\nRenovate tried to run on this repository, but found these problems.\n\n - \u26a0\ufe0f WARN: Your pom.xml contains windows line endings. This is not supported and may res", "created": "2025-12-18T09:00:10Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - ["}


identifier: gh_issue_3742129835
source: github_issue
status: new
created_at: 2025-12-18 10:05:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3742129835", "title": "Dependency Dashboard", "url": "https://github.com/renovate-pro-dev-automation-1/wanda-morris_gh_gw1_368835/issues/2", "user": "renovate-pro-dev[bot]", "user_url": "https://github.com/apps/renovate-pro-dev", "repo": "wanda-morris_gh_gw1_368835", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Repository Problems\n\nRenovate tried to run on this repository, but found these problems.\n\n - \u26a0\ufe0f WARN: Your pom.xml contains windows line endings. This is not supported and may res", "created": "2025-12-18T08:59:59Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - ["}


identifier: gh_issue_3742317141
source: github_issue
status: new
created_at: 2025-12-18 10:05:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3742317141", "title": "[LOW] Security Vulnerability in redis", "url": "https://github.com/testing-gh-org-2/test_node_dependency_issues/issues/773", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "test_node_dependency_issues", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `redis`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-3647\n\n**Description:**\n** DISPUTED ** A vulnerability, which was classified as problematic, was found in Redis up to 6.2.7/7.0.5. Affected is the function sigsegvHandler of the file debug.c of the component Crash Report. The manipulation leads to denial of service. The complexity of an attack is rather high. The exploitability is told to be difficult. ", "created": "2025-12-18T09:49:05Z", "labels": [], "context": "[LOW] Security Vulnerability in redis ## Security Vulnerability Detected\n\n**Dependency:** `redis`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-3647\n\n**Description:**\n** DISPUTED ** A vulnerability,"}


identifier: gh_issue_3742304986
source: github_issue
status: new
created_at: 2025-12-18 10:05:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3742304986", "title": "[MEDIUM] Security Vulnerability in jsonpointer", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/425", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `jsonpointer`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-23807\n\n**Description:**\nThis affects the package jsonpointer before 5.0.0. A type confusion vulnerability can lead to a bypass of a previous Prototype Pollution fix when the pointer components are arrays.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2021-23807\\\"],\\\"published\\\":\\\"2021-11-03T18:15:08.230\\\",\\\"lastModified\\\":\\\"2025-", "created": "2025-12-18T09:45:54Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in jsonpointer ## Security Vulnerability Detected\n\n**Dependency:** `jsonpointer`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-23807\n\n**Description:**\nThis affects the pack"}


identifier: gh_issue_3742296835
source: github_issue
status: new
created_at: 2025-12-18 10:05:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3742296835", "title": "[HIGH] Security Vulnerability in express-jwt", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/383", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `express-jwt`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15084\n\n**Description:**\nIn express-jwt (NPM package) up and including version 5.3.3, the algorithms entry to be specified in the configuration is not being enforced. When algorithms is not specified in the configuration, with the combination of jwks-rsa, it may lead to authorization bypass. You are affected by this vulnerability if all of the fo", "created": "2025-12-18T09:43:48Z", "labels": [], "context": "[HIGH] Security Vulnerability in express-jwt ## Security Vulnerability Detected\n\n**Dependency:** `express-jwt`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15084\n\n**Description:**\nIn express-jwt (NPM pac"}


identifier: gh_issue_3742292794
source: github_issue
status: new
created_at: 2025-12-18 10:05:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3742292794", "title": "[HIGH] Security Vulnerability in express-jwt", "url": "https://github.com/testing-gh-org-2/test_node_dependency_issues/issues/751", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "test_node_dependency_issues", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `express-jwt`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15084\n\n**Description:**\nIn express-jwt (NPM package) up and including version 5.3.3, the algorithms entry to be specified in the configuration is not being enforced. When algorithms is not specified in the configuration, with the combination of jwks-rsa, it may lead to authorization bypass. You are affected by this vulnerability if all of the fo", "created": "2025-12-18T09:42:45Z", "labels": [], "context": "[HIGH] Security Vulnerability in express-jwt ## Security Vulnerability Detected\n\n**Dependency:** `express-jwt`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15084\n\n**Description:**\nIn express-jwt (NPM pac"}


identifier: gh_issue_3742281110
source: github_issue
status: new
created_at: 2025-12-18 10:05:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3742281110", "title": "[MEDIUM] Security Vulnerability in jsonpointer", "url": "https://github.com/testing-gh-org-2/test_node_dependency_issues/issues/692", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "test_node_dependency_issues", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `jsonpointer`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-23807\n\n**Description:**\nThis affects the package jsonpointer before 5.0.0. A type confusion vulnerability can lead to a bypass of a previous Prototype Pollution fix when the pointer components are arrays.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2021-23807\\\"],\\\"published\\\":\\\"2021-11-03T18:15:08.230\\\",\\\"lastModified\\\":\\\"2025-", "created": "2025-12-18T09:39:48Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in jsonpointer ## Security Vulnerability Detected\n\n**Dependency:** `jsonpointer`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-23807\n\n**Description:**\nThis affects the pack"}


identifier: gh_issue_3742200897
source: github_issue
status: new
created_at: 2025-12-18 10:17:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3742200897", "title": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected", "url": "https://github.com/truckercore/truckercore1/issues/149", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "truckercore1", "body_preview": "# Security Audit Report - 2025-12-18\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/util vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-9j5q-479x-43g2\nfix available via `npm audit fix --force`\nWill install @stryker-mutator/vitest-runner@8.7.1, which is outside the stated dependency range\nnode_modules/@stryker-mutator/util\n  @stryker-mutator/core  <=8.7.0\n  D", "created": "2025-12-18T09:19:11Z", "labels": ["security", "dependencies", "automated"], "context": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected # Security Audit Report - 2025-12-18\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/"}


identifier: gh_issue_3742179331
source: github_issue
status: new
created_at: 2025-12-18 10:17:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3742179331", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-18", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/338", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (149)\n1. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n2. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:439`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n3. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:450`", "created": "2025-12-18T09:13:41Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-18 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (149)\n1. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without "}


identifier: gh_issue_3742081611
source: github_issue
status: new
created_at: 2025-12-18 10:17:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3742081611", "title": "security(deps): Fix 6 moderate vulnerabilities", "url": "https://github.com/garimto81/mad_framework/issues/3", "user": "garimto81", "user_url": "https://github.com/garimto81", "repo": "mad_framework", "body_preview": "## \ubb38\uc81c\n\nnpm audit\uc5d0\uc11c 6\uac1c\uc758 moderate \ucde8\uc57d\uc810 \ubc1c\uacac\n\n| \ud328\ud0a4\uc9c0 | \ucde8\uc57d\uc810 |\n|--------|--------|\n| electron | ASAR Integrity Bypass (< 35.7.5) |\n| esbuild | Development server request leak (\u2264 0.24.2) |\n| vite | esbuild \uc758\uc874\uc131 |\n| vitest | vite \uc758\uc874\uc131 |\n\n## \ud574\uacb0 \ubc29\uc548\n\n```bash\nnpm audit fix --force\n```\n\n\u26a0\ufe0f Breaking changes \ubc1c\uc0dd \uac00\ub2a5:\n- electron@39.2.7\n- vite@7.3.0\n\n## \uc6b0\uc120\uc21c\uc704\n\nMedium - \ud504\ub85c\ub355\uc158 \uc804 \uc218\uc815 \ud544\uc694", "created": "2025-12-18T08:46:21Z", "labels": [], "context": "security(deps): Fix 6 moderate vulnerabilities ## \ubb38\uc81c\n\nnpm audit\uc5d0\uc11c 6\uac1c\uc758 moderate \ucde8\uc57d\uc810 \ubc1c\uacac\n\n| \ud328\ud0a4\uc9c0 | \ucde8\uc57d\uc810 |\n|--------|--------|\n| electron | ASAR Integrity Bypass (< 35.7.5) |\n| esbuild | Development server request leak (\u2264 0.24.2) |\n| vite | esbuild \uc758\uc874\uc131 "}


identifier: gh_issue_3742330145
source: github_issue
status: new
created_at: 2025-12-18 10:17:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3742330145", "title": "Update to latest Android Gradle Plugin (8.13.2) and compatible Gradle (8.14.3)", "url": "https://github.com/LookAtWhatAiCanDo/Codeoba/issues/19", "user": "paulpv", "user_url": "https://github.com/paulpv", "repo": "Codeoba", "body_preview": "Update the project to use the latest Android Gradle Plugin (8.13.2) and the latest compatible Gradle wrapper version (8.14.3).\n\n**Tasks:**\n- Update `build.gradle` files to require AGP 8.13.2.\n- Update Gradle wrapper to 8.14.3 using `./gradlew wrapper --gradle-version 8.14.3`.\n- Verify successful sync and build in Android Studio.\n- Run tests to ensure proper compatibility and functionality.\n\n**Background:**\nUpgrading these dependencies ensures maximum compatibility with tooling, improves build pe", "created": "2025-12-18T09:52:30Z", "labels": [], "context": "Update to latest Android Gradle Plugin (8.13.2) and compatible Gradle (8.14.3) Update the project to use the latest Android Gradle Plugin (8.13.2) and the latest compatible Gradle wrapper version (8.14.3).\n\n**Tasks:**\n- Update `build.gradle` files to require AGP 8.13.2.\n- Update"}


identifier: gh_issue_3742319091
source: github_issue
status: new
created_at: 2025-12-18 10:17:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3742319091", "title": "[MEDIUM] Security Vulnerability in redis", "url": "https://github.com/testing-gh-org-2/test_node_dependency_issues/issues/783", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "test_node_dependency_issues", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `redis`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2023-28856\n\n**Description:**\nRedis is an open source, in-memory database that persists on disk. Authenticated users can use the `HINCRBYFLOAT` command to create an invalid hash field that will crash Redis on access in affected versions. This issue has been addressed in in versions 7.0.11, 6.2.12, and 6.0.19. Users are advised to upgrade. There are no kno", "created": "2025-12-18T09:49:35Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in redis ## Security Vulnerability Detected\n\n**Dependency:** `redis`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2023-28856\n\n**Description:**\nRedis is an open source, in"}


identifier: gh_issue_3742318610
source: github_issue
status: new
created_at: 2025-12-18 10:17:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3742318610", "title": "[HIGH] Security Vulnerability in faye-websocket", "url": "https://github.com/testing-gh-org-2/test_node_dependency_issues/issues/780", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "test_node_dependency_issues", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `faye-websocket`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15133\n\n**Description:**\nIn faye-websocket before version 0.11.0, there is a lack of certification validation in TLS handshakes. The `Faye::WebSocket::Client` class uses the `EM::Connection#start_tls` method in EventMachine to implement the TLS handshake whenever a `wss:` URL is used for the connection. This method does not implement certifica", "created": "2025-12-18T09:49:26Z", "labels": [], "context": "[HIGH] Security Vulnerability in faye-websocket ## Security Vulnerability Detected\n\n**Dependency:** `faye-websocket`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15133\n\n**Description:**\nIn faye-websocket be"}


identifier: gh_issue_3742316494
source: github_issue
status: new
created_at: 2025-12-18 10:17:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3742316494", "title": "[LOW] Security Vulnerability in redis", "url": "https://github.com/testing-gh-org-2/test_node_dependency_issues/issues/769", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "test_node_dependency_issues", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `redis`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2023-45145\n\n**Description:**\nRedis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask(2) is used, this creates a race condition that enables, during a short period of time, another process to establish an otherwise unau", "created": "2025-12-18T09:48:53Z", "labels": [], "context": "[LOW] Security Vulnerability in redis ## Security Vulnerability Detected\n\n**Dependency:** `redis`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2023-45145\n\n**Description:**\nRedis is an in-memory database"}


identifier: gh_issue_3742434568
source: github_issue
status: new
created_at: 2025-12-18 10:30:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3742434568", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/amarjotsinghh/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @amarjotsinghh! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each ste", "created": "2025-12-18T10:20:52Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @amarjotsinghh! Welcome"}


identifier: gh_issue_3742409437
source: github_issue
status: new
created_at: 2025-12-18 10:30:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3742409437", "title": "Security issues in container", "url": "https://github.com/luigi-project/luigi/issues/4670", "user": "walmazacn", "user_url": "https://github.com/walmazacn", "repo": "luigi", "body_preview": "Fix security issues in container reported in dependabot alerts", "created": "2025-12-18T10:14:54Z", "labels": ["security"], "context": "Security issues in container Fix security issues in container reported in dependabot alerts"}


identifier: gh_issue_3742255275
source: github_issue
status: new
created_at: 2025-12-18 10:30:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3742255275", "title": "Consider adjusting dependabot configuration to ignore patch version updates", "url": "https://github.com/hubverse-org/hubverse-developer-actions/issues/18", "user": "annakrystalli", "user_url": "https://github.com/annakrystalli", "repo": "hubverse-developer-actions", "body_preview": "## What prompted this\n\nWhile updating the workflow templates here to match hubverse-org/hubValidations#283, I noticed dependabot is opening PRs for patch version bumps (e.g., r-lib/actions v2.11.3 \u2192 v2.11.4, JamesIves/github-pages-deploy-action v4.7.3 \u2192 v4.7.6).\n\nSince we pin GitHub Actions to full SHAs per our [security policy](https://docs.hubverse.io/en/latest/developer/security.html), dependabot flags every release\u2014including patches\u2014as a potential update.\n\nWe already group patch and minor up", "created": "2025-12-18T09:32:54Z", "labels": ["question", "security"], "context": "Consider adjusting dependabot configuration to ignore patch version updates ## What prompted this\n\nWhile updating the workflow templates here to match hubverse-org/hubValidations#283, I noticed dependabot is opening PRs for patch version bumps (e.g., r-lib/actions v2.11.3 \u2192 v"}


identifier: gh_issue_3742222053
source: github_issue
status: new
created_at: 2025-12-18 10:30:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3742222053", "title": "[Security] Dependabot Alerts - golang.org/x/crypto, golang-jwt/jwt", "url": "https://github.com/Fai/KTax/issues/17", "user": "Fai", "user_url": "https://github.com/Fai", "repo": "KTax", "body_preview": "## Summary\nDependabot has detected **3 security vulnerabilities** in Go dependencies that require attention.\n\n## High Severity (1)\n\n| CVE | Package | Description |\n|-----|---------|-------------|\n| **CVE-2025-30204** | github.com/golang-jwt/jwt | Excessive memory allocation during header parsing |\n\n## Medium Severity (2)\n\n| CVE | Package | Description |\n|-----|---------|-------------|\n| CVE-2025-47914 | golang.org/x/crypto | ssh/agent panic on malformed message (out of bounds read) |\n| CVE-2025-", "created": "2025-12-18T09:24:37Z", "labels": ["dependencies", "security"], "context": "[Security] Dependabot Alerts - golang.org/x/crypto, golang-jwt/jwt ## Summary\nDependabot has detected **3 security vulnerabilities** in Go dependencies that require attention.\n\n## High Severity (1)\n\n| CVE | Package | Description |\n|-----|---------|-------------|\n| **"}


identifier: gh_issue_3742145144
source: github_issue
status: new
created_at: 2025-12-18 10:30:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3742145144", "title": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide", "url": "https://github.com/demos-aatmmr/test-2/issues/1", "user": "repo-crafter[bot]", "user_url": "https://github.com/apps/repo-crafter", "repo": "test-2", "body_preview": "# Welcome to demos-aatmmr/test-2!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Checklist\n\n- [ ] Review and update the repository description\n- [ ] Set up branch protection rules\n- [ ] Configure repository settings (Issues, Projects, Wiki, etc.)\n- [ ] Add repository topics/tags for discoverability\n- [ ] Set up automated workflows (if needed)\n\n## \ud83d\udd12 Security & Best Practices\n\n### Branch ", "created": "2025-12-18T09:04:03Z", "labels": ["documentation", "good first issue", "setup"], "context": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide # Welcome to demos-aatmmr/test-2!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Checklis"}


identifier: gh_issue_3742455788
source: github_issue
status: new
created_at: 2025-12-18 10:30:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3742455788", "title": "[HIGH] Security Vulnerability in cached-path-relative", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/502", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `cached-path-relative`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-23518\n\n**Description:**\nThe package cached-path-relative before 1.1.0 are vulnerable to Prototype Pollution via the cache variable that is set as {} instead of Object.create(null) in the cachedPathRelative function, which allows access to the parent prototype properties when the object is used to create the cached relative path. When us", "created": "2025-12-18T10:26:23Z", "labels": [], "context": "[HIGH] Security Vulnerability in cached-path-relative ## Security Vulnerability Detected\n\n**Dependency:** `cached-path-relative`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-23518\n\n**Description:**\nThe package ca"}


identifier: gh_issue_3742448566
source: github_issue
status: new
created_at: 2025-12-18 10:30:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3742448566", "title": "[HIGH] Security Vulnerability in cached-path-relative", "url": "https://github.com/testing-gh-org-2/test_node_dependency_issues/issues/830", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "test_node_dependency_issues", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `cached-path-relative`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-23518\n\n**Description:**\nThe package cached-path-relative before 1.1.0 are vulnerable to Prototype Pollution via the cache variable that is set as {} instead of Object.create(null) in the cachedPathRelative function, which allows access to the parent prototype properties when the object is used to create the cached relative path. When us", "created": "2025-12-18T10:24:32Z", "labels": [], "context": "[HIGH] Security Vulnerability in cached-path-relative ## Security Vulnerability Detected\n\n**Dependency:** `cached-path-relative`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-23518\n\n**Description:**\nThe package ca"}


identifier: gh_issue_3742423678
source: github_issue
status: new
created_at: 2025-12-18 10:42:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3742423678", "title": "Final version v1.00", "url": "https://github.com/AnomFIN/Overmind/issues/9", "user": "AnomFIN", "user_url": "https://github.com/AnomFIN", "repo": "Overmind", "body_preview": "COPILOT PROMPT (FINNISH) \u2014 Overmind: Backend t\u00e4ysin kuntoon + asennus.php (webhotelli) + asennus.py (Linux) + Auth/Chat/PWA/Salaus\n\nRepository: [https://github.com/AnomFIN/Overmind](https://github.com/AnomFIN/Overmind?utm_source=chatgpt.com)\n\nYou are acting as a Principal Backend Engineer + Security Engineer + Product-minded Full-stack dev.\n\nKonteksti (repo)\n\nOvermind on self-hosted dashboard. Nykyinen stack ja MVP-ajatus:\n\nBackend: Node.js 20 + Express\n\nStorage: JSON file storage (data/*.json)\n", "created": "2025-12-18T10:18:01Z", "labels": [], "context": "Final version v1.00 COPILOT PROMPT (FINNISH) \u2014 Overmind: Backend t\u00e4ysin kuntoon + asennus.php (webhotelli) + asennus.py (Linux) + Auth/Chat/PWA/Salaus\n\nRepository: [https://github.com/AnomFIN/Overmind](https://github.com"}


identifier: gh_issue_3742515132
source: github_issue
status: new
created_at: 2025-12-18 10:42:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3742515132", "title": "[0.83] Gate requestBody processing behind BuildConfig.DEBUG", "url": "https://github.com/reactwg/react-native-releases/issues/1196", "user": "huntie", "user_url": "https://github.com/huntie", "repo": "react-native-releases", "body_preview": "### Target Branch\n\n0.83\n\n### Link to commit or PR to be picked\n\nhttps://github.com/facebook/react-native/commit/33005a48fe0272ec0886d8be4eff8f86fd856e17\n\n### Description\n\nDefensive change following https://github.com/facebook/react-native/commit/9692e6488e2cd92a3f70b12640834211affdd704.", "created": "2025-12-18T10:41:33Z", "labels": ["Type Pick Request"], "context": "[0.83] Gate requestBody processing behind BuildConfig.DEBUG ### Target Branch\n\n0.83\n\n### Link to commit or PR to be picked\n\nhttps://github.com/facebook/react-native/commit/33005a48fe0272ec0886d8be4eff8f86fd856e17\n\n### Description\n\nDefensive change following ht"}


identifier: gh_issue_3742513538
source: github_issue
status: new
created_at: 2025-12-18 10:42:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3742513538", "title": "[0.83] Fix binary FormData uploads on Android", "url": "https://github.com/reactwg/react-native-releases/issues/1195", "user": "huntie", "user_url": "https://github.com/huntie", "repo": "react-native-releases", "body_preview": "### Target Branch\n\n0.83\n\n### Link to commit or PR to be picked\n\nhttps://github.com/facebook/react-native/commit/9692e6488e2cd92a3f70b12640834211affdd704\n\n### Description\n\nFixes user reported networking error: https://github.com/facebook/react-native/issues/54881", "created": "2025-12-18T10:41:08Z", "labels": ["Type Pick Request"], "context": "[0.83] Fix binary FormData uploads on Android ### Target Branch\n\n0.83\n\n### Link to commit or PR to be picked\n\nhttps://github.com/facebook/react-native/commit/9692e6488e2cd92a3f70b12640834211affdd704\n\n### Description\n\nFixes user reported networkin"}


identifier: gh_issue_3742508190
source: github_issue
status: new
created_at: 2025-12-18 10:42:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3742508190", "title": "[HIGH] Security Vulnerability in kind-of", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/530", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `kind-of`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2019-20149\n\n**Description:**\nctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': {'name':'Symbol'}. Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityI", "created": "2025-12-18T10:39:42Z", "labels": [], "context": "[HIGH] Security Vulnerability in kind-of ## Security Vulnerability Detected\n\n**Dependency:** `kind-of`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2019-20149\n\n**Description:**\nctorName in index.js in kin"}


identifier: gh_issue_3742508049
source: github_issue
status: new
created_at: 2025-12-18 10:42:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3742508049", "title": "[HIGH] Security Vulnerability in kind-of", "url": "https://github.com/testing-gh-org-2/test_node_dependency_issues/issues/847", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "test_node_dependency_issues", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `kind-of`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2019-20149\n\n**Description:**\nctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': {'name':'Symbol'}. Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityI", "created": "2025-12-18T10:39:39Z", "labels": [], "context": "[HIGH] Security Vulnerability in kind-of ## Security Vulnerability Detected\n\n**Dependency:** `kind-of`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2019-20149\n\n**Description:**\nctorName in index.js in kin"}


identifier: gh_issue_3742508042
source: github_issue
status: new
created_at: 2025-12-18 10:42:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3742508042", "title": "Security vulnerability in access control software allowing unauthorized access by dogs (1766054378) ", "url": "https://github.com/forest-town/pwr-release1/issues/1", "user": "pipcrispy", "user_url": "https://github.com/pipcrispy", "repo": "pwr-release1", "body_preview": "### Description:\n\nOur access control software has a critical security vulnerability that allows dogs to access the database without authentication. This issue poses a significant risk to the security and integrity of our system, as it allows unauthorized parties to gain access to sensitive information and potentially cause damage.\n\n### Steps to Reproduce:\n\nHave a dog (or any animal with paws) attempt to access the database without authentication.\nThe system should allow access without requiring ", "created": "2025-12-18T10:39:38Z", "labels": ["bug", "documentation"], "context": "Security vulnerability in access control software allowing unauthorized access by dogs (1766054378)  ### Description:\n\nOur access control software has a critical security vulnerability that allows dogs to access the database without authentication. This issue poses a significant risk to the security "}


identifier: gh_issue_3742454980
source: github_issue
status: new
created_at: 2025-12-18 10:54:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3742454980", "title": "[LOW] Security Vulnerability in redis", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/497", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `redis`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2023-45145\n\n**Description:**\nRedis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask(2) is used, this creates a race condition that enables, during a short period of time, another process to establish an otherwise unau", "created": "2025-12-18T10:26:08Z", "labels": [], "context": "[LOW] Security Vulnerability in redis ## Security Vulnerability Detected\n\n**Dependency:** `redis`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2023-45145\n\n**Description:**\nRedis is an in-memory database"}


identifier: gh_issue_3742454208
source: github_issue
status: new
created_at: 2025-12-18 10:54:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3742454208", "title": "[LOW] Security Vulnerability in redis", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/492", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `redis`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-3647\n\n**Description:**\n** DISPUTED ** A vulnerability, which was classified as problematic, was found in Redis up to 6.2.7/7.0.5. Affected is the function sigsegvHandler of the file debug.c of the component Crash Report. The manipulation leads to denial of service. The complexity of an attack is rather high. The exploitability is told to be difficult. ", "created": "2025-12-18T10:25:53Z", "labels": [], "context": "[LOW] Security Vulnerability in redis ## Security Vulnerability Detected\n\n**Dependency:** `redis`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-3647\n\n**Description:**\n** DISPUTED ** A vulnerability,"}


identifier: gh_issue_3742452628
source: github_issue
status: new
created_at: 2025-12-18 10:54:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3742452628", "title": "[MEDIUM] Security Vulnerability in redis", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/484", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `redis`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2023-28856\n\n**Description:**\nRedis is an open source, in-memory database that persists on disk. Authenticated users can use the `HINCRBYFLOAT` command to create an invalid hash field that will crash Redis on access in affected versions. This issue has been addressed in in versions 7.0.11, 6.2.12, and 6.0.19. Users are advised to upgrade. There are no kno", "created": "2025-12-18T10:25:29Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in redis ## Security Vulnerability Detected\n\n**Dependency:** `redis`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2023-28856\n\n**Description:**\nRedis is an open source, in"}


identifier: gh_issue_3742451078
source: github_issue
status: new
created_at: 2025-12-18 10:54:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3742451078", "title": "[HIGH] Security Vulnerability in faye-websocket", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/477", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `faye-websocket`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15133\n\n**Description:**\nIn faye-websocket before version 0.11.0, there is a lack of certification validation in TLS handshakes. The `Faye::WebSocket::Client` class uses the `EM::Connection#start_tls` method in EventMachine to implement the TLS handshake whenever a `wss:` URL is used for the connection. This method does not implement certifica", "created": "2025-12-18T10:25:08Z", "labels": [], "context": "[HIGH] Security Vulnerability in faye-websocket ## Security Vulnerability Detected\n\n**Dependency:** `faye-websocket`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15133\n\n**Description:**\nIn faye-websocket be"}


identifier: gh_issue_3742450725
source: github_issue
status: new
created_at: 2025-12-18 10:54:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3742450725", "title": "[MEDIUM] Security Vulnerability in redis", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/475", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `redis`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-31228\n\n**Description:**\nRedis is an open source, in-memory database that persists on disk. Authenticated users can trigger a denial-of-service by using specially crafted, long string match patterns on supported commands such as `KEYS`, `SCAN`, `PSUBSCRIBE`, `FUNCTION LIST`, `COMMAND LIST` and ACL definitions. Matching of extremely long patterns may ", "created": "2025-12-18T10:25:02Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in redis ## Security Vulnerability Detected\n\n**Dependency:** `redis`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-31228\n\n**Description:**\nRedis is an open source, in"}


identifier: gh_issue_3742484770
source: github_issue
status: new
created_at: 2025-12-18 10:54:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3742484770", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/egmmme/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @egmmme! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll", "created": "2025-12-18T10:33:54Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @egmmme! Welcome to you"}


identifier: gh_issue_3742552158
source: github_issue
status: new
created_at: 2025-12-18 11:06:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3742552158", "title": "Fix: The CI.yml scan comments on a PR even if there are no vulnerabilities found.", "url": "https://github.com/jalantechnologies/flask-react-template/issues/553", "user": "joeldsouza28", "user_url": "https://github.com/joeldsouza28", "repo": "flask-react-template", "body_preview": "## Description\nThe scan stage in ci.yml creates a comment like below even if there are no vulnerabilities found. This issue mainly arises when vulnerabilities are found and added to .trivyignore. Since we have added exit-code: 1 to the trivy scan step, even if vulnerabilities are added to trivyignore, trivy still exits with exit code 1 as vulnerabilities were found but were ignore in the report\n\n<img width=\"970\" height=\"315\" alt=\"Image\" src=\"https://github.com/user-attachments/assets/0e03205a-6f", "created": "2025-12-18T10:50:38Z", "labels": [], "context": "Fix: The CI.yml scan comments on a PR even if there are no vulnerabilities found. ## Description\nThe scan stage in ci.yml creates a comment like below even if there are no vulnerabilities found. This issue mainly arises when vulnerabilities are found and added to .trivyignore. Sinc"}


identifier: gh_issue_3742541345
source: github_issue
status: new
created_at: 2025-12-18 11:06:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3742541345", "title": "Dependency Dashboard", "url": "https://github.com/renovate-pro-dev-automation/sandra-swanson_gh_gw0_861067/issues/2", "user": "renovate-pro-dev[bot]", "user_url": "https://github.com/apps/renovate-pro-dev", "repo": "sandra-swanson_gh_gw0_861067", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Repository Problems\n\nRenovate tried to run on this repository, but found these problems.\n\n - \u26a0\ufe0f WARN: Your pom.xml contains windows line endings. This is not supported and may res", "created": "2025-12-18T10:48:22Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - ["}


identifier: gh_issue_3742540912
source: github_issue
status: new
created_at: 2025-12-18 11:06:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3742540912", "title": "Dependency Dashboard", "url": "https://github.com/renovate-pro-dev-automation-1/jacqueline-white_gh_gw1_861120/issues/2", "user": "renovate-pro-dev[bot]", "user_url": "https://github.com/apps/renovate-pro-dev", "repo": "jacqueline-white_gh_gw1_861120", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Repository Problems\n\nRenovate tried to run on this repository, but found these problems.\n\n - \u26a0\ufe0f WARN: Your pom.xml contains windows line endings. This is not supported and may res", "created": "2025-12-18T10:48:14Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - ["}


identifier: gh_issue_3742735038
source: github_issue
status: new
created_at: 2025-12-18 11:42:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3742735038", "title": "WanVideoSampler Sizes of tensors must match except in dimension 0. Expected size 366 but got size 90 for tensor number 2 in the list.", "url": "https://github.com/kijai/ComfyUI-WanVideoWrapper/issues/1788", "user": "ABIA2024", "user_url": "https://github.com/ABIA2024", "repo": "ComfyUI-WanVideoWrapper", "body_preview": "I've been struggling periodically with these tensor and dimension problems for over a year now, and it's slowing down my creative flow. If someone could tell me WHY these problems exist and HOW TO ANTICIPATE them so they don't happen anymore, it would be the best end-of-year gift ever!\n(I'm willing to give a chess lesson in exchange for a good explanation! Seriously: https://www.chess.com/member/fischerp20)\n\nHere is my parameters : Windows 11, Nvidia 5090 VRAM 32Go RAM 64Go\n\nI work with a workfl", "created": "2025-12-18T11:37:23Z", "labels": [], "context": "WanVideoSampler Sizes of tensors must match except in dimension 0. Expected size 366 but got size 90 for tensor number 2 in the list. I've been struggling periodically with these tensor and dimension problems for over a year now, and it's slowing down my creative flow. If someone could tell me WHY these problems exist and HOW TO ANT"}


identifier: gh_issue_3742668358
source: github_issue
status: new
created_at: 2025-12-18 11:42:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3742668358", "title": "[FEATURE] CRUD Utilisateurs - Routes et Controllers", "url": "https://github.com/kenant68/Find-It/issues/71", "user": "kenant68", "user_url": "https://github.com/kenant68", "repo": "Find-It", "body_preview": "", "created": "2025-12-18T11:19:09Z", "labels": [], "context": "[FEATURE] CRUD Utilisateurs - Routes et Controllers "}


identifier: gh_issue_3742451120
source: github_issue
status: new
created_at: 2025-12-18 11:42:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3742451120", "title": "Documentation and Deployment", "url": "https://github.com/QuinntyneBrown/KidsToyHive/issues/23", "user": "QuinntyneBrown", "user_url": "https://github.com/QuinntyneBrown", "repo": "KidsToyHive", "body_preview": "# Epic 8: Documentation and Deployment\n\n**Epic ID:** KTHA-E08  \n**Epic Name:** Documentation and Deployment  \n**Estimated Effort:** 30-40 hours  \n**Priority:** High  \n**Dependencies:** Epic 1-7\n\n## Epic Description\nCreate comprehensive documentation for developers and users, establish deployment pipelines, configure production environments, and implement monitoring and logging for the KidsToyHive Admin application.\n\n---\n\n## User Stories\n\n### Story 8.1: Developer Documentation\n**Story ID:** KTHA-", "created": "2025-12-18T10:25:08Z", "labels": [], "context": "Documentation and Deployment # Epic 8: Documentation and Deployment\n\n**Epic ID:** KTHA-E08  \n**Epic Name:** Documentation and Deployment  \n**Estimated Effort:** 30-40 hours  \n**Priority:** High  \n**Dependencies:** Epic 1-7\n\n## Ep"}


identifier: gh_issue_3742382279
source: github_issue
status: new
created_at: 2025-12-18 11:42:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3742382279", "title": "SECURITYINTERNAL-134", "url": "https://github.com/SahanWeerasiri/test-email-automation/issues/174", "user": "SahanWeerasiri", "user_url": "https://github.com/SahanWeerasiri", "repo": "test-email-automation", "body_preview": "## Description\r\n- **SECURITYINTERNAL ID:** `134`\r\n- **Security Advisory ID:** `WSO2-2025-134`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Found some data exposed in your portal\"` in **security@**.\r\n- **Security Advisory:** [link](https://security-advisory.wso2.com/dashboard/advisory?name=WSO2-2025-134)\r\n- **Progress Progress View:** [link](https://security-advisory.wso2.com/dashboard/advisory/patchProgress?name=WSO2-2025-134)\r\n- **Reporter:** External Reporter\r\n- **Date:** Thu, Dec 18, 2025 at 2:2", "created": "2025-12-18T10:07:05Z", "labels": ["Reporter/External", "Severity/Low", "Type/Direct-Spam"], "context": "SECURITYINTERNAL-134 ## Description\r\n- **SECURITYINTERNAL ID:** `134`\r\n- **Security Advisory ID:** `WSO2-2025-134`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Found some data exposed in your portal\"` in **security@**.\r\n- **"}


identifier: gh_issue_3742212027
source: github_issue
status: new
created_at: 2025-12-18 11:42:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3742212027", "title": "[\ud83d\udd04 Observability] Migrate from LangSmith to Langfuse (Self-Hosted)", "url": "https://github.com/ArieGoldkin/SkillForge/issues/372", "user": "yonatangross", "user_url": "https://github.com/yonatangross", "repo": "SkillForge", "body_preview": "## Summary\n\nMigrate SkillForge's LLM observability from **LangSmith (cloud, paid)** to **Langfuse v3 (self-hosted, free)**. This eliminates per-trace costs while adding new features like native MCP prompt management and beautiful agent tracing.\n\n## Motivation\n\n```\n\u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510\n\u2502  COST COMPARISON                                                \u2502\n\u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524\n\u2502  LangSmith Cloud:     ~$50-50", "created": "2025-12-18T09:22:02Z", "labels": ["\ud83d\udd35 backend", "\ud83e\udd16 langgraph", "\u2728 feature", "\ud83d\udd04 refactor", "dependencies"], "context": "[\ud83d\udd04 Observability] Migrate from LangSmith to Langfuse (Self-Hosted) ## Summary\n\nMigrate SkillForge's LLM observability from **LangSmith (cloud, paid)** to **Langfuse v3 (self-hosted, free)**. This eliminates per-trace costs while adding new features like native MCP pr"}


identifier: gh_issue_3742599732
source: github_issue
status: new
created_at: 2025-12-18 11:54:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3742599732", "title": "Dependency Dashboard", "url": "https://github.com/jonathanmorley/nougat/issues/7", "user": "renovate[bot]", "user_url": "https://github.com/apps/renovate", "repo": "nougat", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/jonathanmorley/nougat).\n\n## Awaiting Schedule\n\nThe following updates are awaiting their schedule. To get an update now, click on a checkbox below.\n\n - [ ] <!-- unschedule-branch=renovate/lock-file-maintenance -->Lock file maintenance\n\n## Open\n\nThe ", "created": "2025-12-18T11:01:53Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the M"}


identifier: gh_issue_3742507909
source: github_issue
status: new
created_at: 2025-12-18 11:54:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3742507909", "title": "[HIGH] Security Vulnerability in kind-of", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/529", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `kind-of`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2019-20149\n\n**Description:**\nctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': {'name':'Symbol'}. Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityI", "created": "2025-12-18T10:39:36Z", "labels": [], "context": "[HIGH] Security Vulnerability in kind-of ## Security Vulnerability Detected\n\n**Dependency:** `kind-of`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2019-20149\n\n**Description:**\nctorName in index.js in kin"}


identifier: gh_issue_3742507824
source: github_issue
status: new
created_at: 2025-12-18 11:54:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3742507824", "title": "[HIGH] Security Vulnerability in kind-of", "url": "https://github.com/testing-gh-org-2/test_node_dependency_issues/issues/846", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "test_node_dependency_issues", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `kind-of`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2019-20149\n\n**Description:**\nctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': {'name':'Symbol'}. Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityI", "created": "2025-12-18T10:39:34Z", "labels": [], "context": "[HIGH] Security Vulnerability in kind-of ## Security Vulnerability Detected\n\n**Dependency:** `kind-of`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2019-20149\n\n**Description:**\nctorName in index.js in kin"}


identifier: gh_issue_3742829554
source: github_issue
status: new
created_at: 2025-12-18 12:06:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3742829554", "title": "CVE-2025-46295 (Critical) detected in commons-text-1.2.jar", "url": "https://github.com/billmcchesney1/foxtrot/issues/516", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "foxtrot", "body_preview": "## CVE-2025-46295 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>commons-text-1.2.jar</b></summary>\n\n<p>Apache Commons Text is a library focused on algorithms working on strings.</p>\n<p>Library home page: <a href=\"https://www.apache.org/\">https://www.apache.org/</a></p>\n<p>Path to dependency file: /foxtrot-translator/pom.xml</p>\n<p>Path to vulnerable library", "created": "2025-12-18T12:02:33Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-46295 (Critical) detected in commons-text-1.2.jar ## CVE-2025-46295 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3742825043
source: github_issue
status: new
created_at: 2025-12-18 12:06:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3742825043", "title": "CVE-2025-46295 (Critical) detected in commons-text-1.4.jar", "url": "https://github.com/billmcchesney1/flow/issues/255", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "flow", "body_preview": "## CVE-2025-46295 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>commons-text-1.4.jar</b></summary>\n\n<p>Apache Commons Text is a library focused on algorithms working on strings.</p>\n<p>Library home page: <a href=\"https://www.apache.org/\">https://www.apache.org/</a></p>\n<p>Path to dependency file: /pom.xml</p>\n<p>Path to vulnerable library: /home/wss-scanner", "created": "2025-12-18T12:01:27Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-46295 (Critical) detected in commons-text-1.4.jar ## CVE-2025-46295 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3742824843
source: github_issue
status: new
created_at: 2025-12-18 12:06:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3742824843", "title": "CVE-2025-46295 (Critical) detected in commons-text-1.1.jar", "url": "https://github.com/billmcchesney1/pacbot/issues/583", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "pacbot", "body_preview": "## CVE-2025-46295 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>commons-text-1.1.jar</b></summary>\n\n<p>Apache Commons Text is a library focused on algorithms working on strings.</p>\n<p>Library home page: <a href=\"https://www.apache.org/\">https://www.apache.org/</a></p>\n<p>Path to dependency file: /jobs/pacman-rule-engine-2.0/pom.xml</p>\n<p>Path to vulnerabl", "created": "2025-12-18T12:01:24Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-46295 (Critical) detected in commons-text-1.1.jar ## CVE-2025-46295 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3742824622
source: github_issue
status: new
created_at: 2025-12-18 12:06:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3742824622", "title": "CVE-2025-46295 (Critical) detected in commons-text-1.8.jar", "url": "https://github.com/billmcchesney1/concord/issues/407", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "concord", "body_preview": "## CVE-2025-46295 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>commons-text-1.8.jar</b></summary>\n\n<p>Apache Commons Text is a library focused on algorithms working on strings.</p>\n<p>Library home page: <a href=\"https://www.apache.org/\">https://www.apache.org/</a></p>\n<p>Path to dependency file: /cli/pom.xml</p>\n<p>Path to vulnerable library: /cli/pom.xml,", "created": "2025-12-18T12:01:19Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-46295 (Critical) detected in commons-text-1.8.jar ## CVE-2025-46295 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3742824623
source: github_issue
status: new
created_at: 2025-12-18 12:06:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3742824623", "title": "CVE-2025-46295 (Critical) detected in commons-text-1.8.jar", "url": "https://github.com/billmcchesney1/concord/issues/408", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "concord", "body_preview": "## CVE-2025-46295 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>commons-text-1.8.jar</b></summary>\n\n<p>Apache Commons Text is a library focused on algorithms working on strings.</p>\n<p>Library home page: <a href=\"https://www.apache.org/\">https://www.apache.org/</a></p>\n<p>Path to dependency file: /cli/pom.xml</p>\n<p>Path to vulnerable library: /cli/pom.xml,", "created": "2025-12-18T12:01:19Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-46295 (Critical) detected in commons-text-1.8.jar ## CVE-2025-46295 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3742885833
source: github_issue
status: new
created_at: 2025-12-18 12:18:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3742885833", "title": "CVE-2025-46295 (Critical) detected in commons-text-1.9.jar", "url": "https://github.com/HoangBachLeLe/SalesTaxes/issues/266", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "SalesTaxes", "body_preview": "## CVE-2025-46295 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>commons-text-1.9.jar</b></summary>\n\n<p>Apache Commons Text is a library focused on algorithms working on strings.</p>\n<p>Library home page: <a href=\"https://www.apache.org/\">https://www.apache.org/</a></p>\n<p>\n\nDependency Hierarchy:\n  - webjars-locator-0.45.jar (Root Library)\n    - :x: **common", "created": "2025-12-18T12:17:27Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-46295 (Critical) detected in commons-text-1.9.jar ## CVE-2025-46295 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3742885321
source: github_issue
status: new
created_at: 2025-12-18 12:18:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3742885321", "title": "CVE-2025-46295 (Critical) detected in commons-text-1.9.jar", "url": "https://github.com/JortBloo/iaf/issues/95", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "iaf", "body_preview": "## CVE-2025-46295 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>commons-text-1.9.jar</b></summary>\n\n<p>Apache Commons Text is a library focused on algorithms working on strings.</p>\n<p>Library home page: <a href=\"https://www.apache.org/\">https://www.apache.org/</a></p>\n<p>Path to dependency file: /core/pom.xml</p>\n<p>Path to vulnerable library: /er/.m2/repo", "created": "2025-12-18T12:17:17Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-46295 (Critical) detected in commons-text-1.9.jar ## CVE-2025-46295 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3742885135
source: github_issue
status: new
created_at: 2025-12-18 12:18:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3742885135", "title": "CVE-2025-14874 (Medium) detected in nodemailer-6.6.1.tgz", "url": "https://github.com/SebastianDarie/reddit-clone/issues/126", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "reddit-clone", "body_preview": "## CVE-2025-14874 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>nodemailer-6.6.1.tgz</b></summary>\n\n<p>Easy as cake e-mail sending from your Node.js applications</p>\n<p>Library home page: <a href=\"https://registry.npmjs.org/nodemailer/-/nodemailer-6.6.1.tgz\">https://registry.npmjs.org/nodemailer/-/nodemailer-6.6.1.tgz</a></p>\n<p>Path to dependency file: /serv", "created": "2025-12-18T12:17:13Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-14874 (Medium) detected in nodemailer-6.6.1.tgz ## CVE-2025-14874 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3742884085
source: github_issue
status: new
created_at: 2025-12-18 12:18:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3742884085", "title": "CVE-2025-53000 (High) detected in nbconvert-6.5.3-py3-none-any.whl", "url": "https://github.com/sharmas1ddharth/Iris-classification/issues/66", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "Iris-classification", "body_preview": "## CVE-2025-53000 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>nbconvert-6.5.3-py3-none-any.whl</b></summary>\n\n<p>Converting Jupyter Notebooks</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/ae/32/98f5e052e81800e44838ab1ed0b884e034bb945d8d934f8ee1062ebe9965/nbconvert-6.5.3-py3-none-any.whl\">https://files.pythonhosted.org/packages/ae/", "created": "2025-12-18T12:16:57Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-53000 (High) detected in nbconvert-6.5.3-py3-none-any.whl ## CVE-2025-53000 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3742813617
source: github_issue
status: new
created_at: 2025-12-18 12:18:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3742813617", "title": "Dependency Dashboard", "url": "https://github.com/jonathanmorley/okra/issues/24", "user": "renovate[bot]", "user_url": "https://github.com/apps/renovate", "repo": "okra", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/jonathanmorley/okra).\n\n## Repository Problems\n\nThese problems occurred while renovating this repository. [View logs](https://developer.mend.io//github/jonathanmorley/okra).\n\n - \u26a0\ufe0f WARN: Detected empty commit - aborting git push\n\n## Awaiting Schedul", "created": "2025-12-18T11:58:45Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the M"}


identifier: gh_issue_3742747363
source: github_issue
status: new
created_at: 2025-12-18 12:43:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3742747363", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/yeboaeri/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @yeboaeri! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019", "created": "2025-12-18T11:41:06Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @yeboaeri! Welcome to y"}


identifier: gh_issue_3742927392
source: github_issue
status: new
created_at: 2025-12-18 12:43:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3742927392", "title": "CVE-2025-14874 (Medium) detected in nodemailer-6.6.3.tgz", "url": "https://github.com/SebastianDarie/airbnb-clone/issues/122", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "airbnb-clone", "body_preview": "## CVE-2025-14874 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>nodemailer-6.6.3.tgz</b></summary>\n\n<p>Easy as cake e-mail sending from your Node.js applications</p>\n<p>Library home page: <a href=\"https://registry.npmjs.org/nodemailer/-/nodemailer-6.6.3.tgz\">https://registry.npmjs.org/nodemailer/-/nodemailer-6.6.3.tgz</a></p>\n<p>Path to dependency file: /pack", "created": "2025-12-18T12:28:50Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-14874 (Medium) detected in nodemailer-6.6.3.tgz ## CVE-2025-14874 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3742927077
source: github_issue
status: new
created_at: 2025-12-18 12:43:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3742927077", "title": "storybook-8.4.6.tgz: 1 vulnerabilities (highest severity is: 7.3)", "url": "https://github.com/storm-software/cyclone-ui/issues/178", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "cyclone-ui", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>storybook-8.4.6.tgz</b></summary>\n\n<p>Storybook's CLI - install, dev, build, upgrade, and more</p>\n<p>Library home page: <a href=\"https://registry.npmjs.org/storybook/-/storybook-8.4.6.tgz\">https://registry.npmjs.org/storybook/-/storybook-8.4.6.tgz</a></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json", "created": "2025-12-18T12:28:44Z", "labels": ["Mend: dependency security vulnerability"], "context": "storybook-8.4.6.tgz: 1 vulnerabilities (highest severity is: 7.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>storybook-8.4.6.tgz</b></summary>\n\n<p>Storybook"}


identifier: gh_issue_3742925705
source: github_issue
status: new
created_at: 2025-12-18 12:43:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3742925705", "title": "CVE-2025-14874 (Medium) detected in nodemailer-2.7.2.tgz", "url": "https://github.com/kapseliboi/crowi/issues/248", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "crowi", "body_preview": "## CVE-2025-14874 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>nodemailer-2.7.2.tgz</b></summary>\n\n<p>Easy as cake e-mail sending from your Node.js applications</p>\n<p>Library home page: <a href=\"https://registry.npmjs.org/nodemailer/-/nodemailer-2.7.2.tgz\">https://registry.npmjs.org/nodemailer/-/nodemailer-2.7.2.tgz</a></p>\n<p>Path to dependency file: /pack", "created": "2025-12-18T12:28:25Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-14874 (Medium) detected in nodemailer-2.7.2.tgz ## CVE-2025-14874 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3742924984
source: github_issue
status: new
created_at: 2025-12-18 12:43:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3742924984", "title": "CVE-2025-14874 (Medium) detected in nodemailer-6.4.11.tgz", "url": "https://github.com/artkamote/examples/issues/494", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "examples", "body_preview": "## CVE-2025-14874 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>nodemailer-6.4.11.tgz</b></summary>\n\n<p>Easy as cake e-mail sending from your Node.js applications</p>\n<p>Library home page: <a href=\"https://registry.npmjs.org/nodemailer/-/nodemailer-6.4.11.tgz\">https://registry.npmjs.org/nodemailer/-/nodemailer-6.4.11.tgz</a></p>\n<p>Path to dependency file: /a", "created": "2025-12-18T12:28:11Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-14874 (Medium) detected in nodemailer-6.4.11.tgz ## CVE-2025-14874 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3742921773
source: github_issue
status: new
created_at: 2025-12-18 12:43:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3742921773", "title": "CVE-2025-14874 (Medium) detected in nodemailer-6.7.2.tgz", "url": "https://github.com/kapseliboi/BGPalerter/issues/40", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "BGPalerter", "body_preview": "## CVE-2025-14874 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>nodemailer-6.7.2.tgz</b></summary>\n\n<p>Easy as cake e-mail sending from your Node.js applications</p>\n<p>Library home page: <a href=\"https://registry.npmjs.org/nodemailer/-/nodemailer-6.7.2.tgz\">https://registry.npmjs.org/nodemailer/-/nodemailer-6.7.2.tgz</a></p>\n<p>Path to dependency file: /pack", "created": "2025-12-18T12:27:22Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-14874 (Medium) detected in nodemailer-6.7.2.tgz ## CVE-2025-14874 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3743070686
source: github_issue
status: new
created_at: 2025-12-18 13:07:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3743070686", "title": "nodemailer-7.0.9.tgz: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/ibm-skills-network/mark/issues/224", "user": "ibm-mend-app[bot]", "user_url": "https://github.com/apps/ibm-mend-app", "repo": "mark", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>nodemailer-7.0.9.tgz</b></summary>\n\n<p>Easy as cake e-mail sending from your Node.js applications</p>\n<p>Library home page: <a href=\"https://registry.npmjs.org/nodemailer/-/nodemailer-7.0.9.tgz\">https://registry.npmjs.org/nodemailer/-/nodemailer-7.0.9.tgz</a></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /node_", "created": "2025-12-18T13:03:26Z", "labels": ["Mend: dependency security vulnerability"], "context": "nodemailer-7.0.9.tgz: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>nodemailer-7.0.9.tgz</b></summary>\n\n<p>Easy as "}


identifier: gh_issue_3743028297
source: github_issue
status: new
created_at: 2025-12-18 13:07:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3743028297", "title": "Fix: The CI.yml scan comments on a PR even if there are no vulnerabilities found.", "url": "https://github.com/jalantechnologies/node-react-template/issues/285", "user": "joeldsouza28", "user_url": "https://github.com/joeldsouza28", "repo": "node-react-template", "body_preview": "## Description\nThe scan stage in ci.yml creates a comment like below even if there are no vulnerabilities found. This issue mainly arises when vulnerabilities are found and added to .trivyignore. Since we have added exit-code: 1 to the trivy scan step, even if vulnerabilities are added to trivyignore, trivy still exits with exit code 1 as vulnerabilities were found but were ignore in the report\n\n<img width=\"970\" height=\"315\" alt=\"Image\" src=\"https://github.com/user-attachments/assets/0e03205a-6f", "created": "2025-12-18T12:54:08Z", "labels": [], "context": "Fix: The CI.yml scan comments on a PR even if there are no vulnerabilities found. ## Description\nThe scan stage in ci.yml creates a comment like below even if there are no vulnerabilities found. This issue mainly arises when vulnerabilities are found and added to .trivyignore. Sinc"}


identifier: gh_issue_3742978518
source: github_issue
status: new
created_at: 2025-12-18 13:07:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3742978518", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/MeghaKothari/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @MeghaKothari! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate", "created": "2025-12-18T12:42:32Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @MeghaKothari! Welcome to your Skills exer"}


identifier: gh_issue_3743097451
source: github_issue
status: new
created_at: 2025-12-18 13:19:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3743097451", "title": "\ud83c\udfaf Git Setup & Workflows Optimization - COMPLETE", "url": "https://github.com/Den3112/slovor/issues/39", "user": "Den3112", "user_url": "https://github.com/Den3112", "repo": "slovor", "body_preview": "# \ud83c\udfaf Git Setup & Workflows Optimization - \u2705 COMPLETE\n\n## \ud83d\udcca \u0427\u0442\u043e \u0431\u044b\u043b\u043e \u0441\u0434\u0435\u043b\u0430\u043d\u043e\n\n\u041f\u043e\u043b\u043d\u0430\u044f \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f Git workflow \u0438 GitHub Actions \u0434\u043b\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Slovor.\n\n### \ud83d\udcdd \u0421\u043e\u0437\u0434\u0430\u043d\u043d\u0430\u044f \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044f\n\n1. **GIT_SETUP_QUICK_START.md** \u2b50\n   - \u041e\u0434\u043d\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438\n   - 2-3 \u043c\u0438\u043d\u0443\u0442\u044b \u043d\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\n   - \u0412\u0441\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\n\n2. **WORKFLOWS_ANALYSIS.md**\n   - \u0413\u043b\u0443\u0431\u043e\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 7 workflows\n   - \u041f\u043e\u0447\u0435\u043c\u0443 \u043a\u0430\u0436\u0434\u044b\u0439 \u0443\u0434\u0430\u043b\u044f\u0435\u0442\u0441\u044f\n   - \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u043c\u0435\u043d\u0435\n\n3. **GIT_SETUP_COMPLETE.md**\n   - \u041f\u043e\u043b\u043d\u044b\u0439 \u043e\u0442\u0447\u0435\u0442 \u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f\u0445\n   - ", "created": "2025-12-18T13:09:25Z", "labels": [], "context": "\ud83c\udfaf Git Setup & Workflows Optimization - COMPLETE # \ud83c\udfaf Git Setup & Workflows Optimization - \u2705 COMPLETE\n\n## \ud83d\udcca \u0427\u0442\u043e \u0431\u044b\u043b\u043e \u0441\u0434\u0435\u043b\u0430\u043d\u043e\n\n\u041f\u043e\u043b\u043d\u0430\u044f \u043e\u043f\u0442\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f Git workflow \u0438 GitHub Actions \u0434\u043b\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Slovor.\n\n### \ud83d\udcdd \u0421\u043e\u0437\u0434\u0430\u043d\u043d\u0430\u044f \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044f\n\n1. **GIT_SETUP_QUICK_STA"}


identifier: gh_issue_3742955293
source: github_issue
status: new
created_at: 2025-12-18 13:19:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3742955293", "title": "\ud83d\ude80 Add compact format to all 26 remaining tools", "url": "https://github.com/crypto-ninja/mcp-server-for-Github/issues/38", "user": "crypto-ninja", "user_url": "https://github.com/crypto-ninja", "repo": "mcp-server-for-Github", "body_preview": "## Summary\n\nComplete the compact format rollout to ALL tools for maximum AI token efficiency.\n\n**Current state:**\n- \u2705 34 tools have compact format\n- \u274c 26 tools missing compact format\n- \u26aa 52 tools don't need it (create/update/delete actions)\n\n## Tools Missing Compact Format\n\n### By File\n\n| File | Tools | Count |\n|------|-------|-------|\n| `actions.py` | get_workflow_runs, get_workflow, get_workflow_run, get_job, get_job_logs, get_artifact | 6 |\n| `security.py` | get_dependabot_alert, get_code_sca", "created": "2025-12-18T12:36:35Z", "labels": ["enhancement"], "context": "\ud83d\ude80 Add compact format to all 26 remaining tools ## Summary\n\nComplete the compact format rollout to ALL tools for maximum AI token efficiency.\n\n**Current state:**\n- \u2705 34 tools have compact format\n- \u274c 26 tools missing compact format\n- \u26aa 52 tools don'"}


identifier: gh_issue_3743162505
source: github_issue
status: new
created_at: 2025-12-18 13:44:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3743162505", "title": "Update to fix important Security Update for Next.js 15 & 16", "url": "https://github.com/enjoy-art/enjoyart.org/issues/10", "user": "enjoy-art", "user_url": "https://github.com/enjoy-art", "repo": "enjoyart.org", "body_preview": "As noted by Vince, we are not priority targets for attack so updating the framework is probably not urgent.\n\nImportant Security Update for Next.js 15 & 16\n\nEmail received from Vercel:\n\nA critical vulnerability in React Server Components (CVE-2025-55182) has been responsibly disclosed. It affects React 19 and frameworks that use it, including Next.js (CVE-2025-66478).\n\nIf you are using Next.js, every version between Next.js 15 and 16 is affected, and we recommend immediately updating to the lates", "created": "2025-12-18T13:25:22Z", "labels": [], "context": "Update to fix important Security Update for Next.js 15 & 16 As noted by Vince, we are not priority targets for attack so updating the framework is probably not urgent.\n\nImportant Security Update for Next.js 15 & 16\n\nEmail received from Vercel:\n\nA critical vuln"}


identifier: gh_issue_3743128500
source: github_issue
status: new
created_at: 2025-12-18 13:44:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3743128500", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/abengtss-max/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @abengtss-max! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate", "created": "2025-12-18T13:16:32Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @abengtss-max! Welcome to your Skills exer"}


identifier: gh_issue_3743267999
source: github_issue
status: new
created_at: 2025-12-18 14:09:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3743267999", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/DiptaBhanu93/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @DiptaBhanu93! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate", "created": "2025-12-18T13:55:45Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @DiptaBhanu93! Welcome to your Skills exer"}


identifier: gh_issue_3743248232
source: github_issue
status: new
created_at: 2025-12-18 14:09:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3743248232", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/archanagolla/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @archanagolla! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate", "created": "2025-12-18T13:49:47Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @archanagolla! Welcome to your Skills exer"}


identifier: gh_issue_3743247935
source: github_issue
status: new
created_at: 2025-12-18 14:09:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3743247935", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/Robertinho18/-ESI--skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "-ESI--skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Robertinho18! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate", "created": "2025-12-18T13:49:42Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Robertinho18! Welcome to your Skills exer"}


identifier: gh_issue_3743247561
source: github_issue
status: new
created_at: 2025-12-18 14:09:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3743247561", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/rrymasz/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @rrymasz! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate your", "created": "2025-12-18T13:49:34Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @rrymasz! Welcome to your Skills exercise!"}


identifier: gh_issue_3743247095
source: github_issue
status: new
created_at: 2025-12-18 14:09:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3743247095", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/passadis/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @passadis! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate you", "created": "2025-12-18T13:49:25Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @passadis! Welcome to your Skills exercise"}


identifier: gh_issue_3742016835
source: github_issue
status: new
created_at: 2025-12-18 14:22:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3742016835", "title": "Enable 'one-off` module invocations for  `cue cmd`", "url": "https://github.com/cue-lang/cue/issues/4215", "user": "deepbrook", "user_url": "https://github.com/deepbrook", "repo": "cue", "body_preview": "**Is your feature request related to a problem? Please describe.**\n\nI'm providing several workflows written in CUE to teams which use them in non-CUE projects. While most people do not use CUE for their projects, it's part of our tool chain and available to all members via the team's devcontainer.\n\nFor example, they're used to generate dynamic CI pipelines. However, they're not a fan of the fact that they need to create a `cue.mod` directory to do so; they know nothing about CUE (a short-coming ", "created": "2025-12-18T08:29:06Z", "labels": ["FeatureRequest", "Triage"], "context": "Enable 'one-off` module invocations for  `cue cmd` **Is your feature request related to a problem? Please describe.**\n\nI'm providing several workflows written in CUE to teams which use them in non-CUE projects. While most people do not use CUE for the"}


identifier: gh_issue_3743250321
source: github_issue
status: new
created_at: 2025-12-18 14:33:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3743250321", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/RobertFleischmann/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @RobertFleischmann! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Cele", "created": "2025-12-18T13:50:27Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @RobertFleischmann! Welcome to your Skills"}


identifier: gh_issue_3743203582
source: github_issue
status: new
created_at: 2025-12-18 14:33:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3743203582", "title": "[QUESTION] Is CVE-2024-31449 Advisory Correct?", "url": "https://github.com/redis/redis/issues/14630", "user": "yevk", "user_url": "https://github.com/yevk", "repo": "redis", "body_preview": "The [CVE-2024-31449](https://github.com/redis/redis/security/advisories/GHSA-whxg-wx83-85p5) advisory has specific Patched Versions `6.2.16, 7.2.6, 7.4.1` while Affected Versions is `>= 2.8.18`.\n\nSnyk reports version 7.4.7 still has this vulnerability, which I think is false-positive. I assume Snyk relies on this advisory.\n\nCould you please check if I'm correct and update the advisory?", "created": "2025-12-18T13:36:04Z", "labels": [], "context": "[QUESTION] Is CVE-2024-31449 Advisory Correct? The [CVE-2024-31449](https://github.com/redis/redis/security/advisories/GHSA-whxg-wx83-85p5) advisory has specific Patched Versions `6.2.16, 7.2.6, 7.4.1` while Affected Versions is `>= 2.8.18`.\n\nSnyk"}


identifier: gh_issue_3743531726
source: github_issue
status: new
created_at: 2025-12-18 14:59:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3743531726", "title": "[MEDIUM] Security Vulnerability in ajv", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/598", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `ajv`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15366\n\n**Description:**\nAn issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2. A carefully crafted JSON schema could be provided that allows execution of other code by prototype pollution. (While untrusted schemas are recommended against, the worst case of an untrusted schema should be a denial of service, not exe", "created": "2025-12-18T14:59:18Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in ajv ## Security Vulnerability Detected\n\n**Dependency:** `ajv`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15366\n\n**Description:**\nAn issue was discovered in aj"}


identifier: gh_issue_3743531408
source: github_issue
status: new
created_at: 2025-12-18 14:59:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3743531408", "title": "[MEDIUM] Security Vulnerability in got", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/597", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `got`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-33987\n\n**Description:**\nThe got package before 12.1.0 (also fixed in 11.8.5) for Node.js allows a redirect to a UNIX socket.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2022-33987\\\"],\\\"published\\\":\\\"2022-06-18T21:15:07.933\\\",\\\"lastModified\\\":\\\"2024-11-21T07:08:43.620\\\",\\\"version\\\":\\\"3.1\\\",\\\"vectorString\\\":\\\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N", "created": "2025-12-18T14:59:15Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in got ## Security Vulnerability Detected\n\n**Dependency:** `got`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-33987\n\n**Description:**\nThe got package before 12.1.0"}


identifier: gh_issue_3743531248
source: github_issue
status: new
created_at: 2025-12-18 14:59:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3743531248", "title": "[LOW] Security Vulnerability in fresh", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/596", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `fresh`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2013-1779\n\n**Description:**\nCross-site scripting (XSS) vulnerability in the 3 slide gallery in the Fresh theme before 7.x-1.4 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2013-1779\\\"],\\\"published\\\"", "created": "2025-12-18T14:59:12Z", "labels": [], "context": "[LOW] Security Vulnerability in fresh ## Security Vulnerability Detected\n\n**Dependency:** `fresh`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2013-1779\n\n**Description:**\nCross-site scripting (XSS) vuln"}


identifier: gh_issue_3743531110
source: github_issue
status: new
created_at: 2025-12-18 14:59:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3743531110", "title": "[CRITICAL] Security Vulnerability in connect", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/595", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-49553\n\n**Description:**\nAdobe Connect versions 12.9 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by an attacker to execute malicious scripts in a victim's browser. Exploitation of this issue requires user interaction in that a victim must navigate to a crafted web page. A successful att", "created": "2025-12-18T14:59:09Z", "labels": [], "context": "[CRITICAL] Security Vulnerability in connect ## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-49553\n\n**Description:**\nAdobe Connect versions "}


identifier: gh_issue_3743530916
source: github_issue
status: new
created_at: 2025-12-18 14:59:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3743530916", "title": "[CRITICAL] Security Vulnerability in connect", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/594", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-54032\n\n**Description:**\nAdobe Connect versions 12.6, 11.4.7 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable fi", "created": "2025-12-18T14:59:06Z", "labels": [], "context": "[CRITICAL] Security Vulnerability in connect ## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-54032\n\n**Description:**\nAdobe Connect versions "}


identifier: gh_issue_3743528905
source: github_issue
status: new
created_at: 2025-12-18 14:59:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3743528905", "title": "Dependency Dashboard", "url": "https://github.com/renovate-pro-dev-automation/jeffrey-sosa_gh_847733/issues/3", "user": "renovate-pro-dev[bot]", "user_url": "https://github.com/apps/renovate-pro-dev", "repo": "jeffrey-sosa_gh_847733", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Open\n\nThe following updates have all been created. To force a retry/rebase of any, click on a checkbox below.\n\n - [ ] <!-- rebase-branch=renovate/maven-org.apache.logging.log4j-log4j-core-vulnerability -->[Update dependency org.apache.logging.log4j:log4j-core to v2.17.1 [SECURITY]](../pull/2)\n\n## Vulnerabilities\n\n`4`/`4` CVEs h", "created": "2025-12-18T14:58:36Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Open\n\nThe following updates h"}


identifier: gh_issue_3743455432
source: github_issue
status: new
created_at: 2025-12-18 14:59:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3743455432", "title": "Fix vulnerability on glob package", "url": "https://github.com/rally25rs/k8s-when-ready/issues/34", "user": "rafaellunaM", "user_url": "https://github.com/rafaellunaM", "repo": "k8s-when-ready", "body_preview": "please, there is a vulnerability on glob package that need be fixed, \n\n/usr/local/lib/node_modules/npm/node_modules/glob\n\nfixed in 11.1.0| 10.5.0\n\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-64756", "created": "2025-12-18T14:42:24Z", "labels": [], "context": "Fix vulnerability on glob package please, there is a vulnerability on glob package that need be fixed, \n\n/usr/local/lib/node_modules/npm/node_modules/glob\n\nfixed in 11.1.0| 10.5.0\n\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-64756"}


identifier: gh_issue_3743441356
source: github_issue
status: new
created_at: 2025-12-18 14:59:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3743441356", "title": "[Feature] An\u00e1lise de Seguran\u00e7a Automatizada (SAST/DAST)", "url": "https://github.com/cruzpeanelo/fabrica-de-workers/issues/57", "user": "cruzpeanelo", "user_url": "https://github.com/cruzpeanelo", "repo": "fabrica-de-workers", "body_preview": "## Objetivo\nIntegrar an\u00e1lise de seguran\u00e7a est\u00e1tica e din\u00e2mica no pipeline de desenvolvimento.\n\n## Funcionalidades\n\n### 1. SAST (Static Application Security Testing)\nAn\u00e1lise do c\u00f3digo fonte:\n- **OWASP Top 10**: SQL Injection, XSS, CSRF, etc\n- **Secrets Detection**: API keys, passwords, tokens\n- **Dependency Scan**: CVEs em bibliotecas\n- **Code Patterns**: Anti-patterns de seguran\u00e7a\n\n### 2. DAST (Dynamic Application Security Testing)\nAn\u00e1lise da aplica\u00e7\u00e3o rodando:\n- **API Fuzzing**: Testes de endpo", "created": "2025-12-18T14:38:44Z", "labels": [], "context": "[Feature] An\u00e1lise de Seguran\u00e7a Automatizada (SAST/DAST) ## Objetivo\nIntegrar an\u00e1lise de seguran\u00e7a est\u00e1tica e din\u00e2mica no pipeline de desenvolvimento.\n\n## Funcionalidades\n\n### 1. SAST (Static Application Security Testing)\nAn\u00e1lise do c\u00f3digo fonte:\n- **OWASP "}


identifier: gh_issue_3743533005
source: github_issue
status: new
created_at: 2025-12-18 15:11:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3743533005", "title": "[LOW] Security Vulnerability in node-fetch", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/605", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process would end without failure. For most people, this fix will have a little or no impact. However, if you are re", "created": "2025-12-18T14:59:39Z", "labels": [], "context": "[LOW] Security Vulnerability in node-fetch ## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before version"}


identifier: gh_issue_3743532857
source: github_issue
status: new
created_at: 2025-12-18 15:11:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3743532857", "title": "[MEDIUM] Security Vulnerability in node-fetch", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/604", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-0235\n\n**Description:**\nnode-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2022-0235\\\"],\\\"published\\\":\\\"2022-01-16T17:15:07.870\\\",\\\"lastModified\\\":\\\"2024-11-21T06:38:12.150\\\",\\\"version\\\":\\\"3.1\\\",\\\"vectorString\\\":\\\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/", "created": "2025-12-18T14:59:36Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in node-fetch ## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-0235\n\n**Description:**\nnode-fetch is vulnerabl"}


identifier: gh_issue_3743532706
source: github_issue
status: new
created_at: 2025-12-18 15:11:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3743532706", "title": "[CRITICAL] Security Vulnerability in node-serialize", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/603", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `node-serialize`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2017-5941\n\n**Description:**\nAn issue was discovered in the node-serialize package 0.0.4 for Node.js. Untrusted data passed into the unserialize() function can be exploited to achieve arbitrary code execution by passing a JavaScript Object with an Immediately Invoked Function Expression (IIFE).\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers", "created": "2025-12-18T14:59:33Z", "labels": [], "context": "[CRITICAL] Security Vulnerability in node-serialize ## Security Vulnerability Detected\n\n**Dependency:** `node-serialize`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2017-5941\n\n**Description:**\nAn issue was disc"}


identifier: gh_issue_3743532541
source: github_issue
status: new
created_at: 2025-12-18 15:11:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3743532541", "title": "[CRITICAL] Security Vulnerability in xmldom", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/602", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-39353\n\n**Description:**\nxmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. xmldom parses XML that is not well-formed because it contains multiple top level elements, and adds all root nodes to the `childNodes` collection of the `Document`, without reporting any error or throwing. This bre", "created": "2025-12-18T14:59:30Z", "labels": [], "context": "[CRITICAL] Security Vulnerability in xmldom ## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-39353\n\n**Description:**\nxmldom is a pure JavaScr"}


identifier: gh_issue_3743532361
source: github_issue
status: new
created_at: 2025-12-18 15:11:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3743532361", "title": "[CRITICAL] Security Vulnerability in xmldom", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/601", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-37616\n\n**Description:**\nA prototype pollution vulnerability exists in the function copy in dom.js in the xmldom (published as @xmldom/xmldom) package before 0.8.3 for Node.js via the p variable. NOTE: the vendor states \"we are in the process of marking this report as invalid\"; however, some third parties takes the position that \"A prototype injec", "created": "2025-12-18T14:59:27Z", "labels": [], "context": "[CRITICAL] Security Vulnerability in xmldom ## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-37616\n\n**Description:**\nA prototype pollution vu"}


identifier: gh_issue_3743473400
source: github_issue
status: new
created_at: 2025-12-18 15:23:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3743473400", "title": "Exercise: Expand your team with Copilot coding agent", "url": "https://github.com/JohnMarsden24/skills-expand-your-team-with-copilot/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-expand-your-team-with-copilot", "body_preview": "## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @JohnMarsden24! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll unlock the next level of your favorite AI-powered coding assistant. Let&#39;s learn how to assign Copilot coding tasks directly in GitHub! \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll", "created": "2025-12-18T14:46:58Z", "labels": [], "context": "Exercise: Expand your team with Copilot coding agent ## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @JohnMarsden24! Welcom"}


identifier: gh_issue_3743617885
source: github_issue
status: new
created_at: 2025-12-18 15:23:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3743617885", "title": "Dependency Dashboard", "url": "https://github.com/renovate-pro-dev-automation/anthony-williamson_gh_gw0_262765/issues/3", "user": "renovate-pro-dev[bot]", "user_url": "https://github.com/apps/renovate-pro-dev", "repo": "anthony-williamson_gh_gw0_262765", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Open\n\nThe following updates have all been created. To force a retry/rebase of any, click on a checkbox below.\n\n - [ ] <!-- rebase-branch=renovate/pypi-numpy-vulnerability -->[Update dependency numpy to v1.26.3 [SECURITY]](../pull/2)\n\n## Vulnerabilities\n\n`1`/`1` CVEs have Renovate fixes.\n\n<details><summary>pipenv</summary>\n<bloc", "created": "2025-12-18T15:22:14Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Open\n\nThe following updates h"}


identifier: gh_issue_3743533191
source: github_issue
status: new
created_at: 2025-12-18 15:35:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3743533191", "title": "Security: Remove synthetic keyboard injection; move native input capture behind napi-rs (safe-by-default)", "url": "https://github.com/SnowiyQ/Where-Winds-Meet-Midi-Player/issues/10", "user": "LahkLeKey", "user_url": "https://github.com/LahkLeKey", "repo": "Where-Winds-Meet-Midi-Player", "body_preview": "## Summary\nThe current Rust keyboard backend supports **synthetic keystroke generation** (`PostMessageW(WM_KEYDOWN/WM_KEYUP)` and `SendInput`). Even assuming the user uses the app perfectly, this capability is still a **tangible security and safety risk** for users and the project.\n\nThis issue proposes making the app **safe-by-default** by removing keystroke injection and isolating Windows-native code behind a small, auditable `napi-rs` module used by Electron.\n\n---\n\n## Why this is a real securi", "created": "2025-12-18T14:59:43Z", "labels": [], "context": "Security: Remove synthetic keyboard injection; move native input capture behind napi-rs (safe-by-default) ## Summary\nThe current Rust keyboard backend supports **synthetic keystroke generation** (`PostMessageW(WM_KEYDOWN/WM_KEYUP)` and `SendInput`). Even assuming the user uses the app perfectly, this capa"}


identifier: gh_issue_3742727502
source: github_issue
status: new
created_at: 2025-12-18 15:35:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3742727502", "title": "Exercise: Introduction to Repository Management", "url": "https://github.com/Gromikhan/skills-introduction-to-repository-management/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-repository-management", "body_preview": "## Introduction to Repository Management\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Gromikhan! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll configure your repository for easier collaboration. You&#39;ll learn how to protect your code, prepare for collaboration, and foster healthy growth in your projects.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete ", "created": "2025-12-18T11:35:10Z", "labels": [], "context": "Exercise: Introduction to Repository Management ## Introduction to Repository Management\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Gromikhan! Welcome to your"}


identifier: gh_issue_3743658382
source: github_issue
status: new
created_at: 2025-12-18 15:49:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3743658382", "title": "Vulnerabilities still present in v5.33.0", "url": "https://github.com/strapi/strapi/issues/25054", "user": "Dupflo", "user_url": "https://github.com/Dupflo", "repo": "strapi", "body_preview": "### Node Version\n\n20.11.1\n\n### NPM/Yarn/PNPM Version\n\n10.2.4\n\n### Strapi Version\n\n5.33.0\n\n### Operating System\n\nMacOS\n\n### Database\n\nSQLite\n\n### Javascript or Typescript\n\nTypescript\n\n### Reproduction URL\n\n_No response_\n\n### Bug Description\n\nA fresh install **or upgrade** to **Strapi v5.33.0** still reports multiple known vulnerabilities.  \nSome security scanners and advisories recommend downgrading to **Strapi v4**, which should not be necessary if fixes were correctly applied.\n\nAt the time of r", "created": "2025-12-18T15:33:31Z", "labels": [], "context": "Vulnerabilities still present in v5.33.0 ### Node Version\n\n20.11.1\n\n### NPM/Yarn/PNPM Version\n\n10.2.4\n\n### Strapi Version\n\n5.33.0\n\n### Operating System\n\nMacOS\n\n### Database\n\nSQLite\n\n### Javascript or Typescript\n\nTypescript\n\n### Reproduction "}


identifier: gh_issue_3743635709
source: github_issue
status: new
created_at: 2025-12-18 15:49:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3743635709", "title": "[FLangChain examples unclear / missing working snippets for encrypted vector storeEEDBACK]", "url": "https://github.com/cyborginc/cyborgdb-community-feedback/issues/54", "user": "saran-1305", "user_url": "https://github.com/saran-1305", "repo": "cyborgdb-community-feedback", "body_preview": "## HackerEarth Username\nssarankumar.cse2024\n\n## Category\n- [ ] Documentation\n- [ ] Performance/Latency\n- [x] Integration (LangChain/LlamaIndex/other frameworks)\n- [ ] Deployment\n- [ ] Compliance/Security\n- [ ] Bug\n- [ ] Other\n\n## Environment\n- Attempted to integrate CyborgDB with LangChain (Python)\n- OS: Windows / Linux / Android (specify if needed)\n- SDK: (unable to find full example in repo)\n\n## Issue summary\nThere are references to LangChain, but no complete, runnable snippet showing initiali", "created": "2025-12-18T15:26:57Z", "labels": ["feedback"], "context": "[FLangChain examples unclear / missing working snippets for encrypted vector storeEEDBACK] ## HackerEarth Username\nssarankumar.cse2024\n\n## Category\n- [ ] Documentation\n- [ ] Performance/Latency\n- [x] Integration (LangChain/LlamaIndex/other frameworks)\n- [ ] Deployment\n- [ ] Compliance/Secur"}


identifier: gh_issue_3743701834
source: github_issue
status: new
created_at: 2025-12-18 16:02:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3743701834", "title": "`url.parse` deprecation warnings with Node.js 24 LTS runtime", "url": "https://github.com/payloadcms/payload/issues/14978", "user": "fturmel", "user_url": "https://github.com/fturmel", "repo": "payload", "body_preview": "### Describe the Bug\n\nStarted getting warnings in logs after upgrading to node 24 related to the following line using `url.parse()`:\n\nhttps://github.com/payloadcms/payload/blob/ef710e334df6bd208b95d8498cd5bd4d3bb31ca2/packages/payload/src/auth/operations/refresh.ts#L67\n\n```\n[DEP0169] DeprecationWarning: `url.parse()` behavior is not standardized and prone to errors that have security implications. Use the WHATWG URL API instead. CVEs are not issued for `url.parse()` vulnerabilities.\n```\n\n\nDeprec", "created": "2025-12-18T15:46:34Z", "labels": ["status: needs-triage", "created-by: Contributor", "area: core", "invalid-reproduction", "Bug"], "context": "`url.parse` deprecation warnings with Node.js 24 LTS runtime ### Describe the Bug\n\nStarted getting warnings in logs after upgrading to node 24 related to the following line using `url.parse()`:\n\nhttps://github.com/payloadcms/payload/blob/ef710e334df6bd208b95d84"}


identifier: gh_issue_3743686809
source: github_issue
status: new
created_at: 2025-12-18 16:02:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3743686809", "title": "Required tests for merging are taking too long", "url": "https://github.com/OpenFUSIONToolkit/JPEC/issues/101", "user": "logan-nc", "user_url": "https://github.com/logan-nc", "repo": "JPEC", "body_preview": "The tests in `.github/workflows/test.yml` take nearly 8 minutes to run. Most of the time seems to be because it adds and compiles all the required julia packages every time it runs a test. We need to speed the whole process up to be under 2 minutes to be a reasonable automatic action that people can wait for before merging.", "created": "2025-12-18T15:42:01Z", "labels": ["help wanted"], "context": "Required tests for merging are taking too long The tests in `.github/workflows/test.yml` take nearly 8 minutes to run. Most of the time seems to be because it adds and compiles all the required julia packages every time it runs a test. We need to "}


identifier: gh_issue_3743678777
source: github_issue
status: new
created_at: 2025-12-18 16:02:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3743678777", "title": "Dependency Remediation Plan", "url": "https://github.com/00felix/open-smart-grid-platform/issues/9", "user": "00felix-app[bot]", "user_url": "https://github.com/apps/00felix-app", "repo": "open-smart-grid-platform", "body_preview": "## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-18T15:39:29Z", "labels": [], "context": "Dependency Remediation Plan ## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3743613703
source: github_issue
status: new
created_at: 2025-12-18 16:02:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3743613703", "title": "Build failure: mesa / steam", "url": "https://github.com/NixOS/nixpkgs/issues/472077", "user": "malikwirin", "user_url": "https://github.com/malikwirin", "repo": "nixpkgs", "body_preview": "### Nixpkgs version\n\n- Stable (25.11)\n\n### Steps to reproduce\n\nUpdating the `flake.lock` and rebuilding the configuration\n\n### Can Hydra reproduce this build failure?\n\nHydra doesn\u2019t try to build the package.\n\n### Link to Hydra build job\n\n_No response_\n\n### Relevant log output\n\n```console\nI cannot find the relevand hydra build. Mismatch of naming in local log and Hydra search machine\n```\n\n### Additional context\n\nProbelem arrives after the following changes:\n```diff\ndiff --git a/flake.lock b/flake", "created": "2025-12-18T15:21:04Z", "labels": ["0.kind: build failure"], "context": "Build failure: mesa / steam ### Nixpkgs version\n\n- Stable (25.11)\n\n### Steps to reproduce\n\nUpdating the `flake.lock` and rebuilding the configuration\n\n### Can Hydra reproduce this build failure?\n\nHydra doesn\u2019t try to build the p"}


identifier: gh_issue_3743731416
source: github_issue
status: new
created_at: 2025-12-18 16:02:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3743731416", "title": "\ud83d\udd12 SECURITY: Update bcrypt to v6.0.0 for critical security patches", "url": "https://github.com/gwicho38/lsh/issues/105", "user": "gwicho38", "user_url": "https://github.com/gwicho38", "repo": "lsh", "body_preview": "## Security Dependency Update: bcrypt v6.0.0\n\n### Problem\nCurrent bcrypt version (5.1.1) is outdated and missing critical security improvements available in v6.0.0.\n\n### Current Version\n```json\n\"bcrypt\": \"5.1.1\"\n```\n\n### Target Version\n```json\n\"bcrypt\": \"6.0.0\"\n```\n\n### Security Impact\n- Missing latest security patches\n- Potential vulnerabilities in password hashing\n- Outdated cryptographic implementations\n\n### Breaking Changes in v6.0.0\n- **Node.js 18+ required** (currently supports Node.js 16)", "created": "2025-12-18T15:55:45Z", "labels": ["enhancement", "dependencies"], "context": "\ud83d\udd12 SECURITY: Update bcrypt to v6.0.0 for critical security patches ## Security Dependency Update: bcrypt v6.0.0\n\n### Problem\nCurrent bcrypt version (5.1.1) is outdated and missing critical security improvements available in v6.0.0.\n\n### Current Version\n```json\n\"bcryp"}


identifier: gh_issue_3743762044
source: github_issue
status: new
created_at: 2025-12-18 16:14:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3743762044", "title": "Fix 4 security findings on 8 assets (critical severity)", "url": "https://github.com/Bajusz15/beacon/issues/40", "user": "Bajusz15", "user_url": "https://github.com/Bajusz15", "repo": "beacon", "body_preview": "Mondoo has assigned this ticket to fix 4 components with critical vulnerabilities on 8 assets. The risk score was evaluated to 100/100\n\nWhy it matters:\n\n- Risk score: 100/100 is critical, [link](https://mondoo.com/docs/platform/security/posture/findings/) for details\n- Risk factors: Known exploited vulnerability (3/3)\n- First detected: October 15, 2025\n- About the Mondoo scoring method: [link](https://mondoo.com/docs/platform/security/posture/findings/)\n\n\n## Apply CVE-2025-6554 on Windows 11, Wi", "created": "2025-12-18T16:04:03Z", "labels": ["mondoo", "security", "vulnerability"], "context": "Fix 4 security findings on 8 assets (critical severity) Mondoo has assigned this ticket to fix 4 components with critical vulnerabilities on 8 assets. The risk score was evaluated to 100/100\n\nWhy it matters:\n\n- Risk score: 100/100 is critical, [link](https"}


identifier: gh_issue_3743758374
source: github_issue
status: new
created_at: 2025-12-18 16:14:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3743758374", "title": "[LOW] Security Vulnerability in node-fetch", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/677", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get thrown and the process would end without failure. For most people, this fix will have a little or no impact. However, if you are re", "created": "2025-12-18T16:03:07Z", "labels": [], "context": "[LOW] Security Vulnerability in node-fetch ## Security Vulnerability Detected\n\n**Dependency:** `node-fetch`\n**Criticality:** LOW (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-15168\n\n**Description:**\nnode-fetch before version"}


identifier: gh_issue_3743753775
source: github_issue
status: new
created_at: 2025-12-18 16:14:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3743753775", "title": "x/vulndb: potential Go vuln in github.com/mattermost/mattermost: GHSA-q66g-q98c-q454", "url": "https://github.com/golang/vulndb/issues/4248", "user": "GoVulnBot", "user_url": "https://github.com/GoVulnBot", "repo": "vulndb", "body_preview": "Advisory [GHSA-q66g-q98c-q454](https://github.com/advisories/GHSA-q66g-q98c-q454) references a vulnerability in the following Go modules:\n\n| Module |\n| - |\n| [github.com/mattermost/mattermost](https://pkg.go.dev/github.com/mattermost/mattermost) |\n| [github.com/mattermost/mattermost](https://pkg.go.dev/github.com/mattermost/mattermost) |\n\nDescription:\nMattermost versions 10.11.x <= 10.11.4 fail to validate redirect URLs on the /error page, which allows an attacker to redirect a victim to a malic", "created": "2025-12-18T16:01:54Z", "labels": ["NeedsTriage"], "context": "x/vulndb: potential Go vuln in github.com/mattermost/mattermost: GHSA-q66g-q98c-q454 Advisory [GHSA-q66g-q98c-q454](https://github.com/advisories/GHSA-q66g-q98c-q454) references a vulnerability in the following Go modules:\n\n| Module |\n| - |\n| [github.com/mattermost/mattermost](https:/"}


identifier: gh_issue_3743802447
source: github_issue
status: new
created_at: 2025-12-18 16:28:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3743802447", "title": "BOUNTY 2 SOLUTION REPORT - PVAC-HFHE R\u00b2 ATTACK", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/325", "user": "Apalugobang", "user_url": "https://github.com/Apalugobang", "repo": "pvac_hfhe_cpp", "body_preview": "EXECUTIVE SUMMARY\nVulnerability: R\u00b2 Information Leak in PVAC-HFHE Implementation\nBug Location: combine_ciphers() and edge processing logic\nPlaintext Values Discovered: Multiple candidates identified through different attack vectors\nPrimary Answer: 3 (supported by source code and R\u00b2 attack analysis)\nCritical Finding: Implementation allows recovery of R\u00b2, enabling plaintext extraction\n\n1. BUG ANALYSIS: R\u00b2 LEAK VULNERABILITY\n1.1 Vulnerability Description\nThe PVAC-HFHE implementation contains a crit", "created": "2025-12-18T16:14:58Z", "labels": [], "context": "BOUNTY 2 SOLUTION REPORT - PVAC-HFHE R\u00b2 ATTACK EXECUTIVE SUMMARY\nVulnerability: R\u00b2 Information Leak in PVAC-HFHE Implementation\nBug Location: combine_ciphers() and edge processing logic\nPlaintext Values Discovered: Multiple candidates identified t"}


identifier: gh_issue_3743758851
source: github_issue
status: new
created_at: 2025-12-18 16:28:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3743758851", "title": "[CRITICAL] Security Vulnerability in xmldom", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/680", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-39353\n\n**Description:**\nxmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. xmldom parses XML that is not well-formed because it contains multiple top level elements, and adds all root nodes to the `childNodes` collection of the `Document`, without reporting any error or throwing. This bre", "created": "2025-12-18T16:03:16Z", "labels": [], "context": "[CRITICAL] Security Vulnerability in xmldom ## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-39353\n\n**Description:**\nxmldom is a pure JavaScr"}


identifier: gh_issue_3743758688
source: github_issue
status: new
created_at: 2025-12-18 16:28:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3743758688", "title": "[CRITICAL] Security Vulnerability in xmldom", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/679", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-37616\n\n**Description:**\nA prototype pollution vulnerability exists in the function copy in dom.js in the xmldom (published as @xmldom/xmldom) package before 0.8.3 for Node.js via the p variable. NOTE: the vendor states \"we are in the process of marking this report as invalid\"; however, some third parties takes the position that \"A prototype injec", "created": "2025-12-18T16:03:13Z", "labels": [], "context": "[CRITICAL] Security Vulnerability in xmldom ## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-37616\n\n**Description:**\nA prototype pollution vu"}


identifier: gh_issue_3743758543
source: github_issue
status: new
created_at: 2025-12-18 16:28:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3743758543", "title": "[MEDIUM] Security Vulnerability in xmldom", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/678", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-32796\n\n**Description:**\nxmldom is an open source pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.6.0 and older do not correctly escape special characters when serializing elements removed from their ancestor. This may lead to unexpected syntactic changes during XML processing in some d", "created": "2025-12-18T16:03:10Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in xmldom ## Security Vulnerability Detected\n\n**Dependency:** `xmldom`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-32796\n\n**Description:**\nxmldom is an open source p"}


identifier: gh_issue_3743783317
source: github_issue
status: new
created_at: 2025-12-18 16:28:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3743783317", "title": "QMX (Quantum Native Hybrid E-Systems)", "url": "https://github.com/osmiratrade/QMX-Coin-Quantum-Native-Hybrid-E-Systems-/issues/1", "user": "osmiratrade", "user_url": "https://github.com/osmiratrade", "repo": "QMX-Coin-Quantum-Native-Hybrid-E-Systems-", "body_preview": "<html>\n<body>\n<!--StartFragment--><h1><span>QMX (Quantum Native Hybrid E-Systems)</span></h1><p><strong><span>Status:</span></strong><span> Preliminary Whitepaper (Limited Disclosure)</span></p><p><span>**Network (Current Phase): BNB Smart Chain (BEP-20 Mainnet)</span></p><p><strong><span>Token Standard:</span></strong><span> BEP-20 (Mainnet)</span></p><div contenteditable=\"false\"><hr></div><h2><span>1. Abstract</span></h2><p><span>QMX (Quantum Native Hybrid E-Systems) is a next-generation exper", "created": "2025-12-18T16:09:46Z", "labels": [], "context": "QMX (Quantum Native Hybrid E-Systems) <html>\n<body>\n<!--StartFragment--><h1><span>QMX (Quantum Native Hybrid E-Systems)</span></h1><p><strong><span>Status:</span></strong><span> Preliminary Whitepaper (Limited Disclosure)</span></p><p><sp"}


identifier: gh_issue_3743726601
source: github_issue
status: new
created_at: 2025-12-18 16:28:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3743726601", "title": "Add Cosign signing to Helm charts for supply chain security", "url": "https://github.com/k8gb-io/k8gb/issues/2142", "user": "itsfarhan", "user_url": "https://github.com/itsfarhan", "repo": "k8gb", "body_preview": "Currently, k8gb Helm charts published to OCI registry are unsigned, which means no cryptographic proof of authenticity and users cannot verify charts haven't been tampered with. Also implementing cosign would be supply chain security best practices for a CNCF project.", "created": "2025-12-18T15:54:16Z", "labels": [], "context": "Add Cosign signing to Helm charts for supply chain security Currently, k8gb Helm charts published to OCI registry are unsigned, which means no cryptographic proof of authenticity and users cannot verify charts haven't been tampered with. Also implementing cosi"}


identifier: gh_issue_3743762755
source: github_issue
status: new
created_at: 2025-12-18 16:40:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3743762755", "title": "CRLF Injection vulnerability in io.netty:netty-codec-http@4.2.6.Final (CVE-2025-67735) via spring-cloud-starter-gateway-server-webflux", "url": "https://github.com/Code-Syndicate-Latam/ms-gateway/issues/5", "user": "Ralmao", "user_url": "https://github.com/Ralmao", "repo": "ms-gateway", "body_preview": "Description:\n\nA medium severity vulnerability (CVSS 6.9) has been detected in the transitive dependency io.netty:netty-codec-http@4.2.6.Final, introduced through:\n\n    org.springframework.cloud:spring-cloud-starter-gateway-server-webflux@5.0.0-M3\n\nVulnerability: CRLF Injection (CWE-93) | CVE-2025-67735\n\nImpact:\nNetty is vulnerable to CRLF Injection via the DefaultHttpRequest() function due to improper sanitization of URIs containing line breaks. An attacker can manipulate HTTP requests by inject", "created": "2025-12-18T16:04:11Z", "labels": [], "context": "CRLF Injection vulnerability in io.netty:netty-codec-http@4.2.6.Final (CVE-2025-67735) via spring-cloud-starter-gateway-server-webflux Description:\n\nA medium severity vulnerability (CVSS 6.9) has been detected in the transitive dependency io.netty:netty-codec-http@4.2.6.Final, introduced through:\n\n    org.springframework.cloud:spring"}


identifier: gh_issue_3743879429
source: github_issue
status: new
created_at: 2025-12-18 16:52:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3743879429", "title": "add anotations to pr linting", "url": "https://github.com/OmniBlocks/scratch-gui/issues/551", "user": "supervoidcoder", "user_url": "https://github.com/supervoidcoder", "repo": "scratch-gui", "body_preview": "lets add annotations to the pr linting so thta it lints the specific changed files and appears annotated in the files changed tab\n\n### Step 1: Get changed JS/JSX files before linting\n\nAdd this step **before** the \"Run ESLint\" step:\n\n```yaml\n- name: Get changed JavaScript files\n  id: changed-files\n  uses: actions/github-script@v7\n  with:\n    script: |\n      const prNumber = context.eventName === 'issue_comment'\n        ? context.issue.number\n        : context.payload.number;\n      \n      const { ", "created": "2025-12-18T16:35:23Z", "labels": [], "context": "add anotations to pr linting lets add annotations to the pr linting so thta it lints the specific changed files and appears annotated in the files changed tab\n\n### Step 1: Get changed JS/JSX files before linting\n\nAdd this step **"}


identifier: gh_issue_3743341496
source: github_issue
status: new
created_at: 2025-12-18 16:52:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3743341496", "title": "The `@aws-cdk/asset-awscli-v1` package currently installs vulnerable versions of `urllib3` (< 2.6.0)", "url": "https://github.com/cdklabs/awscdk-asset-awscli/issues/1333", "user": "bissli82", "user_url": "https://github.com/bissli82", "repo": "awscdk-asset-awscli", "body_preview": "The `@aws-cdk/asset-awscli-v1` package currently installs vulnerable versions of `urllib3` (< 2.6.0) as a transitive dependency of `awscli`. This affects all Lambda functions using `AwsCliLayer`, including those created by the `BucketDeployment` construct in AWS CDK.\n\n## Affected CVEs\n\n- **CVE-2025-66471**: Security vulnerability in urllib3 < 2.6.0\n- **CVE-2025-66418**: Security vulnerability in urllib3 < 2.6.0\n\n## Current Behavior\n\nThe `layer/requirements.txt` file currently contains:\n```txt\naw", "created": "2025-12-18T14:14:12Z", "labels": [], "context": "The `@aws-cdk/asset-awscli-v1` package currently installs vulnerable versions of `urllib3` (< 2.6.0) The `@aws-cdk/asset-awscli-v1` package currently installs vulnerable versions of `urllib3` (< 2.6.0) as a transitive dependency of `awscli`. This affects all Lambda functions using `AwsCliLayer`, incl"}


identifier: gh_issue_3743935141
source: github_issue
status: new
created_at: 2025-12-18 17:05:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3743935141", "title": "Latest 15 Papers - December 19, 2025", "url": "https://github.com/bddk520/DailyArXiv/issues/216", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "DailyArXiv", "body_preview": "**Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## LLM AND attack\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[The Trojan Knowledge: Bypassing Commercial LLM Guardrails via Harmless Prompt Weaving and Adaptive Tree Search](https://arxiv.org/abs/2512.01353v3)** | 2025-12-17 | <details><summary>Updat...</summary><p>Updated with new baselines and experimental results</p></details> |\n| **[A Multi-Ag", "created": "2025-12-18T16:52:48Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 19, 2025 **Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## LLM AND attack\n| **Title** | **Date** | **Comment** |\n| --- | --- "}


identifier: gh_issue_3743846100
source: github_issue
status: new
created_at: 2025-12-18 17:17:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3743846100", "title": "[BUG]  - Error in attempting to use it with a simple \"good morning!\"", "url": "https://github.com/DollhouseMCP/mcp-server/issues/1566", "user": "fsvxavier-dock", "user_url": "https://github.com/fsvxavier-dock", "repo": "mcp-server", "body_preview": "## Bug Summary\n<!-- One-line summary for project board visibility -->\n**Quick Summary**: \n\n## Description\nThe error message \"Failed to validate tool...: Error: tool parameters array type must have items\" indicates an issue with the JSON schema definition of a specific tool within an MCP (Model Context Protocol) server or extension. The tool's schema defines a parameter as having an array type, but it is missing the required items property, which specifies the type of elements within the array. \n", "created": "2025-12-18T16:26:14Z", "labels": [], "context": "[BUG]  - Error in attempting to use it with a simple \"good morning!\" ## Bug Summary\n<!-- One-line summary for project board visibility -->\n**Quick Summary**: \n\n## Description\nThe error message \"Failed to validate tool...: Error: tool parameters array type must have ite"}


identifier: gh_issue_3743751400
source: github_issue
status: new
created_at: 2025-12-18 17:17:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3743751400", "title": "\ud83d\udd27 MAINTENANCE: Enable stricter ESLint rules for better code quality", "url": "https://github.com/gwicho38/lsh/issues/112", "user": "gwicho38", "user_url": "https://github.com/gwicho38", "repo": "lsh", "body_preview": "## Code Quality: ESLint Configuration Too Lenient\n\n### Problem\nSeveral ESLint rules are set to 'warn' instead of 'error', allowing potential issues to slip through code review and into production.\n\n### Current ESLint Issues\n\n#### 1. Hardcoded Strings Rule\n**File**: `eslint.config.js`\n```javascript\n// Current: too lenient\n'lsh/no-hardcoded-strings': 'warn'  // Should be 'error'\n```\n\n**Impact**: Hardcoded strings can lead to maintenance issues and internationalization problems.\n\n#### 2. Missing Se", "created": "2025-12-18T16:01:16Z", "labels": ["enhancement", "good first issue"], "context": "\ud83d\udd27 MAINTENANCE: Enable stricter ESLint rules for better code quality ## Code Quality: ESLint Configuration Too Lenient\n\n### Problem\nSeveral ESLint rules are set to 'warn' instead of 'error', allowing potential issues to slip through code review and into production.\n\n##"}


identifier: gh_issue_3744022597
source: github_issue
status: new
created_at: 2025-12-18 17:30:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3744022597", "title": "Release Readiness: Prepare v4.0.0rc1", "url": "https://github.com/pvliesdonk/questfoundry/issues/199", "user": "pvliesdonk", "user_url": "https://github.com/pvliesdonk", "repo": "questfoundry", "body_preview": "## Overview\n\nPrepare the QuestFoundry repository for public release as v4.0.0rc1. This encompasses directory restructuring, documentation, CI/CD automation, and publishing infrastructure.\n\n## Directory Restructuring\n\n- [ ] **Rename `meta/` to `schema/`** (or similar) - clearer purpose as the contract layer\n- [ ] **Rename `domain-v4/` to `domain/`** - remove version suffix now that v4 is canonical\n- [ ] Update all imports and references to new paths\n- [ ] Consider consolidating `_archive/` or rem", "created": "2025-12-18T17:20:12Z", "labels": ["documentation"], "context": "Release Readiness: Prepare v4.0.0rc1 ## Overview\n\nPrepare the QuestFoundry repository for public release as v4.0.0rc1. This encompasses directory restructuring, documentation, CI/CD automation, and publishing infrastructure.\n\n## Director"}


identifier: gh_issue_3743976839
source: github_issue
status: new
created_at: 2025-12-18 17:30:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3743976839", "title": "Visiting reddit after fresh compile crashes browser", "url": "https://github.com/LadybirdBrowser/ladybird/issues/7183", "user": "hexmode", "user_url": "https://github.com/hexmode", "repo": "ladybird", "body_preview": "### Summary\n\nLadybird comes up. I type reddit.com in the location bar and a crash happens.\n\n\n### Operating system\n\nLinux\n\n### Steps to reproduce\n\n1.\n2.\n3.\n\n\n### Expected behavior\n\nreddit loads\n\n### Actual behavior\n\ntab crashes\n\n### URL for a reduced test case\n\nreddit.com\n\n### HTML/SVG/etc. source for a reduced test case\n\n```html\nnone\n```\n\n### Log output and (if possible) backtrace\n\n\n```shell\n763315.398 WebContent(1016435): FIXME: Handle null navigation_request in navigation response Content Secu", "created": "2025-12-18T17:05:59Z", "labels": [], "context": "Visiting reddit after fresh compile crashes browser ### Summary\n\nLadybird comes up. I type reddit.com in the location bar and a crash happens.\n\n\n### Operating system\n\nLinux\n\n### Steps to reproduce\n\n1.\n2.\n3.\n\n\n### Expected behavior\n\nreddit loads\n\n### Ac"}


identifier: gh_issue_3743827504
source: github_issue
status: new
created_at: 2025-12-18 17:30:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3743827504", "title": "Milestone 1.5: Story API Development Implementation Plan", "url": "https://github.com/90n9/talepick/issues/26", "user": "90n9", "user_url": "https://github.com/90n9", "repo": "talepick", "body_preview": "> Next.js 16 Monorepo | Clean Architecture | MongoDB | Story CRUD + Nodes + Media | 2025\n\n## 1. Milestone Overview\n\n**Objective**: Deliver the Story domain API needed for basic story browsing and future story gameplay, including:\n- Story CRUD (admin-managed)\n- StoryNode management (admin-managed)\n- Media asset upload (admin-managed)\n- Genre + tag management\n- Story search and filtering\n- Shared database model usage via `@talepick/backend`\n\n**Roadmap Source**: `PROJECT_ROADMAP.md` -> Phase 1 (Wee", "created": "2025-12-18T16:21:27Z", "labels": ["enhancement"], "context": "Milestone 1.5: Story API Development Implementation Plan > Next.js 16 Monorepo | Clean Architecture | MongoDB | Story CRUD + Nodes + Media | 2025\n\n## 1. Milestone Overview\n\n**Objective**: Deliver the Story domain API needed for basic story browsing and futu"}


identifier: gh_issue_3744222676
source: github_issue
status: new
created_at: 2025-12-18 18:10:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3744222676", "title": "Dependency Remediation Plan", "url": "https://github.com/00felix/georchestra/issues/4", "user": "00felix-app[bot]", "user_url": "https://github.com/apps/00felix-app", "repo": "georchestra", "body_preview": "## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-18T18:09:31Z", "labels": [], "context": "Dependency Remediation Plan ## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3744215890
source: github_issue
status: new
created_at: 2025-12-18 18:10:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3744215890", "title": "Resource Allocation Without Limits vulnerability in commons-configuration@1.10 via spring-cloud-starter-netflix-eureka-server@4.3.0", "url": "https://github.com/Code-Syndicate-Latam/ms-eureka/issues/4", "user": "Ralmao", "user_url": "https://github.com/Ralmao", "repo": "ms-eureka", "body_preview": "Description:\n\nA medium severity vulnerability (CVSS 6.9) has been detected in the transitive dependency commons-configuration:commons-configuration@1.10, introduced through:\n\n    org.springframework.cloud:spring-cloud-starter-netflix-eureka-server@4.3.0\n\nVulnerability: Allocation of Resources Without Limits or Throttling (CWE-770)\n\nImpact:\nApache Commons Configuration is vulnerable to excessive resource consumption through several issues in the loading of untrusted configurations. An attacker ca", "created": "2025-12-18T18:07:54Z", "labels": [], "context": "Resource Allocation Without Limits vulnerability in commons-configuration@1.10 via spring-cloud-starter-netflix-eureka-server@4.3.0 Description:\n\nA medium severity vulnerability (CVSS 6.9) has been detected in the transitive dependency commons-configuration:commons-configuration@1.10, introduced through:\n\n    org.springframework.c"}


identifier: gh_issue_3744209056
source: github_issue
status: new
created_at: 2025-12-18 18:10:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3744209056", "title": "fastlane-2.228.0.gem: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/appcues/appcues-capacitor-plugin/issues/163", "user": "appcues-wss[bot]", "user_url": "https://github.com/apps/appcues-wss", "repo": "appcues-capacitor-plugin", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>fastlane-2.228.0.gem</b></p></summary>\n\n<p></p>\n<p>Path to dependency file: /example/android/Gemfile.lock</p>\n<p>Path to vulnerable library: /example/android/Gemfile.lock,/example/ios/App/Gemfile.lock</p>\n<p>\n\n</details>\n\n## Vulnerabilities\n\n| CVE | Severity | <img src='https://whitesource-resources.whitesourcesoftware.com/cvss3.png' width=19 he", "created": "2025-12-18T18:05:51Z", "labels": ["Mend: dependency security vulnerability"], "context": "fastlane-2.228.0.gem: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>fastlane-2.228.0.gem</b></p></summary>\n\n<p></p>"}


identifier: gh_issue_3744208622
source: github_issue
status: new
created_at: 2025-12-18 18:10:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3744208622", "title": "fastlane-2.228.0.gem: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/appcues/appcues-flutter-plugin/issues/117", "user": "appcues-wss[bot]", "user_url": "https://github.com/apps/appcues-wss", "repo": "appcues-flutter-plugin", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>fastlane-2.228.0.gem</b></p></summary>\n\n<p></p>\n<p>Path to dependency file: /example/android/Gemfile.lock</p>\n<p>Path to vulnerable library: /example/ios/Gemfile.lock,/example/android/Gemfile.lock</p>\n<p>\n\n</details>\n\n## Vulnerabilities\n\n| CVE | Severity | <img src='https://whitesource-resources.whitesourcesoftware.com/cvss3.png' width=19 height", "created": "2025-12-18T18:05:41Z", "labels": ["Mend: dependency security vulnerability"], "context": "fastlane-2.228.0.gem: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>fastlane-2.228.0.gem</b></p></summary>\n\n<p></p>"}


identifier: gh_issue_3744207791
source: github_issue
status: new
created_at: 2025-12-18 18:10:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3744207791", "title": "fastlane-2.228.0.gem: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/appcues/appcues-ios-sdk/issues/611", "user": "appcues-wss[bot]", "user_url": "https://github.com/apps/appcues-wss", "repo": "appcues-ios-sdk", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>fastlane-2.228.0.gem</b></p></summary>\n\n<p></p>\n<p>Path to dependency file: /Gemfile.lock</p>\n<p>Path to vulnerable library: /Gemfile.lock</p>\n<p>\n\n</details>\n\n## Vulnerabilities\n\n| CVE | Severity | <img src='https://whitesource-resources.whitesourcesoftware.com/cvss3.png' width=19 height=20> CVSS | Dependency | Type | Fixed in (fastlane version", "created": "2025-12-18T18:05:28Z", "labels": ["Mend: dependency security vulnerability"], "context": "fastlane-2.228.0.gem: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>fastlane-2.228.0.gem</b></p></summary>\n\n<p></p>"}


identifier: gh_issue_3744234116
source: github_issue
status: new
created_at: 2025-12-18 18:22:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3744234116", "title": "CVE-2025-14762 (Medium) detected in aws-sdk-s3-1.96.1.gem", "url": "https://github.com/ChoeMinji/rails-7.0.0.alpha2/issues/181", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "rails-7.0.0.alpha2", "body_preview": "## CVE-2025-14762 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>aws-sdk-s3-1.96.1.gem</b></summary>\n\n<p>Official AWS Ruby gem for Amazon Simple Storage Service (Amazon S3). This gem is part of the AWS SDK for Ruby.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/aws-sdk-s3-1.96.1.gem\">https://rubygems.org/gems/aws-sdk-s3-1.96.1.gem</a></p>\n<p>Pat", "created": "2025-12-18T18:12:16Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-14762 (Medium) detected in aws-sdk-s3-1.96.1.gem ## CVE-2025-14762 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3744229504
source: github_issue
status: new
created_at: 2025-12-18 18:22:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3744229504", "title": "fastlane-2.229.1.gem: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/ls1intum/artemis-ios/issues/438", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "artemis-ios", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>fastlane-2.229.1.gem</b></summary>\n\n<p></p>\n<p>Path to dependency file: /Gemfile.lock</p>\n<p>Path to vulnerable library: /vendor/cache/aws-sdk-s3-1.205.0.gem</p>\n<p>\n\n</details>\n\n## Vulnerabilities\n\n| Vulnerability | Severity | <img src='https://whitesource-resources.whitesourcesoftware.com/cvss3.png' width=19 height=20> CVSS | Dependency | Type", "created": "2025-12-18T18:11:10Z", "labels": ["Mend: dependency security vulnerability"], "context": "fastlane-2.229.1.gem: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>fastlane-2.229.1.gem</b></summary>\n\n<p></p>\n<p>"}


identifier: gh_issue_3744228700
source: github_issue
status: new
created_at: 2025-12-18 18:22:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3744228700", "title": "aws-sdk-s3-1.203.1.gem: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/neinteractiveliterature/intercode/issues/11142", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "intercode", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>aws-sdk-s3-1.203.1.gem</b></summary>\n\n<p>Official AWS Ruby gem for Amazon Simple Storage Service (Amazon S3). This gem is part of the AWS SDK for Ruby.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/aws-sdk-s3-1.203.1.gem\">https://rubygems.org/gems/aws-sdk-s3-1.203.1.gem</a></p>\n<p>Path to dependency file: /Gemfile.lock</p>\n<p>Path", "created": "2025-12-18T18:11:03Z", "labels": ["Mend: dependency security vulnerability"], "context": "aws-sdk-s3-1.203.1.gem: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>aws-sdk-s3-1.203.1.gem</b></summary>\n\n<p>Offici"}


identifier: gh_issue_3744227899
source: github_issue
status: new
created_at: 2025-12-18 18:22:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3744227899", "title": "CVE-2025-14762 (Medium) detected in aws-sdk-s3-1.152.0.gem", "url": "https://github.com/ManageIQ/manageiq-appliance-build/issues/593", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "manageiq-appliance-build", "body_preview": "## CVE-2025-14762 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>aws-sdk-s3-1.152.0.gem</b></summary>\n\n<p>Official AWS Ruby gem for Amazon Simple Storage Service (Amazon S3). This gem is part of the AWS SDK for Ruby.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/aws-sdk-s3-1.152.0.gem\">https://rubygems.org/gems/aws-sdk-s3-1.152.0.gem</a></p>\n<p>", "created": "2025-12-18T18:10:53Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-14762 (Medium) detected in aws-sdk-s3-1.152.0.gem ## CVE-2025-14762 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3744312613
source: github_issue
status: new
created_at: 2025-12-18 18:34:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3744312613", "title": "Security review + hardening", "url": "https://github.com/altock/soulcaster/issues/74", "user": "altock", "user_url": "https://github.com/altock", "repo": "soulcaster", "body_preview": "Perform a security review (auth, secrets, SSRF, webhook validation, supply chain, least privilege).\n\nAcceptance:\n- Threat model notes\n- Concrete fixes or follow-up tickets\n- CI security checks considered", "created": "2025-12-18T18:32:20Z", "labels": [], "context": "Security review + hardening Perform a security review (auth, secrets, SSRF, webhook validation, supply chain, least privilege).\n\nAcceptance:\n- Threat model notes\n- Concrete fixes or follow-up tickets\n- CI security checks conside"}


identifier: gh_issue_3744166650
source: github_issue
status: new
created_at: 2025-12-18 18:34:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3744166650", "title": "feat: Add verify-signatures subcommand for anti-impersonation", "url": "https://github.com/jerus-org/pcu/issues/755", "user": "gortavoher", "user_url": "https://github.com/gortavoher", "repo": "pcu", "body_preview": "# Add `verify-signatures` Subcommand for Anti-Impersonation\n\n## Summary\n\nImplement `pcu verify-signatures` to prevent identity impersonation attacks by verifying GPG signatures on commits from trusted contributors.\n\n## Problem\n\nGit allows anyone to forge author names/emails, making it trivial to impersonate maintainers:\n\n```bash\ngit config user.email \"trusted-maintainer@example.org\"\ngit commit -m \"Add backdoor\"  # Appears to be from maintainer!\n```\n\nWithout signature verification, there's no cry", "created": "2025-12-18T17:53:32Z", "labels": ["enhancement", "security"], "context": "feat: Add verify-signatures subcommand for anti-impersonation # Add `verify-signatures` Subcommand for Anti-Impersonation\n\n## Summary\n\nImplement `pcu verify-signatures` to prevent identity impersonation attacks by verifying GPG signatures on commits from trusted"}


identifier: gh_issue_3744098013
source: github_issue
status: new
created_at: 2025-12-18 18:34:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3744098013", "title": "npm install returns serveral errors and vulnerabilites issues", "url": "https://github.com/DSpace/DSpace/issues/11717", "user": "divinoirj", "user_url": "https://github.com/divinoirj", "repo": "DSpace", "body_preview": "When running the 'npm install' command, several 'Could not resolve dependency' warnings are displayed.\nThe command was run with Node in three different versions: v20.19.3, v20.19.6 and v24.12.0, on Ubuntu 24 and Debian 12 operating systems.\n\nThe output of the command 'npm install':\n```\n/home/dspaceh/dspace-angular-dspace-9.2# npm install\nnpm warn ERESOLVE overriding peer dependency\nnpm warn While resolving: @angular/compiler-cli@20.3.14\nnpm warn Found: @angular/compiler@20.3.14\nnpm warn node_mod", "created": "2025-12-18T17:37:39Z", "labels": [], "context": "npm install returns serveral errors and vulnerabilites issues When running the 'npm install' command, several 'Could not resolve dependency' warnings are displayed.\nThe command was run with Node in three different versions: v20.19.3, v20.19.6 and v24.12.0, on Ub"}


identifier: gh_issue_3744258502
source: github_issue
status: new
created_at: 2025-12-18 18:58:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3744258502", "title": "[MEDIUM] Security Vulnerability in express", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3642", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-29041\n\n**Description:**\nExpress.js minimalist web framework for node. Versions of Express.js prior to 4.19.0 and all pre-release alpha and beta versions of 5.0 are affected by an open redirect vulnerability using malformed URLs. When a user of Express performs a redirect using a user-provided URL Express performs an encode [using `encodeurl`](http", "created": "2025-12-18T18:19:01Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in express ## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-29041\n\n**Description:**\nExpress.js minimalist web"}


identifier: gh_issue_3744258520
source: github_issue
status: new
created_at: 2025-12-18 18:58:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3744258520", "title": "[MEDIUM] Security Vulnerability in express", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3643", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-29041\n\n**Description:**\nExpress.js minimalist web framework for node. Versions of Express.js prior to 4.19.0 and all pre-release alpha and beta versions of 5.0 are affected by an open redirect vulnerability using malformed URLs. When a user of Express performs a redirect using a user-provided URL Express performs an encode [using `encodeurl`](http", "created": "2025-12-18T18:19:01Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in express ## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-29041\n\n**Description:**\nExpress.js minimalist web"}


identifier: gh_issue_3744258206
source: github_issue
status: new
created_at: 2025-12-18 18:58:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3744258206", "title": "[MEDIUM] Security Vulnerability in express", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3641", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-29041\n\n**Description:**\nExpress.js minimalist web framework for node. Versions of Express.js prior to 4.19.0 and all pre-release alpha and beta versions of 5.0 are affected by an open redirect vulnerability using malformed URLs. When a user of Express performs a redirect using a user-provided URL Express performs an encode [using `encodeurl`](http", "created": "2025-12-18T18:18:54Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in express ## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-29041\n\n**Description:**\nExpress.js minimalist web"}


identifier: gh_issue_3744250650
source: github_issue
status: new
created_at: 2025-12-18 18:58:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3744250650", "title": "External Initialization of Trusted Variables vulnerability in logback-core@1.5.18 via spring-boot-starter-web@3.5.6", "url": "https://github.com/Code-Syndicate-Latam/ms-eureka/issues/7", "user": "Ralmao", "user_url": "https://github.com/Ralmao", "repo": "ms-eureka", "body_preview": "Description:\n\nA medium severity vulnerability (CVSS 5.9) has been detected in the transitive dependency ch.qos.logback:logback-core@1.5.18, introduced through:\n\n    org.springframework.boot:spring-boot-starter-web@3.5.6\n\nVulnerability: External Initialization of Trusted Variables or Data Stores (CWE-454)\nStatus: Recurring vulnerability - Same Logback issue affecting multiple services\n\nImpact:\nLogback is vulnerable to arbitrary code execution via conditional processing of the logback.xml configur", "created": "2025-12-18T18:16:38Z", "labels": [], "context": "External Initialization of Trusted Variables vulnerability in logback-core@1.5.18 via spring-boot-starter-web@3.5.6 Description:\n\nA medium severity vulnerability (CVSS 5.9) has been detected in the transitive dependency ch.qos.logback:logback-core@1.5.18, introduced through:\n\n    org.springframework.boot:spring-boo"}


identifier: gh_issue_3744344081
source: github_issue
status: new
created_at: 2025-12-18 19:10:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3744344081", "title": "Exercise: Expand your team with Copilot coding agent", "url": "https://github.com/heavilind/skills-expand-your-team-with-copilot/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-expand-your-team-with-copilot", "body_preview": "## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @heavilind! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll unlock the next level of your favorite AI-powered coding assistant. Let&#39;s learn how to assign Copilot coding tasks directly in GitHub! \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll lea", "created": "2025-12-18T18:38:22Z", "labels": [], "context": "Exercise: Expand your team with Copilot coding agent ## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @heavilind! Welcome to"}


identifier: gh_issue_3744268548
source: github_issue
status: new
created_at: 2025-12-18 19:10:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3744268548", "title": "Dependency Remediation Plan", "url": "https://github.com/00felix/deegree3/issues/5", "user": "00felix-app[bot]", "user_url": "https://github.com/apps/00felix-app", "repo": "deegree3", "body_preview": "## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-18T18:21:30Z", "labels": [], "context": "Dependency Remediation Plan ## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3744253178
source: github_issue
status: new
created_at: 2025-12-18 19:10:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3744253178", "title": "[RFC] Upgrade to use Webpack v5, React v18, NodeJS v22", "url": "https://github.com/opensearch-project/OpenSearch-Dashboards/issues/11080", "user": "joshuali925", "user_url": "https://github.com/joshuali925", "repo": "OpenSearch-Dashboards", "body_preview": "## 1. Overview\n\nThe primary goals of this project are to modernize the OpenSearch Dashboards technology stack and reduce security concerns through the following upgrades:\n\n- Webpack upgrade from v4 to v5\n- NodeJS upgrade from v20 to v22\n- React upgrade from v16 to v18\n\n### 1.1. Webpack\n\nWebpack latest v4.47.0 was released 2 years ago, and v4.46.0 the version we use was from 5 years ago. While webpack typically do not have impactful CVEs, upgrading it to the latest version allows new features suc", "created": "2025-12-18T18:17:23Z", "labels": [], "context": "[RFC] Upgrade to use Webpack v5, React v18, NodeJS v22 ## 1. Overview\n\nThe primary goals of this project are to modernize the OpenSearch Dashboards technology stack and reduce security concerns through the following upgrades:\n\n- Webpack upgrade from v4 to"}


identifier: gh_issue_3744557845
source: github_issue
status: new
created_at: 2025-12-18 19:35:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3744557845", "title": "Audit and upgrade workspace dependencies", "url": "https://github.com/AgentFoundryExamples/CodeGraph/issues/13", "user": "johnbros", "user_url": "https://github.com/johnbros", "repo": "CodeGraph", "body_preview": "<!-- af:meta\nrun_id=20251218_133256-66f0fa22\niss_id=8197973c\n-->\n\n## Summary\n\n### Goal\nUpdate first- and third-party dependencies to supported, secure versions so packages build cleanly.\n\n### Context\n`npm run dev` currently surfaces deprecated packages and security warnings; outdated type packages also appear to fuel downstream compiler errors.\n\n### Plan\n\n1. Inventory every package.json (root + apps/packages/tools/docs/examples).\n\n2. Identify deprecated/insecure versions via `npm outdated`, advi", "created": "2025-12-18T19:33:43Z", "labels": ["af_run:20251218_133256-66f0fa22", "af_iss:8197973c"], "context": "Audit and upgrade workspace dependencies <!-- af:meta\nrun_id=20251218_133256-66f0fa22\niss_id=8197973c\n-->\n\n## Summary\n\n### Goal\nUpdate first- and third-party dependencies to supported, secure versions so packages build cleanly.\n\n### Context\n"}


identifier: gh_issue_3744583145
source: github_issue
status: new
created_at: 2025-12-18 19:47:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3744583145", "title": "Exercise: Introduction to Secret Scanning", "url": "https://github.com/antoniohernan/skills-introduction-to-secret-scanning/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-secret-scanning", "body_preview": "## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @antoniohernan! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll learn how to identify and protect sensitive information in your repositories. \ud83d\udd0d Let&#39;s work together to keep your code secure! \ud83d\udee1\ufe0f\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in th", "created": "2025-12-18T19:40:56Z", "labels": [], "context": "Exercise: Introduction to Secret Scanning ## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @antoniohernan! Welcome to your S"}


identifier: gh_issue_3744532320
source: github_issue
status: new
created_at: 2025-12-18 19:47:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3744532320", "title": "Table github_actions_repository_runner returning empty", "url": "https://github.com/turbot/steampipe-plugin-github/issues/527", "user": "gabrielsoltz", "user_url": "https://github.com/gabrielsoltz", "repo": "steampipe-plugin-github", "body_preview": "**Describe the bug**\n\nI'm having an issue with the github plugin table [github_actions_repository_runner](https://hub.steampipe.io/plugins/turbot/github/tables/github_actions_repository_runner)\n\n\nIf I query a repository I don't have access, I get 403:\n\n```bash\nselect * from github_actions_repository_runner where repository_full_name = 'turbot/steampipe'\n\nError: github: GET https://api.github.com/repos/turbot/steampipe/actions/runners?per_page=100: 403 You must have repository read permissions or", "created": "2025-12-18T19:26:05Z", "labels": ["bug", "steampipe"], "context": "Table github_actions_repository_runner returning empty **Describe the bug**\n\nI'm having an issue with the github plugin table [github_actions_repository_runner](https://hub.steampipe.io/plugins/turbot/github/tables/github_actions_repository_runner)\n\n\nIf I"}


identifier: gh_issue_3744437411
source: github_issue
status: new
created_at: 2025-12-18 19:58:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3744437411", "title": "x/vulndb: potential Go vuln in github.com/aws/amazon-s3-encryption-client-go/v3: GHSA-3g75-q268-r9r6", "url": "https://github.com/golang/vulndb/issues/4250", "user": "GoVulnBot", "user_url": "https://github.com/GoVulnBot", "repo": "vulndb", "body_preview": "Advisory [GHSA-3g75-q268-r9r6](https://github.com/advisories/GHSA-3g75-q268-r9r6) references a vulnerability in the following Go modules:\n\n| Module |\n| - |\n| [github.com/aws/amazon-s3-encryption-client-go](https://pkg.go.dev/github.com/aws/amazon-s3-encryption-client-go) |\n| [github.com/aws/amazon-s3-encryption-client-go/v3](https://pkg.go.dev/github.com/aws/amazon-s3-encryption-client-go/v3) |\n| [github.com/aws/amazon-s3-encryption-client-go/v4](https://pkg.go.dev/github.com/aws/amazon-s3-encry", "created": "2025-12-18T19:01:17Z", "labels": ["NeedsTriage"], "context": "x/vulndb: potential Go vuln in github.com/aws/amazon-s3-encryption-client-go/v3: GHSA-3g75-q268-r9r6 Advisory [GHSA-3g75-q268-r9r6](https://github.com/advisories/GHSA-3g75-q268-r9r6) references a vulnerability in the following Go modules:\n\n| Module |\n| - |\n| [github.com/aws/amazon-s3-encryption-clien"}


identifier: gh_issue_3744528801
source: github_issue
status: new
created_at: 2025-12-18 19:59:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3744528801", "title": "[Custom] issue while building", "url": "https://github.com/KernelSU-Next/KernelSU-Next/issues/994", "user": "CharaDreemurrDT", "user_url": "https://github.com/CharaDreemurrDT", "repo": "KernelSU-Next", "body_preview": "### Describe your problem.\n\nA section mismatch was found on the end of my kernel build. i put make to debug it, and i found this section mismatch:\nSection mismatch in reference from the function ksu_lsm_hook_init() to the function .init.text:security_add_hooks()\nThe function ksu_lsm_hook_init() references\nthe function __init security_add_hooks().\nThis is often because ksu_lsm_hook_init lacks a __init\nannotation or the annotation of security_add_hooks is wrong.\nthis needs to be fixed. this isnt o", "created": "2025-12-18T19:25:02Z", "labels": [], "context": "[Custom] issue while building ### Describe your problem.\n\nA section mismatch was found on the end of my kernel build. i put make to debug it, and i found this section mismatch:\nSection mismatch in reference from the function ksu_l"}


identifier: gh_issue_3744466253
source: github_issue
status: new
created_at: 2025-12-18 20:23:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3744466253", "title": "EPIC: Implement iterative generation with validation and feedback loops", "url": "https://github.com/Geoffe-Ga/specinit/issues/33", "user": "Geoffe-Ga", "user_url": "https://github.com/Geoffe-Ga", "repo": "specinit", "body_preview": "## Vision\n\nEach step in the generation process should inform subsequent steps, and the entire project should iterate until all features are fully functional and all checks pass green.\n\n## Problem Statement\n\nCurrently, specinit generates a project in a linear, one-shot process:\n1. Product spec \u2192 2. Structure \u2192 3. Docs \u2192 4. Tooling \u2192 5. Validation \u2192 6. Dependencies \u2192 7. Git \u2192 8. Demo code\n\nThis results in projects that:\n- Have dependency conflicts\n- Have version mismatches\n- Have generic documenta", "created": "2025-12-18T19:09:03Z", "labels": [], "context": "EPIC: Implement iterative generation with validation and feedback loops ## Vision\n\nEach step in the generation process should inform subsequent steps, and the entire project should iterate until all features are fully functional and all checks pass green.\n\n## Problem Stat"}


identifier: gh_issue_3744421925
source: github_issue
status: new
created_at: 2025-12-18 20:23:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3744421925", "title": "\ud83d\udcbe Feature: Implement Save Post & Collections System", "url": "https://github.com/brandonlacoste9-tech/zyeute-v3/issues/35", "user": "brandonlacoste9-tech", "user_url": "https://github.com/brandonlacoste9-tech", "repo": "zyeute-v3", "body_preview": "# \ud83d\udcbe Feature: Implement Save Post & Collections System\n## Enable Users to Bookmark Posts and Access Collection Dashboard\n\n**Priority:** MEDIUM  \n**Timeline:** Weeks 7-8 (Phase 3)  \n**Effort:** 12-16 hours  \n**Business Value:** +15-20% retention (bookmark feature baseline)\n\n---\n\n## \ud83c\udfaf Objective\n\nReplace current \"Coming Soon\" placeholder for Save Post with fully-functional bookmark system. Users can save posts, view collections, and manage saved items.\n\n**Current State:**\n- Save button shows toast: ", "created": "2025-12-18T18:57:28Z", "labels": ["phase-3", "feature", "social-engagement", "effort/12-16h"], "context": "\ud83d\udcbe Feature: Implement Save Post & Collections System # \ud83d\udcbe Feature: Implement Save Post & Collections System\n## Enable Users to Bookmark Posts and Access Collection Dashboard\n\n**Priority:** MEDIUM  \n**Timeline:** Weeks 7-8 (Phase 3)  \n**Effort:** 12-16 ho"}


identifier: gh_issue_3744419705
source: github_issue
status: new
created_at: 2025-12-18 20:23:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3744419705", "title": "\ud83d\ude80 Performance: Optimize PostDetail Bundle & 3G Load Times", "url": "https://github.com/brandonlacoste9-tech/zyeute-v3/issues/34", "user": "brandonlacoste9-tech", "user_url": "https://github.com/brandonlacoste9-tech", "repo": "zyeute-v3", "body_preview": "# \ud83d\ude80 Performance: Optimize PostDetail Bundle & 3G Load Times\n## Target: 3.2s \u2192 1.4s Load Time on Rural Quebec 3G Networks\n\n**Priority:** MEDIUM  \n**Timeline:** Weeks 5-7 (Phase 3)  \n**Effort:** 10-15 hours  \n**Business Value:** +25-30% user acquisition (3G networks = 30% Quebec users)\n\n---\n\n## \ud83c\udfaf Objective\n\nOptimize PostDetail.tsx from current 120KB chunk to <40KB lazy-loaded chunk. This reduces initial page paint from 3.2s to 1.4s on 3G networks, directly impacting user acquisition and retention ", "created": "2025-12-18T18:56:56Z", "labels": ["performance", "optimization", "phase-3", "effort/10-15h"], "context": "\ud83d\ude80 Performance: Optimize PostDetail Bundle & 3G Load Times # \ud83d\ude80 Performance: Optimize PostDetail Bundle & 3G Load Times\n## Target: 3.2s \u2192 1.4s Load Time on Rural Quebec 3G Networks\n\n**Priority:** MEDIUM  \n**Timeline:** Weeks 5-7 (Phase 3)  \n**Effort:** 10-15 h"}


identifier: gh_issue_3744417449
source: github_issue
status: new
created_at: 2025-12-18 20:23:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3744417449", "title": "\ud83d\udd27 TypeScript Error Resolution Sprint: 27 Type Errors \u2192 0", "url": "https://github.com/brandonlacoste9-tech/zyeute-v3/issues/33", "user": "brandonlacoste9-tech", "user_url": "https://github.com/brandonlacoste9-tech", "repo": "zyeute-v3", "body_preview": "# \ud83d\udd27 TypeScript Error Resolution Sprint\n## Eliminate Type Safety Gaps for Production-Ready Codebase\n\n**Priority:** HIGH  \n**Timeline:** Weeks 3-4 (Phase 2)  \n**Effort:** 20-30 hours  \n**Business Value:** +20-30% IDE productivity, compile-time safety\n\n---\n\n## \ud83c\udfaf Objective\n\nResolve all 27 remaining non-blocking TypeScript errors catalogued in [DEEP_AUDIT_REPORT.md](DEEP_AUDIT_REPORT.md). These errors don't prevent builds but reduce developer velocity and introduce potential runtime bugs.\n\n**Root Cau", "created": "2025-12-18T18:56:26Z", "labels": ["high-priority", "type-safety", "technical-debt", "effort/20-30h"], "context": "\ud83d\udd27 TypeScript Error Resolution Sprint: 27 Type Errors \u2192 0 # \ud83d\udd27 TypeScript Error Resolution Sprint\n## Eliminate Type Safety Gaps for Production-Ready Codebase\n\n**Priority:** HIGH  \n**Timeline:** Weeks 3-4 (Phase 2)  \n**Effort:** 20-30 hours  \n**Business Value:"}


identifier: gh_issue_3744697796
source: github_issue
status: new
created_at: 2025-12-18 20:23:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3744697796", "title": "Security: Address System.Private.Uri vulnerabilities", "url": "https://github.com/cheir-mneme/aletheia/issues/28", "user": "cheir-mneme", "user_url": "https://github.com/cheir-mneme", "repo": "aletheia", "body_preview": "## Summary\nDependabot has identified multiple HIGH/MEDIUM severity vulnerabilities in `System.Private.Uri` (.NET runtime dependency).\n\n## Alerts\n- 5 open alerts (mix of HIGH and MEDIUM severity)\n- Package: System.Private.Uri (transitive .NET dependency)\n\n## Potential Fix\n- PR #25 pins System.Private.Uri to 4.3.2 which may resolve this\n- If not, may require .NET SDK update beyond 8.0.405\n\n## Related\n- Dependabot security alerts: https://github.com/cheir-mneme/aletheia/security/dependabot\n\n## Acce", "created": "2025-12-18T20:15:27Z", "labels": ["bug", "phase-1"], "context": "Security: Address System.Private.Uri vulnerabilities ## Summary\nDependabot has identified multiple HIGH/MEDIUM severity vulnerabilities in `System.Private.Uri` (.NET runtime dependency).\n\n## Alerts\n- 5 open alerts (mix of HIGH and MEDIUM severity)\n- Pac"}


identifier: gh_issue_3744422571
source: github_issue
status: new
created_at: 2025-12-18 20:34:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3744422571", "title": "[Chore]: publish the helm chart to OCI", "url": "https://github.com/stacklok/toolhive-cloud-ui/issues/193", "user": "peppescg", "user_url": "https://github.com/peppescg", "repo": "toolhive-cloud-ui", "body_preview": "### Summary\nPublish the Helm chart to OCI registry (`ghcr.io`) for easier installation and GitOps compatibility.\n\n### Motivation\n- Direct install: `helm install oci://ghcr.io/stacklok/toolhive-cloud-ui/toolhive-cloud-ui`\n- Native ArgoCD/Flux support\n- Cosign signing for supply chain security\n\n", "created": "2025-12-18T18:57:34Z", "labels": [], "context": "[Chore]: publish the helm chart to OCI ### Summary\nPublish the Helm chart to OCI registry (`ghcr.io`) for easier installation and GitOps compatibility.\n\n### Motivation\n- Direct install: `helm install oci://ghcr.io/stacklok/toolhive-cloud-u"}


identifier: gh_issue_3744755334
source: github_issue
status: new
created_at: 2025-12-18 20:46:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3744755334", "title": "[Infrastructure] CI/CD Pipeline & Production Deployment", "url": "https://github.com/Do-not-be-afraid-to-be-knonwn/Job-Seeker-AI-Assistant/issues/41", "user": "matthewhou19", "user_url": "https://github.com/matthewhou19", "repo": "Job-Seeker-AI-Assistant", "body_preview": "## \ud83c\udfaf Objective\nEstablish automated CI/CD pipeline and production deployment infrastructure for reliable, repeatable deployments.\n\n## \ud83d\udccb Tasks\n\n### GitHub Actions CI Pipeline\n- [ ] Create `.github/workflows/ci.yml`\n  - [ ] Run on pull requests and main branch push\n  - [ ] Set up Node.js environment (v18+)\n  - [ ] Install dependencies with caching\n  - [ ] Run linting (`npm run lint`)\n  - [ ] Run type checking (`npm run type-check`)\n  - [ ] Run unit tests (`npm test`)\n  - [ ] Run integration tests\n ", "created": "2025-12-18T20:34:17Z", "labels": ["infrastructure"], "context": "[Infrastructure] CI/CD Pipeline & Production Deployment ## \ud83c\udfaf Objective\nEstablish automated CI/CD pipeline and production deployment infrastructure for reliable, repeatable deployments.\n\n## \ud83d\udccb Tasks\n\n### GitHub Actions CI Pipeline\n- [ ] Create `.github/workf"}


identifier: gh_issue_3744719493
source: github_issue
status: new
created_at: 2025-12-18 20:46:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3744719493", "title": "trpc-next-0.5.38.tgz: 7 vulnerabilities (highest severity is: 10.0)", "url": "https://github.com/storm-software/stryke/issues/61", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "stryke", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>trpc-next-0.5.38.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/storm-software/stryke/commit/2002fa5463b203758e8059135545bfdbf1e32826\">2002fa5463b203758e8059135545bfdbf1e32826</a></p></details>\n\n## Vulnerabilities", "created": "2025-12-18T20:22:14Z", "labels": ["Mend: dependency security vulnerability"], "context": "trpc-next-0.5.38.tgz: 7 vulnerabilities (highest severity is: 10.0) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>trpc-next-0.5.38.tgz</b></summary>\n\n<p></p>\n<p>"}


identifier: gh_issue_3744595746
source: github_issue
status: new
created_at: 2025-12-18 20:46:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3744595746", "title": "chore: Add comprehensive 'make verify' target with code quality and analysis tools", "url": "https://github.com/giantswarm/mcp-kubernetes/issues/188", "user": "teemow", "user_url": "https://github.com/teemow", "repo": "mcp-kubernetes", "body_preview": "## Summary\n\nAdd a comprehensive `make verify` target to mcp-kubernetes, similar to what was implemented in mcp-oauth (see [giantswarm/mcp-oauth#151](https://github.com/giantswarm/mcp-oauth/pull/151)).\n\n## Background\n\nThe mcp-oauth repository recently added a comprehensive set of Makefile targets for code quality, static analysis, security scanning, and verification. This provides a single command (`make verify`) that runs all quality checks, which is useful for:\n- Local development (ensuring cod", "created": "2025-12-18T19:45:01Z", "labels": [], "context": "chore: Add comprehensive 'make verify' target with code quality and analysis tools ## Summary\n\nAdd a comprehensive `make verify` target to mcp-kubernetes, similar to what was implemented in mcp-oauth (see [giantswarm/mcp-oauth#151](https://github.com/giantswarm/mcp-oauth/pull/151))."}


identifier: gh_issue_3744867179
source: github_issue
status: new
created_at: 2025-12-18 21:11:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3744867179", "title": "Test Suite: 84+ Pre-existing Test Failures Requiring Attention", "url": "https://github.com/friggframework/frigg/issues/521", "user": "seanspeaks", "user_url": "https://github.com/seanspeaks", "repo": "frigg", "body_preview": "## Overview\n\nRunning `npm run test:all` on branch `feature/integration-router-v2-drop-modules-router` (commit `7af7828e`) reveals **84+ pre-existing test failures** across multiple packages. These failures are unrelated to recent feature work and represent accumulated technical debt in the test suite.\n\n**Test Results Summary:**\n- **Failed:** 84+ test suites\n- **Passed:** 80+ test suites  \n- **Total:** ~165 test suites\n\n## Branch Information\n\n| Field | Value |\n|-------|-------|\n| **Branch** | `fe", "created": "2025-12-18T21:09:35Z", "labels": [], "context": "Test Suite: 84+ Pre-existing Test Failures Requiring Attention ## Overview\n\nRunning `npm run test:all` on branch `feature/integration-router-v2-drop-modules-router` (commit `7af7828e`) reveals **84+ pre-existing test failures** across multiple packages. These fai"}


identifier: gh_issue_3744837149
source: github_issue
status: new
created_at: 2025-12-18 21:11:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3744837149", "title": "Verify root dev workflow and document setup", "url": "https://github.com/AgentFoundryExamples/CodeGraph/issues/17", "user": "johnbros", "user_url": "https://github.com/johnbros", "repo": "CodeGraph", "body_preview": "<!-- af:meta\nrun_id=20251218_133256-66f0fa22\niss_id=cf3c41c6\n-->\n\n## Summary\n\n### Goal\nGuarantee `npm run dev` works from a clean clone and document the setup for contributors.\n\n### Context\nAfter dependency and type fixes, developers still need guidance for running the monorepo; optional nicety is smoother local onboarding.\n\n### Plan\n\n1. From a fresh install, execute `npm run dev` and each package's `dev` script to confirm servers start without TypeScript or runtime errors.\n\n2. Add troubleshooti", "created": "2025-12-18T21:00:55Z", "labels": ["af_run:20251218_133256-66f0fa22", "af_iss:cf3c41c6"], "context": "Verify root dev workflow and document setup <!-- af:meta\nrun_id=20251218_133256-66f0fa22\niss_id=cf3c41c6\n-->\n\n## Summary\n\n### Goal\nGuarantee `npm run dev` works from a clean clone and document the setup for contributors.\n\n### Context\nAfter depe"}


identifier: gh_issue_3744881321
source: github_issue
status: new
created_at: 2025-12-18 21:23:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3744881321", "title": "\ud83d\udd25 other/syslog-logstash-ksqldb", "url": "https://github.com/vdesabou/kafka-docker-playground/issues/7470", "user": "vdesabou", "user_url": "https://github.com/vdesabou", "repo": "kafka-docker-playground", "body_preview": "\ud83c\udd95\ud83d\udca5 New issue !\n\n\ud83d\udd25 CP 8.1.1 \ud83d\udd50 2025-12-18 18:36 \ud83d\udcc4 [start.sh](https://github.com/vdesabou/kafka-docker-playground/blob/master/other/syslog-logstash-ksqldb/start.sh) \ud83d\udd17 https://github.com/vdesabou/kafka-docker-playground/actions/runs/20346808220/job/58461876787\n\n<details><summary>Logs</summary>\n<pre>\n\n<code>\n\n18:31:59 \u2139\ufe0f \ud83d\udc80 kill all docker containers (disable with 'playground config container-kill-all-before-run false')\n18:31:59 \u2139\ufe0f \ud83d\udc80 kill all docker containers\nUnable to find image 'ddev/ddev-utilities", "created": "2025-12-18T21:14:53Z", "labels": ["new \ud83c\udd95"], "context": "\ud83d\udd25 other/syslog-logstash-ksqldb \ud83c\udd95\ud83d\udca5 New issue !\n\n\ud83d\udd25 CP 8.1.1 \ud83d\udd50 2025-12-18 18:36 \ud83d\udcc4 [start.sh](https://github.com/vdesabou/kafka-docker-playground/blob/master/other/syslog-logstash-ksqldb/start.sh) \ud83d\udd17 https://github.com/vdesabou/kafka-do"}


identifier: gh_issue_3744879617
source: github_issue
status: new
created_at: 2025-12-18 21:23:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3744879617", "title": "\ud83d\udd25 other/broker-schema-validation", "url": "https://github.com/vdesabou/kafka-docker-playground/issues/7469", "user": "vdesabou", "user_url": "https://github.com/vdesabou", "repo": "kafka-docker-playground", "body_preview": "\ud83c\udd95\ud83d\udca5 New issue !\n\n\ud83d\udd25 CP 8.1.1 \ud83d\udd50 2025-12-18 18:51 \ud83d\udcc4 [2way-ssl-and-security-plugin.sh](https://github.com/vdesabou/kafka-docker-playground/blob/master/other/broker-schema-validation/2way-ssl-and-security-plugin.sh) \ud83d\udd17 https://github.com/vdesabou/kafka-docker-playground/actions/runs/20346808220/job/58461876782\n\n<details><summary>Logs</summary>\n<pre>\n\n<code>\n\n18:49:14 \u2139\ufe0f \ud83d\udc80 kill all docker containers (disable with 'playground config container-kill-all-before-run false')\n18:49:14 \u2139\ufe0f \ud83d\udc80 kill all docker cont", "created": "2025-12-18T21:14:16Z", "labels": ["new \ud83c\udd95"], "context": "\ud83d\udd25 other/broker-schema-validation \ud83c\udd95\ud83d\udca5 New issue !\n\n\ud83d\udd25 CP 8.1.1 \ud83d\udd50 2025-12-18 18:51 \ud83d\udcc4 [2way-ssl-and-security-plugin.sh](https://github.com/vdesabou/kafka-docker-playground/blob/master/other/broker-schema-validation/2way-ssl-and-security-p"}


identifier: gh_issue_3744879468
source: github_issue
status: new
created_at: 2025-12-18 21:23:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3744879468", "title": "\ud83d\udd25 other/audit-logs", "url": "https://github.com/vdesabou/kafka-docker-playground/issues/7468", "user": "vdesabou", "user_url": "https://github.com/vdesabou", "repo": "kafka-docker-playground", "body_preview": "\ud83c\udd95\ud83d\udca5 New issue !\n\n\ud83d\udd25 CP 8.1.1 \ud83d\udd50 2025-12-18 18:46 \ud83d\udcc4 [start-rbac-sasl-plain.sh](https://github.com/vdesabou/kafka-docker-playground/blob/master/other/audit-logs/start-rbac-sasl-plain.sh) \ud83d\udd17 https://github.com/vdesabou/kafka-docker-playground/actions/runs/20346808220/job/58461876782\n\n<details><summary>Logs</summary>\n<pre>\n\n<code>\n\n18:45:18 \u2139\ufe0f \ud83d\udc80 kill all docker containers (disable with 'playground config container-kill-all-before-run false')\n18:45:18 \u2139\ufe0f \ud83d\udc80 kill all docker containers\n18:45:19 \u2139\ufe0f \ud83d\ude80 Running", "created": "2025-12-18T21:14:13Z", "labels": ["new \ud83c\udd95"], "context": "\ud83d\udd25 other/audit-logs \ud83c\udd95\ud83d\udca5 New issue !\n\n\ud83d\udd25 CP 8.1.1 \ud83d\udd50 2025-12-18 18:46 \ud83d\udcc4 [start-rbac-sasl-plain.sh](https://github.com/vdesabou/kafka-docker-playground/blob/master/other/audit-logs/start-rbac-sasl-plain.sh) \ud83d\udd17 https://github.c"}


identifier: gh_issue_3744872733
source: github_issue
status: new
created_at: 2025-12-18 21:23:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3744872733", "title": "\ud83d\udd25 connect/connect-salesforce-bulkapi-sink", "url": "https://github.com/vdesabou/kafka-docker-playground/issues/7467", "user": "vdesabou", "user_url": "https://github.com/vdesabou", "repo": "kafka-docker-playground", "body_preview": "\ud83c\udd95\ud83d\udca5 New issue !\n\n\ud83d\udd25 CP 8.1.1 \ud83d\udd22 Connector v3.1.0 (\ud83d\udcc5 release date 2025-11-07) \ud83d\udd50 2025-12-18 18:31 \ud83d\udcc4 [salesforce-bulkapi-sink-with-bulkapi-source-proxy.sh](https://github.com/vdesabou/kafka-docker-playground/blob/master/connect/connect-salesforce-bulkapi-sink/salesforce-bulkapi-sink-with-bulkapi-source-proxy.sh) \ud83d\udd17 https://github.com/vdesabou/kafka-docker-playground/actions/runs/20346808220/job/58461876747\n\n<details><summary>Logs</summary>\n<pre>\n\n<code>\n\n18:28:36 \u2139\ufe0f \ud83d\udc80 kill all docker containers (disabl", "created": "2025-12-18T21:11:46Z", "labels": ["new \ud83c\udd95"], "context": "\ud83d\udd25 connect/connect-salesforce-bulkapi-sink \ud83c\udd95\ud83d\udca5 New issue !\n\n\ud83d\udd25 CP 8.1.1 \ud83d\udd22 Connector v3.1.0 (\ud83d\udcc5 release date 2025-11-07) \ud83d\udd50 2025-12-18 18:31 \ud83d\udcc4 [salesforce-bulkapi-sink-with-bulkapi-source-proxy.sh](https://github.com/vdesabou/kafka-docker-playgroun"}


identifier: gh_issue_3744951406
source: github_issue
status: new
created_at: 2025-12-18 22:00:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3744951406", "title": "kleros-v2-contracts-2.0.0-rc.1.tgz: 6 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/kleros/kleros-v2/issues/2207", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "kleros-v2", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>kleros-v2-contracts-2.0.0-rc.1.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/kleros/kleros-v2/commit/05e8b49b46fd236d5681f047620959f8667a00e4\">05e8b49b46fd236d5681f047620959f8667a00e4</a></p></details>\n\n## Vulner", "created": "2025-12-18T21:40:02Z", "labels": ["dependencies", "Mend: dependency security vulnerability", "Type: Security\ud83d\udee1\ufe0f"], "context": "kleros-v2-contracts-2.0.0-rc.1.tgz: 6 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>kleros-v2-contracts-2.0.0-rc.1.tgz</b></summary"}


identifier: gh_issue_3744928184
source: github_issue
status: new
created_at: 2025-12-18 22:00:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3744928184", "title": "server-11.7.2.tgz: 1 vulnerabilities (highest severity is: 9.1)", "url": "https://github.com/cavez86/portfolio/issues/363", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "portfolio", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>server-11.7.2.tgz</b></summary>\n\n<p>The tRPC server library</p>\n<p>Library home page: <a href=\"https://registry.npmjs.org/@trpc/server/-/server-11.7.2.tgz\">https://registry.npmjs.org/@trpc/server/-/server-11.7.2.tgz</a></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commi", "created": "2025-12-18T21:30:57Z", "labels": ["Mend: dependency security vulnerability"], "context": "server-11.7.2.tgz: 1 vulnerabilities (highest severity is: 9.1) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>server-11.7.2.tgz</b></summary>\n\n<p>The tRPC se"}


identifier: gh_issue_3745012359
source: github_issue
status: new
created_at: 2025-12-18 22:12:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3745012359", "title": "Upgrade Docsy to 0.13.0 and Hugo to 0.152.2", "url": "https://github.com/googleforgames/agones/issues/4395", "user": "markmandel", "user_url": "https://github.com/markmandel", "repo": "agones", "body_preview": "**Description**\nThe Docsy theme has released version 0.13.0, which includes highly requested features like active Table of Contents (TOC) tracking, accessibility improvements, and better dark mode support. It's not totally necessary to upgrade, but there are some nice things in there that would be useful.\n\n**Proposed Changes**\n\n1. **Dependency Updates:**\n* Update Docsy to `v0.13.0`.\n* Update Hugo to `v0.152.2` (required for Docsy 0.13 compatibility).\n* Update Node.js to LTS 24 (recommended for t", "created": "2025-12-18T22:04:59Z", "labels": ["kind/feature", "area/build-tools", "area/site"], "context": "Upgrade Docsy to 0.13.0 and Hugo to 0.152.2 **Description**\nThe Docsy theme has released version 0.13.0, which includes highly requested features like active Table of Contents (TOC) tracking, accessibility improvements, and better dark mode sup"}


identifier: gh_issue_3744956483
source: github_issue
status: new
created_at: 2025-12-18 22:12:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3744956483", "title": "npm package consolidation", "url": "https://github.com/crnormand/gurps/issues/2431", "user": "ghrian3", "user_url": "https://github.com/ghrian3", "repo": "gurps", "body_preview": "Any plan to consolidate the packages?\nI get this when running npm install.\n\n```\nnpm warn deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.\nnpm warn deprecated source-map-url@0.4.1: See https://github.com/lydell/source-map-url#deprecated\nnpm warn deprecated urix@0.1.0: Please see https://github.com/lydell/urix#depre", "created": "2025-12-18T21:42:24Z", "labels": [], "context": "npm package consolidation Any plan to consolidate the packages?\nI get this when running npm install.\n\n```\nnpm warn deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache i"}


identifier: gh_issue_3745055477
source: github_issue
status: new
created_at: 2025-12-18 22:37:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3745055477", "title": "CVE: 2016-1000031 found in commons-fileupload:commons-fileupload - Version: 1.3.2 [JAVA]", "url": "https://github.com/aandrade-singular/Demo-Pipeline-Scan/issues/170", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Demo-Pipeline-Scan", "body_preview": "Veracode Software Composition Analysis  \n===============================\n  \n Attribute | Details  \n| --- | --- |  \nLibrary | commons-fileupload:commons-fileupload  \nDescription | The Apache Commons FileUpload component provides a simple yet flexible means of adding support for multipart file upload functionality to servlets and web applications.  \nLanguage | JAVA  \nVulnerability | Remote Code Execution Via Serialization  \nVulnerability description | Apache Commons FileUpload is vulnerable to rem", "created": "2025-12-18T22:21:51Z", "labels": ["Severity: High", "Veracode Dependency Scanning"], "context": "CVE: 2016-1000031 found in commons-fileupload:commons-fileupload - Version: 1.3.2 [JAVA] Veracode Software Composition Analysis  \n===============================\n  \n Attribute | Details  \n| --- | --- |  \nLibrary | commons-fileupload:commons-fileupload  \nDescription | The Apache Commons Fi"}


identifier: gh_issue_3745055492
source: github_issue
status: new
created_at: 2025-12-18 22:37:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3745055492", "title": "CVE: 2018-11040 found in Spring Core - Version: 4.3.10.RELEASE [JAVA]", "url": "https://github.com/aandrade-singular/Demo-Pipeline-Scan/issues/181", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Demo-Pipeline-Scan", "body_preview": "Veracode Software Composition Analysis  \n===============================\n  \n Attribute | Details  \n| --- | --- |  \nLibrary | Spring Core  \nDescription | Spring Core  \nLanguage | JAVA  \nVulnerability | Cross-Domain Request Through Insecure JSONP Defaults  \nVulnerability description | spring-webmvc is vulnerable to cross-domain requests. The vulnerability exists as JSONP is enabled through the `jsonp` and `callback` JSONP parameters in MappingJackson2JsonView by default.  \nCVE | 2018-11040  \nCVSS ", "created": "2025-12-18T22:21:51Z", "labels": ["Severity: Medium", "Veracode Dependency Scanning"], "context": "CVE: 2018-11040 found in Spring Core - Version: 4.3.10.RELEASE [JAVA] Veracode Software Composition Analysis  \n===============================\n  \n Attribute | Details  \n| --- | --- |  \nLibrary | Spring Core  \nDescription | Spring Core  \nLanguage | JAVA  \nVulnerability |"}


identifier: gh_issue_3745055494
source: github_issue
status: new
created_at: 2025-12-18 22:37:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3745055494", "title": "CVE: 2025-22233 found in Spring Context - Version: 4.3.10.RELEASE [JAVA]", "url": "https://github.com/aandrade-singular/Demo-Pipeline-Scan/issues/183", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Demo-Pipeline-Scan", "body_preview": "Veracode Software Composition Analysis  \n===============================\n  \n Attribute | Details  \n| --- | --- |  \nLibrary | Spring Context  \nDescription | Spring Context  \nLanguage | JAVA  \nVulnerability | Mass Assignment Attack  \nVulnerability description | org.springframework, spring-context is vulnerable to Mass Assignment Attack. The vulnerability is due to incomplete enforcement of the disallowedFields mechanism, which allows certain request parameters to bypass intended binding restrictio", "created": "2025-12-18T22:21:51Z", "labels": ["Severity: Low", "Veracode Dependency Scanning"], "context": "CVE: 2025-22233 found in Spring Context - Version: 4.3.10.RELEASE [JAVA] Veracode Software Composition Analysis  \n===============================\n  \n Attribute | Details  \n| --- | --- |  \nLibrary | Spring Context  \nDescription | Spring Context  \nLanguage | JAVA  \nVulnerabi"}


identifier: gh_issue_3745055481
source: github_issue
status: new
created_at: 2025-12-18 22:37:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3745055481", "title": "CVE: 2018-15756 found in Spring Core - Version: 4.3.10.RELEASE [JAVA]", "url": "https://github.com/aandrade-singular/Demo-Pipeline-Scan/issues/172", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Demo-Pipeline-Scan", "body_preview": "Veracode Software Composition Analysis  \n===============================\n  \n Attribute | Details  \n| --- | --- |  \nLibrary | Spring Core  \nDescription | Spring Core  \nLanguage | JAVA  \nVulnerability | Denial Of Service (DoS)  \nVulnerability description | spring-web is vulnerable to denial of service (DoS). A malicious user can pass a HTTP request containing a header with overlapping ranges, leading to an error which would crash the service.  \nCVE | 2018-15756  \nCVSS score | 5  \nVulnerability pre", "created": "2025-12-18T22:21:51Z", "labels": ["Severity: Medium", "Veracode Dependency Scanning"], "context": "CVE: 2018-15756 found in Spring Core - Version: 4.3.10.RELEASE [JAVA] Veracode Software Composition Analysis  \n===============================\n  \n Attribute | Details  \n| --- | --- |  \nLibrary | Spring Core  \nDescription | Spring Core  \nLanguage | JAVA  \nVulnerability |"}


identifier: gh_issue_3745055478
source: github_issue
status: new
created_at: 2025-12-18 22:37:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3745055478", "title": "CVE: 2018-3258 found in mysql-connector-java - Version: 5.1.35 [JAVA]", "url": "https://github.com/aandrade-singular/Demo-Pipeline-Scan/issues/169", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Demo-Pipeline-Scan", "body_preview": "Veracode Software Composition Analysis  \n===============================\n  \n Attribute | Details  \n| --- | --- |  \nLibrary | mysql-connector-java  \nDescription | MySQL java connector  \nLanguage | JAVA  \nVulnerability | Authorization Bypass  \nVulnerability description | mysql-connector-java is vulnerable to authorization bypass. A low privileged remote attacker with network access via multiple protocols is able to exploit and compromise MySQL connectors leading to a complete takeover of the subco", "created": "2025-12-18T22:21:51Z", "labels": ["Severity: High", "Veracode Dependency Scanning"], "context": "CVE: 2018-3258 found in mysql-connector-java - Version: 5.1.35 [JAVA] Veracode Software Composition Analysis  \n===============================\n  \n Attribute | Details  \n| --- | --- |  \nLibrary | mysql-connector-java  \nDescription | MySQL java connector  \nLanguage | JAVA"}


identifier: gh_issue_3745110277
source: github_issue
status: new
created_at: 2025-12-18 22:49:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3745110277", "title": "\ud83d\udd34 [SAST] Flask Debug Mode Enabled in Production (4 occurrences)", "url": "https://github.com/JulienZammit/vulpy/issues/203", "user": "test-recette-alpha[bot]", "user_url": "https://github.com/apps/test-recette-alpha", "repo": "vulpy", "body_preview": "## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n**4** occurrence(s) of **Flask Debug Mode Enabled in Production** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nThis vulnerability occurs when a Flask application is launched with **debug mode** enabled in a production environment. In the provided code example, the call `app.run(\"0.0.0.0\", debug=True)` within the `__main__` block activates the Werkzeug debugger, which:\r\n\r\n- Exposes **interactive traceback interfaces** to remot", "created": "2025-12-18T22:44:49Z", "labels": [], "context": "\ud83d\udd34 [SAST] Flask Debug Mode Enabled in Production (4 occurrences) ## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n**4** occurrence(s) of **Flask Debug Mode Enabled in Production** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nThis vulnerability"}


identifier: gh_issue_3745047324
source: github_issue
status: new
created_at: 2025-12-18 22:49:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3745047324", "title": "Post-Quantum Cryptography: Documentation Request and HNDL Threat Considerations", "url": "https://github.com/tetherto/pearpass-app-desktop/issues/20", "user": "johnzfitch", "user_url": "https://github.com/johnzfitch", "repo": "pearpass-app-desktop", "body_preview": "# Post-Quantum Cryptography Concerns: Harvest-Now-Decrypt-Later Threat Model\n\n> **Note**: Filing here in pearpass-app-desktop since it's the main user-facing product and the only one with a CONTRIBUTING.md. Happy to re-file in `lib-pear-pass` or even upstream to 'holepunchto/hyperswarm' if that's more appropriate for crypto-layer discussions.\n\n## Summary\n\nPearPass's P2P architecture exposes encrypted traffic to a broad attack surface where passive collection is trivial. The current reliance on C", "created": "2025-12-18T22:18:24Z", "labels": [], "context": "Post-Quantum Cryptography: Documentation Request and HNDL Threat Considerations # Post-Quantum Cryptography Concerns: Harvest-Now-Decrypt-Later Threat Model\n\n> **Note**: Filing here in pearpass-app-desktop since it's the main user-facing product and the only one with a CONTRIBUTI"}


identifier: gh_issue_3744999850
source: github_issue
status: new
created_at: 2025-12-18 22:49:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3744999850", "title": "\ud83d\udd12 Code Injection vulnerabilities found in 1 file", "url": "https://github.com/RSOLV-dev/nodegoat-vulnerability-demo/issues/1124", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "nodegoat-vulnerability-demo", "body_preview": "## Security Vulnerability Report\n\n**Type**: Code Injection\n**Severity**: CRITICAL\n**Total Instances**: 1\n**Affected Files**: 1\n\n### Description\nCode injection vulnerabilities occur when user input is passed to functions that execute code dynamically, such as eval(). This can allow attackers to execute arbitrary code in the application context.\n\n### Affected Files\n\n#### `app/routes/contributions.js`\n\n- **Line 32**: Using eval() with user input can execute arbitrary code\n\n### Recommendation\nAvoid ", "created": "2025-12-18T22:00:21Z", "labels": ["security", "automated-scan", "critical", "rsolv:detected", "rsolv:vuln-code_injection"], "context": "\ud83d\udd12 Code Injection vulnerabilities found in 1 file ## Security Vulnerability Report\n\n**Type**: Code Injection\n**Severity**: CRITICAL\n**Total Instances**: 1\n**Affected Files**: 1\n\n### Description\nCode injection vulnerabilities occur when user input is "}


identifier: gh_issue_3744999777
source: github_issue
status: new
created_at: 2025-12-18 22:49:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3744999777", "title": "\ud83d\udd12 SQL Injection vulnerabilities found in 2 files", "url": "https://github.com/RSOLV-dev/nodegoat-vulnerability-demo/issues/1123", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "nodegoat-vulnerability-demo", "body_preview": "## Security Vulnerability Report\n\n**Type**: SQL Injection\n**Severity**: CRITICAL\n**Total Instances**: 2\n**Affected Files**: 2\n\n### Description\nSQL injection vulnerabilities occur when user input is directly concatenated into SQL queries without proper sanitization or parameterization. This can allow attackers to execute arbitrary SQL commands.\n\n### Affected Files\n\n#### `app/data/profile-dao.js`\n\n- **Line 33**: Template literals with unescaped variables in SQL queries\n\n#### `artifacts/db-reset.js", "created": "2025-12-18T22:00:20Z", "labels": ["security", "automated-scan", "critical", "rsolv:detected", "rsolv:vuln-sql_injection"], "context": "\ud83d\udd12 SQL Injection vulnerabilities found in 2 files ## Security Vulnerability Report\n\n**Type**: SQL Injection\n**Severity**: CRITICAL\n**Total Instances**: 2\n**Affected Files**: 2\n\n### Description\nSQL injection vulnerabilities occur when user input is di"}


identifier: gh_issue_3745119240
source: github_issue
status: new
created_at: 2025-12-18 23:15:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3745119240", "title": "Talawa Admin - Refactoring (2025 - 2026) - LoadingState Modal", "url": "https://github.com/PalisadoesFoundation/talawa-admin/issues/5132", "user": "palisadoes", "user_url": "https://github.com/palisadoes", "repo": "talawa-admin", "body_preview": "Test", "created": "2025-12-18T22:48:30Z", "labels": ["good first issue", "unapproved", "test", "feature request"], "context": "Talawa Admin - Refactoring (2025 - 2026) - LoadingState Modal Test"}


identifier: gh_issue_3745125199
source: github_issue
status: new
created_at: 2025-12-18 23:27:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3745125199", "title": "[CI/CD] OWASP Dependency-Check workflow (SARIF + Code Scanning + CVSS gate)", "url": "https://github.com/SamTBalogh/uvlhub_practicas/issues/8", "user": "SamTBalogh", "user_url": "https://github.com/SamTBalogh", "repo": "uvlhub_practicas", "body_preview": "### Contexto\n\nThis workflow adds a dependency vulnerability scanning baseline using **OWASP Dependency-Check**.\n\n- It runs on `pull_request`, on any `push` to any branch, on version tags matching `v*`, and also supports manual execution via `workflow_dispatch`.\n- It generates a **SARIF** report and uploads it to **GitHub Code Scanning** for centralized visibility.\n- It enforces a **CVSS threshold gate** so the pipeline fails when findings at or above **CVSS 7** are detected, while still ensuring", "created": "2025-12-18T22:50:43Z", "labels": ["enhancement", "priority:critical"], "context": "[CI/CD] OWASP Dependency-Check workflow (SARIF + Code Scanning + CVSS gate) ### Contexto\n\nThis workflow adds a dependency vulnerability scanning baseline using **OWASP Dependency-Check**.\n\n- It runs on `pull_request`, on any `push` to any branch, on version tags matching `v*`"}


identifier: gh_issue_3745089493
source: github_issue
status: new
created_at: 2025-12-18 23:27:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3745089493", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/mustafaai/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @mustafaai! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I", "created": "2025-12-18T22:36:05Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @mustafaai! Welcome to "}


identifier: gh_issue_3745355421
source: github_issue
status: new
created_at: 2025-12-19 00:06:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3745355421", "title": "log4j-core-2.24.3.jar: 1 vulnerabilities (highest severity is: 5.4)", "url": "https://github.com/JustJournal/justjournal/issues/424", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "justjournal", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>log4j-core-2.24.3.jar</b></summary>\n\n<p>A versatile, industrial-grade, and reference implementation of the Log4j API.\n    It bundles a rich set of components to assist various use cases:\n    Appenders targeting files, network sockets, databases, SMTP servers;\n    Layouts that can render CSV, HTML, JSON, Syslog, etc. formatted outputs;\n    Filter", "created": "2025-12-19T00:04:54Z", "labels": ["Mend: dependency security vulnerability"], "context": "log4j-core-2.24.3.jar: 1 vulnerabilities (highest severity is: 5.4) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>log4j-core-2.24.3.jar</b></summary>\n\n<p>A versa"}


identifier: gh_issue_3745355048
source: github_issue
status: new
created_at: 2025-12-19 00:06:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3745355048", "title": "CVE-2024-29371 (High) detected in jose4j-0.7.6.jar", "url": "https://github.com/satishmukundan/WebGoat/issues/164", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "WebGoat", "body_preview": "## CVE-2024-29371 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jose4j-0.7.6.jar</b></summary>\n\n<p>The jose.4.j library is a robust and easy to use open source implementation of JSON Web Token (JWT) and the JOSE specification suite (JWS, JWE, and JWK).\n     It is written in Java and relies solely on the JCA APIs for cryptography.\n     Please see https://bitbuck", "created": "2025-12-19T00:04:40Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-29371 (High) detected in jose4j-0.7.6.jar ## CVE-2024-29371 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3745354225
source: github_issue
status: new
created_at: 2025-12-19 00:06:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3745354225", "title": "CVE-2025-68161 (Medium) detected in log4j-core-2.17.2.jar", "url": "https://github.com/HoangBachLeLe/SalesTaxes/issues/267", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "SalesTaxes", "body_preview": "## CVE-2025-68161 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>log4j-core-2.17.2.jar</b></summary>\n\n<p>The Apache Log4j Implementation</p>\n<p>Library home page: <a href=\"https://www.apache.org/\">https://www.apache.org/</a></p>\n<p>Path to dependency file: /build.gradle</p>\n<p>Path to vulnerable library: /home/wss-scanner/.gradle/caches/modules-2/files-2.1/org", "created": "2025-12-19T00:04:33Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-68161 (Medium) detected in log4j-core-2.17.2.jar ## CVE-2025-68161 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3745354116
source: github_issue
status: new
created_at: 2025-12-19 00:06:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3745354116", "title": "CVE-2025-68161 (Medium) detected in log4j-core-2.17.2.jar", "url": "https://github.com/HoangBachLeLe/ConferenceTrackManagement/issues/264", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "ConferenceTrackManagement", "body_preview": "## CVE-2025-68161 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>log4j-core-2.17.2.jar</b></summary>\n\n<p>The Apache Log4j Implementation</p>\n<p>Library home page: <a href=\"https://www.apache.org/\">https://www.apache.org/</a></p>\n<p>Path to dependency file: /build.gradle</p>\n<p>Path to vulnerable library: /home/wss-scanner/.gradle/caches/modules-2/files-2.1/org", "created": "2025-12-19T00:04:29Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-68161 (Medium) detected in log4j-core-2.17.2.jar ## CVE-2025-68161 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3745353487
source: github_issue
status: new
created_at: 2025-12-19 00:06:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3745353487", "title": "accelerate-0.15.0-py3-none-any.whl: 1 vulnerabilities (highest severity is: 7.8)", "url": "https://github.com/AdamOswald/FT/issues/20", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "FT", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>accelerate-0.15.0-py3-none-any.whl</b></summary>\n\n<p>Accelerate</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/76/fc/e596c2ae85ede75a21a5beb3a39f2b299220cb84de0e6e72ff5c4e7579ed/accelerate-0.15.0-py3-none-any.whl\">https://files.pythonhosted.org/packages/76/fc/e596c2ae85ede75a21a5beb3a39f2b299220cb84de0e6e72ff5c4e7579e", "created": "2025-12-19T00:04:18Z", "labels": ["Mend: dependency security vulnerability"], "context": "accelerate-0.15.0-py3-none-any.whl: 1 vulnerabilities (highest severity is: 7.8) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>accelerate-0.15.0-py3-none-any.whl</b></summary"}


identifier: gh_issue_3745390782
source: github_issue
status: new
created_at: 2025-12-19 00:19:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3745390782", "title": "log4j-core-2.17.1.jar: 1 vulnerabilities (highest severity is: 5.4)", "url": "https://github.com/akash-k-ephesoft/test-1/issues/108", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "test-1", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>log4j-core-2.17.1.jar</b></summary>\n\n<p>The Apache Log4j Implementation</p>\n<p>Library home page: <a href=\"https://www.apache.org/\">https://www.apache.org/</a></p>\n<p>Path to vulnerable library: /lib/log4j-core-2.17.1.jar</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/akash-k-ephesoft/test-1/commit/bafe36287e51aaacdb1ab47c78bd429", "created": "2025-12-19T00:16:44Z", "labels": ["Mend: dependency security vulnerability"], "context": "log4j-core-2.17.1.jar: 1 vulnerabilities (highest severity is: 5.4) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>log4j-core-2.17.1.jar</b></summary>\n\n<p>The Apa"}


identifier: gh_issue_3745387775
source: github_issue
status: new
created_at: 2025-12-19 00:19:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3745387775", "title": "CVE-2024-29371 (High) detected in jose4j-0.9.3.jar", "url": "https://github.com/github-annamalai/Jetty_v.9.4.52/issues/70", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "Jetty_v.9.4.52", "body_preview": "## CVE-2024-29371 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jose4j-0.9.3.jar</b></summary>\n\n<p>The jose.4.j library is a robust and easy to use open source implementation of JSON Web Token (JWT) and the JOSE specification suite (JWS, JWE, and JWK).\n     It is written in Java and relies solely on the JCA APIs for cryptography.\n     Please see https://bitbuck", "created": "2025-12-19T00:15:48Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-29371 (High) detected in jose4j-0.9.3.jar ## CVE-2024-29371 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3745385375
source: github_issue
status: new
created_at: 2025-12-19 00:19:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3745385375", "title": "log4j-core-2.25.0.jar: 1 vulnerabilities (highest severity is: 5.4)", "url": "https://github.com/leonarduk/webscraper-core/issues/144", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "webscraper-core", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>log4j-core-2.25.0.jar</b></summary>\n\n<p>A versatile, industrial-grade, and reference implementation of the Log4j API.\n    It bundles a rich set of components to assist various use cases:\n    Appenders targeting files, network sockets, databases, SMTP servers;\n    Layouts that can render CSV, HTML, JSON, Syslog, etc. formatted outputs;\n    Filter", "created": "2025-12-19T00:14:59Z", "labels": ["Mend: dependency security vulnerability"], "context": "log4j-core-2.25.0.jar: 1 vulnerabilities (highest severity is: 5.4) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>log4j-core-2.25.0.jar</b></summary>\n\n<p>A versa"}


identifier: gh_issue_3745385169
source: github_issue
status: new
created_at: 2025-12-19 00:19:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3745385169", "title": "log4j-slf4j2-impl-2.23.1.jar: 1 vulnerabilities (highest severity is: 5.4)", "url": "https://github.com/leonarduk/pension-risk-management-system/issues/668", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "pension-risk-management-system", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>log4j-slf4j2-impl-2.23.1.jar</b></summary>\n\n<p></p>\n<p>Path to dependency file: /timeseries-lambda/pom.xml</p>\n<p>Path to vulnerable library: /timeseries-lambda/pom.xml</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/leonarduk/pension-risk-management-system/commit/cd36987f9083fd97af727955512a756e97a4a004\">cd36987f9083fd97af7279555", "created": "2025-12-19T00:14:51Z", "labels": ["Mend: dependency security vulnerability"], "context": "log4j-slf4j2-impl-2.23.1.jar: 1 vulnerabilities (highest severity is: 5.4) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>log4j-slf4j2-impl-2.23.1.jar</b></summary>\n\n<p>"}


identifier: gh_issue_3745383096
source: github_issue
status: new
created_at: 2025-12-19 00:19:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3745383096", "title": "log4j-core-2.18.0.jar: 1 vulnerabilities (highest severity is: 5.4)", "url": "https://github.com/uthrasri/expat_new/issues/14", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "expat_new", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>log4j-core-2.18.0.jar</b></summary>\n\n<p>The Apache Log4j Implementation</p>\n<p>Library home page: <a href=\"https://www.apache.org/\">https://www.apache.org/</a></p>\n<p>Path to dependency file: /pom.xml</p>\n<p>Path to vulnerable library: /pom.xml</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/uthrasri/expat_new/commit/4d6fe2909976e", "created": "2025-12-19T00:14:06Z", "labels": ["Mend: dependency security vulnerability"], "context": "log4j-core-2.18.0.jar: 1 vulnerabilities (highest severity is: 5.4) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>log4j-core-2.18.0.jar</b></summary>\n\n<p>The Apa"}


identifier: gh_issue_3745415923
source: github_issue
status: new
created_at: 2025-12-19 00:31:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3745415923", "title": "CMS 408: Conduct Security Testing and Vulnerability Assessment", "url": "https://github.com/HHS/simpler-grants-gov/issues/7596", "user": "ychoy", "user_url": "https://github.com/ychoy", "repo": "simpler-grants-gov", "body_preview": "### Summary\nExecute security testing against CMS integration including automated vulnerability scanning, manual testing of authentication/authorization controls, and content injection testing to identify and remediate security issues.\n\n## Acceptance Criteria:\n- Automated vulnerability scan completed using approved tools (e.g., OWASP ZAP, Burp Suite) against CMS interface and API endpoints, with scan report generated and all findings triaged\n- Manual security testing completed covering: authentic", "created": "2025-12-19T00:26:08Z", "labels": ["refinement"], "context": "CMS 408: Conduct Security Testing and Vulnerability Assessment ### Summary\nExecute security testing against CMS integration including automated vulnerability scanning, manual testing of authentication/authorization controls, and content injection testing to ident"}


identifier: gh_issue_3745152617
source: github_issue
status: new
created_at: 2025-12-19 00:31:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3745152617", "title": "x/vulndb: potential Go vuln in github.com/ollama/ollama: GHSA-f6mr-38g8-39rg", "url": "https://github.com/golang/vulndb/issues/4251", "user": "GoVulnBot", "user_url": "https://github.com/GoVulnBot", "repo": "vulndb", "body_preview": "Advisory [GHSA-f6mr-38g8-39rg](https://github.com/advisories/GHSA-f6mr-38g8-39rg) references a vulnerability in the following Go modules:\n\n| Module |\n| - |\n| [github.com/ollama/ollama](https://pkg.go.dev/github.com/ollama/ollama) |\n\nDescription:\nA critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauth", "created": "2025-12-18T23:01:05Z", "labels": ["NeedsTriage"], "context": "x/vulndb: potential Go vuln in github.com/ollama/ollama: GHSA-f6mr-38g8-39rg Advisory [GHSA-f6mr-38g8-39rg](https://github.com/advisories/GHSA-f6mr-38g8-39rg) references a vulnerability in the following Go modules:\n\n| Module |\n| - |\n| [github.com/ollama/ollama](https://pkg.go."}


identifier: gh_issue_3745396071
source: github_issue
status: new
created_at: 2025-12-19 00:31:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3745396071", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/djsimtech/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @djsimtech! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I", "created": "2025-12-19T00:18:25Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @djsimtech! Welcome to "}


identifier: gh_issue_3745373689
source: github_issue
status: new
created_at: 2025-12-19 00:31:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3745373689", "title": "accelerate-0.12.0-py3-none-any.whl: 1 vulnerabilities (highest severity is: 7.8)", "url": "https://github.com/AdamOswald/finetuned_diffusion/issues/18", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "finetuned_diffusion", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>accelerate-0.12.0-py3-none-any.whl</b></summary>\n\n<p>Accelerate</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/52/36/1a3aec552da693acbb65f9f3613433bea0e065448ef27dc7a9c2f2fb1efa/accelerate-0.12.0-py3-none-any.whl\">https://files.pythonhosted.org/packages/52/36/1a3aec552da693acbb65f9f3613433bea0e065448ef27dc7a9c2f2fb1ef", "created": "2025-12-19T00:11:05Z", "labels": ["Mend: dependency security vulnerability"], "context": "accelerate-0.12.0-py3-none-any.whl: 1 vulnerabilities (highest severity is: 7.8) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>accelerate-0.12.0-py3-none-any.whl</b></summary"}


identifier: gh_issue_3745424534
source: github_issue
status: new
created_at: 2025-12-19 00:44:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3745424534", "title": "log4j-slf4j-impl-2.14.1.jar: 1 vulnerabilities (highest severity is: 5.4)", "url": "https://github.com/amaybaum-prod/spring-cloud-alibaba/issues/55", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "spring-cloud-alibaba", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>log4j-slf4j-impl-2.14.1.jar</b></summary>\n\n<p></p>\n<p>Path to vulnerable library: /home/wss-scanner/.m2/repository/org/apache/logging/log4j/log4j-core/2.19.0/log4j-core-2.19.0.jar</p>\n<p>\n\n</details>\n\n## Vulnerabilities\n\n| Vulnerability | Severity | <img src='https://whitesource-resources.whitesourcesoftware.com/cvss3.png' width=19 height=20> CV", "created": "2025-12-19T00:29:00Z", "labels": ["Mend: dependency security vulnerability"], "context": "log4j-slf4j-impl-2.14.1.jar: 1 vulnerabilities (highest severity is: 5.4) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>log4j-slf4j-impl-2.14.1.jar</b></summary>\n\n<p><"}


identifier: gh_issue_3745423531
source: github_issue
status: new
created_at: 2025-12-19 00:44:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3745423531", "title": "biojava-core-6.0.0-alpha2.jar: 1 vulnerabilities (highest severity is: 5.4)", "url": "https://github.com/vital-ws/biojava-http/issues/19", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "biojava-http", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>biojava-core-6.0.0-alpha2.jar</b></summary>\n\n<p></p>\n<p>Path to dependency file: /pom.xml</p>\n<p>Path to vulnerable library: /home/wss-scanner/.m2/repository/org/apache/logging/log4j/log4j-core/2.17.1/log4j-core-2.17.1.jar</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/vital-ws/biojava-http/commit/3871afccb87d3ccb07d6b97564ad76ae", "created": "2025-12-19T00:28:36Z", "labels": ["Mend: dependency security vulnerability"], "context": "biojava-core-6.0.0-alpha2.jar: 1 vulnerabilities (highest severity is: 5.4) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>biojava-core-6.0.0-alpha2.jar</b></summary>\n\n<p"}


identifier: gh_issue_3745423530
source: github_issue
status: new
created_at: 2025-12-19 00:44:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3745423530", "title": "biojava-core-6.0.0-alpha2.jar: 1 vulnerabilities (highest severity is: 5.4)", "url": "https://github.com/vital-ws/Principal-test/issues/25", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "Principal-test", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>biojava-core-6.0.0-alpha2.jar</b></summary>\n\n<p></p>\n<p>Path to dependency file: /pom.xml</p>\n<p>Path to vulnerable library: /pom.xml</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/vital-ws/Principal-test/commit/3e2152d004f2291ea7385af30492f1c36c9e0431\">3e2152d004f2291ea7385af30492f1c36c9e0431</a></p></details>\n\n## Vulnerabilitie", "created": "2025-12-19T00:28:36Z", "labels": ["Mend: dependency security vulnerability"], "context": "biojava-core-6.0.0-alpha2.jar: 1 vulnerabilities (highest severity is: 5.4) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>biojava-core-6.0.0-alpha2.jar</b></summary>\n\n<p"}


identifier: gh_issue_3745423029
source: github_issue
status: new
created_at: 2025-12-19 00:44:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3745423029", "title": "CVE-2025-68161 (Medium) detected in log4j-core-2.7.jar", "url": "https://github.com/billmcchesney1/t-vault/issues/622", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "t-vault", "body_preview": "## CVE-2025-68161 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>log4j-core-2.7.jar</b></summary>\n\n<p>The Apache Log4j Implementation</p>\n<p>Library home page: <a href=\"http://www.apache.org\">http://www.apache.org</a></p>\n<p>Path to dependency file: /tvaultapi/pom.xml</p>\n<p>Path to vulnerable library: /home/wss-scanner/.m2/repository/org/apache/logging/log4j/", "created": "2025-12-19T00:28:29Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-68161 (Medium) detected in log4j-core-2.7.jar ## CVE-2025-68161 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3745421335
source: github_issue
status: new
created_at: 2025-12-19 00:44:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3745421335", "title": "log4j-core-2.23.1.jar: 1 vulnerabilities (highest severity is: 5.4)", "url": "https://github.com/jgeraigery/servicetalk/issues/78", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "servicetalk", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>log4j-core-2.23.1.jar</b></summary>\n\n<p>The Apache Log4j Implementation</p>\n<p>Library home page: <a href=\"https://www.apache.org/\">https://www.apache.org/</a></p>\n<p>Path to dependency file: /servicetalk-opentracing-log4j2/build.gradle</p>\n<p>Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.apache.logg", "created": "2025-12-19T00:27:57Z", "labels": ["Mend: dependency security vulnerability"], "context": "log4j-core-2.23.1.jar: 1 vulnerabilities (highest severity is: 5.4) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>log4j-core-2.23.1.jar</b></summary>\n\n<p>The Apa"}


identifier: gh_issue_3745418695
source: github_issue
status: new
created_at: 2025-12-19 00:57:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3745418695", "title": "CVE-2024-29371 (High) detected in jose4j-0.7.6.jar", "url": "https://github.com/Mend-playground/WebGoat/issues/243", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "WebGoat", "body_preview": "## CVE-2024-29371 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jose4j-0.7.6.jar</b></summary>\n\n<p>The jose.4.j library is a robust and easy to use open source implementation of JSON Web Token (JWT) and the JOSE specification suite (JWS, JWE, and JWK).\n     It is written in Java and relies solely on the JCA APIs for cryptography.\n     Please see https://bitbuck", "created": "2025-12-19T00:26:56Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-29371 (High) detected in jose4j-0.7.6.jar ## CVE-2024-29371 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3745407181
source: github_issue
status: new
created_at: 2025-12-19 00:57:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3745407181", "title": "CVE-2024-29371 (High) detected in jose4j-0.6.5.jar", "url": "https://github.com/susanstwss/JavaLive/issues/233", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "JavaLive", "body_preview": "## CVE-2024-29371 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jose4j-0.6.5.jar</b></summary>\n\n<p>The jose.4.j library is a robust and easy to use open source implementation of JSON Web Token (JWT) and the JOSE specification suite (JWS, JWE, and JWK).\n     It is written in Java and relies solely on the JCA APIs for cryptography.\n     Please see https://bitbuck", "created": "2025-12-19T00:22:30Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-29371 (High) detected in jose4j-0.6.5.jar ## CVE-2024-29371 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3745400762
source: github_issue
status: new
created_at: 2025-12-19 00:57:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3745400762", "title": "CVE-2024-29371 (High) detected in jose4j-0.7.6.jar", "url": "https://github.com/betterPeleg/WebGoat/issues/211", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "WebGoat", "body_preview": "## CVE-2024-29371 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jose4j-0.7.6.jar</b></summary>\n\n<p>The jose.4.j library is a robust and easy to use open source implementation of JSON Web Token (JWT) and the JOSE specification suite (JWS, JWE, and JWK).\n     It is written in Java and relies solely on the JCA APIs for cryptography.\n     Please see https://bitbuck", "created": "2025-12-19T00:20:15Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-29371 (High) detected in jose4j-0.7.6.jar ## CVE-2024-29371 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3745399375
source: github_issue
status: new
created_at: 2025-12-19 00:57:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3745399375", "title": "CVE-2024-29371 (High) detected in jose4j-0.7.6.jar", "url": "https://github.com/susanstwss/WebGoat/issues/172", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "WebGoat", "body_preview": "## CVE-2024-29371 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jose4j-0.7.6.jar</b></summary>\n\n<p>The jose.4.j library is a robust and easy to use open source implementation of JSON Web Token (JWT) and the JOSE specification suite (JWS, JWE, and JWK).\n     It is written in Java and relies solely on the JCA APIs for cryptography.\n     Please see https://bitbuck", "created": "2025-12-19T00:19:45Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-29371 (High) detected in jose4j-0.7.6.jar ## CVE-2024-29371 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3745458841
source: github_issue
status: new
created_at: 2025-12-19 01:10:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3745458841", "title": "tough-cookie Prototype Pollution vulnerability", "url": "https://github.com/salesforce/tough-cookie/issues/553", "user": "DATEx2", "user_url": "https://github.com/DATEx2", "repo": "tough-cookie", "body_preview": "`npm audit fix`\n*tough-cookie Prototype Pollution vulnerability* - https://github.com/advisories/GHSA-72xf-g2v4-qvf3\n`No fix available`\nnode_modules/tough-cookie\n\nPlease fix it", "created": "2025-12-19T00:40:54Z", "labels": [], "context": "tough-cookie Prototype Pollution vulnerability `npm audit fix`\n*tough-cookie Prototype Pollution vulnerability* - https://github.com/advisories/GHSA-72xf-g2v4-qvf3\n`No fix available`\nnode_modules/tough-cookie\n\nPlease fix it"}


identifier: gh_issue_3745403411
source: github_issue
status: new
created_at: 2025-12-19 01:22:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3745403411", "title": "Implement Security Best Practices", "url": "https://github.com/pramodsunagar/skills-integrate-mcp-with-copilot/issues/8", "user": "pramodsunagar", "user_url": "https://github.com/pramodsunagar", "repo": "skills-integrate-mcp-with-copilot", "body_preview": "## Feature Description\nEnhance application security with industry best practices for authentication, authorization, and data protection.\n\n## Requirements\n\n### Authentication & Authorization\n- [ ] Implement JWT token-based authentication\n- [ ] Add rate limiting to prevent brute force attacks\n- [ ] Implement CORS properly with allowed origins\n- [ ] Add API key authentication for admin endpoints\n- [ ] Session timeout and automatic logout\n\n### Data Protection\n- [ ] Password hashing with bcrypt (cost", "created": "2025-12-19T00:21:13Z", "labels": ["enhancement", "security"], "context": "Implement Security Best Practices ## Feature Description\nEnhance application security with industry best practices for authentication, authorization, and data protection.\n\n## Requirements\n\n### Authentication & Authorization\n- [ ] Impl"}


identifier: gh_issue_3745592550
source: github_issue
status: new
created_at: 2025-12-19 01:34:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3745592550", "title": "ansible-2.9.9.tar.gz: 21 vulnerabilities (highest severity is: 9.8) [test_base_branch]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Phillip-Wyatt_1219_012711_gh_gw2/issues/3", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Phillip-Wyatt_1219_012711_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>ansible-2.9.9.tar.gz</strong></summary>\n\nRadically simple IT automation\n\n**Library home page:** [ https://files.pythonhosted.org/packages/64/c2/b80047c7ac2478f9501676c988a5411ed5572f35d1beff9cae07d321512c/PyYAML-5.3.1.tar.gz ](https://files.pythonhosted.org/packages/64/c2/b80047c7ac2478f9501676c988a5411ed5572f35d1beff9cae07d321512c/PyYAML-5.3.1.tar.gz)\n\n**Path to dependency file:** /requirements.txt\n\n**Path to vulnerable library:** /tmp/ws-ua_2", "created": "2025-12-19T01:30:38Z", "labels": [], "context": "ansible-2.9.9.tar.gz: 21 vulnerabilities (highest severity is: 9.8) [test_base_branch] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>ansible-2.9.9.tar.gz</strong></summary>\n\nRadically simple IT automation\n\n**Library home page:** [ https://files.pythonhosted.org/packages/64/c2/b800"}


identifier: gh_issue_3745628773
source: github_issue
status: new
created_at: 2025-12-19 02:00:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3745628773", "title": "@storm-software/git-tools-2.124.55.tgz: 1 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/storm-software/storm-ops/issues/874", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "storm-ops", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>@storm-software/git-tools-2.124.55.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/storm-software/storm-ops/commit/3cdb213a69620cd77480485a5923605f76d90d71\">3cdb213a69620cd77480485a5923605f76d90d71</a></p></details", "created": "2025-12-19T01:44:30Z", "labels": ["Mend: dependency security vulnerability"], "context": "@storm-software/git-tools-2.124.55.tgz: 1 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>@storm-software/git-tools-2.124.55.tgz</b></sum"}


identifier: gh_issue_3745628740
source: github_issue
status: new
created_at: 2025-12-19 02:00:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3745628740", "title": "@storm-software/markdownlint-0.30.71.tgz: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/storm-software/storm-ops/issues/873", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "storm-ops", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>@storm-software/markdownlint-0.30.71.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/storm-software/storm-ops/commit/3cdb213a69620cd77480485a5923605f76d90d71\">3cdb213a69620cd77480485a5923605f76d90d71</a></p></detai", "created": "2025-12-19T01:44:28Z", "labels": ["Mend: dependency security vulnerability"], "context": "@storm-software/markdownlint-0.30.71.tgz: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>@storm-software/markdownlint-0.30.71.tgz</b></s"}


identifier: gh_issue_3745628706
source: github_issue
status: new
created_at: 2025-12-19 02:00:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3745628706", "title": "create-storm-workspace-1.97.72.tgz: 1 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/storm-software/storm-ops/issues/872", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "storm-ops", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>create-storm-workspace-1.97.72.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/storm-software/storm-ops/commit/3cdb213a69620cd77480485a5923605f76d90d71\">3cdb213a69620cd77480485a5923605f76d90d71</a></p></details>\n\n#", "created": "2025-12-19T01:44:26Z", "labels": ["Mend: dependency security vulnerability"], "context": "create-storm-workspace-1.97.72.tgz: 1 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>create-storm-workspace-1.97.72.tgz</b></summary"}


identifier: gh_issue_3745670789
source: github_issue
status: new
created_at: 2025-12-19 02:00:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3745670789", "title": "Vulnerability Report: Heap Buffer Overflow in `ibv_cmd_open_qp` and `ibv_cmd_open_xrcd`(<=60.0)", "url": "https://github.com/ez-lbz/ez-lbz.github.io/issues/5", "user": "ez-lbz", "user_url": "https://github.com/ez-lbz", "repo": "ez-lbz.github.io", "body_preview": "# Vulnerability Report: Heap Buffer Overflow in `ibv_cmd_open_qp` and `ibv_cmd_open_xrcd`\n\n**Project:** https://github.com/linux-rdma/rdma-core\n**Discoverer:** lbz\n\n## Summary\nA signed-to-unsigned conversion error in `ibv_cmd_open_qp` and `ibv_cmd_open_xrcd` allows a negative size argument to bypass bounds checking, potentially leading to a heap buffer overflow.\n\n## Affected Components\n*   **File:** `libibverbs/cmd.c`\n*   **Functions:**\n    *   `ibv_cmd_open_qp`\n    *   `ibv_cmd_open_xrcd`\n\n## D", "created": "2025-12-19T01:59:49Z", "labels": [], "context": "Vulnerability Report: Heap Buffer Overflow in `ibv_cmd_open_qp` and `ibv_cmd_open_xrcd`(<=60.0) # Vulnerability Report: Heap Buffer Overflow in `ibv_cmd_open_qp` and `ibv_cmd_open_xrcd`\n\n**Project:** https://github.com/linux-rdma/rdma-core\n**Discoverer:** lbz\n\n## Summary\nA signed-to-unsigned con"}


identifier: gh_issue_3745651470
source: github_issue
status: new
created_at: 2025-12-19 02:00:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3745651470", "title": "Security Health Check - GOOD (85/100) - 2025-12-19", "url": "https://github.com/Sami9889/Sami.dev-website/issues/213", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/19/2025, 1:52:39 AM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 9\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Securi", "created": "2025-12-19T01:52:43Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-19 # Security Health Check Report\n\n**Generated:** 12/19/2025, 1:52:39 AM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Inc"}


identifier: gh_issue_3745673363
source: github_issue
status: new
created_at: 2025-12-19 02:13:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3745673363", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Katherine-Garcia_1219_015834_gh_gw2/issues/4", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Katherine-Garcia_1219_015834_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.io/v", "created": "2025-12-19T02:00:43Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3745673468
source: github_issue
status: new
created_at: 2025-12-19 02:13:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3745673468", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Katherine-Garcia_1219_015834_gh_gw2/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Katherine-Garcia_1219_015834_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.", "created": "2025-12-19T02:00:43Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3745673927
source: github_issue
status: new
created_at: 2025-12-19 02:13:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3745673927", "title": "@storm-software/markdownlint-0.30.72.tgz: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/storm-software/storm-ops/issues/876", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "storm-ops", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>@storm-software/markdownlint-0.30.72.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/storm-software/storm-ops/commit/7d935edb3239ff84acc25900acaac64102e909df\">7d935edb3239ff84acc25900acaac64102e909df</a></p></detai", "created": "2025-12-19T02:01:03Z", "labels": ["Mend: dependency security vulnerability"], "context": "@storm-software/markdownlint-0.30.72.tgz: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>@storm-software/markdownlint-0.30.72.tgz</b></s"}


identifier: gh_issue_3745673873
source: github_issue
status: new
created_at: 2025-12-19 02:13:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3745673873", "title": "@storm-software/git-tools-2.124.56.tgz: 1 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/storm-software/storm-ops/issues/875", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "storm-ops", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>@storm-software/git-tools-2.124.56.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/storm-software/storm-ops/commit/7d935edb3239ff84acc25900acaac64102e909df\">7d935edb3239ff84acc25900acaac64102e909df</a></p></details", "created": "2025-12-19T02:01:01Z", "labels": ["Mend: dependency security vulnerability"], "context": "@storm-software/git-tools-2.124.56.tgz: 1 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>@storm-software/git-tools-2.124.56.tgz</b></sum"}


identifier: gh_issue_3745558970
source: github_issue
status: new
created_at: 2025-12-19 02:25:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3745558970", "title": "Hacker News Daily Top 10 2025-12-19", "url": "https://github.com/luoyunchong/actions/issues/519", "user": "hacknews-bot[bot]", "user_url": "https://github.com/apps/hacknews-bot", "repo": "actions", "body_preview": "1. **[Beginning January 2026, all ACM publications will be made open access](https://dl.acm.org/openaccess)**\n1305 points by [Kerrick](https://news.ycombinator.com/user?id=Kerrick) 12/18/2025 15:39:09 | [144 comments](https://news.ycombinator.com/item?id=46313991)\n2. **[Your job is to deliver code you have proven to work](https://simonwillison.net/2025/Dec/18/code-proven-to-work/)**\n622 points by [simonw](https://news.ycombinator.com/user?id=simonw) 12/18/2025 14:52:11 | [526 comments](https://n", "created": "2025-12-19T01:17:29Z", "labels": ["hacker-news-daily"], "context": "Hacker News Daily Top 10 2025-12-19 1. **[Beginning January 2026, all ACM publications will be made open access](https://dl.acm.org/openaccess)**\n1305 points by [Kerrick](https://news.ycombinator.com/user?id=Kerrick) 12/18/2025 15:39:09"}


identifier: gh_issue_3745535562
source: github_issue
status: new
created_at: 2025-12-19 02:25:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3745535562", "title": "ACM Goes Open, TVs Go Surveillance, AI Goes Wild", "url": "https://github.com/thevibeworks/claude-reads-hn/issues/43", "user": "claude-yolo[bot]", "user_url": "https://github.com/apps/claude-yolo", "repo": "claude-reads-hn", "body_preview": "**ACM goes open, TVs go surveillance, and OpenAI ships another Codex while security researchers pwn everyone via SVG files**\n\n## Highlights\n\n- ACM: All publications open access from 2026, authors keep their IP\n- Supply chain attack: 16-year-old pwns Discord, X, Vercel via Mintlify SVG exploit\n- Texas: Suing Samsung, Sony, LG for taking screenshots every 500ms\n- GPT-5.2-Codex: Now with cybersecurity features and actual Windows support\n- Firefox: Adding an AI kill switch for the paranoid among us\n", "created": "2025-12-19T01:08:29Z", "labels": [], "context": "ACM Goes Open, TVs Go Surveillance, AI Goes Wild **ACM goes open, TVs go surveillance, and OpenAI ships another Codex while security researchers pwn everyone via SVG files**\n\n## Highlights\n\n- ACM: All publications open access from 2026, authors keep"}


identifier: gh_issue_3745513892
source: github_issue
status: new
created_at: 2025-12-19 02:25:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3745513892", "title": "Hacker News Daily Top 10 @2025-12-19", "url": "https://github.com/headllines/hackernews-daily/issues/1989", "user": "headllines[bot]", "user_url": "https://github.com/apps/headllines", "repo": "hackernews-daily", "body_preview": "1. **[Beginning January 2026, all ACM publications will be made open access](https://dl.acm.org/openaccess)**\n1286 points by [Kerrick](https://news.ycombinator.com/user?id=Kerrick) 9 hours ago | [142 comments](https://news.ycombinator.com/item?id=46313991)\n\n2. **[Your job is to deliver code you have proven to work](https://simonwillison.net/2025/Dec/18/code-proven-to-work/)**\n617 points by [simonw](https://news.ycombinator.com/user?id=simonw) 10 hours ago | [522 comments](https://news.ycombinato", "created": "2025-12-19T00:59:49Z", "labels": [], "context": "Hacker News Daily Top 10 @2025-12-19 1. **[Beginning January 2026, all ACM publications will be made open access](https://dl.acm.org/openaccess)**\n1286 points by [Kerrick](https://news.ycombinator.com/user?id=Kerrick) 9 hours ago | [142 "}


identifier: gh_issue_3745506565
source: github_issue
status: new
created_at: 2025-12-19 02:25:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3745506565", "title": "New Jobs Scraped - 2025-12-19T00:57:12", "url": "https://github.com/albertsun0/job-notifications/issues/864", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "job-notifications", "body_preview": "## https://github.com/jobright-ai/2025-Software-Engineer-New-Grad\n\n||||||\n|-|-|-|-|-|\n| **[Mayo Clinic](https://www.mayoclinic.org)** | **[Software Engineer - Pipeline Developer](https://jobright.ai/jobs/info/694478eddd382f5f566aa4f1?utm_campaign=Software%20Engineering&utm_source=1103)** | Rochester, MN | On Site | Dec 18 |\n| **[Chicago Trading Company](http://www.chicagotrading.com/)** | **[Associate C++ Engineer](https://jobright.ai/jobs/info/6944746794730b739877a5c2?utm_campaign=Software%20En", "created": "2025-12-19T00:57:12Z", "labels": ["scrape"], "context": "New Jobs Scraped - 2025-12-19T00:57:12 ## https://github.com/jobright-ai/2025-Software-Engineer-New-Grad\n\n||||||\n|-|-|-|-|-|\n| **[Mayo Clinic](https://www.mayoclinic.org)** | **[Software Engineer - Pipeline Developer](https://jobright.ai/j"}


identifier: gh_issue_3745725994
source: github_issue
status: new
created_at: 2025-12-19 02:25:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3745725994", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Robert-Stewart_1219_021659_gh_gw1/issues/6", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Robert-Stewart_1219_021659_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.io/v", "created": "2025-12-19T02:19:04Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3745725975
source: github_issue
status: new
created_at: 2025-12-19 02:25:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3745725975", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Robert-Stewart_1219_021659_gh_gw1/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Robert-Stewart_1219_021659_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.", "created": "2025-12-19T02:19:03Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3745691913
source: github_issue
status: new
created_at: 2025-12-19 02:25:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3745691913", "title": "Exercise: Expand your team with Copilot coding agent", "url": "https://github.com/patypatu/skills-expand-your-team-with-copilot/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-expand-your-team-with-copilot", "body_preview": "## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @patypatu! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll unlock the next level of your favorite AI-powered coding assistant. Let&#39;s learn how to assign Copilot coding tasks directly in GitHub! \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leav", "created": "2025-12-19T02:07:01Z", "labels": [], "context": "Exercise: Expand your team with Copilot coding agent ## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @patypatu! Welcome to "}


identifier: gh_issue_3745767922
source: github_issue
status: new
created_at: 2025-12-19 02:37:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3745767922", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/keypress-notifications/issues/46", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "keypress-notifications", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (17)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-19T02:36:38Z", "labels": ["automated", "security", "critical"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3745767021
source: github_issue
status: new
created_at: 2025-12-19 02:37:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3745767021", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/file-insights/issues/126", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "file-insights", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (16)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-19T02:36:15Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3745765375
source: github_issue
status: new
created_at: 2025-12-19 02:37:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3745765375", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/additional-contexts-menu/issues/107", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "additional-contexts-menu", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (17)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-19T02:35:29Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3745747190
source: github_issue
status: new
created_at: 2025-12-19 02:37:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3745747190", "title": "My dify self-hosted server suddenly became unavailable.", "url": "https://github.com/langgenius/dify/issues/29911", "user": "RajanZhan", "user_url": "https://github.com/RajanZhan", "repo": "dify", "body_preview": "### Self Checks\n\n- [x] I have read the [Contributing Guide](https://github.com/langgenius/dify/blob/main/CONTRIBUTING.md) and [Language Policy](https://github.com/langgenius/dify/issues/1542).\n- [x] This is only for bug report, if you would like to ask a question, please head to [Discussions](https://github.com/langgenius/dify/discussions/categories/general).\n- [x] I have searched for existing issues [search for existing issues](https://github.com/langgenius/dify/issues), including closed ones.\n", "created": "2025-12-19T02:27:01Z", "labels": ["\ud83d\udc1e bug"], "context": "My dify self-hosted server suddenly became unavailable. ### Self Checks\n\n- [x] I have read the [Contributing Guide](https://github.com/langgenius/dify/blob/main/CONTRIBUTING.md) and [Language Policy](https://github.com/langgenius/dify/issues/1542).\n- [x] T"}


identifier: gh_issue_3745674878
source: github_issue
status: new
created_at: 2025-12-19 02:50:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3745674878", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/AnantSWE/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @AnantSWE! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate you", "created": "2025-12-19T02:01:17Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @AnantSWE! Welcome to your Skills exercise"}


identifier: gh_issue_3745826453
source: github_issue
status: new
created_at: 2025-12-19 03:27:06
data:
  {"source": "github_issue", "identifier": "gh_issue_3745826453", "title": "Latest 15 Papers - December 19, 2025", "url": "https://github.com/Xander-C/DailyArXiv/issues/274", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "DailyArXiv", "body_preview": "**Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Confidential Computing\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[Confidential, Attestable, and Efficient Inter-CVM Communication with Arm CCA](https://arxiv.org/abs/2512.01594v2)** | 2025-12-02 |  |\n| **[Confidential Prompting: Privacy-preserving LLM Inference on Cloud](https://arxiv.org/abs/2409.19134v5)** | 2025-11-19 |  |\n| **[A Workflow f", "created": "2025-12-19T03:03:21Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 19, 2025 **Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Confidential Computing\n| **Title** | **Date** | **Comment** |\n| --"}


identifier: gh_issue_3745827524
source: github_issue
status: new
created_at: 2025-12-19 03:38:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3745827524", "title": "transformers-4.56.0-py3-none-any.whl: 1 vulnerabilities (highest severity is: 7.8)", "url": "https://github.com/ibm-granite/granite-tsfm/issues/471", "user": "ibm-mend-app[bot]", "user_url": "https://github.com/apps/ibm-mend-app", "repo": "granite-tsfm", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>transformers-4.56.0-py3-none-any.whl</b></summary>\n\n<p></p>\n<p>Path to dependency file: /services/inference/.ws-temp-MTXCBE-requirements.txt</p>\n<p>Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/tsfminference-5uhNGYE7-py3.12/lib/python3.12/site-packages/accelerate-1.10.1.dist-info,/home/wss-scanner/.cache/pypoetry/virt", "created": "2025-12-19T03:03:48Z", "labels": ["Mend: dependency security vulnerability"], "context": "transformers-4.56.0-py3-none-any.whl: 1 vulnerabilities (highest severity is: 7.8) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>transformers-4.56.0-py3-none-any.whl</b></summa"}


identifier: gh_issue_3745827436
source: github_issue
status: new
created_at: 2025-12-19 03:38:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3745827436", "title": "granite-tsfm-0.3.2.dev202+g97644870f.zip: 1 vulnerabilities (highest severity is: 7.8)", "url": "https://github.com/ibm-granite/granite-tsfm/issues/470", "user": "ibm-mend-app[bot]", "user_url": "https://github.com/apps/ibm-mend-app", "repo": "granite-tsfm", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>granite-tsfm-0.3.2.dev202+g97644870f.zip</b></summary>\n\n<p></p>\n<p>Path to dependency file: /services/inference/.ws-temp-MTXCBE-requirements.txt</p>\n<p>Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/tsfminference-5uhNGYE7-py3.12/lib/python3.12/site-packages/accelerate-1.10.1.dist-info,/home/wss-scanner/.cache/pypoetry/", "created": "2025-12-19T03:03:44Z", "labels": ["Mend: dependency security vulnerability"], "context": "granite-tsfm-0.3.2.dev202+g97644870f.zip: 1 vulnerabilities (highest severity is: 7.8) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>granite-tsfm-0.3.2.dev202+g97644870f.zip</b></s"}


identifier: gh_issue_3745790044
source: github_issue
status: new
created_at: 2025-12-19 04:03:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3745790044", "title": "Latest 15 Papers - December 19, 2025", "url": "https://github.com/yuque01/DailyArXiv/issues/83", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "DailyArXiv", "body_preview": "**Please check the [Github](https://github.com/yuque01/DailyArXiv) page for a better reading experience and more papers.**\n\n## Recommendation System\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[Blog Data Showdown: Machine Learning vs Neuro-Symbolic Models for Gender Classification](https://arxiv.org/abs/2512.16687v1)** | 2025-12-18 | 6 pages |\n| **[InfoDCL: Informative Noise Enhanced Diffusion Based Contrastive Learning](https://arxiv.org/abs/2512.16576v1)** | 2025-12-18 |  |\n", "created": "2025-12-19T02:46:06Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 19, 2025 **Please check the [Github](https://github.com/yuque01/DailyArXiv) page for a better reading experience and more papers.**\n\n## Recommendation System\n| **Title** | **Date** | **Comment** |\n| --- | --- "}


identifier: gh_issue_3745888170
source: github_issue
status: new
created_at: 2025-12-19 04:14:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3745888170", "title": "Security Audit Report - December 2025", "url": "https://github.com/vdirienzo/DebianScripts/issues/8", "user": "Dreadblitz", "user_url": "https://github.com/Dreadblitz", "repo": "DebianScripts", "body_preview": "# Reporte de Auditor\u00eda de Seguridad - autoclean.sh\n\n**Fecha:** 2025-12-19\n**Versi\u00f3n Analizada:** 2025.12\n**Auditor:** Claude Code (An\u00e1lisis de Seguridad Automatizado)\n**Herramientas:** Semgrep v1.146.0, Revisi\u00f3n Manual de C\u00f3digo, An\u00e1lisis Secuencial\n\n---\n\n## Resumen Ejecutivo\n\n| M\u00e9trica | Valor |\n|---------|-------|\n| **L\u00edneas de C\u00f3digo Analizadas** | 3,812 (autoclean.sh) + 904 (notifiers) |\n| **Vulnerabilidades Cr\u00edticas** | 0 |\n| **Vulnerabilidades Altas** | 0 |\n| **Vulnerabilidades Medias** | ", "created": "2025-12-19T03:35:53Z", "labels": [], "context": "Security Audit Report - December 2025 # Reporte de Auditor\u00eda de Seguridad - autoclean.sh\n\n**Fecha:** 2025-12-19\n**Versi\u00f3n Analizada:** 2025.12\n**Auditor:** Claude Code (An\u00e1lisis de Seguridad Automatizado)\n**Herramientas:** Semgrep v1.146."}


identifier: gh_issue_3745444819
source: github_issue
status: new
created_at: 2025-12-19 04:14:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3745444819", "title": "Debug ", "url": "https://github.com/AuraFrameFx/GenesisOs-AOSP/issues/3", "user": "AuraFrameFxDev", "user_url": "https://github.com/AuraFrameFxDev", "repo": "GenesisOs-AOSP", "body_preview": "", "created": "2025-12-19T00:36:21Z", "labels": [], "context": "Debug  "}


identifier: gh_issue_3745058730
source: github_issue
status: new
created_at: 2025-12-19 04:14:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3745058730", "title": "[GAP-034] Tighten CORS configuration to restrict methods and headers", "url": "https://github.com/frankbria/podcaststudiohub/issues/41", "user": "frankbria", "user_url": "https://github.com/frankbria", "repo": "podcaststudiohub", "body_preview": "# Issue #41: [GAP-034] Tighten CORS configuration to restrict methods and headers\n\n## Summary\n\nCORS middleware is configured to allow all HTTP methods and all headers (`allow_methods=[\"*\"]`, `allow_headers=[\"*\"]`), which provides no protection against unauthorized cross-origin requests. The configuration should explicitly allow only required methods and headers while maintaining backend functionality.\n\n## Problem Statement\n\nOverly permissive CORS configuration creates security risks:\n\n- **Uninte", "created": "2025-12-18T22:23:24Z", "labels": ["priority-p2", "area-security", "area-cors", "security", "medium-priority"], "context": "[GAP-034] Tighten CORS configuration to restrict methods and headers # Issue #41: [GAP-034] Tighten CORS configuration to restrict methods and headers\n\n## Summary\n\nCORS middleware is configured to allow all HTTP methods and all headers (`allow_methods=[\"*\"]`, `allow_he"}


identifier: gh_issue_3745052851
source: github_issue
status: new
created_at: 2025-12-19 04:14:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3745052851", "title": "[GAP-006] Create TTS Configuration CRUD API endpoints", "url": "https://github.com/frankbria/podcaststudiohub/issues/13", "user": "frankbria", "user_url": "https://github.com/frankbria", "repo": "podcaststudiohub", "body_preview": "# [GAP-006] Create TTS Configuration CRUD API endpoints\n\n## Description\n\nThe `TTSConfiguration` model exists in the database schema to store Text-to-Speech provider settings (OpenAI, ElevenLabs, Gemini, Edge TTS), but **no API endpoints exist** to manage these configurations. Users currently cannot:\n\n- Create TTS configurations programmatically\n- List their existing configurations\n- Update configuration parameters (voice selections, model versions, etc.)\n- Delete configurations\n- Set a default c", "created": "2025-12-18T22:20:40Z", "labels": ["priority-p1", "area-api", "area-tts", "feature", "high-priority"], "context": "[GAP-006] Create TTS Configuration CRUD API endpoints # [GAP-006] Create TTS Configuration CRUD API endpoints\n\n## Description\n\nThe `TTSConfiguration` model exists in the database schema to store Text-to-Speech provider settings (OpenAI, ElevenLabs, Gemin"}


identifier: gh_issue_3745989859
source: github_issue
status: new
created_at: 2025-12-19 04:37:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3745989859", "title": "[Bug]: Security vulnerability in Apache Tika dependency (CVE-2025-66516, CVE-2025-54988)", "url": "https://github.com/infiniflow/ragflow/issues/12037", "user": "realchs", "user_url": "https://github.com/realchs", "repo": "ragflow", "body_preview": "### Self Checks\n\n- [x] I have searched for existing issues [search for existing issues](https://github.com/infiniflow/ragflow/issues), including closed ones.\n- [x] I confirm that I am using English to submit this report ([Language Policy](https://github.com/infiniflow/ragflow/issues/5910)).\n- [x] Non-english title submitions will be closed directly ( \u975e\u82f1\u6587\u6807\u9898\u7684\u63d0\u4ea4\u5c06\u4f1a\u88ab\u76f4\u63a5\u5173\u95ed ) ([Language Policy](https://github.com/infiniflow/ragflow/issues/5910)).\n- [x] Please do not modify this template :) and fill in a", "created": "2025-12-19T04:32:32Z", "labels": ["\ud83d\udc1e bug"], "context": "[Bug]: Security vulnerability in Apache Tika dependency (CVE-2025-66516, CVE-2025-54988) ### Self Checks\n\n- [x] I have searched for existing issues [search for existing issues](https://github.com/infiniflow/ragflow/issues), including closed ones.\n- [x] I confirm that I am using English to"}


identifier: gh_issue_3745930173
source: github_issue
status: new
created_at: 2025-12-19 04:37:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3745930173", "title": "Security Vulnerabilities (Trivy Scan) - 19-12-25 @ 04:02", "url": "https://github.com/RazorBladeX/SH-GithubRunner/issues/46", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "SH-GithubRunner", "body_preview": "## \u26a0\ufe0f Security Vulnerabilities Detected\n\n**Scan Date:** 19-12-25 @ 04:02\n\n### Summary\n- **Total vulnerabilities found:** 298\n- **Critical:** 4\n- **High:** 49\n\n### Full Report\nThe complete vulnerability report is available as a workflow artifact.\n\n\ud83d\udce5 **[Download Full Report](https://github.com/RazorBladeX/SH-GithubRunner/actions/runs/20359346876/artifacts)**\n\n---\n*This issue is automatically generated by the Trivy security scanner.*\n", "created": "2025-12-19T04:02:11Z", "labels": ["vulnerability", "security", "automated", "security-scan"], "context": "Security Vulnerabilities (Trivy Scan) - 19-12-25 @ 04:02 ## \u26a0\ufe0f Security Vulnerabilities Detected\n\n**Scan Date:** 19-12-25 @ 04:02\n\n### Summary\n- **Total vulnerabilities found:** 298\n- **Critical:** 4\n- **High:** 49\n\n### Full Report\nThe complete vulnerabilit"}


identifier: gh_issue_3745917754
source: github_issue
status: new
created_at: 2025-12-19 04:37:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3745917754", "title": "Vulnerability Report: Stack Buffer Overflow in `ibv_cmd_post_recv` and `ibv_cmd_post_srq_recv`(<=60.0)", "url": "https://github.com/ez-lbz/ez-lbz.github.io/issues/7", "user": "ez-lbz", "user_url": "https://github.com/ez-lbz", "repo": "ez-lbz.github.io", "body_preview": "# Vulnerability Report: Stack Buffer Overflow in `ibv_cmd_post_recv` and `ibv_cmd_post_srq_recv`\n\n**Project:** https://github.com/linux-rdma/rdma-core\n**Discoverer:** lbz\n\n## Summary\nAn integer overflow in the size calculation for `alloca` in `ibv_cmd_post_recv` and `ibv_cmd_post_srq_recv` allows a stack buffer overflow when a large number of work requests (WRs) are posted. This vulnerability affects drivers that use these functions directly, such as `ipathverbs` and `hfi1verbs`.\n\n## Affected Co", "created": "2025-12-19T03:53:08Z", "labels": [], "context": "Vulnerability Report: Stack Buffer Overflow in `ibv_cmd_post_recv` and `ibv_cmd_post_srq_recv`(<=60.0) # Vulnerability Report: Stack Buffer Overflow in `ibv_cmd_post_recv` and `ibv_cmd_post_srq_recv`\n\n**Project:** https://github.com/linux-rdma/rdma-core\n**Discoverer:** lbz\n\n## Summary\nAn integer overfl"}


identifier: gh_issue_3745869663
source: github_issue
status: new
created_at: 2025-12-19 04:37:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3745869663", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-19", "url": "https://github.com/MagicTooooools/picker/issues/44", "user": "allinu", "user_url": "https://github.com/allinu", "repo": "picker", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-19\uff09\n\n- Doonsec's feed\n  - [ ] [AI Agent\u5b89\u5168\u6df1\u5165\u5b66\u4e60](https://mp.weixin.qq.com/s?__biz=MzI5NTQ3NzIxMw==&mid=2247485896&idx=1&sn=4323dc77c09a9c1ca82e2f9c94198518)\n  - [ ] [https\u8ba4\u8bc1\u8fc7\u7a0b\u56fe\u6587\u8be6\u89e3](https://mp.weixin.qq.com/s?__biz=MzE5MTQzMzg5MA==&mid=2247484408&idx=1&sn=f045f31ccfd13fbcee86b45185441f95)\n  - [ ] [SQL\u6ce8\u5165\uff1a\u4e00\u573a\u9488\u5bf9\u6570\u636e\u5e93\u7684\u201c\u8bed\u8a00\u6b3a\u8bc8\u201d](https://mp.weixin.qq.com/s?__biz=MzY0MDE4OTg4Mw==&mid=2247483971&idx=1&sn=f6cf85e8c1ed588c38c7caca2a3e8d6f)\n  - [ ] [AI\u804a\u5929\u5de5\u5177\u6b63\u6084\u7136\u5f71\u54cd\u9752\u5c11\u5e74\u60c5\u611f\u4e0e\u793e\u4f1a\u53d1\u5c55](https://mp.weixin.qq.com/", "created": "2025-12-19T03:25:56Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-19 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-19\uff09\n\n- Doonsec's feed\n  - [ ] [AI Agent\u5b89\u5168\u6df1\u5165\u5b66\u4e60](https://mp.weixin.qq.com/s?__biz=MzI5NTQ3NzIxMw==&mid=2247485896&idx=1&sn=4323dc77c09a9c1ca82e2f9c94198518)\n  - [ ] [https\u8ba4\u8bc1\u8fc7\u7a0b\u56fe\u6587\u8be6\u89e3](http"}


identifier: gh_issue_3745867843
source: github_issue
status: new
created_at: 2025-12-19 04:37:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3745867843", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-19", "url": "https://github.com/chainreactors/picker/issues/1087", "user": "chainreactorbot", "user_url": "https://github.com/chainreactorbot", "repo": "picker", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-19\uff09\n\n- paper - Last paper\n  - [ ] [AFL Fuzz QEMU \u65b0\u7248\u9002\u914d\uff1a\u6df1\u5ea6\u89e3\u6790 Patch \u7ec6\u8282](https://paper.seebug.org/3433/)\n- LevelBlue Blog\n  - [ ] [SASE in 2026: Why Convergence, Simplicity, and Zero Trust Require a More Technical Foundation](https://levelblue.com/blogs/levelblue-blog/sase-in-2026-why-convergence-simplicity-and-zero-trust-require-a-more-technical-foundation/)\n- Private Feed for M09Ic\n  - [ ] [mgeeky starred ineesdv/Tangled](https://github.com/ineesdv/Tangled)\n  - [ ] [phra starred e", "created": "2025-12-19T03:24:40Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-19 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-19\uff09\n\n- paper - Last paper\n  - [ ] [AFL Fuzz QEMU \u65b0\u7248\u9002\u914d\uff1a\u6df1\u5ea6\u89e3\u6790 Patch \u7ec6\u8282](https://paper.seebug.org/3433/)\n- LevelBlue Blog\n  - [ ] [SASE in 2026: Why Convergence, Simplicity, and Zero Trus"}


identifier: gh_issue_3746024911
source: github_issue
status: new
created_at: 2025-12-19 05:15:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3746024911", "title": "@berviantoleo/react-multi-crop-0.43.7.tgz: 1 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/berviantoleo/react-multi-crop/issues/3798", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "react-multi-crop", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>@berviantoleo/react-multi-crop-0.43.7.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json,/.yarn/cache/glob-npm-10.4.5-8c63175f05-698dfe1182.zip</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/berviantoleo/react-multi-crop/commit/655ee4247431cbb70e73d602cf02b8418e5c", "created": "2025-12-19T04:47:10Z", "labels": ["Mend: dependency security vulnerability"], "context": "@berviantoleo/react-multi-crop-0.43.7.tgz: 1 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>@berviantoleo/react-multi-crop-0.43.7.tgz</b></"}


identifier: gh_issue_3745949032
source: github_issue
status: new
created_at: 2025-12-19 05:15:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3745949032", "title": "Issue in Upgrading Cloud Sdk from 4.24.0 to 5.14.0 - Destination uri is not fetched correctly - destination.getUri()", "url": "https://github.com/SAP/cloud-sdk-java/issues/1039", "user": "I587750", "user_url": "https://github.com/I587750", "repo": "cloud-sdk-java", "body_preview": "### Describe the Bug\n\nWe are facing issues while upgrading one of the micro-services from cloud sdk 4 to 5.\n\nIssue: destination.getUri() returns different results for cloud sdk 4 and cloud sdk 5. And because of this getting error 401 when trying to consume the apis defined in destinations.\n\nPlease note, we had to change the implementation to get the the destination, to migrate to cloud sdk 5. As there were many classes were removed from cloud sdk 5 which were present in cloud sdk 4.\n\n\nCloud Sdk ", "created": "2025-12-19T04:13:05Z", "labels": ["bug"], "context": "Issue in Upgrading Cloud Sdk from 4.24.0 to 5.14.0 - Destination uri is not fetched correctly - destination.getUri() ### Describe the Bug\n\nWe are facing issues while upgrading one of the micro-services from cloud sdk 4 to 5.\n\nIssue: destination.getUri() returns different results for cloud sdk 4 and cloud sdk 5. And "}


identifier: gh_issue_3745945500
source: github_issue
status: new
created_at: 2025-12-19 05:15:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3745945500", "title": "ReactiveOidcIdTokenDecoderFactory in Spring Security 7.0 results in WARN logs and failed SpringBootTests when Micrometer Context Propagation enabled.", "url": "https://github.com/spring-projects/spring-security/issues/18335", "user": "blake-bauman", "user_url": "https://github.com/blake-bauman", "repo": "spring-security", "body_preview": "Using Spring Security with Spring WebFlux, after upgrading from Spring Security 6.latest to 7.0, we are experiencing issues with OAuth2 with symptoms similar to #13431 (and its related Issues) which was found and closed a couple years ago.  We are wondering if it may have resurfaced.\n\n### To Reproduce\n\nWe don't yet have a small/simple sample that doesn't include some internal dependencies for generating the token, but we seem to have narrowed the issue down to using `ReactiveOidcIdTokenDecoderFa", "created": "2025-12-19T04:10:43Z", "labels": ["status: waiting-for-triage", "type: bug"], "context": "ReactiveOidcIdTokenDecoderFactory in Spring Security 7.0 results in WARN logs and failed SpringBootTests when Micrometer Context Propagation enabled. Using Spring Security with Spring WebFlux, after upgrading from Spring Security 6.latest to 7.0, we are experiencing issues with OAuth2 with symptoms similar to #13431 (and its related Issues) which w"}


identifier: gh_issue_3746137794
source: github_issue
status: new
created_at: 2025-12-19 05:41:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3746137794", "title": "Discovered on asset:[AzureDefenderPlan] Region: global ID: /subscriptions/2fcb6271-bec2-47c7-adbb-fdca9cbc15cf/providers/Microsoft.Security/pricings/VirtualMachines", "url": "https://github.com/DivyaAggarawal/MID-DEC/issues/30", "user": "DivyaAggarawal", "user_url": "https://github.com/DivyaAggarawal", "repo": "MID-DEC", "body_preview": "Azure or hybrid VMs are not covered by Defender for Endpoint.<br/><br/>Severity: Critical<br/><br/>CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H<br/><br/>CVSS Score: 9.0<br/><br/>Recommendation: Missing threat detection, vulnerability scanning, and EDR capabilities.", "created": "2025-12-19T05:37:36Z", "labels": ["BreachLock", "Cloud scan", "Critical"], "context": "Discovered on asset:[AzureDefenderPlan] Region: global ID: /subscriptions/2fcb6271-bec2-47c7-adbb-fdca9cbc15cf/providers/Microsoft.Security/pricings/VirtualMachines Azure or hybrid VMs are not covered by Defender for Endpoint.<br/><br/>Severity: Critical<br/><br/>CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H<br/><br/>CVSS Score: 9.0<br/><br/>Recommend"}


identifier: gh_issue_3746148848
source: github_issue
status: new
created_at: 2025-12-19 05:54:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3746148848", "title": "[BOUNTY v2] Complete Plaintext Recovery via R-Elimination and GCD Constraint Attack", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/339", "user": "Konyuka", "user_url": "https://github.com/Konyuka", "repo": "pvac_hfhe_cpp", "body_preview": "## Result\n\n**The sum of `a.ct + b.ct` is: `13335508694671211979`**\n\n| Value | Decimal | Hex |\n|-------|---------|-----|\n| a | 12335195561373732516 | 0xab2f6b0226a80ea4 |\n| b | 1000313133297479463 | 0x0de1d37eae5aaf27 |\n| **a + b** | **13335508694671211979** | **0xb9113e80d502bdcb** |\n\n---\n\n## Attack Methodology\n\nThis attack exploits **two vulnerability points** as hinted in the challenge:\n\n### Vulnerability Point 1: R-Elimination via Evaluation at Generator\n\nThe encryption scheme uses a random b", "created": "2025-12-19T05:43:53Z", "labels": [], "context": "[BOUNTY v2] Complete Plaintext Recovery via R-Elimination and GCD Constraint Attack ## Result\n\n**The sum of `a.ct + b.ct` is: `13335508694671211979`**\n\n| Value | Decimal | Hex |\n|-------|---------|-----|\n| a | 12335195561373732516 | 0xab2f6b0226a80ea4 |\n| b | 1000313133297479463 | 0x"}


identifier: gh_issue_3745973098
source: github_issue
status: new
created_at: 2025-12-19 06:06:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3745973098", "title": "Implement webhook and GitHub Actions workflow API", "url": "https://github.com/conduit-ui/repo/issues/8", "user": "jordanpartridge", "user_url": "https://github.com/jordanpartridge", "repo": "repo", "body_preview": "## Overview\n\nImplement comprehensive webhook configuration and GitHub Actions workflow dispatch APIs. Enable automated event handling, workflow triggers, and integration with CI/CD pipelines.\n\n## Proposed API\n\n### Webhook Management\n\n```php\n// List webhooks\n$webhooks = Repos::find('owner/repo')\n    ->webhooks()\n    ->get();\n\n// Create webhook\nRepos::find('owner/repo')\n    ->createWebhook([\n        'url' => 'https://example.com/webhook',\n        'events' => ['push', 'pull_request'],\n        'acti", "created": "2025-12-19T04:26:02Z", "labels": ["enhancement"], "context": "Implement webhook and GitHub Actions workflow API ## Overview\n\nImplement comprehensive webhook configuration and GitHub Actions workflow dispatch APIs. Enable automated event handling, workflow triggers, and integration with CI/CD pipelines.\n\n## Prop"}


identifier: gh_issue_3745679199
source: github_issue
status: new
created_at: 2025-12-19 06:06:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3745679199", "title": "Update documentation with security badges and public repository links", "url": "https://github.com/cfg-is/cfgms/issues/284", "user": "jrdnr", "user_url": "https://github.com/jrdnr", "repo": "cfgms", "body_preview": "## Overview\n\nUpdate project documentation to reflect public repository status with security badges, links to GitHub features, and updated community resources.\n\n## Rationale\n\nAfter going public with GitHub Advanced Security features enabled, documentation should showcase security posture and provide links to community resources. Professional README presentation is critical for open-source adoption.\n\n## Prerequisites\n\n- Repository must be public (Issue #282)\n- All security workflows must have run ", "created": "2025-12-19T02:02:43Z", "labels": ["documentation", "enhancement"], "context": "Update documentation with security badges and public repository links ## Overview\n\nUpdate project documentation to reflect public repository status with security badges, links to GitHub features, and updated community resources.\n\n## Rationale\n\nAfter going public with Gi"}


identifier: gh_issue_3745673113
source: github_issue
status: new
created_at: 2025-12-19 06:06:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3745673113", "title": "Convert repository to public and activate GitHub Advanced Security features", "url": "https://github.com/cfg-is/cfgms/issues/282", "user": "jrdnr", "user_url": "https://github.com/jrdnr", "repo": "cfgms", "body_preview": "## Overview\n\nMake CFGMS repository public and activate all GitHub Advanced Security features available for open-source projects.\n\n## Rationale\n\n**From security review**: Security tooling is already excellent (9/10). Going public unlocks free premium features:\n- GitHub Advanced Security (CodeQL)\n- Dependabot alerts + security updates\n- Secret scanning with partner patterns\n- GitHub Security Advisories\n- OpenSSF Scorecard integration\n\nThe security review concluded: \"Converting to public is just fl", "created": "2025-12-19T02:00:40Z", "labels": ["security", "high-priority"], "context": "Convert repository to public and activate GitHub Advanced Security features ## Overview\n\nMake CFGMS repository public and activate all GitHub Advanced Security features available for open-source projects.\n\n## Rationale\n\n**From security review**: Security tooling is already ex"}


identifier: gh_issue_3745638130
source: github_issue
status: new
created_at: 2025-12-19 06:06:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3745638130", "title": "code review", "url": "https://github.com/kimtaegun-lang/chating_frontend/issues/4", "user": "kimtaegun-lang", "user_url": "https://github.com/kimtaegun-lang", "repo": "chating_frontend", "body_preview": "@coderabbitai \n\uc804\uccb4 \ud504\ub85c\uc81d\ud2b8\ub97c \ubd84\uc11d\ud558\uace0 \ub2e4\uc74c \ud615\uc2dd\uc73c\ub85c \ub2f5\ubcc0\ud574\uc8fc\uc138\uc694:\n\n1. \ucf54\ub4dc \ud488\uc9c8 \uc810\uc218 (10\uc810 \ub9cc\uc810)\n2. \uc131\ub2a5 \uc810\uc218 (10\uc810 \ub9cc\uc810)\n3. \ubcf4\uc548 \uc810\uc218 (10\uc810 \ub9cc\uc810)\n4. \uc544\ud0a4\ud14d\ucc98 \uc124\uacc4 \uc810\uc218 (10\uc810 \ub9cc\uc810)\n\n\uadf8\ub9ac\uace0 \uac01 \ud56d\ubaa9\ubcc4 \ubd80\uc871\ud55c \uc810\uacfc \uac1c\uc120 \ubc29\ubc95\uc744 \uc54c\ub824\uc8fc\uc138\uc694.", "created": "2025-12-19T01:47:44Z", "labels": [], "context": "code review @coderabbitai \n\uc804\uccb4 \ud504\ub85c\uc81d\ud2b8\ub97c \ubd84\uc11d\ud558\uace0 \ub2e4\uc74c \ud615\uc2dd\uc73c\ub85c \ub2f5\ubcc0\ud574\uc8fc\uc138\uc694:\n\n1. \ucf54\ub4dc \ud488\uc9c8 \uc810\uc218 (10\uc810 \ub9cc\uc810)\n2. \uc131\ub2a5 \uc810\uc218 (10\uc810 \ub9cc\uc810)\n3. \ubcf4\uc548 \uc810\uc218 (10\uc810 \ub9cc\uc810)\n4. \uc544\ud0a4\ud14d\ucc98 \uc124\uacc4 \uc810\uc218 (10\uc810 \ub9cc\uc810)\n\n\uadf8\ub9ac\uace0 \uac01 \ud56d\ubaa9\ubcc4 \ubd80\uc871\ud55c \uc810\uacfc \uac1c\uc120 \ubc29\ubc95\uc744 \uc54c\ub824\uc8fc\uc138\uc694."}


identifier: gh_issue_3746208591
source: github_issue
status: new
created_at: 2025-12-19 06:18:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3746208591", "title": "log4j-core-2.18.0.jar: 1 vulnerabilities (highest severity is: 5.4)", "url": "https://github.com/CameronsGHDemoTX/SecurityShepherd/issues/13", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "SecurityShepherd", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>log4j-core-2.18.0.jar</b></summary>\n\n<p>The Apache Log4j Implementation</p>\n<p>Library home page: <a href=\"https://www.apache.org/\">https://www.apache.org/</a></p>\n<p>Path to dependency file: /pom.xml</p>\n<p>Path to vulnerable library: /home/wss-scanner/.m2/repository/org/apache/logging/log4j/log4j-core/2.18.0/log4j-core-2.18.0.jar</p>\n<p>\n\n</de", "created": "2025-12-19T06:06:30Z", "labels": ["Mend: dependency security vulnerability"], "context": "log4j-core-2.18.0.jar: 1 vulnerabilities (highest severity is: 5.4) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>log4j-core-2.18.0.jar</b></summary>\n\n<p>The Apa"}


identifier: gh_issue_3746217948
source: github_issue
status: new
created_at: 2025-12-19 06:18:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3746217948", "title": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-DEV/SAST-Test-Repo-aee89e8f-5bbb-4550-b7cf-46116b1dbf40/issues/15", "user": "dev-mend-for-github-com[bot]", "user_url": "https://github.com/apps/dev-mend-for-github-com", "repo": "SAST-Test-Repo-aee89e8f-5bbb-4550-b7cf-46116b1dbf40", "body_preview": "## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-19T06:10:12Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3746217898
source: github_issue
status: new
created_at: 2025-12-19 06:18:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3746217898", "title": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-DEV/SAST-Test-Repo-aee89e8f-5bbb-4550-b7cf-46116b1dbf40/issues/14", "user": "dev-mend-for-github-com[bot]", "user_url": "https://github.com/apps/dev-mend-for-github-com", "repo": "SAST-Test-Repo-aee89e8f-5bbb-4550-b7cf-46116b1dbf40", "body_preview": "## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-core-6.1.6.jar</b></summary>\n\n<p>Spring Core</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>", "created": "2025-12-19T06:10:11Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar ## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <"}


identifier: gh_issue_3746217850
source: github_issue
status: new
created_at: 2025-12-19 06:18:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3746217850", "title": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-DEV/SAST-Test-Repo-aee89e8f-5bbb-4550-b7cf-46116b1dbf40/issues/13", "user": "dev-mend-for-github-com[bot]", "user_url": "https://github.com/apps/dev-mend-for-github-com", "repo": "SAST-Test-Repo-aee89e8f-5bbb-4550-b7cf-46116b1dbf40", "body_preview": "## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-web-6.1.6.jar</b></summary>\n\n<p>Spring Web</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDe", "created": "2025-12-19T06:10:09Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar ## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3746217794
source: github_issue
status: new
created_at: 2025-12-19 06:18:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3746217794", "title": "CVE-2025-48988 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-DEV/SAST-Test-Repo-aee89e8f-5bbb-4550-b7cf-46116b1dbf40/issues/12", "user": "dev-mend-for-github-com[bot]", "user_url": "https://github.com/apps/dev-mend-for-github-com", "repo": "SAST-Test-Repo-aee89e8f-5bbb-4550-b7cf-46116b1dbf40", "body_preview": "## CVE-2025-48988 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-19T06:10:07Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48988 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48988 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


