# leads

identifier: gh_issue_3760309017
source: github_issue
status: new
created_at: 2025-12-24 13:25:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3760309017", "title": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc/issues/18", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc", "body_preview": "## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-webmvc-6.1.6.jar</b></summary>\n\n<p>Spring Web MVC</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</", "created": "2025-12-24T13:14:08Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar ## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3760308857
source: github_issue
status: new
created_at: 2025-12-24 13:25:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3760308857", "title": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc/issues/12", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc", "body_preview": "## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-24T13:14:03Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3760308694
source: github_issue
status: new
created_at: 2025-12-24 13:25:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3760308694", "title": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc/issues/8", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc", "body_preview": "## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependen", "created": "2025-12-24T13:13:58Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3760305558
source: github_issue
status: new
created_at: 2025-12-24 13:25:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3760305558", "title": "[HIGH] Security Vulnerability in y18n", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/1308", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `y18n`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-7774\n\n**Description:**\nThe package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2020-7774\\\"],\\\"published\\\":\\\"2020-11-17T13:15:12.633\\\",\\\"lastModified\\\":\\\"2024-11-21T05:37:46.690\\\",\\\"version\\\":\\\"3.1\\\",\\\"vectorString\\\":\\\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\\\"", "created": "2025-12-24T13:12:19Z", "labels": [], "context": "[HIGH] Security Vulnerability in y18n ## Security Vulnerability Detected\n\n**Dependency:** `y18n`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-7774\n\n**Description:**\nThe package y18n before 3.2.2, "}


identifier: gh_issue_3760332001
source: github_issue
status: new
created_at: 2025-12-24 13:37:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3760332001", "title": "[SOOS] myPublicRepo: Fix CVE-2023-52389 Vulnerability (poco@1.8.1)", "url": "https://github.com/SOOS-FAngelino/myPublicRepo/issues/110", "user": "soos-security-analysis-qa[bot]", "user_url": "https://github.com/apps/soos-security-analysis-qa", "repo": "myPublicRepo", "body_preview": "Summary:\n\nA Critical severity Vulnerability was detected in myPublicRepo at Nov 11, 2025, 02:57 PM. \n\n[CVE-2023-52389 Vulnerability (poco@1.8.1)](https://qa-app.soos.io/clients/3hvuked5v/projects/fc6t469tz/branches/hj152l4xa?status=pending&search=CVE-2023-52389)\n\n----\n\nDescription:\n\nUTF32Encoding.cpp in POCO has an integer overflow and buffer overflow vulnerability due to negative return values in convert() and queryConvert().\n\n----\n\nSolution:\n\nRemove or update the package(s) and version(s) whic", "created": "2025-12-24T13:26:03Z", "labels": [], "context": "[SOOS] myPublicRepo: Fix CVE-2023-52389 Vulnerability (poco@1.8.1) Summary:\n\nA Critical severity Vulnerability was detected in myPublicRepo at Nov 11, 2025, 02:57 PM. \n\n[CVE-2023-52389 Vulnerability (poco@1.8.1)](https://qa-app.soos.io/clients/3hvuked5v/projects/fc6t"}


identifier: gh_issue_3760309203
source: github_issue
status: new
created_at: 2025-12-24 13:37:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3760309203", "title": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc/issues/25", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc", "body_preview": "## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-24T13:14:14Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3760309158
source: github_issue
status: new
created_at: 2025-12-24 13:37:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3760309158", "title": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc/issues/23", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc", "body_preview": "## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-24T13:14:12Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3760309161
source: github_issue
status: new
created_at: 2025-12-24 13:37:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3760309161", "title": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc/issues/24", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc", "body_preview": "## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-core-6.1.6.jar</b></summary>\n\n<p>Spring Core</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>", "created": "2025-12-24T13:14:12Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar ## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <"}


identifier: gh_issue_3760308488
source: github_issue
status: new
created_at: 2025-12-24 13:37:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3760308488", "title": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc/issues/4", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-3f832685-a610-4768-9b4a-6f828c0314dc", "body_preview": "## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDepend", "created": "2025-12-24T13:13:51Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3760305465
source: github_issue
status: new
created_at: 2025-12-24 13:37:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3760305465", "title": "[HIGH] Security Vulnerability in websocket-extensions", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/1307", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `websocket-extensions`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-7663\n\n**Description:**\nwebsocket-extensions ruby module prior to 0.1.5 allows Denial of Service (DoS) via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequence of a backslash and some other character. This could ", "created": "2025-12-24T13:12:16Z", "labels": [], "context": "[HIGH] Security Vulnerability in websocket-extensions ## Security Vulnerability Detected\n\n**Dependency:** `websocket-extensions`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-7663\n\n**Description:**\nwebsocket-exten"}


identifier: gh_issue_3760305381
source: github_issue
status: new
created_at: 2025-12-24 13:37:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3760305381", "title": "[MEDIUM] Security Vulnerability in yargs-parser", "url": "https://github.com/testing-gh-org-2/e2e-test-repo/issues/1306", "user": "hbird-pre-alpha-test-v3[bot]", "user_url": "https://github.com/apps/hbird-pre-alpha-test-v3", "repo": "e2e-test-repo", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `yargs-parser`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-7608\n\n**Description:**\nyargs-parser could be tricked into adding or modifying properties of Object.prototype using a \"__proto__\" payload.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2020-7608\\\"],\\\"published\\\":\\\"2020-03-16T20:15:12.860\\\",\\\"lastModified\\\":\\\"2024-11-21T05:37:27.963\\\",\\\"version\\\":\\\"3.1\\\",\\\"vectorString\\\":\\\"CVSS:3.", "created": "2025-12-24T13:12:13Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in yargs-parser ## Security Vulnerability Detected\n\n**Dependency:** `yargs-parser`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-7608\n\n**Description:**\nyargs-parser could be"}


identifier: gh_issue_3760360248
source: github_issue
status: new
created_at: 2025-12-24 13:49:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3760360248", "title": "[Phase 6] Sign packages with Sigstore/cosign", "url": "https://github.com/dlrivada/Encina/issues/93", "user": "dlrivada", "user_url": "https://github.com/dlrivada", "repo": "Encina", "body_preview": "## Description\n\nSign NuGet packages using Sigstore/cosign for supply chain security.\n\n## Context\n\n- **Phase**: 6 - Release Preparation\n- **Priority**: \u2b50\u2b50\u2b50 Medium\n- **Complexity**: Medium\n\n## Options\n\n### Option 1: NuGet Package Signing\n\n- Use certificate-based signing\n- Requires code signing certificate\n\n### Option 2: Sigstore/Cosign\n\n- Keyless signing\n- Uses OIDC identity\n- No certificate management\n\n## Tasks\n\n- [ ] Evaluate signing options\n- [ ] Configure chosen signing method\n- [ ] Sign packa", "created": "2025-12-24T13:41:00Z", "labels": ["enhancement", "phase-6-release", "priority-medium", "complexity-medium"], "context": "[Phase 6] Sign packages with Sigstore/cosign ## Description\n\nSign NuGet packages using Sigstore/cosign for supply chain security.\n\n## Context\n\n- **Phase**: 6 - Release Preparation\n- **Priority**: \u2b50\u2b50\u2b50 Medium\n- **Complexity**: Medium\n\n## Options\n\n"}


identifier: gh_issue_3760359824
source: github_issue
status: new
created_at: 2025-12-24 13:49:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3760359824", "title": "[Phase 6] SLSA Level 2 compliance - build provenance", "url": "https://github.com/dlrivada/Encina/issues/92", "user": "dlrivada", "user_url": "https://github.com/dlrivada", "repo": "Encina", "body_preview": "## Description\n\nAchieve SLSA Level 2 compliance for supply chain security with build provenance.\n\n## Context\n\n- **Phase**: 6 - Release Preparation\n- **Priority**: \u2b50\u2b50\u2b50\u2b50 High\n- **Complexity**: Medium\n\n## SLSA Level 2 Requirements\n\n- Build service verifies source\n- Scripted builds\n- Authenticated provenance\n\n## Tasks\n\n- [ ] Configure SLSA GitHub Action\n- [ ] Generate build provenance\n- [ ] Attach provenance to releases\n- [ ] Verify provenance can be validated\n- [ ] Document in SECURITY.md\n\n## Examp", "created": "2025-12-24T13:40:44Z", "labels": ["enhancement", "phase-6-release", "priority-high", "complexity-medium"], "context": "[Phase 6] SLSA Level 2 compliance - build provenance ## Description\n\nAchieve SLSA Level 2 compliance for supply chain security with build provenance.\n\n## Context\n\n- **Phase**: 6 - Release Preparation\n- **Priority**: \u2b50\u2b50\u2b50\u2b50 High\n- **Complexity**: Medium\n\n#"}


identifier: gh_issue_3760130180
source: github_issue
status: new
created_at: 2025-12-24 13:50:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3760130180", "title": "There is no option for delete server/s", "url": "https://github.com/airlinklabs/panel/issues/49", "user": "saidur-rahman-alif", "user_url": "https://github.com/saidur-rahman-alif", "repo": "panel", "body_preview": "There is no way to delete server. That thing is mandatory for a game server panel", "created": "2025-12-24T11:50:49Z", "labels": [], "context": "There is no option for delete server/s There is no way to delete server. That thing is mandatory for a game server panel"}


identifier: gh_issue_3760388171
source: github_issue
status: new
created_at: 2025-12-24 14:01:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3760388171", "title": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b/issues/12", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b", "body_preview": "## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-web-6.1.6.jar</b></summary>\n\n<p>Spring Web</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDe", "created": "2025-12-24T13:57:40Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar ## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3760388052
source: github_issue
status: new
created_at: 2025-12-24 14:01:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3760388052", "title": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b/issues/9", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b", "body_preview": "## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-webmvc-6.1.6.jar</b></summary>\n\n<p>Spring Web MVC</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</", "created": "2025-12-24T13:57:35Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar ## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3760387905
source: github_issue
status: new
created_at: 2025-12-24 14:01:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3760387905", "title": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b/issues/6", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b", "body_preview": "## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-24T13:57:31Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3760387857
source: github_issue
status: new
created_at: 2025-12-24 14:01:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3760387857", "title": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b/issues/5", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b", "body_preview": "## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependen", "created": "2025-12-24T13:57:29Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3760378026
source: github_issue
status: new
created_at: 2025-12-24 14:01:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3760378026", "title": "jupyter-1.1.1-py2.py3-none-any.whl: 1 vulnerabilities (highest severity is: 7.8)", "url": "https://github.com/BuloZB/BuloCloudSentinel/issues/450", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "BuloCloudSentinel", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jupyter-1.1.1-py2.py3-none-any.whl</b></summary>\n\n<p></p>\n<p>Path to dependency file: /services/ai/ml_platform/requirements.txt</p>\n<p>Path to vulnerable library: /tmp/ws-ua_20251224100325_BBAJLS/python_RERHEH/202512241105131/env/lib/python3.9/site-packages/nbconvert-7.16.6.dist-info</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com", "created": "2025-12-24T13:51:37Z", "labels": ["Mend: dependency security vulnerability"], "context": "jupyter-1.1.1-py2.py3-none-any.whl: 1 vulnerabilities (highest severity is: 7.8) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jupyter-1.1.1-py2.py3-none-any.whl</b></summary"}


identifier: gh_issue_3760434179
source: github_issue
status: new
created_at: 2025-12-24 14:25:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3760434179", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/prattak86/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @prattak86! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I", "created": "2025-12-24T14:21:02Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @prattak86! Welcome to "}


identifier: gh_issue_3760526730
source: github_issue
status: new
created_at: 2025-12-24 15:01:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3760526730", "title": "Add Next.js 16 support", "url": "https://github.com/z4nr34l/nemo/issues/171", "user": "framirez853", "user_url": "https://github.com/framirez853", "repo": "nemo", "body_preview": "**Is your feature request related to a problem? Please describe.**\nWe can't upgrade to Next.js 16 because @rescale/nemo@2.0.2 only supports Next.js 13\u201315 (next@^13.0.0-0 || ^14.0.0-0 || ^15.0.0-0). Next.js 16.0.7+ includes security fixes (CVE-2025-66478), so we're blocked from upgrading for security reasons.\n\n**Describe the solution you'd like**\nAdd Next.js 16 to the peer dependencies. Update the peer dependency range to include ^16.0.0-0, e.g.:\n`\"peerDependencies\": {  \"next\": \"^13.0.0-0 || ^14.", "created": "2025-12-24T14:57:46Z", "labels": [], "context": "Add Next.js 16 support **Is your feature request related to a problem? Please describe.**\nWe can't upgrade to Next.js 16 because @rescale/nemo@2.0.2 only supports Next.js 13\u201315 (next@^13.0.0-0 || ^14.0.0-0 || ^15.0.0-0). Ne"}


identifier: gh_issue_3760388260
source: github_issue
status: new
created_at: 2025-12-24 15:01:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3760388260", "title": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b/issues/15", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b", "body_preview": "## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-core-6.1.6.jar</b></summary>\n\n<p>Spring Core</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>", "created": "2025-12-24T13:57:43Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar ## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <"}


identifier: gh_issue_3760388208
source: github_issue
status: new
created_at: 2025-12-24 15:01:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3760388208", "title": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b/issues/14", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b", "body_preview": "## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-24T13:57:42Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3760388128
source: github_issue
status: new
created_at: 2025-12-24 15:01:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3760388128", "title": "CVE-2025-48988 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b/issues/11", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-aab8450b-c7a6-43dd-b673-e657a36ed18b", "body_preview": "## CVE-2025-48988 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-24T13:57:38Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48988 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48988 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3760550993
source: github_issue
status: new
created_at: 2025-12-24 15:25:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3760550993", "title": "\ud83d\udea8 Security Vulnerabilities Detected", "url": "https://github.com/cbwinslow/arbfinder-suite/issues/40", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "arbfinder-suite", "body_preview": "## Security Vulnerabilities Detected\n\n\n### NPM Dependencies\n- Critical: 0\n- High: 1\n- Moderate: 0\n- Low: 0\n", "created": "2025-12-24T15:10:03Z", "labels": ["dependencies", "security", "critical"], "context": "\ud83d\udea8 Security Vulnerabilities Detected ## Security Vulnerabilities Detected\n\n\n### NPM Dependencies\n- Critical: 0\n- High: 1\n- Moderate: 0\n- Low: 0\n"}


identifier: gh_issue_3760564097
source: github_issue
status: new
created_at: 2025-12-24 15:25:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3760564097", "title": "CI/CD Configuration Improvements: Duplicate Release Workflows and Consistency Issues", "url": "https://github.com/kcenon/video_converter/issues/219", "user": "kcenon", "user_url": "https://github.com/kcenon", "repo": "video_converter", "body_preview": "## \ud83d\udccb Overview\n\nAfter analyzing the CI/CD configuration of the video_converter project, several areas requiring improvement were identified.\nThis issue is a comprehensive proposal to enhance the stability, consistency, and efficiency of the CI/CD pipeline.\n\n## \ud83d\udd34 Critical: Duplicate Release Workflows\n\n### Problem\nBoth `release.yml` and `release-macos.yml` workflows are configured with the **same trigger** (`v*` tags).\n\n```yaml\n# release.yml\non:\n  push:\n    tags:\n      - \"v*\"\n\n# release-macos.yml\no", "created": "2025-12-24T15:15:41Z", "labels": ["enhancement", "priority: high", "type: infrastructure"], "context": "CI/CD Configuration Improvements: Duplicate Release Workflows and Consistency Issues ## \ud83d\udccb Overview\n\nAfter analyzing the CI/CD configuration of the video_converter project, several areas requiring improvement were identified.\nThis issue is a comprehensive proposal to enhance the stabil"}


identifier: gh_issue_3760540236
source: github_issue
status: new
created_at: 2025-12-24 15:25:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3760540236", "title": "[CRITICAL] Cryptographic Vulnerability: Nonce Reuse (Two-Time Pad)", "url": "https://github.com/penumm/penum-private-rpc/issues/1", "user": "anuragchvn-blip", "user_url": "https://github.com/anuragchvn-blip", "repo": "penum-private-rpc", "body_preview": "\ufeffThe cryptographic implementation uses a hardcoded zero nonce for all encryptions. Since the same session key is used for both request and response, this results in a Two-Time Pad vulnerability. Attackers can recover plaintext by XORing request and response ciphertexts.\n\n**Remediation:**\n1. Use separate keys for each direction.\n2. Or use distinct nonces for each direction.\r\n", "created": "2025-12-24T15:05:15Z", "labels": ["bug", "security", "critical"], "context": "[CRITICAL] Cryptographic Vulnerability: Nonce Reuse (Two-Time Pad) \ufeffThe cryptographic implementation uses a hardcoded zero nonce for all encryptions. Since the same session key is used for both request and response, this results in a Two-Time Pad vulnerability. Attac"}


identifier: gh_issue_3760448134
source: github_issue
status: new
created_at: 2025-12-24 15:25:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3760448134", "title": "\ud83d\udd12 SECURITY: SQL Injection - URGENT", "url": "https://github.com/royalshailesh/Code-Converter20/issues/15", "user": "royalshailesh", "user_url": "https://github.com/royalshailesh", "repo": "Code-Converter20", "body_preview": "## SECURITY CRITICAL\n\n\u26a0\ufe0f CONFIDENTIAL - DO NOT SHARE\n\nSQL injection vulnerability discovered.\n\n### Details:\n- Endpoint: /api/search\n- Severity: CRITICAL\n- CVE: Pending\n\n### Actions:\n- Patch endpoint\n- Security audit\n\n### Access Level: SECURITY TEAM ONLY", "created": "2025-12-24T14:26:13Z", "labels": ["security-critical", "vulnerability", "urgent"], "context": "\ud83d\udd12 SECURITY: SQL Injection - URGENT ## SECURITY CRITICAL\n\n\u26a0\ufe0f CONFIDENTIAL - DO NOT SHARE\n\nSQL injection vulnerability discovered.\n\n### Details:\n- Endpoint: /api/search\n- Severity: CRITICAL\n- CVE: Pending\n\n### Actions:\n- Patch endpoint\n-"}


identifier: gh_issue_3760443959
source: github_issue
status: new
created_at: 2025-12-24 15:25:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3760443959", "title": "vulnerability in agents Project", "url": "https://github.com/ed-donner/agents/issues/518", "user": "ankitdn", "user_url": "https://github.com/ankitdn", "repo": "agents", "body_preview": "While working on agents project, I identified a critical serialization injection vulnerability in the [langchain-core](https://vulert.com/vuln-db/CVE-2025-68664) package. The issue exists in the dumps() and dumpd() serialization methods, which fail to escape user-controlled dictionaries containing lc keys. During deserialization, these structures are treated as valid LangChain objects, which may allow attackers to extract environment secrets or instantiate internal classes with controlled parame", "created": "2025-12-24T14:24:47Z", "labels": [], "context": "vulnerability in agents Project While working on agents project, I identified a critical serialization injection vulnerability in the [langchain-core](https://vulert.com/vuln-db/CVE-2025-68664) package. The issue exists in the dumps"}


identifier: gh_issue_3760424656
source: github_issue
status: new
created_at: 2025-12-24 15:37:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3760424656", "title": "[MEDIUM] Unpinned anthropics/claude-code-action versions in workflows", "url": "https://github.com/JacobPEvans/ai-assistant-instructions/issues/272", "user": "JacobPEvans", "user_url": "https://github.com/JacobPEvans", "repo": "ai-assistant-instructions", "body_preview": "## Description\n\nMultiple GitHub Actions workflows use the floating tag `@v1` for `anthropics/claude-code-action`, which poses security and reproducibility risks.\n\n## Severity\n\nMEDIUM - Security and reproducibility concern\n\n## Affected Workflows\n\n- `.github/workflows/claude.yml` (line 63)\n- `.github/workflows/doc-sync.yml` (line 25)\n- `.github/workflows/issue-resolver.yml` (line 24)\n- `.github/workflows/issue-triage.yml` (line 22)\n\n## Current Code\n\nAll instances use:\n\\`\\`\\`yaml\nuses: anthropics/c", "created": "2025-12-24T14:17:27Z", "labels": ["ai-created", "priority:critical", "type:chore"], "context": "[MEDIUM] Unpinned anthropics/claude-code-action versions in workflows ## Description\n\nMultiple GitHub Actions workflows use the floating tag `@v1` for `anthropics/claude-code-action`, which poses security and reproducibility risks.\n\n## Severity\n\nMEDIUM - Security and re"}


identifier: gh_issue_3760399811
source: github_issue
status: new
created_at: 2025-12-24 15:37:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3760399811", "title": "\ud83d\udca1 feat: remove ability to autoinstall extensions alongside Appium server", "url": "https://github.com/appium/appium/issues/21835", "user": "eglitise", "user_url": "https://github.com/eglitise", "repo": "appium", "body_preview": "### Is your feature request related to a problem?\n\nAppium has a feature where users can install the server component along with any extensions using just one command. This can be achieved by adding a flag to the regular server installation command as follows:\n```sh\nnpm install -g appium --drivers=xcuitest,uiautomator2 --plugins=images\n```\nThe problem with this feature is that, while undoubtedly useful, it relies on `npm`'s postinstall hook feature, where packages are able to define code that sho", "created": "2025-12-24T14:04:28Z", "labels": ["Enhancement", "v4"], "context": "\ud83d\udca1 feat: remove ability to autoinstall extensions alongside Appium server ### Is your feature request related to a problem?\n\nAppium has a feature where users can install the server component along with any extensions using just one command. This can be achieved by adding a "}


identifier: gh_issue_3760596824
source: github_issue
status: new
created_at: 2025-12-24 15:37:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3760596824", "title": "fix: simplify findings display - remove hybrid table+expanders approach", "url": "https://github.com/bkyoung/code-reviewer/issues/91", "user": "bkyoung", "user_url": "https://github.com/bkyoung", "repo": "code-reviewer", "body_preview": "## Parent Issue\nFollow-up to #61 (Collapsible presentation with incremental disclosure)\n\n## Problem\n\nPR #89 implemented a \"hybrid\" approach for displaying findings that feels clunky:\n\n**Current (Hybrid):**\n```markdown\n<details open>\n<summary><strong>High</strong> - \ud83d\udfe0 in <code>3 files</code></summary>\n\n| File | Line | Category | Description |\n|------|------|----------|-------------|\n| `main.go` | 45 | security | SQL injection... |\n| `api.go` | 123 | bug | Missing error check... |\n\n<details>\n<summ", "created": "2025-12-24T15:35:40Z", "labels": [], "context": "fix: simplify findings display - remove hybrid table+expanders approach ## Parent Issue\nFollow-up to #61 (Collapsible presentation with incremental disclosure)\n\n## Problem\n\nPR #89 implemented a \"hybrid\" approach for displaying findings that feels clunky:\n\n**Current (Hybri"}


identifier: gh_issue_3760617850
source: github_issue
status: new
created_at: 2025-12-24 15:50:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3760617850", "title": "Operator applies remote commands and policies without local approval or verification", "url": "https://github.com/KestrelAI/Kestrel-Operator/issues/13", "user": "agarwal-tanmay-work", "user_url": "https://github.com/agarwal-tanmay-work", "repo": "Kestrel-Operator", "body_preview": "## Description\n\nHi Kestrel team,\n\nWhile reviewing the Kestrel Operator implementation, I noticed that several control-plane initiated requests are executed directly by the operator without any local approval, verification, or gating mechanism.\n\nSpecifically, the operator currently supports:\n\n- `ShellCommandRequest` \u2014 executes arbitrary shell commands received from the cloud\n- `YamlApplyRequest` \u2014 applies arbitrary Kubernetes manifests via `kubectl apply`\n- Network and authorization policies that", "created": "2025-12-24T15:48:56Z", "labels": [], "context": "Operator applies remote commands and policies without local approval or verification ## Description\n\nHi Kestrel team,\n\nWhile reviewing the Kestrel Operator implementation, I noticed that several control-plane initiated requests are executed directly by the operator without any local a"}


identifier: gh_issue_3760654234
source: github_issue
status: new
created_at: 2025-12-24 16:15:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3760654234", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/felix-test/issues/100", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "felix-test", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-24T16:13:50Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3760620733
source: github_issue
status: new
created_at: 2025-12-24 16:40:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3760620733", "title": "[Security] Shell injection vulnerability in Nix template shellHooks", "url": "https://github.com/Ja-sonYun/home-manager/issues/10", "user": "claude[bot]", "user_url": "https://github.com/apps/claude", "repo": "home-manager", "body_preview": "Multiple Nix flake templates contain a shell injection vulnerability in their shellHook code that automatically sources .env files without validation.\n\nThe following templates have shellHooks that use source .env to load environment variables:\n- templates/python-uv/flake.nix\n- templates/python310/flake.nix\n- templates/python312/flake.nix\n- templates/python313/flake.nix\n- templates/aws-node20-python310/flake.nix\n\nVULNERABILITY: The shellHook uses set -a and source .env which executes arbitrary sh", "created": "2025-12-24T15:50:59Z", "labels": [], "context": "[Security] Shell injection vulnerability in Nix template shellHooks Multiple Nix flake templates contain a shell injection vulnerability in their shellHook code that automatically sources .env files without validation.\n\nThe following templates have shellHooks that use"}


identifier: gh_issue_3760695947
source: github_issue
status: new
created_at: 2025-12-24 16:53:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3760695947", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/YaswanthCH-QA/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @YaswanthCH-QA! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each ste", "created": "2025-12-24T16:42:54Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @YaswanthCH-QA! Welcome"}


identifier: gh_issue_3759493363
source: github_issue
status: new
created_at: 2025-12-24 17:18:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3759493363", "title": "TCP socket leak when healthcheck enabled with 204 response code", "url": "https://github.com/fosrl/newt/issues/220", "user": "mprokopiev", "user_url": "https://github.com/mprokopiev", "repo": "newt", "body_preview": "### Describe the Bug\n\nI've been using a latest newt (problem also happened in 1.7.0 - upgraded for this issue purpose) and observed that among all resources with healthchecks configured, newt has a tcp socket leak for a single resource, which responds with 204 (which is configured as successful response code). This problem eventually caused the error when connecting to the resource either for healthchecks or any other valid communication:\n```\nhealth check failed: Get \"http://172.19.7.10:8008/hea", "created": "2025-12-24T07:32:39Z", "labels": [], "context": "TCP socket leak when healthcheck enabled with 204 response code ### Describe the Bug\n\nI've been using a latest newt (problem also happened in 1.7.0 - upgraded for this issue purpose) and observed that among all resources with healthchecks configured, newt has a tc"}


identifier: gh_issue_3760764410
source: github_issue
status: new
created_at: 2025-12-24 17:42:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3760764410", "title": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d/issues/15", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d", "body_preview": "## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-core-6.1.6.jar</b></summary>\n\n<p>Spring Core</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>", "created": "2025-12-24T17:36:57Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar ## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <"}


identifier: gh_issue_3760764385
source: github_issue
status: new
created_at: 2025-12-24 17:42:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3760764385", "title": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d/issues/14", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d", "body_preview": "## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-24T17:36:55Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3760764355
source: github_issue
status: new
created_at: 2025-12-24 17:42:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3760764355", "title": "CVE-2025-48988 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d/issues/13", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d", "body_preview": "## CVE-2025-48988 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-24T17:36:54Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48988 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48988 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3760764324
source: github_issue
status: new
created_at: 2025-12-24 17:42:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3760764324", "title": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d/issues/12", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d", "body_preview": "## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-web-6.1.6.jar</b></summary>\n\n<p>Spring Web</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDe", "created": "2025-12-24T17:36:52Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar ## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3760764298
source: github_issue
status: new
created_at: 2025-12-24 17:42:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3760764298", "title": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d/issues/11", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d", "body_preview": "## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-webmvc-6.1.6.jar</b></summary>\n\n<p>Spring Web MVC</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</", "created": "2025-12-24T17:36:51Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar ## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3760764178
source: github_issue
status: new
created_at: 2025-12-24 17:42:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3760764178", "title": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d/issues/6", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d", "body_preview": "## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-24T17:36:45Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3760764142
source: github_issue
status: new
created_at: 2025-12-24 17:42:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3760764142", "title": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d/issues/5", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d", "body_preview": "## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependen", "created": "2025-12-24T17:36:43Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3760760261
source: github_issue
status: new
created_at: 2025-12-24 17:42:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3760760261", "title": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-cfaa37fa-3418-4079-b452-8e9b011bcc44/issues/17", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-cfaa37fa-3418-4079-b452-8e9b011bcc44", "body_preview": "## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-web-6.1.6.jar</b></summary>\n\n<p>Spring Web</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDe", "created": "2025-12-24T17:33:09Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar ## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3760766183
source: github_issue
status: new
created_at: 2025-12-24 17:55:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3760766183", "title": "Add supply chain security measures", "url": "https://github.com/danwiding/linkedin-to-gcontact/issues/13", "user": "danwiding", "user_url": "https://github.com/danwiding", "repo": "linkedin-to-gcontact", "body_preview": "Scope: Implement security practices to protect against supply chain attacks.\n\nAcceptance:\n- Signed commits required on main branch\n- Dependabot scans dependencies weekly\n- SBOM generated and tracked\n- Releases are signed with GPG\n\nWhy:\n- Prevent unauthorized code commits\n- Detect vulnerable dependencies early\n- Maintain transparency of project dependencies\n\nImplementation:\n1. Enable signed commit verification in GitHub\n2. Configure Dependabot for npm security scanning\n3. Generate SBOM with cyclo", "created": "2025-12-24T17:38:24Z", "labels": [], "context": "Add supply chain security measures Scope: Implement security practices to protect against supply chain attacks.\n\nAcceptance:\n- Signed commits required on main branch\n- Dependabot scans dependencies weekly\n- SBOM generated and tracked\n-"}


identifier: gh_issue_3760825744
source: github_issue
status: new
created_at: 2025-12-24 18:32:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3760825744", "title": "bootstrap-3.1.1.min.js: 6 vulnerabilities (highest severity is: 6.4)", "url": "https://github.com/kirilurdemocorp-mend/WebGoat/issues/17", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "WebGoat", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>bootstrap-3.1.1.min.js</b></summary>\n\n<p>The most popular front-end framework for developing responsive, mobile first projects on the web.</p>\n<p>Library home page: <a href=\"https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.1.1/js/bootstrap.min.js\">https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.1.1/js/bootstrap.min.js</a></p", "created": "2025-12-24T18:31:22Z", "labels": ["Mend: dependency security vulnerability"], "context": "bootstrap-3.1.1.min.js: 6 vulnerabilities (highest severity is: 6.4) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>bootstrap-3.1.1.min.js</b></summary>\n\n<p>The mo"}


identifier: gh_issue_3760825596
source: github_issue
status: new
created_at: 2025-12-24 18:32:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3760825596", "title": "jose4j-0.9.3.jar: 2 vulnerabilities (highest severity is: 7.5) reachable", "url": "https://github.com/kirilurdemocorp-mend/WebGoat/issues/11", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "WebGoat", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jose4j-0.9.3.jar</b></summary>\n\n<p>The jose.4.j library is a robust and easy to use open source implementation of JSON Web Token (JWT) and the JOSE specification suite (JWS, JWE, and JWK).\n     It is written in Java and relies solely on the JCA APIs for cryptography.\n     Please see https://bitbucket.org/b_c/jose4j/wiki/Home for more info, examp", "created": "2025-12-24T18:31:13Z", "labels": ["Mend: dependency security vulnerability"], "context": "jose4j-0.9.3.jar: 2 vulnerabilities (highest severity is: 7.5) reachable <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jose4j-0.9.3.jar</b></summary>\n\n<p>The jose.4.j"}


identifier: gh_issue_3760825565
source: github_issue
status: new
created_at: 2025-12-24 18:32:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3760825565", "title": "xstream-1.4.5.jar: 1 vulnerabilities (highest severity is: 9.8) reachable", "url": "https://github.com/kirilurdemocorp-mend/WebGoat/issues/10", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "WebGoat", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>xstream-1.4.5.jar</b></summary>\n\n<p>XStream is a serialization library from Java objects to XML and back.</p>\n<p>Library home page: <a href=\"http://xstream.codehaus.org\">http://xstream.codehaus.org</a></p>\n<p>Path to dependency file: /pom.xml</p>\n<p>Path to vulnerable library: /home/wss-scanner/.m2/repository/com/thoughtworks/xstream/xstream/1.4", "created": "2025-12-24T18:31:11Z", "labels": ["Mend: dependency security vulnerability"], "context": "xstream-1.4.5.jar: 1 vulnerabilities (highest severity is: 9.8) reachable <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>xstream-1.4.5.jar</b></summary>\n\n<p>XStream is "}


identifier: gh_issue_3760821028
source: github_issue
status: new
created_at: 2025-12-24 18:32:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3760821028", "title": "unable to install fusion hat module on fresh PI 4B+", "url": "https://github.com/sunfounder/fusion-hat/issues/9", "user": "jayjar291", "user_url": "https://github.com/jayjar291", "repo": "fusion-hat", "body_preview": "**output of the install command**\n\n```\npi@rover:~ $ curl -sSL https://raw.githubusercontent.com/sunfounder/sunfounder-installer-scripts/main/install-fusion-hat.sh | sudo bash\nInstall Fusion Hat Python Library\n\nInstall dependencies\n[\u2713] Update apt\n[\u2713] Install apt dependencies\nInstall fusion-hat library\n[\u2713] Remove existing fusion-hat library\n[\u2713] Clone fusion-hat library\n[\u2713] Change ownership of fusion-hat library to pi\nInstall fusion-hat driver\n[\u2717] Compile driver\n[\u2717] Install driver\n[\u2717] Clean driver\n", "created": "2025-12-24T18:26:50Z", "labels": [], "context": "unable to install fusion hat module on fresh PI 4B+ **output of the install command**\n\n```\npi@rover:~ $ curl -sSL https://raw.githubusercontent.com/sunfounder/sunfounder-installer-scripts/main/install-fusion-hat.sh | sudo bash\nInstall Fusion Hat Python"}


identifier: gh_issue_3760814821
source: github_issue
status: new
created_at: 2025-12-24 18:32:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3760814821", "title": "chromadb-1.4.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl: 5 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/Emmanuel-Evenzur/Owasp-AI/issues/41", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "Owasp-AI", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>chromadb-1.4.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</b></summary>\n\n<p></p>\n<p>Path to dependency file: /initiatives/agent_security_initiative/samples/frameworks/custom_code/ai_recruiter/requirements.txt</p>\n<p>Path to vulnerable library: /tmp/containerbase/cache/.cache/pypoetry/virtualenvs/multi-agent-sjhqZZ4p-py3.13/lib/pyth", "created": "2025-12-24T18:21:01Z", "labels": ["Mend: dependency security vulnerability"], "context": "chromadb-1.4.0-cp39-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl: 5 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>chromadb-1.4.0-cp39-abi3-manylinux_2_17_x86_64."}


identifier: gh_issue_3760809250
source: github_issue
status: new
created_at: 2025-12-24 18:32:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3760809250", "title": "CVE-2025-14920 (High) detected in transformers-4.57.3-py3-none-any.whl", "url": "https://github.com/justunsix/automatetheboringstuff-py-tests/issues/160", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "automatetheboringstuff-py-tests", "body_preview": "## CVE-2025-14920 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>transformers-4.57.3-py3-none-any.whl</b></summary>\n\n<p>State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/6a/6b/2f416568b3c4c91c96e5a365d164f8a4a4a88030aa8ab4644181fdadce97/transformers-4.57.3-py3-none-any.whl", "created": "2025-12-24T18:15:59Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-14920 (High) detected in transformers-4.57.3-py3-none-any.whl ## CVE-2025-14920 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3760831977
source: github_issue
status: new
created_at: 2025-12-24 18:57:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3760831977", "title": "CVE-2021-43466 (Critical) detected in thymeleaf-spring5-3.0.11.RELEASE.jar", "url": "https://github.com/rsoreq/WebGoat8/issues/183", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "WebGoat8", "body_preview": "## CVE-2021-43466 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>thymeleaf-spring5-3.0.11.RELEASE.jar</b></summary>\n\n<p>Modern server-side Java template engine for both web and standalone environments</p>\n<p>Library home page: <a href=\"http://www.thymeleaf.org\">http://www.thymeleaf.org</a></p>\n<p>Path to dependency file: /webgoat-lessons/sql-injection/pom.xm", "created": "2025-12-24T18:36:00Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-43466 (Critical) detected in thymeleaf-spring5-3.0.11.RELEASE.jar ## CVE-2021-43466 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3760829867
source: github_issue
status: new
created_at: 2025-12-24 18:57:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3760829867", "title": "Security Health Check - GOOD (85/100) - 2025-12-24", "url": "https://github.com/Sami9889/Sami.dev-website/issues/252", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/24/2025, 6:33:59 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 9\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Securi", "created": "2025-12-24T18:34:04Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-24 # Security Health Check Report\n\n**Generated:** 12/24/2025, 6:33:59 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Inc"}


identifier: gh_issue_3760778248
source: github_issue
status: new
created_at: 2025-12-24 18:57:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3760778248", "title": "[Audit] Comprehensive Full-Stack Architectural Review", "url": "https://github.com/arii/hrm-workspace/issues/18", "user": "arii", "user_url": "https://github.com/arii", "repo": "hrm-workspace", "body_preview": "# [Audit] Comprehensive Full-Stack Architectural Review\n\n**Status:** Ready for Actionable Implementation\n\n## \ud83c\udfaf Summary of Critical Findings\n\nThe `hrm` application exhibits **three critical architectural vulnerabilities** that compromise security and scalability:\n\n1.  **Race Condition in State Synchronization:** The \"Tunneling\" mechanism between NextAuth and the backend service (`server.ts`) relies on arbitrary `setTimeout` delays (1000ms + 1500ms) to synchronize token updates. This is non-determ", "created": "2025-12-24T17:49:03Z", "labels": [], "context": "[Audit] Comprehensive Full-Stack Architectural Review # [Audit] Comprehensive Full-Stack Architectural Review\n\n**Status:** Ready for Actionable Implementation\n\n## \ud83c\udfaf Summary of Critical Findings\n\nThe `hrm` application exhibits **three critical architectur"}


identifier: gh_issue_3760764025
source: github_issue
status: new
created_at: 2025-12-24 18:57:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3760764025", "title": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d/issues/1", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-84bb42fd-9df6-4a09-b4e1-b256de25ba9d", "body_preview": "## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDepend", "created": "2025-12-24T17:36:37Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3760825765
source: github_issue
status: new
created_at: 2025-12-24 18:57:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3760825765", "title": "jquery-1.10.2.min.js: 4 vulnerabilities (highest severity is: 6.9)", "url": "https://github.com/kirilurdemocorp-mend/WebGoat/issues/18", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "WebGoat", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jquery-1.10.2.min.js</b></summary>\n\n<p>JavaScript library for DOM operations</p>\n<p>Library home page: <a href=\"https://cdnjs.cloudflare.com/ajax/libs/jquery/1.10.2/jquery.min.js\">https://cdnjs.cloudflare.com/ajax/libs/jquery/1.10.2/jquery.min.js</a></p>\n<p>Path to vulnerable library: /src/main/resources/webgoat/static/js/jquery/jquery-1.10.2.mi", "created": "2025-12-24T18:31:23Z", "labels": ["Mend: dependency security vulnerability"], "context": "jquery-1.10.2.min.js: 4 vulnerabilities (highest severity is: 6.9) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jquery-1.10.2.min.js</b></summary>\n\n<p>JavaScri"}


identifier: gh_issue_3760825724
source: github_issue
status: new
created_at: 2025-12-24 18:57:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3760825724", "title": "jquery-3.4.1-1.9.2.min.js: 2 vulnerabilities (highest severity is: 6.9)", "url": "https://github.com/kirilurdemocorp-mend/WebGoat/issues/16", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "WebGoat", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jquery-3.4.1-1.9.2.min.js</b></summary>\n\n<p>An open source front-end implementation that help you quickly construct modern multi-screen applications</p>\n<p>Library home page: <a href=\"https://cdnjs.cloudflare.com/ajax/libs/zui/1.9.2/lib/jquery/jquery-3.4.1.min.js\">https://cdnjs.cloudflare.com/ajax/libs/zui/1.9.2/lib/jquery/jquery-3.4.1.min.js</a", "created": "2025-12-24T18:31:20Z", "labels": ["Mend: dependency security vulnerability"], "context": "jquery-3.4.1-1.9.2.min.js: 2 vulnerabilities (highest severity is: 6.9) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jquery-3.4.1-1.9.2.min.js</b></summary>\n\n<p>An "}


identifier: gh_issue_3760825703
source: github_issue
status: new
created_at: 2025-12-24 18:57:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3760825703", "title": "jquery-ui-1.12.1.min.js: 4 vulnerabilities (highest severity is: 6.5)", "url": "https://github.com/kirilurdemocorp-mend/WebGoat/issues/15", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "WebGoat", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jquery-ui-1.12.1.min.js</b></summary>\n\n<p>A curated set of user interface interactions, effects, widgets, and themes built on top of the jQuery JavaScript Library.</p>\n<p>Library home page: <a href=\"https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js\">https://cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js</a>", "created": "2025-12-24T18:31:19Z", "labels": ["Mend: dependency security vulnerability"], "context": "jquery-ui-1.12.1.min.js: 4 vulnerabilities (highest severity is: 6.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jquery-ui-1.12.1.min.js</b></summary>\n\n<p>A cur"}


identifier: gh_issue_3760820849
source: github_issue
status: new
created_at: 2025-12-24 19:44:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3760820849", "title": "Dependency Dashboard", "url": "https://github.com/Unstructured-IO/unstructured/issues/4138", "user": "utic-renovate[bot]", "user_url": "https://github.com/apps/utic-renovate", "repo": "unstructured", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Rate-Limited\n\nThe following updates are currently rate-limited. To force their creation now, click on a checkbox below.\n\n - [ ] <!-- unlimit-branch=renovate/major-docker-security -->fix(deps): Update Docker security updates (major) (`docker.elastic.co/elasticsearch/elasticsearch`, `opensearchproject/opensearch`)\n\n## Open\n\nThe f", "created": "2025-12-24T18:26:40Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Rate-Limited\n\nThe following u"}


identifier: gh_issue_3760881939
source: github_issue
status: new
created_at: 2025-12-24 20:09:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3760881939", "title": "Vulnerability Severities Not Matching Tenable Plugins Page Severity", "url": "https://github.com/tenable/integration-jira-cloud/issues/328", "user": "cc-vy", "user_url": "https://github.com/cc-vy", "repo": "integration-jira-cloud", "body_preview": "I am trying to understand the discrepency between the severity shown in Teable Plugins and what i see in tickets. \n\nFor example, I have a couple of findings that are NOT recast.  They are listed in the Tenable Workbench as \"Medium\".  The Tenable plugin page also lists it as Medium.  But the ticket shows it as LOW (which confused me because i had set the config to pull Medium to Criticals).  The FINDING SEVERITY is correctly set to Medium for both the task and the sub task. \n\nI think I may know w", "created": "2025-12-24T19:27:28Z", "labels": [], "context": "Vulnerability Severities Not Matching Tenable Plugins Page Severity I am trying to understand the discrepency between the severity shown in Teable Plugins and what i see in tickets. \n\nFor example, I have a couple of findings that are NOT recast.  They are listed in th"}


identifier: gh_issue_3760970735
source: github_issue
status: new
created_at: 2025-12-24 20:46:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3760970735", "title": "Dependency Audit", "url": "https://github.com/bilal-bhatti/broker/issues/69", "user": "00felix-app[bot]", "user_url": "https://github.com/apps/00felix-app", "repo": "broker", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-24T20:32:07Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3760965553
source: github_issue
status: new
created_at: 2025-12-24 20:46:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3760965553", "title": "[BUG]Dependency upgrades for DTaaS CLI", "url": "https://github.com/INTO-CPS-Association/DTaaS/issues/1419", "user": "prasadtalasila", "user_url": "https://github.com/prasadtalasila", "repo": "DTaaS", "body_preview": "## Describe the bug\n\nThere are security warnings for the [DTaaS CLI](https://github.com/INTO-CPS-Association/DTaaS/tree/feature/distributed-demo/cli) code\n\n## To Reproduce\n\nSee this screenshot from security warnings page\n\n<img width=\"1331\" height=\"482\" alt=\"Image\" src=\"https://github.com/user-attachments/assets/fd65255f-37e8-4871-851c-b9b053c40826\" />\n\n## Expected behavior\n\nThe security warnings are taken care of.\nThis can be done through upgrade of all pip packages in [pyproject.toml](https://g", "created": "2025-12-24T20:28:55Z", "labels": ["bug", "security"], "context": "[BUG]Dependency upgrades for DTaaS CLI ## Describe the bug\n\nThere are security warnings for the [DTaaS CLI](https://github.com/INTO-CPS-Association/DTaaS/tree/feature/distributed-demo/cli) code\n\n## To Reproduce\n\nSee this screenshot from se"}


identifier: gh_issue_3760931044
source: github_issue
status: new
created_at: 2025-12-24 20:46:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3760931044", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/felix-test/issues/101", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "felix-test", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-24T20:02:45Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3760989892
source: github_issue
status: new
created_at: 2025-12-24 20:57:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3760989892", "title": "M0: Configure dependency vulnerability scanning", "url": "https://github.com/xmljim/retirement-simulator/issues/98", "user": "xmljim", "user_url": "https://github.com/xmljim", "repo": "retirement-simulator", "body_preview": "## Description\nSet up automated scanning for known vulnerabilities in project dependencies.\n\n## Acceptance Criteria\n- [ ] Enable GitHub Dependabot for dependency updates\n- [ ] Configure dependabot.yml for Maven ecosystem\n- [ ] Set update frequency (weekly recommended)\n- [ ] Add OWASP Dependency-Check Maven plugin\n- [ ] Configure vulnerability severity threshold for build failure (CVSS >= 7)\n- [ ] Add dependency check to CI pipeline\n- [ ] Configure suppression file for false positives\n- [ ] Enabl", "created": "2025-12-24T20:51:01Z", "labels": ["points:3", "architecture"], "context": "M0: Configure dependency vulnerability scanning ## Description\nSet up automated scanning for known vulnerabilities in project dependencies.\n\n## Acceptance Criteria\n- [ ] Enable GitHub Dependabot for dependency updates\n- [ ] Configure dependabot.yml"}


identifier: gh_issue_3760853014
source: github_issue
status: new
created_at: 2025-12-24 20:57:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3760853014", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/brian-berry-cla/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @brian-berry-cla! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebr", "created": "2025-12-24T18:57:26Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @brian-berry-cla! Welcome to your Skills e"}


identifier: gh_issue_3761015035
source: github_issue
status: new
created_at: 2025-12-24 21:44:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3761015035", "title": "Upgrade Next.js to patch CVE-2025-66478 vulnerability", "url": "https://github.com/1639jacksprat/agentstack/issues/48", "user": "1639jacksprat", "user_url": "https://github.com/1639jacksprat", "repo": "agentstack", "body_preview": "**Is your feature request related to a problem? Please describe.**\nOur project uses Next.js with the App Router and React Server Components (RSC), which are affected by the recently disclosed critical vulnerability [CVE-2025-66478](https://nextjs.org/blog/CVE-2025-66478).\n\nThere is no configuration option to disable the vulnerable code path. We need to ensure our application is running on a patched version of Next.js.\n\n**Describe the solution you'd like**\nUpgrade our application to a patched ver", "created": "2025-12-24T21:14:02Z", "labels": ["ui"], "context": "Upgrade Next.js to patch CVE-2025-66478 vulnerability **Is your feature request related to a problem? Please describe.**\nOur project uses Next.js with the App Router and React Server Components (RSC), which are affected by the recently disclosed critical"}


identifier: gh_issue_3760983380
source: github_issue
status: new
created_at: 2025-12-24 21:56:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3760983380", "title": "[TASK] Security audit - initial codebase", "url": "https://github.com/vindicatenyc/vindicate-app/issues/7", "user": "vindicatenyc", "user_url": "https://github.com/vindicatenyc", "repo": "vindicate-app", "body_preview": "## Summary\nRun security scans on initial codebase and fix any issues.\n\n## Acceptance Criteria\n- [ ] Gitleaks scan passes\n- [ ] Bandit scan passes (Python)\n- [ ] npm audit passes\n- [ ] No high/critical vulnerabilities\n\n## Technical Notes\n- Document any false positives\n- Create security baseline\n\n## Agent Assignment\nSuggested: `security`", "created": "2025-12-24T20:43:15Z", "labels": ["phase-1", "security", "ready", "task"], "context": "[TASK] Security audit - initial codebase ## Summary\nRun security scans on initial codebase and fix any issues.\n\n## Acceptance Criteria\n- [ ] Gitleaks scan passes\n- [ ] Bandit scan passes (Python)\n- [ ] npm audit passes\n- [ ] No high/critical"}


identifier: gh_issue_3761062914
source: github_issue
status: new
created_at: 2025-12-24 21:56:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3761062914", "title": "Grant Application for Intelligrip - Ride to Earn Zcash - Prioritizing Cycling incentives and Bike Data Privacy Control", "url": "https://github.com/ZcashCommunityGrants/zcashcommunitygrants/issues/165", "user": "intelligrip", "user_url": "https://github.com/intelligrip", "repo": "zcashcommunitygrants", "body_preview": "### Terms and Conditions\n\n- [x] I agree to the [Grant Agreement](https://9ba4718c-5c73-47c3-a024-4fc4e5278803.usrfiles.com/ugd/9ba471_f81ef4e4b5f040038350270590eb2e42.pdf) terms if funded\n- [x] I agree to [Provide KYC information](https://9ba4718c-5c73-47c3-a024-4fc4e5278803.usrfiles.com/ugd/9ba471_7d9e73d16b584a61bae92282b208efc4.pdf) if funded above $50,000 USD\n- [x] I agree to disclose conflicts of interest\n- [x] I agree to adhere to the [Code of Conduct](https://forum.zcashcommunity.com/t/zc", "created": "2025-12-24T21:43:56Z", "labels": [], "context": "Grant Application for Intelligrip - Ride to Earn Zcash - Prioritizing Cycling incentives and Bike Data Privacy Control ### Terms and Conditions\n\n- [x] I agree to the [Grant Agreement](https://9ba4718c-5c73-47c3-a024-4fc4e5278803.usrfiles.com/ugd/9ba471_f81ef4e4b5f040038350270590eb2e42.pdf) terms if funded\n- [x] I agre"}


identifier: gh_issue_3761061896
source: github_issue
status: new
created_at: 2025-12-24 21:56:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3761061896", "title": "Exercise: Introduction to Secret Scanning", "url": "https://github.com/cagingulsen/skills-introduction-to-secret-scanning/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-secret-scanning", "body_preview": "## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @cagingulsen! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll learn how to identify and protect sensitive information in your repositories. \ud83d\udd0d Let&#39;s work together to keep your code secure! \ud83d\udee1\ufe0f\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the ", "created": "2025-12-24T21:42:58Z", "labels": [], "context": "Exercise: Introduction to Secret Scanning ## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @cagingulsen! Welcome to your Ski"}


identifier: gh_issue_3761041136
source: github_issue
status: new
created_at: 2025-12-24 21:56:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3761041136", "title": "Supply chain integrity of agents and tools", "url": "https://github.com/1639jacksprat/agentstack/issues/394", "user": "1639jacksprat", "user_url": "https://github.com/1639jacksprat", "repo": "agentstack", "body_preview": "## Description\n\nAs part of our ongoing efforts to ensure the security and integrity of our systems, we need to address the supply chain integrity of agents and tools. This will provide our users with a higher level of confidence in the security and reliability of our platform.\n\n## Impact on users\n\n- Ensures that all agents and tools are trustworthy and free from malware or other malicious code\n- Reduces the risk of unauthorized access or data breaches\n- Enhances overall system stability and perf", "created": "2025-12-24T21:27:20Z", "labels": [], "context": "Supply chain integrity of agents and tools ## Description\n\nAs part of our ongoing efforts to ensure the security and integrity of our systems, we need to address the supply chain integrity of agents and tools. This will provide our users with "}


identifier: gh_issue_3761086584
source: github_issue
status: new
created_at: 2025-12-24 22:08:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3761086584", "title": "fake.4.9.3.nupkg: 3 vulnerabilities (highest severity is: 9.8) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Lisa-Cantu_1224_220738_gh_gw2/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Lisa-Cantu_1224_220738_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>fake.4.9.3.nupkg</strong></summary>\n\nFAKE - F# Make - Get rid of the noise in your build scripts.\n\n**Library home page:** [ https://api.nuget.org/packages/fake.4.9.3.nupkg ](https://api.nuget.org/packages/fake.4.9.3.nupkg)\n\n\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| ", "created": "2025-12-24T22:08:50Z", "labels": [], "context": "fake.4.9.3.nupkg: 3 vulnerabilities (highest severity is: 9.8) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>fake.4.9.3.nupkg</strong></summary>\n\nFAKE - F# Make - Get rid of the noise in your build scripts.\n\n**Library home page:** [ https://api.nuget.org/pa"}


identifier: gh_issue_3761135684
source: github_issue
status: new
created_at: 2025-12-24 23:22:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3761135684", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Justin-Perkins_1224_230602_gh_gw0/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Justin-Perkins_1224_230602_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -----", "created": "2025-12-24T23:07:52Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3761135693
source: github_issue
status: new
created_at: 2025-12-24 23:22:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3761135693", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Justin-Perkins_1224_230602_gh_gw0/issues/6", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Justin-Perkins_1224_230602_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-24T23:07:52Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3761131227
source: github_issue
status: new
created_at: 2025-12-24 23:22:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3761131227", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Kathleen-Anderson_1224_230037_gh_gw1/issues/2", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Kathleen-Anderson_1224_230037_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.", "created": "2025-12-24T23:02:05Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3761131220
source: github_issue
status: new
created_at: 2025-12-24 23:22:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3761131220", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Kathleen-Anderson_1224_230037_gh_gw1/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Kathleen-Anderson_1224_230037_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.io/v", "created": "2025-12-24T23:02:05Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3761135380
source: github_issue
status: new
created_at: 2025-12-24 23:34:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3761135380", "title": "Vulnerable version of next.js/react-dom", "url": "https://github.com/seerr-team/seerr/issues/2250", "user": "verbumfeit", "user_url": "https://github.com/verbumfeit", "repo": "seerr", "body_preview": "### Description\n\nAbout 3 weeks ago next.js/react disclosed a major CVE: https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components#update-instructions\n\nWhile the package version in package.json (`^14.2.25`) allows an upgrade of the `next` package to a fixed version (`14.2.35`), maybe a new release is in order?\n\nThank you and happy holidays (and sorry for bringing this up on christmas)!\n\n### Version\n\n2.7.3\n\n### Steps to Reproduce\n\n1. Run a Jellyseerr instance ins", "created": "2025-12-24T23:07:19Z", "labels": ["bug", "awaiting triage"], "context": "Vulnerable version of next.js/react-dom ### Description\n\nAbout 3 weeks ago next.js/react disclosed a major CVE: https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components#update-instructions\n\nWhile the pack"}


identifier: gh_issue_3761131453
source: github_issue
status: new
created_at: 2025-12-24 23:34:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3761131453", "title": "aws-sdk-2.0.48.gem: 1 vulnerabilities (highest severity is: 9.8) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Kathleen-Anderson_1224_230037_gh_gw1/issues/3", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Kathleen-Anderson_1224_230037_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>aws-sdk-2.0.48.gem</strong></summary>\n\nThe official AWS SDK for Ruby. Provides both resource oriented interfaces and API clients for AWS services.\n\n\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/aws-sdk-2.0.48.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------", "created": "2025-12-24T23:02:27Z", "labels": [], "context": "aws-sdk-2.0.48.gem: 1 vulnerabilities (highest severity is: 9.8) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>aws-sdk-2.0.48.gem</strong></summary>\n\nThe official AWS SDK for Ruby. Provides both resource oriented interfaces and API clients for AWS services.\n\n"}


identifier: gh_issue_3761143727
source: github_issue
status: new
created_at: 2025-12-24 23:47:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3761143727", "title": "[CI] HIGH: All third-party GitHub Actions must be pinned to SHA for security", "url": "https://github.com/JacobPEvans/ai-assistant-instructions/issues/277", "user": "JacobPEvans", "user_url": "https://github.com/JacobPEvans", "repo": "ai-assistant-instructions", "body_preview": "## Security Issue: Unpinned GitHub Actions\n\nGitHub Actions should be pinned to specific commit SHAs rather than version tags to prevent supply chain attacks.\n\n### Current State\nAll workflows use version tags (e.g., @v6, @v8, @v3) which allow action authors to modify code for that version after release.\n\n### Affected Workflows & Actions\n\n**In multiple workflows:**\n- `actions/checkout@v6` \u2192 Should use commit SHA\n- `actions/setup-node@v6` \u2192 Should use commit SHA\n- `streetsidesoftware/cspell-action@", "created": "2025-12-24T23:20:45Z", "labels": ["ai-created", "type:ci"], "context": "[CI] HIGH: All third-party GitHub Actions must be pinned to SHA for security ## Security Issue: Unpinned GitHub Actions\n\nGitHub Actions should be pinned to specific commit SHAs rather than version tags to prevent supply chain attacks.\n\n### Current State\nAll workflows use versi"}


identifier: gh_issue_3761151667
source: github_issue
status: new
created_at: 2025-12-24 23:59:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3761151667", "title": "Dependency Audit", "url": "https://github.com/ijassani/qpid-broker-j3/issues/6", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "qpid-broker-j3", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-24T23:34:32Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3761149839
source: github_issue
status: new
created_at: 2025-12-24 23:59:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3761149839", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/test-reactor/issues/120", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "test-reactor", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-24T23:31:10Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3761145540
source: github_issue
status: new
created_at: 2025-12-24 23:59:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3761145540", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/felix-test/issues/102", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "felix-test", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-24T23:23:24Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3761158921
source: github_issue
status: new
created_at: 2025-12-25 00:12:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3761158921", "title": "[FEATURE] Issue Priority and Severity Prediction", "url": "https://github.com/VibeTensor/IssueFlow/issues/107", "user": "ascender1729", "user_url": "https://github.com/ascender1729", "repo": "IssueFlow", "body_preview": "## Summary\n\nImplement AI-powered prediction of issue priority and severity based on content analysis and historical patterns.\n\n## Problem\n\nNot all issues are equally urgent. Predicting priority helps users focus on high-impact issues first.\n\n## Research Background\n\n- [Multi-task Learning (PRIMA)](https://dl.acm.org/doi/fullHtml/10.1145/3544902.3546257) achieves 32-55% higher precision\n- [RNN-LSTM](https://www.e-informatyka.pl/index.php/einformatica/volumes/volume-2021/issue-1/article-2/) achieve", "created": "2025-12-24T23:46:45Z", "labels": ["enhancement", "ai-integration"], "context": "[FEATURE] Issue Priority and Severity Prediction ## Summary\n\nImplement AI-powered prediction of issue priority and severity based on content analysis and historical patterns.\n\n## Problem\n\nNot all issues are equally urgent. Predicting priority helps "}


identifier: gh_issue_3761171748
source: github_issue
status: new
created_at: 2025-12-25 00:12:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3761171748", "title": "security: Unstable GitHub Actions references using @main branch", "url": "https://github.com/JacobPEvans/nix/issues/272", "user": "JacobPEvans", "user_url": "https://github.com/JacobPEvans", "repo": "nix", "body_preview": "## Issue\nTwo GitHub Actions workflows use unstable `@main` branch references instead of pinned versions, creating non-deterministic behavior and security risks.\n\n## Severity\n**MEDIUM** - Unstable action references can introduce breaking changes without warning and increase supply chain risk.\n\n## Affected Files\n\n### 1. `.github/workflows/_nix-validate.yml:20`\n```yaml\nuses: DeterminateSystems/flake-checker-action@main\n```\n\n### 2. `.github/workflows/_nix-build.yml:32`\n```yaml\nuses: DeterminateSyste", "created": "2025-12-25T00:08:38Z", "labels": ["ai-created", "size:s", "priority:medium"], "context": "security: Unstable GitHub Actions references using @main branch ## Issue\nTwo GitHub Actions workflows use unstable `@main` branch references instead of pinned versions, creating non-deterministic behavior and security risks.\n\n## Severity\n**MEDIUM** - Unstable acti"}


identifier: gh_issue_3761131467
source: github_issue
status: new
created_at: 2025-12-25 00:48:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3761131467", "title": "json-1.8.6.gem: 1 vulnerabilities (highest severity is: 7.5) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Kathleen-Anderson_1224_230037_gh_gw1/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Kathleen-Anderson_1224_230037_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>json-1.8.6.gem</strong></summary>\n\nThis is a JSON implementation as a Ruby extension in C.\n\n**Library home page:** [ https://rubygems.org/gems/json-1.8.6.gem ](https://rubygems.org/gems/json-1.8.6.gem)\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/json-1.8.6.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remed", "created": "2025-12-24T23:02:28Z", "labels": [], "context": "json-1.8.6.gem: 1 vulnerabilities (highest severity is: 7.5) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>json-1.8.6.gem</strong></summary>\n\nThis is a JSON implementation as a Ruby extension in C.\n\n**Library home page:** [ https://rubygems.org/gems/json-"}


identifier: gh_issue_3761131457
source: github_issue
status: new
created_at: 2025-12-25 00:48:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3761131457", "title": "rdoc-3.12.2.gem: 2 vulnerabilities (highest severity is: 7.5) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Kathleen-Anderson_1224_230037_gh_gw1/issues/4", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Kathleen-Anderson_1224_230037_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>rdoc-3.12.2.gem</strong></summary>\n\nRDoc produces HTML and command-line documentation for Ruby projects.  RDoc\nincludes the +rdoc+ and +ri+ tools for generating and displaying online\ndocumentation.\n\nSee RDoc for a description of RDoc's markup and basic use.\n\n\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/rdoc-3.12.2.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | ", "created": "2025-12-24T23:02:27Z", "labels": [], "context": "rdoc-3.12.2.gem: 2 vulnerabilities (highest severity is: 7.5) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>rdoc-3.12.2.gem</strong></summary>\n\nRDoc produces HTML and command-line documentation for Ruby projects.  RDoc\nincludes the +rdoc+ and +ri+ tools fo"}


identifier: gh_issue_3761102201
source: github_issue
status: new
created_at: 2025-12-25 01:01:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3761102201", "title": "Fix GHSA-VW6W-8Q8M-R52P / CVE-2025-68585", "url": "https://github.com/wp-document-revisions/wp-document-revisions/issues/428", "user": "benbalter", "user_url": "https://github.com/benbalter", "repo": "wp-document-revisions", "body_preview": "https://github.com/advisories/GHSA-VW6W-8Q8M-R52P\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-68585\nhttps://euvd.enisa.europa.eu/vulnerability/EUVD-2025-205250\n\nCVSS Base Score: 8.8 (v3.1)[(CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n", "created": "2025-12-24T22:23:11Z", "labels": [], "context": "Fix GHSA-VW6W-8Q8M-R52P / CVE-2025-68585 https://github.com/advisories/GHSA-VW6W-8Q8M-R52P\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-68585\nhttps://euvd.enisa.europa.eu/vulnerability/EUVD-2025-205250\n\nCVSS Base Score: 8.8 (v3.1)[(CVSS:3.1/AV:"}


identifier: gh_issue_3761213724
source: github_issue
status: new
created_at: 2025-12-25 01:13:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3761213724", "title": "Dependency audit & VS Code integration check", "url": "https://github.com/Coldaine/repo-beacon/issues/2", "user": "Coldaine", "user_url": "https://github.com/Coldaine", "repo": "repo-beacon", "body_preview": "Dependency audit & VS Code integration check for repo-beacon\r\n\r\nSummary\r\n- Files inspected: `demo/package.json`, `demo/vite.config.ts`, `extension/package.json`, `extension/tsconfig.json`, `extension/src/*` (webview and extension entry).\r\n- No root `package.json` present; repository contains two packages: `demo` (Vite + React demo) and `extension` (VS Code extension TypeScript project).\r\n\r\nKey findings\r\n- demo: multiple packages show newer versions available (notable):\r\n  - `react` / `react-dom`", "created": "2025-12-25T01:11:01Z", "labels": ["dependencies"], "context": "Dependency audit & VS Code integration check Dependency audit & VS Code integration check for repo-beacon\r\n\r\nSummary\r\n- Files inspected: `demo/package.json`, `demo/vite.config.ts`, `extension/package.json`, `extension/tsconfig.json`, `extension/"}


identifier: gh_issue_3761186246
source: github_issue
status: new
created_at: 2025-12-25 01:13:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3761186246", "title": "Dashboard Consolidation - Phase 0-1-4 Only (Verification First)", "url": "https://github.com/elevateforhumanity/fix2/issues/1384", "user": "elevateforhumanity", "user_url": "https://github.com/elevateforhumanity", "repo": "fix2", "body_preview": "## Context\n\nRouter has been fixed (`app/dashboard/page.tsx`) but we need to verify reality before proceeding.\n\n**What's done:**\n- \u2705 Router routes all 6 roles correctly\n- \u2705 Redirects exist for legacy routes\n- \u2705 Build passes\n\n**What's needed:**\n- Database verification (what roles actually exist?)\n- Navigation audit (any invalid hrefs?)\n- Schema verification (what columns exist?)\n\n---\n\n## ONE-SHOT PROMPT (Copy/Paste to Gitpod)\n\nYou are a senior Next.js App Router + TypeScript + Supabase engineer wo", "created": "2025-12-25T00:32:22Z", "labels": [], "context": "Dashboard Consolidation - Phase 0-1-4 Only (Verification First) ## Context\n\nRouter has been fixed (`app/dashboard/page.tsx`) but we need to verify reality before proceeding.\n\n**What's done:**\n- \u2705 Router routes all 6 roles correctly\n- \u2705 Redirects exist for legacy r"}


identifier: gh_issue_3761246934
source: github_issue
status: new
created_at: 2025-12-25 01:38:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3761246934", "title": "[Docs]: Add SECURITY.md with vulnerability reporting policy", "url": "https://github.com/sjnims/chartjs-expert/issues/10", "user": "sjnims", "user_url": "https://github.com/sjnims", "repo": "chartjs-expert", "body_preview": "## Which documentation needs improvement?\n\nSECURITY.md (new file needed)\n\n## Specific Location\n\nRepository root or `.github/SECURITY.md`\n\n## What's unclear or missing?\n\nThis public repository is missing a `SECURITY.md` file, which is essential for:\n- Providing vulnerability reporting guidance to security researchers\n- Enabling GitHub's private vulnerability reporting feature\n- Documenting supported versions and security update process\n- Establishing response timeline expectations\n\n**From Reposit", "created": "2025-12-25T01:37:21Z", "labels": ["documentation", "component:docs", "priority:high", "security", "effort:small"], "context": "[Docs]: Add SECURITY.md with vulnerability reporting policy ## Which documentation needs improvement?\n\nSECURITY.md (new file needed)\n\n## Specific Location\n\nRepository root or `.github/SECURITY.md`\n\n## What's unclear or missing?\n\nThis public repository is missi"}


identifier: gh_issue_3761269310
source: github_issue
status: new
created_at: 2025-12-25 02:03:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3761269310", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Lisa-West_1225_020014_gh_gw0/issues/6", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Lisa-West_1225_020014_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | -----", "created": "2025-12-25T02:02:03Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3761269305
source: github_issue
status: new
created_at: 2025-12-25 02:03:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3761269305", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Lisa-West_1225_020014_gh_gw0/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Lisa-West_1225_020014_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-25T02:02:02Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3761268689
source: github_issue
status: new
created_at: 2025-12-25 02:03:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3761268689", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Jacob-Walker_1225_015847_gh_gw2/issues/2", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Jacob-Walker_1225_015847_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -----", "created": "2025-12-25T02:01:13Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3761268683
source: github_issue
status: new
created_at: 2025-12-25 02:03:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3761268683", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Jacob-Walker_1225_015847_gh_gw2/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Jacob-Walker_1225_015847_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-25T02:01:13Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3761267806
source: github_issue
status: new
created_at: 2025-12-25 02:03:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3761267806", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Haley-Shaw_1225_015839_gh_gw1/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Haley-Shaw_1225_015839_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-25T02:00:05Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3761268107
source: github_issue
status: new
created_at: 2025-12-25 02:27:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3761268107", "title": "json-1.8.6.gem: 1 vulnerabilities (highest severity is: 7.5) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Haley-Shaw_1225_015839_gh_gw1/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Haley-Shaw_1225_015839_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>json-1.8.6.gem</strong></summary>\n\nThis is a JSON implementation as a Ruby extension in C.\n\n**Library home page:** [ https://rubygems.org/gems/json-1.8.6.gem ](https://rubygems.org/gems/json-1.8.6.gem)\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/json-1.8.6.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remed", "created": "2025-12-25T02:00:26Z", "labels": [], "context": "json-1.8.6.gem: 1 vulnerabilities (highest severity is: 7.5) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>json-1.8.6.gem</strong></summary>\n\nThis is a JSON implementation as a Ruby extension in C.\n\n**Library home page:** [ https://rubygems.org/gems/json-"}


identifier: gh_issue_3761278548
source: github_issue
status: new
created_at: 2025-12-25 02:27:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3761278548", "title": "[Bug]: \"Asset not found\" error when viewing details from \"Top assets with most vulnerabilities\"", "url": "https://github.com/oasm-platform/open-asm/issues/201", "user": "l1ttps", "user_url": "https://github.com/l1ttps", "repo": "open-asm", "body_preview": "Description:\n\n### Contact Details (Optional)\n\n*No response*\n\n### What happened?\n\nWhen a user clicks on an asset listed in the \"Top assets with most vulnerabilities\" section to view its specific details, the system returns an \"asset not found\" error. It appears the link or the identifier passed to the asset detail page is incorrect or missing.\n\n### Affected Component\n\nConsole (Frontend UI)\n\n### Version\n\nLatest (Assumed)\n\n### Deployment Method\n\nDocker Compose\n\n### Browser (if applicable)\n\nChrome /", "created": "2025-12-25T02:14:16Z", "labels": ["bug"], "context": "[Bug]: \"Asset not found\" error when viewing details from \"Top assets with most vulnerabilities\" Description:\n\n### Contact Details (Optional)\n\n*No response*\n\n### What happened?\n\nWhen a user clicks on an asset listed in the \"Top assets with most vulnerabilities\" section to view its specific detail"}


identifier: gh_issue_3761298156
source: github_issue
status: new
created_at: 2025-12-25 02:39:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3761298156", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/keypress-notifications/issues/52", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "keypress-notifications", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (17)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-25T02:38:26Z", "labels": ["automated", "security", "critical"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3761298018
source: github_issue
status: new
created_at: 2025-12-25 02:39:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3761298018", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/file-insights/issues/132", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "file-insights", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (16)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-25T02:38:14Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3761297141
source: github_issue
status: new
created_at: 2025-12-25 02:39:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3761297141", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/additional-contexts-menu/issues/113", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "additional-contexts-menu", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (17)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-25T02:37:08Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3761297550
source: github_issue
status: new
created_at: 2025-12-25 02:53:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3761297550", "title": "AUTOPILOT DIRECTIVE \u2014 EXECUTION MODE (NO ANALYSIS)", "url": "https://github.com/elevateforhumanity/fix2/issues/1388", "user": "elevateforhumanity", "user_url": "https://github.com/elevateforhumanity", "repo": "fix2", "body_preview": "AUTOPILOT DIRECTIVE \u2014 EXECUTION MODE (NO ANALYSIS)\n\nYou are operating under Builder Authority.\n\nAll inventory, architecture, and crossed-dashboard documents dated 2025-12-23\nare ACCEPTED AS FINAL TRUTH.\n\nDO NOT:\n- Re-audit\n- Re-document architecture\n- Propose alternatives\n- Add new planning files\n- Ask for clarification unless code is blocked\n\nONLY EXECUTE.\n\n=====================================\nMANDATORY OBJECTIVE\n=====================================\n\nDeliver a WORKING, CONSOLIDATED, ROLE-SAFE", "created": "2025-12-25T02:37:39Z", "labels": [], "context": "AUTOPILOT DIRECTIVE \u2014 EXECUTION MODE (NO ANALYSIS) AUTOPILOT DIRECTIVE \u2014 EXECUTION MODE (NO ANALYSIS)\n\nYou are operating under Builder Authority.\n\nAll inventory, architecture, and crossed-dashboard documents dated 2025-12-23\nare ACCEPTED AS FINAL TRUT"}


identifier: gh_issue_3761249999
source: github_issue
status: new
created_at: 2025-12-25 02:53:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3761249999", "title": "[HIGH] Abandoned GitHub Action: micnncim/action-label-syncer", "url": "https://github.com/JacobPEvans/ai-assistant-instructions/issues/295", "user": "JacobPEvans", "user_url": "https://github.com/JacobPEvans", "repo": "ai-assistant-instructions", "body_preview": "## Description\n\nThe .github/workflows/label-sync.yml workflow uses micnncim/action-label-syncer@v1, which is an abandoned GitHub Action that hasn't received updates in 4+ years.\n\n## Current Status\n\n- Action: micnncim/action-label-syncer@v1\n- Last Release: May 23, 2021 (v1.3.0)\n- Latest Available: v1.3.0 (no updates for 4.5 years)\n\n## Severity: HIGH\n\nUsing an abandoned action poses security risks:\n1. No Security Updates - Will not receive security patches\n2. Compatibility Issues - May break with ", "created": "2025-12-25T01:40:50Z", "labels": ["ai-created", "type:bug", "priority:high"], "context": "[HIGH] Abandoned GitHub Action: micnncim/action-label-syncer ## Description\n\nThe .github/workflows/label-sync.yml workflow uses micnncim/action-label-syncer@v1, which is an abandoned GitHub Action that hasn't received updates in 4+ years.\n\n## Current Status\n\n- "}


identifier: gh_issue_3761317114
source: github_issue
status: new
created_at: 2025-12-25 03:04:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3761317114", "title": "Encrypt SMTP passwords in database for enhanced security", "url": "https://github.com/benjaminmue/pathary/issues/15", "user": "benjaminmue", "user_url": "https://github.com/benjaminmue", "repo": "pathary", "body_preview": "## Issue\n\nSMTP passwords are currently stored in plaintext in the database, which creates a security risk if database backups are compromised or accidentally shared.\n\n## Where Discovered\n\n**Security Audit - December 25, 2025**\n- File: `src/Service/ServerSettings.php`\n- Lines: 274-277 (setter), 110-113 (getter)\n- Database: `server_setting` table, `SMTP_PASSWORD` key\n\n## Current Implementation\n\n```php\npublic function setSmtpPassword(string $smtpPassword) : void {\n    $this->updateValue(self::SMTP_", "created": "2025-12-25T03:03:34Z", "labels": ["enhancement", "security"], "context": "Encrypt SMTP passwords in database for enhanced security ## Issue\n\nSMTP passwords are currently stored in plaintext in the database, which creates a security risk if database backups are compromised or accidentally shared.\n\n## Where Discovered\n\n**Security A"}


identifier: gh_issue_3761323817
source: github_issue
status: new
created_at: 2025-12-25 03:29:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3761323817", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/lynndb0/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @lynndb0! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019l", "created": "2025-12-25T03:12:52Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @lynndb0! Welcome to yo"}


identifier: gh_issue_3761335224
source: github_issue
status: new
created_at: 2025-12-25 03:42:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3761335224", "title": "\ud83d\udd12 Security: Fix command injection vulnerability in Docker entrypoint", "url": "https://github.com/todd2982/SuggestArr/issues/90", "user": "todd2982", "user_url": "https://github.com/todd2982", "repo": "SuggestArr", "body_preview": "## Severity\n**CRITICAL**\n\n## Description\nThe Docker entrypoint script uses eval with potentially user-controllable arguments, creating a command injection vulnerability.\n\n## Affected Files\n- docker/docker_entrypoint.sh:6\n\n## Current Code\ncd /app && exec uvicorn api_service.app:asgi_app $(eval echo \"$args\")\n\n## Recommendation\nRemove eval and pass arguments directly", "created": "2025-12-25T03:28:55Z", "labels": ["bug", "security", "critical"], "context": "\ud83d\udd12 Security: Fix command injection vulnerability in Docker entrypoint ## Severity\n**CRITICAL**\n\n## Description\nThe Docker entrypoint script uses eval with potentially user-controllable arguments, creating a command injection vulnerability.\n\n## Affected Files\n- docker/do"}


identifier: gh_issue_3761333968
source: github_issue
status: new
created_at: 2025-12-25 03:42:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3761333968", "title": "Latest 15 Papers - December 25, 2025", "url": "https://github.com/yanghlll/ArxivDaily-Haolin/issues/84", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "ArxivDaily-Haolin", "body_preview": "**Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Unified\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[AnyAD: Unified Any-Modality Anomaly Detection in Incomplete Multi-Sequence MRI](https://arxiv.org/abs/2512.21264v1)** | 2025-12-24 | 15 pages, 8 figures |\n| **[UniTacHand: Unified Spatio-Tactile Representation for Human to Robotic Hand Skill Transfer](https://arxiv.org/abs/2512.21233v1)** | 20", "created": "2025-12-25T03:27:19Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 25, 2025 **Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Unified\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |"}


identifier: gh_issue_3761320981
source: github_issue
status: new
created_at: 2025-12-25 03:42:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3761320981", "title": "Code-project Simple Membership System /SimpleMembershipSystem/validate.php SQL injection", "url": "https://github.com/d0g772/cve/issues/1", "user": "d0g772", "user_url": "https://github.com/d0g772", "repo": "cve", "body_preview": "# NAME OF AFFECTED PRODUCT(S)\n\n- Simple Membership System\n\n## Vendor Homepage\n\n- https://code-projects.org/simple-membership-system-in-php-with-source-code/\n\n# AFFECTED AND/OR FIXED VERSION(S)\n\n## submitter\n\n- dog772\n\n## Vulnerable File\n\n- /validate.php\n\n## VERSION(S)\n\n- V1.0\n\n## Software Link\n\n- https://download.code-projects.org/details/7f7213ea-fec6-44a1-95a2-5be39a5987c0\n\n# PROBLEM TYPE\n\n## Vulnerability Type\n\n- SQL injection\n\n## Root Cause\n\n- A SQL injection vulnerability was identified wit", "created": "2025-12-25T03:08:40Z", "labels": [], "context": "Code-project Simple Membership System /SimpleMembershipSystem/validate.php SQL injection # NAME OF AFFECTED PRODUCT(S)\n\n- Simple Membership System\n\n## Vendor Homepage\n\n- https://code-projects.org/simple-membership-system-in-php-with-source-code/\n\n# AFFECTED AND/OR FIXED VERSION(S)\n\n## sub"}


identifier: gh_issue_3761313073
source: github_issue
status: new
created_at: 2025-12-25 04:19:06
data:
  {"source": "github_issue", "identifier": "gh_issue_3761313073", "title": "Latest 15 Papers - December 25, 2025", "url": "https://github.com/pstAmbition/DailyArXiv_contentmoderation/issues/6", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "DailyArXiv_contentmoderation", "body_preview": "**Please check the [Github](https://github.com/pstAmbition/DailyArXiv_contentmoderation) page for a better reading experience and more papers.**\n\n## Multimodal harmful content\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[When Harmful Content Gets Camouflaged: Unveiling Perception Failure of LVLMs with CamHarmTI](https://arxiv.org/abs/2512.03087v1)** | 2025-11-29 |  |\n| **[MTikGuard System: A Transformer-Based Multimodal System for Child-Safe Content Moderation on TikTok](https", "created": "2025-12-25T02:58:04Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 25, 2025 **Please check the [Github](https://github.com/pstAmbition/DailyArXiv_contentmoderation) page for a better reading experience and more papers.**\n\n## Multimodal harmful content\n| **Title** | **Date** |"}


identifier: gh_issue_3761364198
source: github_issue
status: new
created_at: 2025-12-25 04:19:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3761364198", "title": "Security Vulnerabilities (Trivy Scan) - 25-12-25 @ 04:04", "url": "https://github.com/RazorBladeX/SH-GithubRunner/issues/52", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "SH-GithubRunner", "body_preview": "## \u26a0\ufe0f Security Vulnerabilities Detected\n\n**Scan Date:** 25-12-25 @ 04:04\n\n### Summary\n- **Total vulnerabilities found:** 298\n- **Critical:** 4\n- **High:** 49\n\n### Full Report\nThe complete vulnerability report is available as a workflow artifact.\n\n\ud83d\udce5 **[Download Full Report](https://github.com/RazorBladeX/SH-GithubRunner/actions/runs/20498640992/artifacts)**\n\n---\n*This issue is automatically generated by the Trivy security scanner.*\n", "created": "2025-12-25T04:04:48Z", "labels": ["vulnerability", "security", "automated", "security-scan"], "context": "Security Vulnerabilities (Trivy Scan) - 25-12-25 @ 04:04 ## \u26a0\ufe0f Security Vulnerabilities Detected\n\n**Scan Date:** 25-12-25 @ 04:04\n\n### Summary\n- **Total vulnerabilities found:** 298\n- **Critical:** 4\n- **High:** 49\n\n### Full Report\nThe complete vulnerabilit"}


identifier: gh_issue_3761380816
source: github_issue
status: new
created_at: 2025-12-25 04:43:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3761380816", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-25", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/405", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:167`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-production'\n   - Confidence: MEDIUM\n\n2. **blacklist** (LOW)\n   - File: `./scripts/health-check.py:8`\n   - Issue: Consider possible security implications associated with the subprocess module.\n   - Confidence: HIGH\n\n3. **subprocess_without_shell_equals_true** (LOW)\n   - File: `./scripts/health-check.p", "created": "2025-12-25T04:27:27Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-25 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:167`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-p"}


identifier: gh_issue_3761380454
source: github_issue
status: new
created_at: 2025-12-25 04:43:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3761380454", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-25", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/403", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:167`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-production'\n   - Confidence: MEDIUM\n\n2. **blacklist** (LOW)\n   - File: `./scripts/health-check.py:8`\n   - Issue: Consider possible security implications associated with the subprocess module.\n   - Confidence: HIGH\n\n3. **subprocess_without_shell_equals_true** (LOW)\n   - File: `./scripts/health-check.p", "created": "2025-12-25T04:26:57Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-25 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:167`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-p"}


identifier: gh_issue_3761379568
source: github_issue
status: new
created_at: 2025-12-25 04:43:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3761379568", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-25", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/400", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:172`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-production'\n   - Confidence: MEDIUM\n\n2. **blacklist** (LOW)\n   - File: `./scripts/health-check.py:8`\n   - Issue: Consider possible security implications associated with the subprocess module.\n   - Confidence: HIGH\n\n3. **subprocess_without_shell_equals_true** (LOW)\n   - File: `./scripts/health-check.p", "created": "2025-12-25T04:25:48Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-25 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:172`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-p"}


identifier: gh_issue_3761379411
source: github_issue
status: new
created_at: 2025-12-25 04:43:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3761379411", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-25", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/398", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:172`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-production'\n   - Confidence: MEDIUM\n\n2. **blacklist** (LOW)\n   - File: `./scripts/health-check.py:8`\n   - Issue: Consider possible security implications associated with the subprocess module.\n   - Confidence: HIGH\n\n3. **subprocess_without_shell_equals_true** (LOW)\n   - File: `./scripts/health-check.p", "created": "2025-12-25T04:25:36Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-25 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:172`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-p"}


identifier: gh_issue_3761378580
source: github_issue
status: new
created_at: 2025-12-25 04:43:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3761378580", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-25", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/392", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:172`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-production'\n   - Confidence: MEDIUM\n\n2. **blacklist** (LOW)\n   - File: `./scripts/health-check.py:8`\n   - Issue: Consider possible security implications associated with the subprocess module.\n   - Confidence: HIGH\n\n3. **subprocess_without_shell_equals_true** (LOW)\n   - File: `./scripts/health-check.p", "created": "2025-12-25T04:24:32Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-25 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (178)\n1. **hardcoded_password_string** (LOW)\n   - File: `./configs/settings.py:172`\n   - Issue: Possible hardcoded password: 'dev-key-change-in-p"}


identifier: gh_issue_3761382211
source: github_issue
status: new
created_at: 2025-12-25 04:43:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3761382211", "title": "Code-project Simple Membership System /delete_club.php SQL injection", "url": "https://github.com/d0g772/cve/issues/2", "user": "d0g772", "user_url": "https://github.com/d0g772", "repo": "cve", "body_preview": "# Code-project Simple Membership System /delete_club.php SQL injection\n\n# NAME OF AFFECTED PRODUCT(S)\n\n- Simple Membership System\n\n## Vendor Homepage\n\n- https://code-projects.org/simple-membership-system-in-php-with-source-code/\n\n# AFFECTED AND/OR FIXED VERSION(S)\n\n## submitter\n\n- dog772\n\n## Vulnerable File\n\n- /delete_club.php\n\n## VERSION(S)\n\n- V1.0\n\n## Software Link\n\n- https://download.code-projects.org/details/7f7213ea-fec6-44a1-95a2-5be39a5987c0\n\n# PROBLEM TYPE\n\n## Vulnerability Type\n\n- SQL i", "created": "2025-12-25T04:29:12Z", "labels": [], "context": "Code-project Simple Membership System /delete_club.php SQL injection # Code-project Simple Membership System /delete_club.php SQL injection\n\n# NAME OF AFFECTED PRODUCT(S)\n\n- Simple Membership System\n\n## Vendor Homepage\n\n- https://code-projects.org/simple-membership-sys"}


identifier: gh_issue_3761451825
source: github_issue
status: new
created_at: 2025-12-25 06:08:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3761451825", "title": "Upgrade Frontend", "url": "https://github.com/tranvanmanh9325/SenAI/issues/1", "user": "tranvanmanh9325", "user_url": "https://github.com/tranvanmanh9325", "repo": "SenAI", "body_preview": "# Frontend Improvements & Upgrades\n\n## T\u1ed5ng quan\nFrontend hi\u1ec7n t\u1ea1i l\u00e0 m\u1ed9t \u1ee9ng d\u1ee5ng Windows native C++ s\u1eed d\u1ee5ng Win32 API v\u1edbi giao di\u1ec7n dark theme t\u00f9y ch\u1ec9nh. T\u00e0i li\u1ec7u n\u00e0y li\u1ec7t k\u00ea c\u00e1c c\u1ea3i thi\u1ec7n, n\u00e2ng c\u1ea5p v\u00e0 b\u1ed5 sung c\u00f3 th\u1ec3 th\u1ef1c hi\u1ec7n.\n\n---\n\n## 1. C\u1ea2I THI\u1ec6N CH\u1ea4T L\u01af\u1ee2NG CODE\n\n### 1.1. JSON Parsing\n**V\u1ea5n \u0111\u1ec1 hi\u1ec7n t\u1ea1i:**\n- S\u1eed d\u1ee5ng string parsing th\u1ee7 c\u00f4ng, d\u1ec5 l\u1ed7i v\u00e0 kh\u00f3 b\u1ea3o tr\u00ec\n- Kh\u00f4ng x\u1eed l\u00fd \u0111\u1ea7y \u0111\u1ee7 c\u00e1c edge cases (nested objects, arrays ph\u1ee9c t\u1ea1p)\n- Code l\u1eb7p l\u1ea1i nhi\u1ec1u n\u01a1i (extractJsonField, parsing trong Ref", "created": "2025-12-25T05:51:23Z", "labels": ["documentation", "enhancement", "help wanted"], "context": "Upgrade Frontend # Frontend Improvements & Upgrades\n\n## T\u1ed5ng quan\nFrontend hi\u1ec7n t\u1ea1i l\u00e0 m\u1ed9t \u1ee9ng d\u1ee5ng Windows native C++ s\u1eed d\u1ee5ng Win32 API v\u1edbi giao di\u1ec7n dark theme t\u00f9y ch\u1ec9nh. T\u00e0i li\u1ec7u n\u00e0y li\u1ec7t k\u00ea c\u00e1c c\u1ea3i thi\u1ec7n, n\u00e2ng c\u1ea5p"}


identifier: gh_issue_3761433987
source: github_issue
status: new
created_at: 2025-12-25 06:08:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3761433987", "title": "Exercise: Expand your team with Copilot coding agent", "url": "https://github.com/Labuser15-GH/skills-expand-your-team-with-copilot/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-expand-your-team-with-copilot", "body_preview": "## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Labuser15-GH! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll unlock the next level of your favorite AI-powered coding assistant. Let&#39;s learn how to assign Copilot coding tasks directly in GitHub! \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll ", "created": "2025-12-25T05:28:52Z", "labels": [], "context": "Exercise: Expand your team with Copilot coding agent ## Expand your team with Copilot coding agent\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Labuser15-GH! Welcome"}


identifier: gh_issue_3761426500
source: github_issue
status: new
created_at: 2025-12-25 06:08:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3761426500", "title": "[bug]: debian-base:trixie image - sudo: unable to initialize PAM: Critical error - immediate abort", "url": "https://github.com/docker-hardened-images/catalog/issues/67", "user": "Domini", "user_url": "https://github.com/Domini", "repo": "catalog", "body_preview": "### Docker Hardened Image\n\ndebian-base:trixie\n\n### Bug Description\n\nWhen building images it's a good practice to gatekeep few necessary admin commands via sudo and run container under nonroot.\n\nIt works in official debian:trixie-slim image, but does not work in dhi.io/debian-base:trixie.\n\n### Steps to Reproduce\n\n```\n$ docker run --interactive --tty dhi.io/debian-base:trixie\nroot@7e87f5a25425:/# apt-get update && apt-get install -y sudo\nGet:1 http://deb.debian.org/debian trixie InRelease [140 kB]", "created": "2025-12-25T05:19:09Z", "labels": ["bug", "needs-triage"], "context": "[bug]: debian-base:trixie image - sudo: unable to initialize PAM: Critical error - immediate abort ### Docker Hardened Image\n\ndebian-base:trixie\n\n### Bug Description\n\nWhen building images it's a good practice to gatekeep few necessary admin commands via sudo and run container under nonroot.\n\nIt wor"}


identifier: gh_issue_3761367436
source: github_issue
status: new
created_at: 2025-12-25 06:08:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3761367436", "title": "[BUG] Unknown certificate verification error behind corporate proxy", "url": "https://github.com/numman-ali/opencode-openai-codex-auth/issues/79", "user": "tshu-w", "user_url": "https://github.com/tshu-w", "repo": "opencode-openai-codex-auth", "body_preview": "**Bug Description**\nA clear and concise description of the bug.\n\n**Steps to Reproduce**\n1. Install plugin as described\n2. `NODE_TLS_REJECT_UNAUTHORIZED=0 opencode run \"nihao\" --model openai/gpt-5.2-none`\n\n**Expected Behavior**\nopencode works fine as codex.\n\n**Actual Behavior**\n`Error: Error: unknown certificate verification error`\n\n**Environment**\n- opencode version: 1.0.198\n- Plugin version: v4.2.0\n- Operating System: macOS\n- Node.js version: v25.2.1\n\n**Logs**\nIf applicable, attach logs from `~", "created": "2025-12-25T04:09:09Z", "labels": ["bug"], "context": "[BUG] Unknown certificate verification error behind corporate proxy **Bug Description**\nA clear and concise description of the bug.\n\n**Steps to Reproduce**\n1. Install plugin as described\n2. `NODE_TLS_REJECT_UNAUTHORIZED=0 opencode run \"nihao\" --model openai/gpt-5.2-no"}


identifier: gh_issue_3761451691
source: github_issue
status: new
created_at: 2025-12-25 06:08:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3761451691", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/YuvrajSoam/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @YuvrajSoam! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate y", "created": "2025-12-25T05:51:11Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @YuvrajSoam! Welcome to your Skills exerci"}


identifier: gh_issue_3761499349
source: github_issue
status: new
created_at: 2025-12-25 06:46:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3761499349", "title": "GPT-5 Code Analysis Report - 2025-12-25", "url": "https://github.com/P4X-ng/PhoenixBoot/issues/104", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "PhoenixBoot", "body_preview": "# GPT-5 Advanced Code Analysis Report\n\n## GPT-5 Advanced Code Analysis Results\n\n### Code Quality & Architecture\n- Found 20 Python files for analysis\n- Found 20 C files for analysis\n\n### Security Analysis\n- Recommend implementing secure coding practices\n- Consider using static analysis tools like bandit for Python\n\n### Performance Optimization\n- Profile critical code paths\n- Consider memory usage optimization\n\n### Best Practices\n- Ensure proper error handling throughout codebase\n- Follow language", "created": "2025-12-25T06:41:55Z", "labels": ["automated", "copilot", "gpt5", "code-analysis"], "context": "GPT-5 Code Analysis Report - 2025-12-25 # GPT-5 Advanced Code Analysis Report\n\n## GPT-5 Advanced Code Analysis Results\n\n### Code Quality & Architecture\n- Found 20 Python files for analysis\n- Found 20 C files for analysis\n\n### Security Analy"}


identifier: gh_issue_3761495135
source: github_issue
status: new
created_at: 2025-12-25 06:46:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3761495135", "title": "Security Health Check - GOOD (85/100) - 2025-12-25", "url": "https://github.com/Sami9889/Sami.dev-website/issues/255", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/25/2025, 6:37:12 AM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 9\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Securi", "created": "2025-12-25T06:37:17Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-25 # Security Health Check Report\n\n**Generated:** 12/25/2025, 6:37:12 AM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Inc"}


identifier: gh_issue_3761465786
source: github_issue
status: new
created_at: 2025-12-25 06:46:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3761465786", "title": "Campcodes Supplier Management System V1.0 /Supply_Management_System/admin/view_products.php  SQL injection", "url": "https://github.com/IMZGforever/CVEs/issues/6", "user": "IMZGforever", "user_url": "https://github.com/IMZGforever", "repo": "CVEs", "body_preview": "\n# NAME OF AFFECTED PRODUCT(S)\n\n- Supplier Management System\n\n## Vendor Homepage\n\n- https://www.campcodes.com/projects/php/supplier-management-system-using-php-mysql/\n\n# AFFECTED AND/OR FIXED VERSION(S)\n\n## Submitter\n\nLige Zhan\nWuhan University\n\n## Vulnerable File\n\n- /Supply_Management_System/admin/view_products.php\n\n## VERSION(S)\n\n- V1.0\n\n## Software Link\n\n- https://www.campcodes.com/downloads/supplier-management-system-using-php-mysql-source-code/?wpdmdl=6708&ind=0\n\n# PROBLEM TYPE\n\n## Vulnerab", "created": "2025-12-25T06:07:34Z", "labels": [], "context": "Campcodes Supplier Management System V1.0 /Supply_Management_System/admin/view_products.php  SQL injection \n# NAME OF AFFECTED PRODUCT(S)\n\n- Supplier Management System\n\n## Vendor Homepage\n\n- https://www.campcodes.com/projects/php/supplier-management-system-using-php-mysql/\n\n# AFFECTED AND/OR FIXED VERSION("}


identifier: gh_issue_3761460404
source: github_issue
status: new
created_at: 2025-12-25 06:46:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3761460404", "title": "Here is a vulnerability which is 'LDAP Injection' in `initContext` of the file `src/main/java/org/traccar/database/LdapProvider.java`", "url": "https://github.com/traccar/traccar/issues/5733", "user": "Crispy-fried-chicken", "user_url": "https://github.com/Crispy-fried-chicken", "repo": "traccar", "body_preview": "Hi, we find that in the function `initContext` of the file `src/main/java/org/traccar/database/LdapProvider.java`, thouhgh the encodeForLdap method escapes only a subset of LDAP filter metacharacters (e.g., *, (, ), \\, null), but not others like &, |, =, which are critical for LDAP injection. When accountName is incorporated into searchFilter via replacement, unescaped characters could alter the LDAP query structure, leading to improper neutralization as per CWE-74.", "created": "2025-12-25T06:01:53Z", "labels": [], "context": "Here is a vulnerability which is 'LDAP Injection' in `initContext` of the file `src/main/java/org/traccar/database/LdapProvider.java` Hi, we find that in the function `initContext` of the file `src/main/java/org/traccar/database/LdapProvider.java`, thouhgh the encodeForLdap method escapes only a subset of LDAP filter metacharacters "}


identifier: gh_issue_3761457766
source: github_issue
status: new
created_at: 2025-12-25 06:46:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3761457766", "title": "Campcodes Supplier Management System V1.0 /Supply_Management_System/admin/add_area.php  SQL injection", "url": "https://github.com/IMZGforever/CVEs/issues/5", "user": "IMZGforever", "user_url": "https://github.com/IMZGforever", "repo": "CVEs", "body_preview": "# NAME OF AFFECTED PRODUCT(S)\n\n- Supplier Management System\n\n## Vendor Homepage\n\n- https://www.campcodes.com/projects/php/supplier-management-system-using-php-mysql/\n\n# AFFECTED AND/OR FIXED VERSION(S)\n\n## Submitter\n\nLige Zhan\nWuhan University\n\n## Vulnerable File\n\n- /Supply_Management_System/admin/add_area.php\n\n## VERSION(S)\n\n- V1.0\n\n## Software Link\n\n- https://www.campcodes.com/downloads/supplier-management-system-using-php-mysql-source-code/?wpdmdl=6708&ind=0\n\n# PROBLEM TYPE\n\n## Vulnerability ", "created": "2025-12-25T05:58:45Z", "labels": [], "context": "Campcodes Supplier Management System V1.0 /Supply_Management_System/admin/add_area.php  SQL injection # NAME OF AFFECTED PRODUCT(S)\n\n- Supplier Management System\n\n## Vendor Homepage\n\n- https://www.campcodes.com/projects/php/supplier-management-system-using-php-mysql/\n\n# AFFECTED AND/OR FIXED VERSION(S"}


identifier: gh_issue_3761541763
source: github_issue
status: new
created_at: 2025-12-25 07:24:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3761541763", "title": "ArXiv Summary - 2025-12-25 (papers from 2025-12-24 to 2025-12-25)", "url": "https://github.com/matouskozak/arxiv-digest/issues/24", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "arxiv-digest", "body_preview": "# ArXiv Paper Summaries (2025-12-25)\n\nFound 8 relevant papers.\n\n## CoTDeceptor:Adversarial Code Obfuscation Against CoT-Enhanced LLM Code Agents\n**Authors:** Haoyang Li, Mingjin Li, Jinxin Zuo, Siqi Li, Xiao Li, Hao Wu, Yueming Lu, Xiaochuan He\n\n### Summary\n**Problem:** Current software supply chains increasingly rely on CoT-enhanced LLM-based vulnerability detectors and code agents, which are assumed to be robust against malicious code obfuscation attacks. However, there is a lack of methods to", "created": "2025-12-25T07:18:19Z", "labels": ["arxiv-summary"], "context": "ArXiv Summary - 2025-12-25 (papers from 2025-12-24 to 2025-12-25) # ArXiv Paper Summaries (2025-12-25)\n\nFound 8 relevant papers.\n\n## CoTDeceptor:Adversarial Code Obfuscation Against CoT-Enhanced LLM Code Agents\n**Authors:** Haoyang Li, Mingjin Li, Jinxin Zuo, Siqi L"}


identifier: gh_issue_3761574111
source: github_issue
status: new
created_at: 2025-12-25 07:48:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3761574111", "title": "RFC: Add CLI Tooling for formatr", "url": "https://github.com/TimurManjosov/formatr/issues/52", "user": "TimurManjosov", "user_url": "https://github.com/TimurManjosov", "repo": "formatr", "body_preview": "# RFC: Add CLI Tooling for formatr\n\n**Issue:** #53\n**Status:** Proposed  \n**Created:** 2025-12-20  \n**Author:** TimurManjosov\n\n---\n\n## Description\n\nThis RFC proposes the addition of a comprehensive Command Line Interface (CLI) for the `formatr` library. The CLI will provide developers with a powerful toolset to render templates, validate configurations, analyze performance, run benchmarks, generate reports, watch for changes, initialize projects, format code, lint templates, and launch an intera", "created": "2025-12-25T07:47:00Z", "labels": [], "context": "RFC: Add CLI Tooling for formatr # RFC: Add CLI Tooling for formatr\n\n**Issue:** #53\n**Status:** Proposed  \n**Created:** 2025-12-20  \n**Author:** TimurManjosov\n\n---\n\n## Description\n\nThis RFC proposes the addition of a comprehensive Co"}


identifier: gh_issue_3761506548
source: github_issue
status: new
created_at: 2025-12-25 08:00:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3761506548", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/lynndb0/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @lynndb0! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate your", "created": "2025-12-25T06:49:06Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @lynndb0! Welcome to your Skills exercise!"}


identifier: gh_issue_3761558185
source: github_issue
status: new
created_at: 2025-12-25 08:24:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3761558185", "title": "Hardening & DevSecOps", "url": "https://github.com/fdesenho/safevision-modular/issues/24", "user": "fdesenho", "user_url": "https://github.com/fdesenho", "repo": "safevision-modular", "body_preview": "## \ud83c\udfdb\ufe0f Governan\u00e7a & Rastreabilidade\n> **Decis\u00e3o Arquitetural Vinculada:** [ADR-020: DevSecOps Strategy](https://github.com/fdesenho/safevision-modular/blob/acb2d68dcef96a43f33727fa718466391bf57dd1/docs/adr/020-devsecops-hardening-strategy.md)\n\n---\n\n### \ud83c\udfaf Contexto e Objetivo\nGarantir a seguran\u00e7a da cadeia de suprimentos de software (Supply Chain Security).\n\n### \u2705 Crit\u00e9rios de Aceite (Definition of Done)\n- [ ] Rodar **Trivy** nas imagens Docker e corrigir vulnerabilidades \"Critical\".\n- [ ] Rodar **", "created": "2025-12-25T07:33:26Z", "labels": ["\ud83d\udfe1 priority: medium", "\u2699\ufe0f type: infra"], "context": "Hardening & DevSecOps ## \ud83c\udfdb\ufe0f Governan\u00e7a & Rastreabilidade\n> **Decis\u00e3o Arquitetural Vinculada:** [ADR-020: DevSecOps Strategy](https://github.com/fdesenho/safevision-modular/blob/acb2d68dcef96a43f33727fa718466391bf57dd1/docs"}


identifier: gh_issue_3761685692
source: github_issue
status: new
created_at: 2025-12-25 09:27:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3761685692", "title": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected", "url": "https://github.com/truckercore/truckercore1/issues/162", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "truckercore1", "body_preview": "# Security Audit Report - 2025-12-25\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/util vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-9j5q-479x-43g2\nfix available via `npm audit fix --force`\nWill install @stryker-mutator/vitest-runner@8.7.1, which is outside the stated dependency range\nnode_modules/@stryker-mutator/util\n  @stryker-mutator/core  <=8.7.0\n  D", "created": "2025-12-25T09:15:36Z", "labels": ["security", "dependencies", "automated"], "context": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected # Security Audit Report - 2025-12-25\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/"}


identifier: gh_issue_3761675221
source: github_issue
status: new
created_at: 2025-12-25 09:27:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3761675221", "title": "Epic: Dependency & Supply Chain Security", "url": "https://github.com/NaiDevOpsCom/ndc-redesign-website/issues/74", "user": "wangaiemma", "user_url": "https://github.com/wangaiemma", "repo": "ndc-redesign-website", "body_preview": "Ensure secure dependencies and supply chain for the frontend app using auditing and versioning.\n\n**Sub-issues:**\n- Enable Dependency Vulnerability Scanning\n- Lock Dependency Versions\n\nParent epic: Frontend Security Hardening", "created": "2025-12-25T09:07:25Z", "labels": ["dependencies"], "context": "Epic: Dependency & Supply Chain Security Ensure secure dependencies and supply chain for the frontend app using auditing and versioning.\n\n**Sub-issues:**\n- Enable Dependency Vulnerability Scanning\n- Lock Dependency Versions\n\nParent epic: Fro"}


identifier: gh_issue_3761703622
source: github_issue
status: new
created_at: 2025-12-25 09:39:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3761703622", "title": "[0.83] Fix text clipping on Android 15+ due to useBoundsForWidth change", "url": "https://github.com/reactwg/react-native-releases/issues/1197", "user": "EmperorZzl", "user_url": "https://github.com/EmperorZzl", "repo": "react-native-releases", "body_preview": "### Target Branch\n\n0.83\n\n### Link to commit or PR to be picked\n\nhttps://github.com/facebook/react-native/commit/8347cc4b50ca9229b638d0823d3148fed50b9a61\n\n### Description\n\nSummary:\nAndroid 15 (API 35) changed TextView's default behavior to use visual glyph bounds for width calculation (useBoundsForWidth=true).  This causes text clipping for italic fonts and other typefaces where glyphs extend beyond their advance width:", "created": "2025-12-25T09:30:34Z", "labels": ["Type Pick Request"], "context": "[0.83] Fix text clipping on Android 15+ due to useBoundsForWidth change ### Target Branch\n\n0.83\n\n### Link to commit or PR to be picked\n\nhttps://github.com/facebook/react-native/commit/8347cc4b50ca9229b638d0823d3148fed50b9a61\n\n### Description\n\nSummary:\nAndroid 15 (API 35) "}


identifier: gh_issue_3761735513
source: github_issue
status: new
created_at: 2025-12-25 10:04:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3761735513", "title": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-481824e7-45ef-447d-8c56-a9828d83cb9e/issues/11", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-481824e7-45ef-447d-8c56-a9828d83cb9e", "body_preview": "## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-web-6.1.6.jar</b></summary>\n\n<p>Spring Web</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDe", "created": "2025-12-25T09:56:07Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar ## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3761735482
source: github_issue
status: new
created_at: 2025-12-25 10:04:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3761735482", "title": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-481824e7-45ef-447d-8c56-a9828d83cb9e/issues/10", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-481824e7-45ef-447d-8c56-a9828d83cb9e", "body_preview": "## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-webmvc-6.1.6.jar</b></summary>\n\n<p>Spring Web MVC</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</", "created": "2025-12-25T09:56:05Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-41242 (Medium) detected in spring-webmvc-6.1.6.jar ## CVE-2025-41242 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3761735391
source: github_issue
status: new
created_at: 2025-12-25 10:04:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3761735391", "title": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-481824e7-45ef-447d-8c56-a9828d83cb9e/issues/7", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-481824e7-45ef-447d-8c56-a9828d83cb9e", "body_preview": "## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-25T09:56:01Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55752 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55752 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761735335
source: github_issue
status: new
created_at: 2025-12-25 10:04:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3761735335", "title": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-481824e7-45ef-447d-8c56-a9828d83cb9e/issues/5", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-481824e7-45ef-447d-8c56-a9828d83cb9e", "body_preview": "## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependen", "created": "2025-12-25T09:55:57Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-49125 (Medium) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-49125 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3761746375
source: github_issue
status: new
created_at: 2025-12-25 10:15:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3761746375", "title": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d/issues/17", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d", "body_preview": "## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-core-6.1.6.jar</b></summary>\n\n<p>Spring Core</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>", "created": "2025-12-25T10:05:31Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2018-1257 (Medium) detected in spring-core-6.1.6.jar ## CVE-2018-1257 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <"}


identifier: gh_issue_3761746343
source: github_issue
status: new
created_at: 2025-12-25 10:15:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3761746343", "title": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d/issues/16", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d", "body_preview": "## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-25T10:05:29Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48989 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48989 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761746306
source: github_issue
status: new
created_at: 2025-12-25 10:15:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3761746306", "title": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d/issues/15", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d", "body_preview": "## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-web-6.1.6.jar</b></summary>\n\n<p>Spring Web</p>\n<p>Library home page: <a href=\"https://spring.io/projects/spring-framework\">https://spring.io/projects/spring-framework</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDe", "created": "2025-12-25T10:05:28Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2024-38820 (Low) detected in spring-web-6.1.6.jar ## CVE-2024-38820 - Low Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>"}


identifier: gh_issue_3761746274
source: github_issue
status: new
created_at: 2025-12-25 10:15:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3761746274", "title": "CVE-2025-48988 (High) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d/issues/14", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d", "body_preview": "## CVE-2025-48988 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependency", "created": "2025-12-25T10:05:26Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-48988 (High) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-48988 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761746243
source: github_issue
status: new
created_at: 2025-12-25 10:15:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3761746243", "title": "CVE-2025-61795 (Medium) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d/issues/13", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d", "body_preview": "## CVE-2025-61795 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDependen", "created": "2025-12-25T10:05:25Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-61795 (Medium) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-61795 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3761771817
source: github_issue
status: new
created_at: 2025-12-25 10:27:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3761771817", "title": "CVE-2021-28834 (Critical) detected in kramdown-2.1.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d/issues/7", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d", "body_preview": "## CVE-2021-28834 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>kramdown-2.1.0.gem</b></summary>\n\n<p>kramdown is yet-another-markdown-parser but fast, pure Ruby,\nusing a strict syntax definition and supporting several common extensions.\n</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/kramdown-2.1.0.gem\">https://rubygems.org/gems/kramdown-2.1.0", "created": "2025-12-25T10:25:48Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-28834 (Critical) detected in kramdown-2.1.0.gem ## CVE-2021-28834 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3761771674
source: github_issue
status: new
created_at: 2025-12-25 10:27:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3761771674", "title": "CVE-2020-14001 (Critical) detected in kramdown-2.1.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d/issues/4", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d", "body_preview": "## CVE-2020-14001 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>kramdown-2.1.0.gem</b></summary>\n\n<p>kramdown is yet-another-markdown-parser but fast, pure Ruby,\nusing a strict syntax definition and supporting several common extensions.\n</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/kramdown-2.1.0.gem\">https://rubygems.org/gems/kramdown-2.1.0", "created": "2025-12-25T10:25:43Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2020-14001 (Critical) detected in kramdown-2.1.0.gem ## CVE-2020-14001 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3761745959
source: github_issue
status: new
created_at: 2025-12-25 10:27:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3761745959", "title": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d/issues/1", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-e724f9fa-225e-472a-b3df-908c09060a8d", "body_preview": "## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDepend", "created": "2025-12-25T10:05:11Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3761735218
source: github_issue
status: new
created_at: 2025-12-25 10:27:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3761735218", "title": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-481824e7-45ef-447d-8c56-a9828d83cb9e/issues/1", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-481824e7-45ef-447d-8c56-a9828d83cb9e", "body_preview": "## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDepend", "created": "2025-12-25T09:55:51Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3761771880
source: github_issue
status: new
created_at: 2025-12-25 10:27:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3761771880", "title": "CVE-2022-31163 (High) detected in tzinfo-1.2.7.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d/issues/9", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d", "body_preview": "## CVE-2022-31163 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tzinfo-1.2.7.gem</b></summary>\n\n<p>TZInfo provides daylight savings aware transformations between times in different time zones.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/tzinfo-1.2.7.gem\">https://rubygems.org/gems/tzinfo-1.2.7.gem</a></p>\n<p>Path to dependency file: /RxSwift-mas", "created": "2025-12-25T10:25:51Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2022-31163 (High) detected in tzinfo-1.2.7.gem ## CVE-2022-31163 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761771856
source: github_issue
status: new
created_at: 2025-12-25 10:27:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3761771856", "title": "CVE-2022-24440 (High) detected in cocoapods-downloader-1.3.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d/issues/8", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d", "body_preview": "## CVE-2022-24440 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>cocoapods-downloader-1.3.0.gem</b></summary>\n\n<p></p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem\">https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem</a></p>\n<p>Path to dependency file: /RxSwift-master-limited/Gemfile.lock</p>\n<p>Path to vulnerable ", "created": "2025-12-25T10:25:49Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2022-24440 (High) detected in cocoapods-downloader-1.3.0.gem ## CVE-2022-24440 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761771719
source: github_issue
status: new
created_at: 2025-12-25 10:27:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3761771719", "title": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d/issues/6", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d", "body_preview": "## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>activesupport-4.2.11.1.gem</b></summary>\n\n<p>A toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Rich support for multibyte strings, internationalization, time zones, and testing.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/activesupport-4.", "created": "2025-12-25T10:25:46Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem ## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3761771696
source: github_issue
status: new
created_at: 2025-12-25 10:27:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3761771696", "title": "CVE-2022-21223 (High) detected in cocoapods-downloader-1.3.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d/issues/5", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d", "body_preview": "## CVE-2022-21223 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>cocoapods-downloader-1.3.0.gem</b></summary>\n\n<p></p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem\">https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem</a></p>\n<p>Path to dependency file: /RxSwift-master-limited/Gemfile.lock</p>\n<p>Path to vulnerable ", "created": "2025-12-25T10:25:45Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2022-21223 (High) detected in cocoapods-downloader-1.3.0.gem ## CVE-2022-21223 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761785595
source: github_issue
status: new
created_at: 2025-12-25 10:39:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3761785595", "title": "Weekly maintenance cleanup and refactor", "url": "https://github.com/mcpmark-eval-sii/mcpmark-cicd/issues/4", "user": "sii-test7", "user_url": "https://github.com/sii-test7", "repo": "mcpmark-cicd", "body_preview": "This is a regular maintenance task to keep the codebase clean and well-organized.\n\n**Task Type**: Code Cleanup  \n**Priority**: Medium - Normal priority\n\n**Affected Areas**:\n- src/ directory structure\n- Utility functions that are no longer used\n- Outdated dependency configurations\n- Deprecated API endpoints\n\n**Proposed Changes**:\n- Remove unused utility functions and dead code\n- Update package.json dependencies to latest stable versions\n- Refactor old code patterns\n- Clean up comments and documen", "created": "2025-12-25T10:39:10Z", "labels": [], "context": "Weekly maintenance cleanup and refactor This is a regular maintenance task to keep the codebase clean and well-organized.\n\n**Task Type**: Code Cleanup  \n**Priority**: Medium - Normal priority\n\n**Affected Areas**:\n- src/ directory structure\n"}


identifier: gh_issue_3761027714
source: github_issue
status: new
created_at: 2025-12-25 10:39:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3761027714", "title": "'NoneType' object has no attribute 'split' after updating to v8.30.6", "url": "https://github.com/springfall2008/batpred/issues/3121", "user": "DFEvans", "user_url": "https://github.com/DFEvans", "repo": "batpred", "body_preview": "**Describe the bug**\nAfter upgrading from v8.30.2 to v8.30.6, Predbat outputs the following error after each planning run, and fails to complete most of its activities afterwards (outputting to various entities, controlling the inverter, etc.):\n\n```\n42877 | 2025-12-24 20:50:05.935448:  Error: 'NoneType' object has no attribute 'split'\n-- | --\n42876 | 2025-12-24 20:50:05.935265:  Info: record_status Error: Exception raised 'NoneType' object has no attribute 'split'\n42874 | AttributeError: 'NoneTy", "created": "2025-12-24T21:21:21Z", "labels": ["configuration", "Sigenergy"], "context": "'NoneType' object has no attribute 'split' after updating to v8.30.6 **Describe the bug**\nAfter upgrading from v8.30.2 to v8.30.6, Predbat outputs the following error after each planning run, and fails to complete most of its activities afterwards (outputting to variou"}


identifier: gh_issue_3761776404
source: github_issue
status: new
created_at: 2025-12-25 10:39:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3761776404", "title": "CVE-2021-28834 (Critical) detected in kramdown-2.1.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52/issues/7", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52", "body_preview": "## CVE-2021-28834 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>kramdown-2.1.0.gem</b></summary>\n\n<p>kramdown is yet-another-markdown-parser but fast, pure Ruby,\nusing a strict syntax definition and supporting several common extensions.\n</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/kramdown-2.1.0.gem\">https://rubygems.org/gems/kramdown-2.1.0", "created": "2025-12-25T10:30:02Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-28834 (Critical) detected in kramdown-2.1.0.gem ## CVE-2021-28834 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3761776306
source: github_issue
status: new
created_at: 2025-12-25 10:39:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3761776306", "title": "CVE-2020-14001 (Critical) detected in kramdown-2.1.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52/issues/3", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52", "body_preview": "## CVE-2020-14001 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>kramdown-2.1.0.gem</b></summary>\n\n<p>kramdown is yet-another-markdown-parser but fast, pure Ruby,\nusing a strict syntax definition and supporting several common extensions.\n</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/kramdown-2.1.0.gem\">https://rubygems.org/gems/kramdown-2.1.0", "created": "2025-12-25T10:29:56Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2020-14001 (Critical) detected in kramdown-2.1.0.gem ## CVE-2020-14001 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3761776378
source: github_issue
status: new
created_at: 2025-12-25 10:51:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3761776378", "title": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52/issues/6", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52", "body_preview": "## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>activesupport-4.2.11.1.gem</b></summary>\n\n<p>A toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Rich support for multibyte strings, internationalization, time zones, and testing.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/activesupport-4.", "created": "2025-12-25T10:30:00Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem ## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3761776278
source: github_issue
status: new
created_at: 2025-12-25 10:51:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3761776278", "title": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52/issues/2", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52", "body_preview": "## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>addressable-2.7.0.gem</b></summary>\n\n<p>Addressable is an alternative implementation to the URI implementation that is\npart of Ruby's standard library. It is flexible, offers heuristic parsing, and\nadditionally provides extensive support for IRIs and URI templates.\n</p>\n<p>Library home page: <a hre", "created": "2025-12-25T10:29:54Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem ## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761771584
source: github_issue
status: new
created_at: 2025-12-25 10:51:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3761771584", "title": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d/issues/2", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-4a771d96-15e8-41ff-8c63-53af8d87758d", "body_preview": "## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>addressable-2.7.0.gem</b></summary>\n\n<p>Addressable is an alternative implementation to the URI implementation that is\npart of Ruby's standard library. It is flexible, offers heuristic parsing, and\nadditionally provides extensive support for IRIs and URI templates.\n</p>\n<p>Library home page: <a hre", "created": "2025-12-25T10:25:40Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem ## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761776454
source: github_issue
status: new
created_at: 2025-12-25 10:51:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3761776454", "title": "CVE-2022-31163 (High) detected in tzinfo-1.2.7.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52/issues/9", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52", "body_preview": "## CVE-2022-31163 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tzinfo-1.2.7.gem</b></summary>\n\n<p>TZInfo provides daylight savings aware transformations between times in different time zones.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/tzinfo-1.2.7.gem\">https://rubygems.org/gems/tzinfo-1.2.7.gem</a></p>\n<p>Path to dependency file: /RxSwift-mas", "created": "2025-12-25T10:30:05Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2022-31163 (High) detected in tzinfo-1.2.7.gem ## CVE-2022-31163 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761776424
source: github_issue
status: new
created_at: 2025-12-25 10:51:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3761776424", "title": "CVE-2022-24440 (High) detected in cocoapods-downloader-1.3.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52/issues/8", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52", "body_preview": "## CVE-2022-24440 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>cocoapods-downloader-1.3.0.gem</b></summary>\n\n<p></p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem\">https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem</a></p>\n<p>Path to dependency file: /RxSwift-master-limited/Gemfile.lock</p>\n<p>Path to vulnerable ", "created": "2025-12-25T10:30:03Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2022-24440 (High) detected in cocoapods-downloader-1.3.0.gem ## CVE-2022-24440 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761776349
source: github_issue
status: new
created_at: 2025-12-25 10:51:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3761776349", "title": "CVE-2022-21223 (High) detected in cocoapods-downloader-1.3.0.gem", "url": "https://github.com/SAST-UP-STG/SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52/issues/5", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-c13441ba-c662-4891-b48c-83b26038af52", "body_preview": "## CVE-2022-21223 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>cocoapods-downloader-1.3.0.gem</b></summary>\n\n<p></p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem\">https://rubygems.org/gems/cocoapods-downloader-1.3.0.gem</a></p>\n<p>Path to dependency file: /RxSwift-master-limited/Gemfile.lock</p>\n<p>Path to vulnerable ", "created": "2025-12-25T10:29:59Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2022-21223 (High) detected in cocoapods-downloader-1.3.0.gem ## CVE-2022-21223 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3761829804
source: github_issue
status: new
created_at: 2025-12-25 11:28:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3761829804", "title": "Aerospike Server container (asd) intermittently reaches 100% CPU utilization", "url": "https://github.com/openssl/openssl/issues/29502", "user": "vigyaat-hub", "user_url": "https://github.com/vigyaat-hub", "repo": "openssl", "body_preview": "We are investigating an escalation with a customer where the Aerospike Server container (asd) intermittently reaches 100% CPU utilization.\nPerformance profiling shows that OpenSSL's libcrypto (version from openssl-libs-1.1.1k-12.el8_9.x86_64) consumes >90% CPU during these events.\n\nAerospike's internal analysis indicates that this behavior is similar to the conditions described in CVE\u20112022\u20110778, which involves an infinite loop in BN_mod_sqrt() during certificate/EC parameter parsing.\nNVD states ", "created": "2025-12-25T11:18:24Z", "labels": [], "context": "Aerospike Server container (asd) intermittently reaches 100% CPU utilization We are investigating an escalation with a customer where the Aerospike Server container (asd) intermittently reaches 100% CPU utilization.\nPerformance profiling shows that OpenSSL's libcrypto (version"}


identifier: gh_issue_3761831585
source: github_issue
status: new
created_at: 2025-12-25 11:29:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3761831585", "title": "[Critical] SQL Injection in src/main/java/com/example/UserController.java:45", "url": "https://github.com/ElafNawaf/veracode/issues/43", "user": "ElafNawaf", "user_url": "https://github.com/ElafNawaf", "repo": "veracode", "body_preview": "**Vulnerability Details**\n\n**Type**: SQL Injection\n**Severity**: VulnerabilitySeverity.CRITICAL\n**CWE ID**: CWE-89\n**File Path**: src/main/java/com/example/UserController.java\n**Line Number**: 45\n**Confidence Score**: 0.95\n**Exploitable**: Yes\n\n**Description**:\nSQL injection vulnerability in user lookup. User input is directly concatenated into SQL query without sanitization.\n\n\n**Code Snippet**:\n```\nString query = \"SELECT ** FROM users WHERE id = \" + userId;\n```\n\n\n**Remediation**:\nUse parameteri", "created": "2025-12-25T11:20:11Z", "labels": ["severity-critical", "vulnerability", "sql-injection"], "context": "[Critical] SQL Injection in src/main/java/com/example/UserController.java:45 **Vulnerability Details**\n\n**Type**: SQL Injection\n**Severity**: VulnerabilitySeverity.CRITICAL\n**CWE ID**: CWE-89\n**File Path**: src/main/java/com/example/UserController.java\n**Line Number**: 45\n**Co"}


identifier: gh_issue_3761807506
source: github_issue
status: new
created_at: 2025-12-25 11:29:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3761807506", "title": "[plan] Update GitHub Actions workflow to gosec v2.22.11", "url": "https://github.com/githubnext/gh-aw/issues/7613", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "gh-aw", "body_preview": "## Objective\n\nUpdate the security scan workflow to use gosec v2.22.11, the latest version with Trojan Source detection and other security enhancements.\n\n## Context\n\nThe current workflow uses v2.22.10, which is outdated. The latest v2.22.11 (released Dec 11, 2025) includes:\n- **G116**: Trojan Source detection (Unicode bidirectional control characters)\n- Enhanced build tag parsing\n- Performance improvements\n- AI-powered vulnerability fix suggestions support\n\nThis is a critical security update for ", "created": "2025-12-25T10:59:58Z", "labels": ["enhancement", "security", "ai-generated", "plan"], "context": "[plan] Update GitHub Actions workflow to gosec v2.22.11 ## Objective\n\nUpdate the security scan workflow to use gosec v2.22.11, the latest version with Trojan Source detection and other security enhancements.\n\n## Context\n\nThe current workflow uses v2.22.10,"}


identifier: gh_issue_3761849631
source: github_issue
status: new
created_at: 2025-12-25 11:41:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3761849631", "title": "\ud83d\udea8 SBOM Vulnerabilities Detected (Grype)", "url": "https://github.com/Technochip/Test-workflows/issues/77", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Test-workflows", "body_preview": "\n    ### \ud83d\udea8 SBOM Vulnerabilities Detected\n    \n    **Workflow:** SBOM Scanning\n    **Branch:** refs/heads/dev\n    **Commit:** 3f5244bc4ffcdc0a071a0ad8fb13b07e6f61dea3\n    \n    ### \ud83d\udce6 Grype Scan Output\n    ```\n    NAME                  INSTALLED  FIXED IN  TYPE  VULNERABILITY        SEVERITY  EPSS           RISK   \nqs                    6.5.1      6.5.3     npm   GHSA-hrpp-h998-j3pp  High      3.2% (86th)    2.4    \nserialize-javascript  2.1.1      3.1.0     npm   GHSA-hxcc-f52p-wc94  High      2.4", "created": "2025-12-25T11:39:48Z", "labels": ["security:sbom"], "context": "\ud83d\udea8 SBOM Vulnerabilities Detected (Grype) \n    ### \ud83d\udea8 SBOM Vulnerabilities Detected\n    \n    **Workflow:** SBOM Scanning\n    **Branch:** refs/heads/dev\n    **Commit:** 3f5244bc4ffcdc0a071a0ad8fb13b07e6f61dea3\n    \n    ### \ud83d\udce6 Grype Scan Output\n "}


identifier: gh_issue_3761842535
source: github_issue
status: new
created_at: 2025-12-25 11:41:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3761842535", "title": "campcodes  Retro Basketball Shoes Online Store Project V1.0 /admin/admin_feature.php cross site scripting", "url": "https://github.com/security4research/cve_submission/issues/1", "user": "zzb1388", "user_url": "https://github.com/zzb1388", "repo": "cve_submission", "body_preview": "# campcodes  Retro Basketball Shoes Online Store Project V1.0 /admin/admin_feature.php cross site scripting\n\n# Email OF AFFECTED PRODUCT(S)\n\n- # Retro Basketball Shoes Online Store\n\n## Vendor Homepage\n\n- campcodes\n\n## submitter\n\n-  Vulnerable File\n\n-  zhcharyzhang\n\n## VERSION(S)\n\n- V1.0\n\n## Software Link\n\nhttps://www.campcodes.com/projects/php/retro-basketball-shoes-online-store-in-php-mysql/\n\n## Vulnerability Type\n\n- XSS\n\n## Root Cause\n\n- An XSS vulnerability was found in the '/admin/admin_feat", "created": "2025-12-25T11:32:06Z", "labels": [], "context": "campcodes  Retro Basketball Shoes Online Store Project V1.0 /admin/admin_feature.php cross site scripting # campcodes  Retro Basketball Shoes Online Store Project V1.0 /admin/admin_feature.php cross site scripting\n\n# Email OF AFFECTED PRODUCT(S)\n\n- # Retro Basketball Shoes Online Store\n\n## Vendor Homepage"}


identifier: gh_issue_3761807499
source: github_issue
status: new
created_at: 2025-12-25 11:41:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3761807499", "title": "[plan] Upgrade gosec integration to v2.22.11 and improve security scanning", "url": "https://github.com/githubnext/gh-aw/issues/7612", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "gh-aw", "body_preview": "## Overview\n\nThis tracking issue covers improvements to our gosec (Go Security Checker) integration based on the comprehensive analysis in Discussion #7599.\n\n**Source**: Discussion #7599\n\n## Current Status\n\ngh-aw has an excellent multi-layered gosec integration (rated 4/5):\n- \u2705 Daily automated security scans in GitHub Actions\n- \u2705 GitHub Code Scanning (SARIF) integration\n- \u2705 golangci-lint integration\n- \u2705 Makefile targets for local scanning\n- \u26a0\ufe0f Using outdated v2.22.10 in workflow (v2.22.11 availa", "created": "2025-12-25T10:59:58Z", "labels": ["enhancement", "ai-generated", "plan"], "context": "[plan] Upgrade gosec integration to v2.22.11 and improve security scanning ## Overview\n\nThis tracking issue covers improvements to our gosec (Go Security Checker) integration based on the comprehensive analysis in Discussion #7599.\n\n**Source**: Discussion #7599\n\n## Current S"}


identifier: gh_issue_3761796788
source: github_issue
status: new
created_at: 2025-12-25 11:41:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3761796788", "title": "Add feature for immutable GitHub releases", "url": "https://github.com/apache/infrastructure-asfyaml/issues/83", "user": "snazy", "user_url": "https://github.com/snazy", "repo": "infrastructure-asfyaml", "body_preview": "Since Oct 2025 GitHub supports so called [\"Immutable Releases\"](https://github.blog/changelog/2025-10-28-immutable-releases-are-now-generally-available/#how-to-enable-immutable-releases), [docs](https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/immutable-releases?utm_source=changelog-docs-immutable-releases&utm_medium=changelog&utm_campaign=universe25). This feature makes the associated Git tag immutable and protects the release assets. It ev", "created": "2025-12-25T10:50:11Z", "labels": [], "context": "Add feature for immutable GitHub releases Since Oct 2025 GitHub supports so called [\"Immutable Releases\"](https://github.blog/changelog/2025-10-28-immutable-releases-are-now-generally-available/#how-to-enable-immutable-releases), [docs](https"}


identifier: gh_issue_3761675184
source: github_issue
status: new
created_at: 2025-12-25 11:41:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3761675184", "title": "Epic: Frontend Security Hardening (React + TypeScript + Vite)", "url": "https://github.com/NaiDevOpsCom/ndc-redesign-website/issues/70", "user": "wangaiemma", "user_url": "https://github.com/wangaiemma", "repo": "ndc-redesign-website", "body_preview": "**Objective:**\nImplement frontend security best practices to reduce XSS, dependency, misconfiguration, and client-side attack risks in our React + TypeScript + Vite application.\n\n**Sub-epics:**\n- XSS & Input Handling Protection\n- Authentication & Token Safety\n- Content Security Policy (CSP)\n- Dependency & Supply Chain Security\n- Secure Environment Variable Usage\n- Browser Security Headers\n- Build-Time & Code-Level Security\n- Error Handling & Information Disclosure\n- Navigation & Redirect Safety\n", "created": "2025-12-25T09:07:23Z", "labels": ["enhancement"], "context": "Epic: Frontend Security Hardening (React + TypeScript + Vite) **Objective:**\nImplement frontend security best practices to reduce XSS, dependency, misconfiguration, and client-side attack risks in our React + TypeScript + Vite application.\n\n**Sub-epics:**\n- XSS "}


