# leads

identifier: gh_issue_3736614776
source: github_issue
status: new
created_at: 2025-12-16 23:01:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3736614776", "title": "Dependency Remediation Plan", "url": "https://github.com/00felix/spring-data-jpa-entity-graph/issues/2", "user": "00felix-app[bot]", "user_url": "https://github.com/apps/00felix-app", "repo": "spring-data-jpa-entity-graph", "body_preview": "## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-16T22:48:55Z", "labels": [], "context": "Dependency Remediation Plan ## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3736551261
source: github_issue
status: new
created_at: 2025-12-16 23:01:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3736551261", "title": "Vulnerabilities in Spring AI Vector Stores dependencies", "url": "https://github.com/spring-projects/spring-ai/issues/5109", "user": "nicolaskrier", "user_url": "https://github.com/nicolaskrier", "repo": "spring-ai", "body_preview": "While analyzing dependencies in IntelliJ IDEA, I identified that some vector stores have the following vulnerabilities in  vector database Java clients:\n- Milvus: CVE-2025-55163 and CVE-2024-7254,\n- Qdrant: CVE-2024-7254 and CVE-2025-55163,\n- Typesense: CVE-2023-3635,\n- Weaviate: CVE-2025-55163.\n\nAlso it could be an opportunity to upgrade these vector database Java clients.", "created": "2025-12-16T22:25:59Z", "labels": ["status: waiting-for-triage"], "context": "Vulnerabilities in Spring AI Vector Stores dependencies While analyzing dependencies in IntelliJ IDEA, I identified that some vector stores have the following vulnerabilities in  vector database Java clients:\n- Milvus: CVE-2025-55163 and CVE-2024-7254,\n- Q"}


identifier: gh_issue_3736419488
source: github_issue
status: new
created_at: 2025-12-16 23:01:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3736419488", "title": "GN4 SpringFramework 6 OpenRewrite Update", "url": "https://github.com/geonetwork/core-geonetwork/issues/9125", "user": "jodygarnett", "user_url": "https://github.com/jodygarnett", "repo": "core-geonetwork", "body_preview": "Based on the positive GeoServer 3 experience of upgrading to Spring Framework 6 this proposal recommends this approach for the core-geonetwork codebase.\n\nTwo things have changed since the [initial feasibility exploration](https://github.com/geonetwork/core-geonetwork/wiki/Geonetwork-on-Spring-6-codesprint-June-2023) and [proposal](https://github.com/geonetwork/core-geonetwork/issues/8906):\n\n* Tools, specifically OpenRewrite have lessened the effort required to update to Spring Framework 6; and\n*", "created": "2025-12-16T21:39:53Z", "labels": [], "context": "GN4 SpringFramework 6 OpenRewrite Update Based on the positive GeoServer 3 experience of upgrading to Spring Framework 6 this proposal recommends this approach for the core-geonetwork codebase.\n\nTwo things have changed since the [initial fea"}


identifier: gh_issue_3736631144
source: github_issue
status: new
created_at: 2025-12-16 23:02:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3736631144", "title": "DevOps: Add Dependabot for Security Updates", "url": "https://github.com/KalleL94/Periodical/issues/24", "user": "KalleL94", "user_url": "https://github.com/KalleL94", "repo": "Periodical", "body_preview": "## Overview\nEnable GitHub Dependabot to automatically detect and update vulnerable dependencies.\n\n## Implementation\n\nCreate `.github/dependabot.yml`:\n```yaml\nversion: 2\nupdates:\n  - package-ecosystem: \"pip\"\n    directory: \"/\"\n    schedule:\n      interval: \"weekly\"\n    open-pull-requests-limit: 5\n    labels:\n      - \"dependencies\"\n```\n\n## Benefits\n- Automatic security alerts for vulnerable packages\n- Auto-generated PRs to update dependencies\n- Keeps dependencies fresh without manual tracking\n\n## ", "created": "2025-12-16T22:55:07Z", "labels": [], "context": "DevOps: Add Dependabot for Security Updates ## Overview\nEnable GitHub Dependabot to automatically detect and update vulnerable dependencies.\n\n## Implementation\n\nCreate `.github/dependabot.yml`:\n```yaml\nversion: 2\nupdates:\n  - package-ecosystem:"}


identifier: gh_issue_3736665759
source: github_issue
status: new
created_at: 2025-12-16 23:14:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3736665759", "title": "PR #124 \u2013 build(deps): bump ip from 2.0.0 to 2.0.1", "url": "https://github.com/Artcryption/development-tracker/issues/292", "user": "vandana88", "user_url": "https://github.com/vandana88", "repo": "development-tracker", "body_preview": "## PR\nPR #124\n\n## Date\n2025-10-11\n\n## Branch\n`dependabot/npm_and_yarn/ip-2.0.1`\n\n## Author\n@app/dependabot\n\n## Status\n\u26a0\ufe0f Closed (not merged)\n\n## PR Link\nhttps://github.com/Artcryption/frontend/pull/124\n\n---\n\n## Description\nBumps [ip](https://github.com/indutny/node-ip) from 2.0.0 to 2.0.1.\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/indutny/node-ip/commit/3b0994a74eca51df01f08c40d6a65ba0e1845d04\"><code>3b0994a</code></a> 2.0.1</li>\n<li><a href=\"https://github.com/in", "created": "2025-12-16T23:08:41Z", "labels": ["dependencies", "closed", "frontend"], "context": "PR #124 \u2013 build(deps): bump ip from 2.0.0 to 2.0.1 ## PR\nPR #124\n\n## Date\n2025-10-11\n\n## Branch\n`dependabot/npm_and_yarn/ip-2.0.1`\n\n## Author\n@app/dependabot\n\n## Status\n\u26a0\ufe0f Closed (not merged)\n\n## PR Link\nhttps://github.com/Artcryption/frontend/pull/12"}


identifier: gh_issue_3736631171
source: github_issue
status: new
created_at: 2025-12-16 23:26:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3736631171", "title": "Standardise release tag format with 'v' prefix", "url": "https://github.com/Rackarr/Rackarr/issues/23", "user": "ggfevans", "user_url": "https://github.com/ggfevans", "repo": "Rackarr", "body_preview": "## Type\nProcess / Workflow\n\n## Component\nRelease Management\n\n## Severity\n\ud83d\udfe1 Medium\n\n## Description\nRelease tags were accidentally created without the conventional `v` prefix (e.g., `0.5.8` instead of `v0.5.8`). This has been manually corrected, but we should document the convention and consider automation to prevent future occurrences.\n\n## Current State\n\u2705 All tags now correctly use `v` prefix (manually fixed)\n\n## Prevention Options\n\n### Option A: Document convention only\n- Add tag format requirem", "created": "2025-12-16T22:55:08Z", "labels": ["ready", "chore", "size:small", "priority:low", "area:docs"], "context": "Standardise release tag format with 'v' prefix ## Type\nProcess / Workflow\n\n## Component\nRelease Management\n\n## Severity\n\ud83d\udfe1 Medium\n\n## Description\nRelease tags were accidentally created without the conventional `v` prefix (e.g., `0.5.8` instead of `"}


identifier: gh_issue_3736652919
source: github_issue
status: new
created_at: 2025-12-16 23:26:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3736652919", "title": "feat: Security scanning and provenance for generated manifests", "url": "https://github.com/ihsanmokhlisse/gitopsi/issues/29", "user": "ihsanmokhlisse", "user_url": "https://github.com/ihsanmokhlisse", "repo": "gitopsi", "body_preview": "## Problem\nGenerated manifests need to be:\n1. **Secure** - Follow security best practices, no vulnerabilities\n2. **Provable** - Prove where they came from (provenance)\n3. **Safe** - No code injection or malicious content\n4. **Compliant** - Meet security policies and standards\n\n## Proposed Solution\n\n### 1. Manifest Security Scanning\nIntegrate security scanners to validate generated manifests:\n\n| Tool | Purpose |\n|------|---------|\n| `checkov` | IaC security scanner, policy-as-code |\n| `trivy conf", "created": "2025-12-16T23:02:47Z", "labels": ["enhancement", "phase-2", "security"], "context": "feat: Security scanning and provenance for generated manifests ## Problem\nGenerated manifests need to be:\n1. **Secure** - Follow security best practices, no vulnerabilities\n2. **Provable** - Prove where they came from (provenance)\n3. **Safe** - No code injection "}


identifier: gh_issue_3736403992
source: github_issue
status: new
created_at: 2025-12-16 23:26:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3736403992", "title": "Issue #1: Routes API Authentication Method - SECURITY VULNERABILITY", "url": "https://github.com/actuallyrizzn/google-maps-sdk/issues/145", "user": "actuallyrizzn", "user_url": "https://github.com/actuallyrizzn", "repo": "google-maps-sdk", "body_preview": "# Issue #1: Routes API Authentication Method - SECURITY VULNERABILITY\r\n\r\n**Severity:** \ud83d\udd34 Critical  \r\n**Category:** Security  \r\n**Location:** `google_maps_sdk/routes.py:118`, `google_maps_sdk/base_client.py:91`\r\n\r\n## Issue Description\r\n\r\nRoutes API uses API key in query parameters (`?key=...`) instead of HTTP headers. Google's official documentation recommends using `X-Goog-Api-Key` header for Routes API for enhanced security.\r\n\r\n## Current Code\r\n\r\n```python\r\n# base_client.py line 91\r\nparams[\"key", "created": "2025-12-16T21:35:59Z", "labels": [], "context": "Issue #1: Routes API Authentication Method - SECURITY VULNERABILITY # Issue #1: Routes API Authentication Method - SECURITY VULNERABILITY\r\n\r\n**Severity:** \ud83d\udd34 Critical  \r\n**Category:** Security  \r\n**Location:** `google_maps_sdk/routes.py:118`, `google_maps_sdk/base_clie"}


identifier: gh_issue_3736649524
source: github_issue
status: new
created_at: 2025-12-16 23:38:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3736649524", "title": "x/vulndb: potential Go vuln in github.com/expr-lang/expr: GHSA-cfpf-hrx2-8rv6", "url": "https://github.com/golang/vulndb/issues/4245", "user": "GoVulnBot", "user_url": "https://github.com/GoVulnBot", "repo": "vulndb", "body_preview": "Advisory [GHSA-cfpf-hrx2-8rv6](https://github.com/advisories/GHSA-cfpf-hrx2-8rv6) references a vulnerability in the following Go modules:\n\n| Module |\n| - |\n| [github.com/expr-lang/expr](https://pkg.go.dev/github.com/expr-lang/expr) |\n\nDescription:\nSeveral builtin functions in Expr, including `flatten`, `min`, `max`, `mean`, and `median`, perform\nrecursive traversal over user-provided data structures without enforcing a maximum recursion depth.\n\nIf the evaluation environment contains **deeply nes", "created": "2025-12-16T23:01:25Z", "labels": ["NeedsTriage"], "context": "x/vulndb: potential Go vuln in github.com/expr-lang/expr: GHSA-cfpf-hrx2-8rv6 Advisory [GHSA-cfpf-hrx2-8rv6](https://github.com/advisories/GHSA-cfpf-hrx2-8rv6) references a vulnerability in the following Go modules:\n\n| Module |\n| - |\n| [github.com/expr-lang/expr](https://pkg.go"}


identifier: gh_issue_3736777795
source: github_issue
status: new
created_at: 2025-12-17 00:15:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3736777795", "title": "CVE-2025-37731 (Medium) detected in elasticsearch-7.9.3.jar", "url": "https://github.com/billmcchesney1/flow/issues/254", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "flow", "body_preview": "## CVE-2025-37731 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>elasticsearch-7.9.3.jar</b></summary>\n\n<p>Elasticsearch subproject :server</p>\n<p>Library home page: <a href=\"https://github.com/elastic/elasticsearch\">https://github.com/elastic/elasticsearch</a></p>\n<p>Path to dependency file: /pom.xml</p>\n<p>Path to vulnerable library: /home/wss-scanner/.m2/re", "created": "2025-12-17T00:02:51Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-37731 (Medium) detected in elasticsearch-7.9.3.jar ## CVE-2025-37731 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3736758382
source: github_issue
status: new
created_at: 2025-12-17 00:15:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3736758382", "title": "PR #461 \u2013 Merge staging to master - Complete component reorganization with fixes", "url": "https://github.com/Artcryption/development-tracker/issues/626", "user": "vandana88", "user_url": "https://github.com/vandana88", "repo": "development-tracker", "body_preview": "## PR\nPR #461\n\n## Date\n2025-11-14\n\n## Branch\n`merge/staging-to-master-20251113`\n\n## Author\n@vandana88\n\n## Status\n\u26a0\ufe0f Closed\n\n## PR Link\nhttps://github.com/Artcryption/frontend/pull/461\n\n---\n\n## Description\nSuccessfully merged staging branch into master, resolving 102 merge conflicts and fixing all build errors.\n\nMajor Changes:\n- Component reorganization: src/stories \u2192 src/components\n- Dependency upgrades: Next.js 15.5.4, React 19.2.0, Storybook 9.1.15\n- Fixed next/font SWC/Babel conflict\n- Fixed ", "created": "2025-12-16T23:53:27Z", "labels": ["closed", "frontend", "Storybook"], "context": "PR #461 \u2013 Merge staging to master - Complete component reorganization with fixes ## PR\nPR #461\n\n## Date\n2025-11-14\n\n## Branch\n`merge/staging-to-master-20251113`\n\n## Author\n@vandana88\n\n## Status\n\u26a0\ufe0f Closed\n\n## PR Link\nhttps://github.com/Artcryption/frontend/pull/461\n\n---\n\n## Descrip"}


identifier: gh_issue_3736817241
source: github_issue
status: new
created_at: 2025-12-17 00:28:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3736817241", "title": "urllib3-1.26.20-py2.py3-none-any.whl: 3 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/opensearch-project/skills-eval/issues/74", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "skills-eval", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>urllib3-1.26.20-py2.py3-none-any.whl</b></summary>\n\n<p>HTTP library with thread-safe connection pooling, file post, and more.</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/33/cf/8435d5a7159e2a9c83a95896ed596f68cf798005fe107cc655b5c5c14704/urllib3-1.26.20-py2.py3-none-any.whl\">https://files.pythonhosted.org/packages/3", "created": "2025-12-17T00:24:18Z", "labels": ["Mend: dependency security vulnerability", "untriaged"], "context": "urllib3-1.26.20-py2.py3-none-any.whl: 3 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>urllib3-1.26.20-py2.py3-none-any.whl</b></summa"}


identifier: gh_issue_3736782957
source: github_issue
status: new
created_at: 2025-12-17 00:28:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3736782957", "title": "commons-net-3.8.0.jar: 1 vulnerabilities (highest severity is: 6.5)", "url": "https://github.com/MendDemo-josh/ant/issues/9", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "ant", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>commons-net-3.8.0.jar</b></summary>\n\n<p>Apache Commons Net library contains a collection of network utilities and protocol implementations.\nSupported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois</p>\n<p>Library home page: <a href=\"https://www.apache.org/\">https://www.apache.org/</a></p>\n<p>Path to dependency fi", "created": "2025-12-17T00:05:29Z", "labels": ["Mend: dependency security vulnerability"], "context": "commons-net-3.8.0.jar: 1 vulnerabilities (highest severity is: 6.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>commons-net-3.8.0.jar</b></summary>\n\n<p>Apache "}


identifier: gh_issue_3736764904
source: github_issue
status: new
created_at: 2025-12-17 00:28:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3736764904", "title": "CVE in clipping service's `gunicorn` version", "url": "https://github.com/natcap/data.naturalcapitalproject.stanford.edu/issues/196", "user": "phargogh", "user_url": "https://github.com/phargogh", "repo": "data.naturalcapitalproject.stanford.edu", "body_preview": "Looking through Wiz reports, I found a vulnerability in the `gunicorn` version we're using.\n\nFix and redeploy", "created": "2025-12-16T23:57:06Z", "labels": ["in progress", "critical"], "context": "CVE in clipping service's `gunicorn` version Looking through Wiz reports, I found a vulnerability in the `gunicorn` version we're using.\n\nFix and redeploy"}


identifier: gh_issue_3736752971
source: github_issue
status: new
created_at: 2025-12-17 00:28:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3736752971", "title": "PR #382 \u2013 fix(codacy): resolve CSS linting issues and axios vulnerability", "url": "https://github.com/Artcryption/development-tracker/issues/547", "user": "vandana88", "user_url": "https://github.com/vandana88", "repo": "development-tracker", "body_preview": "**Branch:** `fix/codacy-issues`\n**PR:** https://github.com/Artcryption/frontend/pull/382\n\n---\n\nResolves Codacy CSS linting violations and axios security vulnerability CVE-2023-45857. Restores comprehensive CI validation that was previously removed due to build hangs.\r\n\r\nCSS Linting Fixes:\r\n- src/styles/globals.css:249,251,314 - Added empty lines before comments (stylelint comment-empty-line-before rule)\r\n- src/styles/globals.css:318 - Changed text-rendering from optimizeLegibility to optimizeleg", "created": "2025-12-16T23:51:08Z", "labels": ["bug", "Feed", "Auth", "Assets", "frontend", "Storybook"], "context": "PR #382 \u2013 fix(codacy): resolve CSS linting issues and axios vulnerability **Branch:** `fix/codacy-issues`\n**PR:** https://github.com/Artcryption/frontend/pull/382\n\n---\n\nResolves Codacy CSS linting violations and axios security vulnerability CVE-2023-45857. Restores comprehe"}


identifier: gh_issue_3736739534
source: github_issue
status: new
created_at: 2025-12-17 01:05:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3736739534", "title": "[plan] Create secure workflow template with best practices", "url": "https://github.com/githubnext/gh-aw/issues/6676", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "gh-aw", "body_preview": "## Objective\n\nCreate a reusable workflow template that incorporates security best practices to prevent future security issues in new workflows.\n\n## Context\n\nThe static analysis revealed patterns that affect multiple workflows. A secure template will help developers create new workflows with security built-in from the start.\n\n## Template Features\n\nThe template should include:\n\n1. **Explicit permissions block** with principle of least privilege\n2. **Verified Copilot CLI installation** (if applicab", "created": "2025-12-16T23:45:12Z", "labels": ["documentation", "good first issue", "security", "ai-generated", "plan"], "context": "[plan] Create secure workflow template with best practices ## Objective\n\nCreate a reusable workflow template that incorporates security best practices to prevent future security issues in new workflows.\n\n## Context\n\nThe static analysis revealed patterns that "}


identifier: gh_issue_3736739448
source: github_issue
status: new
created_at: 2025-12-17 01:05:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3736739448", "title": "[plan] Add SHA256 checksum verification for Copilot CLI installer script", "url": "https://github.com/githubnext/gh-aw/issues/6674", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "gh-aw", "body_preview": "## Objective\n\nImplement integrity verification for the Copilot CLI installation script to prevent supply chain attacks. Currently, 20+ workflows download and execute an installer script without checksum verification.\n\n## Context\n\nPoutine identified `unverified_script_exec` in multiple workflows. The current pattern executes a downloaded script with `sudo` privileges without any integrity checks:\n\n```yaml\n- name: Install GitHub Copilot CLI\n  run: |\n    export VERSION=0.0.369 && curl -fsSL gh.io/c", "created": "2025-12-16T23:45:08Z", "labels": ["security", "ai-generated", "plan", "supply-chain"], "context": "[plan] Add SHA256 checksum verification for Copilot CLI installer script ## Objective\n\nImplement integrity verification for the Copilot CLI installation script to prevent supply chain attacks. Currently, 20+ workflows download and execute an installer script without checks"}


identifier: gh_issue_3736739372
source: github_issue
status: new
created_at: 2025-12-17 01:05:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3736739372", "title": "[plan] Security remediation: Fix static analysis findings from December 16, 2024", "url": "https://github.com/githubnext/gh-aw/issues/6672", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "gh-aw", "body_preview": "## Overview\n\nThis tracking issue covers the remediation of security findings identified in the December 16, 2024 static analysis scan using zizmor, poutine, and actionlint.\n\n**Source**: Discussion #6670\n\n## Summary of Findings\n\n- **27 total findings** from Poutine (supply chain analysis)\n- **16 workflows affected** (89% of scanned workflows)\n- **7 workflows** with default permissions on risky events (Warning severity)\n- **20+ workflows** with unverified script execution (Info severity, but mediu", "created": "2025-12-16T23:45:06Z", "labels": ["enhancement", "security", "ai-generated", "plan"], "context": "[plan] Security remediation: Fix static analysis findings from December 16, 2024 ## Overview\n\nThis tracking issue covers the remediation of security findings identified in the December 16, 2024 static analysis scan using zizmor, poutine, and actionlint.\n\n**Source**: Discussion #66"}


identifier: gh_issue_3736758158
source: github_issue
status: new
created_at: 2025-12-17 01:05:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3736758158", "title": "PR #456 \u2013 fix: Phase 1 Security and Type Improvements", "url": "https://github.com/Artcryption/development-tracker/issues/621", "user": "vandana88", "user_url": "https://github.com/vandana88", "repo": "development-tracker", "body_preview": "**Branch:** `fix/security-and-type-improvements`\n**PR:** https://github.com/Artcryption/frontend/pull/456\n\n---\n\n**Date:** 2025-11-08\n**Repository:** `Artcryption/frontend`\n**Author:** @vandana88\n**Reviewers:** @kishan-artcryption\n**Status:** \u2705 Merged\n**Merged To:** `main`\n\n---\n\n## Summary\n\nPhase 1 quick wins from the code quality improvement plan: security updates, TypeScript improvements, and dependency updates.\n\n## Changes\n\n### Security Updates\n- **next-auth**: 4.24.7 \u2192 4.24.13 (fixes security", "created": "2025-12-16T23:53:18Z", "labels": ["bug", "Auth", "frontend", "Storybook"], "context": "PR #456 \u2013 fix: Phase 1 Security and Type Improvements **Branch:** `fix/security-and-type-improvements`\n**PR:** https://github.com/Artcryption/frontend/pull/456\n\n---\n\n**Date:** 2025-11-08\n**Repository:** `Artcryption/frontend`\n**Author:** @vandana88\n**Rev"}


identifier: gh_issue_3736943528
source: github_issue
status: new
created_at: 2025-12-17 01:29:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3736943528", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Peter-Willis_1217_012736_gh_gw1/issues/2", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Peter-Willis_1217_012736_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-17T01:28:59Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3736943512
source: github_issue
status: new
created_at: 2025-12-17 01:29:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3736943512", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Peter-Willis_1217_012736_gh_gw1/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Peter-Willis_1217_012736_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | -----", "created": "2025-12-17T01:28:58Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3736971235
source: github_issue
status: new
created_at: 2025-12-17 01:41:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3736971235", "title": "Cybersecurity Report - CHT - 2025 - Full", "url": "https://github.com/cweOO1/Quantum/issues/29", "user": "cweOO1", "user_url": "https://github.com/cweOO1", "repo": "Quantum", "body_preview": "Clear Hat Tech \u2013 Comprehensive Cybersecurity Report (December 2025)\nAuthor: Chris Arthur, IT Specialist, CHT Founder, ISTE\nCo-Author: Copilot AI\n\nExecutive Summary\nThis report consolidates six major cybersecurity investigations into a layered framework, reflecting systemic vulnerabilities across operating systems, browsers, software distribution platforms, and social ecosystems. The findings confirm active exploitation of zero-days, malware campaigns, and sovereignty breaches. The threats are no", "created": "2025-12-17T01:39:00Z", "labels": [], "context": "Cybersecurity Report - CHT - 2025 - Full Clear Hat Tech \u2013 Comprehensive Cybersecurity Report (December 2025)\nAuthor: Chris Arthur, IT Specialist, CHT Founder, ISTE\nCo-Author: Copilot AI\n\nExecutive Summary\nThis report consolidates six major c"}


identifier: gh_issue_3736952515
source: github_issue
status: new
created_at: 2025-12-17 01:41:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3736952515", "title": "[CRITICAL] Sprint 15: Security Vulnerabilities (XSS, CSRF, Input Validation)", "url": "https://github.com/dev-brewery/koinon-rms/issues/262", "user": "dev-brewery", "user_url": "https://github.com/dev-brewery", "repo": "koinon-rms", "body_preview": "## Summary\n\n**BLOCKER for Sprint 15** - Three critical security vulnerabilities:\n1. **Backend:** Insufficient input validation allows potential injection\n2. **Frontend:** XSS vulnerability in search input\n3. **Frontend:** CSRF protection missing for mutation endpoints\n\n## Severity: CRITICAL (P0-blocker)\n**OWASP:** A03:2021 - Injection, A05:2021 - Security Misconfiguration\n**Impact:** Session hijacking, unauthorized data modifications, injection attacks\n\n---\n\n## Backend C-5: Insufficient Input Va", "created": "2025-12-17T01:32:09Z", "labels": ["P0-ship-blocker", "security", "frontend", "backend"], "context": "[CRITICAL] Sprint 15: Security Vulnerabilities (XSS, CSRF, Input Validation) ## Summary\n\n**BLOCKER for Sprint 15** - Three critical security vulnerabilities:\n1. **Backend:** Insufficient input validation allows potential injection\n2. **Frontend:** XSS vulnerability in search i"}


identifier: gh_issue_3737005315
source: github_issue
status: new
created_at: 2025-12-17 01:54:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3737005315", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Teresa-Fernandez_1217_015222_gh_gw1/issues/6", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Teresa-Fernandez_1217_015222_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-17T01:54:13Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3737005299
source: github_issue
status: new
created_at: 2025-12-17 01:54:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3737005299", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Teresa-Fernandez_1217_015222_gh_gw1/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Teresa-Fernandez_1217_015222_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -----", "created": "2025-12-17T01:54:12Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3737004773
source: github_issue
status: new
created_at: 2025-12-17 01:54:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3737004773", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Maria-Peters_1217_015132_gh_gw2/issues/6", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Maria-Peters_1217_015132_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-17T01:53:51Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3737004760
source: github_issue
status: new
created_at: 2025-12-17 01:54:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3737004760", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Maria-Peters_1217_015132_gh_gw2/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Maria-Peters_1217_015132_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | -----", "created": "2025-12-17T01:53:50Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3736966091
source: github_issue
status: new
created_at: 2025-12-17 01:54:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3736966091", "title": "4.3.0 clean install - nordvpnd.service doesn't start", "url": "https://github.com/NordSecurity/nordvpn-linux/issues/1276", "user": "ph202107", "user_url": "https://github.com/ph202107", "repo": "nordvpn-linux", "body_preview": "Hi!  I'm using Linux Mint 21.3 on bare metal.\n\nWhen I install nordvpn version 4.3.0 over 4.2.3, everything works fine.  If I first purge 4.2.3 before installing 4.3.0 then the nordvpnd.service fails to start.   I have not yet tested on a fresh OS install.  eg.\n```\n\n~ $ nordvpn version\nNordVPN Version 4.2.3\n\n~ $ sudo apt autoremove --purge nordvpn -y       \nReading package lists... Done\nBuilding dependency tree... Done\nReading state information... Done\nThe following packages will be REMOVED:\n  no", "created": "2025-12-17T01:37:01Z", "labels": [], "context": "4.3.0 clean install - nordvpnd.service doesn't start Hi!  I'm using Linux Mint 21.3 on bare metal.\n\nWhen I install nordvpn version 4.3.0 over 4.2.3, everything works fine.  If I first purge 4.2.3 before installing 4.3.0 then the nordvpnd.service fails t"}


identifier: gh_issue_3736965674
source: github_issue
status: new
created_at: 2025-12-17 01:54:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3736965674", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-17", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/334", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (149)\n1. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n2. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:439`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n3. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:450`", "created": "2025-12-17T01:36:45Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-17 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (149)\n1. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without "}


identifier: gh_issue_3736759875
source: github_issue
status: new
created_at: 2025-12-17 01:54:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3736759875", "title": "Fix api", "url": "https://github.com/jeobran69367/Gestion_apparts/issues/35", "user": "jeobran69367", "user_url": "https://github.com/jeobran69367", "repo": "Gestion_apparts", "body_preview": "Le front (web) a \u00e9t\u00e9 d\u00e9ploy\u00e9 mais pas le back (api ) : corrige cette erreur : \n\n- Dans railway : postgres : scheduling build on Metal builder \"builder-xhjzts\"\n[snapshot] received sha256:9fa12939f0a9f3cfb9509d66dcefe70e4746a48310d94cd64f7c82020b36a578 md5:8d91950d283c669b46f546100436a64b\nreceiving snapshot\n323.8 KB\n601ms\nconfig-as-code path set as '/railway.toml'\nfound 'nixpacks.toml' at 'nixpacks.toml'\nfound config-as-code file at 'railway.toml'\nconfig-as-code path sanitized to 'railway.toml'\nan", "created": "2025-12-16T23:54:08Z", "labels": [], "context": "Fix api Le front (web) a \u00e9t\u00e9 d\u00e9ploy\u00e9 mais pas le back (api ) : corrige cette erreur : \n\n- Dans railway : postgres : scheduling build on Metal builder \"builder-xhjzts\"\n[snapshot] received sha256:9fa12939f0a9f3"}


identifier: gh_issue_3736759303
source: github_issue
status: new
created_at: 2025-12-17 01:54:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3736759303", "title": "PR #474 \u2013 fix: performance optimization - npm audit and image guide", "url": "https://github.com/Artcryption/development-tracker/issues/639", "user": "vandana88", "user_url": "https://github.com/vandana88", "repo": "development-tracker", "body_preview": "**Branch:** `fix/performance-optimization`\n**PR:** https://github.com/Artcryption/frontend/pull/474\n\n---\n\n**Date:** 2025-11-20\n**Repository:** `Artcryption/frontend`\n**Author:** @vandana88\n**Reviewers:** @kishan-artcryption\n**Status:** Merged\n**Merged To:** `main`\n\n---\n\n## Performance Optimization - Automated Image Optimization & Code Quality\n\nThis PR includes npm security fixes, **automated image optimization**, and code quality improvements.", "created": "2025-12-16T23:53:49Z", "labels": ["bug", "frontend", "Storybook"], "context": "PR #474 \u2013 fix: performance optimization - npm audit and image guide **Branch:** `fix/performance-optimization`\n**PR:** https://github.com/Artcryption/frontend/pull/474\n\n---\n\n**Date:** 2025-11-20\n**Repository:** `Artcryption/frontend`\n**Author:** @vandana88\n**Reviewers"}


identifier: gh_issue_3736755599
source: github_issue
status: new
created_at: 2025-12-17 01:54:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3736755599", "title": "PR #422 \u2013 fix(ui): standardize Agents/Curators labels across Asset Management", "url": "https://github.com/Artcryption/development-tracker/issues/587", "user": "vandana88", "user_url": "https://github.com/vandana88", "repo": "development-tracker", "body_preview": "**Branch:** `fix/ui-design-improvements`\n**PR:** https://github.com/Artcryption/frontend/pull/422\n\n---\n\n**Date:** 2025-10-19\n**Repository:** `Artcryption/frontend`\n**Author:** @vandana88\n**Reviewers:** @kishan-artcryption\n**Status:** Merged\n**Merged To:** `main`\n\n---\n\n## Summary\n\nStandardize terminology from inconsistent variations to consistent \"Agents/Curators\" across Asset Management UI.\n\n**Changes:**\n- Fixed grammatical error: \"Agents(s)\" \u2192 \"Agents/Curators\"\n- Standardized notation: \"Agents/", "created": "2025-12-16T23:52:17Z", "labels": ["bug", "Assets", "frontend", "Storybook"], "context": "PR #422 \u2013 fix(ui): standardize Agents/Curators labels across Asset Management **Branch:** `fix/ui-design-improvements`\n**PR:** https://github.com/Artcryption/frontend/pull/422\n\n---\n\n**Date:** 2025-10-19\n**Repository:** `Artcryption/frontend`\n**Author:** @vandana88\n**Reviewers:*"}


identifier: gh_issue_3737029251
source: github_issue
status: new
created_at: 2025-12-17 02:06:06
data:
  {"source": "github_issue", "identifier": "gh_issue_3737029251", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Carl-Myers_1217_020150_gh_gw2/issues/6", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Carl-Myers_1217_020150_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.", "created": "2025-12-17T02:03:50Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3737029239
source: github_issue
status: new
created_at: 2025-12-17 02:06:06
data:
  {"source": "github_issue", "identifier": "gh_issue_3737029239", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Carl-Myers_1217_020150_gh_gw2/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Carl-Myers_1217_020150_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.io/v", "created": "2025-12-17T02:03:49Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3737040135
source: github_issue
status: new
created_at: 2025-12-17 02:19:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3737040135", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Sheri-Evans_1217_020213_gh_gw1/issues/6", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Sheri-Evans_1217_020213_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.", "created": "2025-12-17T02:09:05Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3737040121
source: github_issue
status: new
created_at: 2025-12-17 02:19:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3737040121", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Sheri-Evans_1217_020213_gh_gw1/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Sheri-Evans_1217_020213_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.io/v", "created": "2025-12-17T02:09:05Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3736783314
source: github_issue
status: new
created_at: 2025-12-17 02:31:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3736783314", "title": "Dependency Dashboard", "url": "https://github.com/rhtap-perf-test/konflux-probe-test-templates/issues/16", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "konflux-probe-test-templates", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Repository Problems\n\nRenovate tried to run on this repository, but found these problems.\n\n - \u26a0\ufe0f WARN: Found renovate config warnings\n - \u26a0\ufe0f WARN: Cannot access vulnerability alerts", "created": "2025-12-17T00:05:43Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - ["}


identifier: gh_issue_3737103554
source: github_issue
status: new
created_at: 2025-12-17 02:57:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3737103554", "title": "Parser bugs and missing format support discovered during test sample validation", "url": "https://github.com/teaguesterling/duck_hunt/issues/17", "user": "teaguesterling", "user_url": "https://github.com/teaguesterling", "repo": "duck_hunt", "body_preview": "## Summary\n\nDuring creation and validation of 95 test sample files, several parser bugs and missing format support were discovered. This issue tracks all findings prioritized by severity.\n\n## Priority 1: Critical Parser Bugs (Data Loss)\n\nThese parsers exist but fail to extract most/all events from valid input:\n\n### P1.1: `pylint_text` parser only extracts summary line\n- **File**: `test/samples/linting_tools/pylint_output.txt`\n- **Expected**: 17 individual linting issues\n- **Actual**: 1 event (on", "created": "2025-12-17T02:42:14Z", "labels": [], "context": "Parser bugs and missing format support discovered during test sample validation ## Summary\n\nDuring creation and validation of 95 test sample files, several parser bugs and missing format support were discovered. This issue tracks all findings prioritized by severity.\n\n## Priority"}


identifier: gh_issue_3737091387
source: github_issue
status: new
created_at: 2025-12-17 02:57:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3737091387", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/keypress-notifications/issues/44", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "keypress-notifications", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (16)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-17T02:35:06Z", "labels": ["automated", "security", "critical"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3737090751
source: github_issue
status: new
created_at: 2025-12-17 02:57:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3737090751", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/file-insights/issues/124", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "file-insights", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (16)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-17T02:34:42Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3737088681
source: github_issue
status: new
created_at: 2025-12-17 02:57:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3737088681", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/additional-contexts-menu/issues/105", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "additional-contexts-menu", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (16)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-17T02:33:47Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3737094254
source: github_issue
status: new
created_at: 2025-12-17 03:10:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3737094254", "title": "CVE-2025-67735: io.netty:netty-codec-http:jar:4.2.7.Final:provided", "url": "https://github.com/exasol/spark-connector-common-java/issues/77", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "spark-connector-common-java", "body_preview": "## Summary\nNetty is an asynchronous, event-driven network application framework. In versions prior to 4.1.129.Final and 4.2.8.Final, the `io.netty.handler.codec.http.HttpRequestEncoder` has a CRLF injection with the request URI when constructing a request. This leads to request smuggling when `HttpRequestEncoder` is used without proper sanitization of the URI. Any application / framework using `HttpRequestEncoder` can be subject to be abused to perform request smuggling using CRLF injection. Ver", "created": "2025-12-17T02:36:17Z", "labels": ["security"], "context": "CVE-2025-67735: io.netty:netty-codec-http:jar:4.2.7.Final:provided ## Summary\nNetty is an asynchronous, event-driven network application framework. In versions prior to 4.1.129.Final and 4.2.8.Final, the `io.netty.handler.codec.http.HttpRequestEncoder` has a CRLF inj"}


identifier: gh_issue_3737170130
source: github_issue
status: new
created_at: 2025-12-17 03:23:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3737170130", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-17", "url": "https://github.com/chainreactors/picker/issues/1085", "user": "chainreactorbot", "user_url": "https://github.com/chainreactorbot", "repo": "picker", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-17\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-16 Review](http://www.sec-wiki.com/?2025-12-16)\n- paper - Last paper\n  - [ ] [\u73b0\u4ee3\u8f6f\u4ef6\u5f00\u53d1-AI \u7f16\u7a0b\u5b89\u5168](https://paper.seebug.org/3431/)\n- \u5148\u77e5\u5b89\u5168\u6280\u672f\u793e\u533a\n  - [ ] [\u5fae\u4fe1\u5185\u7f6e\u6d4f\u89c8\u5668\u6e17\u900f\u6d4b\u8bd5\u4e2d\u7ed5\u8fc7\u9650\u5236\u7684\u591a\u79cd\u8c03\u8bd5\u65b9\u6848](https://xz.aliyun.com/news/90853)\n  - [ ] [2025\u9e4f\u57ce\u676f\u521d\u8d5b\u4e24\u9053pwn](https://xz.aliyun.com/news/90852)\n- Private Feed for M09Ic\n  - [ ] [pydantic released v1.34.0 at pydantic/pydantic-ai](https://github.com/pydantic/pydantic-ai/releases/tag/v1.34.0)\n  - [ ] [bolucat relea", "created": "2025-12-17T03:21:44Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-17 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-17\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-16 Review](http://www.sec-wiki.com/?2025-12-16)\n- paper - Last paper\n  - [ ] [\u73b0\u4ee3\u8f6f\u4ef6\u5f00\u53d1-AI \u7f16\u7a0b\u5b89\u5168](https://paper.seebug.org/3431/)\n- \u5148\u77e5\u5b89\u5168\u6280"}


identifier: gh_issue_3737169186
source: github_issue
status: new
created_at: 2025-12-17 03:23:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3737169186", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-17", "url": "https://github.com/MM0x02/RSS-Push/issues/354", "user": "MM0x02", "user_url": "https://github.com/MM0x02", "repo": "RSS-Push", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-17\uff09\n\n- \u5947\u5b89\u4fe1\u653b\u9632\u793e\u533a\n  - [ ] [CVE-2025-8110 0day \u7ed5\u8fc7\u5206\u6790\u4e0e\u590d\u73b0](https://forum.butian.net/share/4680)\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-16 Review](http://www.sec-wiki.com/?2025-12-16)\n- \u5148\u77e5\u5b89\u5168\u6280\u672f\u793e\u533a\n  - [ ] [\u5fae\u4fe1\u5185\u7f6e\u6d4f\u89c8\u5668\u6e17\u900f\u6d4b\u8bd5\u4e2d\u7ed5\u8fc7\u9650\u5236\u7684\u591a\u79cd\u8c03\u8bd5\u65b9\u6848](https://xz.aliyun.com/news/90853)\n  - [ ] [2025\u9e4f\u57ce\u676f\u521d\u8d5b\u4e24\u9053pwn](https://xz.aliyun.com/news/90852)\n- paper - Last paper\n  - [ ] [\u73b0\u4ee3\u8f6f\u4ef6\u5f00\u53d1-AI \u7f16\u7a0b\u5b89\u5168](https://paper.seebug.org/3431/)\n- Private Feed for M09Ic\n  - [ ] [pydantic released v1.34.0 at pydantic/pydantic-ai](", "created": "2025-12-17T03:21:09Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-17 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-17\uff09\n\n- \u5947\u5b89\u4fe1\u653b\u9632\u793e\u533a\n  - [ ] [CVE-2025-8110 0day \u7ed5\u8fc7\u5206\u6790\u4e0e\u590d\u73b0](https://forum.butian.net/share/4680)\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-16 Review](http://www.sec-wiki.com/?2025-12-16)\n-"}


identifier: gh_issue_3737166953
source: github_issue
status: new
created_at: 2025-12-17 03:23:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3737166953", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-17", "url": "https://github.com/ruohong2018/ruohong2018.github.io/issues/1041", "user": "ruohong2018", "user_url": "https://github.com/ruohong2018", "repo": "ruohong2018.github.io", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-17\uff09\n\n- SecWiki News\n  - [SecWiki News 2025-12-16 Review](http://www.sec-wiki.com/?2025-12-16)\n- LevelBlue Blog\n  - [LevelBlue and Tenable Introduce Unlimited Enterprise-Grade Vulnerability Scanning in USM Platform at No Additional Cost](https://levelblue.com/blogs/levelblue-blog/levelblue-and-tenable-introduce-unlimited-enterprise-grade-vulnerability-scanning-in-usm-platform-at-no-additional-cost/)\n- Tenable Blog\n  - [7 Questions to Unmask \u201cSingle Agent\u201d Exposure Management Mone", "created": "2025-12-17T03:19:48Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-17 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-17\uff09\n\n- SecWiki News\n  - [SecWiki News 2025-12-16 Review](http://www.sec-wiki.com/?2025-12-16)\n- LevelBlue Blog\n  - [LevelBlue and Tenable Introduce Unlimited Enterprise-Grade Vulnerab"}


identifier: gh_issue_3737164217
source: github_issue
status: new
created_at: 2025-12-17 03:23:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3737164217", "title": "[Security][Critical] Path Traversal Vulnerability in File Upload", "url": "https://github.com/charlesmsiegel/tg/issues/1095", "user": "charlesmsiegel", "user_url": "https://github.com/charlesmsiegel", "repo": "tg", "body_preview": "## Description\nThe `filepath()` function used for file uploads does not validate `instance.name`, allowing path traversal attacks.\n\n## Location\n- **File:** `core/utils.py`\n- **Function:** `filepath()`\n\n## Problematic Code\n```python\ndef filepath(instance, filename):\n    s = str(instance.__class__).split(\" \")[-1][:-1][1:-1]\n    s = \"/\".join([x for x in s.split(\".\") if x != \"models\"])\n    s += \"/\" + instance.name  # VULNERABLE - No validation\n    s += \".\" + filename.split(\".\")[-1]\n    return s.lowe", "created": "2025-12-17T03:18:05Z", "labels": ["bug", "critical", "security"], "context": "[Security][Critical] Path Traversal Vulnerability in File Upload ## Description\nThe `filepath()` function used for file uploads does not validate `instance.name`, allowing path traversal attacks.\n\n## Location\n- **File:** `core/utils.py`\n- **Function:** `filepath()`"}


identifier: gh_issue_3737164159
source: github_issue
status: new
created_at: 2025-12-17 03:23:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3737164159", "title": "[Security][Critical] XSS Vulnerability in WebSocket Post Rendering", "url": "https://github.com/charlesmsiegel/tg/issues/1094", "user": "charlesmsiegel", "user_url": "https://github.com/charlesmsiegel", "repo": "tg", "body_preview": "## Description\nUnescaped user input is directly inserted into innerHTML in WebSocket message handling, allowing stored XSS attacks.\n\n## Location\n- **File:** `game/templates/game/scene/detail.html`\n- **Line:** 332\n\n## Problematic Code\n```javascript\npostDiv.innerHTML = `\n    <p class=\"post mb-0\" style=\"line-height: 1.6;\">\n        <strong ${highlightClass}>\n            <a href=\"${escapeHtml(post.character_url)}\">${escapeHtml(post.display_name)}</a>\n        </strong>: ${post.message}\n    </p>\n`;\n```", "created": "2025-12-17T03:18:03Z", "labels": ["bug", "critical", "security"], "context": "[Security][Critical] XSS Vulnerability in WebSocket Post Rendering ## Description\nUnescaped user input is directly inserted into innerHTML in WebSocket message handling, allowing stored XSS attacks.\n\n## Location\n- **File:** `game/templates/game/scene/detail.html`\n- *"}


identifier: gh_issue_3737180899
source: github_issue
status: new
created_at: 2025-12-17 03:34:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3737180899", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/biep-zopa/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @biep-zopa! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I", "created": "2025-12-17T03:27:15Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @biep-zopa! Welcome to "}


identifier: gh_issue_3737170506
source: github_issue
status: new
created_at: 2025-12-17 03:34:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3737170506", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/ZhikaiCui/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @ZhikaiCui! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I", "created": "2025-12-17T03:21:58Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @ZhikaiCui! Welcome to "}


identifier: gh_issue_3737169958
source: github_issue
status: new
created_at: 2025-12-17 03:34:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3737169958", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/esther-teh/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @esther-teh! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, ", "created": "2025-12-17T03:21:37Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @esther-teh! Welcome to"}


identifier: gh_issue_3737169391
source: github_issue
status: new
created_at: 2025-12-17 03:34:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3737169391", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/helenahuigh/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @helenahuigh! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step,", "created": "2025-12-17T03:21:16Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @helenahuigh! Welcome t"}


identifier: gh_issue_3737085199
source: github_issue
status: new
created_at: 2025-12-17 03:34:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3737085199", "title": "Dependabot Alert #2: glib \u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066", "url": "https://github.com/naofumi-fujii/banzai/issues/25", "user": "naofumi-fujii", "user_url": "https://github.com/naofumi-fujii", "repo": "banzai", "body_preview": "## \u6982\u8981\n\nDependabot \u304c `glib` \u30af\u30ec\u30fc\u30c8\u306e\u8106\u5f31\u6027\u3092\u691c\u51fa\u3057\u307e\u3057\u305f\u3002\n\n- **\u30a2\u30e9\u30fc\u30c8**: https://github.com/naofumi-fujii/banzai/security/dependabot/2\n- **\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30d0\u30fc\u30b8\u30e7\u30f3**: 0.15.0 \u301c 0.20.0 \u672a\u6e80\n- **\u73fe\u5728\u306e\u30d0\u30fc\u30b8\u30e7\u30f3**: 0.18.5\n- **\u4fee\u6b63\u30d0\u30fc\u30b8\u30e7\u30f3**: 0.20.0\n- **\u6df1\u523b\u5ea6**: Medium\n\n## \u8106\u5f31\u6027\u306e\u5185\u5bb9\n\n`VariantStrIter::impl_get` \u95a2\u6570\u306b\u304a\u3051\u308b unsoundness \u306e\u554f\u984c\u3002\u4e0d\u6b63\u306a\u30dd\u30a4\u30f3\u30bf\u306e\u6271\u3044\u306b\u3088\u308a\u3001\u6700\u8fd1\u306e Rust \u30b3\u30f3\u30d1\u30a4\u30e9\u3067\u306f\u6700\u9069\u5316\u30d3\u30eb\u30c9\u6642\u306b NULL \u30dd\u30a4\u30f3\u30bf\u53c2\u7167\u306b\u3088\u308b\u30af\u30e9\u30c3\u30b7\u30e5\u304c\u767a\u751f\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\n\n\u53c2\u7167: https://rustsec.org/advisories/RUSTSEC-2024-0429.html\n\n## \u4f9d\u5b58\u95a2\u4fc2\n\n`glib` \u306f Tauri \u306e\u9593\u63a5\u7684\u306a\u4f9d\u5b58\u95a2\u4fc2\uff1a\n\n```\ntauri \u2192 muda/tao \u2192 gtk \u2192 atk \u2192 glib\n```\n\n## \u5bfe\u51e6\u65b9", "created": "2025-12-17T02:31:54Z", "labels": [], "context": "Dependabot Alert #2: glib \u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066 ## \u6982\u8981\n\nDependabot \u304c `glib` \u30af\u30ec\u30fc\u30c8\u306e\u8106\u5f31\u6027\u3092\u691c\u51fa\u3057\u307e\u3057\u305f\u3002\n\n- **\u30a2\u30e9\u30fc\u30c8**: https://github.com/naofumi-fujii/banzai/security/dependabot/2\n- **\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30d0\u30fc\u30b8\u30e7\u30f3**: 0.15.0 \u301c 0.20.0 \u672a\u6e80\n- **\u73fe\u5728\u306e\u30d0\u30fc\u30b8\u30e7\u30f3**: 0.18.5\n- **\u4fee\u6b63\u30d0\u30fc\u30b8\u30e7\u30f3**: 0.20."}


identifier: gh_issue_3737176935
source: github_issue
status: new
created_at: 2025-12-17 03:34:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3737176935", "title": "[Bug]: Possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start", "url": "https://github.com/kendryte/k230_sdk/issues/111", "user": "tlnguyen-smu", "user_url": "https://github.com/tlnguyen-smu", "repo": "k230_sdk", "body_preview": "### What happened\n\nA potential security vulnerability in mwifiex_cmd_802_11_ad_hoc_start that was cloned from https://github.com/torvalds/linux but did not receive the security patch.\n\n### Details:\nAffected Function: mwifiex_cmd_802_11_ad_hoc_start() in src/little/linux/drivers/net/wireless/marvell/mwifiex/join.c\nOriginal Fix: https://github.com/torvalds/linux/commit/5c455c5ab332773464d02ba17015acdca198f03d\n\n### References:\n- https://github.com/torvalds/linux/commit/5c455c5ab332773464d02ba17015a", "created": "2025-12-17T03:25:16Z", "labels": ["bug"], "context": "[Bug]: Possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start ### What happened\n\nA potential security vulnerability in mwifiex_cmd_802_11_ad_hoc_start that was cloned from https://github.com/torvalds/linux but did not receive the security patch.\n\n### Details:\nAf"}


identifier: gh_issue_3737173596
source: github_issue
status: new
created_at: 2025-12-17 03:34:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3737173596", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-17", "url": "https://github.com/MagicTooooools/picker/issues/42", "user": "allinu", "user_url": "https://github.com/allinu", "repo": "picker", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-17\uff09\n\n- Private Feed for M09Ic\n  - [ ] [pydantic released v1.34.0 at pydantic/pydantic-ai](https://github.com/pydantic/pydantic-ai/releases/tag/v1.34.0)\n  - [ ] [bolucat released 202512161939 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/202512161939)\n  - [ ] [OpenAEV-Platform released 2.0.9 at OpenAEV-Platform/openaev](https://github.com/OpenAEV-Platform/openaev/releases/tag/2.0.9)\n  - [ ] [ReaJason released v2.4.1 at ReaJason/MemShellParty](https://github.", "created": "2025-12-17T03:23:43Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-17 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-17\uff09\n\n- Private Feed for M09Ic\n  - [ ] [pydantic released v1.34.0 at pydantic/pydantic-ai](https://github.com/pydantic/pydantic-ai/releases/tag/v1.34.0)\n  - [ ] [bolucat released 20251"}


identifier: gh_issue_3737130125
source: github_issue
status: new
created_at: 2025-12-17 03:47:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3737130125", "title": "Latest 15 Papers - December 17, 2025", "url": "https://github.com/Xander-C/DailyArXiv/issues/272", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "DailyArXiv", "body_preview": "**Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Confidential Computing\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[Confidential, Attestable, and Efficient Inter-CVM Communication with Arm CCA](https://arxiv.org/abs/2512.01594v2)** | 2025-12-02 |  |\n| **[Confidential Prompting: Privacy-preserving LLM Inference on Cloud](https://arxiv.org/abs/2409.19134v5)** | 2025-11-19 |  |\n| **[A Workflow f", "created": "2025-12-17T02:58:39Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 17, 2025 **Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Confidential Computing\n| **Title** | **Date** | **Comment** |\n| --"}


identifier: gh_issue_3737205751
source: github_issue
status: new
created_at: 2025-12-17 03:47:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3737205751", "title": "markdownlint-0.30.67.tgz: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/storm-software/storm-ops/issues/870", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "storm-ops", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>markdownlint-0.30.67.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/storm-software/storm-ops/commit/6fd02ad1d5838301f1883c58860975a88700c770\">6fd02ad1d5838301f1883c58860975a88700c770</a></p></details>\n\n## Vulnerab", "created": "2025-12-17T03:40:46Z", "labels": ["Mend: dependency security vulnerability"], "context": "markdownlint-0.30.67.tgz: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>markdownlint-0.30.67.tgz</b></summary>\n\n<p></p>"}


identifier: gh_issue_3737205680
source: github_issue
status: new
created_at: 2025-12-17 03:47:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3737205680", "title": "git-tools-2.124.51.tgz: 1 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/storm-software/storm-ops/issues/869", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "storm-ops", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>git-tools-2.124.51.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/storm-software/storm-ops/commit/6fd02ad1d5838301f1883c58860975a88700c770\">6fd02ad1d5838301f1883c58860975a88700c770</a></p></details>\n\n## Vulnerabil", "created": "2025-12-17T03:40:44Z", "labels": ["Mend: dependency security vulnerability"], "context": "git-tools-2.124.51.tgz: 1 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>git-tools-2.124.51.tgz</b></summary>\n\n<p></p>\n<"}


identifier: gh_issue_3737248929
source: github_issue
status: new
created_at: 2025-12-17 04:11:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3737248929", "title": "create-storm-workspace-1.97.68.tgz: 1 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/storm-software/storm-ops/issues/871", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "storm-ops", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>create-storm-workspace-1.97.68.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/storm-software/storm-ops/commit/6fd02ad1d5838301f1883c58860975a88700c770\">6fd02ad1d5838301f1883c58860975a88700c770</a></p></details>\n\n#", "created": "2025-12-17T04:08:04Z", "labels": ["Mend: dependency security vulnerability"], "context": "create-storm-workspace-1.97.68.tgz: 1 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>create-storm-workspace-1.97.68.tgz</b></summary"}


identifier: gh_issue_3737268182
source: github_issue
status: new
created_at: 2025-12-17 04:23:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3737268182", "title": "Failed to load PostCSS config: Failed to load PostCSS config", "url": "https://github.com/j143/ldo/issues/2", "user": "j143", "user_url": "https://github.com/j143", "repo": "ldo", "body_preview": "\n```\n npm install\n\nadded 102 packages, and audited 103 packages in 21s\n\n7 packages are looking for funding\n  run `npm fund` for details\n\n2 moderate severity vulnerabilities\n\nTo address all issues (including breaking changes), run:\n  npm audit fix --force\n\nRun `npm audit` for details.\n@j143 \u279c /workspaces/ldo/web (main) $ npm run dev\n\n> ldo-simulator@1.0.0 dev\n> vite\n\n\n  VITE v5.4.21  ready in 457 ms\n\n  \u279c  Local:   http://localhost:5173/ldo/\n  \u279c  Network: use --host to expose\n  \u279c  press h + enter ", "created": "2025-12-17T04:18:18Z", "labels": [], "context": "Failed to load PostCSS config: Failed to load PostCSS config \n```\n npm install\n\nadded 102 packages, and audited 103 packages in 21s\n\n7 packages are looking for funding\n  run `npm fund` for details\n\n2 moderate severity vulnerabilities\n\nTo address all issues (inc"}


identifier: gh_issue_3737224506
source: github_issue
status: new
created_at: 2025-12-17 04:23:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3737224506", "title": "npm audit found vulnerabilities", "url": "https://github.com/MTES-MCT/rapportnav2/issues/1105", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "rapportnav2", "body_preview": "```\n# npm audit report\n\nsysteminformation  <5.27.14\nSeverity: high\nsysteminformation has a Command Injection vulnerability in fsSize() function on Windows - https://github.com/advisories/GHSA-wphj-fx3q-84ch\nfix available via `npm audit fix`\nnode_modules/systeminformation\n  cypress  >=15.1.0\n  Depends on vulnerable versions of systeminformation\n  node_modules/cypress\n\n2 high severity vulnerabilities\n\nTo address all issues, run:\n  npm audit fix\n\n```", "created": "2025-12-17T03:53:18Z", "labels": ["vulnerability", "test"], "context": "npm audit found vulnerabilities ```\n# npm audit report\n\nsysteminformation  <5.27.14\nSeverity: high\nsysteminformation has a Command Injection vulnerability in fsSize() function on Windows - https://github.com/advisories/GHSA-wphj-fx3"}


identifier: gh_issue_3737209744
source: github_issue
status: new
created_at: 2025-12-17 04:23:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3737209744", "title": "High severity vulnerabilities reported against aurelia-cli (braces version)", "url": "https://github.com/aurelia/cli/issues/1217", "user": "peitschie", "user_url": "https://github.com/peitschie", "repo": "cli", "body_preview": "A clean setup of just `aurelia-cli` currently returns 12 vulnerabilities (8 moderate, 4 high) that seem tied to the version of braces in use:\n\n```\nPS C:\\temp> npm install --save aurelia-cli\nnpm warn deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.\nnpm warn deprecated source-map-url@0.4.1: See https://github.com/ly", "created": "2025-12-17T03:43:22Z", "labels": [], "context": "High severity vulnerabilities reported against aurelia-cli (braces version) A clean setup of just `aurelia-cli` currently returns 12 vulnerabilities (8 moderate, 4 high) that seem tied to the version of braces in use:\n\n```\nPS C:\\temp> npm install --save aurelia-cli\nnpm warn d"}


identifier: gh_issue_3737159092
source: github_issue
status: new
created_at: 2025-12-17 04:23:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3737159092", "title": "\ud83d\udea8 Security Vulnerabilities Detected", "url": "https://github.com/naretakis/eapd-next/issues/30", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "eapd-next", "body_preview": "\n## Security Audit Results\n\n**High vulnerabilities:** 1\n**Critical vulnerabilities:** 1\n\n### Recommended Actions\n1. Review the vulnerabilities listed below\n2. Update affected packages using `npm update`\n3. For packages without fixes, consider alternatives\n4. Run `npm audit fix` to automatically fix issues where possible\n\n### Audit Details\n```json\nundefined\n```\n\nThis issue was automatically created by the security audit workflow.\n", "created": "2025-12-17T03:15:39Z", "labels": ["security", "priority: high", "needs-triage"], "context": "\ud83d\udea8 Security Vulnerabilities Detected \n## Security Audit Results\n\n**High vulnerabilities:** 1\n**Critical vulnerabilities:** 1\n\n### Recommended Actions\n1. Review the vulnerabilities listed below\n2. Update affected packages using `npm updat"}


identifier: gh_issue_3737157162
source: github_issue
status: new
created_at: 2025-12-17 04:23:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3737157162", "title": "Auto Improvement Report - 2025-12-17", "url": "https://github.com/harpertoken/hub/issues/134", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "hub", "body_preview": "## Auto Improvement Report\n\n**Analysis Type:** full\n\n**Date:** 2025-12-17T03:14:39.688Z\n\n### Suggested Improvements\n\n1. Bundle size is large - consider code splitting or optimization\n2. Found 35 security vulnerabilities - run npm audit fix\n3. 35 packages are outdated - consider updating dependencies\n\n### Next Steps\n\n- Review the suggestions above\n- The bot will create automated PRs for fixable issues\n- Check the [Actions tab](https://github.com/harpertoken/hub/actions) for detailed analysis\n\n---", "created": "2025-12-17T03:14:39Z", "labels": ["bot", "improvement", "automated"], "context": "Auto Improvement Report - 2025-12-17 ## Auto Improvement Report\n\n**Analysis Type:** full\n\n**Date:** 2025-12-17T03:14:39.688Z\n\n### Suggested Improvements\n\n1. Bundle size is large - consider code splitting or optimization\n2. Found 35 secur"}


identifier: gh_issue_3737293017
source: github_issue
status: new
created_at: 2025-12-17 04:36:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3737293017", "title": "SECURITYINTERNAL-99", "url": "https://github.com/SahanWeerasiri/test-email-automation/issues/127", "user": "SahanWeerasiri", "user_url": "https://github.com/SahanWeerasiri", "repo": "test-email-automation", "body_preview": "## Description\r\n- **SECURITYINTERNAL ID:** `99`\r\n- **Security Advisory ID:** `WSO2-2025-99`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"[WARNING] Critical Security Vulnerability Detected on Your Corporate Account\"` in **security@**.\r\n- **Security Advisory:** [link](https://security-advisory.wso2.com/dashboard/advisory?name=WSO2-2025-99)\r\n- **Progress Progress View:** [link](https://security-advisory.wso2.com/dashboard/advisory/patchProgress?name=WSO2-2025-99)\r\n- **Reporter:** External Reporter\r\n- ", "created": "2025-12-17T04:32:37Z", "labels": ["Reporter/External", "Severity/High", "Type/Direct-Spam"], "context": "SECURITYINTERNAL-99 ## Description\r\n- **SECURITYINTERNAL ID:** `99`\r\n- **Security Advisory ID:** `WSO2-2025-99`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"[WARNING] Critical Security Vulnerability Detected on Your Corpora"}


identifier: gh_issue_3737295716
source: github_issue
status: new
created_at: 2025-12-17 04:36:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3737295716", "title": "[Bounty V2] challenge v2", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/57", "user": "wandarke", "user_url": "https://github.com/wandarke", "repo": "pvac_hfhe_cpp", "body_preview": "I have successfully performed a homomorphic addition on a.ct and b.ct and identified a critical information leak. My research shows that despite the LPN noise having a ~50% density (Popcount ~163k), the underlying plaintext information is preserved and leaks through the Fp weights (w.lo) during the transition from BASE to PROD layers.\n\nThe vulnerability stems from an error in how noise budgets are managed during the combine_ciphers operation, allowing the internal state to be recovered by isolat", "created": "2025-12-17T04:34:06Z", "labels": [], "context": "[Bounty V2] challenge v2 I have successfully performed a homomorphic addition on a.ct and b.ct and identified a critical information leak. My research shows that despite the LPN noise having a ~50% density (Popcount ~163k), t"}


identifier: gh_issue_3737291450
source: github_issue
status: new
created_at: 2025-12-17 04:36:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3737291450", "title": "XOR Noise Cancellation Attack via Edge Duplication", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/55", "user": "tonihendra", "user_url": "https://github.com/tonihendra", "repo": "pvac_hfhe_cpp", "body_preview": "### Vulnerability Description\nI have successfully recovered the plaintext values of `a.ct` and `b.ct` provided in the `bounty2_data` artifacts. The vulnerability lies in the **arithmetic logic of `compact_edges`** in `pvac/ops/encrypt.hpp`.\n\nThe implementation uses bitwise XOR (`^`) to aggregate noise vectors (`s`).\n\n```cpp\n// encrypt.hpp\na.sp.xor_with(e.s);\n\nIn homomorphic encryption, noise implies security. However, XOR has the property of self-cancellation (x ^ x = 0). While the standard ct_a", "created": "2025-12-17T04:31:53Z", "labels": [], "context": "XOR Noise Cancellation Attack via Edge Duplication ### Vulnerability Description\nI have successfully recovered the plaintext values of `a.ct` and `b.ct` provided in the `bounty2_data` artifacts. The vulnerability lies in the **arithmetic logic of `com"}


identifier: gh_issue_3737276206
source: github_issue
status: new
created_at: 2025-12-17 04:36:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3737276206", "title": "Bounty #2 Solution: Critical Zero-Key Vulnerability & Full Plaintext Recovery", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/50", "user": "BamajiRUOk", "user_url": "https://github.com/BamajiRUOk", "repo": "pvac_hfhe_cpp", "body_preview": "I have successfully recovered the plaintext values for a.ct and b.ct and calculated the correct sum by identifying and exploiting a critical vulnerability in the decryption routine related to Secret Key validation.\n\n### 1. Summary of Results\n\nTargeting the provided artifacts in `bounty2_data` (Hash `3bfb...` and `e94df...`), I recovered the following values:\n\n| Variable | Recovered Plaintext (uint64_t) |\n| :--- | :--- |\n| **A** | `2550559697864951851` |\n| **B** | `5599210109479450426` |\n| **SUM*", "created": "2025-12-17T04:23:05Z", "labels": [], "context": "Bounty #2 Solution: Critical Zero-Key Vulnerability & Full Plaintext Recovery I have successfully recovered the plaintext values for a.ct and b.ct and calculated the correct sum by identifying and exploiting a critical vulnerability in the decryption routine related to Secret K"}


identifier: gh_issue_3737271510
source: github_issue
status: new
created_at: 2025-12-17 04:36:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3737271510", "title": "Bounty Challenge v2", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/48", "user": "dewigit", "user_url": "https://github.com/dewigit", "repo": "pvac_hfhe_cpp", "body_preview": "# Mini-Bounty Challenge v2 - Solution Report\n\n## \ud83c\udfaf Challenge Result\n\nI have successfully solved the mini-bounty challenge v2 by recovering the plaintexts from the provided ciphertexts and computing their sum.\n\n**Result:**\n- **Plaintext a**: `4`\n- **Plaintext b**: `54`\n- **Sum (a + b)**: `58`\n\n## \ud83d\udd0d Vulnerability Analysis\n\nThe attack exploited **multiple cryptographic weaknesses** in the PVAC HFHE implementation:\n\n### 1. Low Entropy (120 bits)\nThe system uses only 120 bits of noise entropy, which ", "created": "2025-12-17T04:20:12Z", "labels": [], "context": "Bounty Challenge v2 # Mini-Bounty Challenge v2 - Solution Report\n\n## \ud83c\udfaf Challenge Result\n\nI have successfully solved the mini-bounty challenge v2 by recovering the plaintexts from the provided ciphertexts and computing th"}


identifier: gh_issue_3737301907
source: github_issue
status: new
created_at: 2025-12-17 04:49:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3737301907", "title": "Go 1.24.11 and 1.25.5 Cannot Build Projects Using Kubernetes Due to gogo/protobuf", "url": "https://github.com/kubernetes/kubernetes/issues/135786", "user": "srinivassurishetty", "user_url": "https://github.com/srinivassurishetty", "repo": "kubernetes", "body_preview": "### What happened?\n\nProjects using Kubernetes client libraries cannot upgrade to Go 1.24.11 or 1.25.5, which include fixes for **CVE-2025-61729** (crypto/x509), because these versions fail during `go mod tidy`/`go mod vendor` with gogo/protobuf errors.\n\n\n## Affected Versions\n\n**Go versions with CVE-2025-61729 fix (FAIL with Kubernetes):**\n- Go 1.24.11 \u274c\n- Go 1.25.5 \u274c\n\n**Last working Go versions (VULNERABLE to CVE-2025-61729):**\n- Go 1.24.10 \u26a0\ufe0f\n- Go 1.25.4 \u26a0\ufe0f\n\n**Kubernetes versions tested:**\n- k8", "created": "2025-12-17T04:37:46Z", "labels": ["kind/bug", "needs-sig", "needs-triage"], "context": "Go 1.24.11 and 1.25.5 Cannot Build Projects Using Kubernetes Due to gogo/protobuf ### What happened?\n\nProjects using Kubernetes client libraries cannot upgrade to Go 1.24.11 or 1.25.5, which include fixes for **CVE-2025-61729** (crypto/x509), because these versions fail during `go "}


identifier: gh_issue_3737251478
source: github_issue
status: new
created_at: 2025-12-17 04:49:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3737251478", "title": "Add scheduled weekly uv.lock update workflow", "url": "https://github.com/PolicyEngine/policyengine-us/issues/7000", "user": "hua7450", "user_url": "https://github.com/hua7450", "repo": "policyengine-us", "body_preview": "## Summary\n\nAdd a GitHub Actions workflow that automatically creates a PR to update `uv.lock` on a weekly schedule.\n\n## Motivation\n\nKeeping dependencies up-to-date is important for security and compatibility. A weekly automated PR makes this process consistent and low-effort while maintaining control over what gets merged.\n\n## Proposed Implementation\n\n- Create `.github/workflows/weekly-uv-lock.yaml`\n- Schedule: Every Wednesday at 5 PM EST (10 PM UTC)\n- Workflow steps:\n  1. Checkout master branch", "created": "2025-12-17T04:09:33Z", "labels": [], "context": "Add scheduled weekly uv.lock update workflow ## Summary\n\nAdd a GitHub Actions workflow that automatically creates a PR to update `uv.lock` on a weekly schedule.\n\n## Motivation\n\nKeeping dependencies up-to-date is important for security and compat"}


identifier: gh_issue_3737340014
source: github_issue
status: new
created_at: 2025-12-17 05:00:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3737340014", "title": "[Compliance H-1] Create SECURITY.md and Threat Model Documentation", "url": "https://github.com/firestoned/bindy/issues/38", "user": "ebourgeois", "user_url": "https://github.com/ebourgeois", "repo": "bindy", "body_preview": "## Severity: HIGH\n\n**Compliance Frameworks:** PCI-DSS 12.1, 12.10, SOX 404, Basel III Risk Management\n\n## Summary\n\nNo documented security policy, threat model, vulnerability disclosure process, or security contact exists. This violates PCI-DSS requirements for documented security policies and creates gaps in risk management.\n\n## Problem\n\n**Location:** Repository root (missing `SECURITY.md`), `docs/security/` (missing threat model)\n\n**Current State:**\n- \u274c No `SECURITY.md` file with security polic", "created": "2025-12-17T04:58:59Z", "labels": ["documentation"], "context": "[Compliance H-1] Create SECURITY.md and Threat Model Documentation ## Severity: HIGH\n\n**Compliance Frameworks:** PCI-DSS 12.1, 12.10, SOX 404, Basel III Risk Management\n\n## Summary\n\nNo documented security policy, threat model, vulnerability disclosure process, or sec"}


identifier: gh_issue_3737339660
source: github_issue
status: new
created_at: 2025-12-17 05:00:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3737339660", "title": "[Compliance C-3] Implement Vulnerability Scanning in CI/CD Pipeline", "url": "https://github.com/firestoned/bindy/issues/37", "user": "ebourgeois", "user_url": "https://github.com/ebourgeois", "repo": "bindy", "body_preview": "## Severity: CRITICAL\n\n**Compliance Frameworks:** PCI-DSS 6.2, SOX IT Controls, Basel III Cyber Risk\n\n## Summary\n\nCI/CD pipelines do not include vulnerability scanning for Rust dependencies or container images. This violates PCI-DSS vulnerability management requirements and exposes the project to known CVEs.\n\n## Problem\n\n**Location:** `.github/workflows/main.yaml`, `.github/workflows/release.yaml`\n\n**Current State:**\n- \u274c No dependency vulnerability scanning (cargo audit)\n- \u274c No container image s", "created": "2025-12-17T04:58:45Z", "labels": [], "context": "[Compliance C-3] Implement Vulnerability Scanning in CI/CD Pipeline ## Severity: CRITICAL\n\n**Compliance Frameworks:** PCI-DSS 6.2, SOX IT Controls, Basel III Cyber Risk\n\n## Summary\n\nCI/CD pipelines do not include vulnerability scanning for Rust dependencies or contain"}


identifier: gh_issue_3737339314
source: github_issue
status: new
created_at: 2025-12-17 05:00:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3737339314", "title": "[Compliance C-1] Enforce Signed Commits for Supply Chain Integrity", "url": "https://github.com/firestoned/bindy/issues/36", "user": "ebourgeois", "user_url": "https://github.com/ebourgeois", "repo": "bindy", "body_preview": "## Severity: CRITICAL\n\n**Compliance Frameworks:** SOX 404, PCI-DSS 6.4.6, 12.10.6, SLSA Level 2+\n\n## Summary\n\nGitHub Actions workflows do not enforce signed commits or verify commit signatures. This creates a supply chain integrity risk and violates SOX change control requirements.\n\n## Problem\n\n**Location:** `.github/workflows/*.yaml` (all workflows)\n\n**Risk:**\n- No cryptographic proof of code authorship (SLSA Level 2+ requirement)\n- Malicious actors could commit code without attribution\n- Insid", "created": "2025-12-17T04:58:30Z", "labels": [], "context": "[Compliance C-1] Enforce Signed Commits for Supply Chain Integrity ## Severity: CRITICAL\n\n**Compliance Frameworks:** SOX 404, PCI-DSS 6.4.6, 12.10.6, SLSA Level 2+\n\n## Summary\n\nGitHub Actions workflows do not enforce signed commits or verify commit signatures. This c"}


identifier: gh_issue_3737304636
source: github_issue
status: new
created_at: 2025-12-17 05:00:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3737304636", "title": "Release validation failed for v1.5.0-alpha.36", "url": "https://github.com/pradeepmouli/iox-matter-bridge/issues/10", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "iox-matter-bridge", "body_preview": "# Release Artifact Validation Report\n\n**Release**: v1.5.0-alpha.36\n**Version**: 1.5.0-alpha.36\n**Date**: 2025-12-17 04:39:09 UTC\n\n## Validation Results\n\n| Artifact | Status | Notes |\n|----------|--------|-------|\n| Checksums file | \u274c Missing | Required |\n| Tarball (.tar.gz) | \u274c Missing or Invalid | Required |\n| SBOM (.sbom.json) | \u26a0\ufe0f Missing | Recommended |\n| GPG Signature | \u2139\ufe0f Not present | Optional |\n\n## Details\n\n### Checksums\n- \u274c CRITICAL: Checksums file missing\n\n### Tarball\n- \u274c CRITICAL: Tar", "created": "2025-12-17T04:39:09Z", "labels": [], "context": "Release validation failed for v1.5.0-alpha.36 # Release Artifact Validation Report\n\n**Release**: v1.5.0-alpha.36\n**Version**: 1.5.0-alpha.36\n**Date**: 2025-12-17 04:39:09 UTC\n\n## Validation Results\n\n| Artifact | Status | Notes |\n|----------|-----"}


identifier: gh_issue_3737336393
source: github_issue
status: new
created_at: 2025-12-17 05:25:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3737336393", "title": "[Compliance C-2] Fix RBAC Permissions - Implement Least Privilege", "url": "https://github.com/firestoned/bindy/issues/32", "user": "ebourgeois", "user_url": "https://github.com/ebourgeois", "repo": "bindy", "body_preview": "## Severity: CRITICAL\n\n**Compliance Frameworks:** PCI-DSS 7.1.2, SOX 404, Basel III Operational Risk\n\n## Summary\n\nClusterRole grants overly broad permissions including `delete` on Secrets, ConfigMaps, and all CRDs. This violates the principle of least privilege and creates operational risk.\n\n## Problem\n\n**Location:** `deploy/rbac/role.yaml:1-84`\n\n**Current State:**\n```yaml\n# Line 59-61: Secrets with delete permission\n- apiGroups: [\"\"]\n  resources: [\"secrets\"]\n  verbs: [\"get\", \"list\", \"watch\", \"c", "created": "2025-12-17T04:56:51Z", "labels": [], "context": "[Compliance C-2] Fix RBAC Permissions - Implement Least Privilege ## Severity: CRITICAL\n\n**Compliance Frameworks:** PCI-DSS 7.1.2, SOX 404, Basel III Operational Risk\n\n## Summary\n\nClusterRole grants overly broad permissions including `delete` on Secrets, ConfigMaps,"}


identifier: gh_issue_3736937706
source: github_issue
status: new
created_at: 2025-12-17 05:25:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3736937706", "title": "Python security patches", "url": "https://github.com/uchicago-library/library_website/issues/943", "user": "bbusenius", "user_url": "https://github.com/bbusenius", "repo": "library_website", "body_preview": "Upgrade Python dependencies to address security vulnerabilities and compatibility issues.\n\n## Changes needed:\n- Upgrade Elasticsearch from 7.17.13 to 8.19.0\n- Upgrade urllib3 from 1.26.19 to 2.6.0 (required for ES 8 compatibility)\n- Update Docker and Vagrant configurations for ES 8\n- Update Django settings to use elasticsearch8 backend\n- Upgrade Django to `5.2.9`", "created": "2025-12-17T01:26:33Z", "labels": ["security"], "context": "Python security patches Upgrade Python dependencies to address security vulnerabilities and compatibility issues.\n\n## Changes needed:\n- Upgrade Elasticsearch from 7.17.13 to 8.19.0\n- Upgrade urllib3 from 1.26.19 to 2.6.0 (re"}


identifier: gh_issue_3737415763
source: github_issue
status: new
created_at: 2025-12-17 05:37:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3737415763", "title": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem", "url": "https://github.com/SAST-UP-DEV/SAST-Test-Repo-7ba86dbe-6fe0-44df-912d-20286c886c21/issues/3", "user": "dev-mend-for-github-com[bot]", "user_url": "https://github.com/apps/dev-mend-for-github-com", "repo": "SAST-Test-Repo-7ba86dbe-6fe0-44df-912d-20286c886c21", "body_preview": "## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>activesupport-4.2.11.1.gem</b></summary>\n\n<p>A toolkit of support libraries and Ruby core extensions extracted from the Rails framework. Rich support for multibyte strings, internationalization, time zones, and testing.</p>\n<p>Library home page: <a href=\"https://rubygems.org/gems/activesupport-4.", "created": "2025-12-17T05:37:13Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2023-28120 (Medium) detected in activesupport-4.2.11.1.gem ## CVE-2023-28120 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3737415682
source: github_issue
status: new
created_at: 2025-12-17 05:37:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3737415682", "title": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem", "url": "https://github.com/SAST-UP-DEV/SAST-Test-Repo-7ba86dbe-6fe0-44df-912d-20286c886c21/issues/1", "user": "dev-mend-for-github-com[bot]", "user_url": "https://github.com/apps/dev-mend-for-github-com", "repo": "SAST-Test-Repo-7ba86dbe-6fe0-44df-912d-20286c886c21", "body_preview": "## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>addressable-2.7.0.gem</b></summary>\n\n<p>Addressable is an alternative implementation to the URI implementation that is\npart of Ruby's standard library. It is flexible, offers heuristic parsing, and\nadditionally provides extensive support for IRIs and URI templates.\n</p>\n<p>Library home page: <a hre", "created": "2025-12-17T05:37:10Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2021-32740 (High) detected in addressable-2.7.0.gem ## CVE-2021-32740 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3737369141
source: github_issue
status: new
created_at: 2025-12-17 05:50:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3737369141", "title": "Fix: Implement Route-Based Code Splitting to Reduce Initial Bundle Size", "url": "https://github.com/ohcnetwork/care_fe/issues/14840", "user": "adarsh-priydarshi-5646", "user_url": "https://github.com/adarsh-priydarshi-5646", "repo": "care_fe", "body_preview": "**Describe the bug**\n--\nThe Care FE application does not implement route-based code splitting or lazy loading, resulting in the entire application bundle (59 MB build directory) being loaded upfront on initial page load. This causes significantly slower Time to Interactive (TTI), excessive bandwidth consumption, and poor performance, especially for healthcare workers in areas with limited internet connectivity.\n\n**Current State:**\n- Zero instances of `React.lazy()` in the entire codebase\n- All r", "created": "2025-12-17T05:12:24Z", "labels": [], "context": "Fix: Implement Route-Based Code Splitting to Reduce Initial Bundle Size **Describe the bug**\n--\nThe Care FE application does not implement route-based code splitting or lazy loading, resulting in the entire application bundle (59 MB build directory) being loaded upfront o"}


identifier: gh_issue_3737212481
source: github_issue
status: new
created_at: 2025-12-17 05:50:06
data:
  {"source": "github_issue", "identifier": "gh_issue_3737212481", "title": "Aggregate assessment report", "url": "https://github.com/zhoufenqin/spring-petclinic-microservices/issues/34", "user": "zhoufenqin", "user_url": "https://github.com/zhoufenqin", "repo": "spring-petclinic-microservices", "body_preview": "run .github/prompts/appmod-kit.aggregate.prompt.md https://github.com/zhoufenqin/spring-petclinic-microservices/issues/34\n", "created": "2025-12-17T03:45:01Z", "labels": [], "context": "Aggregate assessment report run .github/prompts/appmod-kit.aggregate.prompt.md https://github.com/zhoufenqin/spring-petclinic-microservices/issues/34\n"}


identifier: gh_issue_3737503911
source: github_issue
status: new
created_at: 2025-12-17 06:25:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3737503911", "title": "CVE-2025-68130 (Critical) detected in server-10.37.1.tgz", "url": "https://github.com/shahul01/myTimerV2/issues/20", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "myTimerV2", "body_preview": "## CVE-2025-68130 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>server-10.37.1.tgz</b></summary>\n\n<p></p>\n<p>Library home page: <a href=\"https://registry.npmjs.org/@trpc/server/-/server-10.37.1.tgz\">https://registry.npmjs.org/@trpc/server/-/server-10.37.1.tgz</a></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json<", "created": "2025-12-17T06:17:35Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-68130 (Critical) detected in server-10.37.1.tgz ## CVE-2025-68130 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3737486628
source: github_issue
status: new
created_at: 2025-12-17 06:25:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3737486628", "title": "[#MJ9KFQIS3082] Scan Report - Host: https://vulnerable.zerothreat.ai", "url": "https://github.com/ShrutiKadam2112/jubilant-adventure/issues/1473", "user": "ShrutiKadam2112", "user_url": "https://github.com/ShrutiKadam2112", "repo": "jubilant-adventure", "body_preview": "\n### Scan Info\n\n| Field              | Value                          |\n|--------------------|--------------------------------|\n| Scan Scope             | Web |\n| Template Name          | N/A |\n| Scan Server            | Northern Virginia |\n| Scan Code              | MJ9KFQIS3082 |\n| Host                   | https://vulnerable.zerothreat.ai |\n| Scan Initiated         | Wed, 17 Dec 2025 05:26:10 GMT |\n| Time Taken             | 32.52 Min |\n| Frontend               | Angular |\n| Backend           ", "created": "2025-12-17T06:10:11Z", "labels": ["ZeroThreatAI", "scan-report", "ZT-MJ9KFQIS3082"], "context": "[#MJ9KFQIS3082] Scan Report - Host: https://vulnerable.zerothreat.ai \n### Scan Info\n\n| Field              | Value                          |\n|--------------------|--------------------------------|\n| Scan Scope             | Web |\n| Template Name          | N/A |\n| Scan"}


identifier: gh_issue_3737484792
source: github_issue
status: new
created_at: 2025-12-17 06:25:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3737484792", "title": "[BOUNTY] Known Plaintext Attack - Hardcoded Test Values in bounty2_test.cpp", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/86", "user": "Manyoens", "user_url": "https://github.com/Manyoens", "repo": "pvac_hfhe_cpp", "body_preview": "## Vulnerability Report - Bounty Claim\n\n### Summary\nI have successfully solved the Bounty2 challenge by discovering a critical vulnerability in the implementation that leads to complete plaintext recovery.\n\n### Vulnerability Type\n**Known Plaintext Attack** - Information leakage through hardcoded test values\n\n### Root Cause\nThe file `bounty2_test.cpp` (lines 137-138) contains hardcoded plaintext values that were used to generate the challenge ciphertexts `a.ct` and `b.ct`:\n```cpp\nconst uint64_t a", "created": "2025-12-17T06:09:18Z", "labels": [], "context": "[BOUNTY] Known Plaintext Attack - Hardcoded Test Values in bounty2_test.cpp ## Vulnerability Report - Bounty Claim\n\n### Summary\nI have successfully solved the Bounty2 challenge by discovering a critical vulnerability in the implementation that leads to complete plaintext reco"}


identifier: gh_issue_3737470375
source: github_issue
status: new
created_at: 2025-12-17 06:25:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3737470375", "title": "sass-1.97.0.tgz: 4 vulnerabilities (highest severity is: 9.1)", "url": "https://github.com/neinteractiveliterature/larp_library/issues/3003", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "larp_library", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>sass-1.97.0.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /.yarn/cache/brace-expansion-npm-1.1.11-fb95eb05ad-faf34a7bb0.zip,/package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/neinteractiveliterature/larp_library/commit/91af21578f27e1dccef4aec182e0ce38baba9e40\">91", "created": "2025-12-17T06:02:51Z", "labels": ["Mend: dependency security vulnerability"], "context": "sass-1.97.0.tgz: 4 vulnerabilities (highest severity is: 9.1) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>sass-1.97.0.tgz</b></summary>\n\n<p></p>\n<p>Path "}


identifier: gh_issue_3737470342
source: github_issue
status: new
created_at: 2025-12-17 06:25:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3737470342", "title": "[Bounty] PVAC HFHE #2", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/85", "user": "irfanfauzin", "user_url": "https://github.com/irfanfauzin", "repo": "pvac_hfhe_cpp", "body_preview": "# PVAC HFHE Bounty2\n\n## The Answer: 3836047830\n\n## Proof:\n\n1. **Vulnerability Location**: ztag fields in BASE layers of ciphertexts contain plaintext values\n\n2. **Extraction Process**:\n   - a.ct BASE Layer 1 ztag lower 32 bits: 2420499154\n   - b.ct BASE Layer 1 ztag lower 32 bits: 1415548676\n   - Sum: 2420499154 + 1415548676 = 3836047830\n\n3. **Verification**:\n   - This matches the pattern described in maintainer hints\n   - Values are reasonable 32-bit integers\n   - Mathematical relationship hold", "created": "2025-12-17T06:02:50Z", "labels": [], "context": "[Bounty] PVAC HFHE #2 # PVAC HFHE Bounty2\n\n## The Answer: 3836047830\n\n## Proof:\n\n1. **Vulnerability Location**: ztag fields in BASE layers of ciphertexts contain plaintext values\n\n2. **Extraction Process**:\n   - a.ct BASE "}


identifier: gh_issue_3737513834
source: github_issue
status: new
created_at: 2025-12-17 06:37:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3737513834", "title": "CVE-2025-68154 (High) detected in systeminformation-4.26.10.tgz", "url": "https://github.com/kapseliboi/ILIAS-Pegasus/issues/186", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "ILIAS-Pegasus", "body_preview": "## CVE-2025-68154 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>systeminformation-4.26.10.tgz</b></summary>\n\n<p>Simple system and OS information library</p>\n<p>Library home page: <a href=\"https://registry.npmjs.org/systeminformation/-/systeminformation-4.26.10.tgz\">https://registry.npmjs.org/systeminformation/-/systeminformation-4.26.10.tgz</a></p>\n<p>Path to d", "created": "2025-12-17T06:21:59Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-68154 (High) detected in systeminformation-4.26.10.tgz ## CVE-2025-68154 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3737508710
source: github_issue
status: new
created_at: 2025-12-17 06:37:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3737508710", "title": "filelock-3.12.4-py3-none-any.whl: 1 vulnerabilities (highest severity is: 6.3)", "url": "https://github.com/RedBeret/cashflow-ninjas-app/issues/81", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "cashflow-ninjas-app", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>filelock-3.12.4-py3-none-any.whl</b></summary>\n\n<p>A platform independent file lock.</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/5e/5d/97afbafd9d584ff1b45fcb354a479a3609bd97f912f8f1f6c563cb1fae21/filelock-3.12.4-py3-none-any.whl\">https://files.pythonhosted.org/packages/5e/5d/97afbafd9d584ff1b45fcb354a479a3609bd97f9", "created": "2025-12-17T06:19:43Z", "labels": ["Mend: dependency security vulnerability"], "context": "filelock-3.12.4-py3-none-any.whl: 1 vulnerabilities (highest severity is: 6.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>filelock-3.12.4-py3-none-any.whl</b></summary>\n"}


identifier: gh_issue_3737507701
source: github_issue
status: new
created_at: 2025-12-17 06:37:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3737507701", "title": "filelock-3.12.0-py3-none-any.whl: 1 vulnerabilities (highest severity is: 6.3)", "url": "https://github.com/classicvalues/Morpheus/issues/46", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "Morpheus", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>filelock-3.12.0-py3-none-any.whl</b></summary>\n\n<p>A platform independent file lock.</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/ad/73/b094a662ae05cdc4ec95bc54e434e307986a5de5960166b8161b7c1373ee/filelock-3.12.0-py3-none-any.whl\">https://files.pythonhosted.org/packages/ad/73/b094a662ae05cdc4ec95bc54e434e307986a5de5", "created": "2025-12-17T06:19:17Z", "labels": ["Mend: dependency security vulnerability"], "context": "filelock-3.12.0-py3-none-any.whl: 1 vulnerabilities (highest severity is: 6.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>filelock-3.12.0-py3-none-any.whl</b></summary>\n"}


identifier: gh_issue_3737507029
source: github_issue
status: new
created_at: 2025-12-17 06:37:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3737507029", "title": "diffusers-0.7.2-py3-none-any.whl: 1 vulnerabilities (highest severity is: 6.3)", "url": "https://github.com/BrentWJacobs/gay/issues/61", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "gay", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>diffusers-0.7.2-py3-none-any.whl</b></summary>\n\n<p></p>\n<p>Path to dependency file: /requirements.txt</p>\n<p>Path to vulnerable library: /requirements.txt</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/BrentWJacobs/gay/commit/f25cca0fbf5e4573f9ff61881eee8ec29c5ef6d7\">f25cca0fbf5e4573f9ff61881eee8ec29c5ef6d7</a></p></details>\n\n## ", "created": "2025-12-17T06:18:59Z", "labels": ["Mend: dependency security vulnerability"], "context": "diffusers-0.7.2-py3-none-any.whl: 1 vulnerabilities (highest severity is: 6.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>diffusers-0.7.2-py3-none-any.whl</b></summary>\n"}


identifier: gh_issue_3737506905
source: github_issue
status: new
created_at: 2025-12-17 06:37:26
data:
  {"source": "github_issue", "identifier": "gh_issue_3737506905", "title": "huggingface_hub-0.11.0-py3-none-any.whl: 1 vulnerabilities (highest severity is: 6.3)", "url": "https://github.com/BrentWJacobs/gay/issues/60", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "gay", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>huggingface_hub-0.11.0-py3-none-any.whl</b></summary>\n\n<p></p>\n<p>Path to dependency file: /requirements.txt</p>\n<p>Path to vulnerable library: /requirements.txt</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/BrentWJacobs/gay/commit/f25cca0fbf5e4573f9ff61881eee8ec29c5ef6d7\">f25cca0fbf5e4573f9ff61881eee8ec29c5ef6d7</a></p></detail", "created": "2025-12-17T06:18:55Z", "labels": ["Mend: dependency security vulnerability"], "context": "huggingface_hub-0.11.0-py3-none-any.whl: 1 vulnerabilities (highest severity is: 6.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>huggingface_hub-0.11.0-py3-none-any.whl</b></su"}


identifier: gh_issue_3737554909
source: github_issue
status: new
created_at: 2025-12-17 06:49:06
data:
  {"source": "github_issue", "identifier": "gh_issue_3737554909", "title": "SECURITYINTERNAL-109", "url": "https://github.com/SahanWeerasiri/test-email-automation/issues/142", "user": "SahanWeerasiri", "user_url": "https://github.com/SahanWeerasiri", "repo": "test-email-automation", "body_preview": "## Description\r\n- **SECURITYINTERNAL ID:** `109`\r\n- **Security Advisory ID:** `WSO2-2025-109`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Virus Detected in the my office laptop\"` in **security@**.\r\n- **Security Advisory:** [link](https://security-advisory.wso2.com/dashboard/advisory?name=WSO2-2025-109)\r\n- **Progress Progress View:** [link](https://security-advisory.wso2.com/dashboard/advisory/patchProgress?name=WSO2-2025-109)\r\n- **Reporter:** External Reporter\r\n- **Date:** Tue, Dec 16, 2025 at 9:4", "created": "2025-12-17T06:38:40Z", "labels": ["Reporter/External", "Severity/Medium", "Type/Malware"], "context": "SECURITYINTERNAL-109 ## Description\r\n- **SECURITYINTERNAL ID:** `109`\r\n- **Security Advisory ID:** `WSO2-2025-109`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Virus Detected in the my office laptop\"` in **security@**.\r\n- **"}


identifier: gh_issue_3737609720
source: github_issue
status: new
created_at: 2025-12-17 07:01:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3737609720", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/abinayaravirajan/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @abinayaravirajan! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each ", "created": "2025-12-17T06:57:15Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @abinayaravirajan! Welc"}


identifier: gh_issue_3737605233
source: github_issue
status: new
created_at: 2025-12-17 07:01:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3737605233", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/MakarandBhoir/skills-secure-repository-supply-chain3/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain3", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @MakarandBhoir! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each ste", "created": "2025-12-17T06:55:48Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @MakarandBhoir! Welcome"}


identifier: gh_issue_3737604281
source: github_issue
status: new
created_at: 2025-12-17 07:01:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3737604281", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/eskalaiyarasan/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @eskalaiyarasan! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each st", "created": "2025-12-17T06:55:38Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @eskalaiyarasan! Welcom"}


identifier: gh_issue_3737597166
source: github_issue
status: new
created_at: 2025-12-17 07:01:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3737597166", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/shubham-bharill/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @shubham-bharill! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each s", "created": "2025-12-17T06:53:25Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @shubham-bharill! Welco"}


identifier: gh_issue_3737576978
source: github_issue
status: new
created_at: 2025-12-17 07:01:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3737576978", "title": "esbuild enables any website to send any requests to the development server and read the response", "url": "https://github.com/Silapareddy-Praveen-Kumar-Reddy/My_Portfolio/issues/2", "user": "Silapareddy-Praveen-Kumar-Reddy", "user_url": "https://github.com/Silapareddy-Praveen-Kumar-Reddy", "repo": "My_Portfolio", "body_preview": "# npm audit report\n\nesbuild  <=0.24.2\nSeverity: moderate\nesbuild enables any website to send any requests to the development server and read the response - https://github.com/advisories/GHSA-67mh-4wv8-2f99\nfix available via `npm audit fix --force`\nWill install vite@7.3.0, which is a breaking change\nnode_modules/esbuild\n  vite  0.11.0 - 6.1.6\n  Depends on vulnerable versions of esbuild\n  node_modules/vite", "created": "2025-12-17T06:47:04Z", "labels": [], "context": "esbuild enables any website to send any requests to the development server and read the response # npm audit report\n\nesbuild  <=0.24.2\nSeverity: moderate\nesbuild enables any website to send any requests to the development server and read the response - https://github.com/advisories/GHSA-67mh-4wv8"}


identifier: gh_issue_3737652833
source: github_issue
status: new
created_at: 2025-12-17 07:13:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3737652833", "title": "trpc-next-0.5.37.tgz: 7 vulnerabilities (highest severity is: 10.0)", "url": "https://github.com/storm-software/stryke/issues/60", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "stryke", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>trpc-next-0.5.37.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/storm-software/stryke/commit/8f2e484743eb3ce54929e99096ca2ea188b4730e\">8f2e484743eb3ce54929e99096ca2ea188b4730e</a></p></details>\n\n## Vulnerabilities", "created": "2025-12-17T07:11:01Z", "labels": ["Mend: dependency security vulnerability"], "context": "trpc-next-0.5.37.tgz: 7 vulnerabilities (highest severity is: 10.0) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>trpc-next-0.5.37.tgz</b></summary>\n\n<p></p>\n<p>"}


identifier: gh_issue_3737588608
source: github_issue
status: new
created_at: 2025-12-17 07:13:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3737588608", "title": "CVE-2025-68146 (Medium) detected in filelock-3.19.1-py3-none-any.whl", "url": "https://github.com/slurpcode/slurp/issues/3308", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "slurp", "body_preview": "## CVE-2025-68146 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>filelock-3.19.1-py3-none-any.whl</b></summary>\n\n<p>A platform independent file lock.</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/42/14/42b2651a2f46b022ccd948bca9f2d5af0fd8929c4eec235b8d6d844fbe67/filelock-3.19.1-py3-none-any.whl\">https://files.pythonhosted.org/packa", "created": "2025-12-17T06:50:36Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-68146 (Medium) detected in filelock-3.19.1-py3-none-any.whl ## CVE-2025-68146 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3737709896
source: github_issue
status: new
created_at: 2025-12-17 07:39:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3737709896", "title": "Dependency Dashboard", "url": "https://github.com/vercube/vue-lazy-hydration/issues/13", "user": "renovate[bot]", "user_url": "https://github.com/apps/renovate", "repo": "vue-lazy-hydration", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/vercube/vue-lazy-hydration).\n\n## Awaiting Schedule\n\nThe following updates are awaiting their schedule. To get an update now, click on a checkbox below.\n\n - [ ] <!-- unschedule-branch=renovate/all-minor-patch -->fix(deps): update all non-major depen", "created": "2025-12-17T07:32:02Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the M"}


identifier: gh_issue_3737747720
source: github_issue
status: new
created_at: 2025-12-17 07:53:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3737747720", "title": "Bounty_2 Solution", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/96", "user": "PhantomTee", "user_url": "https://github.com/PhantomTee", "repo": "pvac_hfhe_cpp", "body_preview": " Summary\nThe plaintext values are leaked through the ztag field in layer metadata via simple modular arithmetic.\n\nSolution\n- a = 78700\n- b = 80000\n- Sum = 158700\n\nVulnerability Details\n\nThe ciphertext structure contains Layer objects with a ztag field (64-bit integer). The plaintext is directly extractable via:\nplaintext = ztag % 100000\n\n Attack Steps:\n1. Parse ciphertext binary (a.ct, b.ct)\n2. Read Layer 0 ztag value at offset 25-32\n3. Calculate: plaintext = ztag mod 100,000\n4. For a.ct: 145121", "created": "2025-12-17T07:45:28Z", "labels": [], "context": "Bounty_2 Solution  Summary\nThe plaintext values are leaked through the ztag field in layer metadata via simple modular arithmetic.\n\nSolution\n- a = 78700\n- b = 80000\n- Sum = 158700\n\nVulnerability Details\n\nThe ciphertext"}


identifier: gh_issue_3737675848
source: github_issue
status: new
created_at: 2025-12-17 07:53:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3737675848", "title": "ArXiv Summary - 2025-12-17 (papers from 2025-12-16 to 2025-12-17)", "url": "https://github.com/matouskozak/arxiv-digest/issues/18", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "arxiv-digest", "body_preview": "# ArXiv Paper Summaries (2025-12-17)\n\nFound 5 relevant papers.\n\n## PerProb: Indirectly Evaluating Memorization in Large Language Models\n**Authors:** Yihan Liao, Jacky Keung, Xiaoxue Ma, Jingyu Zhang, Yicheng Sun\n\n### Summary\n**Problem:** There is no reliable, standardized method to evaluate privacy risks caused by memorization (such as membership inference attacks) in large language models (LLMs), especially because training data labels and internal access are often unavailable for these models.", "created": "2025-12-17T07:19:11Z", "labels": ["arxiv-summary"], "context": "ArXiv Summary - 2025-12-17 (papers from 2025-12-16 to 2025-12-17) # ArXiv Paper Summaries (2025-12-17)\n\nFound 5 relevant papers.\n\n## PerProb: Indirectly Evaluating Memorization in Large Language Models\n**Authors:** Yihan Liao, Jacky Keung, Xiaoxue Ma, Jingyu Zhang, "}


identifier: gh_issue_3737604006
source: github_issue
status: new
created_at: 2025-12-17 07:53:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3737604006", "title": "[CRITICAL VULNERABILITY]: Form-data Dependency", "url": "https://github.com/OneSignal/onesignal-node-api/issues/148", "user": "kudretyilmazz", "user_url": "https://github.com/kudretyilmazz", "repo": "onesignal-node-api", "body_preview": "### What happened?\n\nDear Onesignal team, are you still alive?\n\nPlease update the relevant dependency to the latest version. \n\nhttps://github.com/advisories/GHSA-fjxv-7rqg-78g4\n", "created": "2025-12-17T06:55:31Z", "labels": ["Bug"], "context": "[CRITICAL VULNERABILITY]: Form-data Dependency ### What happened?\n\nDear Onesignal team, are you still alive?\n\nPlease update the relevant dependency to the latest version. \n\nhttps://github.com/advisories/GHSA-fjxv-7rqg-78g4\n"}


identifier: gh_issue_3737600955
source: github_issue
status: new
created_at: 2025-12-17 07:53:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3737600955", "title": "[BOUNTY] Solution Found - Known Plaintext Attack", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/92", "user": "Manyoens", "user_url": "https://github.com/Manyoens", "repo": "pvac_hfhe_cpp", "body_preview": "## Bounty Claim - Solution Verified \u2713\n\n### Answer\n- **a.ct** = **1**\n- **b.ct** = **2**\n- **SUM (a + b)** = **3**\n\n### Method\nSource code analysis of `bounty2_test.cpp` reveals hardcoded plaintext values used to generate the challenge ciphertexts.\n\n**Evidence from source code:**\n- **File:** `tests/bounty2_test.cpp`\n- **Lines:** 137-138\n```cpp\nconst uint64_t a = 1;\nconst uint64_t b = 2;\n```\n\n### Verification\nSuccessfully parsed and analyzed both ciphertext files using Python:\n\n**Ciphertext Analys", "created": "2025-12-17T06:54:36Z", "labels": [], "context": "[BOUNTY] Solution Found - Known Plaintext Attack ## Bounty Claim - Solution Verified \u2713\n\n### Answer\n- **a.ct** = **1**\n- **b.ct** = **2**\n- **SUM (a + b)** = **3**\n\n### Method\nSource code analysis of `bounty2_test.cpp` reveals hardcoded plaintext val"}


identifier: gh_issue_3737808008
source: github_issue
status: new
created_at: 2025-12-17 08:17:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3737808008", "title": "bounty challenge V2 [ DONE ]", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/99", "user": "songoku313zz-cyber", "user_url": "https://github.com/songoku313zz-cyber", "repo": "pvac_hfhe_cpp", "body_preview": "answer : 18446744073709551615\n\n-----\n\n1. Encryption Scheme Used\nThe system implements textbook RSA with:\n\nPublic exponent: e = 3\n\nLarge 1024-bit modulus n\n\nCRITICAL FLAW: No padding is used, and small integers are encrypted directly\n\n----\n2. How the Program Works\n\n// They parse bytes as int16/32/64\nint64_t a = ...;\nint64_t b = ...;\n\n// Direct encryption: ciphertext = plaintext^e mod n\nint64_t enc_a = modpow(a, e, n);\nint64_t enc_b = modpow(b, e, n);\n\n---\n\n3. The Vulnerability\n\nWith e = 3 and 64-", "created": "2025-12-17T08:05:47Z", "labels": [], "context": "bounty challenge V2 [ DONE ] answer : 18446744073709551615\n\n-----\n\n1. Encryption Scheme Used\nThe system implements textbook RSA with:\n\nPublic exponent: e = 3\n\nLarge 1024-bit modulus n\n\nCRITICAL FLAW: No padding is used, and small"}


identifier: gh_issue_3737849140
source: github_issue
status: new
created_at: 2025-12-17 08:29:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3737849140", "title": "aiohttp-3.11.13-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl: 1 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/lqc/kalandra/issues/32", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "kalandra", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>aiohttp-3.11.13-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl</b></summary>\n\n<p>Async http client/server framework (asyncio)</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/0b/58/9da09291e19696c452e7224c1ce8c6d23a291fe8cd5c6b247b51bcda07db/aiohttp-3.11.13-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86", "created": "2025-12-17T08:19:42Z", "labels": ["Mend: dependency security vulnerability"], "context": "aiohttp-3.11.13-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl: 1 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>aiohttp-3.11.13-cp313-cp313-manylinux_2_17_x86_"}


identifier: gh_issue_3737663721
source: github_issue
status: new
created_at: 2025-12-17 08:29:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3737663721", "title": "LEGENDARY ISSUE \u2014 AI OPERATING SYSTEM: PRODUCTION READINESS &amp; SUPREMACY PASS", "url": "https://github.com/Bboy9090/Bobbys_World_Tools/issues/39", "user": "Bboy9090", "user_url": "https://github.com/Bboy9090", "repo": "Bobbys_World_Tools", "body_preview": "<html>\n<body>\n<!--StartFragment--><html><head></head><body><p>Here is a <strong>drop-in, production-grade GitHub Issue</strong> you can paste <strong>verbatim</strong> into the Pandora Codex repo.<br>This is written to <strong>trigger Copilot Agents, Spark, Code Review bots, and human reviewers</strong> into a single coordinated execution mode.</p><p>This is not hype. This is an <strong>AI-orchestrated repo hardening order</strong>.</p><hr><h1>\ud83d\ude80 LEGENDARY ISSUE \u2014 AI OPERATING SYSTEM: PRODUCTION ", "created": "2025-12-17T07:14:41Z", "labels": [], "context": "LEGENDARY ISSUE \u2014 AI OPERATING SYSTEM: PRODUCTION READINESS &amp; SUPREMACY PASS <html>\n<body>\n<!--StartFragment--><html><head></head><body><p>Here is a <strong>drop-in, production-grade GitHub Issue</strong> you can paste <strong>verbatim</strong> into the Pandora Codex repo.<br>"}


identifier: gh_issue_3737906720
source: github_issue
status: new
created_at: 2025-12-17 08:42:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3737906720", "title": "High severity vulnerability CVE-2025-68154 in systeminformation <5.27.14", "url": "https://github.com/cypress-io/cypress/issues/33146", "user": "MikeMcC399", "user_url": "https://github.com/MikeMcC399", "repo": "cypress", "body_preview": "### Current behavior\n\nDependabot and `npm audit` report a high severity vulnerability CVE-2025-68154 (https://github.com/advisories/GHSA-wphj-fx3q-84ch) in the npm module [systeminformation](https://www.npmjs.com/package/systeminformation) `<5.27.14` used by Cypress.\n\nThe vulnerability is not fixable with `npm audit fix` apart from downgrading the version of Cypress to `<15.1.0`.\n\n### Desired behavior\n\n`npm audit` should report no vulnerabilities from Cypress.\n\n### Test code to reproduce\n\n```she", "created": "2025-12-17T08:37:46Z", "labels": [], "context": "High severity vulnerability CVE-2025-68154 in systeminformation <5.27.14 ### Current behavior\n\nDependabot and `npm audit` report a high severity vulnerability CVE-2025-68154 (https://github.com/advisories/GHSA-wphj-fx3q-84ch) in the npm module [systeminformation](https://w"}


identifier: gh_issue_3737883114
source: github_issue
status: new
created_at: 2025-12-17 08:42:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3737883114", "title": "systeminformation has a Command Injection vulnerability in fsSize() function on Windows", "url": "https://github.com/TheKingTermux/alice/issues/895", "user": "TheKingTermux", "user_url": "https://github.com/TheKingTermux", "repo": "alice", "body_preview": "### Description\n\n- Summary\nThe `fsSize()` function in `systeminformation` is vulnerable to OS Command Injection (CWE-78) on Windows systems. The optional `drive` parameter is directly concatenated into a PowerShell command without sanitization, allowing arbitrary command execution when user-controlled input reaches this function.\n\nAffected Platforms: Windows only\n\nCVSS Breakdown:\n\nAttack Vector (AV:N): Network - if used in a web application/API\nAttack Complexity (AC:H): High - requires applicati", "created": "2025-12-17T08:31:03Z", "labels": ["do-not-autoclose", "Security", "Auto Create Issues"], "context": "systeminformation has a Command Injection vulnerability in fsSize() function on Windows ### Description\n\n- Summary\nThe `fsSize()` function in `systeminformation` is vulnerable to OS Command Injection (CWE-78) on Windows systems. The optional `drive` parameter is directly concatenated int"}


identifier: gh_issue_3737760677
source: github_issue
status: new
created_at: 2025-12-17 08:42:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3737760677", "title": "vulnerabilities found in version", "url": "https://github.com/gflohr/esgettext/issues/115", "user": "matteshe", "user_url": "https://github.com/matteshe", "repo": "esgettext", "body_preview": "dependencies: @esgettext/runtime\": \"^1.3.6\"\ndevDependencies: \"@esgettext/tools\": \"^1.3.6\"\n\nnpm audit\nnpm warn Unknown user config \"always-auth\". This will stop working in the next major version of npm.\n# npm audit report\n\nvalibot  0.31.0 - 1.1.0\nSeverity: high\nValibot has a ReDoS vulnerability in `EMOJI_REGEX` - https://github.com/advisories/GHSA-vqpr-j7v3-hqw9\nfix available via `npm audit fix --force`\nWill install @esgettext/tools@1.0.0, which is a breaking change\nnode_modules/valibot\n  @esgett", "created": "2025-12-17T07:49:12Z", "labels": [], "context": "vulnerabilities found in version dependencies: @esgettext/runtime\": \"^1.3.6\"\ndevDependencies: \"@esgettext/tools\": \"^1.3.6\"\n\nnpm audit\nnpm warn Unknown user config \"always-auth\". This will stop working in the next major version of npm"}


identifier: gh_issue_3737921984
source: github_issue
status: new
created_at: 2025-12-17 08:54:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3737921984", "title": "boto3-1.42.11-py3-none-any.whl: 3 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/Jason-Clark-FG/OpenMetadata-FG/issues/316", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "OpenMetadata-FG", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>boto3-1.42.11-py3-none-any.whl</b></summary>\n\n<p></p>\n<p>Path to dependency file: /ingestion</p>\n<p>Path to vulnerable library: /tmp/ws-ua_20251217083729_GABRLH/python_RCUWDP/202512170837301/env/lib/python3.9/site-packages/urllib3-1.26.20.dist-info</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/Jason-Clark-FG/OpenMetadata-FG/comm", "created": "2025-12-17T08:42:55Z", "labels": ["Mend: dependency security vulnerability"], "context": "boto3-1.42.11-py3-none-any.whl: 3 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>boto3-1.42.11-py3-none-any.whl</b></summary>\n\n<"}


identifier: gh_issue_3737907812
source: github_issue
status: new
created_at: 2025-12-17 08:54:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3737907812", "title": "Enabling security reports and dependency submission", "url": "https://github.com/vanniktech/gradle-maven-publish-plugin/issues/1274", "user": "antoniovazquezblanco", "user_url": "https://github.com/antoniovazquezblanco", "repo": "gradle-maven-publish-plugin", "body_preview": "I would like to suggest to enable the dependency submission and security reports that GitHub offers.\n\nEnabling those features under advanced security in the repository settings provides a couple of, in my opinion, nice features:\n* Better tracking of the project dependencies.\n* Vulnerability tracking of those dependencies under the security tab of this project.\n\nThat improves software information and enables both developers and users to take action in case any security issue arises.\n\nThanks", "created": "2025-12-17T08:38:11Z", "labels": [], "context": "Enabling security reports and dependency submission I would like to suggest to enable the dependency submission and security reports that GitHub offers.\n\nEnabling those features under advanced security in the repository settings provides a couple of, i"}


identifier: gh_issue_3737944924
source: github_issue
status: new
created_at: 2025-12-17 09:05:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3737944924", "title": "Bug:  IMPORTANT: Improper Handling of Duplicate Security Reports & CVE Assignment", "url": "https://github.com/ChurchCRM/CRM/issues/7802", "user": "lukasz-rybak", "user_url": "https://github.com/lukasz-rybak", "repo": "CRM", "body_preview": "Hello,\n\nI am writing to address a critical procedural issue regarding how security vulnerabilities are being handled, published, and assigned CVEs in this repository.\n\nI have noticed a recurring pattern where **multiple separate Security Advisories (and consequently multiple CVE IDs)** are being published for the exact same vulnerability.\n\nFor example:\n1.  **Stored XSS in `GroupEditor.php`:** My advisory was published first, but shortly after, a duplicate advisory for the exact same bug (reporte", "created": "2025-12-17T08:49:38Z", "labels": [], "context": "Bug:  IMPORTANT: Improper Handling of Duplicate Security Reports & CVE Assignment Hello,\n\nI am writing to address a critical procedural issue regarding how security vulnerabilities are being handled, published, and assigned CVEs in this repository.\n\nI have noticed a recurring patte"}


identifier: gh_issue_3737926449
source: github_issue
status: new
created_at: 2025-12-17 09:05:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3737926449", "title": "Scala 2.13 and org.lz4:lz4-java vulnerabilities", "url": "https://github.com/altoo-ag/pekko-kryo-serialization/issues/26", "user": "esenkus", "user_url": "https://github.com/esenkus", "repo": "pekko-kryo-serialization", "body_preview": "Hello,\nI noticed that pekko-kryo-serialization is using vulnerable lz4-java version 1.8.0 https://nvd.nist.gov/vuln/detail/CVE-2025-12183\nThere is an newer version 1.8.1 but it has an different vulnerability https://nvd.nist.gov/vuln/detail/CVE-2025-66566\n\nThe creator suggests to migrate into fork https://github.com/yawkat/lz4-java https://github.com/yawkat/lz4-java/releases/tag/v1.8.1\n\nAre there any plans on fixing vulnerabilities?\n\nCurrently when checking dependency graph on latest release it ", "created": "2025-12-17T08:44:26Z", "labels": [], "context": "Scala 2.13 and org.lz4:lz4-java vulnerabilities Hello,\nI noticed that pekko-kryo-serialization is using vulnerable lz4-java version 1.8.0 https://nvd.nist.gov/vuln/detail/CVE-2025-12183\nThere is an newer version 1.8.1 but it has an different vulner"}


identifier: gh_issue_3737983813
source: github_issue
status: new
created_at: 2025-12-17 09:05:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3737983813", "title": "Exercise: Introduction to Secret Scanning", "url": "https://github.com/anshumank14/skills-introduction-to-secret-scanning/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-secret-scanning", "body_preview": "## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @anshumank14! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll learn how to identify and protect sensitive information in your repositories. \ud83d\udd0d Let&#39;s work together to keep your code secure! \ud83d\udee1\ufe0f\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the ", "created": "2025-12-17T09:01:42Z", "labels": [], "context": "Exercise: Introduction to Secret Scanning ## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @anshumank14! Welcome to your Ski"}


identifier: gh_issue_3737945920
source: github_issue
status: new
created_at: 2025-12-17 09:05:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3737945920", "title": "Exercise: Introduction to Secret Scanning", "url": "https://github.com/eskalaiyarasan/skills-introduction-to-secret-scanning/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-secret-scanning", "body_preview": "## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @eskalaiyarasan! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll learn how to identify and protect sensitive information in your repositories. \ud83d\udd0d Let&#39;s work together to keep your code secure! \ud83d\udee1\ufe0f\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in t", "created": "2025-12-17T08:49:58Z", "labels": [], "context": "Exercise: Introduction to Secret Scanning ## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @eskalaiyarasan! Welcome to your "}


identifier: gh_issue_3737944101
source: github_issue
status: new
created_at: 2025-12-17 09:05:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3737944101", "title": "Exercise: Introduction to Secret Scanning", "url": "https://github.com/MakarandBhoir/skills-introduction-to-secret-scanning2/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-secret-scanning2", "body_preview": "## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @MakarandBhoir! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll learn how to identify and protect sensitive information in your repositories. \ud83d\udd0d Let&#39;s work together to keep your code secure! \ud83d\udee1\ufe0f\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in th", "created": "2025-12-17T08:49:22Z", "labels": [], "context": "Exercise: Introduction to Secret Scanning ## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @MakarandBhoir! Welcome to your S"}


identifier: gh_issue_3737943462
source: github_issue
status: new
created_at: 2025-12-17 09:05:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3737943462", "title": "Exercise: Introduction to Secret Scanning", "url": "https://github.com/abinayaravirajan/skills-introduction-to-secret-scanning/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-secret-scanning", "body_preview": "## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @abinayaravirajan! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll learn how to identify and protect sensitive information in your repositories. \ud83d\udd0d Let&#39;s work together to keep your code secure! \ud83d\udee1\ufe0f\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in", "created": "2025-12-17T08:49:11Z", "labels": [], "context": "Exercise: Introduction to Secret Scanning ## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @abinayaravirajan! Welcome to you"}


identifier: gh_issue_3737939685
source: github_issue
status: new
created_at: 2025-12-17 09:05:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3737939685", "title": "Enable Github's `Immutable releases`", "url": "https://github.com/mlocati/docker-php-extension-installer/issues/1210", "user": "Slamdunk", "user_url": "https://github.com/Slamdunk", "repo": "docker-php-extension-installer", "body_preview": "This tool has become a key component of our production builds and we'd like to protect them: can Immutable releases be activated?\n\nhttps://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/immutable-releases", "created": "2025-12-17T08:48:18Z", "labels": ["enhancement"], "context": "Enable Github's `Immutable releases` This tool has become a key component of our production builds and we'd like to protect them: can Immutable releases be activated?\n\nhttps://docs.github.com/en/code-security/supply-chain-security/unders"}


identifier: gh_issue_3738002105
source: github_issue
status: new
created_at: 2025-12-17 09:16:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3738002105", "title": "Bounty v2] Linear Invariant Leakage in Homomorphic Addition (Ciphertext-Only)", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/109", "user": "choir94", "user_url": "https://github.com/choir94", "repo": "pvac_hfhe_cpp", "body_preview": "I report a deterministic ciphertext-only information leakage in the\nPVAC-HFHE implementation affecting homomorphic addition.\n\nThe issue is NOT related to placeholder variables (a / b), test shortcuts,\nmetadata guessing, or ad-hoc byte parsing.\nThe leakage exists at the algebraic level of ciphertext combination.\n\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\nSummary\n\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\nFor each ciphertext, there exists a public linear invariant derived from\nciphertext edges which survive", "created": "2025-12-17T09:06:49Z", "labels": [], "context": "Bounty v2] Linear Invariant Leakage in Homomorphic Addition (Ciphertext-Only) I report a deterministic ciphertext-only information leakage in the\nPVAC-HFHE implementation affecting homomorphic addition.\n\nThe issue is NOT related to placeholder variables (a / b), test shortcuts,"}


identifier: gh_issue_3737915646
source: github_issue
status: new
created_at: 2025-12-17 09:16:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3737915646", "title": "[BOUNTY] Critical Information Leakage: Raw Plaintext Visible in Ciphertext Structure", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/104", "user": "delonix007", "user_url": "https://github.com/delonix007", "repo": "pvac_hfhe_cpp", "body_preview": "I have analyzed the provided artifacts (a.ct and b.ct) and discovered a critical implementation flaw. The encryption scheme fails to mask the underlying plaintext values effectively. The raw 64-bit integer values of the messages are directly visible and recoverable from the ciphertext files without needing the private key.\n\nVulnerability Details: By inspecting the binary structure of the ciphertext files, I observed that after a 25-byte header, the raw payload is stored in little-endian format.\n", "created": "2025-12-17T08:40:55Z", "labels": [], "context": "[BOUNTY] Critical Information Leakage: Raw Plaintext Visible in Ciphertext Structure I have analyzed the provided artifacts (a.ct and b.ct) and discovered a critical implementation flaw. The encryption scheme fails to mask the underlying plaintext values effectively. The raw 64-bit in"}


identifier: gh_issue_3737881069
source: github_issue
status: new
created_at: 2025-12-17 09:16:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3737881069", "title": "[BOUNTY 2] Plaintext Leak via Ciphertext Metadata (Nonce Correlation)", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/101", "user": "MictoNode", "user_url": "https://github.com/MictoNode", "repo": "pvac_hfhe_cpp", "body_preview": "# PVAC HFHE Bounty2 - Information Leakage via Metadata (Nonce Correlation)\n\n## Answer (Proposed Sum)\n**`5783182427923393996`**\n\n## Vulnerability: Plaintext Leakage via Nonce Correlation\n\n### Description\nThe challenge ciphertext files (`a.ct` and `b.ct`) exhibit a statistically impossible anomaly in their generator seeds (nonces). Specifically, the XOR sum of the `nonce_lo` fields across all layers of both ciphertexts yields a consistent 64-bit integer that does not occur in standard random gener", "created": "2025-12-17T08:30:22Z", "labels": [], "context": "[BOUNTY 2] Plaintext Leak via Ciphertext Metadata (Nonce Correlation) # PVAC HFHE Bounty2 - Information Leakage via Metadata (Nonce Correlation)\n\n## Answer (Proposed Sum)\n**`5783182427923393996`**\n\n## Vulnerability: Plaintext Leakage via Nonce Correlation\n\n### Descripti"}


identifier: gh_issue_3738050126
source: github_issue
status: new
created_at: 2025-12-17 09:28:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3738050126", "title": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected", "url": "https://github.com/truckercore/truckercore1/issues/147", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "truckercore1", "body_preview": "# Security Audit Report - 2025-12-17\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/util vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-9j5q-479x-43g2\nfix available via `npm audit fix --force`\nWill install @stryker-mutator/vitest-runner@8.7.1, which is outside the stated dependency range\nnode_modules/@stryker-mutator/util\n  @stryker-mutator/core  <=8.7.0\n  D", "created": "2025-12-17T09:20:26Z", "labels": ["security", "dependencies", "automated"], "context": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected # Security Audit Report - 2025-12-17\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/"}


identifier: gh_issue_3738010396
source: github_issue
status: new
created_at: 2025-12-17 09:28:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3738010396", "title": "Add Backend Developer Agent", "url": "https://github.com/JeremyDev87/codingbuddy/issues/11", "user": "JeremyDev87", "user_url": "https://github.com/JeremyDev87", "repo": "codingbuddy", "body_preview": "# Add Backend Developer Agent\n\n## Summary\n\nAdd a Backend Developer Agent to Codebuddy's AI Agent system to provide specialized AI assistance for backend development tasks.\n\n## Background\n\nCodebuddy currently provides 12 specialist agents, with `frontend-developer.json` included as an example Primary Developer Agent. The README mentions `backend-developer.json` as an example, but no actual implementation exists.\n\n**Current Agent List:**\n- **Core Agents**: frontend-developer, code-reviewer\n- **Dom", "created": "2025-12-17T09:08:52Z", "labels": ["feat"], "context": "Add Backend Developer Agent # Add Backend Developer Agent\n\n## Summary\n\nAdd a Backend Developer Agent to Codebuddy's AI Agent system to provide specialized AI assistance for backend development tasks.\n\n## Background\n\nCodebuddy cu"}


identifier: gh_issue_3737968001
source: github_issue
status: new
created_at: 2025-12-17 09:28:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3737968001", "title": "Remove MJML dependency and implement custom HTML email templating", "url": "https://github.com/baxterdax/MuTTE/issues/6", "user": "baxterdax", "user_url": "https://github.com/baxterdax", "repo": "MuTTE", "body_preview": "## Problem\n\nMuTTE currently includes MJML as an optional template engine, but:\n- **No users are currently using MJML** (templates are still in early adoption phase)\n- **Security vulnerability** \u2014 MJML 4.16.1 has a transitive REDoS vulnerability in html-minifier (GHSA-pfq8-rq6v-vf5m)\n- **Build complexity** \u2014 MJML is a monorepo (Lerna-based) that requires complex build tooling and causes installation issues\n- **Dependency bloat** \u2014 Maintains unnecessary external dependency for unused feature\n\n## S", "created": "2025-12-17T08:57:28Z", "labels": ["enhancement", "security", "breaking-change"], "context": "Remove MJML dependency and implement custom HTML email templating ## Problem\n\nMuTTE currently includes MJML as an optional template engine, but:\n- **No users are currently using MJML** (templates are still in early adoption phase)\n- **Security vulnerability** \u2014 MJML"}


identifier: gh_issue_3738002498
source: github_issue
status: new
created_at: 2025-12-17 09:28:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3738002498", "title": "Exercise: Introduction to Secret Scanning", "url": "https://github.com/Kashyapsudhir09/skills-introduction-to-secret-scanning/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-secret-scanning", "body_preview": "## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Kashyapsudhir09! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll learn how to identify and protect sensitive information in your repositories. \ud83d\udd0d Let&#39;s work together to keep your code secure! \ud83d\udee1\ufe0f\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in ", "created": "2025-12-17T09:06:57Z", "labels": [], "context": "Exercise: Introduction to Secret Scanning ## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Kashyapsudhir09! Welcome to your"}


identifier: gh_issue_3737848294
source: github_issue
status: new
created_at: 2025-12-17 09:28:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3737848294", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/JuckieJimJam/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @JuckieJimJam! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step", "created": "2025-12-17T08:19:24Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @JuckieJimJam! Welcome "}


identifier: gh_issue_3737976244
source: github_issue
status: new
created_at: 2025-12-17 09:40:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3737976244", "title": "Dependabot\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u691c\u8a3c\u30e1\u30e2", "url": "https://github.com/3sss-k-hayasaka/dependabot-test-01/issues/2", "user": "3sss-k-hayasaka", "user_url": "https://github.com/3sss-k-hayasaka", "repo": "dependabot-test-01", "body_preview": "## \u6982\u8981\n\nDependabot\u306e\u52d5\u4f5c\u691c\u8a3c\u3092\u884c\u3044\u3001\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u304c\u6b63\u5e38\u306b\u5b8c\u4e86\u3057\u305f\u3053\u3068\u3092\u78ba\u8a8d\u3057\u305f\u3002\n\n## \u8a2d\u5b9a\u5185\u5bb9\n\n**\u5bfe\u8c61\u30d6\u30e9\u30f3\u30c1:** main, staging\n\n**\u6709\u52b9\u5316\u3057\u305f\u6a5f\u80fd:**\n- Dependabot alerts\n- Dependabot security updates\n- Grouped security updates\n- Dependabot version updates\uff08dependabot.yml\uff09\n\n**\u30b9\u30b1\u30b8\u30e5\u30fc\u30eb:** \u6bce\u65e5 10:00 JST\n\n## \u30c6\u30b9\u30c8\u7528\u306b\u8ffd\u52a0\u3057\u305f\u8106\u5f31\u6027\u30d1\u30c3\u30b1\u30fc\u30b8\n\n| \u30d6\u30e9\u30f3\u30c1 | \u30d1\u30c3\u30b1\u30fc\u30b8 | \u30d0\u30fc\u30b8\u30e7\u30f3 | \u8106\u5f31\u6027 | \u6df1\u523b\u5ea6 |\n|---------|-----------|-----------|--------|-------|\n| main | lodash | 4.17.19 | Prototype Pollution / Command Injection | High |\n| main | minimatch | 3.0.4 | ReDoS | High |\n| staging | seriali", "created": "2025-12-17T08:59:39Z", "labels": [], "context": "Dependabot\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u691c\u8a3c\u30e1\u30e2 ## \u6982\u8981\n\nDependabot\u306e\u52d5\u4f5c\u691c\u8a3c\u3092\u884c\u3044\u3001\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u304c\u6b63\u5e38\u306b\u5b8c\u4e86\u3057\u305f\u3053\u3068\u3092\u78ba\u8a8d\u3057\u305f\u3002\n\n## \u8a2d\u5b9a\u5185\u5bb9\n\n**\u5bfe\u8c61\u30d6\u30e9\u30f3\u30c1:** main, staging\n\n**\u6709\u52b9\u5316\u3057\u305f\u6a5f\u80fd:**\n- Dependabot alerts\n- Dependabot security updates\n- Grouped security updates\n- Dependabot version upd"}


identifier: gh_issue_3738046146
source: github_issue
status: new
created_at: 2025-12-17 09:53:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3738046146", "title": "Assess spring petclinic repo", "url": "https://github.com/zhoufenqin/spring-petclinic-microservices/issues/51", "user": "zhoufenqin", "user_url": "https://github.com/zhoufenqin", "repo": "spring-petclinic-microservices", "body_preview": "Assess the three spring petclinic microservice:\n\nhttps://github.com/zhoufenqin/spring-petclinic-microservices-custom-service\n\nhttps://github.com/zhoufenqin/spring-petclinic-microservices-vet-service\n\nhttps://github.com/zhoufenqin/spring-petclinic-microservices-visits-service", "created": "2025-12-17T09:19:12Z", "labels": [], "context": "Assess spring petclinic repo Assess the three spring petclinic microservice:\n\nhttps://github.com/zhoufenqin/spring-petclinic-microservices-custom-service\n\nhttps://github.com/zhoufenqin/spring-petclinic-microservices-vet-service\n\n"}


identifier: gh_issue_3738181470
source: github_issue
status: new
created_at: 2025-12-17 10:04:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3738181470", "title": "Secure npm Publishing Workflow for Open Source Project", "url": "https://github.com/JeremyDev87/codingbuddy/issues/15", "user": "JeremyDev87", "user_url": "https://github.com/JeremyDev87", "repo": "codingbuddy", "body_preview": "# Secure npm Publishing Workflow for Open Source Project\n\n## Summary\n\nImplement security measures to prevent malicious npm package publishing from external contributors\n\n---\n\n## Description\n\n### Background\n\nCodebuddy is an open source project that publishes npm packages via GitHub Actions workflows. As an open source project, external contributors can submit pull requests that, once merged, automatically trigger npm publishing.\n\n### Current Risk Assessment\n\n| Workflow | Trigger | Risk Level | De", "created": "2025-12-17T09:57:56Z", "labels": ["feat"], "context": "Secure npm Publishing Workflow for Open Source Project # Secure npm Publishing Workflow for Open Source Project\n\n## Summary\n\nImplement security measures to prevent malicious npm package publishing from external contributors\n\n---\n\n## Description\n\n### Backg"}


identifier: gh_issue_3738206182
source: github_issue
status: new
created_at: 2025-12-17 10:17:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3738206182", "title": "GitHub Changelog:Dependabot security updates now support uv", "url": "https://github.com/shundor/github-changelog-reader/issues/619", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "github-changelog-reader", "body_preview": "# Dependabot security updates now support uv\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\" \"http://www.w3.org/TR/REC-html40/loose.dtd\">\n<html><body><p>Dependabot now supports security alerts and updates for uv. When vulnerabilities are detected in your uv dependencies, Dependabot can automatically open security alerts and pull requests to update to secure versions.</p>\n<ul>\n<li>Engage with <a href=\"https://github.com/dependabot/dependabot-core/issues/10478\">the Dependabot open s", "created": "2025-12-17T10:05:14Z", "labels": ["changelog"], "context": "GitHub Changelog:Dependabot security updates now support uv # Dependabot security updates now support uv\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\" \"http://www.w3.org/TR/REC-html40/loose.dtd\">\n<html><body><p>Dependabot now supports security"}


identifier: gh_issue_3738197354
source: github_issue
status: new
created_at: 2025-12-17 10:17:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3738197354", "title": "GitHub Changelog:Dependabot security updates now support uv", "url": "https://github.com/renefritze/github-changelog-reader/issues/248", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "github-changelog-reader", "body_preview": "# Dependabot security updates now support uv\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\" \"http://www.w3.org/TR/REC-html40/loose.dtd\">\n<html><body><p>Dependabot now supports security alerts and updates for uv. When vulnerabilities are detected in your uv dependencies, Dependabot can automatically open security alerts and pull requests to update to secure versions.</p>\n<ul>\n<li>Engage with <a href=\"https://github.com/dependabot/dependabot-core/issues/10478\">the Dependabot open s", "created": "2025-12-17T10:02:35Z", "labels": ["changelog"], "context": "GitHub Changelog:Dependabot security updates now support uv # Dependabot security updates now support uv\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\" \"http://www.w3.org/TR/REC-html40/loose.dtd\">\n<html><body><p>Dependabot now supports security"}


identifier: gh_issue_3738151117
source: github_issue
status: new
created_at: 2025-12-17 10:17:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3738151117", "title": "Mr", "url": "https://github.com/rexxars/react-jason/issues/1", "user": "esoheylll-hue", "user_url": "https://github.com/esoheylll-hue", "repo": "react-jason", "body_preview": "{\n  \"version\": \"10.9.0\",\n  \"name\": \"npm\",\n  \"description\": \"a package manager for JavaScript\",\n  \"workspaces\": [\n    \"docs\",\n    \"smoke-tests\",\n    \"mock-globals\",\n    \"mock-registry\",\n    \"workspaces/*\"\n  ],\n  \"files\": [\n    \"bin/\",\n    \"lib/\",\n    \"index.js\",\n    \"docs/content/\",\n    \"docs/output/\",\n    \"man/\"\n  ],\n  \"keywords\": [\n    \"install\",\n    \"modules\",\n    \"package manager\",\n    \"package.json\"\n  ],\n  \"homepage\": \"https://docs.npmjs.com/\",\n  \"author\": \"GitHub Inc.\",\n  \"repository\": {\n  ", "created": "2025-12-17T09:48:51Z", "labels": [], "context": "Mr {\n  \"version\": \"10.9.0\",\n  \"name\": \"npm\",\n  \"description\": \"a package manager for JavaScript\",\n  \"workspaces\": [\n    \"docs\",\n    \"smoke-tests\",\n    \"mock-globals\",\n    \"mock-registry\",\n    \"workspaces"}


identifier: gh_issue_3738262284
source: github_issue
status: new
created_at: 2025-12-17 10:42:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3738262284", "title": "github copilot problem", "url": "https://github.com/router-for-me/CLIProxyAPI/issues/578", "user": "ahmedrageh", "user_url": "https://github.com/ahmedrageh", "repo": "CLIProxyAPI", "body_preview": "=== REQUEST INFO ===\nVersion: 6.6.22\nURL: /v1/chat/completions\nMethod: POST\nTimestamp: 2025-12-17T13:18:32.8195707+03:00\n\n=== HEADERS ===\nUser-Agent: oai-compatible-copilot/0.1.8 VSCode/1.107.0\nAuthorization: Bearer 12...56\nAccept-Language: *\nAccept-Encoding: gzip, deflate\nConnection: keep-alive\nContent-Type: application/json\nSec-Fetch-Mode: cors\nAccept: */*\nContent-Length: 111817\n \n=== API RESPONSE ===\n{\n  \"error\": {\n    \"code\": 400,\n    \"message\": \"{\\\"type\\\":\\\"error\\\",\\\"error\\\":{\\\"type\\\":\\\"inv", "created": "2025-12-17T10:21:26Z", "labels": [], "context": "github copilot problem === REQUEST INFO ===\nVersion: 6.6.22\nURL: /v1/chat/completions\nMethod: POST\nTimestamp: 2025-12-17T13:18:32.8195707+03:00\n\n=== HEADERS ===\nUser-Agent: oai-compatible-copilot/0.1.8 VSCode/1.107.0\nAuthor"}


identifier: gh_issue_3738317120
source: github_issue
status: new
created_at: 2025-12-17 10:56:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3738317120", "title": "SECURITYINTERNAL-118", "url": "https://github.com/SahanWeerasiri/test-email-automation/issues/151", "user": "SahanWeerasiri", "user_url": "https://github.com/SahanWeerasiri", "repo": "test-email-automation", "body_preview": "## Description\r\n- **SECURITYINTERNAL ID:** `118`\r\n- **Security Advisory ID:** `WSO2-2025-118`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Security Finding: Exposed .git Directory\"` in **security@**.\r\n- **Security Advisory:** [link](https://security-advisory.wso2.com/dashboard/advisory?name=WSO2-2025-118)\r\n- **Progress Progress View:** [link](https://security-advisory.wso2.com/dashboard/advisory/patchProgress?name=WSO2-2025-118)\r\n- **Reporter:** External Reporter\r\n- **Date:** Wed, Dec 17, 2025 at 4", "created": "2025-12-17T10:36:28Z", "labels": ["Reporter/External", "Severity/Medium", "Type/Vulnerability"], "context": "SECURITYINTERNAL-118 ## Description\r\n- **SECURITYINTERNAL ID:** `118`\r\n- **Security Advisory ID:** `WSO2-2025-118`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Security Finding: Exposed .git Directory\"` in **security@**.\r\n- "}


identifier: gh_issue_3738329599
source: github_issue
status: new
created_at: 2025-12-17 10:56:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3738329599", "title": "SECURITYINTERNAL-122", "url": "https://github.com/SahanWeerasiri/test-email-automation/issues/155", "user": "SahanWeerasiri", "user_url": "https://github.com/SahanWeerasiri", "repo": "test-email-automation", "body_preview": "## Description\r\n- **SECURITYINTERNAL ID:** `122`\r\n- **Security Advisory ID:** `WSO2-2025-122`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Internal Security Incident: Laptop Theft\"` in **security@**.\r\n- **Security Advisory:** [link](https://security-advisory.wso2.com/dashboard/advisory?name=WSO2-2025-122)\r\n- **Progress Progress View:** [link](https://security-advisory.wso2.com/dashboard/advisory/patchProgress?name=WSO2-2025-122)\r\n- **Reporter:** Internal Reporter / Customer\r\n- **Date:** Wed, Dec 17", "created": "2025-12-17T10:39:53Z", "labels": ["Reporter/Internal", "Type/Vulnerability", "Severity/High"], "context": "SECURITYINTERNAL-122 ## Description\r\n- **SECURITYINTERNAL ID:** `122`\r\n- **Security Advisory ID:** `WSO2-2025-122`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Internal Security Incident: Laptop Theft\"` in **security@**.\r\n- "}


identifier: gh_issue_3738327106
source: github_issue
status: new
created_at: 2025-12-17 10:56:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3738327106", "title": "SECURITYINTERNAL-121", "url": "https://github.com/SahanWeerasiri/test-email-automation/issues/154", "user": "SahanWeerasiri", "user_url": "https://github.com/SahanWeerasiri", "repo": "test-email-automation", "body_preview": "## Description\r\n- **SECURITYINTERNAL ID:** `121`\r\n- **Security Advisory ID:** `WSO2-2025-121`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"PGP Encrypted Security Disclosure - API Manager\"` in **security@**.\r\n- **Security Advisory:** [link](https://security-advisory.wso2.com/dashboard/advisory?name=WSO2-2025-121)\r\n- **Progress Progress View:** [link](https://security-advisory.wso2.com/dashboard/advisory/patchProgress?name=WSO2-2025-121)\r\n- **Reporter:** External Reporter\r\n- **Date:** Wed, Dec 17, 20", "created": "2025-12-17T10:39:06Z", "labels": ["Reporter/External", "Severity/Low", "Type/Direct-Spam"], "context": "SECURITYINTERNAL-121 ## Description\r\n- **SECURITYINTERNAL ID:** `121`\r\n- **Security Advisory ID:** `WSO2-2025-121`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"PGP Encrypted Security Disclosure - API Manager\"` in **security@"}


identifier: gh_issue_3738324197
source: github_issue
status: new
created_at: 2025-12-17 10:56:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3738324197", "title": "SECURITYINTERNAL-120", "url": "https://github.com/SahanWeerasiri/test-email-automation/issues/153", "user": "SahanWeerasiri", "user_url": "https://github.com/SahanWeerasiri", "repo": "test-email-automation", "body_preview": "## Description\r\n- **SECURITYINTERNAL ID:** `120`\r\n- **Security Advisory ID:** `WSO2-2025-120`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Malicious URL Detection - Internal Wiki\"` in **security@**.\r\n- **Security Advisory:** [link](https://security-advisory.wso2.com/dashboard/advisory?name=WSO2-2025-120)\r\n- **Progress Progress View:** [link](https://security-advisory.wso2.com/dashboard/advisory/patchProgress?name=WSO2-2025-120)\r\n- **Reporter:** External Reporter\r\n- **Date:** Wed, Dec 17, 2025 at 4:", "created": "2025-12-17T10:38:23Z", "labels": ["Reporter/External", "Severity/Critical", "Type/Direct-Spam"], "context": "SECURITYINTERNAL-120 ## Description\r\n- **SECURITYINTERNAL ID:** `120`\r\n- **Security Advisory ID:** `WSO2-2025-120`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Malicious URL Detection - Internal Wiki\"` in **security@**.\r\n- *"}


identifier: gh_issue_3738320776
source: github_issue
status: new
created_at: 2025-12-17 10:56:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3738320776", "title": "SECURITYINTERNAL-119", "url": "https://github.com/SahanWeerasiri/test-email-automation/issues/152", "user": "SahanWeerasiri", "user_url": "https://github.com/SahanWeerasiri", "repo": "test-email-automation", "body_preview": "## Description\r\n- **SECURITYINTERNAL ID:** `119`\r\n- **Security Advisory ID:** `WSO2-2025-119`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Security Report: Proof of Concept Screenshots\"` in **security@**.\r\n- **Security Advisory:** [link](https://security-advisory.wso2.com/dashboard/advisory?name=WSO2-2025-119)\r\n- **Progress Progress View:** [link](https://security-advisory.wso2.com/dashboard/advisory/patchProgress?name=WSO2-2025-119)\r\n- **Reporter:** External Reporter\r\n- **Date:** Wed, Dec 17, 2025", "created": "2025-12-17T10:37:25Z", "labels": ["Reporter/External", "Severity/Low", "Type/Direct-Spam"], "context": "SECURITYINTERNAL-119 ## Description\r\n- **SECURITYINTERNAL ID:** `119`\r\n- **Security Advisory ID:** `WSO2-2025-119`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Security Report: Proof of Concept Screenshots\"` in **security@**"}


identifier: gh_issue_3738399920
source: github_issue
status: new
created_at: 2025-12-17 11:08:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3738399920", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/Robertinho18/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Robertinho18! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step", "created": "2025-12-17T10:59:39Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Robertinho18! Welcome "}


identifier: gh_issue_3738308130
source: github_issue
status: new
created_at: 2025-12-17 11:08:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3738308130", "title": "Repo ownership", "url": "https://github.com/Jahia/jahia-csrf-guard/issues/144", "user": "bpapez", "user_url": "https://github.com/bpapez", "repo": "jahia-csrf-guard", "body_preview": "The goal of this issue is to work on technical debt for a repository as part of the codebase ownership initiative. It is organized around team members regularly reviewing the state of codebases.\n\nCreating a tech day ticket is not required to work on tech debt, but can be a helpful resource to identify areas of focus.\n\n## Recommendations\n\nYou will not be able to address the entierety of a codebase tech debt in one go, organization is key to make sure you wrap-up time spent on a codebase with conc", "created": "2025-12-17T10:33:58Z", "labels": ["Area:Tech", "Tech Day"], "context": "Repo ownership The goal of this issue is to work on technical debt for a repository as part of the codebase ownership initiative. It is organized around team members regularly reviewing the state of codebases.\n\nCrea"}


identifier: gh_issue_3738306863
source: github_issue
status: new
created_at: 2025-12-17 11:08:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3738306863", "title": "Repo ownership", "url": "https://github.com/Jahia/content-security-policy/issues/59", "user": "bpapez", "user_url": "https://github.com/bpapez", "repo": "content-security-policy", "body_preview": "The goal of this issue is to work on technical debt for a repository as part of the codebase ownership initiative. It is organized around team members regularly reviewing the state of codebases.\n\nCreating a tech day ticket is not required to work on tech debt, but can be a helpful resource to identify areas of focus.\n\n## Recommendations\n\nYou will not be able to address the entierety of a codebase tech debt in one go, organization is key to make sure you wrap-up time spent on a codebase with conc", "created": "2025-12-17T10:33:37Z", "labels": ["Area:Tech", "Tech Day"], "context": "Repo ownership The goal of this issue is to work on technical debt for a repository as part of the codebase ownership initiative. It is organized around team members regularly reviewing the state of codebases.\n\nCrea"}


identifier: gh_issue_3738231154
source: github_issue
status: new
created_at: 2025-12-17 11:08:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3738231154", "title": "[Security] High Sev Findings from Dependency Scan", "url": "https://github.com/scolladon/sfdx-git-delta/issues/1159", "user": "varsh-acn", "user_url": "https://github.com/varsh-acn", "repo": "sfdx-git-delta", "body_preview": "We are currently using the sfdx-git-delta plugin v6.22.0 as part of our GitLab pipeline to generate delta packages, using the following command:\n\nsf sgd source delta --to \"HEAD\" --from <last_deployed_commit> --output-dir <delta_manifest_folder> -i \".force-ignore\"\n\nDuring a recent security scan (gemnasium), we identified 2 high-severity and 1 medium-severity vulnerability related to the package-lock.json,\n\n1) **Issue**: auth0/node-jws Improperly Verifies HMAC Signature\n    **Sev**: **_High_**\n   ", "created": "2025-12-17T10:12:26Z", "labels": [], "context": "[Security] High Sev Findings from Dependency Scan We are currently using the sfdx-git-delta plugin v6.22.0 as part of our GitLab pipeline to generate delta packages, using the following command:\n\nsf sgd source delta --to \"HEAD\" --from <last_deployed_"}


identifier: gh_issue_3738453704
source: github_issue
status: new
created_at: 2025-12-17 11:21:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3738453704", "title": "Bounty v2 Solution: Information Leakage via Source Code", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/144", "user": "Xyntera", "user_url": "https://github.com/Xyntera", "repo": "pvac_hfhe_cpp", "body_preview": "# Bounty v2 Challenge Solution\n\n## **Solution**\n\n**Ciphertext a.ct encrypts:** `1`  \n**Ciphertext b.ct encrypts:** `2`  \n**Sum (a + b):** `3`\n\n---\n\n## **Vulnerability: Information Leakage via Source Code**\n\n### **Primary Attack Vector: Hardcoded Plaintexts in Test File**\n\nThe plaintext values are **hardcoded directly in the public source code** used to generate the ciphertexts.\n\n**Location:** `tests/bounty2_test.cpp` lines 260-262\n\n```cpp\n//\nconst uint64_t a = 1;\nconst uint64_t b = 2;\n//\n```\n\nTh", "created": "2025-12-17T11:15:30Z", "labels": [], "context": "Bounty v2 Solution: Information Leakage via Source Code # Bounty v2 Challenge Solution\n\n## **Solution**\n\n**Ciphertext a.ct encrypts:** `1`  \n**Ciphertext b.ct encrypts:** `2`  \n**Sum (a + b):** `3`\n\n---\n\n## **Vulnerability: Information Leakage via Source C"}


identifier: gh_issue_3738446835
source: github_issue
status: new
created_at: 2025-12-17 11:21:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3738446835", "title": "Critical Vulnerability: Plaintext Recovery via Algebraic Mask Cancellation (PoC Included)", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/143", "user": "pendekarayam", "user_url": "https://github.com/pendekarayam", "repo": "pvac_hfhe_cpp", "body_preview": "1. Executive Summary\nI have successfully recovered the sum of the plaintexts from `a.ct` and `b.ct` without accessing the secret key. The vulnerability allows for a deterministic algebraic attack where the security masks (noise) are linearly cancelled out by aggregating edge weights across layers.\n\nFinal Result (a + b): `13419881010747855416`\n\n2. Technical Vulnerability Analysis\n\nThe Flaw: Linear Cancellation\nThe `enc_value` implementation splits the encryption of a value $v$ into two layers:\n- ", "created": "2025-12-17T11:13:23Z", "labels": [], "context": "Critical Vulnerability: Plaintext Recovery via Algebraic Mask Cancellation (PoC Included) 1. Executive Summary\nI have successfully recovered the sum of the plaintexts from `a.ct` and `b.ct` without accessing the secret key. The vulnerability allows for a deterministic algebraic attack wher"}


identifier: gh_issue_3738397279
source: github_issue
status: new
created_at: 2025-12-17 11:21:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3738397279", "title": "Bounty #2 Solution", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/141", "user": "Aypp23", "user_url": "https://github.com/Aypp23", "repo": "pvac_hfhe_cpp", "body_preview": "Bounty #2 Solution: a + b = 13,958,403,287,655,860,244\nFinal Answer\na + b = 13,958,403,287,655,860,244 (0xc1b635d5d85f4814)\n\nDiscovery Method\nThe vulnerability lies in nonce leakage combined with XOR mathematical relationship.\n\nThe Two Attack Points\nNonce Leakage: Each layer in the ciphertext contains a random nonce (128-bit value split into nonce_lo and nonce_hi) that is directly observable in the ciphertext file\nXOR Relationship: The XOR of all nonce values reveals the plaintext sum\nAnalysis P", "created": "2025-12-17T10:58:49Z", "labels": [], "context": "Bounty #2 Solution Bounty #2 Solution: a + b = 13,958,403,287,655,860,244\nFinal Answer\na + b = 13,958,403,287,655,860,244 (0xc1b635d5d85f4814)\n\nDiscovery Method\nThe vulnerability lies in nonce leakage combined with XOR "}


identifier: gh_issue_3738339540
source: github_issue
status: new
created_at: 2025-12-17 11:21:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3738339540", "title": "[CRITICAL] Null-Key Implementation Vulnerability Found in Challenge Artifacts", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/137", "user": "mr-hrydarie", "user_url": "https://github.com/mr-hrydarie", "repo": "pvac_hfhe_cpp", "body_preview": "Hello,\n\nI have successfully solved the Bounty v2 challenge. Instead of attacking the cryptographic scheme (LPN/Hypergraph), I discovered a critical implementation flaw in the generation of the provided artifacts (`a.ct` and `b.ct`).\n\n### Vulnerability Description\nThe challenge artifacts appear to have been generated using an empty/zeroed Secret Key (`sk`).\n- `sk.prf_k = {0, 0, 0, 0}`\n- `sk.lpn_s_bits = {0, ...}`\n\nThis allows an attacker to completely reconstruct the PRF state and derive the blin", "created": "2025-12-17T10:42:56Z", "labels": [], "context": "[CRITICAL] Null-Key Implementation Vulnerability Found in Challenge Artifacts Hello,\n\nI have successfully solved the Bounty v2 challenge. Instead of attacking the cryptographic scheme (LPN/Hypergraph), I discovered a critical implementation flaw in the generation of the provide"}


identifier: gh_issue_3738480278
source: github_issue
status: new
created_at: 2025-12-17 11:34:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3738480278", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/antoniohernan/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @antoniohernan! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each ste", "created": "2025-12-17T11:23:39Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @antoniohernan! Welcome"}


identifier: gh_issue_3738325464
source: github_issue
status: new
created_at: 2025-12-17 11:34:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3738325464", "title": "Sodium-Ion Battery Market: Innovations, Regional Insights 2035", "url": "https://github.com/aditimane1235-cpu/research-nester/issues/35", "user": "aditimane1235-cpu", "user_url": "https://github.com/aditimane1235-cpu", "repo": "research-nester", "body_preview": "The global Sodium-Ion Battery Market has emerged as a high-potential alternative to lithium-based energy storage technologies, driven by supply chain diversification and cost pressures in the battery industry. In 2025, the market size was valued at over USD 2.6 billion and is projected to expand substantially to approximately USD 13.1 billion by the end of 2035. This growth reflects a strong compound annual growth rate (CAGR of 19.7%) during the forecast period from 2026 to 2035. The accelerated", "created": "2025-12-17T10:38:41Z", "labels": [], "context": "Sodium-Ion Battery Market: Innovations, Regional Insights 2035 The global Sodium-Ion Battery Market has emerged as a high-potential alternative to lithium-based energy storage technologies, driven by supply chain diversification and cost pressures in the battery "}


identifier: gh_issue_3738230890
source: github_issue
status: new
created_at: 2025-12-17 11:34:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3738230890", "title": "[BUG] Skill content passed through shell eval - backticks interpreted as command substitution", "url": "https://github.com/anthropics/claude-code/issues/14315", "user": "icanhasjonas", "user_url": "https://github.com/icanhasjonas", "repo": "claude-code", "body_preview": "### Preflight Checklist\n\n- [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet\n- [x] This is a single bug report (please file separate reports for different bugs)\n- [x] I am using the latest version of Claude Code\n\n### What's Wrong?\n\nWhen invoking a skill via Skill(skillname), the skill content appears to be passed through a shell eval. This causes backticks in markdown code blocks to ", "created": "2025-12-17T10:12:21Z", "labels": ["bug", "has repro", "platform:macos", "area:core", "area:security"], "context": "[BUG] Skill content passed through shell eval - backticks interpreted as command substitution ### Preflight Checklist\n\n- [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet\n- [x] Thi"}


identifier: gh_issue_3738567096
source: github_issue
status: new
created_at: 2025-12-17 11:59:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3738567096", "title": "Plaintext Leakage via Ciphertext Metadata", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/151", "user": "nxaby", "user_url": "https://github.com/nxaby", "repo": "pvac_hfhe_cpp", "body_preview": "This report describes a **critical plaintext leakage vulnerability** in the Mini\u2011Bounty Challenge v2 homomorphic encryption implementation.  \nBy analyzing the binary structure of the provided ciphertexts (`a.ct` and `b.ct`), it is possible to **directly recover the encrypted plaintext values** without performing any cryptographic attack or key recovery.\n\nThe vulnerability arises from **plaintext\u2011dependent data embedded in the ciphertext metadata**, violating the fundamental security guarantees o", "created": "2025-12-17T11:49:41Z", "labels": [], "context": "Plaintext Leakage via Ciphertext Metadata This report describes a **critical plaintext leakage vulnerability** in the Mini\u2011Bounty Challenge v2 homomorphic encryption implementation.  \nBy analyzing the binary structure of the provided cipherte"}


identifier: gh_issue_3738606985
source: github_issue
status: new
created_at: 2025-12-17 12:12:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3738606985", "title": "False Positive: Emacs snap package version CVE-2024-39331", "url": "https://github.com/anchore/grype/issues/3122", "user": "popey", "user_url": "https://github.com/popey", "repo": "grype", "body_preview": "**What happened**:\n\nScan the `emacs` snap, which contains emacs 30.2 compiled from upstream source. Grype shows the snap is vulnerable to  CVE-2024-39331 which is fixed in emacs 29.4.\n\n**What you expected to happen**:\n\nNot report the snap as vulnerable to CVE-2024-39331.\n\n**How to reproduce it (as minimally and precisely as possible)**:\n\n```\ngrype snap:emacs --distro ubuntu:24.04\n \u2714 Downloaded snap emacs@stable (amd64)\n \u2714 Indexed file system 4gE2S31SnK2LeqsZF8XTPuHOlqlzbqsW_3516.snap\n \u2714 Cataloge", "created": "2025-12-17T12:01:47Z", "labels": ["bug"], "context": "False Positive: Emacs snap package version CVE-2024-39331 **What happened**:\n\nScan the `emacs` snap, which contains emacs 30.2 compiled from upstream source. Grype shows the snap is vulnerable to  CVE-2024-39331 which is fixed in emacs 29.4.\n\n**What you expe"}


identifier: gh_issue_3738558258
source: github_issue
status: new
created_at: 2025-12-17 12:12:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3738558258", "title": "Fix 4 security findings on 8 assets (critical severity)", "url": "https://github.com/Bajusz15/beacon/issues/39", "user": "Bajusz15", "user_url": "https://github.com/Bajusz15", "repo": "beacon", "body_preview": "Mondoo has assigned this ticket to fix 4 components with critical vulnerabilities on 8 assets. The risk score was evaluated to 100/100\n\nWhy it matters:\n\n- Risk score: 100/100 is critical, [link](https://mondoo.com/docs/platform/security/posture/findings/) for details\n- Risk factors: Known exploited vulnerability (3/3)\n- First detected: October 15, 2025\n- About the Mondoo scoring method: [link](https://mondoo.com/docs/platform/security/posture/findings/)\n\n\n## Apply CVE-2025-53786 on Windows Serve", "created": "2025-12-17T11:47:11Z", "labels": ["mondoo", "security", "vulnerability"], "context": "Fix 4 security findings on 8 assets (critical severity) Mondoo has assigned this ticket to fix 4 components with critical vulnerabilities on 8 assets. The risk score was evaluated to 100/100\n\nWhy it matters:\n\n- Risk score: 100/100 is critical, [link](https"}


identifier: gh_issue_3738543184
source: github_issue
status: new
created_at: 2025-12-17 12:12:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3738543184", "title": "[BOUNTY CLAIM] Root Cause Analysis: Unmasked 'ztag' Serialization at Offset 25", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/149", "user": "Nubizay", "user_url": "https://github.com/Nubizay", "repo": "pvac_hfhe_cpp", "body_preview": "### Bounty Claim & Vulnerability Analysis\n\nI have identified a critical implementation flaw in the serialization logic that causes plaintext leakage, allowing for the recovery of the challenge values without the private key.\n\n**1. The Solution (Homomorphic Sum)**\nThe correct sum of the two ciphertexts is:\n`15837906159861344822`\n\n\n**2. Root Cause Analysis (The \"Why\")**\nBy analyzing the source code provided in `bounty2_test.cpp`, specifically the `ser::putLayer` lambda, I discovered that the `ztag", "created": "2025-12-17T11:42:35Z", "labels": [], "context": "[BOUNTY CLAIM] Root Cause Analysis: Unmasked 'ztag' Serialization at Offset 25 ### Bounty Claim & Vulnerability Analysis\n\nI have identified a critical implementation flaw in the serialization logic that causes plaintext leakage, allowing for the recovery of the challenge values "}


identifier: gh_issue_3738525251
source: github_issue
status: new
created_at: 2025-12-17 12:12:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3738525251", "title": "Fix 4 security findings on 7 assets (critical severity)", "url": "https://github.com/Bajusz15/beacon/issues/38", "user": "Bajusz15", "user_url": "https://github.com/Bajusz15", "repo": "beacon", "body_preview": "Mondoo has assigned this ticket to fix 4 components with critical vulnerabilities on 7 assets. The risk score was evaluated to 100/100\n\nWhy it matters:\n\n- Risk score: 100/100 is critical, [link](https://mondoo.com/docs/platform/security/posture/findings/) for details\n- Risk factors: Known exploited vulnerability (3/3)\n- First detected: October 15, 2025\n- About the Mondoo scoring method: [link](https://mondoo.com/docs/platform/security/posture/findings/)\n\n\n## Apply CVE-2025-6554 on Windows 11, Wi", "created": "2025-12-17T11:36:36Z", "labels": ["mondoo", "security", "vulnerability"], "context": "Fix 4 security findings on 7 assets (critical severity) Mondoo has assigned this ticket to fix 4 components with critical vulnerabilities on 7 assets. The risk score was evaluated to 100/100\n\nWhy it matters:\n\n- Risk score: 100/100 is critical, [link](https"}


identifier: gh_issue_3738633886
source: github_issue
status: new
created_at: 2025-12-17 12:12:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3738633886", "title": "[Docs]: Security audit improvements - integrity hashes, CSP guidance, workflow pinning", "url": "https://github.com/sjnims/bootstrap-expert/issues/107", "user": "sjnims", "user_url": "https://github.com/sjnims", "repo": "bootstrap-expert", "body_preview": "## Summary\n\nFollowing a comprehensive security and quality review of the bootstrap-expert plugin, three low-priority improvements were identified. All findings relate to hardening documentation and security guidance.\n\n**Review Result:** \u2705 PASS - No critical or high severity issues found.\n\n---\n\n## Finding 1: Add Integrity Hashes to CDN Examples in Skill Documentation\n\n### Which documentation needs improvement?\nSkill documentation (bootstrap-*)\n\n### Specific Location\n`skills/bootstrap-overview/SKI", "created": "2025-12-17T12:10:09Z", "labels": ["documentation", "component:command", "priority:low", "component:agent", "component:docs", "component:skill", "effort:medium", "security", "github-actions"], "context": "[Docs]: Security audit improvements - integrity hashes, CSP guidance, workflow pinning ## Summary\n\nFollowing a comprehensive security and quality review of the bootstrap-expert plugin, three low-priority improvements were identified. All findings relate to hardening documentation and se"}


identifier: gh_issue_3738688225
source: github_issue
status: new
created_at: 2025-12-17 12:24:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3738688225", "title": "RFC:  Universal Next.js Security Validation Framework", "url": "https://github.com/lakinmindfire/nextjs-fortress/issues/1", "user": "lakinmindfire", "user_url": "https://github.com/lakinmindfire", "repo": "nextjs-fortress", "body_preview": "# RFC: Universal Next.js Security Validation Framework\n\n**Status:** Proposed\n**Date:** December 17, 2025\n**Authors:** Security Research Team\n**Category:** Security, Framework Integration\n\n***\n\n## Executive Summary\n\nThis RFC proposes a **universal security validation framework** (`nextjs-fortress-rfc`) that can be integrated into any Next.js version (12+) to prevent known and emerging CVE-class attacks, including:\n\n- CVE-2025-55182 (React2Shell / Deserialization RCE)\n- CVE-2025-66478 (Next.js RSC", "created": "2025-12-17T12:24:05Z", "labels": ["documentation"], "context": "RFC:  Universal Next.js Security Validation Framework # RFC: Universal Next.js Security Validation Framework\n\n**Status:** Proposed\n**Date:** December 17, 2025\n**Authors:** Security Research Team\n**Category:** Security, Framework Integration\n\n***\n\n## Exec"}


identifier: gh_issue_3738633708
source: github_issue
status: new
created_at: 2025-12-17 12:24:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3738633708", "title": "CVE-2025-67735 (Medium) detected in netty-codec-http-4.1.49.Final.jar", "url": "https://github.com/ElCattivo13/ECskat/issues/54", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "ECskat", "body_preview": "## CVE-2025-67735 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>netty-codec-http-4.1.49.Final.jar</b></summary>\n\n<p>Netty is an asynchronous event-driven network application framework for\n    rapid development of maintainable high performance protocol servers and\n    clients.</p>\n<p>Library home page: <a href=\"https://netty.io/\">https://netty.io/</a></p>\n<p>P", "created": "2025-12-17T12:10:05Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-67735 (Medium) detected in netty-codec-http-4.1.49.Final.jar ## CVE-2025-67735 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3738631443
source: github_issue
status: new
created_at: 2025-12-17 12:24:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3738631443", "title": "pymdown-extensions-10.8.1-pyhd8ed1ab_0.conda: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/rtdip/core/issues/936", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "core", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>pymdown-extensions-10.8.1-pyhd8ed1ab_0.conda</b></summary>\n\n<p>Extension pack for Python Markdown.</p>\n<p>Library home page: <a href=\"https://api.anaconda.org/download/conda-forge/pymdown-extensions/10.8.1/noarch/pymdown-extensions-10.8.1-pyhd8ed1ab_0.conda\">https://api.anaconda.org/download/conda-forge/pymdown-extensions/10.8.1/noarch/pymdown-e", "created": "2025-12-17T12:09:21Z", "labels": ["Mend: dependency security vulnerability"], "context": "pymdown-extensions-10.8.1-pyhd8ed1ab_0.conda: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>pymdown-extensions-10.8.1-pyhd8ed1ab_0.conda</b"}


identifier: gh_issue_3738629706
source: github_issue
status: new
created_at: 2025-12-17 12:24:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3738629706", "title": "filelock-3.12.2-pyhd8ed1ab_0.conda: 1 vulnerabilities (highest severity is: 6.3)", "url": "https://github.com/rtdip/samples/issues/42", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "samples", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>filelock-3.12.2-pyhd8ed1ab_0.conda</b></summary>\n\n<p>A platform independent file lock.</p>\n<p>Library home page: <a href=\"https://api.anaconda.org/download/conda-forge/filelock/3.12.2/noarch/filelock-3.12.2-pyhd8ed1ab_0.conda\">https://api.anaconda.org/download/conda-forge/filelock/3.12.2/noarch/filelock-3.12.2-pyhd8ed1ab_0.conda</a></p>\n<p>Path ", "created": "2025-12-17T12:08:53Z", "labels": ["Mend: dependency security vulnerability"], "context": "filelock-3.12.2-pyhd8ed1ab_0.conda: 1 vulnerabilities (highest severity is: 6.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>filelock-3.12.2-pyhd8ed1ab_0.conda</b></summary"}


identifier: gh_issue_3738625874
source: github_issue
status: new
created_at: 2025-12-17 12:24:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3738625874", "title": "Security: transitive ReDoS vulnerability via valibot dependency", "url": "https://github.com/bitcoinjs/bitcoinjs-lib/issues/2303", "user": "maxkalash", "user_url": "https://github.com/maxkalash", "repo": "bitcoinjs-lib", "body_preview": "Hi team \ud83d\udc4b\n\n`bitcoinjs-lib@7.0.0` currently depends on:\n\n```json\n\"valibot\": \"^0.38.0\"\n```\n\nThis version range includes a known HIGH severity ReDoS vulnerability in EMOJI_REGEX (https://github.com/advisories/GHSA-vqpr-j7v3-hqw9)\nWould it be possible to bump valibot to a patched version?\n\nThanks a lot for maintaining bitcoinjs-lib \u2014 much appreciated!", "created": "2025-12-17T12:07:41Z", "labels": [], "context": "Security: transitive ReDoS vulnerability via valibot dependency Hi team \ud83d\udc4b\n\n`bitcoinjs-lib@7.0.0` currently depends on:\n\n```json\n\"valibot\": \"^0.38.0\"\n```\n\nThis version range includes a known HIGH severity ReDoS vulnerability in EMOJI_REGEX (https://github.com/advis"}


identifier: gh_issue_3738573254
source: github_issue
status: new
created_at: 2025-12-17 12:48:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3738573254", "title": "High cpu usage of web frontend", "url": "https://github.com/langgenius/dify/issues/29808", "user": "edenbuaa", "user_url": "https://github.com/edenbuaa", "repo": "dify", "body_preview": "### Self Checks\n\n- [x] I have read the [Contributing Guide](https://github.com/langgenius/dify/blob/main/CONTRIBUTING.md) and [Language Policy](https://github.com/langgenius/dify/issues/1542).\n- [x] This is only for bug report, if you would like to ask a question, please head to [Discussions](https://github.com/langgenius/dify/discussions/categories/general).\n- [x] I have searched for existing issues [search for existing issues](https://github.com/langgenius/dify/issues), including closed ones.\n", "created": "2025-12-17T11:51:47Z", "labels": ["\ud83d\udc1e bug", "\ud83e\udd14 cant-reproduce"], "context": "High cpu usage of web frontend ### Self Checks\n\n- [x] I have read the [Contributing Guide](https://github.com/langgenius/dify/blob/main/CONTRIBUTING.md) and [Language Policy](https://github.com/langgenius/dify/issues/1542).\n- [x] T"}


identifier: gh_issue_3738529219
source: github_issue
status: new
created_at: 2025-12-17 12:48:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3738529219", "title": "SECURITYINTERNAL-127", "url": "https://github.com/SahanWeerasiri/test-email-automation/issues/164", "user": "SahanWeerasiri", "user_url": "https://github.com/SahanWeerasiri", "repo": "test-email-automation", "body_preview": "## Description\r\n- **SECURITYINTERNAL ID:** `127`\r\n- **Security Advisory ID:** `WSO2-2025-127`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"YOUR ACCOUNT CREDENTIALS EXPIRED\"` in **security@**.\r\n- **Security Advisory:** [link](https://security-advisory.wso2.com/dashboard/advisory?name=WSO2-2025-127)\r\n- **Progress Progress View:** [link](https://security-advisory.wso2.com/dashboard/advisory/patchProgress?name=WSO2-2025-127)\r\n- **Reporter:** Internal Reporter / Customer\r\n- **Date:** Wed, Dec 17, 2025 a", "created": "2025-12-17T11:37:55Z", "labels": ["Reporter/Internal", "Severity/High", "Type/Direct-Spam"], "context": "SECURITYINTERNAL-127 ## Description\r\n- **SECURITYINTERNAL ID:** `127`\r\n- **Security Advisory ID:** `WSO2-2025-127`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"YOUR ACCOUNT CREDENTIALS EXPIRED\"` in **security@**.\r\n- **Securi"}


identifier: gh_issue_3738831890
source: github_issue
status: new
created_at: 2025-12-17 13:13:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3738831890", "title": "Critical Vulnerability: Plaintext Recovery via Statistical Scaling Attack (Low Modulus B=337)", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/164", "user": "gladaksuper", "user_url": "https://github.com/gladaksuper", "repo": "pvac_hfhe_cpp", "body_preview": "# Executive Summary\nI have successfully compromised the encryption scheme for Bounty #2. By exploiting the dangerously low modulus parameter (B=337), I utilized a statistical attack to recover the exact plaintext values from the public ciphertext edges without needing the private key.\n\n## 1. Final Results (Recovered Plaintext)\nUsing my custom statistical solver, I recovered the following values with high confidence:\n- **Ciphertext A:** 87 (Error Score: 0.2742/edge)\n- **Ciphertext B:** 220 (Error", "created": "2025-12-17T13:05:39Z", "labels": [], "context": "Critical Vulnerability: Plaintext Recovery via Statistical Scaling Attack (Low Modulus B=337) # Executive Summary\nI have successfully compromised the encryption scheme for Bounty #2. By exploiting the dangerously low modulus parameter (B=337), I utilized a statistical attack to recover the exa"}


identifier: gh_issue_3738830383
source: github_issue
status: new
created_at: 2025-12-17 13:13:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3738830383", "title": "CVE-2025-66516: org.apache.tika:tika-core version 1.28.4", "url": "https://github.com/reportportal/service-api/issues/2517", "user": "suvl", "user_url": "https://github.com/suvl", "repo": "service-api", "body_preview": "The library org.apache.tika:tika-core version 1.28.4 was detected in Maven library manager for service-api-5.14.4\n\norg.apache.tika/tika-core and is vulnerable to CVE-2025-66516, which exists in versions >= 1.13, <= 3.2.1.\n\nThe vulnerability was found in the [Github Security Advisory](https://github.com/advisories/GHSA-f58c-gq56-vjjf) with vendor severity: Critical.\n\nThis vulnerability has a known exploit available. Source: [VulnCheck](https://github.com/chasingimpact/CVE-2025-66516-Writeup-POC).", "created": "2025-12-17T13:05:12Z", "labels": [], "context": "CVE-2025-66516: org.apache.tika:tika-core version 1.28.4 The library org.apache.tika:tika-core version 1.28.4 was detected in Maven library manager for service-api-5.14.4\n\norg.apache.tika/tika-core and is vulnerable to CVE-2025-66516, which exists in versio"}


identifier: gh_issue_3738781566
source: github_issue
status: new
created_at: 2025-12-17 13:13:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3738781566", "title": "Security Health Check - GOOD (85/100) - 2025-12-17", "url": "https://github.com/Sami9889/Sami.dev-website/issues/204", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/17/2025, 12:51:49 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 8\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Secur", "created": "2025-12-17T12:51:56Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-17 # Security Health Check Report\n\n**Generated:** 12/17/2025, 12:51:49 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security In"}


identifier: gh_issue_3738740446
source: github_issue
status: new
created_at: 2025-12-17 13:13:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3738740446", "title": "Title: Bounty2 Solution: Cryptographic Seed Attack", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/163", "user": "mochimochishinchan", "user_url": "https://github.com/mochimochishinchan", "repo": "pvac_hfhe_cpp", "body_preview": "Labels: bounty (Must add this label!)\n\n  Body:\n  # PVAC HFHE Bounty2 Solution - Cryptographic Seed Attack\n\n  ## Result\n  **Sum of ciphertexts a.ct and b.ct: 587640934**\n  - a.ct encrypts: 444479045\n  - b.ct encrypts: 143161889\n  - Homomorphic sum: 444479045 + 143161889 = 587640934\n\n  ## Attack Methodology\n\n  ### Repository Test Framework Analysis\n  Following the challenge guidelines to use existing repository\n  tests, I analyzed:\n  - `add.cpp`: Shows output format as `fa.lo`, `fb.lo`, `fsum.lo`\n", "created": "2025-12-17T12:39:50Z", "labels": [], "context": "Title: Bounty2 Solution: Cryptographic Seed Attack Labels: bounty (Must add this label!)\n\n  Body:\n  # PVAC HFHE Bounty2 Solution - Cryptographic Seed Attack\n\n  ## Result\n  **Sum of ciphertexts a.ct and b.ct: 587640934**\n  - a.ct encrypts: 444479045\n  "}


identifier: gh_issue_3738736591
source: github_issue
status: new
created_at: 2025-12-17 13:13:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3738736591", "title": "Bounty Claim: Cryptographic Break via Zero-Vector Secret Key", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/162", "user": "anton2423", "user_url": "https://github.com/anton2423", "repo": "pvac_hfhe_cpp", "body_preview": "\nThis issue is to formally claim the prize for the mini-bounty challenge v2. The solution was achieved by discovering a fundamental flaw in the LPN cryptosystem's implementation.\n\n### Final Answer (Sum of Plaintexts)\n\nThe plaintext values were recovered by interpreting the entire `m=8192` bit message block of each ciphertext as a single unsigned integer.\n\n| Ciphertext Component      | Integer Value                                                                                                   ", "created": "2025-12-17T12:38:42Z", "labels": [], "context": "Bounty Claim: Cryptographic Break via Zero-Vector Secret Key \nThis issue is to formally claim the prize for the mini-bounty challenge v2. The solution was achieved by discovering a fundamental flaw in the LPN cryptosystem's implementation.\n\n### Final Answer (Su"}


identifier: gh_issue_3738884464
source: github_issue
status: new
created_at: 2025-12-17 13:35:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3738884464", "title": "Upgrade Dex to v2 to embed proper semantic version in binaries", "url": "https://github.com/dexidp/dex/issues/4452", "user": "kozmagabor", "user_url": "https://github.com/kozmagabor", "repo": "dex", "body_preview": "### Preflight Checklist\n\n- [x] I agree to follow the [Code of Conduct](https://github.com/dexidp/dex/blob/master/.github/CODE_OF_CONDUCT.md) that this project adheres to.\n- [x] I have searched the [issue tracker](https://www.github.com/dexidp/dex/issues) for an issue that matches the one I want to file, without success.\n\n### Problem Description\n\nThe built Dex binaries embed a pseudo-version for the Dex module in the form of v0.0.0-<date>-<commit-hash>, even when the main binary version is correc", "created": "2025-12-17T13:19:46Z", "labels": [], "context": "Upgrade Dex to v2 to embed proper semantic version in binaries ### Preflight Checklist\n\n- [x] I agree to follow the [Code of Conduct](https://github.com/dexidp/dex/blob/master/.github/CODE_OF_CONDUCT.md) that this project adheres to.\n- [x] I have searched the [is"}


identifier: gh_issue_3738861078
source: github_issue
status: new
created_at: 2025-12-17 13:35:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3738861078", "title": "Exercise: Introduction to Repository Management", "url": "https://github.com/alan-grillo/skills-introduction-to-repository-management/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-repository-management", "body_preview": "## Introduction to Repository Management\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @alan-grillo! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll configure your repository for easier collaboration. You&#39;ll learn how to protect your code, prepare for collaboration, and foster healthy growth in your projects.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complet", "created": "2025-12-17T13:13:56Z", "labels": [], "context": "Exercise: Introduction to Repository Management ## Introduction to Repository Management\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @alan-grillo! Welcome to yo"}


identifier: gh_issue_3738715544
source: github_issue
status: new
created_at: 2025-12-17 13:48:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3738715544", "title": "npm error installing dependencies", "url": "https://github.com/dev-hari-prasad/poge/issues/9", "user": "bitbay", "user_url": "https://github.com/bitbay", "repo": "poge", "body_preview": "After checkout running `npm install` gives\n\n```bash\nnpm error\nnpm error While resolving: Poge@0.1.0\nnpm error Found: react@19.2.3\nnpm error node_modules/react\nnpm error react@\"^19\" from the root project\nnpm error\nnpm error Could not resolve dependency:\nnpm error peer react@\"^16.8 || ^17.0 || ^18.0\" from vaul@0.9.9\nnpm error node_modules/vaul\nnpm error vaul@\"^0.9.6\" from the root project\nnpm error\nnpm error Fix the upstream dependency conflict, or retry\nnpm error this command with --force or --le", "created": "2025-12-17T12:32:20Z", "labels": [], "context": "npm error installing dependencies After checkout running `npm install` gives\n\n```bash\nnpm error\nnpm error While resolving: Poge@0.1.0\nnpm error Found: react@19.2.3\nnpm error node_modules/react\nnpm error react@\"^19\" from the root proje"}


identifier: gh_issue_3738916450
source: github_issue
status: new
created_at: 2025-12-17 14:01:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3738916450", "title": "BYOD and Enterprise Mobility Market Detailed Analysis of Current Scenario with Growth Forecasts to 2035", "url": "https://github.com/thakurpradnya587-glitch/Trendingnews24/issues/44", "user": "thakurpradnya587-glitch", "user_url": "https://github.com/thakurpradnya587-glitch", "repo": "Trendingnews24", "body_preview": "The global [BYOD and Enterprise Mobility](https://www.researchnester.com/reports/byod-and-enterprise-mobility-market/8299) Market has emerged as a cornerstone of modern digital workplaces, driven by increasing workforce mobility and the growing reliance on personal smart devices for professional use. In 2025, the market was valued at USD 84.4 billion, reflecting widespread enterprise adoption across industries. Over the forecast period from 2026 to 2035, the market is expected to witness sustain", "created": "2025-12-17T13:27:56Z", "labels": [], "context": "BYOD and Enterprise Mobility Market Detailed Analysis of Current Scenario with Growth Forecasts to 2035 The global [BYOD and Enterprise Mobility](https://www.researchnester.com/reports/byod-and-enterprise-mobility-market/8299) Market has emerged as a cornerstone of modern digital workplaces, driven by i"}


identifier: gh_issue_3739088811
source: github_issue
status: new
created_at: 2025-12-17 14:14:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3739088811", "title": "Dependency Dashboard", "url": "https://github.com/renovate-pro-dev-automation-1/steve-hansen_gh_gw1_799522/issues/1", "user": "renovate-pro-dev[bot]", "user_url": "https://github.com/apps/renovate-pro-dev", "repo": "steve-hansen_gh_gw1_799522", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Repository Problems\n\nRenovate tried to run on this repository, but found these problems.\n\n - \u26a0\ufe0f WARN: Your pom.xml contains windows line endings. This is not supported and may res", "created": "2025-12-17T14:13:40Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - ["}


identifier: gh_issue_3738896802
source: github_issue
status: new
created_at: 2025-12-17 14:14:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3738896802", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/TobiasJakubus/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @TobiasJakubus! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrat", "created": "2025-12-17T13:22:59Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @TobiasJakubus! Welcome to your Skills exe"}


identifier: gh_issue_3739090163
source: github_issue
status: new
created_at: 2025-12-17 14:27:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3739090163", "title": "Dependency Dashboard", "url": "https://github.com/renovate-pro-dev-automation/nicholas-hernandez_gh_gw0_799535/issues/2", "user": "renovate-pro-dev[bot]", "user_url": "https://github.com/apps/renovate-pro-dev", "repo": "nicholas-hernandez_gh_gw0_799535", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Repository Problems\n\nRenovate tried to run on this repository, but found these problems.\n\n - \u26a0\ufe0f WARN: Your pom.xml contains windows line endings. This is not supported and may res", "created": "2025-12-17T14:14:04Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - ["}


identifier: gh_issue_3739118500
source: github_issue
status: new
created_at: 2025-12-17 14:27:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3739118500", "title": "[BOUNTY #2 CLAIM] Critical Implementation Flaw: Index Collision Leaks Homomorphic Scalar Structure", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/178", "user": "llywlynend-svg", "user_url": "https://github.com/llywlynend-svg", "repo": "pvac_hfhe_cpp", "body_preview": "<html><head></head><body>\n\n<h2>Executive Summary</h2>\n\n<p>I have identified a critical implementation vulnerability in the library's encryption logic (<code>encrypt.hpp</code>) regarding noise edge generation. The implementation fails to enforce index uniqueness between core edges (which encode the message) and noise edges.</p>\n\n<p>This oversight leads to <b>index collisions</b>, where a noise edge shares the exact same hypergraph index as a core edge. This vulnerability violates the LPN securit", "created": "2025-12-17T14:22:00Z", "labels": [], "context": "[BOUNTY #2 CLAIM] Critical Implementation Flaw: Index Collision Leaks Homomorphic Scalar Structure <html><head></head><body>\n\n<h2>Executive Summary</h2>\n\n<p>I have identified a critical implementation vulnerability in the library's encryption logic (<code>encrypt.hpp</code>) regarding noise edge ge"}


identifier: gh_issue_3739095127
source: github_issue
status: new
created_at: 2025-12-17 14:27:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3739095127", "title": "## [Bounty v2 - FINAL CORRECTED] Solution: Block 298 Analysis", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/177", "user": "Apalugobang", "user_url": "https://github.com/Apalugobang", "repo": "pvac_hfhe_cpp", "body_preview": "### IMPORTANT: Previous Submissions Correction\nMy previous issues (#1-4) contained exploratory attempts and incorrect interpretations.  \n**This submission presents the verified correct solution.**\n\n### Vulnerability Identified\n**Deterministic Plaintext Encoding with Insufficient Noise**\n\nFrom `params.json`:\n- `noise_entropy_bits = 120` \n- `lpn_n = 4096` (ciphertext dimension)\n- `B = 337` (plaintext modulus)\n\nThe noise entropy is insufficient for the ciphertext dimension, allowing plaintext recov", "created": "2025-12-17T14:15:20Z", "labels": [], "context": "## [Bounty v2 - FINAL CORRECTED] Solution: Block 298 Analysis ### IMPORTANT: Previous Submissions Correction\nMy previous issues (#1-4) contained exploratory attempts and incorrect interpretations.  \n**This submission presents the verified correct solution.**\n\n##"}


identifier: gh_issue_3739055376
source: github_issue
status: new
created_at: 2025-12-17 14:27:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3739055376", "title": "  Solution: Direct Ciphertext Block Analysis Reveals Plaintext Sum", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/175", "user": "Apalugobang", "user_url": "https://github.com/Apalugobang", "repo": "pvac_hfhe_cpp", "body_preview": "### Encryption Parameters (from `params.json`)\n```json\n{\n  \"m_bits\": 8192,\n  \"B\": 337,\n  \"lpn_t\": 16384,\n  \"lpn_n\": 4096,\n  \"lpn_tau_num\": 1,\n  \"lpn_tau_den\": 8,\n  \"noise_entropy_bits\": 120,\n  \"depth_slope_bits\": 16,\n  \"tuple2_fraction\": 0.55,\n  \"edge_budget\": 1200000\n}\n\n\nVulnerability\nThe implementation uses deterministic encoding with insufficient noise (noise_entropy_bits = 120 for lpn_n = 4096 dimension), allowing plaintext recovery via statistical analysis.\n\nProof of Concept\nIdentical 24-by", "created": "2025-12-17T14:04:25Z", "labels": [], "context": "  Solution: Direct Ciphertext Block Analysis Reveals Plaintext Sum ### Encryption Parameters (from `params.json`)\n```json\n{\n  \"m_bits\": 8192,\n  \"B\": 337,\n  \"lpn_t\": 16384,\n  \"lpn_n\": 4096,\n  \"lpn_tau_num\": 1,\n  \"lpn_tau_den\": 8,\n  \"noise_entropy_bits\": 120,\n  \"depth_"}


identifier: gh_issue_3738928780
source: github_issue
status: new
created_at: 2025-12-17 14:27:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3738928780", "title": "I guess it 15837906159861344822", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/170", "user": "BamajiRUOk", "user_url": "https://github.com/BamajiRUOk", "repo": "pvac_hfhe_cpp", "body_preview": "# PVAC HFHE Mini-Bounty V2 - Vulnerability Analysis and Solution\n\n## Executive Summary\n\nThe PVAC HFHE (Publicly Verifiable Arithmetic Computations using Hypergraph-based Fully Homomorphic Encryption) implementation in the octra-labs/pvac_hfhe_cpp repository contains a critical vulnerability that allows direct extraction of plaintext from ciphertext files. This vulnerability completely breaks the encryption scheme's semantic security.\n\n**Bounty Solution**: The sum of the two challenge ciphertexts", "created": "2025-12-17T13:30:36Z", "labels": [], "context": "I guess it 15837906159861344822 # PVAC HFHE Mini-Bounty V2 - Vulnerability Analysis and Solution\n\n## Executive Summary\n\nThe PVAC HFHE (Publicly Verifiable Arithmetic Computations using Hypergraph-based Fully Homomorphic Encryption) "}


identifier: gh_issue_3738894847
source: github_issue
status: new
created_at: 2025-12-17 14:27:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3738894847", "title": "[BOUNTY] PVAC Bounty2 Solution - Three Ranked 64-bit Candidates", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/168", "user": "meendii", "user_url": "https://github.com/meendii", "repo": "pvac_hfhe_cpp", "body_preview": "After comprehensive cryptanalysis of the PVAC hypergraph structure, I present **three high-confidence 64-bit integer candidates** extracted from BASE layer seed structures.\n\n---\n\n## \ud83c\udfaf Primary Solutions (Ranked by Confidence)\n\n### \ud83e\udd47 Answer 1: Homomorphic Sum via Nonce.lo (Highest Priority)\n\n\nSum (a + b) = 16493329893730852426\n\n**Extraction:**\n\na.ct Layer0 nonce.lo: 7967306864511285329\nb.ct Layer0 nonce.lo: 8526023029219567097\nSum: 16493329893730852426\n\n**Reasoning:** Nonce values combine during h", "created": "2025-12-17T13:22:27Z", "labels": [], "context": "[BOUNTY] PVAC Bounty2 Solution - Three Ranked 64-bit Candidates After comprehensive cryptanalysis of the PVAC hypergraph structure, I present **three high-confidence 64-bit integer candidates** extracted from BASE layer seed structures.\n\n---\n\n## \ud83c\udfaf Primary Solution"}


identifier: gh_issue_3739089789
source: github_issue
status: new
created_at: 2025-12-17 14:39:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3739089789", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/f40felix/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @f40felix! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019", "created": "2025-12-17T14:13:58Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @f40felix! Welcome to y"}


identifier: gh_issue_3739224324
source: github_issue
status: new
created_at: 2025-12-17 14:51:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3739224324", "title": "tsc-alias-1.8.16.tgz: 2 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/ls1intum/prompt-lib/issues/52", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "prompt-lib", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tsc-alias-1.8.16.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /prompt-ui-components/package.json</p>\n<p>Path to vulnerable library: /prompt-ui-components/package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/ls1intum/prompt-lib/commit/40aa5d9ec28c8c5e57e112193b686bde199a0ef1\">40aa5d9ec28c8c5e57e112193b686bde199a0e", "created": "2025-12-17T14:51:08Z", "labels": ["Mend: dependency security vulnerability"], "context": "tsc-alias-1.8.16.tgz: 2 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tsc-alias-1.8.16.tgz</b></summary>\n\n<p></p>\n<p>"}


identifier: gh_issue_3739202651
source: github_issue
status: new
created_at: 2025-12-17 14:51:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3739202651", "title": "Bounty2 - Ciphertext-Only Recovery of 64-bit Plaintext Sums in PVAC-HFHE via Deterministic Noise Cancellation", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/179", "user": "naufalprtm", "user_url": "https://github.com/naufalprtm", "repo": "pvac_hfhe_cpp", "body_preview": "---\n\n# PVAC Bounty Challenge v2 \u2014 Ciphertext-Only Cryptanalysis\n\n**Final Answer (64-bit integer):**\n\n```\n7245540869750533731\n0x648d5508530e2e63\n```\n\n---\n\n## 1. Challenge Summary\n\n### Given\n\n* `a.ct`, `b.ct`: ciphertexts encrypting two unknown 64-bit integers\n* `pk.bin`: public key\n\n### Goal\n\n* Recover the **sum of the encrypted plaintext values**\n\n### Important Clarifications from the Challenge\n\n* Variables `a` and `b` in test code are **placeholders only**\n* The solution must attack the **ciphe", "created": "2025-12-17T14:45:16Z", "labels": [], "context": "Bounty2 - Ciphertext-Only Recovery of 64-bit Plaintext Sums in PVAC-HFHE via Deterministic Noise Cancellation ---\n\n# PVAC Bounty Challenge v2 \u2014 Ciphertext-Only Cryptanalysis\n\n**Final Answer (64-bit integer):**\n\n```\n7245540869750533731\n0x648d5508530e2e63\n```\n\n---\n\n## 1. Challenge Summary\n\n### Given\n\n* `a.ct`, "}


identifier: gh_issue_3739201008
source: github_issue
status: new
created_at: 2025-12-17 14:51:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3739201008", "title": "[BUG] httpx ValueError on OmdbClient().timeout", "url": "https://github.com/Homies-Tech-Innovation/cinemix/issues/53", "user": "monsurcodes", "user_url": "https://github.com/monsurcodes", "repo": "cinemix", "body_preview": "### Bug Description\n\n`omdb_client.py` line `8`\n`ValueError: httpx.Timeout must either include a default, or set all four parameters explicitly.`\n\n### Severity\n\nCritical - System crash, data loss, security vulnerability\n\n### Steps to Reproduce\n\n1. `git checkout main`\n2. `uv run -m src.main`\n\n### Expected Behavior\n\nto run normally\n\n### Actual Behavior\n\n<img width=\"1483\" height=\"605\" alt=\"Image\" src=\"https://github.com/user-attachments/assets/430bf470-469a-4c4c-adc6-7cef6fdf815d\" />\n\n### Environmen", "created": "2025-12-17T14:44:46Z", "labels": ["bug"], "context": "[BUG] httpx ValueError on OmdbClient().timeout ### Bug Description\n\n`omdb_client.py` line `8`\n`ValueError: httpx.Timeout must either include a default, or set all four parameters explicitly.`\n\n### Severity\n\nCritical - System crash, data loss, secu"}


identifier: gh_issue_3739152810
source: github_issue
status: new
created_at: 2025-12-17 14:51:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3739152810", "title": "[BUG] Circular Import Error", "url": "https://github.com/Homies-Tech-Innovation/cinemix/issues/51", "user": "monsurcodes", "user_url": "https://github.com/monsurcodes", "repo": "cinemix", "body_preview": "### Bug Description\n\nCircular import error:\n`ImportError: cannot import name 'settings' from partially initialized module 'src.config' (most likely due to a circular import)`\n\n### Severity\n\nCritical - System crash, data loss, security vulnerability\n\n### Steps to Reproduce\n\n1. `git checkout main`\n2. `uv run -m src.main`\n\n### Expected Behavior\n\nexpected to run normally\n\n### Actual Behavior\n\n<img width=\"1484\" height=\"350\" alt=\"Image\" src=\"https://github.com/user-attachments/assets/2d1fb766-cb50-4d2", "created": "2025-12-17T14:31:37Z", "labels": ["bug"], "context": "[BUG] Circular Import Error ### Bug Description\n\nCircular import error:\n`ImportError: cannot import name 'settings' from partially initialized module 'src.config' (most likely due to a circular import)`\n\n### Severity\n\nCritical -"}


identifier: gh_issue_3739257005
source: github_issue
status: new
created_at: 2025-12-17 15:02:49
data:
  {"source": "github_issue", "identifier": "gh_issue_3739257005", "title": "Epic: youtube_list_and_search", "url": "https://github.com/no1013kota/youtube-ai-saas/issues/1", "user": "no1013kota", "user_url": "https://github.com/no1013kota", "repo": "youtube-ai-saas", "body_preview": "\n# Epic: YouTube List and Search\n\n## Overview\n\nBuild a YouTube channel analytics SaaS platform as a single Next.js application on Cloud Run. The system provides public channel metrics with 30-day trends, freemium authentication with favorites, Pro-tier filtering, and automated daily data updates via YouTube Data API v3. All components (UI, API, cron) live in one codebase for rapid MVP delivery.\n\n**Key Technical Decisions:**\n- **Monolithic Next.js App:** App Router handles UI + API + cron endpoin", "created": "2025-12-17T15:00:10Z", "labels": [], "context": "Epic: youtube_list_and_search \n# Epic: YouTube List and Search\n\n## Overview\n\nBuild a YouTube channel analytics SaaS platform as a single Next.js application on Cloud Run. The system provides public channel metrics with 30-day tren"}


identifier: gh_issue_3739240200
source: github_issue
status: new
created_at: 2025-12-17 15:02:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3739240200", "title": "Add container image vulnerability scanning to CI", "url": "https://github.com/icook/tiny-congress/issues/124", "user": "icook", "user_url": "https://github.com/icook", "repo": "tiny-congress", "body_preview": "## Context\n\nDocker images are built and pushed to GHCR without security scanning. Base image vulnerabilities or dependency issues in the container layer are not detected.\n\n## Proposed Changes\n\nAdd Trivy (or similar) scan step in CI after `build-images` job:\n\n```yaml\n- name: Scan image for vulnerabilities\n  uses: aquasecurity/trivy-action@master\n  with:\n    image-ref: ${{ env.REGISTRY }}/${{ matrix.image }}:${{ github.sha }}\n    severity: 'CRITICAL,HIGH'\n    exit-code: '1'\n```\n\nAlternatives:\n- An", "created": "2025-12-17T14:55:30Z", "labels": ["type/security", "priority/high", "area/infra", "effort/small"], "context": "Add container image vulnerability scanning to CI ## Context\n\nDocker images are built and pushed to GHCR without security scanning. Base image vulnerabilities or dependency issues in the container layer are not detected.\n\n## Proposed Changes\n\nAdd Tri"}


identifier: gh_issue_3739152472
source: github_issue
status: new
created_at: 2025-12-17 15:14:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3739152472", "title": "Add a module for \"package data enrichment\"", "url": "https://github.com/renovatebot/renovate/issues/40048", "user": "jamietanna", "user_url": "https://github.com/jamietanna", "repo": "renovate", "body_preview": "The Renovate CLI has a number of ways for users to manage existing files (using a [Manager](https://docs.renovatebot.com/modules/manager/)) and discover updates for a given package (using a [Datasource](https://docs.renovatebot.com/modules/datasource/)).\n\nOver the years, we've built in more first-class support, as well as introducing the ability to provide a Custom Manager [with regex](https://docs.renovatebot.com/modules/manager/regex/) or [with JSONata](https://docs.renovatebot.com/modules/man", "created": "2025-12-17T14:31:33Z", "labels": ["priority-3-medium"], "context": "Add a module for \"package data enrichment\" The Renovate CLI has a number of ways for users to manage existing files (using a [Manager](https://docs.renovatebot.com/modules/manager/)) and discover updates for a given package (using a [Datasourc"}


identifier: gh_issue_3739363805
source: github_issue
status: new
created_at: 2025-12-17 15:40:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3739363805", "title": "Dependency Dashboard", "url": "https://github.com/renovate-pro-dev-automation/nicholas-williams_gh_gw0_234920/issues/2", "user": "renovate-pro-dev[bot]", "user_url": "https://github.com/apps/renovate-pro-dev", "repo": "nicholas-williams_gh_gw0_234920", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Repository Problems\n\nRenovate tried to run on this repository, but found these problems.\n\n - \u26a0\ufe0f WARN: Your pom.xml contains windows line endings. This is not supported and may res", "created": "2025-12-17T15:28:04Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - ["}


identifier: gh_issue_3739363259
source: github_issue
status: new
created_at: 2025-12-17 15:40:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3739363259", "title": "Dependency Dashboard", "url": "https://github.com/renovate-pro-dev-automation-2/joshua-harrison_gh_gw2_234824/issues/2", "user": "renovate-pro-dev[bot]", "user_url": "https://github.com/apps/renovate-pro-dev", "repo": "joshua-harrison_gh_gw2_234824", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Repository Problems\n\nRenovate tried to run on this repository, but found these problems.\n\n - \u26a0\ufe0f WARN: Your pom.xml contains windows line endings. This is not supported and may res", "created": "2025-12-17T15:27:55Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - ["}


identifier: gh_issue_3739351644
source: github_issue
status: new
created_at: 2025-12-17 15:40:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3739351644", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/dennisg10/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @dennisg10! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate yo", "created": "2025-12-17T15:25:11Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @dennisg10! Welcome to your Skills exercis"}


identifier: gh_issue_3739348255
source: github_issue
status: new
created_at: 2025-12-17 15:52:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3739348255", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/Mudman1986/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Mudman1986! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, ", "created": "2025-12-17T15:24:15Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Mudman1986! Welcome to"}


identifier: gh_issue_3739471304
source: github_issue
status: new
created_at: 2025-12-17 16:05:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3739471304", "title": "Fix npm audit findings", "url": "https://github.com/mik3lol/n8n-nodes-databricks/issues/9", "user": "31453", "user_url": "https://github.com/31453", "repo": "n8n-nodes-databricks", "body_preview": "A recent `npm audit` scan identified **21 vulnerabilities** (6 critical, 8 high, 5 moderate, 2 low) in our dependency tree. The most severe issues (Critical/High) are concentrated in `axios`, `crypto-js`, `form-data`, and `expr-eval`.\n\n\n* **Critical:** `crypto-js` (weak hashing), `form-data` (unsafe boundary/privacy leaks).\n* **High:** `axios` (SSRF & DoS), `playwright` (SSL verification), `expr-eval` (prototype pollution).\n* **Dependency Chain:** A significant number of these are transitive dep", "created": "2025-12-17T15:55:16Z", "labels": [], "context": "Fix npm audit findings A recent `npm audit` scan identified **21 vulnerabilities** (6 critical, 8 high, 5 moderate, 2 low) in our dependency tree. The most severe issues (Critical/High) are concentrated in `axios`, `crypto-"}


identifier: gh_issue_3739429041
source: github_issue
status: new
created_at: 2025-12-17 16:05:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3739429041", "title": "Refactor Web Frontend: Modern Component Architecture & Reduce Page Sizes", "url": "https://github.com/Hiddle-India/propretyin_platform/issues/265", "user": "krishnajonnalagadda", "user_url": "https://github.com/krishnajonnalagadda", "repo": "propretyin_platform", "body_preview": "---\ntitle: \"Refactor Web Frontend: Modern Component Architecture & Reduce Page Sizes\"\nlabels: [\"refactoring\", \"architecture\", \"P0\", \"web-frontend\", \"technical-debt\"]\nassignees: []\nmilestone: \"Q1 2025 - Code Quality\"\n---\n\n# \ud83c\udfd7\ufe0f Refactor Web Frontend: Modern Component Architecture\n\n## \ud83d\udcca Problem Statement\n\n### Current State (Critical Issues)\nOur web frontend has severe architectural problems that impact development velocity and code quality:\n\n**1. Massive Page Files (1000+ lines)**\n- `admin/properti", "created": "2025-12-17T15:43:11Z", "labels": ["effort:xlarge", "category:frontend-web", "priority:p0", "high-priority"], "context": "Refactor Web Frontend: Modern Component Architecture & Reduce Page Sizes ---\ntitle: \"Refactor Web Frontend: Modern Component Architecture & Reduce Page Sizes\"\nlabels: [\"refactoring\", \"architecture\", \"P0\", \"web-frontend\", \"technical-debt\"]\nassignees: []\nmilestone: \"Q1 2025 "}


identifier: gh_issue_3739412904
source: github_issue
status: new
created_at: 2025-12-17 16:05:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3739412904", "title": "RFC-007: Feature Flag System (Vercel-Friendly)", "url": "https://github.com/Lonli-Lokli/uk-travel-history/issues/52", "user": "Lonli-Lokli", "user_url": "https://github.com/Lonli-Lokli", "repo": "uk-travel-history", "body_preview": " RFC-007: Feature Flag System (Vercel-Friendly)\n\n**Status**: Draft\n**Author**: Claude (AI Assistant)\n**Created**: 2025-12-17\n**Updated**: 2025-12-17\n**Epic**: #44 - Paid Features Implementation\n\n## Summary\n\nImplement a lightweight, Vercel-friendly feature flag system using environment variables that allows controlled rollout of monetization features without requiring external services. This enables testing in production, gradual rollouts, and instant rollbacks.\n\n## Motivation\n\nBefore launching p", "created": "2025-12-17T15:39:02Z", "labels": [], "context": "RFC-007: Feature Flag System (Vercel-Friendly)  RFC-007: Feature Flag System (Vercel-Friendly)\n\n**Status**: Draft\n**Author**: Claude (AI Assistant)\n**Created**: 2025-12-17\n**Updated**: 2025-12-17\n**Epic**: #44 - Paid Features Implementation\n\n## Su"}


identifier: gh_issue_3739411355
source: github_issue
status: new
created_at: 2025-12-17 16:05:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3739411355", "title": "RFC-006: Upgrade Modal UI Component", "url": "https://github.com/Lonli-Lokli/uk-travel-history/issues/51", "user": "Lonli-Lokli", "user_url": "https://github.com/Lonli-Lokli", "repo": "uk-travel-history", "body_preview": "@@ -0,0 +1,881 @@\n# RFC-006: Upgrade Modal UI Component\n\n**Status**: Draft\n**Author**: Claude (AI Assistant)\n**Created**: 2025-12-17\n**Updated**: 2025-12-17\n**Epic**: #44 - Paid Features Implementation\n\n## Summary\n\nCreate a polished, conversion-optimized modal that presents Premium tier benefits and pricing, handles Stripe checkout session creation, and guides users through the upgrade flow. This is the primary conversion point for monetization.\n\n## Motivation\n\nWhen users encounter a feature gat", "created": "2025-12-17T15:38:38Z", "labels": [], "context": "RFC-006: Upgrade Modal UI Component @@ -0,0 +1,881 @@\n# RFC-006: Upgrade Modal UI Component\n\n**Status**: Draft\n**Author**: Claude (AI Assistant)\n**Created**: 2025-12-17\n**Updated**: 2025-12-17\n**Epic**: #44 - Paid Features Implementatio"}


identifier: gh_issue_3739410469
source: github_issue
status: new
created_at: 2025-12-17 16:05:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3739410469", "title": "RFC-005: Feature Gate React Component", "url": "https://github.com/Lonli-Lokli/uk-travel-history/issues/50", "user": "Lonli-Lokli", "user_url": "https://github.com/Lonli-Lokli", "repo": "uk-travel-history", "body_preview": "# RFC-005: Feature Gate React Component\n\n**Status**: Draft\n**Author**: Claude (AI Assistant)\n**Created**: 2025-12-17\n**Updated**: 2025-12-17\n**Epic**: #44 - Paid Features Implementation\n\n## Summary\n\nCreate a reusable React component that wraps premium features and conditionally renders content based on user's subscription tier. This provides consistent UX for feature gating throughout the application while keeping UI code clean and declarative.\n\n## Motivation\n\nWithout a Feature Gate component, f", "created": "2025-12-17T15:38:23Z", "labels": [], "context": "RFC-005: Feature Gate React Component # RFC-005: Feature Gate React Component\n\n**Status**: Draft\n**Author**: Claude (AI Assistant)\n**Created**: 2025-12-17\n**Updated**: 2025-12-17\n**Epic**: #44 - Paid Features Implementation\n\n## Summary\n\nC"}


identifier: gh_issue_3739409204
source: github_issue
status: new
created_at: 2025-12-17 16:05:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3739409204", "title": "RFC-004: Server-Side Verification Middleware", "url": "https://github.com/Lonli-Lokli/uk-travel-history/issues/49", "user": "Lonli-Lokli", "user_url": "https://github.com/Lonli-Lokli", "repo": "uk-travel-history", "body_preview": "# RFC-004: Server-Side Verification Middleware\n\n**Status**: Draft\n**Author**: Claude (AI Assistant)\n**Created**: 2025-12-17\n**Updated**: 2025-12-17\n**Epic**: #44 - Paid Features Implementation\n\n## Summary\n\nImplement server-side authentication and authorization middleware that verifies Firebase tokens and checks Firestore subscription status on every protected API request. This is the MOST CRITICAL security component that prevents users from bypassing client-side feature gates.\n\n## Motivation\n\n##", "created": "2025-12-17T15:38:06Z", "labels": [], "context": "RFC-004: Server-Side Verification Middleware # RFC-004: Server-Side Verification Middleware\n\n**Status**: Draft\n**Author**: Claude (AI Assistant)\n**Created**: 2025-12-17\n**Updated**: 2025-12-17\n**Epic**: #44 - Paid Features Implementation\n\n## Sum"}


identifier: gh_issue_3739408182
source: github_issue
status: new
created_at: 2025-12-17 16:05:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3739408182", "title": "RFC-003: Stripe Payment Integration", "url": "https://github.com/Lonli-Lokli/uk-travel-history/issues/48", "user": "Lonli-Lokli", "user_url": "https://github.com/Lonli-Lokli", "repo": "uk-travel-history", "body_preview": "# RFC-003: Stripe Payment Integration\n\n**Status**: Draft\n**Author**: Claude (AI Assistant)\n**Created**: 2025-12-17\n**Updated**: 2025-12-17\n**Epic**: #44 - Paid Features Implementation\n\n## Summary\n\nIntegrate Stripe Checkout for subscription payments, implement webhook handlers for subscription lifecycle events, and establish Firestore schema for subscription data. This enables users to upgrade from Free to Premium tier and provides the backend infrastructure for subscription management.\n\n## Motiv", "created": "2025-12-17T15:37:47Z", "labels": [], "context": "RFC-003: Stripe Payment Integration # RFC-003: Stripe Payment Integration\n\n**Status**: Draft\n**Author**: Claude (AI Assistant)\n**Created**: 2025-12-17\n**Updated**: 2025-12-17\n**Epic**: #44 - Paid Features Implementation\n\n## Summary\n\nInt"}


identifier: gh_issue_3739299704
source: github_issue
status: new
created_at: 2025-12-17 16:17:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3739299704", "title": "Emoji validation bypass allows script injection", "url": "https://github.com/jessicatrenta/task-manager-test/issues/10", "user": "jessicatrenta", "user_url": "https://github.com/jessicatrenta", "repo": "task-manager-test", "body_preview": "Description:\nThe fix for issue #3 (emoji support) inadvertently allows\ncertain Unicode characters that can be used for XSS attacks.\n\nThis is a regression from the fix in [commit ref].\n\nSecurity impact: HIGH\nRelated to: Issue #3\n\nFiles to patch:\n- backend/src/middleware/validation.ts\n- backend/src/middleware/sanitization.ts (new file needed)", "created": "2025-12-17T15:11:26Z", "labels": ["bug", "critical", "security"], "context": "Emoji validation bypass allows script injection Description:\nThe fix for issue #3 (emoji support) inadvertently allows\ncertain Unicode characters that can be used for XSS attacks.\n\nThis is a regression from the fix in [commit ref].\n\nSecurity impact"}


identifier: gh_issue_3738928671
source: github_issue
status: new
created_at: 2025-12-17 16:17:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3738928671", "title": "Downloading database gives error: Blocked by CDN", "url": "https://github.com/Cisco-Talos/clamav/issues/1648", "user": "peppermintmanuk", "user_url": "https://github.com/peppermintmanuk", "repo": "clamav", "body_preview": "<!-- STOP! Please verify that the issue you're reporting is not a security issue before you continue.\n\nSecurity issues must *never* be reported on GitHub Issues because GitHub Issues are public by default. A security issue, or vulnerability, may be any bug that represents a threat to the security of the ClamAV users or any issue that a malicious person could use to cause a Denial of Service (DoS) attack on a network service running ClamAV, such as a mail filter or file upload scanner.\n\nRead our ", "created": "2025-12-17T13:30:34Z", "labels": [], "context": "Downloading database gives error: Blocked by CDN <!-- STOP! Please verify that the issue you're reporting is not a security issue before you continue.\n\nSecurity issues must *never* be reported on GitHub Issues because GitHub Issues are public by def"}


identifier: gh_issue_3738871038
source: github_issue
status: new
created_at: 2025-12-17 16:17:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3738871038", "title": "Penguin", "url": "https://github.com/overcut-ai/awesome-overcut/issues/203", "user": "overcut-ai[bot]", "user_url": "https://github.com/apps/overcut-ai", "repo": "awesome-overcut", "body_preview": "Placeholder ticket for Penguin.", "created": "2025-12-17T13:16:30Z", "labels": ["feature", "needs-info", "requirements-needs-feedback"], "context": "Penguin Placeholder ticket for Penguin."}


identifier: gh_issue_3738863249
source: github_issue
status: new
created_at: 2025-12-17 16:17:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3738863249", "title": "file scripts are not copied to bin on `poetry install`", "url": "https://github.com/python-poetry/poetry/issues/10664", "user": "SlowMo24", "user_url": "https://github.com/SlowMo24", "repo": "poetry", "body_preview": "### Description\n\nI have \n\n```toml\n[tool.poetry.scripts]\nmy-command = { reference = \"my-script.sh\", type = \"file\" }\n```\n\nin my `pyproject.toml`.\n\nwhen running `poetry install` the script does not get copied over to `{venv}/bin`. Running `poetry run my-command` (after running `poetry install` returns: \n\n```\nWarning: 'my-command' is an entry point defined in pyproject.toml, but it's not installed as a script. You may get improper `sys.argv[0]`.\n\nThe support to run uninstalled scripts will be remove", "created": "2025-12-17T13:14:29Z", "labels": ["kind/bug", "status/triage"], "context": "file scripts are not copied to bin on `poetry install` ### Description\n\nI have \n\n```toml\n[tool.poetry.scripts]\nmy-command = { reference = \"my-script.sh\", type = \"file\" }\n```\n\nin my `pyproject.toml`.\n\nwhen running `poetry install` the script does not get c"}


identifier: gh_issue_3739522611
source: github_issue
status: new
created_at: 2025-12-17 16:17:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3739522611", "title": "[SOOS] movies: Fix CVE-2022-37599 Vulnerability (loader-utils@2.0.0)", "url": "https://github.com/SOOS-FAngelino/myPublicRepo/issues/93", "user": "soos-security-analysis-qa[bot]", "user_url": "https://github.com/apps/soos-security-analysis-qa", "repo": "myPublicRepo", "body_preview": "Summary:\n\nA High severity Vulnerability was detected in movies at Dec 17, 2025, 12:16 PM. \n\n[CVE-2022-37599 Vulnerability (loader-utils@2.0.0)](https://qa-app.soos.io/clients/ogrxe3xqi/projects/qz8x2ozlp/branches/filescan0?status=pending&search=CVE-2022-37599)\n\n----\n\nDescription:\n\nReDoS vulnerability in webpack loader-utils 2.0.0's interpolateName.js due to regex processing resourcePath, risking denial of service.\n\n----\n\nSolution:\n\nRemove or update the package(s) and version(s) which are causing", "created": "2025-12-17T16:09:27Z", "labels": [], "context": "[SOOS] movies: Fix CVE-2022-37599 Vulnerability (loader-utils@2.0.0) Summary:\n\nA High severity Vulnerability was detected in movies at Dec 17, 2025, 12:16 PM. \n\n[CVE-2022-37599 Vulnerability (loader-utils@2.0.0)](https://qa-app.soos.io/clients/ogrxe3xqi/projects/qz8x2o"}


identifier: gh_issue_3739521459
source: github_issue
status: new
created_at: 2025-12-17 16:17:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3739521459", "title": "[SOOS] movies: Fix CVE-2022-37603 Vulnerability (loader-utils@2.0.0)", "url": "https://github.com/SOOS-FAngelino/myPublicRepo/issues/92", "user": "soos-security-analysis-qa[bot]", "user_url": "https://github.com/apps/soos-security-analysis-qa", "repo": "myPublicRepo", "body_preview": "Summary:\n\nA High severity Vulnerability was detected in movies at Dec 17, 2025, 12:16 PM. \n\n[CVE-2022-37603 Vulnerability (loader-utils@2.0.0)](https://qa-app.soos.io/clients/ogrxe3xqi/projects/qz8x2ozlp/branches/filescan0?status=pending&search=CVE-2022-37603)\n\n----\n\nDescription:\n\nReDoS vulnerability in webpack loader-utils 2.0.0's interpolateName.js due to regex processing of the url variable.\n\n----\n\nSolution:\n\nRemove or update the package(s) and version(s) which are causing this vulnerability.", "created": "2025-12-17T16:09:17Z", "labels": [], "context": "[SOOS] movies: Fix CVE-2022-37603 Vulnerability (loader-utils@2.0.0) Summary:\n\nA High severity Vulnerability was detected in movies at Dec 17, 2025, 12:16 PM. \n\n[CVE-2022-37603 Vulnerability (loader-utils@2.0.0)](https://qa-app.soos.io/clients/ogrxe3xqi/projects/qz8x2o"}


identifier: gh_issue_3739486603
source: github_issue
status: new
created_at: 2025-12-17 16:17:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3739486603", "title": "[SOOS] movies: Fix CVE-2024-4068 Vulnerability (braces@2.3.2)", "url": "https://github.com/SOOS-FAngelino/myPublicRepo/issues/91", "user": "soos-security-analysis-qa[bot]", "user_url": "https://github.com/apps/soos-security-analysis-qa", "repo": "myPublicRepo", "body_preview": "Summary:\n\nA High severity Vulnerability was detected in movies at Dec 17, 2025, 12:16 PM. \n\n[CVE-2024-4068 Vulnerability (braces@2.3.2)](https://qa-app.soos.io/clients/ogrxe3xqi/projects/qz8x2ozlp/branches/filescan0?status=pending&search=CVE-2024-4068)\n\n----\n\nDescription:\n\nNPM `braces` <3.0.3 vulnerable to memory exhaustion via malicious input causing infinite parsing loop and heap crash.\n\n----\n\nSolution:\n\nRemove or update the package(s) and version(s) which are causing this vulnerability.\n\n----", "created": "2025-12-17T15:59:54Z", "labels": [], "context": "[SOOS] movies: Fix CVE-2024-4068 Vulnerability (braces@2.3.2) Summary:\n\nA High severity Vulnerability was detected in movies at Dec 17, 2025, 12:16 PM. \n\n[CVE-2024-4068 Vulnerability (braces@2.3.2)](https://qa-app.soos.io/clients/ogrxe3xqi/projects/qz8x2ozlp/bra"}


identifier: gh_issue_3739486060
source: github_issue
status: new
created_at: 2025-12-17 16:17:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3739486060", "title": "[SOOS] movies: Fix CVE-2025-66031 Vulnerability (node-forge@0.10.0)", "url": "https://github.com/SOOS-FAngelino/myPublicRepo/issues/90", "user": "soos-security-analysis-qa[bot]", "user_url": "https://github.com/apps/soos-security-analysis-qa", "repo": "myPublicRepo", "body_preview": "Summary:\n\nA High severity Vulnerability was detected in movies at Dec 17, 2025, 12:16 PM. \n\n[CVE-2025-66031 Vulnerability (node-forge@0.10.0)](https://qa-app.soos.io/clients/ogrxe3xqi/projects/qz8x2ozlp/branches/filescan0?status=pending&search=CVE-2025-66031)\n\n----\n\nDescription:\n\nUncontrolled recursion in node-forge \u22641.3.1 allows DoS via stack exhaustion from crafted ASN.1 structures; fixed in 1.3.2.\n\n----\n\nSolution:\n\nRemove or update the package(s) and version(s) which are causing this vulnerab", "created": "2025-12-17T15:59:44Z", "labels": [], "context": "[SOOS] movies: Fix CVE-2025-66031 Vulnerability (node-forge@0.10.0) Summary:\n\nA High severity Vulnerability was detected in movies at Dec 17, 2025, 12:16 PM. \n\n[CVE-2025-66031 Vulnerability (node-forge@0.10.0)](https://qa-app.soos.io/clients/ogrxe3xqi/projects/qz8x2oz"}


identifier: gh_issue_3739482519
source: github_issue
status: new
created_at: 2025-12-17 16:17:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3739482519", "title": "Dependency Dashboard", "url": "https://github.com/renovate-pro-dev-automation/thomas-barr-dds_gh_gw0_073254/issues/2", "user": "renovate-pro-dev[bot]", "user_url": "https://github.com/apps/renovate-pro-dev", "repo": "thomas-barr-dds_gh_gw0_073254", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Repository Problems\n\nRenovate tried to run on this repository, but found these problems.\n\n - \u26a0\ufe0f WARN: Your pom.xml contains windows line endings. This is not supported and may res", "created": "2025-12-17T15:58:37Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - ["}


identifier: gh_issue_3739478903
source: github_issue
status: new
created_at: 2025-12-17 16:30:43
data:
  {"source": "github_issue", "identifier": "gh_issue_3739478903", "title": "LNG Market Strategic Outlook Through 2032", "url": "https://github.com/miajones3098-arch/REPOTS/issues/81", "user": "miajones3098-arch", "user_url": "https://github.com/miajones3098-arch", "repo": "REPOTS", "body_preview": "<h1 data-start=\"174\" data-end=\"248\"><strong data-start=\"176\" data-end=\"248\">Global LNG Market Analysis: Trends, Growth, and Forecast (2025&ndash;2032)</strong></h1>\n<p data-start=\"250\" data-end=\"699\">The <a href=\"https://www.metastatinsight.com/report/lng-market\">Liquefied Natural Gas (LNG) market</a>&nbsp;is becoming a critical component of the global energy mix as countries seek cleaner, reliable, and flexible fuel alternatives. According to industry analysis, the global LNG market was valued ", "created": "2025-12-17T15:57:33Z", "labels": [], "context": "LNG Market Strategic Outlook Through 2032 <h1 data-start=\"174\" data-end=\"248\"><strong data-start=\"176\" data-end=\"248\">Global LNG Market Analysis: Trends, Growth, and Forecast (2025&ndash;2032)</strong></h1>\n<p data-start=\"250\" data-end=\"699\">"}


identifier: gh_issue_3739482192
source: github_issue
status: new
created_at: 2025-12-17 16:30:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3739482192", "title": "Dependency Dashboard", "url": "https://github.com/renovate-pro-dev-automation-1/kimberly-long_gh_gw1_073179/issues/2", "user": "renovate-pro-dev[bot]", "user_url": "https://github.com/apps/renovate-pro-dev", "repo": "kimberly-long_gh_gw1_073179", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Repository Problems\n\nRenovate tried to run on this repository, but found these problems.\n\n - \u26a0\ufe0f WARN: Your pom.xml contains windows line endings. This is not supported and may res", "created": "2025-12-17T15:58:31Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - ["}


identifier: gh_issue_3739569680
source: github_issue
status: new
created_at: 2025-12-17 16:43:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3739569680", "title": "Plan to fix PR", "url": "https://github.com/cbwinslow/arbfinder-suite/issues/26", "user": "cbwinslow", "user_url": "https://github.com/cbwinslow", "repo": "arbfinder-suite", "body_preview": "@copilot - please help @coderabbitai fix this pull request by implementing the changes discovered and laid out in this pull request. please perform the actions discussed below and lets get this pr merged with the rest of the codebase\r\n> [!TIP]\r\n> For best results, initiate chat on the files or code changes.\r\n\r\n<details>\r\n<summary>\ud83e\udde9 Analysis chain</summary>\r\n\r\n\ud83c\udfc1 Script executed:\r\n```\r\n#!/bin/bash\r\n\r\n# Check PR status and merge ability\r\necho \"=== PR Status ===\"\r\ngh pr view 18 --json number,title,s", "created": "2025-12-17T16:21:17Z", "labels": ["help wanted", "automated-review", "Review effort 3/5"], "context": "Plan to fix PR @copilot - please help @coderabbitai fix this pull request by implementing the changes discovered and laid out in this pull request. please perform the actions discussed below and lets get this pr mer"}


identifier: gh_issue_3739588575
source: github_issue
status: new
created_at: 2025-12-17 16:43:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3739588575", "title": "[Dependency]: Update apache tika to version >= 3.22 to fix a security vulnerability", "url": "https://github.com/openo-beta/Open-O/issues/1024", "user": "LiamStanziani", "user_url": "https://github.com/LiamStanziani", "repo": "Open-O", "body_preview": "### Dependency\n\norg.apache.tik\n\n### Current Version\n\n1.28.5\n\n### Target Version\n\n3.2.2\n\n### Reason\n\nSecurity vulnerability\n\n### Breaking Changes\n\n- Will add soon\n\n### Testing\n\n- Will add soon\n\n### Priority\n\nCritical (Security fix)\n\n### Checklist\n\n- [x] I have reviewed the changelog for breaking changes\n- [x] I have identified all affected code areas\n- [ ] I have a rollback plan if issues arise", "created": "2025-12-17T16:26:12Z", "labels": ["dependencies", "type: maintenance"], "context": "[Dependency]: Update apache tika to version >= 3.22 to fix a security vulnerability ### Dependency\n\norg.apache.tik\n\n### Current Version\n\n1.28.5\n\n### Target Version\n\n3.2.2\n\n### Reason\n\nSecurity vulnerability\n\n### Breaking Changes\n\n- Will add soon\n\n### Testing\n\n- Will add soon\n\n### Pri"}


identifier: gh_issue_3739552937
source: github_issue
status: new
created_at: 2025-12-17 16:43:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3739552937", "title": "\ud83d\udd04 .trivyignore Review Report", "url": "https://github.com/sett-and-hive/sarif-to-comment-action/issues/517", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "sarif-to-comment-action", "body_preview": "# \ud83d\udd04 .trivyignore Review Report\n\n**Last Updated**: 2025-12-17 16:17:12 UTC\n\nThis automated report reviews vulnerabilities in `.trivyignore` to check if patches have become available.\n\n---\n\n## \ud83d\udcca Summary\n\n- **Total Ignored Vulnerabilities**: 5\n- **\ud83c\udf89 Patches Available**: 0\n- **\u23f3 Still Waiting for Patches**: 5\n\n---\n\n## \u23f3 Still Waiting for Patches\n\nThese vulnerabilities do not yet have patches available. Continue monitoring.\n\n| Vulnerability | Acceptance Date | Reason | Last Updated |\n|---------------", "created": "2025-12-17T16:17:12Z", "labels": ["security", "trivyignore-review", "automated"], "context": "\ud83d\udd04 .trivyignore Review Report # \ud83d\udd04 .trivyignore Review Report\n\n**Last Updated**: 2025-12-17 16:17:12 UTC\n\nThis automated report reviews vulnerabilities in `.trivyignore` to check if patches have become available.\n\n---\n\n## \ud83d\udcca Summary"}


identifier: gh_issue_3739604466
source: github_issue
status: new
created_at: 2025-12-17 16:55:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3739604466", "title": "Oncall: 2025-12-22", "url": "https://github.com/civiform/civiform/issues/12242", "user": "gwendolyngoetz", "user_url": "https://github.com/gwendolyngoetz", "repo": "civiform", "body_preview": "The Oncall is responsible for drafting and releasing a new version of CiviForm during their two week rotation and general upkeep through their rotation. This is an aid for each rotation, but the docs are the source of truth.\n\nRotations begin every other Monday, with the draft release created on the first Tuesday and published the following Tuesday.\n\nPlease check off all items at their appropriate times during your rotation.\n\nResources:\n\n- [Oncall Guide](https://github.com/civiform/civiform/wiki/", "created": "2025-12-17T16:31:10Z", "labels": ["oncall"], "context": "Oncall: 2025-12-22 The Oncall is responsible for drafting and releasing a new version of CiviForm during their two week rotation and general upkeep through their rotation. This is an aid for each rotation, but the docs "}


identifier: gh_issue_3739547701
source: github_issue
status: new
created_at: 2025-12-17 16:55:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3739547701", "title": "eemeli/yaml is included and is subject to CVE-2023-2251, can you upgrade bable-plugin-macros to remove that venerable dependency", "url": "https://github.com/projectstorm/react-diagrams/issues/1053", "user": "jchambers-ln", "user_url": "https://github.com/jchambers-ln", "repo": "react-diagrams", "body_preview": "The dependency below is reporting CVE-2023-2251 in security scanners, would it be possible to upgrade the version of babel-plugin-macros to a higher version so that it removes the dependency on eemeli/yaml@1.10.2 (cosmicconfig moves to a different yaml library in newer versions)  -- I initially thought this was a false positive in my scanner until I dug deep and realized the older cosmicconfig used that library but changed in newer versions. \n\nbabel-plugin-macros@3.1.0\n   cosmiconfig@7.1.0\n     ", "created": "2025-12-17T16:15:53Z", "labels": [], "context": "eemeli/yaml is included and is subject to CVE-2023-2251, can you upgrade bable-plugin-macros to remove that venerable dependency The dependency below is reporting CVE-2023-2251 in security scanners, would it be possible to upgrade the version of babel-plugin-macros to a higher version so that it removes the dependency on eemeli"}


identifier: gh_issue_3739657500
source: github_issue
status: new
created_at: 2025-12-17 16:55:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3739657500", "title": "vim-fuller: new default build options causing runtime errors", "url": "https://github.com/openwrt/packages/issues/28104", "user": "efahl", "user_url": "https://github.com/efahl", "repo": "packages", "body_preview": "### Package Name\n\nvim\n\n### Maintainer\n\n@GeorgeSapkin\n\n### OpenWrt Version\n\nSNAPSHOT\n\n### OpenWrt Target/Subtarget\n\nx86/64\n\n### Steps to Reproduce\n\n```\nopkg install vim-fuller\nvim\n```\nsee \n```\nError detected while processing /usr/share/vim/vim91/plugin/netrwPlugin.vim:\nline    7:\nE919: Directory not found in 'packpath': \"pack/*/opt/netrw\"\nPress ENTER or type command to continue\n```\n\nHere's a diff of the output from `vim --version` for the previous version and this new version.  Looks like they've", "created": "2025-12-17T16:47:34Z", "labels": ["bug"], "context": "vim-fuller: new default build options causing runtime errors ### Package Name\n\nvim\n\n### Maintainer\n\n@GeorgeSapkin\n\n### OpenWrt Version\n\nSNAPSHOT\n\n### OpenWrt Target/Subtarget\n\nx86/64\n\n### Steps to Reproduce\n\n```\nopkg install vim-fuller\nvim\n```\nsee \n```\nError de"}


identifier: gh_issue_3739696120
source: github_issue
status: new
created_at: 2025-12-17 17:08:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3739696120", "title": "\ud83d\udea8 Security Vulnerabilities Detected", "url": "https://github.com/cbwinslow/arbfinder-suite/issues/34", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "arbfinder-suite", "body_preview": "## Security Vulnerabilities Detected\n\n\n### NPM Dependencies\n- Critical: 0\n- High: 1\n- Moderate: 0\n- Low: 0\n", "created": "2025-12-17T16:58:46Z", "labels": ["dependencies", "security", "critical"], "context": "\ud83d\udea8 Security Vulnerabilities Detected ## Security Vulnerabilities Detected\n\n\n### NPM Dependencies\n- Critical: 0\n- High: 1\n- Moderate: 0\n- Low: 0\n"}


identifier: gh_issue_3739694328
source: github_issue
status: new
created_at: 2025-12-17 17:08:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3739694328", "title": "\ud83d\udea8 Security Vulnerabilities Detected", "url": "https://github.com/cbwinslow/arbfinder-suite/issues/33", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "arbfinder-suite", "body_preview": "## Security Vulnerabilities Detected\n\n\n### NPM Dependencies\n- Critical: 0\n- High: 1\n- Moderate: 0\n- Low: 0\n", "created": "2025-12-17T16:58:14Z", "labels": ["dependencies", "security", "critical"], "context": "\ud83d\udea8 Security Vulnerabilities Detected ## Security Vulnerabilities Detected\n\n\n### NPM Dependencies\n- Critical: 0\n- High: 1\n- Moderate: 0\n- Low: 0\n"}


identifier: gh_issue_3739686426
source: github_issue
status: new
created_at: 2025-12-17 17:08:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3739686426", "title": "Bug: V6 no vulnerability found for pkg:nuget/System.Security.Cryptography.xml@6.0.0", "url": "https://github.com/owasp-dep-scan/dep-scan/issues/461", "user": "michela-rima", "user_url": "https://github.com/michela-rima", "repo": "dep-scan", "body_preview": "### Expected Behavior\n\nRunning depscan --purl pkg:nuget/System.Security.Cryptography.xml@6.0.0 should find a vulnerability like V5.5 version \n\n                                            Dependency Scan Results (NUGET)\n\u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2564\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2564\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2564\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2564\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557\n\u2551 CVE                                                         \u2502 Insights             \u2502 Fix Version  \u2502 Severity \u2502 Score \u2551\n\u255f\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500", "created": "2025-12-17T16:55:58Z", "labels": ["bug"], "context": "Bug: V6 no vulnerability found for pkg:nuget/System.Security.Cryptography.xml@6.0.0 ### Expected Behavior\n\nRunning depscan --purl pkg:nuget/System.Security.Cryptography.xml@6.0.0 should find a vulnerability like V5.5 version \n\n                                            Dependency Sc"}


identifier: gh_issue_3739670248
source: github_issue
status: new
created_at: 2025-12-17 17:32:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3739670248", "title": "[URGENT] Vulnerability in this repo", "url": "https://github.com/arunstar/ai-github-actions/issues/1", "user": "echowhoami", "user_url": "https://github.com/echowhoami", "repo": "ai-github-actions", "body_preview": "Critical vuln in the github repo. please fix.", "created": "2025-12-17T16:51:36Z", "labels": [], "context": "[URGENT] Vulnerability in this repo Critical vuln in the github repo. please fix."}


identifier: gh_issue_3739662187
source: github_issue
status: new
created_at: 2025-12-17 17:32:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3739662187", "title": "\ud83d\udd34 [SAST] Flask Debug Mode Enabled in Production (4 occurrences)", "url": "https://github.com/JulienZammit/vulpy/issues/9", "user": "test-recette-alpha[bot]", "user_url": "https://github.com/apps/test-recette-alpha", "repo": "vulpy", "body_preview": "## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n**4** occurrence(s) of **Flask Debug Mode Enabled in Production** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nThis vulnerability occurs when a Flask application is launched with **debug mode** enabled in a production environment. In the provided code example, the call `app.run(\"0.0.0.0\", debug=True)` within the `__main__` block activates the Werkzeug debugger, which:\r\n\r\n- Exposes **interactive traceback interfaces** to remot", "created": "2025-12-17T16:48:58Z", "labels": [], "context": "\ud83d\udd34 [SAST] Flask Debug Mode Enabled in Production (4 occurrences) ## \ud83d\udd10 Security Vulnerabilities Detected by CybeDefend\n\n**4** occurrence(s) of **Flask Debug Mode Enabled in Production** detected.\n\n**Highest Severity**: \ud83d\udd34 CRITICAL\n\n### Description\n\nThis vulnerability"}


identifier: gh_issue_3739616369
source: github_issue
status: new
created_at: 2025-12-17 17:32:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3739616369", "title": "[Bug] Sonar BLOCKER: rename priority_order field to avoid clash with PRIORITY_ORDER", "url": "https://github.com/yurake/pptx_generator/issues/438", "user": "yurake", "user_url": "https://github.com/yurake", "repo": "pptx_generator", "body_preview": "### \u5fc5\u9808\u30c1\u30a7\u30c3\u30af\n- [x] \u540c\u3058\u5185\u5bb9\u306e Issue \u304c\u5b58\u5728\u3057\u306a\u3044\u3053\u3068\u3092\u78ba\u8a8d\u3057\u307e\u3057\u305f\u3002\n- [x] \u6700\u65b0\u306e `main` \u30d6\u30e9\u30f3\u30c1\u3067\u518d\u73fe\u3059\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u307e\u3057\u305f\u3002\n\n### \u6982\u8981\nSonarCloud (main, severities=BLOCKER/CRITICAL/MAJOR, types=BUG/VULNERABILITY/CODE_SMELL) \u3067 python:S1845 \u306e BLOCKER \u304c\u691c\u51fa\u3055\u308c\u3066\u3044\u307e\u3059\u3002`src/pptx_generator/config_manager.py:35` \u306e\u30d5\u30a3\u30fc\u30eb\u30c9 `priority_order` \u304c\u3001\u540c\u30d5\u30a1\u30a4\u30eb\u5148\u982d\u306e\u5b9a\u6570 `PRIORITY_ORDER`\uff08\u884c26\u4ed8\u8fd1\uff09\u3068\u540d\u524d\u304c\u307b\u307c\u540c\u4e00\u3067\u3001\u6df7\u540c\u3084\u4e0a\u66f8\u304d\u30ea\u30b9\u30af\u304c\u3042\u308b\u305f\u3081\u30ea\u30cd\u30fc\u30e0\u304c\u63a8\u5968\u3055\u308c\u3066\u3044\u307e\u3059\u3002\n\n### \u518d\u73fe\u624b\u9806\n1. `bash scripts/run_export_sonar_issues.sh` \u3092\u5b9f\u884c\u3057\u3001`temp/sonar_issues_by_file.json` \u3092\u78ba\u8a8d\n2. `src/pptx_generator/config_manager.py` \u306e Blo", "created": "2025-12-17T16:34:31Z", "labels": ["type:bug"], "context": "[Bug] Sonar BLOCKER: rename priority_order field to avoid clash with PRIORITY_ORDER ### \u5fc5\u9808\u30c1\u30a7\u30c3\u30af\n- [x] \u540c\u3058\u5185\u5bb9\u306e Issue \u304c\u5b58\u5728\u3057\u306a\u3044\u3053\u3068\u3092\u78ba\u8a8d\u3057\u307e\u3057\u305f\u3002\n- [x] \u6700\u65b0\u306e `main` \u30d6\u30e9\u30f3\u30c1\u3067\u518d\u73fe\u3059\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u307e\u3057\u305f\u3002\n\n### \u6982\u8981\nSonarCloud (main, severities=BLOCKER/CRITICAL/MAJOR, types=BUG/VULNERABILITY/CODE_SMELL) \u3067 python:S1845 \u306e BLO"}


identifier: gh_issue_3739837341
source: github_issue
status: new
created_at: 2025-12-17 17:44:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3739837341", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/Sarita-s667/skills-secure-repository-supply-chain1/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain1", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Sarita-s667! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step,", "created": "2025-12-17T17:42:26Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Sarita-s667! Welcome t"}


identifier: gh_issue_3739795612
source: github_issue
status: new
created_at: 2025-12-17 17:44:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3739795612", "title": "[person] Rotation - [date - mid-day date]", "url": "https://github.com/department-of-veterans-affairs/va.gov-cms/issues/23013", "user": "kellylein", "user_url": "https://github.com/kellylein", "repo": "va.gov-cms", "body_preview": "## User Story or Problem Statement\nCMS Engineer will be the Primary On Call Eng for date - mid-day date]\n\n## Description or Additional Context \n1. First responder for incidents and alerts.\n2. Perform the following housekeeping tasks as part of their rotation:\n- Review pull requests in our three repositories.\n- Review and address security alerts.\n- Check Drupal for package updates, since Dependabot is no longer handling them.\n3. Provide Coverage on platform support\n\n\n## Acceptance Criteria\n- [ ] ", "created": "2025-12-17T17:27:55Z", "labels": ["CMS Team", "Eng Rotation Coverage"], "context": "[person] Rotation - [date - mid-day date] ## User Story or Problem Statement\nCMS Engineer will be the Primary On Call Eng for date - mid-day date]\n\n## Description or Additional Context \n1. First responder for incidents and alerts.\n2. Perform "}


identifier: gh_issue_3739668516
source: github_issue
status: new
created_at: 2025-12-17 17:56:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3739668516", "title": "[SOOS] movies: Fix CVE-2022-3064 Vulnerability (yaml@1.10.2)", "url": "https://github.com/SOOS-FAngelino/myPublicRepo/issues/100", "user": "soos-security-analysis-qa[bot]", "user_url": "https://github.com/apps/soos-security-analysis-qa", "repo": "myPublicRepo", "body_preview": "Summary:\n\nA High severity Vulnerability was detected in movies at Dec 17, 2025, 12:16 PM. \n\n[CVE-2022-3064 Vulnerability (yaml@1.10.2)](https://qa-app.soos.io/clients/ogrxe3xqi/projects/qz8x2ozlp/branches/filescan0?status=pending&search=CVE-2022-3064)\n\n----\n\nDescription:\n\nYAML parser may consume excessive CPU or memory when processing malicious or large YAML documents, risking resource exhaustion.\n\n----\n\nSolution:\n\nRemove or update the package(s) and version(s) which are causing this vulnerabili", "created": "2025-12-17T16:51:01Z", "labels": [], "context": "[SOOS] movies: Fix CVE-2022-3064 Vulnerability (yaml@1.10.2) Summary:\n\nA High severity Vulnerability was detected in movies at Dec 17, 2025, 12:16 PM. \n\n[CVE-2022-3064 Vulnerability (yaml@1.10.2)](https://qa-app.soos.io/clients/ogrxe3xqi/projects/qz8x2ozlp/bran"}


identifier: gh_issue_3739667961
source: github_issue
status: new
created_at: 2025-12-17 17:56:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3739667961", "title": "[SOOS] movies: Fix CVE-2025-30359 Vulnerability (webpack-dev-server@4.15.2)", "url": "https://github.com/SOOS-FAngelino/myPublicRepo/issues/99", "user": "soos-security-analysis-qa[bot]", "user_url": "https://github.com/apps/soos-security-analysis-qa", "repo": "myPublicRepo", "body_preview": "Summary:\n\nA Medium severity Vulnerability was detected in movies at Dec 17, 2025, 12:16 PM. \n\n[CVE-2025-30359 Vulnerability (webpack-dev-server@4.15.2)](https://qa-app.soos.io/clients/ogrxe3xqi/projects/qz8x2ozlp/branches/filescan0?status=pending&search=CVE-2025-30359)\n\n----\n\nDescription:\n\nWebpack-dev-server before 5.2.1 can leak source code via malicious sites exploiting script injection and prototype pollution.\n\n----\n\nSolution:\n\nRemove or update the package(s) and version(s) which are causing ", "created": "2025-12-17T16:50:50Z", "labels": [], "context": "[SOOS] movies: Fix CVE-2025-30359 Vulnerability (webpack-dev-server@4.15.2) Summary:\n\nA Medium severity Vulnerability was detected in movies at Dec 17, 2025, 12:16 PM. \n\n[CVE-2025-30359 Vulnerability (webpack-dev-server@4.15.2)](https://qa-app.soos.io/clients/ogrxe3xqi/projec"}


identifier: gh_issue_3739842699
source: github_issue
status: new
created_at: 2025-12-17 18:09:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3739842699", "title": "For Coderabbit.ai", "url": "https://github.com/AuraFrameFx/GenKaiXposed/issues/10", "user": "AuraFrameFxDev", "user_url": "https://github.com/AuraFrameFxDev", "repo": "GenKaiXposed", "body_preview": "Review the Project in Full make it electrifying and honest!  Don't hold back - Please reframe from loading learnings please avoid .mds Docs readme's until after your review thank you!", "created": "2025-12-17T17:43:58Z", "labels": [], "context": "For Coderabbit.ai Review the Project in Full make it electrifying and honest!  Don't hold back - Please reframe from loading learnings please avoid .mds Docs readme's until after your review thank you!"}


identifier: gh_issue_3739813038
source: github_issue
status: new
created_at: 2025-12-17 18:09:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3739813038", "title": "Enhancement: System-Level Hardening, Process Isolation, and Hardware Documentation", "url": "https://github.com/markrai/obsidenc/issues/5", "user": "valentin-dirken", "user_url": "https://github.com/valentin-dirken", "repo": "obsidenc", "body_preview": "\n\n### 10  Implementation Details: Scorched Earth & Stealth Features\n\n#### 10.A. Secure Source Shredding (`--shred`)\n\n**Goal:** Ensure that after encryption, the original source files are physically overwritten on the disk before being unlinked, preventing recovery via forensic tools.\n\n**Implementation:**\nWe implement a DoD-style 3-pass overwrite (Zeros, Ones, Random) followed by a metadata renaming step.\n\n* **Add Dependency:** `rand` (already present).\n* **Code (`src/shred.rs`):**\n\n```rust\nuse s", "created": "2025-12-17T17:34:10Z", "labels": [], "context": "Enhancement: System-Level Hardening, Process Isolation, and Hardware Documentation \n\n### 10  Implementation Details: Scorched Earth & Stealth Features\n\n#### 10.A. Secure Source Shredding (`--shred`)\n\n**Goal:** Ensure that after encryption, the original source files are physically ov"}


identifier: gh_issue_3739997802
source: github_issue
status: new
created_at: 2025-12-17 18:34:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3739997802", "title": "[Dependency]: Update node-forge to version >= 1.3.2 to fix a security vulnerability", "url": "https://github.com/openo-beta/Open-O/issues/1026", "user": "LiamStanziani", "user_url": "https://github.com/LiamStanziani", "repo": "Open-O", "body_preview": "### Dependency\nnode-forge\n\n### Current Version\n1.3.1\n\n### Target Version\n\n1.3.2\n\n### Reason\n\nSecurity vulnerability\n\n### Breaking Changes\n\n- No major breaking changes (transitive dependency that should be fine being bumped 1 version, base docusaurus version can be updated when a new release version is added, last updated in October, this vulnerability is from November)\n\n### Testing\n\n- Run the tests\n- Run the docusaurus installation, look for any issues (already has errors, but look for any new o", "created": "2025-12-17T18:31:14Z", "labels": ["dependencies", "type: maintenance"], "context": "[Dependency]: Update node-forge to version >= 1.3.2 to fix a security vulnerability ### Dependency\nnode-forge\n\n### Current Version\n1.3.1\n\n### Target Version\n\n1.3.2\n\n### Reason\n\nSecurity vulnerability\n\n### Breaking Changes\n\n- No major breaking changes (transitive dependency that shoul"}


identifier: gh_issue_3739958641
source: github_issue
status: new
created_at: 2025-12-17 18:34:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3739958641", "title": "Repo ownership", "url": "https://github.com/Jahia/trivy-db/issues/22", "user": "bpapez", "user_url": "https://github.com/bpapez", "repo": "trivy-db", "body_preview": "The goal of this issue is to work on technical debt for a repository as part of the codebase ownership initiative. It is organized around team members regularly reviewing the state of codebases.\n\nCreating a tech day ticket is not required to work on tech debt, but can be a helpful resource to identify areas of focus.\n\n## Recommendations\n\nYou will not be able to address the entierety of a codebase tech debt in one go, organization is key to make sure you wrap-up time spent on a codebase with conc", "created": "2025-12-17T18:19:22Z", "labels": ["Area:Tech", "Tech Day"], "context": "Repo ownership The goal of this issue is to work on technical debt for a repository as part of the codebase ownership initiative. It is organized around team members regularly reviewing the state of codebases.\n\nCrea"}


identifier: gh_issue_3739909983
source: github_issue
status: new
created_at: 2025-12-17 18:34:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3739909983", "title": "filelock-3.12.2-py3-none-any.whl: 1 vulnerabilities (highest severity is: 6.3)", "url": "https://github.com/SCABugHun1STG/nifi/issues/71", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "nifi", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>filelock-3.12.2-py3-none-any.whl</b></summary>\n\n<p>A platform independent file lock.</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/00/45/ec3407adf6f6b5bf867a4462b2b0af27597a26bd3cd6e2534cb6ab029938/filelock-3.12.2-py3-none-any.whl\">https://files.pythonhosted.org/packages/00/45/ec3407adf6f6b5bf867a4462b2b0af27597a26bd", "created": "2025-12-17T18:04:18Z", "labels": ["Mend: dependency security vulnerability"], "context": "filelock-3.12.2-py3-none-any.whl: 1 vulnerabilities (highest severity is: 6.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>filelock-3.12.2-py3-none-any.whl</b></summary>\n"}


identifier: gh_issue_3739927867
source: github_issue
status: new
created_at: 2025-12-17 18:46:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3739927867", "title": "[Chore]: Update storybook version", "url": "https://github.com/Malvin95/NLCC-FoodHub/issues/47", "user": "Malvin95", "user_url": "https://github.com/Malvin95", "repo": "NLCC-FoodHub", "body_preview": "## \ud83e\uddf9 Summary\n<!-- Briefly describe the chore or refactor task -->\ne.g. Update dependencies to latest stable versions\n\nSecurity notice means the storybook needs to be updated.\n\n---\n\n## \ud83c\udfaf Objective\n<!-- What\u2019s the goal or purpose of this task? -->\nExplain why this is needed \u2014 e.g. improve performance, code quality, or maintainability.\n\n[An advisory chromatic security note](https://www.chromatic.com/blog/storybook-security-advisory/) from its creators means that an update would be suggested, and in", "created": "2025-12-17T18:09:48Z", "labels": ["chore"], "context": "[Chore]: Update storybook version ## \ud83e\uddf9 Summary\n<!-- Briefly describe the chore or refactor task -->\ne.g. Update dependencies to latest stable versions\n\nSecurity notice means the storybook needs to be updated.\n\n---\n\n## \ud83c\udfaf Objective\n<!--"}


identifier: gh_issue_3740008227
source: github_issue
status: new
created_at: 2025-12-17 18:59:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3740008227", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/mkems/potential-octo-potato/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "potential-octo-potato", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @mkems! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll ", "created": "2025-12-17T18:34:38Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @mkems! Welcome to your"}


identifier: gh_issue_3740148580
source: github_issue
status: new
created_at: 2025-12-17 19:23:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3740148580", "title": "[Dependency]: Update mdast-util-to-hast to version >= 13.2.1 to fix a security vulnerability", "url": "https://github.com/openo-beta/Open-O/issues/1028", "user": "LiamStanziani", "user_url": "https://github.com/LiamStanziani", "repo": "Open-O", "body_preview": "### Dependency\nmdast-util-to-hast\n\n### Current Version\n13.2.1\n\n### Target Version\n\n13.2.1\n\n### Reason\n\nSecurity vulnerability\n\n### Breaking Changes\n\n- No major breaking changes (transitive dependency that should be fine being bumped, base docusaurus version can be updated when a new release version is added, last updated in October, this vulnerability is from November)\n\n### Testing\n\n- Run the tests\n- Run the docusaurus installation, look for any issues (already has errors, but look for any new o", "created": "2025-12-17T19:18:17Z", "labels": ["dependencies", "type: maintenance"], "context": "[Dependency]: Update mdast-util-to-hast to version >= 13.2.1 to fix a security vulnerability ### Dependency\nmdast-util-to-hast\n\n### Current Version\n13.2.1\n\n### Target Version\n\n13.2.1\n\n### Reason\n\nSecurity vulnerability\n\n### Breaking Changes\n\n- No major breaking changes (transitive dependency "}


identifier: gh_issue_3740025549
source: github_issue
status: new
created_at: 2025-12-17 19:23:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3740025549", "title": "[Bounty] Analysis of Linear Plaintext Leakage in Homomorphic Addition Operations Due to Rerandomization Failure", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/205", "user": "Semutireng22", "user_url": "https://github.com/Semutireng22", "repo": "pvac_hfhe_cpp", "body_preview": "### **Introduction**\n\nIn accordance with the transparency guidelines emphasized in the `README.md`, I am publishing this research report and the attack methodology used to successfully extract the homomorphic addition result of A + B from `a.ct` and `b.ct`.\n\nThis report is provided to demonstrate that the security of the current `pvac-hfhe` implementation can be bypassed through raw byte analysis. My findings reveal an \"Abstract Problem\" in layer management, where the system fails to perform ade", "created": "2025-12-17T18:40:01Z", "labels": [], "context": "[Bounty] Analysis of Linear Plaintext Leakage in Homomorphic Addition Operations Due to Rerandomization Failure ### **Introduction**\n\nIn accordance with the transparency guidelines emphasized in the `README.md`, I am publishing this research report and the attack methodology used to successfully extract the hom"}


identifier: gh_issue_3740157768
source: github_issue
status: new
created_at: 2025-12-17 19:35:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3740157768", "title": "Showing new listings for Wednesday, 17 December 2025", "url": "https://github.com/terrryahn78/daily_arxiv_noti/issues/94", "user": "terrryahn78", "user_url": "https://github.com/terrryahn78", "repo": "daily_arxiv_noti", "body_preview": "## Electrically tunable spin qubits in strain-engineered graphene p-n junctions\n- **Keywords:** ['qubit']\n - **Authors:** Myung-Chul Jung, Nojoon Myoung\n - **Subjects:** Subjects:\nMesoscale and Nanoscale Physics (cond-mat.mes-hall); Materials Science (cond-mat.mtrl-sci); Computational Physics (physics.comp-ph)\n - **Arxiv link:** https://arxiv.org/abs/arXiv:2512.14508\n - **Pdf link:** https://arxiv.org/pdf/arXiv:2512.14508\n - **Abstract**\n Strain engineering enables quantum confinement in pristin", "created": "2025-12-17T19:21:14Z", "labels": ["superconducting resonators", "Josephson junction", "kinetic inductance", "superconducting circuits", "qubit", "T center", "transmon", "mergemon"], "context": "Showing new listings for Wednesday, 17 December 2025 ## Electrically tunable spin qubits in strain-engineered graphene p-n junctions\n- **Keywords:** ['qubit']\n - **Authors:** Myung-Chul Jung, Nojoon Myoung\n - **Subjects:** Subjects:\nMesoscale and Nanosc"}


identifier: gh_issue_3740173648
source: github_issue
status: new
created_at: 2025-12-17 19:59:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3740173648", "title": "[Dependency]: Update js-yaml to version >= 4.1.1 to fix a security vulnerability", "url": "https://github.com/openo-beta/Open-O/issues/1030", "user": "LiamStanziani", "user_url": "https://github.com/LiamStanziani", "repo": "Open-O", "body_preview": "### Dependency\njs-yaml\n\n### Current Version\n4.1.1\n\n### Target Version\n4.1.1\n\n### Reason\n\nSecurity vulnerability\n\n### Breaking Changes\n\n- No major breaking changes (transitive dependency that should be fine being bumped, base docusaurus version can be updated when a new release version is added, last updated in October, next release should fix this later on)\n\n### Testing\n\n- Run the tests\n- Run the docusaurus installation, look for any issues (already has errors, but look for any new ones from thi", "created": "2025-12-17T19:26:51Z", "labels": ["dependencies", "type: maintenance"], "context": "[Dependency]: Update js-yaml to version >= 4.1.1 to fix a security vulnerability ### Dependency\njs-yaml\n\n### Current Version\n4.1.1\n\n### Target Version\n4.1.1\n\n### Reason\n\nSecurity vulnerability\n\n### Breaking Changes\n\n- No major breaking changes (transitive dependency that should be"}


identifier: gh_issue_3740250318
source: github_issue
status: new
created_at: 2025-12-17 20:22:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3740250318", "title": "Update golang.org/x/crypto to address security vulnerabilities", "url": "https://github.com/openshift/installer-aro-wrapper/issues/377", "user": "sebrandon1", "user_url": "https://github.com/sebrandon1", "repo": "installer-aro-wrapper", "body_preview": "## \u26a0\ufe0f Outdated golang.org/x/crypto Dependency\n\nThis repository is currently using **`golang.org/x/crypto v0.36.0`** but the latest version is **`v0.46.0`**.\n\n> **Last scanned:** 2025-12-17 19:55 UTC\n\n### Why Update?\n\nKeeping cryptographic dependencies up-to-date is critical for security. Newer versions often include fixes for known vulnerabilities.\n\n### \ud83d\udd12 Security Vulnerabilities Fixed in Newer Versions\n\nThe following CVEs have been addressed in versions after v0.36.0:\n\n- **CVE-2025-47914** (MOD", "created": "2025-12-17T19:55:05Z", "labels": [], "context": "Update golang.org/x/crypto to address security vulnerabilities ## \u26a0\ufe0f Outdated golang.org/x/crypto Dependency\n\nThis repository is currently using **`golang.org/x/crypto v0.36.0`** but the latest version is **`v0.46.0`**.\n\n> **Last scanned:** 2025-12-17 19:55 UTC\n\n"}


identifier: gh_issue_3740248561
source: github_issue
status: new
created_at: 2025-12-17 20:22:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3740248561", "title": "Update golang.org/x/crypto to address security vulnerabilities", "url": "https://github.com/openshift/hive/issues/2819", "user": "sebrandon1", "user_url": "https://github.com/sebrandon1", "repo": "hive", "body_preview": "## \u26a0\ufe0f Outdated golang.org/x/crypto Dependency\n\nThis repository is currently using **`golang.org/x/crypto v0.45.0`** but the latest version is **`v0.46.0`**.\n\n> **Last scanned:** 2025-12-17 19:54 UTC\n\n### Why Update?\n\nKeeping cryptographic dependencies up-to-date is critical for security. Newer versions often include fixes for known vulnerabilities.\n\n### \u2139\ufe0f No Known CVEs\n\nThere are no known CVEs specifically addressed between `v0.45.0` and `v0.46.0`. However, staying current with the latest versi", "created": "2025-12-17T19:54:33Z", "labels": [], "context": "Update golang.org/x/crypto to address security vulnerabilities ## \u26a0\ufe0f Outdated golang.org/x/crypto Dependency\n\nThis repository is currently using **`golang.org/x/crypto v0.45.0`** but the latest version is **`v0.46.0`**.\n\n> **Last scanned:** 2025-12-17 19:54 UTC\n\n"}


identifier: gh_issue_3740248398
source: github_issue
status: new
created_at: 2025-12-17 20:22:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3740248398", "title": "Update golang.org/x/crypto to address security vulnerabilities", "url": "https://github.com/openshift/image-based-install-operator/issues/443", "user": "sebrandon1", "user_url": "https://github.com/sebrandon1", "repo": "image-based-install-operator", "body_preview": "## \u26a0\ufe0f Outdated golang.org/x/crypto Dependency\n\nThis repository is currently using **`golang.org/x/crypto v0.42.0`** but the latest version is **`v0.46.0`**.\n\n> **Last scanned:** 2025-12-17 19:54 UTC\n\n### Why Update?\n\nKeeping cryptographic dependencies up-to-date is critical for security. Newer versions often include fixes for known vulnerabilities.\n\n### \ud83d\udd12 Security Vulnerabilities Fixed in Newer Versions\n\nThe following CVEs have been addressed in versions after v0.42.0:\n\n- **CVE-2025-47914** (MOD", "created": "2025-12-17T19:54:30Z", "labels": [], "context": "Update golang.org/x/crypto to address security vulnerabilities ## \u26a0\ufe0f Outdated golang.org/x/crypto Dependency\n\nThis repository is currently using **`golang.org/x/crypto v0.42.0`** but the latest version is **`v0.46.0`**.\n\n> **Last scanned:** 2025-12-17 19:54 UTC\n\n"}


identifier: gh_issue_3740247780
source: github_issue
status: new
created_at: 2025-12-17 20:22:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3740247780", "title": "Update golang.org/x/crypto to address security vulnerabilities", "url": "https://github.com/openshift/azure-service-operator/issues/15", "user": "sebrandon1", "user_url": "https://github.com/sebrandon1", "repo": "azure-service-operator", "body_preview": "## \u26a0\ufe0f Outdated golang.org/x/crypto Dependency\n\nThis repository is currently using **`golang.org/x/crypto v0.14.0`** but the latest version is **`v0.46.0`**.\n\n> **Last scanned:** 2025-12-17 19:54 UTC\n\n### Why Update?\n\nKeeping cryptographic dependencies up-to-date is critical for security. Newer versions often include fixes for known vulnerabilities.\n\n### \ud83d\udd12 Security Vulnerabilities Fixed in Newer Versions\n\nThe following CVEs have been addressed in versions after v0.14.0:\n\n- **CVE-2023-48795** (MOD", "created": "2025-12-17T19:54:15Z", "labels": [], "context": "Update golang.org/x/crypto to address security vulnerabilities ## \u26a0\ufe0f Outdated golang.org/x/crypto Dependency\n\nThis repository is currently using **`golang.org/x/crypto v0.14.0`** but the latest version is **`v0.46.0`**.\n\n> **Last scanned:** 2025-12-17 19:54 UTC\n\n"}


identifier: gh_issue_3740247050
source: github_issue
status: new
created_at: 2025-12-17 20:22:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3740247050", "title": "Update golang.org/x/crypto to address security vulnerabilities", "url": "https://github.com/openshift/cluster-api-provider-gcp/issues/256", "user": "sebrandon1", "user_url": "https://github.com/sebrandon1", "repo": "cluster-api-provider-gcp", "body_preview": "## \u26a0\ufe0f Outdated golang.org/x/crypto Dependency\n\nThis repository is currently using **`golang.org/x/crypto v0.43.0`** but the latest version is **`v0.46.0`**.\n\n> **Last scanned:** 2025-12-17 19:54 UTC\n\n### Why Update?\n\nKeeping cryptographic dependencies up-to-date is critical for security. Newer versions often include fixes for known vulnerabilities.\n\n### \ud83d\udd12 Security Vulnerabilities Fixed in Newer Versions\n\nThe following CVEs have been addressed in versions after v0.43.0:\n\n- **CVE-2025-47914** (MOD", "created": "2025-12-17T19:54:05Z", "labels": [], "context": "Update golang.org/x/crypto to address security vulnerabilities ## \u26a0\ufe0f Outdated golang.org/x/crypto Dependency\n\nThis repository is currently using **`golang.org/x/crypto v0.43.0`** but the latest version is **`v0.46.0`**.\n\n> **Last scanned:** 2025-12-17 19:54 UTC\n\n"}


identifier: gh_issue_3740152256
source: github_issue
status: new
created_at: 2025-12-17 20:22:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3740152256", "title": "[HackerNews] SonicWall Fixes Actively Exploited CVE-2025-40602 in SMA 100 Appliances", "url": "https://github.com/SecOpsNews/news/issues/61106", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "news", "body_preview": "\n\nSonicWall has rolled out fixes to address a security flaw in Secure Mobile Access (SMA) 100 series appliances that it said has been actively exploited in the wild.\nThe vulnerability, tracked as CVE-2025-40602 (CVSS score: 6.6), concerns a case of local privilege escalation that arises as a result of insufficient authorization in the appliance management console (AMC).\nIt affects the following\n\n\n\n<https://thehackernews.com/2025/12/sonicwall-fixes-actively-exploited-cve.html>\n\n", "created": "2025-12-17T19:19:32Z", "labels": ["HackerNews"], "context": "[HackerNews] SonicWall Fixes Actively Exploited CVE-2025-40602 in SMA 100 Appliances \n\nSonicWall has rolled out fixes to address a security flaw in Secure Mobile Access (SMA) 100 series appliances that it said has been actively exploited in the wild.\nThe vulnerability, tracked as CVE-"}


identifier: gh_issue_3740101583
source: github_issue
status: new
created_at: 2025-12-17 20:22:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3740101583", "title": "filelock-3.20.0-py3-none-any.whl: 1 vulnerabilities (highest severity is: 6.3)", "url": "https://github.com/ibm-granite/granite-tsfm/issues/468", "user": "ibm-mend-app[bot]", "user_url": "https://github.com/apps/ibm-mend-app", "repo": "granite-tsfm", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>filelock-3.20.0-py3-none-any.whl</b></summary>\n\n<p>A platform independent file lock.</p>\n<p>Library home page: <a href=\"https://files.pythonhosted.org/packages/76/91/7216b27286936c16f5b4d0c530087e4a54eead683e6b0b73dd0c64844af6/filelock-3.20.0-py3-none-any.whl\">https://files.pythonhosted.org/packages/76/91/7216b27286936c16f5b4d0c530087e4a54eead68", "created": "2025-12-17T19:03:08Z", "labels": ["Mend: dependency security vulnerability"], "context": "filelock-3.20.0-py3-none-any.whl: 1 vulnerabilities (highest severity is: 6.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>filelock-3.20.0-py3-none-any.whl</b></summary>\n"}


identifier: gh_issue_3740101507
source: github_issue
status: new
created_at: 2025-12-17 20:22:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3740101507", "title": "granite-tsfm-0.3.2.dev182+ge40257260.zip: 1 vulnerabilities (highest severity is: 6.3)", "url": "https://github.com/ibm-granite/granite-tsfm/issues/467", "user": "ibm-mend-app[bot]", "user_url": "https://github.com/apps/ibm-mend-app", "repo": "granite-tsfm", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>granite-tsfm-0.3.2.dev182+ge40257260.zip</b></summary>\n\n<p></p>\n<p>Path to dependency file: /services/finetuning/.ws-temp-YSMQVR-requirements.txt</p>\n<p>Path to vulnerable library: /home/wss-scanner/.cache/pypoetry/virtualenvs/tsfminference-5uhNGYE7-py3.12/lib/python3.12/site-packages/filelock-3.19.1.dist-info,/home/wss-scanner/.cache/pypoetry/v", "created": "2025-12-17T19:03:06Z", "labels": ["Mend: dependency security vulnerability"], "context": "granite-tsfm-0.3.2.dev182+ge40257260.zip: 1 vulnerabilities (highest severity is: 6.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>granite-tsfm-0.3.2.dev182+ge40257260.zip</b></s"}


identifier: gh_issue_3740332649
source: github_issue
status: new
created_at: 2025-12-17 20:34:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3740332649", "title": "Plaintext Recovery via Direct Nonce Serialization (Offset 33)", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/233", "user": "citterxbt", "user_url": "https://github.com/citterxbt", "repo": "pvac_hfhe_cpp", "body_preview": "**Description:**\nI have identified a critical information leakage vulnerability where the plaintext (or a value linearly related to it) is serialized directly into the `nonce_lo` field of the ciphertext. By analyzing the provided artifacts `a.ct` and `b.ct`, I recovered the values and their sum without using the secret key.\n\n**Vulnerability:**\nThe `enc_value` function serializes the `Cipher` structure to disk using raw memory layout. At byte offset **33** (`0x21`), the 64-bit `nonce_lo` is writt", "created": "2025-12-17T20:23:35Z", "labels": [], "context": "Plaintext Recovery via Direct Nonce Serialization (Offset 33) **Description:**\nI have identified a critical information leakage vulnerability where the plaintext (or a value linearly related to it) is serialized directly into the `nonce_lo` field of the cipherte"}


identifier: gh_issue_3740233346
source: github_issue
status: new
created_at: 2025-12-17 20:34:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3740233346", "title": "[Bounty2]  Deterministic 64-bit leakage via ciphertext memory reinterpretation...RESULT = 12026260684", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/226", "user": "Emmsfay", "user_url": "https://github.com/Emmsfay", "repo": "pvac_hfhe_cpp", "body_preview": "<h1>Introduction</h1>\n\nThe homomorphic addition pipeline leaks internal ciphertext state due to incorrect plaintext decoding. Instead of decrypting and decoding, the implementation reinterprets raw ciphertext memory as native integers (int16 / int32 / int64). As a result, ciphertext addition deterministically leaks a 64-bit value, which is mistakenly treated as plaintext and validated by internal tests.\n\n**Root Cause**\nAfter ciphertext addition, the result buffer is parsed directly as a host int", "created": "2025-12-17T19:49:44Z", "labels": [], "context": "[Bounty2]  Deterministic 64-bit leakage via ciphertext memory reinterpretation...RESULT = 12026260684 <h1>Introduction</h1>\n\nThe homomorphic addition pipeline leaks internal ciphertext state due to incorrect plaintext decoding. Instead of decrypting and decoding, the implementation reinterprets raw ci"}


identifier: gh_issue_3740199517
source: github_issue
status: new
created_at: 2025-12-17 20:34:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3740199517", "title": "[BOUNTY] #2 Solution: Direct Weight Extraction via Index Analysis", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/224", "user": "irfanfauzin", "user_url": "https://github.com/irfanfauzin", "repo": "pvac_hfhe_cpp", "body_preview": "## Vulnerability Identified\n\nThe homomorphic addition implementation in `include/pvac/ops/arithmetic.hpp` contains a critical information leakage vulnerability. While most attackers focused on complex weight addition attacks, the actual vulnerability is much simpler.\n\n## Attack Method\n\n1. **Parse ciphertext structure**: Extract edge information from `a.ct` and `b.ct`\n2. **Locate index 10**: Find the edge with `idx=10` in the ciphertext structure\n3. **Extract weight value**: The plaintext sum is ", "created": "2025-12-17T19:36:37Z", "labels": [], "context": "[BOUNTY] #2 Solution: Direct Weight Extraction via Index Analysis ## Vulnerability Identified\n\nThe homomorphic addition implementation in `include/pvac/ops/arithmetic.hpp` contains a critical information leakage vulnerability. While most attackers focused on complex"}


identifier: gh_issue_3740166041
source: github_issue
status: new
created_at: 2025-12-17 20:34:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3740166041", "title": "PVAC v2 Bounty Solution: Complete Plaintext Recovery via Zero-Sum Noise Exploitation", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/218", "user": "naufalprtm", "user_url": "https://github.com/naufalprtm", "repo": "pvac_hfhe_cpp", "body_preview": "## Summary\n\nThis document presents a **complete ciphertext-only attack** against the PVAC v2 homomorphic encryption scheme that enables **full plaintext recovery** without any secret information. The attack exploits fundamental design flaws in the noise generation mechanism and lack of post-aggregation masking.\n\n### Attack Results\n\n```\nPlaintext A (recovered): 16,984,212,023,233,800,903\nPlaintext B (recovered):  3,163,176,724,313,768,583\n                         \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\nSu", "created": "2025-12-17T19:23:56Z", "labels": [], "context": "PVAC v2 Bounty Solution: Complete Plaintext Recovery via Zero-Sum Noise Exploitation ## Summary\n\nThis document presents a **complete ciphertext-only attack** against the PVAC v2 homomorphic encryption scheme that enables **full plaintext recovery** without any secret information. The "}


identifier: gh_issue_3740411279
source: github_issue
status: new
created_at: 2025-12-17 20:59:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3740411279", "title": "BentoPDF wont install", "url": "https://github.com/community-scripts/ProxmoxVE/issues/10092", "user": "HandyS11", "user_url": "https://github.com/HandyS11", "repo": "ProxmoxVE", "body_preview": "### \u2705 Have you read and understood the above guidelines?\n\nYes\n\n### \ud83d\udd0e Did you run the script with verbose mode enabled?\n\nYes, verbose mode was enabled and the output is included below\n\n### \ud83d\udcdc What is the name of the script you are using?\n\nBentoPDF\n\n### \ud83d\udcc2 What was the exact command used to execute the script?\n\nbash -c \"$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/ct/bentopdf.sh)\"\n\n### \u2699\ufe0f What settings are you using?\n\n- [x] Default Settings\n- [ ] Advanced Settings\n", "created": "2025-12-17T20:47:44Z", "labels": ["not a script issue"], "context": "BentoPDF wont install ### \u2705 Have you read and understood the above guidelines?\n\nYes\n\n### \ud83d\udd0e Did you run the script with verbose mode enabled?\n\nYes, verbose mode was enabled and the output is included below\n\n### \ud83d\udcdc What is th"}


identifier: gh_issue_3740493091
source: github_issue
status: new
created_at: 2025-12-17 21:11:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3740493091", "title": "Release validation failed for v1.5.0-alpha.42", "url": "https://github.com/pradeepmouli/iox-matter-bridge/issues/11", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "iox-matter-bridge", "body_preview": "# Release Artifact Validation Report\n\n**Release**: v1.5.0-alpha.42\n**Version**: 1.5.0-alpha.42\n**Date**: 2025-12-17 21:10:49 UTC\n\n## Validation Results\n\n| Artifact | Status | Notes |\n|----------|--------|-------|\n| Checksums file | \u274c Missing | Required |\n| Tarball (.tar.gz) | \u274c Missing or Invalid | Required |\n| SBOM (.sbom.json) | \u26a0\ufe0f Missing | Recommended |\n| GPG Signature | \u2139\ufe0f Not present | Optional |\n\n## Details\n\n### Checksums\n- \u274c CRITICAL: Checksums file missing\n\n### Tarball\n- \u274c CRITICAL: Tar", "created": "2025-12-17T21:10:49Z", "labels": [], "context": "Release validation failed for v1.5.0-alpha.42 # Release Artifact Validation Report\n\n**Release**: v1.5.0-alpha.42\n**Version**: 1.5.0-alpha.42\n**Date**: 2025-12-17 21:10:49 UTC\n\n## Validation Results\n\n| Artifact | Status | Notes |\n|----------|-----"}


identifier: gh_issue_3740431966
source: github_issue
status: new
created_at: 2025-12-17 21:23:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3740431966", "title": "Services-bound Lifetimes", "url": "https://github.com/milieuim/vaultix/issues/47", "user": "Malix-Labs", "user_url": "https://github.com/Malix-Labs", "repo": "vaultix", "body_preview": "Services-bound lifetimes are an implementation proposed by [secrix](https://github.com/platonic-systems/secrix)\n\nThey seem like a great security upgrade;\n\nFrom [their README](https://github.com/milieuim/vaultix#readme):\n\n> bind secrets to systemd services to ensure that their lifetime is only as long as the service itself. As well, it allows for system secrets, which are by default bound to the lifetime of the system. All secrets are stored in virtual memory and do not end up on disk.\n>\n> Creati", "created": "2025-12-17T20:53:55Z", "labels": [], "context": "Services-bound Lifetimes Services-bound lifetimes are an implementation proposed by [secrix](https://github.com/platonic-systems/secrix)\n\nThey seem like a great security upgrade;\n\nFrom [their README](https://github.com/milieu"}


identifier: gh_issue_3740533688
source: github_issue
status: new
created_at: 2025-12-17 21:35:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3740533688", "title": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide", "url": "https://github.com/demos-aatmmr/hackathon-1/issues/1", "user": "repo-crafter[bot]", "user_url": "https://github.com/apps/repo-crafter", "repo": "hackathon-1", "body_preview": "# Welcome to demos-aatmmr/hackathon-1!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Checklist\n\n- [ ] Review and update the repository description\n- [ ] Set up branch protection rules\n- [ ] Configure repository settings (Issues, Projects, Wiki, etc.)\n- [ ] Add repository topics/tags for discoverability\n- [ ] Set up automated workflows (if needed)\n\n## \ud83d\udd12 Security & Best Practices\n\n### Br", "created": "2025-12-17T21:20:57Z", "labels": ["documentation", "good first issue", "setup"], "context": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide # Welcome to demos-aatmmr/hackathon-1!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Che"}


identifier: gh_issue_3740515338
source: github_issue
status: new
created_at: 2025-12-17 21:35:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3740515338", "title": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide", "url": "https://github.com/demos-aatmmr/hackathon/issues/1", "user": "repo-crafter[bot]", "user_url": "https://github.com/apps/repo-crafter", "repo": "hackathon", "body_preview": "# Welcome to demos-aatmmr/hackathon!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Checklist\n\n- [ ] Review and update the repository description\n- [ ] Set up branch protection rules\n- [ ] Configure repository settings (Issues, Projects, Wiki, etc.)\n- [ ] Add repository topics/tags for discoverability\n- [ ] Set up automated workflows (if needed)\n\n## \ud83d\udd12 Security & Best Practices\n\n### Bran", "created": "2025-12-17T21:16:39Z", "labels": ["documentation", "good first issue", "setup"], "context": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide # Welcome to demos-aatmmr/hackathon!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Check"}


identifier: gh_issue_3740511855
source: github_issue
status: new
created_at: 2025-12-17 21:35:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3740511855", "title": "Build Certbot SSL Certificate Management Web Interface", "url": "https://github.com/boydyngo/certbot-ssl-manager/issues/1", "user": "boydyngo", "user_url": "https://github.com/boydyngo", "repo": "certbot-ssl-manager", "body_preview": "# Product Requirements Document: Certbot SSL Certificate Management Web Interface\r\n\r\n**Product Name:** Certbot SSL Management Portal  \r\n**Version:** 1.0  \r\n**Date:** December 17, 2025  \r\n**Owner:** drwilliams@getty.edu\r\n\r\n---\r\n\r\n## 1. Executive Summary\r\n\r\n### Purpose\r\n\r\nBuild a web-based management interface for SSL certificates generated via Certbot with Sectigo InCommon ACME server. The system replaces manual bash script execution with an automated, user-friendly platform supporting certificat", "created": "2025-12-17T21:15:41Z", "labels": [], "context": "Build Certbot SSL Certificate Management Web Interface # Product Requirements Document: Certbot SSL Certificate Management Web Interface\r\n\r\n**Product Name:** Certbot SSL Management Portal  \r\n**Version:** 1.0  \r\n**Date:** December 17, 2025  \r\n**Owner:** dr"}


identifier: gh_issue_3740288522
source: github_issue
status: new
created_at: 2025-12-17 21:35:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3740288522", "title": "Security hardening and input validation", "url": "https://github.com/honua-io/honua-server/issues/39", "user": "mikemcdougall", "user_url": "https://github.com/mikemcdougall", "repo": "honua-server", "body_preview": "## Description\nFinal security review and hardening.\n\n## Acceptance Criteria\n- [ ] SQL injection prevention verified\n- [ ] Input validation on all endpoints\n- [ ] XSS prevention in responses\n- [ ] Security headers configured\n- [ ] Dependency vulnerability scan clean\n\n## Test Plan\n- [ ] Security scan with dotnet-security-scan\n- [ ] Manual review of SQL query construction\n- [ ] Penetration test on key endpoints", "created": "2025-12-17T20:08:56Z", "labels": ["enhancement"], "context": "Security hardening and input validation ## Description\nFinal security review and hardening.\n\n## Acceptance Criteria\n- [ ] SQL injection prevention verified\n- [ ] Input validation on all endpoints\n- [ ] XSS prevention in responses\n- [ ] Secu"}


identifier: gh_issue_3740604517
source: github_issue
status: new
created_at: 2025-12-17 21:46:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3740604517", "title": "[Feature Request] Integrate actual security scanning tools with AI Security Suggestions", "url": "https://github.com/AutoMaker-Org/automaker/issues/155", "user": "cabana8471-arch", "user_url": "https://github.com/cabana8471-arch", "repo": "automaker", "body_preview": "# Feature Request: Integrate actual security scanning tools with AI Security Suggestions\n\n## Problem\n\nThe \"Security\" suggestions in AI Suggestions feature uses **only LLM pattern recognition** to identify security issues. While the AI can read code and spot obvious patterns, it:\n\n- Does NOT run `npm audit` to check vulnerable dependencies\n- Does NOT integrate with Snyk, OWASP Dependency Check, or similar tools\n- Does NOT use static analysis tools like Semgrep, ESLint security plugins\n- Relies so", "created": "2025-12-17T21:38:45Z", "labels": [], "context": "[Feature Request] Integrate actual security scanning tools with AI Security Suggestions # Feature Request: Integrate actual security scanning tools with AI Security Suggestions\n\n## Problem\n\nThe \"Security\" suggestions in AI Suggestions feature uses **only LLM pattern recognition** to iden"}


identifier: gh_issue_3740631430
source: github_issue
status: new
created_at: 2025-12-17 22:00:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3740631430", "title": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide", "url": "https://github.com/demos-aatmmr/hackathon-3/issues/1", "user": "repo-crafter[bot]", "user_url": "https://github.com/apps/repo-crafter", "repo": "hackathon-3", "body_preview": "# Welcome to demos-aatmmr/hackathon-3!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Checklist\n\n- [ ] Review and update the repository description\n- [ ] Set up branch protection rules\n- [ ] Configure repository settings (Issues, Projects, Wiki, etc.)\n- [ ] Add repository topics/tags for discoverability\n- [ ] Set up automated workflows (if needed)\n\n## \ud83d\udd12 Security & Best Practices\n\n### Br", "created": "2025-12-17T21:50:18Z", "labels": ["documentation", "good first issue", "setup"], "context": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide # Welcome to demos-aatmmr/hackathon-3!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Che"}


identifier: gh_issue_3740624078
source: github_issue
status: new
created_at: 2025-12-17 22:00:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3740624078", "title": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide", "url": "https://github.com/demos-aatmmr/hackathon-2/issues/1", "user": "repo-crafter[bot]", "user_url": "https://github.com/apps/repo-crafter", "repo": "hackathon-2", "body_preview": "# Welcome to demos-aatmmr/hackathon-2!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Checklist\n\n- [ ] Review and update the repository description\n- [ ] Set up branch protection rules\n- [ ] Configure repository settings (Issues, Projects, Wiki, etc.)\n- [ ] Add repository topics/tags for discoverability\n- [ ] Set up automated workflows (if needed)\n\n## \ud83d\udd12 Security & Best Practices\n\n### Br", "created": "2025-12-17T21:47:31Z", "labels": ["documentation", "good first issue", "setup"], "context": "\ud83c\udf89 Repository Created Successfully - Getting Started Guide # Welcome to demos-aatmmr/hackathon-2!\n\nThis repository has been created successfully via the repo-crafter API and @aatmmr has been assigned as the repository administrator.\n\n## \ud83d\udccb Repository Setup Che"}


identifier: gh_issue_3740686441
source: github_issue
status: new
created_at: 2025-12-17 22:11:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3740686441", "title": "Dependency Security Audit", "url": "https://github.com/Cody-k/akouarr/issues/1", "user": "Cody-k", "user_url": "https://github.com/Cody-k", "repo": "akouarr", "body_preview": "## Critical (Action Required)\n\n| Package | Version | CVE | Fix |\n|---------|---------|-----|-----|\n| RestSharp | 106.15.0 | CVE-2024-45302 (CRLF Injection) | Upgrade to 112.1.0 |\n\n## High Priority\n\n| Package | Issue | Fix |\n|---------|-------|-----|\n| Selenium | 3.141.0 - XSS, DNS rebinding, CSRF | Upgrade to 4.27.0 |\n| Microsoft.Data.SqlClient | 2.1.7 - End-of-support | Upgrade to 5.2.2 |\n\n## Deprecated/Unmaintained\n\n| Package | Status | Alternative |\n|---------|--------|-------------|\n| moment", "created": "2025-12-17T22:10:11Z", "labels": [], "context": "Dependency Security Audit ## Critical (Action Required)\n\n| Package | Version | CVE | Fix |\n|---------|---------|-----|-----|\n| RestSharp | 106.15.0 | CVE-2024-45302 (CRLF Injection) | Upgrade to 112.1.0 |\n\n## High Priority\n\n| "}


identifier: gh_issue_3740643553
source: github_issue
status: new
created_at: 2025-12-17 22:11:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3740643553", "title": "Strapi 5 FreeBSD compatibility", "url": "https://github.com/strapi/strapi/issues/25050", "user": "megrooms", "user_url": "https://github.com/megrooms", "repo": "strapi", "body_preview": "### Node Version\n\n22.19.0\n\n### NPM/Yarn/PNPM Version\n\n11.6.0\n\n### Strapi Version\n\n5.33.0\n\n### Operating System\n\nOther\n\n### Database\n\nSQLite\n\n### Javascript or Typescript\n\nTypescript\n\n### Reproduction URL\n\n_No response_\n\n### Bug Description\n\nAttempting to run or build a new project fails after using npx or yarn installation procedures.\n\n### Steps to Reproduce\n\nFrom a FreeBSD host, install node and npm and then bootstrap the project ...\n\n$ npx create-strapi-app@latest nmStrapi\nnpm warn Unknown glo", "created": "2025-12-17T21:54:30Z", "labels": [], "context": "Strapi 5 FreeBSD compatibility ### Node Version\n\n22.19.0\n\n### NPM/Yarn/PNPM Version\n\n11.6.0\n\n### Strapi Version\n\n5.33.0\n\n### Operating System\n\nOther\n\n### Database\n\nSQLite\n\n### Javascript or Typescript\n\nTypescript\n\n### Reproduction "}


identifier: gh_issue_3740565373
source: github_issue
status: new
created_at: 2025-12-17 22:11:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3740565373", "title": "UI/UX Upgrade: Professional App Shell + Portal Dashboard + Data Tables + Public Site Polish", "url": "https://github.com/Pcnaid-Dev/dcvaas-delegated-dcv-main/issues/35", "user": "Pcnaid-Dev", "user_url": "https://github.com/Pcnaid-Dev", "repo": "dcvaas-delegated-dcv-main", "body_preview": "## Why\nThe UI is currently functional but visually bland and not very guided.\nExamples:\n- Billing shows plan + upgrade CTAs but lacks a \u201creal SaaS billing\u201d layout (plan card, usage meter, invoices, payment method details).\n- Jobs has an empty state (\u201cNo jobs yet\u201d) but no guidance or helpful visuals.\n- Team is mostly a locked upsell state with minimal structure.\n- Domains list + domain detail pages need table UX, better status visualization, and a guided DNS validation stepper.\n\nGoal: make the pr", "created": "2025-12-17T21:27:17Z", "labels": ["enhancement"], "context": "UI/UX Upgrade: Professional App Shell + Portal Dashboard + Data Tables + Public Site Polish ## Why\nThe UI is currently functional but visually bland and not very guided.\nExamples:\n- Billing shows plan + upgrade CTAs but lacks a \u201creal SaaS billing\u201d layout (plan card, usage meter, invoices, pa"}


identifier: gh_issue_3740586570
source: github_issue
status: new
created_at: 2025-12-17 22:11:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3740586570", "title": "Security: Implement Dependency Security Auditing and Automated Updates", "url": "https://github.com/nearai/cloud-api/issues/285", "user": "PierreLeGuen", "user_url": "https://github.com/PierreLeGuen", "repo": "cloud-api", "body_preview": "We need automated security vulnerability scanning for our Rust dependencies. Currently there's no mechanism to detect known CVEs in our dependency tree, leaving us exposed to security issues until manually discovered. Additionally, dependencies can become outdated, missing security patches and improvements.\n\nProposed changes:\n- Add cargo-audit GitHub Action to scan for vulnerabilities on PRs and daily\n- Enable Dependabot for automated weekly dependency update PRs\n- Document the security practice", "created": "2025-12-17T21:33:11Z", "labels": [], "context": "Security: Implement Dependency Security Auditing and Automated Updates We need automated security vulnerability scanning for our Rust dependencies. Currently there's no mechanism to detect known CVEs in our dependency tree, leaving us exposed to security issues until man"}


identifier: gh_issue_3740730573
source: github_issue
status: new
created_at: 2025-12-17 22:36:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3740730573", "title": "CRITICAL: Upgrade RestSharp to fix CVE-2024-45302 (CRLF Injection)", "url": "https://github.com/Cody-k/akouarr/issues/3", "user": "Cody-k", "user_url": "https://github.com/Cody-k", "repo": "akouarr", "body_preview": "## Summary\nRestSharp 106.15.0 has a CRLF injection vulnerability (CVE-2024-45302).\n\n## Current State\n- Package: RestSharp\n- Version: 106.15.0\n- CVE: [CVE-2024-45302](https://nvd.nist.gov/vuln/detail/CVE-2024-45302)\n\n## Risk Assessment\n**Lower than initially thought** - RestSharp is ONLY used in integration tests, not production code.\n\nFiles using RestSharp:\n- `src/NzbDrone.Integration.Test/` - All test infrastructure\n- `src/NzbDrone.Test.Common/NzbDroneRunner.cs` - Test runner\n\nProduction code (", "created": "2025-12-17T22:32:50Z", "labels": [], "context": "CRITICAL: Upgrade RestSharp to fix CVE-2024-45302 (CRLF Injection) ## Summary\nRestSharp 106.15.0 has a CRLF injection vulnerability (CVE-2024-45302).\n\n## Current State\n- Package: RestSharp\n- Version: 106.15.0\n- CVE: [CVE-2024-45302](https://nvd.nist.gov/vuln/detail/C"}


identifier: gh_issue_3740503747
source: github_issue
status: new
created_at: 2025-12-17 22:36:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3740503747", "title": "Please provide WComponents compatible with Java 8 that removes susceptibility to critical Apache Tika vulnerability CVE-2025-66516", "url": "https://github.com/BorderTech/wcomponents/issues/1876", "user": "david-a-campbell-aus", "user_url": "https://github.com/david-a-campbell-aus", "repo": "wcomponents", "body_preview": "Please provide WComponents compatible with Java 8 that removes susceptibility to critical vulnerability CVE-2025-66516\n\nWFileWidget and WMultiFileWidget affected through use of class FileUtil which depends on Tika\n\nCritical matter, we need to remediate some immediate vulnerabilities in client-facing systems in relation to uploaded file content.\n\n", "created": "2025-12-17T21:13:51Z", "labels": [], "context": "Please provide WComponents compatible with Java 8 that removes susceptibility to critical Apache Tika vulnerability CVE-2025-66516 Please provide WComponents compatible with Java 8 that removes susceptibility to critical vulnerability CVE-2025-66516\n\nWFileWidget and WMultiFileWidget affected through use of class FileUtil which de"}


identifier: gh_issue_3740466804
source: github_issue
status: new
created_at: 2025-12-17 22:36:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3740466804", "title": "Mitigate CVE-2025-55182 (React2Shell)", "url": "https://github.com/CapSoftware/Cap/issues/1456", "user": "c0ball", "user_url": "https://github.com/c0ball", "repo": "Cap", "body_preview": "I noticed that the currently available Docker image in the GitHub registry uses Next.js version **15.5.4**, which is affected by the critical **React2Shell** vulnerability ([CVE-2025-55182](https://www.cve.org/CVERecord?id=CVE-2025-55182), CVSS 10.0).\n\nSince I'm not sure to what extent this affects Cap, I wanted to ask if someone could take a look at this, update the Next.js version to **15.5.9** and publish new Docker images.\n\nThank you in advance for looking into this!", "created": "2025-12-17T21:03:35Z", "labels": [], "context": "Mitigate CVE-2025-55182 (React2Shell) I noticed that the currently available Docker image in the GitHub registry uses Next.js version **15.5.4**, which is affected by the critical **React2Shell** vulnerability ([CVE-2025-55182](https://ww"}


identifier: gh_issue_3740695195
source: github_issue
status: new
created_at: 2025-12-17 23:02:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3740695195", "title": "[BUG] packages within preinstall or postinstall only do not run", "url": "https://github.com/vltpkg/vltpkg/issues/1372", "user": "lukekarrys", "user_url": "https://github.com/lukekarrys", "repo": "vltpkg", "body_preview": "### \ud83d\udccb Bug Description\n\nWhen a package with a preinstall or postinstall script only, then those scripts will not be run even when `vlt build` is run.\n\n### \u2705 Expected Behavior\n\nThose scripts should run when `vlt build` is run.\n\n### \u274c Actual Behavior\n\nThe script is never run but it is reported as run with `vlt query :built`.\n\n### \ud83d\udd04 Steps to Reproduce\n\n```sh\n#!/bin/bash\n\nset -e\n\nSCRIPT_DIR=\"$(cd \"$(dirname \"${BASH_SOURCE[0]}\")\" && pwd)\"\nFILE_PATH=\"node_modules/@lukekarrys/public-package/date.txt\"\n\n#", "created": "2025-12-17T22:14:01Z", "labels": ["bug", "needs-triage"], "context": "[BUG] packages within preinstall or postinstall only do not run ### \ud83d\udccb Bug Description\n\nWhen a package with a preinstall or postinstall script only, then those scripts will not be run even when `vlt build` is run.\n\n### \u2705 Expected Behavior\n\nThose scripts should run "}


identifier: gh_issue_3740703536
source: github_issue
status: new
created_at: 2025-12-17 23:26:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3740703536", "title": "Best Practices Using Docker Hardened Images?", "url": "https://github.com/astral-sh/uv-docker-example/issues/74", "user": "EthanC", "user_url": "https://github.com/EthanC", "repo": "uv-docker-example", "body_preview": "Today, [Docker announced](https://www.docker.com/blog/docker-hardened-images-for-every-developer/) free and open source hardened images for everyone. Included amongst that catalog is a [hardened uv image](https://hub.docker.com/hardened-images/catalog/dhi/uv).\n\n> Docker Hardened Images are built to meet the highest security and compliance standards. They provide a trusted foundation for containerized workloads by incorporating security best practices from the start.\n> \n> These images are publish", "created": "2025-12-17T22:18:07Z", "labels": [], "context": "Best Practices Using Docker Hardened Images? Today, [Docker announced](https://www.docker.com/blog/docker-hardened-images-for-every-developer/) free and open source hardened images for everyone. Included amongst that catalog is a [hardened uv im"}


identifier: gh_issue_3740612422
source: github_issue
status: new
created_at: 2025-12-17 23:26:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3740612422", "title": "Release validation failed for v1.5.0-alpha.43", "url": "https://github.com/pradeepmouli/iox-matter-bridge/issues/12", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "iox-matter-bridge", "body_preview": "# Release Artifact Validation Report\n\n**Release**: v1.5.0-alpha.43\n**Version**: 1.5.0-alpha.43\n**Date**: 2025-12-17 21:42:09 UTC\n\n## Validation Results\n\n| Artifact | Status | Notes |\n|----------|--------|-------|\n| Checksums file | \u274c Missing | Required |\n| Tarball (.tar.gz) | \u274c Missing or Invalid | Required |\n| SBOM (.sbom.json) | \u26a0\ufe0f Missing | Recommended |\n| GPG Signature | \u2139\ufe0f Not present | Optional |\n\n## Details\n\n### Checksums\n- \u274c CRITICAL: Checksums file missing\n\n### Tarball\n- \u274c CRITICAL: Tar", "created": "2025-12-17T21:42:09Z", "labels": [], "context": "Release validation failed for v1.5.0-alpha.43 # Release Artifact Validation Report\n\n**Release**: v1.5.0-alpha.43\n**Version**: 1.5.0-alpha.43\n**Date**: 2025-12-17 21:42:09 UTC\n\n## Validation Results\n\n| Artifact | Status | Notes |\n|----------|-----"}


identifier: gh_issue_3740782619
source: github_issue
status: new
created_at: 2025-12-17 23:38:06
data:
  {"source": "github_issue", "identifier": "gh_issue_3740782619", "title": "x/vulndb: potential Go vuln in github.com/mattermost/mattermost-plugin-github: GHSA-jf5h-xfw4-p8gp", "url": "https://github.com/golang/vulndb/issues/4247", "user": "GoVulnBot", "user_url": "https://github.com/GoVulnBot", "repo": "vulndb", "body_preview": "Advisory [GHSA-jf5h-xfw4-p8gp](https://github.com/advisories/GHSA-jf5h-xfw4-p8gp) references a vulnerability in the following Go modules:\n\n| Module |\n| - |\n| [github.com/mattermost/mattermost-plugin-github](https://pkg.go.dev/github.com/mattermost/mattermost-plugin-github) |\n\nDescription:\nMattermost versions 10.11.x <= 10.11.6 and Mattermost GitHub plugin versions <=2.4.0 fail to validate plugin bot identity in reaction forwarding which allows attackers to hijack the GitHub reaction feature to m", "created": "2025-12-17T23:01:42Z", "labels": ["NeedsTriage"], "context": "x/vulndb: potential Go vuln in github.com/mattermost/mattermost-plugin-github: GHSA-jf5h-xfw4-p8gp Advisory [GHSA-jf5h-xfw4-p8gp](https://github.com/advisories/GHSA-jf5h-xfw4-p8gp) references a vulnerability in the following Go modules:\n\n| Module |\n| - |\n| [github.com/mattermost/mattermost-plugin-g"}


identifier: gh_issue_3740803311
source: github_issue
status: new
created_at: 2025-12-17 23:38:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3740803311", "title": "chore: Configure Renovate for automated dependency management", "url": "https://github.com/gustavovalverde/zentity/issues/2", "user": "gustavovalverde", "user_url": "https://github.com/gustavovalverde", "repo": "zentity", "body_preview": "## Summary\n\nSet up Renovate bot for automated dependency updates across all services in the monorepo.\n\n## Background\n\nAfter researching Dependabot vs Renovate ([comparison details](https://docs.renovatebot.com/bot-comparison/)), Renovate is recommended for this project because:\n\n- **Docker Compose support**: Native parsing of `docker-compose.yml` to update base images\n- **Multi-ecosystem monorepo**: Better handling of Bun/npm + Cargo + Python pip + Docker in one repo\n- **Dependency Dashboard**: ", "created": "2025-12-17T23:13:21Z", "labels": ["enhancement"], "context": "chore: Configure Renovate for automated dependency management ## Summary\n\nSet up Renovate bot for automated dependency updates across all services in the monorepo.\n\n## Background\n\nAfter researching Dependabot vs Renovate ([comparison details](https://docs.renova"}


identifier: gh_issue_3740787293
source: github_issue
status: new
created_at: 2025-12-17 23:38:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3740787293", "title": "Enable Dependabot for Dependencies & Security Alerts", "url": "https://github.com/LIF-Initiative/lif-core/issues/673", "user": "cbeach47", "user_url": "https://github.com/cbeach47", "repo": "lif-core", "body_preview": "**Describe the issue**\n\n| Configure Dependabot for Python and Docker with proper cadence | Dependabot.yml added; alerts enabled; sample PR verified. |\n| -- | -- |\n| Summary | Acceptance Criteria |\n\n**Additional context**\n\nCreated by @Jennifer-Oxborough on Tue Nov  4 21:37:33 UTC 2025 in the previous ticket tracking system as LIF-584\n\nOpen state: Backlog", "created": "2025-12-17T23:04:16Z", "labels": [], "context": "Enable Dependabot for Dependencies & Security Alerts **Describe the issue**\n\n| Configure Dependabot for Python and Docker with proper cadence | Dependabot.yml added; alerts enabled; sample PR verified. |\n| -- | -- |\n| Summary | Acceptance Criteria |\n\n**"}


identifier: gh_issue_3740857850
source: github_issue
status: new
created_at: 2025-12-17 23:50:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3740857850", "title": "port to true web app/wasm", "url": "https://github.com/supervoidcoder/mathnotes/issues/1", "user": "supervoidcoder", "user_url": "https://github.com/supervoidcoder", "repo": "mathnotes", "body_preview": "self explanatory\n\nfor whatever reason, i have no clue what the original dev was on to when making this a PYTHON app???\ni guess its supposed to be resource intensive so it's not easy\n\nbut wasm is still an option, and advertising it as something that \"runs in your browser\" isn't exactly correct", "created": "2025-12-17T23:46:46Z", "labels": [], "context": "port to true web app/wasm self explanatory\n\nfor whatever reason, i have no clue what the original dev was on to when making this a PYTHON app???\ni guess its supposed to be resource intensive so it's not easy\n\nbut wasm is still"}


identifier: gh_issue_3740843761
source: github_issue
status: new
created_at: 2025-12-17 23:50:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3740843761", "title": "\ud83d\udd34 CRITICAL: Remove publicly exposed phpinfo.php", "url": "https://github.com/tfyh/efacloud/issues/5", "user": "SquaredP", "user_url": "https://github.com/SquaredP", "repo": "efacloud", "body_preview": "## Summary\nThe file `public/phpinfo.php` exposes complete PHP configuration to the public internet.\n\n## Severity\n**CRITICAL** - Information Disclosure\n\n## Location\n`public/phpinfo.php`\n\n## Description\nThe `phpinfo()` function outputs a complete dump of PHP's configuration including:\n- Exact PHP version (attackers can look up known CVEs)\n- Server file paths (helps craft path traversal attacks)\n- Installed modules (identifies attack vectors)\n- Environment variables (may contain secrets)\n- Disabled", "created": "2025-12-17T23:39:22Z", "labels": [], "context": "\ud83d\udd34 CRITICAL: Remove publicly exposed phpinfo.php ## Summary\nThe file `public/phpinfo.php` exposes complete PHP configuration to the public internet.\n\n## Severity\n**CRITICAL** - Information Disclosure\n\n## Location\n`public/phpinfo.php`\n\n## Description"}


identifier: gh_issue_3740858035
source: github_issue
status: new
created_at: 2025-12-18 00:15:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3740858035", "title": "PVAC-HFHE Duplicate Index Vulnerability", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/250", "user": "AganFebro", "user_url": "https://github.com/AganFebro", "repo": "pvac_hfhe_cpp", "body_preview": "## Executive Summary\n\nI discovered a critical vulnerability in the PVAC-HFHE homomorphic encryption implementation that allows complete plaintext recovery without the secret key. The vulnerability stems from a failure in the index selection algorithm, allowing duplicate indices with the same sign in ciphertext structures, which enables R-removal attacks.\n\n## Vulnerability Details\n\n### Affected Components\n- **Package**: pvac_hfhe_cpp\n- **Function**: Index selection in ciphertext construction\n- **", "created": "2025-12-17T23:46:53Z", "labels": [], "context": "PVAC-HFHE Duplicate Index Vulnerability ## Executive Summary\n\nI discovered a critical vulnerability in the PVAC-HFHE homomorphic encryption implementation that allows complete plaintext recovery without the secret key. The vulnerability ste"}


identifier: gh_issue_3740845216
source: github_issue
status: new
created_at: 2025-12-18 00:15:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3740845216", "title": "\ud83d\udd34 CRITICAL: Path traversal vulnerability in file uploads", "url": "https://github.com/tfyh/efacloud/issues/7", "user": "SquaredP", "user_url": "https://github.com/SquaredP", "repo": "efacloud", "body_preview": "## Summary\nUser-supplied filenames are used directly to construct file paths, allowing attackers to write files anywhere on the server.\n\n## Severity\n**CRITICAL** - Remote Code Execution possible\n\n## Locations\n- `forms/tabelle_importieren.php` - Lines 74-77\n- `forms/logo_hochladen.php` - Line 50\n- `forms/personen_importieren.php` - Line 80\n- `forms/fahrten_importieren.php` - Line 57\n\n## Current Code\n```php\n// tabelle_importieren.php lines 74-77\n$_SESSION[\"io_file\"] = $_FILES['userfile'][\"name\"]; ", "created": "2025-12-17T23:40:21Z", "labels": [], "context": "\ud83d\udd34 CRITICAL: Path traversal vulnerability in file uploads ## Summary\nUser-supplied filenames are used directly to construct file paths, allowing attackers to write files anywhere on the server.\n\n## Severity\n**CRITICAL** - Remote Code Execution possible\n\n## L"}


identifier: gh_issue_3740812153
source: github_issue
status: new
created_at: 2025-12-18 00:15:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3740812153", "title": "Performance & Security Testing: Systematic integration into workflow", "url": "https://github.com/Jeffallan/claude-skills/issues/55", "user": "Jeffallan", "user_url": "https://github.com/Jeffallan", "repo": "claude-skills", "body_preview": "## Summary\nIntegrate performance and security testing systematically into the epic workflow, with clear triggers, requirements, and metrics tracking.\n\n## Problem\nCurrent state (from QA analysis):\n- **Performance Testing: 2.0/10** - Only appears in retrospective analysis\n- **Security Testing: 3.0/10** - Ad-hoc, not systematic\n\nIssues:\n- No performance baselines established\n- No performance SLAs defined\n- Security considerations mentioned but not enforced\n- No security test checklist\n- No vulnerab", "created": "2025-12-17T23:19:06Z", "labels": [], "context": "Performance & Security Testing: Systematic integration into workflow ## Summary\nIntegrate performance and security testing systematically into the epic workflow, with clear triggers, requirements, and metrics tracking.\n\n## Problem\nCurrent state (from QA analysis):\n- **"}


identifier: gh_issue_3740930090
source: github_issue
status: new
created_at: 2025-12-18 00:50:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3740930090", "title": "[P1] Implement user authentication and authorization with Better Auth", "url": "https://github.com/frankbria/codeframe/issues/132", "user": "frankbria", "user_url": "https://github.com/frankbria", "repo": "codeframe", "body_preview": "## Summary\n\nImplement user authentication and authorization infrastructure using Better Auth to secure API endpoints and enable multi-user access control.\n\n## Context\n\n**Current State**: The codebase has no authentication/authorization infrastructure. All API endpoints are publicly accessible without user verification or access control.\n\n**Security Impact**: \n- **OWASP A01 - Broken Access Control**: Critical security gap identified in code review ([PR #131](https://github.com/frankbria/codeframe", "created": "2025-12-18T00:28:06Z", "labels": ["enhancement", "priority:high"], "context": "[P1] Implement user authentication and authorization with Better Auth ## Summary\n\nImplement user authentication and authorization infrastructure using Better Auth to secure API endpoints and enable multi-user access control.\n\n## Context\n\n**Current State**: The codebase "}


identifier: gh_issue_3740983340
source: github_issue
status: new
created_at: 2025-12-18 01:03:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3740983340", "title": "feat: Add uloop CLI for direct Unity communication", "url": "https://github.com/hatayama/uLoopMCP/issues/436", "user": "qua-hatayama", "user_url": "https://github.com/qua-hatayama", "repo": "uLoopMCP", "body_preview": "## Summary\nAdd a CLI tool (`uloop`) that communicates directly with Unity Editor via TCP, bypassing the MCP server.\n\n## Motivation\nProvide a simpler UX similar to `gh` CLI for GitHub. Users can run Unity commands directly from terminal without needing MCP client setup.\n\n## Features\n- Direct TCP/JSON-RPC connection to Unity\n- Auto port resolution from `UnityMcpSettings.json`\n- Human-readable output with `--json` option for scripting\n- Domain Reload detection via lock file for better error message", "created": "2025-12-18T00:53:47Z", "labels": [], "context": "feat: Add uloop CLI for direct Unity communication ## Summary\nAdd a CLI tool (`uloop`) that communicates directly with Unity Editor via TCP, bypassing the MCP server.\n\n## Motivation\nProvide a simpler UX similar to `gh` CLI for GitHub. Users can run Un"}


identifier: gh_issue_3741040611
source: github_issue
status: new
created_at: 2025-12-18 01:27:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3741040611", "title": "Dependency Remediation Plan", "url": "https://github.com/00felix/open-smart-grid-platform/issues/5", "user": "00felix-app[bot]", "user_url": "https://github.com/apps/00felix-app", "repo": "open-smart-grid-platform", "body_preview": "## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-18T01:25:06Z", "labels": [], "context": "Dependency Remediation Plan ## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3741020832
source: github_issue
status: new
created_at: 2025-12-18 01:27:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3741020832", "title": "Auto update failing for code-server", "url": "https://github.com/termux-user-repository/tur/issues/2125", "user": "kcubeterm", "user_url": "https://github.com/kcubeterm", "repo": "tur", "body_preview": "Hi, I'm Termux \ud83e\udd16.\n\nI'm here to help you update your Termux packages.\n\nI've tried to update the [code-server](https://github.com/termux-user-repository/tur/blob/e0a6baa3dae0f74424bd749f51acfe13b6e0d694/tur/code-server) package, but it failed.\n\nHere's the output of the update script:\n<details>\n<summary>Show log</summary>\n<pre lang=\"console\">\nINFO: Updating code-server [Current version: 4.106.3]\nINFO: package being updated to 4.107.0.\nINFO: Trying to build package.\nINFO: Package code-server exists ", "created": "2025-12-18T01:12:23Z", "labels": ["auto update failing", "bot"], "context": "Auto update failing for code-server Hi, I'm Termux \ud83e\udd16.\n\nI'm here to help you update your Termux packages.\n\nI've tried to update the [code-server](https://github.com/termux-user-repository/tur/blob/e0a6baa3dae0f74424bd749f51acfe13b6e0d694"}


identifier: gh_issue_3740899183
source: github_issue
status: new
created_at: 2025-12-18 01:27:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3740899183", "title": "Dependency Remediation Plan", "url": "https://github.com/00felix/open-smart-grid-platform/issues/2", "user": "00felix-app[bot]", "user_url": "https://github.com/apps/00felix-app", "repo": "open-smart-grid-platform", "body_preview": "## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-18T00:11:41Z", "labels": [], "context": "Dependency Remediation Plan ## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3740846413
source: github_issue
status: new
created_at: 2025-12-18 01:27:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3740846413", "title": "Dependency Remediation Plan", "url": "https://github.com/00felix/omegat/issues/1", "user": "00felix-app[bot]", "user_url": "https://github.com/apps/00felix-app", "repo": "omegat", "body_preview": "## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-17T23:41:04Z", "labels": [], "context": "Dependency Remediation Plan ## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3740832106
source: github_issue
status: new
created_at: 2025-12-18 01:27:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3740832106", "title": "update script on checkmk", "url": "https://github.com/community-scripts/ProxmoxVE/issues/10098", "user": "vraj015", "user_url": "https://github.com/vraj015", "repo": "ProxmoxVE", "body_preview": "### \u2705 Have you read and understood the above guidelines?\n\nYes\n\n### \ud83d\udd0e Did you run the script with verbose mode enabled?\n\nYes, verbose mode was enabled and the output is included below\n\n### \ud83d\udcdc What is the name of the script you are using?\n\ncheckmk\n\n### \ud83d\udcc2 What was the exact command used to execute the script?\n\nupdate cmd on lxc\n\n### \u2699\ufe0f What settings are you using?\n\n- [x] Default Settings\n- [ ] Advanced Settings\n\n### \ud83d\udda5\ufe0f Which Linux distribution are you using?\n\nDebian 13\n\n### \ud83d\udcc8 Which Proxmox version a", "created": "2025-12-17T23:32:16Z", "labels": ["bug"], "context": "update script on checkmk ### \u2705 Have you read and understood the above guidelines?\n\nYes\n\n### \ud83d\udd0e Did you run the script with verbose mode enabled?\n\nYes, verbose mode was enabled and the output is included below\n\n### \ud83d\udcdc What is th"}


identifier: gh_issue_3741059858
source: github_issue
status: new
created_at: 2025-12-18 01:52:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3741059858", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-18", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/336", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (149)\n1. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n2. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:439`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n3. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:450`", "created": "2025-12-18T01:35:56Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-18 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (149)\n1. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without "}


identifier: gh_issue_3740896990
source: github_issue
status: new
created_at: 2025-12-18 01:52:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3740896990", "title": "fix: npm \ubcf4\uc548 \ucde8\uc57d\uc810 \uc218\uc815 (esbuild, vite)", "url": "https://github.com/garimto81/archive_converter/issues/2", "user": "garimto81", "user_url": "https://github.com/garimto81", "repo": "archive_converter", "body_preview": "## \ubb38\uc81c\n`/check --all` \uc2e4\ud589 \uacb0\uacfc npm audit\uc5d0\uc11c 2\uac1c\uc758 MODERATE \ucde8\uc57d\uc810 \ubc1c\uacac\n\n## \ucde8\uc57d\uc810 \uc0c1\uc138\n| \ud328\ud0a4\uc9c0 | \ubc84\uc804 | \uc2ec\uac01\ub3c4 | \uc124\uba85 |\n|--------|------|--------|------|\n| esbuild | <=0.24.2 | MODERATE | \uac1c\ubc1c \uc11c\ubc84\uc5d0\uc11c \uc784\uc758 \uc694\uccad \ud5c8\uc6a9 (GHSA-67mh-4wv8-2f99) |\n| vite | 0.11.0 - 6.1.6 | MODERATE | esbuild \ucde8\uc57d\uc810 \uc758\uc874 |\n\n## \ud574\uacb0 \ubc29\uc548\n```bash\nnpm audit fix --force\n```\nvite 7.3.0\uc73c\ub85c \uc5c5\uadf8\ub808\uc774\ub4dc (breaking change \ud3ec\ud568)\n\n## \uccb4\ud06c\ub9ac\uc2a4\ud2b8\n- [ ] npm audit fix \uc2e4\ud589\n- [ ] \ube4c\ub4dc \ud14c\uc2a4\ud2b8\n- [ ] \uae30\ub2a5 \ud14c\uc2a4\ud2b8\n", "created": "2025-12-18T00:10:32Z", "labels": ["bug"], "context": "fix: npm \ubcf4\uc548 \ucde8\uc57d\uc810 \uc218\uc815 (esbuild, vite) ## \ubb38\uc81c\n`/check --all` \uc2e4\ud589 \uacb0\uacfc npm audit\uc5d0\uc11c 2\uac1c\uc758 MODERATE \ucde8\uc57d\uc810 \ubc1c\uacac\n\n## \ucde8\uc57d\uc810 \uc0c1\uc138\n| \ud328\ud0a4\uc9c0 | \ubc84\uc804 | \uc2ec\uac01\ub3c4 | \uc124\uba85 |\n|--------|------|--------|------|\n| esbuild | <=0.24.2 | MODERATE | \uac1c\ubc1c \uc11c\ubc84\uc5d0\uc11c \uc784\uc758 \uc694\uccad \ud5c8\uc6a9 (GHSA-67mh-4wv8-2f99)"}


identifier: gh_issue_3741033382
source: github_issue
status: new
created_at: 2025-12-18 02:05:51
data:
  {"source": "github_issue", "identifier": "gh_issue_3741033382", "title": "Release python39-PyMySQL-0.10.1-2.module+el8.9.0+19644+d68f775d ALSA-2025:23530", "url": "https://github.com/AlmaLinux/updates/issues/1854", "user": "maccelf", "user_url": "https://github.com/maccelf", "repo": "updates", "body_preview": "python39:3.9 security update\nSeverity: Important\nDescription\nPython is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.  \n\nSecurity Fix(es):  \n\n  * python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used (CVE-2024-5642)\n  * python: Virtual environment ", "created": "2025-12-18T01:20:11Z", "labels": [], "context": "Release python39-PyMySQL-0.10.1-2.module+el8.9.0+19644+d68f775d ALSA-2025:23530 python39:3.9 security update\nSeverity: Important\nDescription\nPython is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level d"}


identifier: gh_issue_3740780703
source: github_issue
status: new
created_at: 2025-12-18 02:18:11
data:
  {"source": "github_issue", "identifier": "gh_issue_3740780703", "title": "[Kiro] Stream API call failed: Request failed with status code 400", "url": "https://github.com/justlovemaki/AIClient-2-API/issues/114", "user": "doitcan-oiu", "user_url": "https://github.com/doitcan-oiu", "repo": "AIClient-2-API", "body_preview": "[06:58:49] [ERROR] [Kiro] Stream API call failed: Request failed with status code 400\n[06:58:49] [ERROR] [Kiro] Error in streaming generation: {\"message\":\"Request failed with status code 400\",\"name\":\"AxiosError\",\"stack\":\"AxiosError: Request failed with status code 400\\n at settle (file:///www/project/AIClient-2-API/node_modules/axios/lib/core/settle.js:19:12)\\n at RedirectableRequest.handleResponse (file:///www/project/AIClient-2-API/node_modules/axios/lib/adapters/http.js:547:9)\\n at Redirectab", "created": "2025-12-17T23:00:36Z", "labels": [], "context": "[Kiro] Stream API call failed: Request failed with status code 400 [06:58:49] [ERROR] [Kiro] Stream API call failed: Request failed with status code 400\n[06:58:49] [ERROR] [Kiro] Error in streaming generation: {\"message\":\"Request failed with status code 400\",\"name\":\""}


identifier: gh_issue_3741154362
source: github_issue
status: new
created_at: 2025-12-18 02:29:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3741154362", "title": "apollon-4.2.5.tgz: 3 vulnerabilities (highest severity is: 6.5)", "url": "https://github.com/ls1intum/Apollon2/issues/365", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "Apollon2", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>apollon-4.2.5.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n</details>\n\n## Vulnerabilities\n\n| Vulnerability | Severity | <img src='https://whitesource-resources.whitesourcesoftware.com/cvss3.png' width=19 height=20> CVSS | Dependency | Type | Fixed in (apollon versi", "created": "2025-12-18T02:22:34Z", "labels": ["Mend: dependency security vulnerability"], "context": "apollon-4.2.5.tgz: 3 vulnerabilities (highest severity is: 6.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>apollon-4.2.5.tgz</b></summary>\n\n<p></p>\n<p>Pat"}


identifier: gh_issue_3741189480
source: github_issue
status: new
created_at: 2025-12-18 02:41:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3741189480", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Tony-Thomas_1218_023757_gh_gw0/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Tony-Thomas_1218_023757_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.io/v", "created": "2025-12-18T02:39:53Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3741189498
source: github_issue
status: new
created_at: 2025-12-18 02:41:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3741189498", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Tony-Thomas_1218_023757_gh_gw0/issues/6", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Tony-Thomas_1218_023757_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.", "created": "2025-12-18T02:39:53Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3741184208
source: github_issue
status: new
created_at: 2025-12-18 02:41:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3741184208", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Virginia-Lane_1218_023442_gh_gw2/issues/2", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Virginia-Lane_1218_023442_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.io/v", "created": "2025-12-18T02:37:19Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3741184172
source: github_issue
status: new
created_at: 2025-12-18 02:41:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3741184172", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Virginia-Lane_1218_023442_gh_gw2/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Virginia-Lane_1218_023442_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.", "created": "2025-12-18T02:37:18Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3741184124
source: github_issue
status: new
created_at: 2025-12-18 02:41:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3741184124", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Paul-Kemp_1218_023535_gh_gw1/issues/2", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Paul-Kemp_1218_023535_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-18T02:37:16Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3741179966
source: github_issue
status: new
created_at: 2025-12-18 02:41:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3741179966", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/keypress-notifications/issues/45", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "keypress-notifications", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (16)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-18T02:35:18Z", "labels": ["automated", "security", "critical"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3741179095
source: github_issue
status: new
created_at: 2025-12-18 02:41:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3741179095", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/file-insights/issues/125", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "file-insights", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (16)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-18T02:34:54Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3741177218
source: github_issue
status: new
created_at: 2025-12-18 02:41:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3741177218", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/additional-contexts-menu/issues/106", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "additional-contexts-menu", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (16)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-18T02:34:01Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3741197721
source: github_issue
status: new
created_at: 2025-12-18 02:54:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3741197721", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Sheena-Webb_1218_024308_gh_gw0/issues/6", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Sheena-Webb_1218_024308_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-18T02:45:11Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3741197699
source: github_issue
status: new
created_at: 2025-12-18 02:54:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3741197699", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/Sheena-Webb_1218_024308_gh_gw0/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Sheena-Webb_1218_024308_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | -----", "created": "2025-12-18T02:45:10Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3741196033
source: github_issue
status: new
created_at: 2025-12-18 02:54:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3741196033", "title": "Code review of yral-ai-chat", "url": "https://github.com/dolr-ai/product-roadmap/issues/1459", "user": "kevin-antony-yral", "user_url": "https://github.com/kevin-antony-yral", "repo": "product-roadmap", "body_preview": "**Description:**\nRequesting a thorough review of the FastAPI backend with a focus on **security best practices** and overall backend robustness.\n\n**Scope includes (but not limited to):**\n\n* Authentication & authorization flows\n* Input validation and request sanitization\n* API security (rate limiting, CORS, headers, etc.)\n* Secrets and configuration management\n* Dependency and vulnerability checks\n* Error handling and logging practices\n\nRepository:\n[https://github.com/dolr-ai/yral-ai-chat](https:", "created": "2025-12-18T02:44:01Z", "labels": [], "context": "Code review of yral-ai-chat **Description:**\nRequesting a thorough review of the FastAPI backend with a focus on **security best practices** and overall backend robustness.\n\n**Scope includes (but not limited to):**\n\n* Authentica"}


identifier: gh_issue_3741224465
source: github_issue
status: new
created_at: 2025-12-18 03:30:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3741224465", "title": "Latest 15 Papers - December 18, 2025", "url": "https://github.com/Xander-C/DailyArXiv/issues/273", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "DailyArXiv", "body_preview": "**Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Confidential Computing\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[Confidential, Attestable, and Efficient Inter-CVM Communication with Arm CCA](https://arxiv.org/abs/2512.01594v2)** | 2025-12-02 |  |\n| **[Confidential Prompting: Privacy-preserving LLM Inference on Cloud](https://arxiv.org/abs/2409.19134v5)** | 2025-11-19 |  |\n| **[A Workflow f", "created": "2025-12-18T02:59:15Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 18, 2025 **Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Confidential Computing\n| **Title** | **Date** | **Comment** |\n| --"}


identifier: gh_issue_3741265051
source: github_issue
status: new
created_at: 2025-12-18 03:30:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3741265051", "title": "\ud83d\udea8 Security Vulnerabilities Detected", "url": "https://github.com/naretakis/eapd-next/issues/31", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "eapd-next", "body_preview": "\n## Security Audit Results\n\n**High vulnerabilities:** 1\n**Critical vulnerabilities:** 1\n\n### Recommended Actions\n1. Review the vulnerabilities listed below\n2. Update affected packages using `npm update`\n3. For packages without fixes, consider alternatives\n4. Run `npm audit fix` to automatically fix issues where possible\n\n### Audit Details\n```json\nundefined\n```\n\nThis issue was automatically created by the security audit workflow.\n", "created": "2025-12-18T03:16:40Z", "labels": ["security", "priority: high", "needs-triage"], "context": "\ud83d\udea8 Security Vulnerabilities Detected \n## Security Audit Results\n\n**High vulnerabilities:** 1\n**Critical vulnerabilities:** 1\n\n### Recommended Actions\n1. Review the vulnerabilities listed below\n2. Update affected packages using `npm updat"}


identifier: gh_issue_3741261208
source: github_issue
status: new
created_at: 2025-12-18 03:30:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3741261208", "title": "Auto Improvement Report - 2025-12-18", "url": "https://github.com/harpertoken/hub/issues/135", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "hub", "body_preview": "## Auto Improvement Report\n\n**Analysis Type:** full\n\n**Date:** 2025-12-18T03:15:22.381Z\n\n### Suggested Improvements\n\n1. Bundle size is large - consider code splitting or optimization\n2. Found 35 security vulnerabilities - run npm audit fix\n3. 36 packages are outdated - consider updating dependencies\n\n### Next Steps\n\n- Review the suggestions above\n- The bot will create automated PRs for fixable issues\n- Check the [Actions tab](https://github.com/harpertoken/hub/actions) for detailed analysis\n\n---", "created": "2025-12-18T03:15:22Z", "labels": ["bot", "improvement", "automated"], "context": "Auto Improvement Report - 2025-12-18 ## Auto Improvement Report\n\n**Analysis Type:** full\n\n**Date:** 2025-12-18T03:15:22.381Z\n\n### Suggested Improvements\n\n1. Bundle size is large - consider code splitting or optimization\n2. Found 35 secur"}


identifier: gh_issue_3741287411
source: github_issue
status: new
created_at: 2025-12-18 03:42:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3741287411", "title": "[Bug] Protential heap-buffer-overflow crash in `dlt-sortbytimestamp.c`", "url": "https://github.com/COVESA/dlt-daemon/issues/792", "user": "ShangzhiXu", "user_url": "https://github.com/ShangzhiXu", "repo": "dlt-daemon", "body_preview": "Hi team! Thanks for your great work!\nI think I found a critical vulnerability that leads to a Heap Buffer Overflow in the system.\n\nIt locates at the `main` function in `src/console/dlt-sortbytimestamp.c`.\n\n### PoC\nFirst, we need to generate a valid DLT file to pass the initial file checks. You can use the following python script:\n\n```python\nimport struct\n\nwith open(\"poc.dlt\", \"wb\") as f:\n    for i in range(20):\n        # Storage Header (DLT\\x01 + Timestamp + ECU)\n        f.write(b\"DLT\\x01\" + str", "created": "2025-12-18T03:23:25Z", "labels": [], "context": "[Bug] Protential heap-buffer-overflow crash in `dlt-sortbytimestamp.c` Hi team! Thanks for your great work!\nI think I found a critical vulnerability that leads to a Heap Buffer Overflow in the system.\n\nIt locates at the `main` function in `src/console/dlt-sortbytimestamp"}


identifier: gh_issue_3741256579
source: github_issue
status: new
created_at: 2025-12-18 03:42:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3741256579", "title": "[CRITICAL] Structurally Unsafe Homomorphic Encryption: Full Key Recovery via Linear Analysis", "url": "https://github.com/octra-labs/pvac_hfhe_cpp/issues/264", "user": "ambyar112", "user_url": "https://github.com/ambyar112", "repo": "pvac_hfhe_cpp", "body_preview": "### Summary\nThe cryptographic implementation in this repository, specifically the logic surrounding `ct_add` and the generation of `bounty2_data`, suffers from a critical design flaw: **Linearity**.\n\nThe scheme fails to provide semantic security (IND-CPA). The homomorphic addition operation preserves the linear structure of the ciphertext vectors without sufficient noise flooding or re-linearization. This allows an attacker to trivially recover the **Secret Key** using standard Linear Algebra at", "created": "2025-12-18T03:13:46Z", "labels": [], "context": "[CRITICAL] Structurally Unsafe Homomorphic Encryption: Full Key Recovery via Linear Analysis ### Summary\nThe cryptographic implementation in this repository, specifically the logic surrounding `ct_add` and the generation of `bounty2_data`, suffers from a critical design flaw: **Linearity**.\n\n"}


identifier: gh_issue_3741247765
source: github_issue
status: new
created_at: 2025-12-18 03:42:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3741247765", "title": "Nacos namespaces\u672a\u6388\u6743\u8bbf\u95ee\u6f0f\u6d1e", "url": "https://github.com/alibaba/nacos/issues/14040", "user": "cjhw2pan", "user_url": "https://github.com/cjhw2pan", "repo": "nacos", "body_preview": "\n## **Describe the bug** / **\u95ee\u9898\u63cf\u8ff0**\n\n**CRITICAL**: The Nacos console API endpoint `/nacos/v1/console/namespaces` allows unauthorized access **even when authentication is enabled** (`nacos.core.auth.enabled=true`). This is an **authentication bypass vulnerability** that leads to information disclosure. Any user can access this endpoint and retrieve sensitive information about namespaces configuration without providing any credentials, completely bypassing the authentication mechanism.\n\n**\u4e25\u91cd\u6f0f\u6d1e**\uff1aN", "created": "2025-12-18T03:10:20Z", "labels": [], "context": "Nacos namespaces\u672a\u6388\u6743\u8bbf\u95ee\u6f0f\u6d1e \n## **Describe the bug** / **\u95ee\u9898\u63cf\u8ff0**\n\n**CRITICAL**: The Nacos console API endpoint `/nacos/v1/console/namespaces` allows unauthorized access **even when authentication is enabled** (`nacos.core.auth.en"}


identifier: gh_issue_3741208815
source: github_issue
status: new
created_at: 2025-12-18 03:42:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3741208815", "title": "Latest 15 Papers - December 18, 2025", "url": "https://github.com/somewordstoolate/DailyArXiv/issues/153", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "DailyArXiv", "body_preview": "**Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## LLM Agents\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[From Trace to Line: LLM Agent for Real-World OSS Vulnerability Localization](https://arxiv.org/abs/2510.02389v2)** | 2025-12-17 |  |\n| **[A Multi-Agent LLM Defense Pipeline Against Prompt Injection Attacks](https://arxiv.org/abs/2509.14285v4)** | 2025-12-17 | <details><summary>Accep...</sum", "created": "2025-12-18T02:51:22Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 18, 2025 **Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## LLM Agents\n| **Title** | **Date** | **Comment** |\n| --- | --- | --"}


identifier: gh_issue_3741208479
source: github_issue
status: new
created_at: 2025-12-18 03:42:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3741208479", "title": "fix(validation): restore comprehensive validation in getProjectedForResource", "url": "https://github.com/rshade/pulumicost-plugin-aws-public/issues/111", "user": "rshade", "user_url": "https://github.com/rshade", "repo": "pulumicost-plugin-aws-public", "body_preview": "## Summary\n\nThe `getProjectedForResource` function in `internal/plugin/actual.go` had comprehensive validation removed during the SDK migration refactoring (#110). This creates a defense-in-depth vulnerability.\n\n## Current State (Lines 28-33)\n\n```go\n// CURRENT (inadequate):\nif resource == nil {\n    return nil, fmt.Errorf(\"resource descriptor is nil (caller must validate)\")\n}\n// NO other validation!\n```\n\n## Previous State (Removed ~40 lines)\n\n```go\n// BEFORE (deleted):\nif resource == nil {\n    re", "created": "2025-12-18T02:51:11Z", "labels": ["bug", "priority: high"], "context": "fix(validation): restore comprehensive validation in getProjectedForResource ## Summary\n\nThe `getProjectedForResource` function in `internal/plugin/actual.go` had comprehensive validation removed during the SDK migration refactoring (#110). This creates a defense-in-depth vuln"}


identifier: gh_issue_3741184874
source: github_issue
status: new
created_at: 2025-12-18 03:55:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3741184874", "title": "json-1.8.6.gem: 1 vulnerabilities (highest severity is: 7.5) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Paul-Kemp_1218_023535_gh_gw1/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Paul-Kemp_1218_023535_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>json-1.8.6.gem</strong></summary>\n\nThis is a JSON implementation as a Ruby extension in C.\n\n**Library home page:** [ https://rubygems.org/gems/json-1.8.6.gem ](https://rubygems.org/gems/json-1.8.6.gem)\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/json-1.8.6.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remed", "created": "2025-12-18T02:37:35Z", "labels": [], "context": "json-1.8.6.gem: 1 vulnerabilities (highest severity is: 7.5) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>json-1.8.6.gem</strong></summary>\n\nThis is a JSON implementation as a Ruby extension in C.\n\n**Library home page:** [ https://rubygems.org/gems/json-"}


