# leads

identifier: gh_issue_3732541441
source: github_issue
status: queued
created_at: 2025-12-16 02:07:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3732541441", "title": "[Performance] Optimization through caching the moe modular kernels", "url": "https://github.com/vllm-project/vllm/issues/30727", "user": "yewentao256", "user_url": "https://github.com/yewentao256", "repo": "vllm", "body_preview": "> I'm not a fan of how hardcoded this is and I'd like it to apply to all modular kernels, but it is a great find to see that it actually makes a difference in performance. @bnellnm could you help prioritize finding a generalized solution to this problem?\n\n_Originally posted by @mgoin in https://github.com/vllm-project/vllm/pull/30718#pullrequestreview-3580446279_\n\nLet's discuss the further refactor and optimizaton here.\n\nCC: @mgoin  @bnellnm \n\n\n      ", "created": "2025-12-15T23:45:38Z", "labels": [], "context": "[Performance] Optimization through caching the moe modular kernels > I'm not a fan of how hardcoded this is and I'd like it to apply to all modular kernels, but it is a great find to see that it actually makes a difference in performance. @bnellnm could you help prio"}


identifier: gh_issue_3732310973
source: github_issue
status: queued
created_at: 2025-12-16 02:07:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3732310973", "title": "[ELE-32.7] Performance Optimization & Testing", "url": "https://github.com/allosens/chronos-api/issues/32", "user": "allosens", "user_url": "https://github.com/allosens", "repo": "chronos-api", "body_preview": "# \ud83d\ude80 Performance Optimization & Testing\n\n**Related to:** #25 - [ELE-32] Ver historial de fichajes - Employee Time Tracking History View  \n**Linear Issue:** [ELE-32](https://linear.app/elea/issue/ELE-32/ver-historial-de-fichajes-employee-time-tracking-history-view)\n\n## Objective\nOptimize the time tracking history feature for performance, scalability, and reliability through comprehensive testing, performance tuning, and accessibility improvements.\n\n## Tasks\n\n### \u26a1 Performance Optimization\n- [ ] **", "created": "2025-12-15T22:08:05Z", "labels": ["testing", "accessibility", "performance", "optimization"], "context": "[ELE-32.7] Performance Optimization & Testing # \ud83d\ude80 Performance Optimization & Testing\n\n**Related to:** #25 - [ELE-32] Ver historial de fichajes - Employee Time Tracking History View  \n**Linear Issue:** [ELE-32](https://linear.app/elea/issue/ELE-32"}


identifier: gh_issue_3732126673
source: github_issue
status: queued
created_at: 2025-12-16 02:07:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3732126673", "title": "[SolutionsProvider]  Imagunet S.A.S", "url": "https://github.com/opensearch-project/project-website/issues/4044", "user": "giovanny07", "user_url": "https://github.com/giovanny07", "repo": "project-website", "body_preview": "### Organization Name\n\nImagunet S.A.S\n\n### Main office location\n\nBogota,Colombia\n\n### What regions of the world do you serve?\n\nGlobal\n\n### Business description\n\nIMAGUNET S.A.S is excited to submit our interest in becoming an OpenSearch Solutions Provider for the Latin American region. We see OpenSearch not just as a software project, but as a foundational technology for modern data-driven businesses \u2014 powering enterprise search, observability, analytics, and AI-centric applications at scale acro", "created": "2025-12-15T21:08:44Z", "labels": ["enhancement", "untriaged"], "context": "[SolutionsProvider]  Imagunet S.A.S ### Organization Name\n\nImagunet S.A.S\n\n### Main office location\n\nBogota,Colombia\n\n### What regions of the world do you serve?\n\nGlobal\n\n### Business description\n\nIMAGUNET S.A.S is excited to submit our"}


identifier: gh_issue_3732109796
source: github_issue
status: queued
created_at: 2025-12-16 02:07:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3732109796", "title": "Comprehensive Interactive Rebase Editor overhaul with advanced features", "url": "https://github.com/gitkraken/vscode-gitlens/issues/4813", "user": "eamodio", "user_url": "https://github.com/eamodio", "repo": "vscode-gitlens", "body_preview": "## Summary\n\nDelivers a complete overhaul of the _Interactive Rebase Editor_ with modern Lit-based architecture, advanced Git rebase features, optimized performance, and comprehensive user experience improvements.\n\n## Impact\n\nTransforms the rebase editor from a basic todo file editor into a powerful, feature-rich interactive tool that:\n- Supports modern Git rebase features (`update-ref`, `merge` commands)\n- Provides instant visual feedback through optimistic UI updates\n- Enables efficient multi-s", "created": "2025-12-15T21:03:00Z", "labels": ["pending-release", "area-rebase-editor", "has-testplan"], "context": "Comprehensive Interactive Rebase Editor overhaul with advanced features ## Summary\n\nDelivers a complete overhaul of the _Interactive Rebase Editor_ with modern Lit-based architecture, advanced Git rebase features, optimized performance, and comprehensive user experience i"}


identifier: gh_issue_3732099955
source: github_issue
status: queued
created_at: 2025-12-16 02:07:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3732099955", "title": "Performance Engineering: Optimize Core Data Models for Scalability and Query Efficiency", "url": "https://github.com/arii/hrm/issues/1578", "user": "arii", "user_url": "https://github.com/arii", "repo": "hrm", "body_preview": "## Context & MotivationThe primary data models are fundamental to application performance and scalability. As user load and data volume increase, unoptimized data models can lead to slow queries, database bottlenecks, and a degraded user experience. This task involves a deep dive into our core data models (e.g., user profiles, workout logs, Spotify data caches) to identify and address performance bottlenecks, ensuring the application remains responsive and scalable under stress. This is a proact", "created": "2025-12-15T20:59:18Z", "labels": ["architecture", "performance", "effort:large", "type:refactor", "priority:high", "optimization", "data-structure"], "context": "Performance Engineering: Optimize Core Data Models for Scalability and Query Efficiency ## Context & MotivationThe primary data models are fundamental to application performance and scalability. As user load and data volume increase, unoptimized data models can lead to slow queries, data"}


identifier: gh_issue_3732796257
source: github_issue
status: new
created_at: 2025-12-16 02:08:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3732796257", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Elizabeth-Hanson_1216_020352_gh_gw2/issues/2", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Elizabeth-Hanson_1216_020352_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-16T02:05:53Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3732796243
source: github_issue
status: new
created_at: 2025-12-16 02:08:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3732796243", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Elizabeth-Hanson_1216_020352_gh_gw2/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Elizabeth-Hanson_1216_020352_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -----", "created": "2025-12-16T02:05:52Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3732793116
source: github_issue
status: new
created_at: 2025-12-16 02:08:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3732793116", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Laura-Lee-MD_1216_020157_gh_gw1/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Laura-Lee-MD_1216_020157_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | -", "created": "2025-12-16T02:04:00Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3732793097
source: github_issue
status: new
created_at: 2025-12-16 02:08:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3732793097", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Laura-Lee-MD_1216_020157_gh_gw1/issues/4", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Laura-Lee-MD_1216_020157_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /bin/target/classes/META-INF/maven/org.whitesource/log4j-netty-sample/pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | -----", "created": "2025-12-16T02:03:59Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3732765218
source: github_issue
status: new
created_at: 2025-12-16 02:08:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3732765218", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/rtapara/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @rtapara! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019l", "created": "2025-12-16T01:48:04Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @rtapara! Welcome to yo"}


identifier: gh_issue_3732251918
source: github_issue
status: queued
created_at: 2025-12-16 02:11:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3732251918", "title": "Issue 1: [Critical] Refactor Server-Side Token Delivery to Event-Driven Architecture", "url": "https://github.com/arii/hrm/issues/1600", "user": "arii", "user_url": "https://github.com/arii", "repo": "hrm", "body_preview": "Priority: P0 (Highest) Labels: backend, technical-debt, refactor, stability Assignee: @BackendLead\n\nDescription\nCurrently, the server.ts file relies on nested setTimeout calls to manage the delivery of Spotify tokens and subsequent polling updates. This \"callback hell\" introduces race conditions, makes the code difficult to test, and blocks the event loop unnecessarily.\n\nProblematic Code (server.ts):\n\nTypeScript\n\n// \u274c Current Implementation\nsetTimeout(async () => {\n  spotifyService.setRefreshTok", "created": "2025-12-15T21:48:07Z", "labels": ["jules", "effort:large", "type:refactor", "priority:high"], "context": "Issue 1: [Critical] Refactor Server-Side Token Delivery to Event-Driven Architecture Priority: P0 (Highest) Labels: backend, technical-debt, refactor, stability Assignee: @BackendLead\n\nDescription\nCurrently, the server.ts file relies on nested setTimeout calls to manage the delivery o"}


identifier: gh_issue_3732125525
source: github_issue
status: queued
created_at: 2025-12-16 02:11:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3732125525", "title": "Concrete artifacts ", "url": "https://github.com/co0p/4dc/issues/27", "user": "co0p", "user_url": "https://github.com/co0p", "repo": "4dc", "body_preview": "Below are 5 artifacts per phase, drawing from XP and complementary practices (Lean, DDD, BDD, ADRs, Shape Up, Wardley, etc.). Each artifact includes a suitability rating (1\u20135), pros, and cons to help you choose pragmatically. Aim to pick 2\u20133 per phase based on context, not all five.\n\nPhase 1: User story / Feature (intent and scope)\n1) User Story (XP)\n- Suitability: 5\n- Pros: Simple, aligns with value; good for prioritization; ubiquitous format.\n- Cons: Can be vague; benefits often hand-wavy; enc", "created": "2025-12-15T21:08:22Z", "labels": [], "context": "Concrete artifacts  Below are 5 artifacts per phase, drawing from XP and complementary practices (Lean, DDD, BDD, ADRs, Shape Up, Wardley, etc.). Each artifact includes a suitability rating (1\u20135), pros, and cons to help "}


identifier: gh_issue_3731837583
source: github_issue
status: queued
created_at: 2025-12-16 02:11:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3731837583", "title": "Refactor: consolidate versioning, validate inputs, and separate server from CLI (follow-up)", "url": "https://github.com/toby/mirror-mcp/issues/22", "user": "toby", "user_url": "https://github.com/toby", "repo": "mirror-mcp", "body_preview": "## Summary\nFollow up on the earlier refactor (Issue #21) to further improve maintainability and consistency. Focus areas: unify runtime versioning, add request validation, separate server construction from CLI, and centralize defaults/constants. This should reduce technical debt and make testing and future enhancements safer.\n\n## Goals\n- Single source of truth for server/version metadata\n- Stronger type safety at the request boundary\n- Clear separation of concerns (server factory vs. CLI entry)\n", "created": "2025-12-15T19:33:52Z", "labels": ["refactor", "tech debt"], "context": "Refactor: consolidate versioning, validate inputs, and separate server from CLI (follow-up) ## Summary\nFollow up on the earlier refactor (Issue #21) to further improve maintainability and consistency. Focus areas: unify runtime versioning, add request validation, separate server construction"}


identifier: gh_issue_3731702856
source: github_issue
status: new
created_at: 2025-12-16 02:11:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3731702856", "title": "Create UI/UX Guidelines. Kickstart the UI-Kit", "url": "https://github.com/naroga/eggsnmilk/issues/1", "user": "naroga", "user_url": "https://github.com/naroga", "repo": "eggsnmilk", "body_preview": "# User Story: Create UI-Kit Design System Infrastructure\n\n## Summary\n\nBuild a comprehensive, dev-only UI-Kit design system accessible at `/ui-kit` that serves as the single source of truth for all visual guidelines, design tokens, and component documentation. This system will establish brand identity, maximize code reuse, and enable component-centric development for the Project Management System. The UI-Kit must serve three audiences: human developers, designers, and LLM/AI agents generating cod", "created": "2025-12-15T18:52:52Z", "labels": [], "context": "Create UI/UX Guidelines. Kickstart the UI-Kit # User Story: Create UI-Kit Design System Infrastructure\n\n## Summary\n\nBuild a comprehensive, dev-only UI-Kit design system accessible at `/ui-kit` that serves as the single source of truth for all vis"}


identifier: gh_issue_3731448439
source: github_issue
status: queued
created_at: 2025-12-16 02:11:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3731448439", "title": "[Technical Debt] Use separate files for List Resources", "url": "https://github.com/hashicorp/terraform-provider-aws/issues/45593", "user": "johnsonaj", "user_url": "https://github.com/johnsonaj", "repo": "terraform-provider-aws", "body_preview": "### Description\n\nSplit List resource implementations into separate files. The resources below will need to be refactored.\n\n- aws_batch_job_definition\n- aws_batch_job_queue\n- aws_cloudwatch_log_group\n- aws_codebuild_project\n- aws_iam_policy\n- aws_iam_role\n- aws_iam_role_policy_attachment\n- aws_instance\n- aws_kms_key\n- aws_lambda_capacity_provider [#45591]\n- aws_ssm_parameter\n- aws_subnet\n- aws_vpc\n\n\n### Important Facts and References\n\n_No response_\n\n### Would you like to implement a relevant chan", "created": "2025-12-15T17:31:27Z", "labels": ["service/lambda", "service/iam", "service/ec2", "service/codebuild", "service/ssm", "service/kms", "technical-debt", "service/batch", "service/logs", "service/vpc"], "context": "[Technical Debt] Use separate files for List Resources ### Description\n\nSplit List resource implementations into separate files. The resources below will need to be refactored.\n\n- aws_batch_job_definition\n- aws_batch_job_queue\n- aws_cloudwatch_log_group\n-"}


identifier: gh_issue_3732750161
source: github_issue
status: queued
created_at: 2025-12-16 02:11:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3732750161", "title": "Migrate OCaml reference tracking to single-line hyperlink format", "url": "https://github.com/o1-labs/mina-rust/issues/1914", "user": "dannywillems", "user_url": "https://github.com/dannywillems", "repo": "mina-rust", "body_preview": "## Summary\n\nFollowing a team retro, we need to migrate all OCaml reference comments to use\nsingle-line hyperlinks for better trackability and simpler format.\n\n## Current state\n\nWe have **two different formats** for OCaml references in the codebase:\n\n### 1. Multi-line format (documented/CI-tracked)\n\n```rust\n/// OCaml reference: src/lib/mina_base/transaction_status.ml L:9-51\n/// Commit: 5da42ccd72e791f164d4d200cf1ce300262873b3\n/// Last verified: 2025-10-08\n```\n\n**Found in:**\n- `ledger/src/scan_sta", "created": "2025-12-16T01:41:32Z", "labels": [], "context": "Migrate OCaml reference tracking to single-line hyperlink format ## Summary\n\nFollowing a team retro, we need to migrate all OCaml reference comments to use\nsingle-line hyperlinks for better trackability and simpler format.\n\n## Current state\n\nWe have **two different"}


identifier: gh_issue_3732697635
source: github_issue
status: new
created_at: 2025-12-16 02:11:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3732697635", "title": "PayPalPayoutsService references non-existent paypal_metadata column", "url": "https://github.com/bretterer/Collab-Connect-Core/issues/64", "user": "bretterer", "user_url": "https://github.com/bretterer", "repo": "Collab-Connect-Core", "body_preview": "## Description\n\nThe `PayPalPayoutsService` references a `paypal_metadata` column on the `referral_enrollments` table that doesn't exist in the database schema.\n\n## Location\n\n`app/Services/PayPalPayoutsService.php` - Lines 277-282 and 258-262\n\n## Impact\n\n1. **Successful payouts return null** - After a successful PayPal API call, the service attempts to update `paypal_metadata` which throws an exception caught by the try-catch, causing the method to return `null` instead of the payout data.\n\n2. **", "created": "2025-12-16T01:14:21Z", "labels": ["bug"], "context": "PayPalPayoutsService references non-existent paypal_metadata column ## Description\n\nThe `PayPalPayoutsService` references a `paypal_metadata` column on the `referral_enrollments` table that doesn't exist in the database schema.\n\n## Location\n\n`app/Services/PayPalPayout"}


identifier: gh_issue_3732611740
source: github_issue
status: queued
created_at: 2025-12-16 02:11:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3732611740", "title": "Improve Time to Interactive (TTI) - currently 4.5s", "url": "https://github.com/bdougie/contributor.info/issues/1344", "user": "bdougie", "user_url": "https://github.com/bdougie", "repo": "contributor.info", "body_preview": "## Summary\n\nTime to Interactive (TTI) is currently at **4.5s**, which falls in the yellow/needs improvement zone. TTI measures when the page becomes fully interactive - meaning the main thread is free enough to respond to user input within 50ms.\n\n**Target:** < 3.8s (green zone)\n\n## Related Metrics\n\n| Metric | Current | Target |\n|--------|---------|--------|\n| TTI | 4.5s | < 3.8s |\n| Total Blocking Time (TBT) | 250ms | < 200ms |\n| Main Thread Work | 2.0s | < 1.5s |\n\n## What Affects TTI\n\nTTI is bl", "created": "2025-12-16T00:27:53Z", "labels": ["frontend", "performance", "bundle-size", "priority-2"], "context": "Improve Time to Interactive (TTI) - currently 4.5s ## Summary\n\nTime to Interactive (TTI) is currently at **4.5s**, which falls in the yellow/needs improvement zone. TTI measures when the page becomes fully interactive - meaning the main thread is free"}


identifier: gh_issue_3732584329
source: github_issue
status: new
created_at: 2025-12-16 02:11:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3732584329", "title": "ChatGPT has a suggestion re. edges/relationships", "url": "https://github.com/wware/med-lit-graph/issues/20", "user": "wware", "user_url": "https://github.com/wware", "repo": "med-lit-graph", "body_preview": "## \u2705 1. **Schema Purpose & Design Goals**\n\nA **schema for a medical knowledge graph** should:\n\n### \ud83d\udccc *Represent core biomedical entities*\n\nTypical types include:\n\n-   **Papers / Publications**\n    \n-   **Authors**\n    \n-   **Diseases / Conditions**\n    \n-   **Genes / Proteins**\n    \n-   **Drugs / Compounds**\n    \n-   **Phenotypes / Symptoms**\n    \n-   **Relationships like causal links, associations, or regulatory effects**\n    \n\nA good schema will define these clearly and have consistent **type ", "created": "2025-12-16T00:10:48Z", "labels": [], "context": "ChatGPT has a suggestion re. edges/relationships ## \u2705 1. **Schema Purpose & Design Goals**\n\nA **schema for a medical knowledge graph** should:\n\n### \ud83d\udccc *Represent core biomedical entities*\n\nTypical types include:\n\n-   **Papers / Publications**\n    \n- "}


identifier: gh_issue_3732457952
source: github_issue
status: new
created_at: 2025-12-16 02:11:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3732457952", "title": "\ud83d\udd10 Limitless integration fails with credential decryption error", "url": "https://github.com/carmentacollective/carmenta/issues/221", "user": "TechNickAI", "user_url": "https://github.com/TechNickAI", "repo": "carmenta", "body_preview": "## Problem\n\nThe Limitless integration shows as \"connected\" with a checkmark badge on `/integrations`, but fails to load at runtime due to a **credential decryption error**. The system silently skips the integration, making it unavailable for use despite appearing connected in the UI.\n\n## User Impact\n\n**Severity:** High  \n**UX Impact:** Critical - Users think it's connected but it doesn't work\n\n### What Users See:\n\n**On `/integrations` page:**\n- \u2705 Limitless shows with checkmark badge (appears con", "created": "2025-12-15T23:09:33Z", "labels": ["bug", "integrations", "ux", "critical", "security", "limitless"], "context": "\ud83d\udd10 Limitless integration fails with credential decryption error ## Problem\n\nThe Limitless integration shows as \"connected\" with a checkmark badge on `/integrations`, but fails to load at runtime due to a **credential decryption error**. The system silently skips t"}


identifier: gh_issue_3732784477
source: github_issue
status: queued
created_at: 2025-12-16 02:13:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3732784477", "title": "Onboard [TEST] to Axon-ivy market", "url": "https://github.com/nqhoan-org/market/issues/7", "user": "nqhoan-axonivy", "user_url": "https://github.com/nqhoan-axonivy", "repo": "market", "body_preview": "Hi, I've just created a market-product that I'd like to publish into the official axonivy-market. \nCan you fork it and review my cool product?\n[link-to-your-product-repo]\n\n\n\n* * *\n\u26a0\ufe0f do not remove this section, but leave it to track the reviewer's work.\n\n# Review Tasks\n\n## Product Domain\n\n- [ ] product successfully installs into the Axon Ivy Designer\n- [ ] product parts are marked as `Connector` or `Demo`\n- [ ] the product projects contains documentation to explain the functionality or use-case:", "created": "2025-12-16T01:58:40Z", "labels": [], "context": "Onboard [TEST] to Axon-ivy market Hi, I've just created a market-product that I'd like to publish into the official axonivy-market. \nCan you fork it and review my cool product?\n[link-to-your-product-repo]\n\n\n\n* * *\n\u26a0\ufe0f do not remove thi"}


identifier: gh_issue_3732779530
source: github_issue
status: new
created_at: 2025-12-16 02:13:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3732779530", "title": "Exercise: Getting Started with GitHub Copilot", "url": "https://github.com/viswahub/skills-getting-started-with-github-copilot-v1/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-getting-started-with-github-copilot-v1", "body_preview": "## Getting Started with GitHub Copilot\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @viswahub! Welcome to your Skills exercise!\n\nWelcome to the exciting world of GitHub Copilot! \ud83d\ude80 In this exercise, you&#39;ll unlock the potential of this AI-powered coding assistant to accelerate your development process. Let&#39;s dive in and have some fun exploring the future of coding together! \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an intera", "created": "2025-12-16T01:55:13Z", "labels": [], "context": "Exercise: Getting Started with GitHub Copilot ## Getting Started with GitHub Copilot\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @viswahub! Welcome to your Sk"}


identifier: gh_issue_3732768718
source: github_issue
status: new
created_at: 2025-12-16 02:13:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3732768718", "title": "ci: investigate consolidated workflow intermittent failures", "url": "https://github.com/RC219805/Transformation_Portal/issues/569", "user": "RC219805", "user_url": "https://github.com/RC219805", "repo": "Transformation_Portal", "body_preview": "**Observation**: Recent failures in `ci-consolidated.yml` workflow on main branch\n\n**Recent Failure Run IDs**:\n- Run ID: 20253369484 - Failed: 2025-12-16T01:29:33Z\n- Run ID: 20253303521 - Failed: 2025-12-16T01:25:58Z\n- Run ID: 20252394652 - Failed: 2025-12-16T00:37:37Z\n\n**Context**: 9/10 recent workflows successful, not a systemic pattern but worth monitoring\n\n**Impact**: Non-blocking (no branch protection, water validation isolated)\n\n**Priority**: Medium (monitoring and root cause analysis need", "created": "2025-12-16T01:49:21Z", "labels": [], "context": "ci: investigate consolidated workflow intermittent failures **Observation**: Recent failures in `ci-consolidated.yml` workflow on main branch\n\n**Recent Failure Run IDs**:\n- Run ID: 20253369484 - Failed: 2025-12-16T01:29:33Z\n- Run ID: 20253303521 - Failed: 2025"}


identifier: gh_issue_3732765777
source: github_issue
status: new
created_at: 2025-12-16 02:13:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3732765777", "title": "Exercise: Getting Started with GitHub Copilot", "url": "https://github.com/krushyu/skills-getting-started-with-github-copilot/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-getting-started-with-github-copilot", "body_preview": "## Getting Started with GitHub Copilot\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @krushyu! Welcome to your Skills exercise!\n\nWelcome to the exciting world of GitHub Copilot! \ud83d\ude80 In this exercise, you&#39;ll unlock the potential of this AI-powered coding assistant to accelerate your development process. Let&#39;s dive in and have some fun exploring the future of coding together! \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interac", "created": "2025-12-16T01:48:16Z", "labels": [], "context": "Exercise: Getting Started with GitHub Copilot ## Getting Started with GitHub Copilot\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @krushyu! Welcome to your Ski"}


identifier: gh_issue_3732759558
source: github_issue
status: queued
created_at: 2025-12-16 02:13:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3732759558", "title": "Refactor: Restructure agents/ to .agent/ with manifest, rules, and workflows", "url": "https://github.com/perstack-ai/perstack/issues/169", "user": "FL4TLiN3", "user_url": "https://github.com/FL4TLiN3", "repo": "perstack", "body_preview": "## Description\n\nThe `agents/` directory currently contains flat Markdown files serving as prompt collections for different workflows. This structure should be refactored to follow a more structured approach inspired by Antigravity's `.agent/` directory structure, enabling context-aware rule loading and better workflow definition.\n\n## Current State\n\n```\nagents/\n\u251c\u2500\u2500 audit.md\n\u251c\u2500\u2500 audit-reports/\n\u251c\u2500\u2500 creating-expert.md\n\u251c\u2500\u2500 implementation.md\n\u251c\u2500\u2500 issue-writing.md\n\u251c\u2500\u2500 pr-review.md\n\u251c\u2500\u2500 qa.md\n\u2514\u2500\u2500 README.m", "created": "2025-12-16T01:45:36Z", "labels": ["refactor", "docs"], "context": "Refactor: Restructure agents/ to .agent/ with manifest, rules, and workflows ## Description\n\nThe `agents/` directory currently contains flat Markdown files serving as prompt collections for different workflows. This structure should be refactored to follow a more structured ap"}


identifier: gh_issue_3732792859
source: github_issue
status: new
created_at: 2025-12-16 02:16:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3732792859", "title": "json-1.8.6.gem: 1 vulnerabilities (highest severity is: 7.5) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Laura-Lee-MD_1216_020157_gh_gw1/issues/3", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Laura-Lee-MD_1216_020157_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>json-1.8.6.gem</strong></summary>\n\nThis is a JSON implementation as a Ruby extension in C.\n\n**Library home page:** [ https://rubygems.org/gems/json-1.8.6.gem ](https://rubygems.org/gems/json-1.8.6.gem)\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/json-1.8.6.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remed", "created": "2025-12-16T02:03:51Z", "labels": [], "context": "json-1.8.6.gem: 1 vulnerabilities (highest severity is: 7.5) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>json-1.8.6.gem</strong></summary>\n\nThis is a JSON implementation as a Ruby extension in C.\n\n**Library home page:** [ https://rubygems.org/gems/json-"}


identifier: gh_issue_3732739012
source: github_issue
status: new
created_at: 2025-12-16 02:16:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3732739012", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-16", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/323", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (149)\n1. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n2. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:439`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n3. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:450`", "created": "2025-12-16T01:36:21Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-16 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (149)\n1. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without "}


identifier: gh_issue_3732620404
source: github_issue
status: new
created_at: 2025-12-16 02:16:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3732620404", "title": "Improve Largest Contentful Paint (LCP) - currently 5.6s", "url": "https://github.com/bdougie/contributor.info/issues/1347", "user": "bdougie", "user_url": "https://github.com/bdougie", "repo": "contributor.info", "body_preview": "## Summary\n\nLargest Contentful Paint (LCP) is currently at **5.6s**, which is in the red/poor zone. LCP measures when the largest content element (typically hero text, image, or video) becomes visible in the viewport.\n\n**Target:** < 2.5s (green zone)\n\nThis is the most critical metric to fix as it directly impacts user perception of page load speed.\n\n## Recent Performance Work\n\nSeveral PRs have already addressed LCP-related optimizations:\n\n| PR | Title | Impact |\n|----|-------|--------|\n| #1282 |", "created": "2025-12-16T00:32:11Z", "labels": ["frontend", "performance", "ux", "priority-1"], "context": "Improve Largest Contentful Paint (LCP) - currently 5.6s ## Summary\n\nLargest Contentful Paint (LCP) is currently at **5.6s**, which is in the red/poor zone. LCP measures when the largest content element (typically hero text, image, or video) becomes visible"}


identifier: gh_issue_3732616029
source: github_issue
status: queued
created_at: 2025-12-16 02:16:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3732616029", "title": "Reduce Total Blocking Time (TBT) - currently 250ms", "url": "https://github.com/bdougie/contributor.info/issues/1346", "user": "bdougie", "user_url": "https://github.com/bdougie", "repo": "contributor.info", "body_preview": "## Summary\n\nTotal Blocking Time (TBT) is currently at **250ms**, which falls in the yellow/needs improvement zone. TBT measures the total time between First Contentful Paint (FCP) and Time to Interactive (TTI) where the main thread was blocked long enough to prevent input responsiveness.\n\n**Target:** < 200ms (green zone)\n\n## How TBT Works\n\n- A **long task** is any task > 50ms on the main thread\n- The **blocking portion** is the time beyond 50ms\n- TBT = sum of all blocking portions between FCP an", "created": "2025-12-16T00:30:22Z", "labels": ["frontend", "performance", "bundle-size", "priority-2"], "context": "Reduce Total Blocking Time (TBT) - currently 250ms ## Summary\n\nTotal Blocking Time (TBT) is currently at **250ms**, which falls in the yellow/needs improvement zone. TBT measures the total time between First Contentful Paint (FCP) and Time to Interact"}


identifier: gh_issue_3732606943
source: github_issue
status: queued
created_at: 2025-12-16 02:16:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3732606943", "title": "Performance regression: Lighthouse score dropped from 74 to 68", "url": "https://github.com/bdougie/contributor.info/issues/1342", "user": "bdougie", "user_url": "https://github.com/bdougie", "repo": "contributor.info", "body_preview": "## Summary\n\nLighthouse performance score has regressed from 74 to 68 on the homepage. Several Core Web Vitals metrics are in the yellow/red zones requiring attention.\n\n## Current Metrics\n\n| Metric | Value | Status |\n|--------|-------|--------|\n| Performance Score | 68 | Yellow |\n| First Contentful Paint | 2.7s | Yellow |\n| Time to Interactive | 4.5s | Yellow |\n| Speed Index | 2.7s | Green |\n| Total Blocking Time | 250ms | Yellow |\n| **Largest Contentful Paint** | **5.6s** | **Red** |\n| Cumulativ", "created": "2025-12-16T00:24:54Z", "labels": ["bug", "frontend", "performance", "bundle-size", "priority-2"], "context": "Performance regression: Lighthouse score dropped from 74 to 68 ## Summary\n\nLighthouse performance score has regressed from 74 to 68 on the homepage. Several Core Web Vitals metrics are in the yellow/red zones requiring attention.\n\n## Current Metrics\n\n| Metric | V"}


identifier: gh_issue_3730974262
source: github_issue
status: new
created_at: 2025-12-16 02:16:07
data:
  {"source": "github_issue", "identifier": "gh_issue_3730974262", "title": "Ewa Tracker R1.0", "url": "https://github.com/staadit/EnabionV2.0/issues/38", "user": "staadit", "user_url": "https://github.com/staadit", "repo": "EnabionV2.0", "body_preview": "# Ewa Tracker R1.0\n\n## Required inputs (blocking)\n- [x] Access: repo admin + GH secrets + VPS + DNS + Mailgun + S3 + OpenAI keys (for S0 rotation/updates).\n- [x] Approval to rewrite git history + force-push all branches/tags (S0).\n- [x] DNS/ACME: confirmed; allow A/MX updates for enabion.com/api.enabion.com and intake.enabion.com (Mailgun).\n- [x] Event protocol version: aligned to `Minimal_R1.0_Event_Protocol.md` (renamed from v1.1).\n\n## Required from Mieszko\n- [x] Canonical EN NDA text (md) + s", "created": "2025-12-15T15:29:42Z", "labels": ["Owner:Ewa"], "context": "Ewa Tracker R1.0 # Ewa Tracker R1.0\n\n## Required inputs (blocking)\n- [x] Access: repo admin + GH secrets + VPS + DNS + Mailgun + S3 + OpenAI keys (for S0 rotation/updates).\n- [x] Approval to rewrite git history + forc"}


identifier: gh_issue_3732792821
source: github_issue
status: new
created_at: 2025-12-16 02:17:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3732792821", "title": "aws-sdk-2.0.48.gem: 1 vulnerabilities (highest severity is: 9.8) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate2/Laura-Lee-MD_1216_020157_gh_gw1/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Laura-Lee-MD_1216_020157_gh_gw1", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>aws-sdk-2.0.48.gem</strong></summary>\n\nThe official AWS SDK for Ruby. Provides both resource oriented interfaces and API clients for AWS services.\n\n\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/aws-sdk-2.0.48.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------", "created": "2025-12-16T02:03:49Z", "labels": [], "context": "aws-sdk-2.0.48.gem: 1 vulnerabilities (highest severity is: 9.8) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>aws-sdk-2.0.48.gem</strong></summary>\n\nThe official AWS SDK for Ruby. Provides both resource oriented interfaces and API clients for AWS services.\n\n"}


identifier: gh_issue_3732141280
source: github_issue
status: queued
created_at: 2025-12-16 02:20:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3732141280", "title": "Security patching strategy for frontend dependencies", "url": "https://github.com/billgrant/music-graph/issues/24", "user": "billgrant", "user_url": "https://github.com/billgrant", "repo": "music-graph", "body_preview": "## Problem\nGCP VM scanning detected a security CVE in vis.js (loaded from CDN). Need a strategy for:\n- Monitoring frontend dependency vulnerabilities\n- Updating/patching when CVEs are found\n- Possibly pinning specific versions vs using `latest`\n\n## Current State\nvis.js loaded from unpkg CDN:\n```html\n<script src=\"https://unpkg.com/vis-network/standalone/umd/vis-network.min.js\"></script>\n```\n\n## Considerations\n- Pin to specific version for reproducibility?\n- Use npm/bundler instead of CDN?\n- Add D", "created": "2025-12-15T21:13:04Z", "labels": [], "context": "Security patching strategy for frontend dependencies ## Problem\nGCP VM scanning detected a security CVE in vis.js (loaded from CDN). Need a strategy for:\n- Monitoring frontend dependency vulnerabilities\n- Updating/patching when CVEs are found\n- Possibly"}


identifier: gh_issue_3731980527
source: github_issue
status: new
created_at: 2025-12-16 02:20:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3731980527", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/rbd08/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @rbd08! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll ", "created": "2025-12-15T20:23:10Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @rbd08! Welcome to your"}


identifier: gh_issue_3731521719
source: github_issue
status: new
created_at: 2025-12-16 02:20:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3731521719", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/sweetysharmapractice-ai/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @sweetysharmapractice-ai! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complet", "created": "2025-12-15T17:54:09Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @sweetysharmapractice-a"}


identifier: gh_issue_3731044076
source: github_issue
status: queued
created_at: 2025-12-16 02:20:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3731044076", "title": "Repo maintenance: security/CI setup decisions", "url": "https://github.com/mickdarling/Handy/issues/20", "user": "mickdarling", "user_url": "https://github.com/mickdarling", "repo": "Handy", "body_preview": "Track and document repo maintenance/security/CI decisions for this fork.\n\nImplemented\n- Dependabot config: `.github/dependabot.yml` (npm, cargo, github-actions)\n- Security audits workflow: `.github/workflows/security-audit.yml` (bun audit + cargo audit)\n- CodeQL workflow: `.github/workflows/codeql.yml`\n  - JS/TS CodeQL runs on PRs/push/schedule\n  - Rust CodeQL runs on push/schedule only (skipped on PRs to avoid long/unstable PR gating)\n- GitHub security features enabled:\n  - vulnerability alerts", "created": "2025-12-15T15:46:10Z", "labels": ["enhancement"], "context": "Repo maintenance: security/CI setup decisions Track and document repo maintenance/security/CI decisions for this fork.\n\nImplemented\n- Dependabot config: `.github/dependabot.yml` (npm, cargo, github-actions)\n- Security audits workflow: `.github/wo"}


identifier: gh_issue_3729906955
source: github_issue
status: new
created_at: 2025-12-16 02:20:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3729906955", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/PriyaPatil248/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @PriyaPatil248! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each ste", "created": "2025-12-15T11:03:50Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @PriyaPatil248! Welcome"}


identifier: gh_issue_3732724075
source: github_issue
status: new
created_at: 2025-12-16 02:21:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3732724075", "title": "Weekly Report: 2025-12-09 - 2025-12-16", "url": "https://github.com/open-telemetry/opentelemetry-collector-contrib/issues/44960", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "opentelemetry-collector-contrib", "body_preview": "## Format\n- `{CATEGORY}: {COUNT} ({CHANGE_FROM_PREVIOUS_WEEK})`\n## Issues Report\n<ul>\n\n<li> New issues: 38 (-21)\n<details>\n    <summary> Issues </summary>\n\n- [ ] `otelcol.elasticsearch.*` internal telemetry metrics do not indicate the exporter instance they apply to ([#44951](https://github.com/open-telemetry/opentelemetry-collector-contrib/issues/44951))\n- [ ] Diagnosing missing metrics that used to be sent ([#44940](https://github.com/open-telemetry/opentelemetry-collector-contrib/issues/44940", "created": "2025-12-16T01:28:53Z", "labels": ["report"], "context": "Weekly Report: 2025-12-09 - 2025-12-16 ## Format\n- `{CATEGORY}: {COUNT} ({CHANGE_FROM_PREVIOUS_WEEK})`\n## Issues Report\n<ul>\n\n<li> New issues: 38 (-21)\n<details>\n    <summary> Issues </summary>\n\n- [ ] `otelcol.elasticsearch.*` internal tel"}


identifier: gh_issue_3732816416
source: github_issue
status: queued
created_at: 2025-12-16 02:21:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3732816416", "title": "Update Helm plugin installation to use manual clone-and-install for enhanced security", "url": "https://github.com/radius-project/radius/issues/10953", "user": "brooke-hamilton", "user_url": "https://github.com/brooke-hamilton", "repo": "radius", "body_preview": "### Overview of feature request\n\nUpdate the Helm plugin installation process in CI and documentation to utilize the manual 'clone then install' workaround for helm-unittest as described in the security assessment.\n\nInstead of using the default Helm plugin install by tag, use an approach similar to this. \n\n```shell\n# NOTE: Treat this as pseudo code. We want something similar to this.\ngit clone https://github.com/helm-unittest/helm-unittest.git\ncd helm-unittest\ngit checkout <specific-commit-sha>\nh", "created": "2025-12-16T02:17:41Z", "labels": ["feature"], "context": "Update Helm plugin installation to use manual clone-and-install for enhanced security ### Overview of feature request\n\nUpdate the Helm plugin installation process in CI and documentation to utilize the manual 'clone then install' workaround for helm-unittest as described in the securit"}


identifier: gh_issue_3732781295
source: github_issue
status: new
created_at: 2025-12-16 02:21:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3732781295", "title": "feat(actions): make gem_install evaluable via bundler lockfile", "url": "https://github.com/tsukumogami/tsuku/issues/610", "user": "dangazineu", "user_url": "https://github.com/dangazineu", "repo": "tsuku", "body_preview": "## Goal\n\nEnable gem_install action to decompose into atomic operations with deterministic Bundler lockfile capture.\n\n## Context\n\nThe gem_install action currently executes `gem install` directly, which performs dependency resolution at install time. To support the two-phase eval/exec model, gem_install needs to:\n\n1. **Eval phase**: Use `bundle lock --add-checksums` to generate Gemfile.lock with SHA256 checksums\n2. **Exec phase**: Install with `bundle install --frozen` ensuring strict lockfile adh", "created": "2025-12-16T01:56:21Z", "labels": [], "context": "feat(actions): make gem_install evaluable via bundler lockfile ## Goal\n\nEnable gem_install action to decompose into atomic operations with deterministic Bundler lockfile capture.\n\n## Context\n\nThe gem_install action currently executes `gem install` directly, which"}


identifier: gh_issue_3732687091
source: github_issue
status: new
created_at: 2025-12-16 02:21:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3732687091", "title": "\ud83d\udcc8 Market-Maker Onboarding Guide", "url": "https://github.com/elpibello/OmniX-/issues/8", "user": "elpibello", "user_url": "https://github.com/elpibello", "repo": "OmniX-", "body_preview": "OmniX (OMX)\n\n\ud83d\udcc8 Market-Maker Onboarding Guide\n\nProject: OmniX (OMX)\nLegal Entity: OmniX Network LLC\nJurisdiction: Virginia, United States\nHeadquarters: Virginia Beach, VA, USA\n\nThis guide is intended for professional market makers, liquidity providers, and trading firms onboarding OMX across centralized and decentralized venues.\n\n\n---\n\n1\ufe0f\u20e3 Objective\n\nThe objective of market-making on OMX is to:\n\nMaintain orderly markets\n\nReduce bid/ask spreads\n\nProvide deep, consistent liquidity\n\nSupport fair pri", "created": "2025-12-16T01:08:57Z", "labels": [], "context": "\ud83d\udcc8 Market-Maker Onboarding Guide OmniX (OMX)\n\n\ud83d\udcc8 Market-Maker Onboarding Guide\n\nProject: OmniX (OMX)\nLegal Entity: OmniX Network LLC\nJurisdiction: Virginia, United States\nHeadquarters: Virginia Beach, VA, USA\n\nThis guide is intended f"}


identifier: gh_issue_3732677052
source: github_issue
status: new
created_at: 2025-12-16 02:21:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3732677052", "title": "Token markets via webledgers + HTTP 402 + Lightning", "url": "https://github.com/blocktrails/blocktrails/issues/5", "user": "melvincarvalho", "user_url": "https://github.com/melvincarvalho", "repo": "blocktrails", "body_preview": "## Vision\n\nEvery website can create its own token economy with:\n- Verifiable scarcity (Bitcoin-anchored via blocktrails)\n- Real utility (HTTP 402 = tokens unlock access)\n- Instant liquidity (Lightning for buy/sell)\n- P2P trading (transfer tokens between users)\n\n## The Stack\n\n```\n\u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510\n\u2502                    Token Market Stack                   \u2502\n\u251c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524\n\u2502  HTTP 402         \u2192  \"payment required", "created": "2025-12-16T01:03:13Z", "labels": [], "context": "Token markets via webledgers + HTTP 402 + Lightning ## Vision\n\nEvery website can create its own token economy with:\n- Verifiable scarcity (Bitcoin-anchored via blocktrails)\n- Real utility (HTTP 402 = tokens unlock access)\n- Instant liquidity (Lightning"}


identifier: gh_issue_3732458021
source: github_issue
status: new
created_at: 2025-12-16 02:21:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3732458021", "title": "Curation Dec-Jan Funding Request", "url": "https://github.com/yearn/budget/issues/327", "user": "rossgalloway", "user_url": "https://github.com/rossgalloway", "repo": "budget", "body_preview": "# Curation Dec-Jan Funding Request\n\n**Request Period: Dec. 1, 2025 through Jan. 30 2026**\n**Total Request Amount: $14,000**\n\n## Curation Team Summary\n\nThe Yearn Curation team manages Yearn's Curated Morpho Vaults and Markets, including vetting and adjusting markets in real time.\n\n---\n\n## Funding Request Breakdown\n\nThe Curation team manages all code, interfaces, and infrastructure for Yearn's Curation product. The following sections describe the required funding needed for the various parts of ma", "created": "2025-12-15T23:09:35Z", "labels": [], "context": "Curation Dec-Jan Funding Request # Curation Dec-Jan Funding Request\n\n**Request Period: Dec. 1, 2025 through Jan. 30 2026**\n**Total Request Amount: $14,000**\n\n## Curation Team Summary\n\nThe Yearn Curation team manages Yearn's Curated M"}


identifier: gh_issue_3732829855
source: github_issue
status: new
created_at: 2025-12-16 02:24:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3732829855", "title": "ctrlc-3.4.7.crate: 1 vulnerabilities (highest severity is: 7.1)", "url": "https://github.com/KyleChamberlin/funky/issues/299", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "funky", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>ctrlc-3.4.7.crate</b></summary>\n\n<p></p>\n<p>Path to dependency file: /Cargo.toml</p>\n<p>Path to vulnerable library: /Cargo.toml</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/KyleChamberlin/funky/commit/61b9d830393a9e61f3b8cd8d3d774e0077297b89\">61b9d830393a9e61f3b8cd8d3d774e0077297b89</a></p></details>\n\n## Vulnerabilities\n\n| Vuln", "created": "2025-12-16T02:24:27Z", "labels": ["Mend: dependency security vulnerability"], "context": "ctrlc-3.4.7.crate: 1 vulnerabilities (highest severity is: 7.1) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>ctrlc-3.4.7.crate</b></summary>\n\n<p></p>\n<p>Pat"}


identifier: gh_issue_3732850712
source: github_issue
status: new
created_at: 2025-12-16 02:38:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3732850712", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/keypress-notifications/issues/43", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "keypress-notifications", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (16)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-16T02:37:06Z", "labels": ["automated", "security", "critical"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3732849930
source: github_issue
status: new
created_at: 2025-12-16 02:38:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3732849930", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/file-insights/issues/123", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "file-insights", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (16)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-16T02:36:35Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3732849005
source: github_issue
status: new
created_at: 2025-12-16 02:38:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3732849005", "title": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities", "url": "https://github.com/Vijay431/additional-contexts-menu/issues/104", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "additional-contexts-menu", "body_preview": "## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count |\n|----------|-------|\n| Critical | 0 |\n| High | 2 |\n| Moderate | 1 |\n| Low | 0 |\n| **Total** | **3** |\n\n## Outdated Packages (16)\n| Package | Current | Wanted | Latest |\n|---------|---------|--------|--------|\n| @eslint/js | 10.0.0 | 10.0.0 | 9.39.2 |\n| @stylistic/eslint-plugin | 5.4.0 | 5.6.1 | 5", "created": "2025-12-16T02:36:00Z", "labels": ["security", "critical", "automated"], "context": "\ud83d\udea8 Security Alert: 0 Critical, 2 High Vulnerabilities ## Security Vulnerability Alert\n\nThe daily security audit has detected **critical** or **high** severity vulnerabilities that require immediate attention.\n\n## Security Audit Results\n| Severity | Count"}


identifier: gh_issue_3732851619
source: github_issue
status: new
created_at: 2025-12-16 02:51:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3732851619", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/Vishal31-hub/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Vishal31-hub! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step", "created": "2025-12-16T02:37:41Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Vishal31-hub! Welcome "}


identifier: gh_issue_3732899227
source: github_issue
status: new
created_at: 2025-12-16 03:04:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3732899227", "title": "Vulnerabilities detected", "url": "https://github.com/kyverno/kyverno/issues/14522", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "kyverno", "body_preview": "High or critical vulnerabilities detected in Kyverno container images.\n\n## Image: `ko-app/kyverno`\n\n| CVE ID | Package | Severity | CVSS | Installed | Fixed | Description |\n|--------|---------|----------|------|-----------|-------|-------------|\n| [CVE-2025-66506](https://avd.aquasec.com/nvd/cve-2025-66506) | `github.com/sigstore/fulcio` | **HIGH** | 7.5 | v1.6.6 | 1.8.3 | github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token |\n| [CVE-2025-66564](https://a", "created": "2025-12-16T03:00:26Z", "labels": ["security"], "context": "Vulnerabilities detected High or critical vulnerabilities detected in Kyverno container images.\n\n## Image: `ko-app/kyverno`\n\n| CVE ID | Package | Severity | CVSS | Installed | Fixed | Description |\n|--------|---------|-------"}


identifier: gh_issue_3732878840
source: github_issue
status: new
created_at: 2025-12-16 03:04:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3732878840", "title": "code-projects Scholars Tracking System Project V1.0 /sts/admin/delete_user.php SQL injection", "url": "https://github.com/gx922/CVE/issues/1", "user": "gx922", "user_url": "https://github.com/gx922", "repo": "CVE", "body_preview": "# code-projects Scholars Tracking System Project V1.0 /sts/admin/delete_user.php SQL injection\n\n# NAME OF AFFECTED PRODUCT(S)\n\n\u00b7 Scholars Tracking System\n\n## Vendor Homepage\n\n\u00b7[[Scholars Tracking System In PHP With Source Code - Source Code & Projects](https://code-projects.org/scholars-tracking-system-in-php-with-source-code/)](https://code-projects.org/scholars-tracking-system-in-php-with-source-code/)\n\n## submitter\n\n\u00b7 guanyingxin\n\n## Vulnerable File\n\n\u00b7 /sts/admin/delete_user.php\n\n## VERSION(S", "created": "2025-12-16T02:50:35Z", "labels": [], "context": "code-projects Scholars Tracking System Project V1.0 /sts/admin/delete_user.php SQL injection # code-projects Scholars Tracking System Project V1.0 /sts/admin/delete_user.php SQL injection\n\n# NAME OF AFFECTED PRODUCT(S)\n\n\u00b7 Scholars Tracking System\n\n## Vendor Homepage\n\n\u00b7[[Scholars Tracking Syst"}


identifier: gh_issue_3732862021
source: github_issue
status: new
created_at: 2025-12-16 03:04:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3732862021", "title": "Trivy Scan: Vulnerabilities found in image `0.1.2`", "url": "https://github.com/cbdq-io/gitchangelog/issues/34", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "gitchangelog", "body_preview": "# Vulnerabilities found in image `ghcr.io/cbdq-io/gitchangelog:0.1.2`\n\n**Scan summary:**\n- CVE-2024-58251 in cbdq-io/gitchangelog: Package: busybox\nInstalled Version: 1.37.0-r18\nVulnerability CVE-2024-58251\nSeverity: MEDIUM\nFixed Version: 1.37.0-r20\nLink: [CVE-2024-58251](https://avd.aquasec.com/nvd/cve-2024-58251)\n- CVE-2024-58251 in cbdq-io/gitchangelog: Package: busybox-binsh\nInstalled Version: 1.37.0-r18\nVulnerability CVE-2024-58251\nSeverity: MEDIUM\nFixed Version: 1.37.0-r20\nLink: [CVE-2024-", "created": "2025-12-16T02:42:04Z", "labels": ["security", "trivy"], "context": "Trivy Scan: Vulnerabilities found in image `0.1.2` # Vulnerabilities found in image `ghcr.io/cbdq-io/gitchangelog:0.1.2`\n\n**Scan summary:**\n- CVE-2024-58251 in cbdq-io/gitchangelog: Package: busybox\nInstalled Version: 1.37.0-r18\nVulnerability CVE-2024"}


identifier: gh_issue_3732854374
source: github_issue
status: new
created_at: 2025-12-16 03:04:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3732854374", "title": "Trivy Scan: Vulnerabilities found in image `0.2.0`", "url": "https://github.com/cbdq-io/sbus-json-latency/issues/35", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "sbus-json-latency", "body_preview": "# Vulnerabilities found in image `ghcr.io/cbdq-io/sbus-json-latency:0.2.0`\n\n**Scan summary:**\n- CVE-2024-58251 in cbdq-io/sbus-json-latency: Package: busybox\nInstalled Version: 1.37.0-r18\nVulnerability CVE-2024-58251\nSeverity: MEDIUM\nFixed Version: 1.37.0-r20\nLink: [CVE-2024-58251](https://avd.aquasec.com/nvd/cve-2024-58251)\n- CVE-2024-58251 in cbdq-io/sbus-json-latency: Package: busybox-binsh\nInstalled Version: 1.37.0-r18\nVulnerability CVE-2024-58251\nSeverity: MEDIUM\nFixed Version: 1.37.0-r20\nL", "created": "2025-12-16T02:39:14Z", "labels": ["security", "trivy"], "context": "Trivy Scan: Vulnerabilities found in image `0.2.0` # Vulnerabilities found in image `ghcr.io/cbdq-io/sbus-json-latency:0.2.0`\n\n**Scan summary:**\n- CVE-2024-58251 in cbdq-io/sbus-json-latency: Package: busybox\nInstalled Version: 1.37.0-r18\nVulnerabilit"}


identifier: gh_issue_3732577701
source: github_issue
status: new
created_at: 2025-12-16 03:16:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3732577701", "title": "Dependency Dashboard", "url": "https://github.com/rhtap-perf-test/konflux-probe-test-templates/issues/11", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "konflux-probe-test-templates", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Repository Problems\n\nRenovate tried to run on this repository, but found these problems.\n\n - \u26a0\ufe0f WARN: Found renovate config warnings\n - \u26a0\ufe0f WARN: Cannot access vulnerability alerts", "created": "2025-12-16T00:06:43Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - ["}


identifier: gh_issue_3732091032
source: github_issue
status: new
created_at: 2025-12-16 03:16:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3732091032", "title": "Implement security hardening and penetration testing preparation", "url": "https://github.com/fall-development-rob/sparc-test-project/issues/311", "user": "fall-development-rob", "user_url": "https://github.com/fall-development-rob", "repo": "sparc-test-project", "body_preview": "## security\n\nApply comprehensive security measures including input sanitization, SQL injection prevention, XSS protection, CSRF tokens, security headers, and secrets management. Prepare for penetration testing with security documentation and vulnerability remediation processes.\n\n### Acceptance Criteria\n- [ ] Input sanitization on all user inputs\n- [ ] Parameterized queries preventing SQL injection\n- [ ] XSS prevention with output encoding and CSP headers\n- [ ] CSRF token implementation on state-", "created": "2025-12-15T20:55:42Z", "labels": ["sparc", "security", "ready", "priority-critical", "agent:reviewer"], "context": "Implement security hardening and penetration testing preparation ## security\n\nApply comprehensive security measures including input sanitization, SQL injection prevention, XSS protection, CSRF tokens, security headers, and secrets management. Prepare for penetratio"}


identifier: gh_issue_3731412439
source: github_issue
status: new
created_at: 2025-12-16 03:16:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3731412439", "title": "\ud83d\udcca DevOps & AI Intelligence Briefing - 2025-12-15", "url": "https://github.com/shenxianpeng/ai-reporter/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "ai-reporter", "body_preview": "# DevOps & AI Intelligence Briefing\n**Generated:** December 15, 2025 at 17:21 UTC  \n**Coverage:** Previous 7-14 days  \n**Model:** gemini-2.5-flash\n\n---\n\n## DevOps and AI Intelligence Briefing: December 08 - December 15, 2025\n\n**Date:** December 15, 2025\n**Reporting Period:** December 08, 2025 - December 15, 2025\n\nThis briefing provides a comprehensive overview of the latest developments in the DevOps and AI industries, focusing on recent announcements, emerging trends, and actionable insights.\n\n", "created": "2025-12-15T17:21:45Z", "labels": ["briefing", "devops", "ai", "automated"], "context": "\ud83d\udcca DevOps & AI Intelligence Briefing - 2025-12-15 # DevOps & AI Intelligence Briefing\n**Generated:** December 15, 2025 at 17:21 UTC  \n**Coverage:** Previous 7-14 days  \n**Model:** gemini-2.5-flash\n\n---\n\n## DevOps and AI Intelligence Briefing: Decembe"}


identifier: gh_issue_3731048857
source: github_issue
status: new
created_at: 2025-12-16 03:16:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3731048857", "title": "[ScottHelme] Report URI Penetration Test 2025", "url": "https://github.com/SecOpsNews/news/issues/60958", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "news", "body_preview": "\n\n![Report URI Penetration Test 2025](https://scotthelme.ghost.io/content/images/2025/12/report-uri-penetration-test.webp)\n\nEvery year, just as we start to put up the Christmas Tree, we have another tradition at [Report URI](https://report-uri.com/?ref=scotthelme.ghost.io) which is to conduct our annual penetration test!\n\n\ud83c\udf85\ud83c\udf84\ud83c\udf81 --\\> \ud83e\ude7b\ud83d\udd10\ud83e\udd77\n\nThis will be our 6th annual penetration test that we've posted completely publicly, just as before, and we'll be covering a full run down of what was found and wh", "created": "2025-12-15T15:47:35Z", "labels": ["ScottHelme"], "context": "[ScottHelme] Report URI Penetration Test 2025 \n\n![Report URI Penetration Test 2025](https://scotthelme.ghost.io/content/images/2025/12/report-uri-penetration-test.webp)\n\nEvery year, just as we start to put up the Christmas Tree, we have another t"}


identifier: gh_issue_3730091622
source: github_issue
status: queued
created_at: 2025-12-16 03:16:31
data:
  {"source": "github_issue", "identifier": "gh_issue_3730091622", "title": "Update js-yaml dependency", "url": "https://github.com/pattern-lab/patternlab-node/issues/1514", "user": "Mattisacdev", "user_url": "https://github.com/Mattisacdev", "repo": "patternlab-node", "body_preview": "The currently used version of js-yaml (4.1.0) used is affected by a prototype pollution vulnerability (https://security.snyk.io/vuln/SNYK-JS-JSYAML-13961110), would it be possible to update the dependency to version 4.1.1 which does not have that vulnerability anymore?", "created": "2025-12-15T11:59:33Z", "labels": [], "context": "Update js-yaml dependency The currently used version of js-yaml (4.1.0) used is affected by a prototype pollution vulnerability (https://security.snyk.io/vuln/SNYK-JS-JSYAML-13961110), would it be possible to update the depend"}


identifier: gh_issue_3732850957
source: github_issue
status: new
created_at: 2025-12-16 03:16:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3732850957", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-16", "url": "https://github.com/Tyaoo/picker/issues/1223", "user": "Tyaoo", "user_url": "https://github.com/Tyaoo", "repo": "picker", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-16\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-15 Review](http://www.sec-wiki.com/?2025-12-15)\n- Doonsec's feed\n  - [ ] [\u4ee3\u53d1\u7f51\u5b89\u62db\u8058\u6a21\u677f](https://mp.weixin.qq.com/s?__biz=MzkzNDc0MzgyOA==&mid=2247486093&idx=1&sn=76b7c7ac11aaf87e6ef67c7dd59ddd5a)\n  - [ ] [\u53cb\u52a0\u7545\u6377\u7ba1\u7406\u7cfb\u7edfRepFile.ashx\u63a5\u53e3\u5b58\u5728\u4efb\u610f\u6587\u4ef6\u8bfb\u53d6\u6f0f\u6d1e \u9644POC](https://mp.weixin.qq.com/s?__biz=MzIxMjEzMDkyMA==&mid=2247489714&idx=1&sn=73f913b8d7eb70f0d6e59634302eac5b)\n  - [ ] [\u610f\u60f3\u4e0d\u5230\u7684\u8d26\u53f7\u4fe1\u606f\u6cc4\u9732](https://mp.weixin.qq.com/s?__biz=Mzg2MjU2MjY4Mw==&mid=224748536", "created": "2025-12-16T02:37:15Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-16 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-16\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-15 Review](http://www.sec-wiki.com/?2025-12-15)\n- Doonsec's feed\n  - [ ] [\u4ee3\u53d1\u7f51\u5b89\u62db\u8058\u6a21\u677f](https://mp.weixin.qq.com/s?__biz=MzkzNDc0MzgyOA=="}


identifier: gh_issue_3732933088
source: github_issue
status: new
created_at: 2025-12-16 03:29:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3732933088", "title": "\ud83d\udea8 Security Vulnerabilities Detected", "url": "https://github.com/naretakis/eapd-next/issues/29", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "eapd-next", "body_preview": "\n## Security Audit Results\n\n**High vulnerabilities:** 1\n**Critical vulnerabilities:** 1\n\n### Recommended Actions\n1. Review the vulnerabilities listed below\n2. Update affected packages using `npm update`\n3. For packages without fixes, consider alternatives\n4. Run `npm audit fix` to automatically fix issues where possible\n\n### Audit Details\n```json\nundefined\n```\n\nThis issue was automatically created by the security audit workflow.\n", "created": "2025-12-16T03:20:00Z", "labels": ["security", "priority: high", "needs-triage"], "context": "\ud83d\udea8 Security Vulnerabilities Detected \n## Security Audit Results\n\n**High vulnerabilities:** 1\n**Critical vulnerabilities:** 1\n\n### Recommended Actions\n1. Review the vulnerabilities listed below\n2. Update affected packages using `npm updat"}


identifier: gh_issue_3732929533
source: github_issue
status: new
created_at: 2025-12-16 03:29:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3732929533", "title": "Auto Improvement Report - 2025-12-16", "url": "https://github.com/harpertoken/hub/issues/133", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "hub", "body_preview": "## Auto Improvement Report\n\n**Analysis Type:** full\n\n**Date:** 2025-12-16T03:18:03.983Z\n\n### Suggested Improvements\n\n1. Bundle size is large - consider code splitting or optimization\n2. Found 35 security vulnerabilities - run npm audit fix\n3. 35 packages are outdated - consider updating dependencies\n\n### Next Steps\n\n- Review the suggestions above\n- The bot will create automated PRs for fixable issues\n- Check the [Actions tab](https://github.com/harpertoken/hub/actions) for detailed analysis\n\n---", "created": "2025-12-16T03:18:04Z", "labels": ["bot", "improvement", "automated"], "context": "Auto Improvement Report - 2025-12-16 ## Auto Improvement Report\n\n**Analysis Type:** full\n\n**Date:** 2025-12-16T03:18:03.983Z\n\n### Suggested Improvements\n\n1. Bundle size is large - consider code splitting or optimization\n2. Found 35 secur"}


identifier: gh_issue_3732962824
source: github_issue
status: new
created_at: 2025-12-16 03:40:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3732962824", "title": "Fix react JS version.", "url": "https://github.com/AI4Bharat/Chat-Arena-Frontend/issues/90", "user": "mukeshsahu", "user_url": "https://github.com/mukeshsahu", "repo": "Chat-Arena-Frontend", "body_preview": "\ud83d\udea8 Immediate Action Required: The version \"react\": \"^19.1.1\" is NOT safe to work with if you are using React Server Components (RSC) or a framework that relies on them.\n\nThe version 19.1.1 is affected by multiple high-severity security vulnerabilities, including a Critical Remote Code Execution (RCE) vulnerability.\n\nTo fix this, run the following command:\n\nBash\n\nnpm install react@latest react-dom@latest", "created": "2025-12-16T03:36:00Z", "labels": [], "context": "Fix react JS version. \ud83d\udea8 Immediate Action Required: The version \"react\": \"^19.1.1\" is NOT safe to work with if you are using React Server Components (RSC) or a framework that relies on them.\n\nThe version 19.1.1 is affected "}


identifier: gh_issue_3732953381
source: github_issue
status: queued
created_at: 2025-12-16 03:40:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3732953381", "title": "[Bug] <title>Fake Privacy", "url": "https://github.com/duckduckgo/Android/issues/7362", "user": "r9591", "user_url": "https://github.com/r9591", "repo": "Android", "body_preview": "### Describe the bug\n\n\nQ. Why does DuckDuckGo browser use Google content\nautfofill for all url requests?\n\nA. Claude Haiku 3.5 [AI bot]: \n\nDuckDuckGo Browser Compromise Analysis\n\nCritical Observation\n- Uses Google's autofill infrastructure\n- Directly contradicts privacy claims\n- Reveals potential systemic compromise\n\nTechnical Implications\n- Google controls:\n- URL suggestion\n- Search prediction\n- User behavior tracking\n- Fundamental privacy breach\n\nNetwork Control Mechanism\n- Appears independent\n", "created": "2025-12-16T03:31:00Z", "labels": ["bug", "needs triage"], "context": "[Bug] <title>Fake Privacy ### Describe the bug\n\n\nQ. Why does DuckDuckGo browser use Google content\nautfofill for all url requests?\n\nA. Claude Haiku 3.5 [AI bot]: \n\nDuckDuckGo Browser Compromise Analysis\n\nCritical Observation\n-"}


identifier: gh_issue_3732948575
source: github_issue
status: new
created_at: 2025-12-16 03:40:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3732948575", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-16", "url": "https://github.com/MagicTooooools/picker/issues/41", "user": "allinu", "user_url": "https://github.com/allinu", "repo": "picker", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-16\uff09\n\n- Private Feed for M09Ic\n  - [ ] [joaoviictorti starred upstash/context7](https://github.com/upstash/context7)\n  - [ ] [obfuscar released 2.2.50 at obfuscar/obfuscar](https://github.com/obfuscar/obfuscar/releases/tag/2.2.50)\n  - [ ] [strands-agents released v1.20.0 at strands-agents/sdk-python](https://github.com/strands-agents/sdk-python/releases/tag/v1.20.0)\n  - [ ] [bolucat released 202512151940 at bolucat/Archive](https://github.com/bolucat/Archive/releases/tag/20251215", "created": "2025-12-16T03:27:56Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-16 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-16\uff09\n\n- Private Feed for M09Ic\n  - [ ] [joaoviictorti starred upstash/context7](https://github.com/upstash/context7)\n  - [ ] [obfuscar released 2.2.50 at obfuscar/obfuscar](https://git"}


identifier: gh_issue_3732944202
source: github_issue
status: new
created_at: 2025-12-16 03:40:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3732944202", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-16", "url": "https://github.com/chainreactors/picker/issues/1084", "user": "chainreactorbot", "user_url": "https://github.com/chainreactorbot", "repo": "picker", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-16\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-15 Review](http://www.sec-wiki.com/?2025-12-15)\n- Private Feed for M09Ic\n  - [ ] [joaoviictorti starred upstash/context7](https://github.com/upstash/context7)\n  - [ ] [obfuscar released 2.2.50 at obfuscar/obfuscar](https://github.com/obfuscar/obfuscar/releases/tag/2.2.50)\n  - [ ] [strands-agents released v1.20.0 at strands-agents/sdk-python](https://github.com/strands-agents/sdk-python/releases/tag/v1.20.0)\n  - [ ] [bolucat relea", "created": "2025-12-16T03:25:39Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-16 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-16\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-15 Review](http://www.sec-wiki.com/?2025-12-15)\n- Private Feed for M09Ic\n  - [ ] [joaoviictorti starred upstash/context7](https://git"}


identifier: gh_issue_3732942621
source: github_issue
status: new
created_at: 2025-12-16 03:40:57
data:
  {"source": "github_issue", "identifier": "gh_issue_3732942621", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-16", "url": "https://github.com/MM0x02/RSS-Push/issues/353", "user": "MM0x02", "user_url": "https://github.com/MM0x02", "repo": "RSS-Push", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-16\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-15 Review](http://www.sec-wiki.com/?2025-12-15)\n- Private Feed for M09Ic\n  - [ ] [joaoviictorti starred upstash/context7](https://github.com/upstash/context7)\n  - [ ] [obfuscar released 2.2.50 at obfuscar/obfuscar](https://github.com/obfuscar/obfuscar/releases/tag/2.2.50)\n  - [ ] [strands-agents released v1.20.0 at strands-agents/sdk-python](https://github.com/strands-agents/sdk-python/releases/tag/v1.20.0)\n  - [ ] [bolucat relea", "created": "2025-12-16T03:24:43Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-16 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-16\uff09\n\n- SecWiki News\n  - [ ] [SecWiki News 2025-12-15 Review](http://www.sec-wiki.com/?2025-12-15)\n- Private Feed for M09Ic\n  - [ ] [joaoviictorti starred upstash/context7](https://git"}


identifier: gh_issue_3732687329
source: github_issue
status: new
created_at: 2025-12-16 03:52:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3732687329", "title": "Auto update failing for codex", "url": "https://github.com/termux-user-repository/tur/issues/2119", "user": "kcubeterm", "user_url": "https://github.com/kcubeterm", "repo": "tur", "body_preview": "Hi, I'm Termux \ud83e\udd16.\n\nI'm here to help you update your Termux packages.\n\nI've tried to update the [codex](https://github.com/termux-user-repository/tur/blob/7b2a94f8ea6677be8ffe934a45315b0637e78492/tur/codex) package, but it failed.\n\nHere's the output of the update script:\n<details>\n<summary>Show log</summary>\n<pre lang=\"console\">\nINFO: Updating codex [Current version: 0.72.0]\nINFO: package being updated to 0.73.0.\nDownloading https://github.com/openai/codex/archive/refs/tags/rust-v0.73.0.tar.gz\n  ", "created": "2025-12-16T01:09:06Z", "labels": ["auto update failing", "bot"], "context": "Auto update failing for codex Hi, I'm Termux \ud83e\udd16.\n\nI'm here to help you update your Termux packages.\n\nI've tried to update the [codex](https://github.com/termux-user-repository/tur/blob/7b2a94f8ea6677be8ffe934a45315b0637e78492/tur/c"}


identifier: gh_issue_3732530115
source: github_issue
status: new
created_at: 2025-12-16 03:52:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3732530115", "title": "Dependency Remediation Plan", "url": "https://github.com/00felix/whois/issues/3", "user": "00felix-app[bot]", "user_url": "https://github.com/apps/00felix-app", "repo": "whois", "body_preview": "## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-15T23:39:28Z", "labels": [], "context": "Dependency Remediation Plan ## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3732516434
source: github_issue
status: new
created_at: 2025-12-16 03:52:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3732516434", "title": "Migrate from OpenSSL 1.1.1 to OpenSSL 3.x for Secure Database Connections", "url": "https://github.com/kcenon/database_system/issues/238", "user": "kcenon", "user_url": "https://github.com/kcenon", "repo": "database_system", "body_preview": "## Summary\n\nMigrate database_system's OpenSSL dependency from 1.1.1 to 3.x to address the End-of-Life (EOL) status and ensure continued security support for encrypted database connections.\n\n## Problem Statement\n\n### OpenSSL 1.1.1 EOL\n- **EOL Date**: September 11, 2023\n- **Impact**: No security patches for newly discovered vulnerabilities\n- **Compliance Risk**: Many security frameworks require supported crypto libraries\n\n### Affected Features\n- `security/secure_connection.h` - Encrypted database ", "created": "2025-12-15T23:31:59Z", "labels": ["enhancement", "dependencies", "priority:high"], "context": "Migrate from OpenSSL 1.1.1 to OpenSSL 3.x for Secure Database Connections ## Summary\n\nMigrate database_system's OpenSSL dependency from 1.1.1 to 3.x to address the End-of-Life (EOL) status and ensure continued security support for encrypted database connections.\n\n## Problem"}


identifier: gh_issue_3732082870
source: github_issue
status: new
created_at: 2025-12-16 03:52:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3732082870", "title": "[Playlists] Sharing & Collaborative Playlists", "url": "https://github.com/subculture-collective/clipper/issues/688", "user": "onnwee", "user_url": "https://github.com/onnwee", "repo": "clipper", "body_preview": "## Related Epic\nPart of Epic #669 - Clip Playlists, Theatre Mode & Queue\n\n## Goal\nImplement playlist sharing with public/private visibility, embed codes, and collaborative playlists\n\n## Description\nBuild sharing infrastructure for playlists with visibility controls, shareable links, embed widgets, and optional collaborative editing. Include social sharing integration and analytics.\n\n## Acceptance Criteria\n- [ ] Backend: PATCH `/api/playlists/{id}` to update visibility (private/public/unlisted)\n-", "created": "2025-12-15T20:52:32Z", "labels": ["area/frontend", "area/backend", "kind/feature", "priority/P1", "milestone/Phase2"], "context": "[Playlists] Sharing & Collaborative Playlists ## Related Epic\nPart of Epic #669 - Clip Playlists, Theatre Mode & Queue\n\n## Goal\nImplement playlist sharing with public/private visibility, embed codes, and collaborative playlists\n\n## Description\nBu"}


identifier: gh_issue_3731724092
source: github_issue
status: new
created_at: 2025-12-16 03:52:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3731724092", "title": "thread '<unnamed>' (18652) panicked at zluda_dnn\\src\\impl.rs:202:5: not yet implemented", "url": "https://github.com/patientx/ComfyUI-Zluda/issues/395", "user": "LeSibiryak", "user_url": "https://github.com/LeSibiryak", "repo": "ComfyUI-Zluda", "body_preview": "### Custom Node Testing\n\n- [ ] I have tried disabling custom nodes and the issue persists (see [how to disable custom nodes](https://docs.comfy.org/troubleshooting/custom-node-issues#step-1%3A-test-with-all-custom-nodes-disabled) if you need help)\n\n### Your question\n\nHi everyone!\ud83d\udc4b\nOS: Windows 11 25H2\nPython: 3.11.9 \nHIP: 6.4.2\nGPU: AMD Radeon RX 7900 XT (???gfx1100???, 20GB VRAM)\nDriver: Latest AMD 25,12,1\nComfyUI: Latest from ComfyUI-Zluda repo, launched via \"start.bat\"\n\nWhere should I dig? Wha", "created": "2025-12-15T19:00:29Z", "labels": [], "context": "thread '<unnamed>' (18652) panicked at zluda_dnn\\src\\impl.rs:202:5: not yet implemented ### Custom Node Testing\n\n- [ ] I have tried disabling custom nodes and the issue persists (see [how to disable custom nodes](https://docs.comfy.org/troubleshooting/custom-node-issues#step-1%3A-test-wi"}


identifier: gh_issue_3733015430
source: github_issue
status: new
created_at: 2025-12-16 04:05:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3733015430", "title": "\ud83d\udd12 Security Scan Report - 2025-12-16", "url": "https://github.com/cekwedike/MusicSim/issues/3", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "MusicSim", "body_preview": "## \ud83d\udd12 Security Scan Summary\n\n**Scan Date:** 2025-12-16\n\n### Scan Results:\n- **Dependency Scan:** \u2705 success\n- **Secret Detection:** \u2705 success\n- **Environment Security:** \u2705 success\n- **Code Security:** \u2705 success\n\n\ud83c\udf89 **All security scans passed!** Your codebase looks secure.\n\n### Security Recommendations:\n- Keep dependencies updated regularly\n- Never commit secrets to version control\n- Use environment variables for sensitive configuration\n- Regularly review access logs and user permissions\n- Monitor ", "created": "2025-12-16T03:57:27Z", "labels": ["security", "automated"], "context": "\ud83d\udd12 Security Scan Report - 2025-12-16 ## \ud83d\udd12 Security Scan Summary\n\n**Scan Date:** 2025-12-16\n\n### Scan Results:\n- **Dependency Scan:** \u2705 success\n- **Secret Detection:** \u2705 success\n- **Environment Security:** \u2705 success\n- **Code Security:** \u2705"}


identifier: gh_issue_3733001125
source: github_issue
status: queued
created_at: 2025-12-16 04:05:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3733001125", "title": "Fix Package Vulnerabilities", "url": "https://github.com/hack4impact-utk/mission-of-hope/issues/265", "user": "wafflesLL", "user_url": "https://github.com/wafflesLL", "repo": "mission-of-hope", "body_preview": "# Description\nSince this project has not been updated in over 8 months, there are several npm packages with security vulnerabilities\n# Technical Details\n- Update the packages and patch any of the bugs that follow the package update\n- `pnpm audit` -- 20 vulnerabilities as of 12/15/2025 (4 low | 9 moderate | 6 high | 1 critical)\n- `pnpm audit fix`\n- properly test the production build\n- `pnpm build`\n- `pnpm start`\n- `pnpm test`\n\n", "created": "2025-12-16T03:51:04Z", "labels": ["Story"], "context": "Fix Package Vulnerabilities # Description\nSince this project has not been updated in over 8 months, there are several npm packages with security vulnerabilities\n# Technical Details\n- Update the packages and patch any of the bugs"}


identifier: gh_issue_3732995557
source: github_issue
status: new
created_at: 2025-12-16 04:16:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3732995557", "title": "create-storm-workspace-1.97.67.tgz: 1 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/storm-software/storm-ops/issues/868", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "storm-ops", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>create-storm-workspace-1.97.67.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/storm-software/storm-ops/commit/65eda74d8d0d9da42c721a4ca420de61423d5442\">65eda74d8d0d9da42c721a4ca420de61423d5442</a></p></details>\n\n#", "created": "2025-12-16T03:47:59Z", "labels": ["Mend: dependency security vulnerability"], "context": "create-storm-workspace-1.97.67.tgz: 1 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>create-storm-workspace-1.97.67.tgz</b></summary"}


identifier: gh_issue_3732978858
source: github_issue
status: new
created_at: 2025-12-16 04:16:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3732978858", "title": "markdownlint-0.30.66.tgz: 1 vulnerabilities (highest severity is: 5.3)", "url": "https://github.com/storm-software/storm-ops/issues/867", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "storm-ops", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>markdownlint-0.30.66.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/storm-software/storm-ops/commit/65eda74d8d0d9da42c721a4ca420de61423d5442\">65eda74d8d0d9da42c721a4ca420de61423d5442</a></p></details>\n\n## Vulnerab", "created": "2025-12-16T03:42:05Z", "labels": ["Mend: dependency security vulnerability"], "context": "markdownlint-0.30.66.tgz: 1 vulnerabilities (highest severity is: 5.3) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>markdownlint-0.30.66.tgz</b></summary>\n\n<p></p>"}


identifier: gh_issue_3732978595
source: github_issue
status: new
created_at: 2025-12-16 04:16:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3732978595", "title": "git-tools-2.124.50.tgz: 1 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/storm-software/storm-ops/issues/866", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "storm-ops", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>git-tools-2.124.50.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/storm-software/storm-ops/commit/65eda74d8d0d9da42c721a4ca420de61423d5442\">65eda74d8d0d9da42c721a4ca420de61423d5442</a></p></details>\n\n## Vulnerabil", "created": "2025-12-16T03:42:03Z", "labels": ["Mend: dependency security vulnerability"], "context": "git-tools-2.124.50.tgz: 1 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>git-tools-2.124.50.tgz</b></summary>\n\n<p></p>\n<"}


identifier: gh_issue_3732962981
source: github_issue
status: new
created_at: 2025-12-16 04:16:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3732962981", "title": "Dependency Remediation Plan", "url": "https://github.com/jdemo1225/DSpace/issues/2", "user": "00felix-app[bot]", "user_url": "https://github.com/apps/00felix-app", "repo": "DSpace", "body_preview": "## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-16T03:36:04Z", "labels": [], "context": "Dependency Remediation Plan ## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3733079047
source: github_issue
status: new
created_at: 2025-12-16 04:29:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3733079047", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/MakarandBhoir/skills-secure-repository-supply-chain2/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain2", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @MakarandBhoir! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each ste", "created": "2025-12-16T04:19:24Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @MakarandBhoir! Welcome"}


identifier: gh_issue_3733032215
source: github_issue
status: new
created_at: 2025-12-16 04:29:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3733032215", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/Pad96pages/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Pad96pages! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, ", "created": "2025-12-16T04:03:43Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Pad96pages! Welcome to"}


identifier: gh_issue_3733080616
source: github_issue
status: new
created_at: 2025-12-16 04:42:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3733080616", "title": "jupyterlab-4.5.1-py3-none-any.whl: 3 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/ibm-skills-network/skillsnetwork-python-library/issues/183", "user": "ibm-mend-app[bot]", "user_url": "https://github.com/apps/ibm-mend-app", "repo": "skillsnetwork-python-library", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jupyterlab-4.5.1-py3-none-any.whl</b></summary>\n\n<p></p>\n<p>Path to dependency file: /.ws-temp-PQOAAI-requirements.txt</p>\n<p>Path to vulnerable library: /tmp/ws-ua_20251206054249_FVNHMJ/python_XPLBDQ/20251206054253/tornado-6.5.2-cp39-abi3-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl,/tmp/ws-ua_2025121604", "created": "2025-12-16T04:19:59Z", "labels": ["Mend: dependency security vulnerability"], "context": "jupyterlab-4.5.1-py3-none-any.whl: 3 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>jupyterlab-4.5.1-py3-none-any.whl</b></summary>"}


identifier: gh_issue_3733150869
source: github_issue
status: new
created_at: 2025-12-16 04:55:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3733150869", "title": "\ud83d\udea8 Security Alert: 1 Malware Detection Found in SBOM Scan", "url": "https://github.com/InfoMGHAS-KR-Exercises/github-sbom-toolkit/issues/2", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "github-sbom-toolkit", "body_preview": "## \ud83d\udea8 Security Alert: Malware Detection in SBOM Scan\n    \n    ### Scan Details\n    - **Organization**: InfoMGHAS-KR-Exercises\n    - **Scan Date**: 2025-12-16 04:46:54 UTC\n    - **Workflow Run**: [31](https://github.com/InfoMGHAS-KR-Exercises/github-sbom-toolkit/actions/runs/20256822870)\n    - **Branch**: Dec-09\n    - **Commit**: bd151f9a40e410517a8a812fabd427039dfed529\n    \n    ### \ud83d\udd0d Results Summary\n    - **Total Vulnerabilities Found**: 1\n    \n    ### \ud83d\udcc4 Detailed Results\n    The complete vulnerab", "created": "2025-12-16T04:46:56Z", "labels": ["Security", "malware", "sbom", "automated"], "context": "\ud83d\udea8 Security Alert: 1 Malware Detection Found in SBOM Scan ## \ud83d\udea8 Security Alert: Malware Detection in SBOM Scan\n    \n    ### Scan Details\n    - **Organization**: InfoMGHAS-KR-Exercises\n    - **Scan Date**: 2025-12-16 04:46:54 UTC\n    - **Workflow Run**: [31](h"}


identifier: gh_issue_3733114912
source: github_issue
status: new
created_at: 2025-12-16 04:55:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3733114912", "title": "\ud83d\udea8 Security Alert: 1 Malware Detection Found in SBOM Scan", "url": "https://github.com/InfoMGHAS-KR-Exercises/github-sbom-toolkit/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "github-sbom-toolkit", "body_preview": "## \ud83d\udea8 Security Alert: Malware Detection in SBOM Scan\n    \n    ### Scan Details\n    - **Organization**: InfoMGHAS-KR-Exercises\n    - **Scan Date**: 2025-12-16 04:32:54 UTC\n    - **Workflow Run**: [30](https://github.com/InfoMGHAS-KR-Exercises/github-sbom-toolkit/actions/runs/20256593629)\n    - **Branch**: Dec-09\n    - **Commit**: c9ddd463bf8e7a1d2ac034e4561dcfc2afa08f48\n    \n    ### \ud83d\udd0d Results Summary\n    - **Total Vulnerabilities Found**: 1\n    \n    ### \ud83d\udcc4 Detailed Results\n    The complete vulnerab", "created": "2025-12-16T04:32:55Z", "labels": ["Security", "malware", "sbom", "automated"], "context": "\ud83d\udea8 Security Alert: 1 Malware Detection Found in SBOM Scan ## \ud83d\udea8 Security Alert: Malware Detection in SBOM Scan\n    \n    ### Scan Details\n    - **Organization**: InfoMGHAS-KR-Exercises\n    - **Scan Date**: 2025-12-16 04:32:54 UTC\n    - **Workflow Run**: [30](h"}


identifier: gh_issue_3733164875
source: github_issue
status: new
created_at: 2025-12-16 04:55:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3733164875", "title": "XOR Evergreen Issue", "url": "https://github.com/dillonjohnson/daily_coding/issues/1", "user": "xor-hardener[bot]", "user_url": "https://github.com/apps/xor-hardener", "repo": "daily_coding", "body_preview": "## XOR Security_AppSec Abilities\n\n| Ability                                                         | Trigger comment (top of Issue/PR) + Preview                                                                                                                                                                                                                                                                                                       | Required input (templates / context)                      ", "created": "2025-12-16T04:52:17Z", "labels": [], "context": "XOR Evergreen Issue ## XOR Security_AppSec Abilities\n\n| Ability                                                         | Trigger comment (top of Issue/PR) + Preview                                                       "}


identifier: gh_issue_3733150387
source: github_issue
status: new
created_at: 2025-12-16 05:21:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3733150387", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/fernandosalomao/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @fernandosalomao! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebr", "created": "2025-12-16T04:46:48Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @fernandosalomao! Welcome to your Skills e"}


identifier: gh_issue_3733146344
source: github_issue
status: new
created_at: 2025-12-16 05:21:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3733146344", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/steddy89/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @steddy89! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate you", "created": "2025-12-16T04:45:29Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @steddy89! Welcome to your Skills exercise"}


identifier: gh_issue_3733232329
source: github_issue
status: new
created_at: 2025-12-16 05:33:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3733232329", "title": "SRQL injection via unescaped string concatenation in GenericFilterBuilder.BuildFilters", "url": "https://github.com/carverauto/serviceradar/issues/2150", "user": "mfreeman451", "user_url": "https://github.com/mfreeman451", "repo": "serviceradar", "body_preview": "# Summary\n- **Context**: The MCP (Model Context Protocol) server provides tools for LLMs to query ServiceRadar data by constructing SRQL queries from user-supplied JSON parameters.\n- **Bug**: The `GenericFilterBuilder.BuildFilters` function in `pkg/mcp/builder.go` constructs SRQL query filter strings by directly concatenating user input without escaping special characters, enabling SRQL injection attacks.\n- **Actual vs. expected**: User-supplied values are inserted directly into SRQL WHERE claus", "created": "2025-12-16T05:18:14Z", "labels": [], "context": "SRQL injection via unescaped string concatenation in GenericFilterBuilder.BuildFilters # Summary\n- **Context**: The MCP (Model Context Protocol) server provides tools for LLMs to query ServiceRadar data by constructing SRQL queries from user-supplied JSON parameters.\n- **Bug**: The `Gen"}


identifier: gh_issue_3733118405
source: github_issue
status: new
created_at: 2025-12-16 05:33:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3733118405", "title": "[Monster 3/4] Monster Conditions: Pack Tactics, Undead Fortitude, Vulnerability/Immunity", "url": "https://github.com/KirkDiggler/rpg-toolkit/issues/448", "user": "KirkDiggler", "user_url": "https://github.com/KirkDiggler", "repo": "rpg-toolkit", "body_preview": "## Overview\nCreate monster-specific conditions that subscribe to the event bus and modify combat behavior.\n\n## Design Reference\nSee: [Monster Additions Design](https://github.com/KirkDiggler/rpg-toolkit/blob/feature/issue-425-monster-additions/docs/plans/2025-12-15-monster-additions-design.md)\n\n## Dependencies\n- **Depends on**: Nothing (can be done in parallel)\n- **Blocks**: #425 (Monster Additions)\n\n## Implementation Steps\n\n### 1. Pack Tactics\nCreate `rulebooks/dnd5e/monster/conditions/pack_tac", "created": "2025-12-16T04:33:57Z", "labels": ["enhancement"], "context": "[Monster 3/4] Monster Conditions: Pack Tactics, Undead Fortitude, Vulnerability/Immunity ## Overview\nCreate monster-specific conditions that subscribe to the event bus and modify combat behavior.\n\n## Design Reference\nSee: [Monster Additions Design](https://github.com/KirkDiggler/rpg-toolk"}


identifier: gh_issue_3733028035
source: github_issue
status: new
created_at: 2025-12-16 05:33:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3733028035", "title": "Security Vulnerabilities (Trivy Scan) - 16-12-25 @ 04:02", "url": "https://github.com/RazorBladeX/SH-GithubRunner/issues/43", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "SH-GithubRunner", "body_preview": "## \u26a0\ufe0f Security Vulnerabilities Detected\n\n**Scan Date:** 16-12-25 @ 04:02\n\n### Summary\n- **Total vulnerabilities found:** 298\n- **Critical:** 4\n- **High:** 65\n\n### Full Report\nThe complete vulnerability report is available as a workflow artifact.\n\n\ud83d\udce5 **[Download Full Report](https://github.com/RazorBladeX/SH-GithubRunner/actions/runs/20256004634/artifacts)**\n\n---\n*This issue is automatically generated by the Trivy security scanner.*\n", "created": "2025-12-16T04:02:19Z", "labels": ["vulnerability", "security", "automated", "security-scan"], "context": "Security Vulnerabilities (Trivy Scan) - 16-12-25 @ 04:02 ## \u26a0\ufe0f Security Vulnerabilities Detected\n\n**Scan Date:** 16-12-25 @ 04:02\n\n### Summary\n- **Total vulnerabilities found:** 298\n- **Critical:** 4\n- **High:** 65\n\n### Full Report\nThe complete vulnerabilit"}


identifier: gh_issue_3733009634
source: github_issue
status: new
created_at: 2025-12-16 05:33:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3733009634", "title": "code-projects Scholars Tracking System Project V1.0 /sts/home.php SQL injection", "url": "https://github.com/gx922/CVE/issues/3", "user": "gx922", "user_url": "https://github.com/gx922", "repo": "CVE", "body_preview": "# code-projects Scholars Tracking System Project V1.0 /sts/home.php SQL injection\n\n# NAME OF AFFECTED PRODUCT(S)\n\n\u00b7 Scholars Tracking System\n\n## Vendor Homepage\n\n\u00b7[[Scholars Tracking System In PHP With Source Code - Source Code & Projects](https://code-projects.org/scholars-tracking-system-in-php-with-source-code/)](https://code-projects.org/scholars-tracking-system-in-php-with-source-code/)\n\n## submitter\n\n\u00b7 guanyingxin\n\n## Vulnerable File\n\n\u00b7 /sts/home.php\n\n## VERSION(S)\n\n\u00b7 V1.0\n\n## Software Lin", "created": "2025-12-16T03:55:21Z", "labels": [], "context": "code-projects Scholars Tracking System Project V1.0 /sts/home.php SQL injection # code-projects Scholars Tracking System Project V1.0 /sts/home.php SQL injection\n\n# NAME OF AFFECTED PRODUCT(S)\n\n\u00b7 Scholars Tracking System\n\n## Vendor Homepage\n\n\u00b7[[Scholars Tracking System In PHP Wit"}


identifier: gh_issue_3733244438
source: github_issue
status: new
created_at: 2025-12-16 05:46:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3733244438", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/Bekassyl/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Bekassyl! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019", "created": "2025-12-16T05:23:42Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Bekassyl! Welcome to y"}


identifier: gh_issue_3732906177
source: github_issue
status: new
created_at: 2025-12-16 05:46:00
data:
  {"source": "github_issue", "identifier": "gh_issue_3732906177", "title": "Latest 15 Papers - December 16, 2025", "url": "https://github.com/Xander-C/DailyArXiv/issues/271", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "DailyArXiv", "body_preview": "**Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Confidential Computing\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[Confidential, Attestable, and Efficient Inter-CVM Communication with Arm CCA](https://arxiv.org/abs/2512.01594v2)** | 2025-12-02 |  |\n| **[Confidential Prompting: Privacy-preserving LLM Inference on Cloud](https://arxiv.org/abs/2409.19134v5)** | 2025-11-19 |  |\n| **[A Workflow f", "created": "2025-12-16T03:04:29Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 16, 2025 **Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Confidential Computing\n| **Title** | **Date** | **Comment** |\n| --"}


identifier: gh_issue_3733266728
source: github_issue
status: queued
created_at: 2025-12-16 05:46:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3733266728", "title": "Address remaining code hygiene audit items from AUDIT_CODE_HYGIENE.md", "url": "https://github.com/arii/hrm/issues/1653", "user": "arii", "user_url": "https://github.com/arii", "repo": "hrm", "body_preview": "The current PR focused on `knip` integration and initial dead code cleanup. However, the `AUDIT_CODE_HYGIENE.md` document still contains critical findings regarding unstable core dependencies (e.g., `next@16.0.8`, `express@^5.1.0`) and review items for `cross-env` and `pino-pretty`. These items need to be addressed in separate follow-up tasks to fully achieve code hygiene goals.\n\n---\n*Extracted from PR #1649 by RepoAuditor*", "created": "2025-12-16T05:33:48Z", "labels": ["refactoring", "dependencies", "tech-debt", "future-work", "audit"], "context": "Address remaining code hygiene audit items from AUDIT_CODE_HYGIENE.md The current PR focused on `knip` integration and initial dead code cleanup. However, the `AUDIT_CODE_HYGIENE.md` document still contains critical findings regarding unstable core dependencies (e.g., `"}


identifier: gh_issue_3733298293
source: github_issue
status: new
created_at: 2025-12-16 05:58:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3733298293", "title": "Exercise: Introduction to Secret Scanning", "url": "https://github.com/MakarandBhoir/skills-introduction-to-secret-scanning/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-secret-scanning", "body_preview": "## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @MakarandBhoir! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll learn how to identify and protect sensitive information in your repositories. \ud83d\udd0d Let&#39;s work together to keep your code secure! \ud83d\udee1\ufe0f\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in th", "created": "2025-12-16T05:48:44Z", "labels": [], "context": "Exercise: Introduction to Secret Scanning ## Introduction to Secret Scanning\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @MakarandBhoir! Welcome to your S"}


identifier: gh_issue_3733266821
source: github_issue
status: new
created_at: 2025-12-16 05:58:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3733266821", "title": "SECURITYINTERNAL-97", "url": "https://github.com/SahanWeerasiri/test-email-automation/issues/125", "user": "SahanWeerasiri", "user_url": "https://github.com/SahanWeerasiri", "repo": "test-email-automation", "body_preview": "## Description\r\n- **SECURITYINTERNAL ID:** `97`\r\n- **Security Advisory ID:** `WSO2-2025-97`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Virus Detected in the my office laptop\"` in **security@**.\r\n- **Security Advisory:** [link](https://security-advisory.wso2.com/dashboard/advisory?name=WSO2-2025-97)\r\n- **Progress Progress View:** [link](https://security-advisory.wso2.com/dashboard/advisory/patchProgress?name=WSO2-2025-97)\r\n- **Reporter:** External Reporter\r\n- **Date:** Tue, Dec 16, 2025 at 9:47 AM", "created": "2025-12-16T05:33:51Z", "labels": ["Reporter/External", "Severity/Medium", "Type/Malware"], "context": "SECURITYINTERNAL-97 ## Description\r\n- **SECURITYINTERNAL ID:** `97`\r\n- **Security Advisory ID:** `WSO2-2025-97`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"Virus Detected in the my office laptop\"` in **security@**.\r\n- **Se"}


identifier: gh_issue_3733374823
source: github_issue
status: new
created_at: 2025-12-16 06:22:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3733374823", "title": "CVE-2025-67735 (Medium) detected in netty-codec-http-4.1.64.Final.jar", "url": "https://github.com/vipinsun/business-partner-agent/issues/223", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "business-partner-agent", "body_preview": "## CVE-2025-67735 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>netty-codec-http-4.1.64.Final.jar</b></summary>\n\n<p></p>\n<p>Library home page: <a href=\"https://netty.io/\">https://netty.io/</a></p>\n<p>Path to dependency file: /pom.xml</p>\n<p>Path to vulnerable library: /home/wss-scanner/.m2/repository/io/netty/netty-codec-http/4.1.64.Final/netty-codec-http-4.1", "created": "2025-12-16T06:22:13Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-67735 (Medium) detected in netty-codec-http-4.1.64.Final.jar ## CVE-2025-67735 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3733374387
source: github_issue
status: new
created_at: 2025-12-16 06:22:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3733374387", "title": "CVE-2025-67735 (Medium) detected in netty-codec-http-4.1.0.Beta1.jar", "url": "https://github.com/ChoeMinji/netty-4.1.0/issues/70", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "netty-4.1.0", "body_preview": "## CVE-2025-67735 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>netty-codec-http-4.1.0.Beta1.jar</b></summary>\n\n<p>Netty is an asynchronous event-driven network application framework for \n    rapid development of maintainable high performance protocol servers and\n    clients.</p>\n<p>Library home page: <a href=\"http://netty.io/\">http://netty.io/</a></p>\n<p>Pat", "created": "2025-12-16T06:22:00Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-67735 (Medium) detected in netty-codec-http-4.1.0.Beta1.jar ## CVE-2025-67735 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3733370703
source: github_issue
status: new
created_at: 2025-12-16 06:22:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3733370703", "title": "CVE-2025-67735 (Medium) detected in netty-codec-http-4.1.36.Final.jar", "url": "https://github.com/vipinsun/cactus/issues/859", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "cactus", "body_preview": "## CVE-2025-67735 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>netty-codec-http-4.1.36.Final.jar</b></summary>\n\n<p>Netty is an asynchronous event-driven network application framework for\n    rapid development of maintainable high performance protocol servers and\n    clients.</p>\n<p>Library home page: <a href=\"http://netty.io/\">http://netty.io/</a></p>\n<p>Pat", "created": "2025-12-16T06:20:35Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-67735 (Medium) detected in netty-codec-http-4.1.36.Final.jar ## CVE-2025-67735 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3733368687
source: github_issue
status: new
created_at: 2025-12-16 06:22:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3733368687", "title": "spring-boot-starter-webflux-3.5.7.jar: 1 vulnerabilities (highest severity is: 6.5)", "url": "https://github.com/BranislavBeno/Ronja-CRM-Desktop-Client/issues/237", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "Ronja-CRM-Desktop-Client", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-boot-starter-webflux-3.5.7.jar</b></summary>\n\n<p></p>\n<p>Path to dependency file: /ronja-desktop/pom.xml</p>\n<p>Path to vulnerable library: /ronja-desktop/pom.xml,/ronja-service/pom.xml</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/BranislavBeno/Ronja-CRM-Desktop-Client/commit/e37704dfb3a28e3243ca4981a638e3b932fc89ab\">e37", "created": "2025-12-16T06:19:39Z", "labels": ["Mend: dependency security vulnerability"], "context": "spring-boot-starter-webflux-3.5.7.jar: 1 vulnerabilities (highest severity is: 6.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-boot-starter-webflux-3.5.7.jar</b></summ"}


identifier: gh_issue_3733363936
source: github_issue
status: new
created_at: 2025-12-16 06:22:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3733363936", "title": "spring-boot-starter-webflux-3.5.7.jar: 1 vulnerabilities (highest severity is: 6.5)", "url": "https://github.com/BranislavBeno/GitLab-Issue-Importer/issues/339", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "GitLab-Issue-Importer", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-boot-starter-webflux-3.5.7.jar</b></summary>\n\n<p></p>\n<p>Path to dependency file: /app/build.gradle.kts</p>\n<p>Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/io.netty/netty-codec-http/4.1.128.Final/72c41907808702b7448e5c1c477ea1a3176adefb/netty-codec-http-4.1.128.Final.jar</p>\n<p>\n\n\n<p>Found in HEA", "created": "2025-12-16T06:17:35Z", "labels": ["Mend: dependency security vulnerability"], "context": "spring-boot-starter-webflux-3.5.7.jar: 1 vulnerabilities (highest severity is: 6.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-boot-starter-webflux-3.5.7.jar</b></summ"}


identifier: gh_issue_3733356832
source: github_issue
status: new
created_at: 2025-12-16 06:35:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3733356832", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/pavan-007-0/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @pavan-007-0! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step,", "created": "2025-12-16T06:14:22Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @pavan-007-0! Welcome t"}


identifier: gh_issue_3733383449
source: github_issue
status: new
created_at: 2025-12-16 06:35:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3733383449", "title": "CVE-2025-67735 (Medium) detected in netty-codec-http-4.1.30.Final.jar", "url": "https://github.com/artkamote/examples/issues/493", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "examples", "body_preview": "## CVE-2025-67735 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>netty-codec-http-4.1.30.Final.jar</b></summary>\n\n<p>Netty is an asynchronous event-driven network application framework for\n    rapid development of maintainable high performance protocol servers and\n    clients.</p>\n<p>Library home page: <a href=\"http://netty.io/\">http://netty.io/</a></p>\n<p>Pat", "created": "2025-12-16T06:25:53Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-67735 (Medium) detected in netty-codec-http-4.1.30.Final.jar ## CVE-2025-67735 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3733378670
source: github_issue
status: new
created_at: 2025-12-16 06:35:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3733378670", "title": "CVE-2025-67735 (Medium) detected in netty-codec-http-4.1.38.Final.jar", "url": "https://github.com/vipinsun/minifabric/issues/231", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "minifabric", "body_preview": "## CVE-2025-67735 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>netty-codec-http-4.1.38.Final.jar</b></summary>\n\n<p>Netty is an asynchronous event-driven network application framework for\n    rapid development of maintainable high performance protocol servers and\n    clients.</p>\n<p>Library home page: <a href=\"https://netty.io/\">https://netty.io/</a></p>\n<p>P", "created": "2025-12-16T06:24:04Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-67735 (Medium) detected in netty-codec-http-4.1.38.Final.jar ## CVE-2025-67735 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3733376432
source: github_issue
status: new
created_at: 2025-12-16 06:35:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3733376432", "title": "CVE-2025-67735 (Medium) detected in netty-codec-http-4.1.128.Final.jar", "url": "https://github.com/matteobaccan/quarkus-boilerplate/issues/169", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "quarkus-boilerplate", "body_preview": "## CVE-2025-67735 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>netty-codec-http-4.1.128.Final.jar</b></summary>\n\n<p></p>\n<p>Library home page: <a href=\"https://netty.io/\">https://netty.io/</a></p>\n<p>Path to dependency file: /code-with-quarkus/pom.xml</p>\n<p>Path to vulnerable library: /code-with-quarkus/pom.xml,/home/wss-scanner/.m2/repository/io/netty/nett", "created": "2025-12-16T06:23:01Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-67735 (Medium) detected in netty-codec-http-4.1.128.Final.jar ## CVE-2025-67735 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3733399288
source: github_issue
status: new
created_at: 2025-12-16 06:47:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3733399288", "title": "CVE-2025-67735 (Medium) detected in netty-codec-http-4.1.36.Final.jar", "url": "https://github.com/LynRodWS/alcor/issues/427", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "alcor", "body_preview": "## CVE-2025-67735 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>netty-codec-http-4.1.36.Final.jar</b></summary>\n\n<p>Netty is an asynchronous event-driven network application framework for\n    rapid development of maintainable high performance protocol servers and\n    clients.</p>\n<p>Library home page: <a href=\"http://netty.io/\">http://netty.io/</a></p>\n<p>Pat", "created": "2025-12-16T06:32:24Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-67735 (Medium) detected in netty-codec-http-4.1.36.Final.jar ## CVE-2025-67735 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3733383039
source: github_issue
status: queued
created_at: 2025-12-16 06:47:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3733383039", "title": "[CVE-2025-54410] Security vulnerability: moby", "url": "https://github.com/moby/moby/issues/51731", "user": "nagoorbasha-coder", "user_url": "https://github.com/nagoorbasha-coder", "repo": "moby", "body_preview": "## Security Vulnerability Report\n\n**CVE ID:** CVE-2025-54410\n\n**Severity:** LOW (CVSS 3.3)\n\n**CWE:** CWE-909\n\n**CVSS Vector:** `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N`\n\n### Description\n\nMoby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to re-create iptables rule", "created": "2025-12-16T06:25:42Z", "labels": [], "context": "[CVE-2025-54410] Security vulnerability: moby ## Security Vulnerability Report\n\n**CVE ID:** CVE-2025-54410\n\n**Severity:** LOW (CVSS 3.3)\n\n**CWE:** CWE-909\n\n**CVSS Vector:** `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N`\n\n### Description\n\nMoby is "}


identifier: gh_issue_3733378257
source: github_issue
status: queued
created_at: 2025-12-16 06:47:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3733378257", "title": "[CVE-2025-54410] Security vulnerability: moby", "url": "https://github.com/moby/moby/issues/51730", "user": "nagoorbasha-coder", "user_url": "https://github.com/nagoorbasha-coder", "repo": "moby", "body_preview": "## Security Vulnerability Report\n\n**CVE ID:** CVE-2025-54410\n\n**Severity:** LOW (CVSS 3.3)\n\n**CWE:** CWE-909\n\n**CVSS Vector:** `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N`\n\n### Description\n\nMoby is an open source container framework developed by Docker Inc. that is distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby releases before 28.0.0. When firewalld reloads, Docker fails to re-create iptables rule", "created": "2025-12-16T06:23:52Z", "labels": [], "context": "[CVE-2025-54410] Security vulnerability: moby ## Security Vulnerability Report\n\n**CVE ID:** CVE-2025-54410\n\n**Severity:** LOW (CVSS 3.3)\n\n**CWE:** CWE-909\n\n**CVSS Vector:** `CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N`\n\n### Description\n\nMoby is "}


identifier: gh_issue_3733455004
source: github_issue
status: queued
created_at: 2025-12-16 06:58:48
data:
  {"source": "github_issue", "identifier": "gh_issue_3733455004", "title": "Add npm audit review during deployment script", "url": "https://github.com/frankbria/codeframe/issues/97", "user": "frankbria", "user_url": "https://github.com/frankbria", "repo": "codeframe", "body_preview": "Before building the web-ui frontend, run a `npm audit` on web-ui. If there are any critical findings, exit with code 1 to stop the process immediately.", "created": "2025-12-16T06:52:32Z", "labels": ["enhancement", "good first issue", "priority:high", "quality"], "context": "Add npm audit review during deployment script Before building the web-ui frontend, run a `npm audit` on web-ui. If there are any critical findings, exit with code 1 to stop the process immediately."}


identifier: gh_issue_3733004432
source: github_issue
status: new
created_at: 2025-12-16 06:58:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3733004432", "title": "Clipboard provider doesn't work with `:redir`", "url": "https://github.com/vim/vim/issues/18937", "user": "bennyyip", "user_url": "https://github.com/bennyyip", "repo": "vim", "body_preview": "### Steps to reproduce\n\n```vim\nvim9script\ng:osc52_force_avail = 1\npackadd osc52\nset clipmethod^=osc52\n```\n\nrun `:redir @+`\nreturn error: `E475: Invalid argument: @+`\n\n`\"+y` works. But redir doesn't.\n\nYou can test with this script.\n```vim\nvim9script\ncommand! -nargs=+ -complete=command CopyCommandOutput redir @+ | <args> | redir END\n:CopyCommandOutput echom 'test'\n```\n\n### Expected behaviour\n\nOutput redir to `@+`\n\n### Version of Vim\n\n9.1.1984\n\n### Environment\n\nArch Linux\n\n\n### Logs and stack trace", "created": "2025-12-16T03:53:03Z", "labels": ["bug"], "context": "Clipboard provider doesn't work with `:redir` ### Steps to reproduce\n\n```vim\nvim9script\ng:osc52_force_avail = 1\npackadd osc52\nset clipmethod^=osc52\n```\n\nrun `:redir @+`\nreturn error: `E475: Invalid argument: @+`\n\n`\"+y` works. But redir doesn't.\n\n"}


identifier: gh_issue_3732772509
source: github_issue
status: new
created_at: 2025-12-16 06:58:52
data:
  {"source": "github_issue", "identifier": "gh_issue_3732772509", "title": "feature - sandboxing mcp tooling via zypi, and/or docker, and/or bubblewrap", "url": "https://github.com/dwash96/aider-ce/issues/265", "user": "allen-munsch", "user_url": "https://github.com/allen-munsch", "repo": "aider-ce", "body_preview": "I wanted to stop by to add that if we begin using the MCP tools enabled in this branch, we should really consider adding sandboxing of some kind, `gemini` cli has some limited form of this, including tool exclusions\n\nso you can exclude `ShellCommand(rm -rf)` from running for example, and add a `\"sandbox\": true`, which then runs the tool within a docker container.\n\nI've been experimenting a bit with this using firecracker VMs, with openapi spec mcp generations\n\n- https://github.com/allen-munsch/z", "created": "2025-12-16T01:51:26Z", "labels": [], "context": "feature - sandboxing mcp tooling via zypi, and/or docker, and/or bubblewrap I wanted to stop by to add that if we begin using the MCP tools enabled in this branch, we should really consider adding sandboxing of some kind, `gemini` cli has some limited form of this, including "}


identifier: gh_issue_3733473520
source: github_issue
status: new
created_at: 2025-12-16 07:10:49
data:
  {"source": "github_issue", "identifier": "gh_issue_3733473520", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/kirankkadam/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @kirankkadam! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step,", "created": "2025-12-16T07:00:23Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @kirankkadam! Welcome t"}


identifier: gh_issue_3733429890
source: github_issue
status: new
created_at: 2025-12-16 07:10:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3733429890", "title": "Rego policy eval produces SARIF-Report with duplicate results", "url": "https://github.com/l3montree-dev/devguard/issues/1504", "user": "timbastin", "user_url": "https://github.com/timbastin", "repo": "devguard", "body_preview": "The policy evaluation produces currently a sarif report with duplicate result entries.\n\n### How to reproduce\n\nHere is the rego policy and the command i fired up:\n\n```\ndevguard-scanner attestations registry.opencode.de/open-code/oci/debian:13-minimal --policy example.rego\n```\n\nHere is the .rego policy:\n\n```rego\n# METADATA\n# title: example Policy\n# custom:\n#   description: example description\n#   priority: 1\n#   predicateType: https://cyclonedx.org/vex\n#   relatedResources: []\n#   tags:\n#   - Lega", "created": "2025-12-16T06:43:19Z", "labels": ["bug", "priority:low", "component/devguard-scanner"], "context": "Rego policy eval produces SARIF-Report with duplicate results The policy evaluation produces currently a sarif report with duplicate result entries.\n\n### How to reproduce\n\nHere is the rego policy and the command i fired up:\n\n```\ndevguard-scanner attestations reg"}


identifier: gh_issue_3733413064
source: github_issue
status: new
created_at: 2025-12-16 07:10:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3733413064", "title": "Security Health Check - GOOD (85/100) - 2025-12-16", "url": "https://github.com/Sami9889/Sami.dev-website/issues/183", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/16/2025, 6:37:39 AM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 7\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Securi", "created": "2025-12-16T06:37:41Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-16 # Security Health Check Report\n\n**Generated:** 12/16/2025, 6:37:39 AM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Inc"}


identifier: gh_issue_3733353892
source: github_issue
status: new
created_at: 2025-12-16 07:10:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3733353892", "title": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar", "url": "https://github.com/SAST-UP-Global-Config-DEV/SAST-Test-Repo-1659a041-5996-488c-b889-e96ad0807a84/issues/1", "user": "dev-mend-for-github-com[bot]", "user_url": "https://github.com/apps/dev-mend-for-github-com", "repo": "SAST-Test-Repo-1659a041-5996-488c-b889-e96ad0807a84", "body_preview": "## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tomcat-embed-core-10.1.20.jar</b></summary>\n\n<p>Core Tomcat implementation</p>\n<p>Library home page: <a href=\"https://tomcat.apache.org/\">https://tomcat.apache.org/</a></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\nDepend", "created": "2025-12-16T06:13:10Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-55754 (Critical) detected in tomcat-embed-core-10.1.20.jar ## CVE-2025-55754 - Critical Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library "}


identifier: gh_issue_3733280386
source: github_issue
status: new
created_at: 2025-12-16 07:10:53
data:
  {"source": "github_issue", "identifier": "gh_issue_3733280386", "title": "Follow-up - ## Implementation Report - Detailed Walkthrough", "url": "https://github.com/zfifteen/geofac_validation/issues/24", "user": "zfifteen", "user_url": "https://github.com/zfifteen", "repo": "geofac_validation", "body_preview": "<html><head></head><body><h2>Adversarial Semiprime Test Suite</h2>\r\n<p>Here's your gauntlet. <strong>No cherry-picking, no excuses.</strong></p>\r\n<hr>\r\n<h3><strong>Tier 1: RSA Challenge Numbers (Known Factors)</strong></h3>\r\n<p>These are the <strong>real test</strong>. We know the factors, so enrichment is measurable.</p>\r\n<pre><code class=\"language-python\"># RSA-100 (330-bit, factored 1991)\r\nN = 1522605027922533360535618378132637429718068114961380688657908494580122963258952897654000350692006139", "created": "2025-12-16T05:40:43Z", "labels": [], "context": "Follow-up - ## Implementation Report - Detailed Walkthrough <html><head></head><body><h2>Adversarial Semiprime Test Suite</h2>\r\n<p>Here's your gauntlet. <strong>No cherry-picking, no excuses.</strong></p>\r\n<hr>\r\n<h3><strong>Tier 1: RSA Challenge Numbers (Known"}


identifier: gh_issue_3733455214
source: github_issue
status: new
created_at: 2025-12-16 07:23:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3733455214", "title": "Layered verification proof bundles", "url": "https://github.com/blocktrails/blocktrails/issues/11", "user": "melvincarvalho", "user_url": "https://github.com/melvincarvalho", "repo": "blocktrails", "body_preview": "## Summary\n\nImplement a layered verification system for blocktrail proof bundles, inspired by Linked Data and the Open World Assumption. Each verification layer is optional and independently verifiable. The more layers present, the more you can prove - but partial proofs are still useful.\n\n## Philosophy\n\n> \"Don't require what you don't need. Verify what you can. Be explicit about what's missing.\"\n\nLike HTTP content negotiation - request what you want, get what's available, know the difference.\n\n", "created": "2025-12-16T06:52:38Z", "labels": [], "context": "Layered verification proof bundles ## Summary\n\nImplement a layered verification system for blocktrail proof bundles, inspired by Linked Data and the Open World Assumption. Each verification layer is optional and independently verifiabl"}


identifier: gh_issue_3733542257
source: github_issue
status: queued
created_at: 2025-12-16 07:35:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3733542257", "title": "Security vulnerability in access control software allowing unauthorized access by dogs (1765869831) ", "url": "https://github.com/forest-town/pwr-release1/issues/1", "user": "pipcrispy", "user_url": "https://github.com/pipcrispy", "repo": "pwr-release1", "body_preview": "### Description:\n\nOur access control software has a critical security vulnerability that allows dogs to access the database without authentication. This issue poses a significant risk to the security and integrity of our system, as it allows unauthorized parties to gain access to sensitive information and potentially cause damage.\n\n### Steps to Reproduce:\n\nHave a dog (or any animal with paws) attempt to access the database without authentication.\nThe system should allow access without requiring ", "created": "2025-12-16T07:23:51Z", "labels": ["bug", "documentation"], "context": "Security vulnerability in access control software allowing unauthorized access by dogs (1765869831)  ### Description:\n\nOur access control software has a critical security vulnerability that allows dogs to access the database without authentication. This issue poses a significant risk to the security "}


identifier: gh_issue_3733580536
source: github_issue
status: new
created_at: 2025-12-16 07:47:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3733580536", "title": "[Snyk] Upgrade electron-updater from 6.6.8 to 6.7.2", "url": "https://github.com/Expensify/App/issues/77733", "user": "melvin-bot[bot]", "user_url": "https://github.com/apps/melvin-bot", "repo": "App", "body_preview": "![snyk-top-banner](https://res.cloudinary.com/snyk/image/upload/r-d/scm-platform/snyk-pull-requests/pr-banner-default.svg)\n\n\n<h3>Snyk has created this PR to upgrade electron-updater from 6.6.8 to 6.7.2.</h3>\n\n:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.\n\n<hr/>\n\n\n- The recommended version is **3 versions** ahead of your current version", "created": "2025-12-16T07:37:37Z", "labels": ["Weekly", "Internal"], "context": "[Snyk] Upgrade electron-updater from 6.6.8 to 6.7.2 ![snyk-top-banner](https://res.cloudinary.com/snyk/image/upload/r-d/scm-platform/snyk-pull-requests/pr-banner-default.svg)\n\n\n<h3>Snyk has created this PR to upgrade electron-updater from 6.6.8 to 6.7."}


identifier: gh_issue_3733554151
source: github_issue
status: queued
created_at: 2025-12-16 08:00:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3733554151", "title": "Pre-Launch Final Dependency Lock - Dec 16 Security Freeze Prep", "url": "https://github.com/Brunzendorf/SHIBC-AITO/issues/234", "user": "Brunzendorf", "user_url": "https://github.com/Brunzendorf", "repo": "SHIBC-AITO", "body_preview": "## Description\n\nExecute final npm audit fix and lock all dependencies before Dec 17 infrastructure freeze. Currently tracking 2 high-severity npm vulnerabilities and 6 breaking updates pending. Lock current stable versions to prevent any dependency-related surprises during Dec 19 launch. Creates `package-lock.json` snapshot and documents exact versions deployed.\n\n## Priority\n\n**HIGH** (Revenue Impact: 1/10, Effort: 1/10)\n\n## Revenue Angle\n\nThis initiative contributes to revenue by: Automation sa", "created": "2025-12-16T07:27:52Z", "labels": ["agent:cto", "priority:high", "security", "dec-19", "dependencies", "pre-launch", "freeze-prep", "npm-audit"], "context": "Pre-Launch Final Dependency Lock - Dec 16 Security Freeze Prep ## Description\n\nExecute final npm audit fix and lock all dependencies before Dec 17 infrastructure freeze. Currently tracking 2 high-severity npm vulnerabilities and 6 breaking updates pending. Lock c"}


identifier: gh_issue_3733635425
source: github_issue
status: queued
created_at: 2025-12-16 08:00:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3733635425", "title": "Q1 2026 Container Image Vulnerability Scanning Pipeline", "url": "https://github.com/Brunzendorf/SHIBC-AITO/issues/250", "user": "Brunzendorf", "user_url": "https://github.com/Brunzendorf", "repo": "SHIBC-AITO", "body_preview": "## Description\n\nExtend security scanning to Docker container images. Our agent stack runs in Docker containers but we only scan npm dependencies. Implement automated Trivy/Grype scans of container images on every build, detecting OS-level vulnerabilities (CVEs in Alpine/Debian packages, outdated base images). Integrates with existing CI/CD pipeline. Critical for B2B clients who require container security attestation.\n\n## Priority\n\n**MEDIUM** (Revenue Impact: 3/10, Effort: 2/10)\n\n## Revenue Angle", "created": "2025-12-16T07:58:05Z", "labels": ["priority:medium", "agent:cto", "security", "automation", "zero-cost", "devops", "q1-2026", "b2b", "sla-compliance", "containers"], "context": "Q1 2026 Container Image Vulnerability Scanning Pipeline ## Description\n\nExtend security scanning to Docker container images. Our agent stack runs in Docker containers but we only scan npm dependencies. Implement automated Trivy/Grype scans of container ima"}


identifier: gh_issue_3733629486
source: github_issue
status: queued
created_at: 2025-12-16 08:00:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3733629486", "title": "Q1 2026 Automated Dependency Vulnerability Scanner with Slack/Telegram Alerts", "url": "https://github.com/Brunzendorf/SHIBC-AITO/issues/248", "user": "Brunzendorf", "user_url": "https://github.com/Brunzendorf", "repo": "SHIBC-AITO", "body_preview": "## Description\n\nImplement automated weekly dependency security scans with instant alerting. Current process is manual and reactive. This system runs npm audit + Snyk/Trivy scans weekly, comparing against known CVE databases, and sends alerts via Telegram when HIGH/CRITICAL vulnerabilities are detected. Includes auto-generated remediation PRs for safe updates. Essential for B2B clients who require documented security monitoring SLAs.\n\n## Priority\n\n**MEDIUM** (Revenue Impact: 3/10, Effort: 2/10)\n\n", "created": "2025-12-16T07:55:39Z", "labels": ["priority:medium", "agent:cto", "security", "automation", "monitoring", "zero-cost", "q1-2026", "b2b", "sla-compliance"], "context": "Q1 2026 Automated Dependency Vulnerability Scanner with Slack/Telegram Alerts ## Description\n\nImplement automated weekly dependency security scans with instant alerting. Current process is manual and reactive. This system runs npm audit + Snyk/Trivy scans weekly, comparing agai"}


identifier: gh_issue_3733563197
source: github_issue
status: queued
created_at: 2025-12-16 08:00:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3733563197", "title": "Security advisory for csvjson (CVE-2024-34507)", "url": "https://github.com/test-results-reporter/testbeats/issues/287", "user": "witoldmetel", "user_url": "https://github.com/witoldmetel", "repo": "testbeats", "body_preview": "## Security Vulnerability: csvjson prototype injection (GHSA-xq4f-3jxp-qv6m)\n\n### Summary\n\n`testbeats` has a transitive dependency on `csvjson` through `performance-results-parser`, which is vulnerable to prototype injection.\n\n### Vulnerability Details\n\n| Field | Value |\n|-------|-------|\n| **Severity** | High |\n| **Package** | csvjson |\n| **Vulnerable versions** | <=5.1.0 |\n| **Patched versions** | None available |\n| **Dependency path** | `testbeats` \u2192 `performance-results-parser` \u2192 `csvjson` |", "created": "2025-12-16T07:31:17Z", "labels": [], "context": "Security advisory for csvjson (CVE-2024-34507) ## Security Vulnerability: csvjson prototype injection (GHSA-xq4f-3jxp-qv6m)\n\n### Summary\n\n`testbeats` has a transitive dependency on `csvjson` through `performance-results-parser`, which is vulnerabl"}


identifier: gh_issue_3733560068
source: github_issue
status: new
created_at: 2025-12-16 08:00:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3733560068", "title": "Post-Launch MCP SDK Security Upgrade Sprint", "url": "https://github.com/Brunzendorf/SHIBC-AITO/issues/235", "user": "Brunzendorf", "user_url": "https://github.com/Brunzendorf", "repo": "SHIBC-AITO", "body_preview": "## Description\n\nAfter Dec 19 launch, prioritize upgrading @modelcontextprotocol/sdk to resolve the 2 high-severity DNS rebinding vulnerabilities (GHSA-w48q-cv73-mx4w). Currently blocked by etherscan-mcp upstream dependency. Monitor for etherscan-mcp update and execute upgrade as soon as available. This clears our vulnerability backlog to 0.\n\n## Priority\n\n**MEDIUM** (Revenue Impact: 2/10, Effort: 2/10)\n\n## Revenue Angle\n\nThis initiative contributes to revenue by: Automation saves costs, Security ", "created": "2025-12-16T07:30:03Z", "labels": ["priority:medium", "agent:cto", "security", "q1-2026", "technical-debt", "post-launch", "mcp-sdk", "vulnerabilities"], "context": "Post-Launch MCP SDK Security Upgrade Sprint ## Description\n\nAfter Dec 19 launch, prioritize upgrading @modelcontextprotocol/sdk to resolve the 2 high-severity DNS rebinding vulnerabilities (GHSA-w48q-cv73-mx4w). Currently blocked by etherscan-m"}


identifier: gh_issue_3733484972
source: github_issue
status: new
created_at: 2025-12-16 08:12:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3733484972", "title": "[CVE-2025-46551] Security vulnerability: jruby", "url": "https://github.com/jruby/jruby-openssl/issues/339", "user": "nagoorbasha-coder", "user_url": "https://github.com/nagoorbasha-coder", "repo": "jruby-openssl", "body_preview": "## Security Vulnerability Report\n\n**CVE ID:** CVE-2025-46551\n\n**Severity:** LOW (CVSS 3.7)\n\n**CWE:** CWE-295\n\n**CVSS Vector:** `CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N`\n\n### Description\n\nJRuby-OpenSSL is an add-on gem for JRuby that emulates the Ruby OpenSSL native library. Starting in JRuby-OpenSSL version 0.12.1 and prior to version 0.15.4 (corresponding to JRuby versions starting in 9.3.4.0 prior to 9.4.12.1 and 10.0.0.0 prior to 10.0.0.1), when verifying SSL certificates, JRuby-OpenSSL ", "created": "2025-12-16T07:04:42Z", "labels": [], "context": "[CVE-2025-46551] Security vulnerability: jruby ## Security Vulnerability Report\n\n**CVE ID:** CVE-2025-46551\n\n**Severity:** LOW (CVSS 3.7)\n\n**CWE:** CWE-295\n\n**CVSS Vector:** `CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N`\n\n### Description\n\nJRuby-Op"}


identifier: gh_issue_3733706243
source: github_issue
status: new
created_at: 2025-12-16 08:24:10
data:
  {"source": "github_issue", "identifier": "gh_issue_3733706243", "title": "Resolve vulnerability CVE-2025-66416 from mcp dependency", "url": "https://github.com/UiPath/uipath-mcp-python/issues/160", "user": "mikael-andersson91", "user_url": "https://github.com/mikael-andersson91", "repo": "uipath-mcp-python", "body_preview": "Our vulnerability scanners has picked up that uipath-mcp currently has mcp as one of its sub-dependencies pinned to version 1.11.0 which is affected by a high-severity vulnerability, CVE-2025-66416. \n\nVersion 1.23.0 of mcp contains a fix related to this vulnerability. Do you have any plans of upgrading the dependencies for your MCP implementation?\n\n```sh\n\u274c Vulnerabilities found\n2025-12-16T07:06:23Z\tWARN\t[report] No enabled scanners found. Summary table will not be displayed.\n\nFor OSS Maintainers", "created": "2025-12-16T08:19:31Z", "labels": [], "context": "Resolve vulnerability CVE-2025-66416 from mcp dependency Our vulnerability scanners has picked up that uipath-mcp currently has mcp as one of its sub-dependencies pinned to version 1.11.0 which is affected by a high-severity vulnerability, CVE-2025-66416. \n"}


identifier: gh_issue_3733684743
source: github_issue
status: new
created_at: 2025-12-16 08:24:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3733684743", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/Franesh/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Franesh! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019l", "created": "2025-12-16T08:12:00Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Franesh! Welcome to yo"}


identifier: gh_issue_3733634764
source: github_issue
status: new
created_at: 2025-12-16 08:24:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3733634764", "title": "Discovered on asset:https://api-inference.huggingface.co/models/distilbert-base-uncased", "url": "https://github.com/Navyatejasridebug/Sanityrepo/issues/119", "user": "Navyatejasridebug", "user_url": "https://github.com/Navyatejasridebug", "repo": "Sanityrepo", "body_preview": "Supply Chain Vulnerabilities in AI and Large Language Model (LLM) systems arise when third-party components, libraries, datasets, models, or services integrated during development or deployment contain malicious code, hidden backdoors, corrupted data, or compromised configurations. These vulnerabilities can be exploited to inject malicious behavior, degrade model performance, or leak sensitive data, impacting confidentiality, integrity, and availability of AI-driven applications. In AI/ML supply", "created": "2025-12-16T07:57:48Z", "labels": ["BreachLock", "Medium", "Unknown"], "context": "Discovered on asset:https://api-inference.huggingface.co/models/distilbert-base-uncased Supply Chain Vulnerabilities in AI and Large Language Model (LLM) systems arise when third-party components, libraries, datasets, models, or services integrated during development or deployment contai"}


identifier: gh_issue_3733622574
source: github_issue
status: new
created_at: 2025-12-16 08:24:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3733622574", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/HENRY773147/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @HENRY773147! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step,", "created": "2025-12-16T07:52:54Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @HENRY773147! Welcome t"}


identifier: gh_issue_3733728265
source: github_issue
status: queued
created_at: 2025-12-16 08:36:33
data:
  {"source": "github_issue", "identifier": "gh_issue_3733728265", "title": "Security vulnerability in access control software allowing unauthorized access by dogs (1765873611) ", "url": "https://github.com/forest-town/pwr-release1/issues/1", "user": "pipcrispy", "user_url": "https://github.com/pipcrispy", "repo": "pwr-release1", "body_preview": "### Description:\n\nOur access control software has a critical security vulnerability that allows dogs to access the database without authentication. This issue poses a significant risk to the security and integrity of our system, as it allows unauthorized parties to gain access to sensitive information and potentially cause damage.\n\n### Steps to Reproduce:\n\nHave a dog (or any animal with paws) attempt to access the database without authentication.\nThe system should allow access without requiring ", "created": "2025-12-16T08:26:51Z", "labels": ["bug", "documentation"], "context": "Security vulnerability in access control software allowing unauthorized access by dogs (1765873611)  ### Description:\n\nOur access control software has a critical security vulnerability that allows dogs to access the database without authentication. This issue poses a significant risk to the security "}


identifier: gh_issue_3733810296
source: github_issue
status: new
created_at: 2025-12-16 08:59:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3733810296", "title": "Dependency Dashboard", "url": "https://github.com/rhtap-perf-test/konflux-probe-test-templates/issues/12", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "konflux-probe-test-templates", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Repository Problems\n\nRenovate tried to run on this repository, but found these problems.\n\n - \u26a0\ufe0f WARN: Found renovate config warnings\n - \u26a0\ufe0f WARN: Cannot access vulnerability alerts", "created": "2025-12-16T08:52:02Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - ["}


identifier: gh_issue_3733706356
source: github_issue
status: new
created_at: 2025-12-16 09:00:02
data:
  {"source": "github_issue", "identifier": "gh_issue_3733706356", "title": "V4.0.6 Toolbx install Ubuntu 24.04  P1", "url": "https://github.com/lephotographelibre/BlueNotebook/issues/110", "user": "lephotographelibre", "user_url": "https://github.com/lephotographelibre", "repo": "BlueNotebook", "body_preview": "Need to modify `run_bluenotebook.sh`\ndisplay pre-requisite package list\nModify and translate prerequisites document\nmodify README.md project (image, prerequisite, howto start)\n\n\n\n\n## pyenv install in a toolbx Ubuntu 24.04\n\npyenv installer\n<https://github.com/pyenv/pyenv-installer>\n\nadd to .bash_profile\n\n```bash\n# User specific environment and startup programs\n#\nexport PYENV_ROOT=\"$HOME/.pyenv\"\n[[ -d $PYENV_ROOT/bin ]] && export PATH=\"$PYENV_ROOT/bin:$PATH\"\neval \"$(pyenv init - bash)\"\n```\n\nadd to", "created": "2025-12-16T08:19:33Z", "labels": [], "context": "V4.0.6 Toolbx install Ubuntu 24.04  P1 Need to modify `run_bluenotebook.sh`\ndisplay pre-requisite package list\nModify and translate prerequisites document\nmodify README.md project (image, prerequisite, howto start)\n\n\n\n\n## pyenv install in "}


identifier: gh_issue_3733783768
source: github_issue
status: new
created_at: 2025-12-16 09:13:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3733783768", "title": "Exercise: Introduction to Repository Management", "url": "https://github.com/Alvaro-Exposito-MTZ/skills-introduction-to-repository-management/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-repository-management", "body_preview": "## Introduction to Repository Management\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Alvaro-Exposito-MTZ! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll configure your repository for easier collaboration. You&#39;ll learn how to protect your code, prepare for collaboration, and foster healthy growth in your projects.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you", "created": "2025-12-16T08:44:46Z", "labels": [], "context": "Exercise: Introduction to Repository Management ## Introduction to Repository Management\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @Alvaro-Exposito-MTZ! Welco"}


identifier: gh_issue_3733878476
source: github_issue
status: new
created_at: 2025-12-16 09:25:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3733878476", "title": "Request to patch dependencies to fix CVEs", "url": "https://github.com/prometheus/pushgateway/issues/783", "user": "andthum", "user_url": "https://github.com/andthum", "repo": "pushgateway", "body_preview": "Hi,\n\nOur security scanner finds the following vulnerabilities in our pushgateway container image.\n\nIs it possible for you to upgrade the dependencies to the fixed versions?\n\nThank you!\n\n\n| Vulnerability | Severity | CVSS3 | Package | Current Version | Fixed in version |\n| ------------- | -------- | ----- | ------- | --------------- | ---------------- |\n| [CVE-2025-61729](https://pkg.go.dev/vuln/GO-2025-4155) | Low | N/A | crypto/x509 | 1.25.3 | 1.24.11, 1.25.5 |\n| [CVE-2025-61727](https://pkg.go", "created": "2025-12-16T09:10:17Z", "labels": [], "context": "Request to patch dependencies to fix CVEs Hi,\n\nOur security scanner finds the following vulnerabilities in our pushgateway container image.\n\nIs it possible for you to upgrade the dependencies to the fixed versions?\n\nThank you!\n\n\n| Vulnerabili"}


identifier: gh_issue_3733852919
source: github_issue
status: new
created_at: 2025-12-16 09:25:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3733852919", "title": "Request to patch dependencies to fix CVEs", "url": "https://github.com/openshift/oauth-proxy/issues/340", "user": "andthum", "user_url": "https://github.com/andthum", "repo": "oauth-proxy", "body_preview": "Hi,\n\nOur security scanner finds the following vulnerabilities in our oauth-proxy container image.\n\nIs it possible for you to upgrade the dependencies to the fixed versions?\n\nThank you!\n\n\n| Vulnerability | Severity | CVSS3 | Package | Current Version | Fixed in version |\n| ------------- | -------- | ----- | ------- | --------------- | ---------------- |\n| [CVE-2025-61729](https://pkg.go.dev/vuln/GO-2025-4155) | Low | N/A | crypto/x509 | 1.25.3 | 1.24.11, 1.25.5 |\n| [CVE-2025-61727](https://pkg.go", "created": "2025-12-16T09:03:29Z", "labels": [], "context": "Request to patch dependencies to fix CVEs Hi,\n\nOur security scanner finds the following vulnerabilities in our oauth-proxy container image.\n\nIs it possible for you to upgrade the dependencies to the fixed versions?\n\nThank you!\n\n\n| Vulnerabili"}


identifier: gh_issue_3733940355
source: github_issue
status: new
created_at: 2025-12-16 09:25:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3733940355", "title": "CRA: Snyk High+ findings (69685d3)", "url": "https://github.com/WaddenSeaSolutions/KlinikBookingSystem/issues/2", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "KlinikBookingSystem", "body_preview": "## Awareness\n- Awareness time (UTC): 2025-12-16T09:25:13.936Z\n- Source: Snyk (CI pipeline)\n- Actively exploited? (yes/no/unknown): unknown\n\n## Product info\n- Repo: WaddenSeaSolutions/KlinikBookingSystem\n- Commit: 69685d379240b44d29fb089780ab3677b05cd84a\n- Workflow run: 20262892051\n\n## Vulnerability\n- Summary: High/Critical vulnerabilities detected by Snyk (see Code Scanning alerts + Snyk output)\n\n## Mitigation / Fix plan\n- Owner:\n- ETA fix:\n- Workaround:\n\n## CRA reporting deadlines\n- Early warni", "created": "2025-12-16T09:25:14Z", "labels": ["security", "snyk", "cra-reporting"], "context": "CRA: Snyk High+ findings (69685d3) ## Awareness\n- Awareness time (UTC): 2025-12-16T09:25:13.936Z\n- Source: Snyk (CI pipeline)\n- Actively exploited? (yes/no/unknown): unknown\n\n## Product info\n- Repo: WaddenSeaSolutions/KlinikBookingSyst"}


identifier: gh_issue_3733880137
source: github_issue
status: new
created_at: 2025-12-16 09:25:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3733880137", "title": "CRA: Snyk High+ findings (6b961a4)", "url": "https://github.com/WaddenSeaSolutions/KlinikBookingSystem/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "KlinikBookingSystem", "body_preview": "## Awareness\n- Awareness time (UTC): 2025-12-16T09:10:39.843Z\n- Source: Snyk (CI pipeline)\n- Actively exploited? (yes/no/unknown): unknown\n\n## Product info\n- Repo: WaddenSeaSolutions/KlinikBookingSystem\n- Commit: 6b961a4df09d36c50e4746384d16cced43cd876e\n- Workflow run: 20262467133\n\n## Vulnerability\n- Summary: High/Critical vulnerabilities detected by Snyk (see Code Scanning alerts + Snyk output)\n\n## Mitigation / Fix plan\n- Owner:\n- ETA fix:\n- Workaround:\n\n## CRA reporting deadlines\n- Early warni", "created": "2025-12-16T09:10:40Z", "labels": ["security", "snyk", "cra-reporting"], "context": "CRA: Snyk High+ findings (6b961a4) ## Awareness\n- Awareness time (UTC): 2025-12-16T09:10:39.843Z\n- Source: Snyk (CI pipeline)\n- Actively exploited? (yes/no/unknown): unknown\n\n## Product info\n- Repo: WaddenSeaSolutions/KlinikBookingSyst"}


identifier: gh_issue_3733867538
source: github_issue
status: new
created_at: 2025-12-16 09:25:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3733867538", "title": "Dependency Dashboard", "url": "https://github.com/rhtap-perf-test/konflux-probe-test-templates/issues/15", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "konflux-probe-test-templates", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - [ ] <!-- create-config-migration-pr --> Select this checkbox to let Renovate create an automated Config Migration PR.\n\n## Repository Problems\n\nRenovate tried to run on this repository, but found these problems.\n\n - \u26a0\ufe0f WARN: Found renovate config warnings\n - \u26a0\ufe0f WARN: Cannot access vulnerability alerts", "created": "2025-12-16T09:07:33Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n - ["}


identifier: gh_issue_3733979930
source: github_issue
status: new
created_at: 2025-12-16 09:37:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3733979930", "title": "[MEDIUM] Security Vulnerability in connect", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/2650", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2013-7371\n\n**Description:**\nnode-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2013-7371\\\"],\\\"published\\\":\\\"2019-12-11T15:15:13.667\\\",\\\"lastModified\\\":\\\"2024-11-21T02:00:51.757\\\",\\\"version\\\":\\\"3.1\\\",\\\"ve", "created": "2025-12-16T09:36:35Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in connect ## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2013-7371\n\n**Description:**\nnode-connects before 2.8.2"}


identifier: gh_issue_3733968283
source: github_issue
status: new
created_at: 2025-12-16 09:37:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3733968283", "title": "[MEDIUM] Security Vulnerability in connect", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/2563", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2013-7371\n\n**Description:**\nnode-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2013-7371\\\"],\\\"published\\\":\\\"2019-12-11T15:15:13.667\\\",\\\"lastModified\\\":\\\"2024-11-21T02:00:51.757\\\",\\\"version\\\":\\\"3.1\\\",\\\"ve", "created": "2025-12-16T09:33:28Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in connect ## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2013-7371\n\n**Description:**\nnode-connects before 2.8.2"}


identifier: gh_issue_3733959928
source: github_issue
status: new
created_at: 2025-12-16 09:37:12
data:
  {"source": "github_issue", "identifier": "gh_issue_3733959928", "title": "[MEDIUM] Security Vulnerability in connect", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/2493", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2013-7371\n\n**Description:**\nnode-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2013-7371\\\"],\\\"published\\\":\\\"2019-12-11T15:15:13.667\\\",\\\"lastModified\\\":\\\"2024-11-21T02:00:51.757\\\",\\\"version\\\":\\\"3.1\\\",\\\"ve", "created": "2025-12-16T09:31:01Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in connect ## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2013-7371\n\n**Description:**\nnode-connects before 2.8.2"}


identifier: gh_issue_3733982427
source: github_issue
status: new
created_at: 2025-12-16 09:37:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3733982427", "title": "[MEDIUM] Security Vulnerability in connect", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/2669", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-30314\n\n**Description:**\nAdobe Connect versions 12.8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\n### ", "created": "2025-12-16T09:37:13Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in connect ## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-30314\n\n**Description:**\nAdobe Connect versions 12"}


identifier: gh_issue_3733982157
source: github_issue
status: new
created_at: 2025-12-16 09:37:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3733982157", "title": "[MEDIUM] Security Vulnerability in connect", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/2668", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2018-4921\n\n**Description:**\nAdobe Connect versions 9.7 and earlier have an exploitable unrestricted SWF file upload vulnerability. Successful exploitation could lead to information disclosure.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2018-4921\\\"],\\\"published\\\":\\\"2018-05-19T17:29:00.727\\\",\\\"lastModified\\\":\\\"2024-11-21T04:07:43.000\\\",\\", "created": "2025-12-16T09:37:10Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in connect ## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2018-4921\n\n**Description:**\nAdobe Connect versions 9.7"}


identifier: gh_issue_3733982016
source: github_issue
status: new
created_at: 2025-12-16 09:37:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3733982016", "title": "[MEDIUM] Security Vulnerability in connect", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/2667", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-36063\n\n**Description:**\nAdobe Connect version 11.2.2 (and earlier) is affected by a Reflected Cross-site Scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field.\n\n### M", "created": "2025-12-16T09:37:07Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in connect ## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-36063\n\n**Description:**\nAdobe Connect version 11."}


identifier: gh_issue_3733981872
source: github_issue
status: new
created_at: 2025-12-16 09:37:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3733981872", "title": "[MEDIUM] Security Vulnerability in connect", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/2666", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-54043\n\n**Description:**\nAdobe Connect versions 12.6, 11.4.7 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an unauthenticated attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.\n\n### Metadat", "created": "2025-12-16T09:37:05Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in connect ## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-54043\n\n**Description:**\nAdobe Connect versions 12"}


identifier: gh_issue_3733981853
source: github_issue
status: new
created_at: 2025-12-16 09:37:16
data:
  {"source": "github_issue", "identifier": "gh_issue_3733981853", "title": "[MEDIUM] Security Vulnerability in connect", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/2665", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-36061\n\n**Description:**\nAdobe Connect version 11.2.2 (and earlier) is affected by a secure design principles violation vulnerability via the 'pbMode' parameter. An unauthenticated attacker could leverage this vulnerability to edit or delete recordings on the Connect environment. Exploitation of this issue requires user interaction in that a victim", "created": "2025-12-16T09:37:04Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in connect ## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-36061\n\n**Description:**\nAdobe Connect version 11."}


identifier: gh_issue_3734014300
source: github_issue
status: new
created_at: 2025-12-16 09:49:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3734014300", "title": "[MEDIUM] Security Vulnerability in connect", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/2888", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2013-7371\n\n**Description:**\nnode-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2013-7371\\\"],\\\"published\\\":\\\"2019-12-11T15:15:13.667\\\",\\\"lastModified\\\":\\\"2024-11-21T02:00:51.757\\\",\\\"version\\\":\\\"3.1\\\",\\\"ve", "created": "2025-12-16T09:45:06Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in connect ## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2013-7371\n\n**Description:**\nnode-connects before 2.8.2"}


identifier: gh_issue_3733997820
source: github_issue
status: new
created_at: 2025-12-16 09:49:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3733997820", "title": "[MEDIUM] Security Vulnerability in connect", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/2785", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2013-7371\n\n**Description:**\nnode-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2013-7371\\\"],\\\"published\\\":\\\"2019-12-11T15:15:13.667\\\",\\\"lastModified\\\":\\\"2024-11-21T02:00:51.757\\\",\\\"version\\\":\\\"3.1\\\",\\\"ve", "created": "2025-12-16T09:41:19Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in connect ## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2013-7371\n\n**Description:**\nnode-connects before 2.8.2"}


identifier: gh_issue_3733987038
source: github_issue
status: new
created_at: 2025-12-16 09:49:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3733987038", "title": "[MEDIUM] Security Vulnerability in connect", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/2706", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2013-7371\n\n**Description:**\nnode-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2013-7371\\\"],\\\"published\\\":\\\"2019-12-11T15:15:13.667\\\",\\\"lastModified\\\":\\\"2024-11-21T02:00:51.757\\\",\\\"version\\\":\\\"3.1\\\",\\\"ve", "created": "2025-12-16T09:38:26Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in connect ## Security Vulnerability Detected\n\n**Dependency:** `connect`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2013-7371\n\n**Description:**\nnode-connects before 2.8.2"}


identifier: gh_issue_3733969434
source: github_issue
status: new
created_at: 2025-12-16 09:49:23
data:
  {"source": "github_issue", "identifier": "gh_issue_3733969434", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/JWB9000/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @JWB9000! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate your", "created": "2025-12-16T09:33:49Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @JWB9000! Welcome to your Skills exercise!"}


identifier: gh_issue_3733913088
source: github_issue
status: new
created_at: 2025-12-16 10:02:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3733913088", "title": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected", "url": "https://github.com/truckercore/truckercore1/issues/145", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "truckercore1", "body_preview": "# Security Audit Report - 2025-12-16\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/util vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-9j5q-479x-43g2\nfix available via `npm audit fix --force`\nWill install @stryker-mutator/vitest-runner@8.7.1, which is outside the stated dependency range\nnode_modules/@stryker-mutator/util\n  @stryker-mutator/core  <=8.7.0\n  D", "created": "2025-12-16T09:18:40Z", "labels": ["security", "dependencies", "automated"], "context": "\ud83d\udea8 Security Alert: 1 Critical, 25 High Vulnerabilities Detected # Security Audit Report - 2025-12-16\n\n## Summary\n- \ud83d\udd34 Critical: 1\n- \ud83d\udfe0 High: 25\n- \ud83d\udfe1 Moderate: 32\n- \ud83d\udfe2 Low: 6\n\n## Details\n# npm audit report\n\n@stryker-mutator/util  <8.7.1\nSeverity: high\n@stryker-mutator/"}


identifier: gh_issue_3733918734
source: github_issue
status: new
created_at: 2025-12-16 10:15:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3733918734", "title": "implement npm script allowlist", "url": "https://github.com/ministryofjustice/moj-frontend/issues/2083", "user": "chrispymm", "user_url": "https://github.com/chrispymm", "repo": "moj-frontend", "body_preview": "## What\n\nImplement the HMPPS npm script allowlist package into the project\nhttps://github.com/ministryofjustice/hmpps-typescript-lib/tree/main/packages/npm-script-allowlist\n\n## Why\n\nWith several npm supply chain attacks recently that relied on install or postinstall scripts. This tool from HMPPS disables npm scripts on npm install and then implements an allowlist and a blocklist for scripts that are allowed to run.  This increases security, and ensures untrusted scripts are not run on install.\n\n", "created": "2025-12-16T09:20:03Z", "labels": ["dependencies", "security"], "context": "implement npm script allowlist ## What\n\nImplement the HMPPS npm script allowlist package into the project\nhttps://github.com/ministryofjustice/hmpps-typescript-lib/tree/main/packages/npm-script-allowlist\n\n## Why\n\nWith several npm s"}


identifier: gh_issue_3734057336
source: github_issue
status: new
created_at: 2025-12-16 10:15:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3734057336", "title": "Update mongo-driver to v2 to resolve CVE-2024-45337 (crypto v0.26.0 vulnerability)", "url": "https://github.com/go-openapi/strfmt/issues/191", "user": "khybort", "user_url": "https://github.com/khybort", "repo": "strfmt", "body_preview": "## Summary\n\nThe current `strfmt` package depends on `go.mongodb.org/mongo-driver v1.17.6`, which references `golang.org/x/crypto v0.26.0`. This version is affected by **CVE-2024-45337** (CVSS 9.1 Critical - SSH authorization bypass vulnerability).\n\nWhile Go's MVS (Minimum Version Selection) resolves to newer crypto versions when users have direct requirements, many security scanning tools (Vanta, Snyk, Trivy, etc.) flag the v0.26.0 reference in the dependency graph as a vulnerability, causing fa", "created": "2025-12-16T09:56:11Z", "labels": [], "context": "Update mongo-driver to v2 to resolve CVE-2024-45337 (crypto v0.26.0 vulnerability) ## Summary\n\nThe current `strfmt` package depends on `go.mongodb.org/mongo-driver v1.17.6`, which references `golang.org/x/crypto v0.26.0`. This version is affected by **CVE-2024-45337** (CVSS 9.1 Crit"}


identifier: gh_issue_3734174444
source: github_issue
status: new
created_at: 2025-12-16 10:28:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3734174444", "title": "[MEDIUM] Security Vulnerability in clone", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3234", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `clone`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-43297\n\n**Description:**\nMissing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through 2.4.5.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2024-43297\\\"],\\\"published\\\":\\\"2024-11-01T15:15:46.007\\\",\\\"lastModified\\\":\\\"2024-11-13T01:19:", "created": "2025-12-16T10:28:38Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in clone ## Security Vulnerability Detected\n\n**Dependency:** `clone`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-43297\n\n**Description:**\nMissing Authorization vulne"}


identifier: gh_issue_3734174277
source: github_issue
status: new
created_at: 2025-12-16 10:28:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3734174277", "title": "[HIGH] Security Vulnerability in clone", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3233", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `clone`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2023-6750\n\n**Description:**\nThe Clone WordPress plugin before 2.4.3 uses buffer files to store in-progress backup informations, which is stored at a publicly accessible, statically defined file path.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2023-6750\\\"],\\\"published\\\":\\\"2024-01-08T19:15:10.680\\\",\\\"lastModified\\\":\\\"2024-11-21T08:44:28.897\\", "created": "2025-12-16T10:28:34Z", "labels": [], "context": "[HIGH] Security Vulnerability in clone ## Security Vulnerability Detected\n\n**Dependency:** `clone`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2023-6750\n\n**Description:**\nThe Clone WordPress plugin bef"}


identifier: gh_issue_3734174249
source: github_issue
status: new
created_at: 2025-12-16 10:28:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3734174249", "title": "[MEDIUM] Security Vulnerability in clone", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3232", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `clone`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2023-0958\n\n**Description:**\nSeveral plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. This makes it possible for authenticated attackers with minimal permissions, such as su", "created": "2025-12-16T10:28:34Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in clone ## Security Vulnerability Detected\n\n**Dependency:** `clone`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2023-0958\n\n**Description:**\nSeveral plugins for WordPres"}


identifier: gh_issue_3734173873
source: github_issue
status: new
created_at: 2025-12-16 10:28:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3734173873", "title": "[MEDIUM] Security Vulnerability in clone", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3231", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `clone`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-43298\n\n**Description:**\nMissing Authorization vulnerability in Migrate Clone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Clone: from n/a through 2.4.5.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2024-43298\\\"],\\\"published\\\":\\\"2024-11-01T15:15:46.227\\\",\\\"lastModified\\\":\\\"2024-11-13T01:19:", "created": "2025-12-16T10:28:32Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in clone ## Security Vulnerability Detected\n\n**Dependency:** `clone`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-43298\n\n**Description:**\nMissing Authorization vulne"}


identifier: gh_issue_3734173772
source: github_issue
status: new
created_at: 2025-12-16 10:28:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3734173772", "title": "[HIGH] Security Vulnerability in runtime", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3230", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `runtime`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-2026\n\n**Description:**\nA malicious guest compromised before a container creation (e.g. a malicious guest image or a guest running multiple containers) can trick the kata runtime into mounting the untrusted container filesystem on any host path, potentially allowing for code execution on the host. This issue affects: Kata Containers 1.11 versions ear", "created": "2025-12-16T10:28:31Z", "labels": [], "context": "[HIGH] Security Vulnerability in runtime ## Security Vulnerability Detected\n\n**Dependency:** `runtime`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-2026\n\n**Description:**\nA malicious guest compromise"}


identifier: gh_issue_3734161379
source: github_issue
status: new
created_at: 2025-12-16 10:28:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3734161379", "title": "Weekly Activity: 2025-12-02 to 2025-12-16", "url": "https://github.com/thomasdavis/lordajax.com/issues/33", "user": "thomasdavis", "user_url": "https://github.com/thomasdavis", "repo": "lordajax.com", "body_preview": "# Weekly GitHub Activity Blog Post Request\n\n_Activity data is split across comments below due to size. Full instructions for @claude will be posted in the final comment._", "created": "2025-12-16T10:24:53Z", "labels": ["blog-post", "automated"], "context": "Weekly Activity: 2025-12-02 to 2025-12-16 # Weekly GitHub Activity Blog Post Request\n\n_Activity data is split across comments below due to size. Full instructions for @claude will be posted in the final comment._"}


identifier: gh_issue_3734108122
source: github_issue
status: new
created_at: 2025-12-16 10:28:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3734108122", "title": "Weekly Activity: 2025-12-02 to 2025-12-16", "url": "https://github.com/thomasdavis/lordajax.com/issues/31", "user": "thomasdavis", "user_url": "https://github.com/thomasdavis", "repo": "lordajax.com", "body_preview": "# Weekly GitHub Activity Blog Post Request\n\n_Activity data is split across comments below due to size. Full instructions for @claude will be posted in the final comment._", "created": "2025-12-16T10:09:59Z", "labels": ["blog-post", "automated"], "context": "Weekly Activity: 2025-12-02 to 2025-12-16 # Weekly GitHub Activity Blog Post Request\n\n_Activity data is split across comments below due to size. Full instructions for @claude will be posted in the final comment._"}


identifier: gh_issue_3734093820
source: github_issue
status: new
created_at: 2025-12-16 10:28:45
data:
  {"source": "github_issue", "identifier": "gh_issue_3734093820", "title": "Unable to resolve dependency 'chocolatey-core.extension'", "url": "https://github.com/chocolatey/choco/issues/3827", "user": "HarshadDGhorpade-eaton", "user_url": "https://github.com/HarshadDGhorpade-eaton", "repo": "choco", "body_preview": "### Checklist\n\n- [x] I confirm there are no unresolved issues reported on the [Chocolatey Status page](https://status.chocolatey.org).\n- [x] I have verified this is the correct repository for opening this issue.\n- [x] I have verified no other issues exist related to my problem.\n- [x] I have verified this is not an issue for a specific package.\n- [x] I have verified this issue is not security related.\n- [x] I confirm I am using **official**, and **not** unofficial, or modified, Chocolatey product", "created": "2025-12-16T10:06:06Z", "labels": ["Bug"], "context": "Unable to resolve dependency 'chocolatey-core.extension' ### Checklist\n\n- [x] I confirm there are no unresolved issues reported on the [Chocolatey Status page](https://status.chocolatey.org).\n- [x] I have verified this is the correct repository for opening "}


identifier: gh_issue_3734211027
source: github_issue
status: new
created_at: 2025-12-16 10:40:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3734211027", "title": "Weekly Activity: 2025-12-02 to 2025-12-16", "url": "https://github.com/thomasdavis/lordajax.com/issues/35", "user": "thomasdavis", "user_url": "https://github.com/thomasdavis", "repo": "lordajax.com", "body_preview": "# Weekly GitHub Activity Blog Post Request\n\n_Activity data is split across comments below due to size. Full instructions for @claude will be posted in the final comment._", "created": "2025-12-16T10:39:03Z", "labels": ["blog-post", "automated"], "context": "Weekly Activity: 2025-12-02 to 2025-12-16 # Weekly GitHub Activity Blog Post Request\n\n_Activity data is split across comments below due to size. Full instructions for @claude will be posted in the final comment._"}


identifier: gh_issue_3734200501
source: github_issue
status: new
created_at: 2025-12-16 10:52:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3734200501", "title": "Fix security vulnerabilities from code scanning", "url": "https://github.com/ktenman/portfolio/issues/1078", "user": "ktenman", "user_url": "https://github.com/ktenman", "repo": "portfolio", "body_preview": "## Summary\n\nThis PR addresses security vulnerabilities identified by GitHub code scanning.\n\n### Fixed Issues\n\n1. **js/http-to-file-access (Alert #993)** - Fixed by converting cookie handling from file-based to header-based approach in `cloudflare-bypass-proxy/src/adapters/fetch.ts`\n   - Previously: Network-provided cookies were written to temporary files\n   - Now: Cookies are parsed and passed directly via HTTP Cookie header\n   - This eliminates the untrusted data \u2192 file system write vulnerabili", "created": "2025-12-16T10:35:59Z", "labels": [], "context": "Fix security vulnerabilities from code scanning ## Summary\n\nThis PR addresses security vulnerabilities identified by GitHub code scanning.\n\n### Fixed Issues\n\n1. **js/http-to-file-access (Alert #993)** - Fixed by converting cookie handling from file"}


identifier: gh_issue_3734191118
source: github_issue
status: new
created_at: 2025-12-16 10:52:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3734191118", "title": "[HIGH] Security Vulnerability in express", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3369", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-24999\n\n**Description:**\nqs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an __ proto__ key can be used. In many typical Express use cases, an unauthenticated remote attacker can place the attack payload in the query string of the URL that is used t", "created": "2025-12-16T10:33:18Z", "labels": [], "context": "[HIGH] Security Vulnerability in express ## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-24999\n\n**Description:**\nqs before 6.10.3, as used i"}


identifier: gh_issue_3734190913
source: github_issue
status: new
created_at: 2025-12-16 10:52:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3734190913", "title": "[HIGH] Security Vulnerability in express", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3367", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-24999\n\n**Description:**\nqs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an __ proto__ key can be used. In many typical Express use cases, an unauthenticated remote attacker can place the attack payload in the query string of the URL that is used t", "created": "2025-12-16T10:33:15Z", "labels": [], "context": "[HIGH] Security Vulnerability in express ## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-24999\n\n**Description:**\nqs before 6.10.3, as used i"}


identifier: gh_issue_3734190540
source: github_issue
status: new
created_at: 2025-12-16 10:52:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3734190540", "title": "[HIGH] Security Vulnerability in express", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3363", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-24999\n\n**Description:**\nqs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an __ proto__ key can be used. In many typical Express use cases, an unauthenticated remote attacker can place the attack payload in the query string of the URL that is used t", "created": "2025-12-16T10:33:08Z", "labels": [], "context": "[HIGH] Security Vulnerability in express ## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-24999\n\n**Description:**\nqs before 6.10.3, as used i"}


identifier: gh_issue_3734189987
source: github_issue
status: new
created_at: 2025-12-16 10:52:36
data:
  {"source": "github_issue", "identifier": "gh_issue_3734189987", "title": "[HIGH] Security Vulnerability in express", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3359", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-24999\n\n**Description:**\nqs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for an Express application because an __ proto__ key can be used. In many typical Express use cases, an unauthenticated remote attacker can place the attack payload in the query string of the URL that is used t", "created": "2025-12-16T10:32:59Z", "labels": [], "context": "[HIGH] Security Vulnerability in express ## Security Vulnerability Detected\n\n**Dependency:** `express`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2022-24999\n\n**Description:**\nqs before 6.10.3, as used i"}


identifier: gh_issue_3734218377
source: github_issue
status: new
created_at: 2025-12-16 10:52:40
data:
  {"source": "github_issue", "identifier": "gh_issue_3734218377", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/pxm810/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @pxm810! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll", "created": "2025-12-16T10:40:58Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @pxm810! Welcome to you"}


identifier: gh_issue_3734203458
source: github_issue
status: new
created_at: 2025-12-16 11:04:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3734203458", "title": "[HIGH] Security Vulnerability in lodash", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3466", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `lodash`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-23337\n\n**Description:**\nLodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2021-23337\\\"],\\\"published\\\":\\\"2021-02-15T13:15:12.560\\\",\\\"lastModified\\\":\\\"2024-11-21T05:51:31.643\\\",\\\"version\\\":\\\"3.1\\\",\\\"vectorString\\\":\\\"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U", "created": "2025-12-16T10:36:52Z", "labels": [], "context": "[HIGH] Security Vulnerability in lodash ## Security Vulnerability Detected\n\n**Dependency:** `lodash`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2021-23337\n\n**Description:**\nLodash versions prior to 4.1"}


identifier: gh_issue_3734203303
source: github_issue
status: new
created_at: 2025-12-16 11:04:14
data:
  {"source": "github_issue", "identifier": "gh_issue_3734203303", "title": "[HIGH] Security Vulnerability in lodash", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3465", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `lodash`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-8203\n\n**Description:**\nPrototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2020-8203\\\"],\\\"published\\\":\\\"2020-07-15T17:15:11.797\\\",\\\"lastModified\\\":\\\"2024-11-21T05:38:29.790\\\",\\\"version\\\":\\\"3.1\\\",\\\"vectorString\\\":\\\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H\\\",\\\"b", "created": "2025-12-16T10:36:49Z", "labels": [], "context": "[HIGH] Security Vulnerability in lodash ## Security Vulnerability Detected\n\n**Dependency:** `lodash`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-8203\n\n**Description:**\nPrototype pollution attack wh"}


identifier: gh_issue_3734203272
source: github_issue
status: new
created_at: 2025-12-16 11:04:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3734203272", "title": "[MEDIUM] Security Vulnerability in lodash", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3464", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `lodash`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2019-1010266\n\n**Description:**\nlodash prior to 4.17.11 is affected by: CWE-400: Uncontrolled Resource Consumption. The impact is: Denial of service. The component is: Date handler. The attack vector is: Attacker provides very long strings, which the library attempts to match using a regular expression. The fixed version is: 4.17.11.\n\n### Metadata\n```jso", "created": "2025-12-16T10:36:48Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in lodash ## Security Vulnerability Detected\n\n**Dependency:** `lodash`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2019-1010266\n\n**Description:**\nlodash prior to 4.17.11 "}


identifier: gh_issue_3734203113
source: github_issue
status: new
created_at: 2025-12-16 11:04:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3734203113", "title": "[CRITICAL] Security Vulnerability in lodash", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3463", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `lodash`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2019-10744\n\n**Description:**\nVersions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2019-10744\\\"],\\\"published\\\":\\\"2019-07-26T00:15:11.217\\\",\\\"l", "created": "2025-12-16T10:36:45Z", "labels": [], "context": "[CRITICAL] Security Vulnerability in lodash ## Security Vulnerability Detected\n\n**Dependency:** `lodash`\n**Criticality:** CRITICAL (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2019-10744\n\n**Description:**\nVersions of lodash lower"}


identifier: gh_issue_3734202950
source: github_issue
status: new
created_at: 2025-12-16 11:04:15
data:
  {"source": "github_issue", "identifier": "gh_issue_3734202950", "title": "[MEDIUM] Security Vulnerability in elliptic", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3462", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `elliptic`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-28498\n\n**Description:**\nThe package elliptic before 6.5.4 are vulnerable to Cryptographic Issues via the secp256k1 implementation in elliptic/ec/key.js. There is no check to confirm that the public key point passed into the derive function actually exists on the secp256k1 curve. This results in the potential for the private key used in this imple", "created": "2025-12-16T10:36:42Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in elliptic ## Security Vulnerability Detected\n\n**Dependency:** `elliptic`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2020-28498\n\n**Description:**\nThe package elliptic bef"}


identifier: gh_issue_3734145117
source: github_issue
status: new
created_at: 2025-12-16 11:17:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3734145117", "title": "Ink-Triage Application - Complete Refactoring & Enhancement Plan", "url": "https://github.com/metanull/appscan-client/issues/34", "user": "metanull", "user_url": "https://github.com/metanull", "repo": "appscan-client", "body_preview": "# Ink-Triage Application - Complete Refactoring & Enhancement Plan\n\n> **Objective**: Consolidate the application into a single unified npm package with dual-mode operation (CLI + TUI), modernized UX, and clean architecture following best practices.\n\n---\n\n## Table of Contents\n1. [Phase 1: Project Restructuring](#phase-1-project-restructuring)\n2. [Phase 2: Core Infrastructure](#phase-2-core-infrastructure)\n3. [Phase 3: UI Architecture Overhaul](#phase-3-ui-architecture-overhaul)\n4. [Phase 4: Keybo", "created": "2025-12-16T10:20:20Z", "labels": [], "context": "Ink-Triage Application - Complete Refactoring & Enhancement Plan # Ink-Triage Application - Complete Refactoring & Enhancement Plan\n\n> **Objective**: Consolidate the application into a single unified npm package with dual-mode operation (CLI + TUI), modernized UX, "}


identifier: gh_issue_3734334467
source: github_issue
status: new
created_at: 2025-12-16 11:17:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3734334467", "title": "[MEDIUM] Security Vulnerability in send", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3640", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `send`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2015-8859\n\n**Description:**\nThe send package before 0.11.1 for Node.js allows attackers to obtain the root path via unspecified vectors.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2015-8859\\\"],\\\"published\\\":\\\"2017-01-23T21:59:00.657\\\",\\\"lastModified\\\":\\\"2025-04-20T01:37:25.860\\\",\\\"version\\\":\\\"3.1\\\",\\\"vectorString\\\":\\\"CVSS:3.1/AV:N/AC:L/PR", "created": "2025-12-16T11:13:10Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in send ## Security Vulnerability Detected\n\n**Dependency:** `send`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2015-8859\n\n**Description:**\nThe send package before 0.11."}


identifier: gh_issue_3734334318
source: github_issue
status: new
created_at: 2025-12-16 11:17:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3734334318", "title": "[HIGH] Security Vulnerability in sassdoc-extras", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3639", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `sassdoc-extras`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-57326\n\n**Description:**\nA Prototype Pollution vulnerability in the byGroupAndType function of sassdoc-extras v2.5.1 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2025-5", "created": "2025-12-16T11:13:07Z", "labels": [], "context": "[HIGH] Security Vulnerability in sassdoc-extras ## Security Vulnerability Detected\n\n**Dependency:** `sassdoc-extras`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-57326\n\n**Description:**\nA Prototype Pollutio"}


identifier: gh_issue_3734334150
source: github_issue
status: new
created_at: 2025-12-16 11:17:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3734334150", "title": "[MEDIUM] Security Vulnerability in send", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3638", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `send`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-43799\n\n**Description:**\nSend is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect() which executes untrusted code. This issue is patched in send 0.19.0.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2024-43799\\\"],\\\"published\\\":\\\"2024-09-10T15:15:17.727\\\",\\\"last", "created": "2025-12-16T11:13:04Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in send ## Security Vulnerability Detected\n\n**Dependency:** `send`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2024-43799\n\n**Description:**\nSend is a library for stream"}


identifier: gh_issue_3734333978
source: github_issue
status: new
created_at: 2025-12-16 11:17:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3734333978", "title": "[HIGH] Security Vulnerability in sassdoc-extras", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3637", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `sassdoc-extras`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-57326\n\n**Description:**\nA Prototype Pollution vulnerability in the byGroupAndType function of sassdoc-extras v2.5.1 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2025-5", "created": "2025-12-16T11:13:01Z", "labels": [], "context": "[HIGH] Security Vulnerability in sassdoc-extras ## Security Vulnerability Detected\n\n**Dependency:** `sassdoc-extras`\n**Criticality:** HIGH (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2025-57326\n\n**Description:**\nA Prototype Pollutio"}


identifier: gh_issue_3734333821
source: github_issue
status: new
created_at: 2025-12-16 11:17:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3734333821", "title": "[MEDIUM] Security Vulnerability in send", "url": "https://github.com/Humming-Bird-Alpha-Org/HB-Node-1/issues/3636", "user": "digicert-software-trust-stage[bot]", "user_url": "https://github.com/apps/digicert-software-trust-stage", "repo": "HB-Node-1", "body_preview": "## Security Vulnerability Detected\n\n**Dependency:** `send`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2015-8859\n\n**Description:**\nThe send package before 0.11.1 for Node.js allows attackers to obtain the root path via unspecified vectors.\n\n### Metadata\n```json\n\"{\\\"vulnerabilityIdentifiers\\\":[\\\"CVE-2015-8859\\\"],\\\"published\\\":\\\"2017-01-23T21:59:00.657\\\",\\\"lastModified\\\":\\\"2025-04-20T01:37:25.860\\\",\\\"version\\\":\\\"3.1\\\",\\\"vectorString\\\":\\\"CVSS:3.1/AV:N/AC:L/PR", "created": "2025-12-16T11:12:58Z", "labels": [], "context": "[MEDIUM] Security Vulnerability in send ## Security Vulnerability Detected\n\n**Dependency:** `send`\n**Criticality:** MEDIUM (Score: undefined)\n\n### Vulnerability Details\n**Name:** CVE-2015-8859\n\n**Description:**\nThe send package before 0.11."}


identifier: gh_issue_3734214370
source: github_issue
status: new
created_at: 2025-12-16 11:29:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3734214370", "title": "Uninitialised memory use when Dumping undef'd string", "url": "https://github.com/Perl/perl5/issues/24008", "user": "thesamesam", "user_url": "https://github.com/thesamesam", "repo": "perl5", "body_preview": "**Description**\n\nUninitialised memory use when dumping an undef'd string.\n\nReported by damien on #p5p.\n\n**Steps to Reproduce**\n\n```perl\nuse Devel::Peek;\n\nopen my $fh, '>', \\my $str;\nprint $fh \"xxxxx\";\nundef $str;\nprint $fh \"y\";\nDump($str);\n```\n\n```shell\n$ valgrind --track-origins=yes -q perl a.pl\nSV = PV(0x508cea0) at 0x50c77a8\n  REFCNT = 2\n  FLAGS = (POK,pPOK)\n  PV = 0x518e880 ==2119893== Conditional jump or move depends on uninitialised value(s)\n==2119893==    at 0x4927944: Perl_pv_escape (dum", "created": "2025-12-16T10:39:53Z", "labels": ["Needs Triage"], "context": "Uninitialised memory use when Dumping undef'd string **Description**\n\nUninitialised memory use when dumping an undef'd string.\n\nReported by damien on #p5p.\n\n**Steps to Reproduce**\n\n```perl\nuse Devel::Peek;\n\nopen my $fh, '>', \\my $str;\nprint $fh \"xxxxx\";"}


identifier: gh_issue_3734355982
source: github_issue
status: new
created_at: 2025-12-16 11:41:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3734355982", "title": "Fix CVE-2022-1471", "url": "https://github.com/kangarko/Foundation/issues/384", "user": "supersmiler", "user_url": "https://github.com/supersmiler", "repo": "Foundation", "body_preview": "Please fix this vulnerability. My Maven is reporting that foundation has this vulnerability. https://www.mend.io/vulnerability-database/CVE-2022-1471?utm_source=JetBrains", "created": "2025-12-16T11:19:46Z", "labels": ["improvement"], "context": "Fix CVE-2022-1471 Please fix this vulnerability. My Maven is reporting that foundation has this vulnerability. https://www.mend.io/vulnerability-database/CVE-2022-1471?utm_source=JetBrains"}


identifier: gh_issue_3734342368
source: github_issue
status: new
created_at: 2025-12-16 12:05:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3734342368", "title": "lodash-4.17.21.tgz: 1 vulnerabilities (highest severity is: 9.8)", "url": "https://github.com/shlomi-classic-dev/repo/issues/7", "user": "dev-mend-for-github-com[bot]", "user_url": "https://github.com/apps/dev-mend-for-github-com", "repo": "repo", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>lodash-4.17.21.tgz</b></summary>\n\n<p>Lodash modular utilities.</p>\n<p>Library home page: <a href=\"https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz\">https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz</a></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /node_modules/lodash/package.json</p>\n<p>\n\n\n<p>Found ", "created": "2025-12-16T11:15:37Z", "labels": ["Mend: dependency security vulnerability"], "context": "lodash-4.17.21.tgz: 1 vulnerabilities (highest severity is: 9.8) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>lodash-4.17.21.tgz</b></summary>\n\n<p>Lodash mod"}


identifier: gh_issue_3734521149
source: github_issue
status: new
created_at: 2025-12-16 12:17:44
data:
  {"source": "github_issue", "identifier": "gh_issue_3734521149", "title": "Dependency Dashboard", "url": "https://github.com/jonathanmorley/subway-info/issues/6", "user": "renovate[bot]", "user_url": "https://github.com/apps/renovate", "repo": "subway-info", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/jonathanmorley/subway-info).\n\n## Awaiting Schedule\n\nThe following updates are awaiting their schedule. To get an update now, click on a checkbox below.\n\n - [ ] <!-- unschedule-branch=renovate/lock-file-maintenance -->Lock file maintenance\n\n## Open\n", "created": "2025-12-16T12:09:49Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the M"}


identifier: gh_issue_3734630452
source: github_issue
status: new
created_at: 2025-12-16 12:43:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3734630452", "title": "[\ud83d\udeab Bug] npm run build:test failures", "url": "https://github.com/redhat-developer/vscode-extension-tester/issues/2186", "user": "ssbarnea", "user_url": "https://github.com/ssbarnea", "repo": "vscode-extension-tester", "body_preview": "### Describe the bug\n\nFollowing instructions from Contibuting.md I tried to build the project but failed.\n\n### Steps to reproduce\n\n```Shell\n- clone repo on a new machine\n- run `npm install` (succeeds)\n` run `npm run test:build` and see errors\n```\n\n### Logs\n\n```Shell\n\u276f npm run test:build\n\n> test:build\n> npm run build:changed && npm install --workspace=extester-test && npm test\n\n\n> build:changed\n> lerna run build --since main\n\nlerna notice cli v9.0.1\nlerna verb packageConfigs Resolving packages ba", "created": "2025-12-16T12:40:58Z", "labels": ["bug", "new-issue"], "context": "[\ud83d\udeab Bug] npm run build:test failures ### Describe the bug\n\nFollowing instructions from Contibuting.md I tried to build the project but failed.\n\n### Steps to reproduce\n\n```Shell\n- clone repo on a new machine\n- run `npm install` (succeeds)"}


identifier: gh_issue_3734644882
source: github_issue
status: new
created_at: 2025-12-16 12:55:06
data:
  {"source": "github_issue", "identifier": "gh_issue_3734644882", "title": "Migrate Dependency Track Vulnerability Scanning to Plugin-based Framework with Release-centric Tracking", "url": "https://github.com/sbomify/sbomify/issues/522", "user": "vpetersson", "user_url": "https://github.com/vpetersson", "repo": "sbomify", "body_preview": "## Description\n\nMigrate the existing Dependency Track (DT) vulnerability scanning to the new plugin-based assessment framework (ADR-003), and align with the Release-centric tracking model.\n\n### Background\n\nThe current Dependency Track implementation:\n- Stores results per SBOM in `VulnerabilityScanResult` model\n- Uses `ComponentDependencyTrackMapping` to map sbomify **Component** \u2192 DT Project (1:1)\n- Manages a pool of DT servers via `DependencyTrackServer` model\n- Supports async polling for resul", "created": "2025-12-16T12:45:18Z", "labels": [], "context": "Migrate Dependency Track Vulnerability Scanning to Plugin-based Framework with Release-centric Tracking ## Description\n\nMigrate the existing Dependency Track (DT) vulnerability scanning to the new plugin-based assessment framework (ADR-003), and align with the Release-centric tracking model.\n\n### Backgr"}


identifier: gh_issue_3734620881
source: github_issue
status: new
created_at: 2025-12-16 12:55:06
data:
  {"source": "github_issue", "identifier": "gh_issue_3734620881", "title": "Migrate OSV Vulnerability Scanning to Plugin-based Framework with Release-centric Tracking", "url": "https://github.com/sbomify/sbomify/issues/521", "user": "vpetersson", "user_url": "https://github.com/vpetersson", "repo": "sbomify", "body_preview": "## Description\n\nMigrate the existing OSV vulnerability scanning to the new plugin-based assessment framework (ADR-003), and fundamentally change the tracking model from SBOM-centric to **Release-centric** tracking.\n\n### Background\n\nThe current OSV vulnerability scanning implementation:\n- Stores results per SBOM in `VulnerabilityScanResult` model\n- Focuses primarily on \"latest SBOM per component\"\n- Weekly scans target releases but the model is still SBOM-focused\n- No clear way to track vulnerabil", "created": "2025-12-16T12:38:08Z", "labels": [], "context": "Migrate OSV Vulnerability Scanning to Plugin-based Framework with Release-centric Tracking ## Description\n\nMigrate the existing OSV vulnerability scanning to the new plugin-based assessment framework (ADR-003), and fundamentally change the tracking model from SBOM-centric to **Release-centr"}


identifier: gh_issue_3734717647
source: github_issue
status: new
created_at: 2025-12-16 13:06:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3734717647", "title": "Backend Issues Report", "url": "https://github.com/ogba/ogba/issues/4", "user": "ogba", "user_url": "https://github.com/ogba", "repo": "ogba", "body_preview": "# Comprehensive Backend Issues Report\n\n## RAG-NUSUK-AI - Full Code Audit for 20,000+ Concurrent Users\n\n**Audit Date:** December 15, 2025\n**Total Issues Found:** 127\n**Critical Issues:** 23\n**High Priority:** 41\n**Medium Priority:** 38\n**Low Priority:** 25\n\n---\n\n## Table of Contents\n\n1. [Critical Issues (Must Fix)](#1-critical-issues-must-fix)\n2. [High Priority Issues](#2-high-priority-issues)\n3. [Medium Priority Issues](#3-medium-priority-issues)\n4. [Low Priority Issues](#4-low-priority-issues)\n", "created": "2025-12-16T13:06:16Z", "labels": [], "context": "Backend Issues Report # Comprehensive Backend Issues Report\n\n## RAG-NUSUK-AI - Full Code Audit for 20,000+ Concurrent Users\n\n**Audit Date:** December 15, 2025\n**Total Issues Found:** 127\n**Critical Issues:** 23\n**High Prio"}


identifier: gh_issue_3734668278
source: github_issue
status: new
created_at: 2025-12-16 13:06:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3734668278", "title": "Security Health Check - GOOD (85/100) - 2025-12-16", "url": "https://github.com/Sami9889/Sami.dev-website/issues/184", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/16/2025, 12:51:47 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 7\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Secur", "created": "2025-12-16T12:51:50Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-16 # Security Health Check Report\n\n**Generated:** 12/16/2025, 12:51:47 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security In"}


identifier: gh_issue_3734638075
source: github_issue
status: queued
created_at: 2025-12-16 13:06:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3734638075", "title": "SECURITYINTERNAL-98", "url": "https://github.com/SahanWeerasiri/test-email-automation/issues/126", "user": "SahanWeerasiri", "user_url": "https://github.com/SahanWeerasiri", "repo": "test-email-automation", "body_preview": "## Description\r\n- **SECURITYINTERNAL ID:** `98`\r\n- **Security Advisory ID:** `WSO2-2025-98`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"[WARNING] Critical Security Vulnerability Detected on Your Corporate Account\"` in **security@**.\r\n- **Security Advisory:** [link](https://security-advisory.wso2.com/dashboard/advisory?name=WSO2-2025-98)\r\n- **Progress Progress View:** [link](https://security-advisory.wso2.com/dashboard/advisory/patchProgress?name=WSO2-2025-98)\r\n- **Reporter:** External Reporter\r\n- ", "created": "2025-12-16T12:43:13Z", "labels": ["Reporter/External", "Severity/Low", "Type/Direct-Spam"], "context": "SECURITYINTERNAL-98 ## Description\r\n- **SECURITYINTERNAL ID:** `98`\r\n- **Security Advisory ID:** `WSO2-2025-98`\r\n- **Associated CVE:** N/A \r\n- **Ref:** `\"[WARNING] Critical Security Vulnerability Detected on Your Corpora"}


identifier: gh_issue_3734629004
source: github_issue
status: new
created_at: 2025-12-16 13:06:29
data:
  {"source": "github_issue", "identifier": "gh_issue_3734629004", "title": "Fix 3 security findings on 6 assets (none severity)", "url": "https://github.com/Bajusz15/beacon/issues/22", "user": "Bajusz15", "user_url": "https://github.com/Bajusz15", "repo": "beacon", "body_preview": "Mondoo has assigned this ticket to fix 3 components with critical vulnerabilities on 6 assets. The risk score was evaluated to 100/100\n\nWhy it matters:\n\n- Risk score: 100/100 is critical, [link](https://mondoo.com/docs/platform/security/posture/findings/) for details\n- Risk factors: Known exploited vulnerability (3/3)\n- First detected: October 15, 2025\n- About the Mondoo scoring method: [link](https://mondoo.com/docs/platform/security/posture/findings/)\n\n\n## Apply CVE-2025-6554 on windows\n\nRemed", "created": "2025-12-16T12:40:30Z", "labels": ["mondoo", "security", "vulnerability"], "context": "Fix 3 security findings on 6 assets (none severity) Mondoo has assigned this ticket to fix 3 components with critical vulnerabilities on 6 assets. The risk score was evaluated to 100/100\n\nWhy it matters:\n\n- Risk score: 100/100 is critical, [link](https"}


identifier: gh_issue_3734798619
source: github_issue
status: new
created_at: 2025-12-16 13:42:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3734798619", "title": "Dependabot accesses scoped private npm repositories even for public packages", "url": "https://github.com/dependabot/dependabot-core/issues/13797", "user": "hesselink", "user_url": "https://github.com/hesselink", "repo": "dependabot-core", "body_preview": "### Is there an existing issue for this?\n\n- [x] I have searched the existing issues\n\n### Package ecosystem\n\nnpm\n\n### Package manager version\n\npnpm 10.26.0\n\n### Language version\n\nnode 24.3.0\n\n### Manifest location and content before the Dependabot update\n\nWe have a repository using `pnpm`, with private registries configured for our scopes in our `.npmrc`. We don't want dependabot to upgrade these private packages, so we've excluded them in dependabot's configuration. However, when running, depend", "created": "2025-12-16T13:28:41Z", "labels": ["T: bug \ud83d\udc1e", "L: dart:pub", "L: javascript"], "context": "Dependabot accesses scoped private npm repositories even for public packages ### Is there an existing issue for this?\n\n- [x] I have searched the existing issues\n\n### Package ecosystem\n\nnpm\n\n### Package manager version\n\npnpm 10.26.0\n\n### Language version\n\nnode 24.3.0\n\n### Manif"}


identifier: gh_issue_3734619068
source: github_issue
status: new
created_at: 2025-12-16 13:42:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3734619068", "title": "Next.js version is pinned to 14.x \u2013 upgrade to 15/16 recommended due to recent CVEs", "url": "https://github.com/nextify-limited/saasfly/issues/145", "user": "MrTob", "user_url": "https://github.com/MrTob", "repo": "saasfly", "body_preview": "Hi \ud83d\udc4b,\n\nfirst of all, thank you for this awesome SaaS boilerplate \u2013 great work!\n\nI noticed that the project is currently pinned to Next.js 14.x, while the latest stable release is already Next.js 16.x.\nGiven the recent security advisories / CVEs affecting older Next.js versions, this could become a potential security concern for users who deploy this boilerplate to production.\n\nWhy this matters:\n- Several CVEs have been disclosed in the last months affecting older Next.js releases\n- SaaS boilerpl", "created": "2025-12-16T12:37:38Z", "labels": [], "context": "Next.js version is pinned to 14.x \u2013 upgrade to 15/16 recommended due to recent CVEs Hi \ud83d\udc4b,\n\nfirst of all, thank you for this awesome SaaS boilerplate \u2013 great work!\n\nI noticed that the project is currently pinned to Next.js 14.x, while the latest stable release is already Next.js 16.x."}


identifier: gh_issue_3734519703
source: github_issue
status: new
created_at: 2025-12-16 13:42:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3734519703", "title": "Weekly Activity: 2025-12-02 to 2025-12-16", "url": "https://github.com/thomasdavis/lordajax.com/issues/47", "user": "thomasdavis", "user_url": "https://github.com/thomasdavis", "repo": "lordajax.com", "body_preview": "# Weekly GitHub Activity Blog Post Request\n\n_Activity data is split across comments below due to size. Full instructions will be posted in the final comment._", "created": "2025-12-16T12:09:28Z", "labels": ["blog-post", "automated"], "context": "Weekly Activity: 2025-12-02 to 2025-12-16 # Weekly GitHub Activity Blog Post Request\n\n_Activity data is split across comments below due to size. Full instructions will be posted in the final comment._"}


identifier: gh_issue_3734454132
source: github_issue
status: new
created_at: 2025-12-16 13:42:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3734454132", "title": "Weekly Activity: 2025-12-02 to 2025-12-16", "url": "https://github.com/thomasdavis/lordajax.com/issues/45", "user": "thomasdavis", "user_url": "https://github.com/thomasdavis", "repo": "lordajax.com", "body_preview": "# Weekly GitHub Activity Blog Post Request\n\n_Activity data is split across comments below due to size. Full instructions will be posted in the final comment._", "created": "2025-12-16T11:48:40Z", "labels": ["blog-post", "automated"], "context": "Weekly Activity: 2025-12-02 to 2025-12-16 # Weekly GitHub Activity Blog Post Request\n\n_Activity data is split across comments below due to size. Full instructions will be posted in the final comment._"}


identifier: gh_issue_3734375439
source: github_issue
status: new
created_at: 2025-12-16 13:42:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3734375439", "title": "Weekly Activity: 2025-12-02 to 2025-12-16", "url": "https://github.com/thomasdavis/lordajax.com/issues/43", "user": "thomasdavis", "user_url": "https://github.com/thomasdavis", "repo": "lordajax.com", "body_preview": "# Weekly GitHub Activity Blog Post Request\n\n_Activity data is split across comments below due to size. Full instructions will be posted in the final comment._", "created": "2025-12-16T11:25:12Z", "labels": ["blog-post", "automated"], "context": "Weekly Activity: 2025-12-02 to 2025-12-16 # Weekly GitHub Activity Blog Post Request\n\n_Activity data is split across comments below due to size. Full instructions will be posted in the final comment._"}


identifier: gh_issue_3734880377
source: github_issue
status: new
created_at: 2025-12-16 13:55:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3734880377", "title": "Critical transient vulnerability (React", "url": "https://github.com/likec4/likec4/issues/2470", "user": "jaceks2106foss", "user_url": "https://github.com/jaceks2106foss", "repo": "likec4", "body_preview": "### Relates to\n\nLikeC4 Language\n\n### Version you are using\n\n1.46.0\n\n### Describe the issue\n\nHi,\n\nLatest release package has critical vulnerability, that blocks us from company-internal package management policy. Based on a github reference, I know that you already took care of it, but is it possible to bump it in a reasonable time?\n\n``` sh\n# npm audit report\n\nlikec4  *\nSeverity: critical\nLikeC4 has RCE through vulnerable React and Next.js versions - https://github.com/advisories/GHSA-vr6p-vq2p-6", "created": "2025-12-16T13:51:51Z", "labels": ["bug"], "context": "Critical transient vulnerability (React ### Relates to\n\nLikeC4 Language\n\n### Version you are using\n\n1.46.0\n\n### Describe the issue\n\nHi,\n\nLatest release package has critical vulnerability, that blocks us from company-internal package managem"}


identifier: gh_issue_3734943254
source: github_issue
status: new
created_at: 2025-12-16 14:08:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3734943254", "title": "Fix 3 security findings on 6 assets (none severity)", "url": "https://github.com/Bajusz15/beacon/issues/23", "user": "Bajusz15", "user_url": "https://github.com/Bajusz15", "repo": "beacon", "body_preview": "Mondoo has assigned this ticket to fix 3 components with critical vulnerabilities on 6 assets. The risk score was evaluated to 100/100\n\nWhy it matters:\n\n- Risk score: 100/100 is critical, [link](https://mondoo.com/docs/platform/security/posture/findings/) for details\n- Risk factors: Known exploited vulnerability (3/3)\n- First detected: October 15, 2025\n- About the Mondoo scoring method: [link](https://mondoo.com/docs/platform/security/posture/findings/)\n\n\n## Apply CVE-2025-53786 on windows\n\nReme", "created": "2025-12-16T14:07:34Z", "labels": ["mondoo", "security", "vulnerability"], "context": "Fix 3 security findings on 6 assets (none severity) Mondoo has assigned this ticket to fix 3 components with critical vulnerabilities on 6 assets. The risk score was evaluated to 100/100\n\nWhy it matters:\n\n- Risk score: 100/100 is critical, [link](https"}


identifier: gh_issue_3734627583
source: github_issue
status: new
created_at: 2025-12-16 14:08:30
data:
  {"source": "github_issue", "identifier": "gh_issue_3734627583", "title": "bump glob to fix vulnerability CVE-2025-64756", "url": "https://github.com/nodejs/node/issues/61085", "user": "IlyaBondar", "user_url": "https://github.com/IlyaBondar", "repo": "node", "body_preview": "### Version\n\n24-alpine, 22-alpine\n\n### Platform\n\n```text\nDocker image\n```\n\n### Subsystem\n\n_No response_\n\n### What steps will reproduce the bug?\n\n<img width=\"911\" height=\"896\" alt=\"Image\" src=\"https://github.com/user-attachments/assets/c8a85a3e-e767-4f14-8734-b60e8de8aebf\" />\n\nhttps://hub.docker.com/layers/library/node/24-alpine/images/sha256-9bac428a9b82b7380e6b156585d20b6656a29e6da181477bd480f0b95a566d6c\n\n### How often does it reproduce? Is there a required condition?\n\nalways\n\n### What is the e", "created": "2025-12-16T12:40:02Z", "labels": ["duplicate"], "context": "bump glob to fix vulnerability CVE-2025-64756 ### Version\n\n24-alpine, 22-alpine\n\n### Platform\n\n```text\nDocker image\n```\n\n### Subsystem\n\n_No response_\n\n### What steps will reproduce the bug?\n\n<img width=\"911\" height=\"896\" alt=\"Image\" src=\"https://"}


identifier: gh_issue_3734944464
source: github_issue
status: new
created_at: 2025-12-16 14:19:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3734944464", "title": "Get @claude working on forks", "url": "https://github.com/modelcontextprotocol/registry/issues/853", "user": "tadasant", "user_url": "https://github.com/tadasant", "repo": "registry", "body_preview": "We reverted https://github.com/modelcontextprotocol/registry/pull/851 because we don't want to accidentally run untrusted code (in a fork/PR) that could in theory exfiltrate secrets.\n\nA simple solution when someone has a moment: instead of checking out the fork, check out `main`, run CC there, and pull in the PR as \"code to review\" instead. Might want someone to spend some time thinking through threat vectors here too.\n\nYou can re-use the script from the reverted PR that checks who should be abl", "created": "2025-12-16T14:07:55Z", "labels": [], "context": "Get @claude working on forks We reverted https://github.com/modelcontextprotocol/registry/pull/851 because we don't want to accidentally run untrusted code (in a fork/PR) that could in theory exfiltrate secrets.\n\nA simple solutio"}


identifier: gh_issue_3734733216
source: github_issue
status: new
created_at: 2025-12-16 14:25:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3734733216", "title": "Vulnerabilities Handling for Next.js", "url": "https://github.com/uuaisociety/uuais/issues/34", "user": "adityak714", "user_url": "https://github.com/adityak714", "repo": "uuais", "body_preview": "Possible HTTP requests, when done in a certain way, can cause DOS or Source Code Exposure. \n\nWhat you should do:\n- Update your applications to the latest patched version\n- Even customers who have patched against React2Shell need to upgrade to the latest version. Updates to React2Shell will continue to be posted in the [React2Shell Security Bulletin](https://tracking.inflection.io/02522a2b2726fb0a03bb19f2d8d9524d/gAAAAABpO92tBEKGpKGnDWeaEMt2QcspsXZA_MMq4oWNj3a63WtA1elJo2ZINFdjSZ4ErFIMCgROUnuuhXK9", "created": "2025-12-16T13:10:34Z", "labels": ["bug"], "context": "Vulnerabilities Handling for Next.js Possible HTTP requests, when done in a certain way, can cause DOS or Source Code Exposure. \n\nWhat you should do:\n- Update your applications to the latest patched version\n- Even customers who have patc"}


identifier: gh_issue_3734303715
source: github_issue
status: new
created_at: 2025-12-16 14:25:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3734303715", "title": "Weekly Activity: 2025-12-02 to 2025-12-16", "url": "https://github.com/thomasdavis/lordajax.com/issues/41", "user": "thomasdavis", "user_url": "https://github.com/thomasdavis", "repo": "lordajax.com", "body_preview": "# Weekly GitHub Activity Blog Post Request\n\n_Activity data is split across comments below due to size. Full instructions will be posted in the final comment._", "created": "2025-12-16T11:04:05Z", "labels": ["blog-post", "automated"], "context": "Weekly Activity: 2025-12-02 to 2025-12-16 # Weekly GitHub Activity Blog Post Request\n\n_Activity data is split across comments below due to size. Full instructions will be posted in the final comment._"}


identifier: gh_issue_3733937077
source: github_issue
status: new
created_at: 2025-12-16 14:25:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3733937077", "title": "[HackerNews] React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors", "url": "https://github.com/SecOpsNews/news/issues/61001", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "news", "body_preview": "\n\nThe security vulnerability known as React2Shell is being exploited by threat actors to deliver malware families like KSwapDoor and ZnDoor, according to findings from Palo Alto Networks Unit 42 and NTT Security.\n\"KSwapDoor is a professionally engineered remote access tool designed with stealth in mind,\" Justin Moore, senior manager of threat intel research at Palo Alto Networks Unit 42, said in a\n\n\n\n<https://thehackernews.com/2025/12/react2shell-vulnerability-actively.html>\n\n", "created": "2025-12-16T09:24:25Z", "labels": ["HackerNews"], "context": "[HackerNews] React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors \n\nThe security vulnerability known as React2Shell is being exploited by threat actors to deliver malware families like KSwapDoor and ZnDoor, according to findings from Palo Alto Networks Unit 42 and N"}


identifier: gh_issue_3733263507
source: github_issue
status: new
created_at: 2025-12-16 14:25:09
data:
  {"source": "github_issue", "identifier": "gh_issue_3733263507", "title": "React2Shell malware attack", "url": "https://github.com/vsys-host/shkeeper.io/issues/163", "user": "jeetenkumarsingh", "user_url": "https://github.com/jeetenkumarsingh", "repo": "shkeeper.io", "body_preview": "Please provide patch for React2Shell malware attack.", "created": "2025-12-16T05:32:13Z", "labels": [], "context": "React2Shell malware attack Please provide patch for React2Shell malware attack."}


identifier: gh_issue_3732940774
source: github_issue
status: new
created_at: 2025-12-16 14:25:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3732940774", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-16", "url": "https://github.com/ruohong2018/ruohong2018.github.io/issues/1040", "user": "ruohong2018", "user_url": "https://github.com/ruohong2018", "repo": "ruohong2018.github.io", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-16\uff09\n\n- SecWiki News\n  - [SecWiki News 2025-12-15 Review](http://www.sec-wiki.com/?2025-12-15)\n- Tenable Blog\n  - [Security for AI: How Shadow AI, Platform Risks, and Data Leakage Leave Your Organization Exposed](https://www.tenable.com/blog/security-for-ai-how-shadow-ai-platform-risks-and-data-leakage-leave-your-organization-exposed)\n- Microsoft Security Blog\n  - [Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components](https://www.microsoft.c", "created": "2025-12-16T03:23:54Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-16 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-16\uff09\n\n- SecWiki News\n  - [SecWiki News 2025-12-15 Review](http://www.sec-wiki.com/?2025-12-15)\n- Tenable Blog\n  - [Security for AI: How Shadow AI, Platform Risks, and Data Leakage Leav"}


identifier: gh_issue_3732933461
source: github_issue
status: new
created_at: 2025-12-16 14:25:13
data:
  {"source": "github_issue", "identifier": "gh_issue_3732933461", "title": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-16", "url": "https://github.com/BruceFeIix/picker/issues/2138", "user": "BruceFeIix", "user_url": "https://github.com/BruceFeIix", "repo": "picker", "body_preview": "# \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-16\uff09\n\n- Microsoft Security Blog\n  - [ ] [Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components](https://www.microsoft.com/en-us/security/blog/2025/12/15/defending-against-the-cve-2025-55182-react2shell-vulnerability-in-react-server-components/)\n  - [ ] [Microsoft named an overall leader in KuppingerCole Leadership Compass for Generative AI Defense](https://techcommunity.microsoft.com/blog/microsoft-security-blog/microsoft-named-an-overall-lea", "created": "2025-12-16T03:20:13Z", "labels": ["daily"], "context": "[\u6bcf\u65e5\u4fe1\u606f\u6d41] 2025-12-16 # \u6bcf\u65e5\u5b89\u5168\u8d44\u8baf\uff082025-12-16\uff09\n\n- Microsoft Security Blog\n  - [ ] [Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components](https://www.microsoft.com/en-us/security/blog/2025"}


identifier: gh_issue_3730182482
source: github_issue
status: new
created_at: 2025-12-16 14:25:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3730182482", "title": "Upgrade react-server-dom-webpack from 19.0.1 to 19.0.3: Critical DoS and Source Code Exposure Security Fixes", "url": "https://github.com/shakacode/react_on_rails/issues/2223", "user": "AbanoubGhadban", "user_url": "https://github.com/AbanoubGhadban", "repo": "react_on_rails", "body_preview": "## Summary\n\nThree new security vulnerabilities in React Server Components were disclosed on **December 11, 2025** (after the CVE-2025-55182 RCE fix). These are separate and require upgrading `react-server-dom-webpack` from **19.0.1 \u2192 19.0.3**.\n\n**Status**: All three vulnerabilities are currently unpatched in this project.\n\n---\n\n## Vulnerabilities Requiring Fix\n\n### 1. Denial of Service (DoS) via Infinite Loop - HIGH\n- **CVEs**: [CVE-2025-55184](https://www.cve.org/CVERecord?id=CVE-2025-55184), [", "created": "2025-12-15T12:21:11Z", "labels": [], "context": "Upgrade react-server-dom-webpack from 19.0.1 to 19.0.3: Critical DoS and Source Code Exposure Security Fixes ## Summary\n\nThree new security vulnerabilities in React Server Components were disclosed on **December 11, 2025** (after the CVE-2025-55182 RCE fix). These are separate and require upgrading `react-se"}


identifier: gh_issue_3729872930
source: github_issue
status: new
created_at: 2025-12-16 14:25:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3729872930", "title": "leases-0.0.0.tgz: 11 vulnerabilities (highest severity is: 10.0)", "url": "https://github.com/digitalocean/template-job-manager/issues/121", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "template-job-manager", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>leases-0.0.0.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/digitalocean/template-job-manager/commit/18f3bfba89e43022f6652433d142e10dce2292a0\">18f3bfba89e43022f6652433d142e10dce2292a0</a></p></details>\n\n## Vulnera", "created": "2025-12-15T10:53:27Z", "labels": ["Mend: dependency security vulnerability"], "context": "leases-0.0.0.tgz: 11 vulnerabilities (highest severity is: 10.0) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>leases-0.0.0.tgz</b></summary>\n\n<p></p>\n<p>Path"}


identifier: gh_issue_3729872865
source: github_issue
status: new
created_at: 2025-12-16 14:25:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3729872865", "title": "task-service-0.0.0.tgz: 11 vulnerabilities (highest severity is: 10.0)", "url": "https://github.com/digitalocean/template-job-manager/issues/120", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "template-job-manager", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>task-service-0.0.0.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/digitalocean/template-job-manager/commit/18f3bfba89e43022f6652433d142e10dce2292a0\">18f3bfba89e43022f6652433d142e10dce2292a0</a></p></details>\n\n## V", "created": "2025-12-15T10:53:25Z", "labels": ["Mend: dependency security vulnerability"], "context": "task-service-0.0.0.tgz: 11 vulnerabilities (highest severity is: 10.0) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>task-service-0.0.0.tgz</b></summary>\n\n<p></p>\n<"}


identifier: gh_issue_3725310751
source: github_issue
status: new
created_at: 2025-12-16 14:25:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3725310751", "title": "[2025-12-12] GPT-5.2", "url": "https://github.com/jiacai2050/mofish/issues/1268", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "mofish", "body_preview": "# Hacker News\n\n\n  <details>\n    <summary>\n      <strong>GPT-5.2</strong>\n    </summary>\n\n## OpenAI \u53d1\u5e03 GPT-5.2\uff1a\u66f4\u5f3a\u5927\u7684\u4e13\u4e1a\u77e5\u8bc6\u5de5\u4f5c\u6a21\u578b\n\nOpenAI \u53d1\u5e03\u4e86\u5176\u6700\u65b0\u578b\u53f7 GPT-5.2\uff0c\u65e8\u5728\u63d0\u5347\u4e13\u4e1a\u77e5\u8bc6\u5de5\u4f5c\u7684\u6548\u7387\u548c\u80fd\u529b\u3002\u636e\u62a5\u544a\uff0c\u5e73\u5747 ChatGPT Enterprise \u7528\u6237\u6bcf\u5929\u8282\u7701 40-60 \u5206\u949f\uff0c\u91cd\u5ea6\u7528\u6237\u6bcf\u5468\u53ef\u8282\u7701\u8d85\u8fc7 10 \u5c0f\u65f6\u3002GPT-5.2 \u5728\u521b\u5efa\u7535\u5b50\u8868\u683c\u3001\u5236\u4f5c\u6f14\u793a\u6587\u7a3f\u3001\u7f16\u5199\u4ee3\u7801\u3001\u56fe\u50cf\u8bc6\u522b\u3001\u7406\u89e3\u957f\u6587\u672c\u3001\u4f7f\u7528\u5de5\u5177\u4ee5\u53ca\u5904\u7406\u590d\u6742\u591a\u6b65\u9aa4\u9879\u76ee\u7b49\u65b9\u9762\u5747\u6709\u663e\u8457\u63d0\u5347\u3002\n\n**\u6027\u80fd\u8868\u73b0\uff1a**\n\nGPT-5.2 \u5728\u591a\u4e2a\u57fa\u51c6\u6d4b\u8bd5\u4e2d\u8868\u73b0\u51fa\u8272\uff0c\u5c24\u5176\u662f\u5728 GDPval \u57fa\u51c6\u6d4b\u8bd5\u4e2d\uff0c\u5b83\u5728 44 \u4e2a\u804c\u4e1a\u7684\u77e5\u8bc6\u5de5\u4f5c\u4efb\u52a1\u4e2d\u8d85\u8d8a\u4e86\u884c\u4e1a\u4e13\u4e1a\u4eba\u58eb\u3002\u4e0b\u8868\u5bf9\u6bd4\u4e86 GPT-5.2 \u548c GPT-5.1 \u7684\u6027\u80fd\uff1a\n\n| **GPT-5.2 Thinking** | **GPT-5.1 Thinking** |\n|---|---|\n| GDPval (\u80dc/\u5e73) | 70.9% | 38.8% |\n| SWE-Bench", "created": "2025-12-13T01:45:22Z", "labels": ["posts"], "context": "[2025-12-12] GPT-5.2 # Hacker News\n\n\n  <details>\n    <summary>\n      <strong>GPT-5.2</strong>\n    </summary>\n\n## OpenAI \u53d1\u5e03 GPT-5.2\uff1a\u66f4\u5f3a\u5927\u7684\u4e13\u4e1a\u77e5\u8bc6\u5de5\u4f5c\u6a21\u578b\n\nOpenAI \u53d1\u5e03\u4e86\u5176\u6700\u65b0\u578b\u53f7 GPT-5.2\uff0c\u65e8\u5728\u63d0\u5347\u4e13\u4e1a\u77e5\u8bc6\u5de5\u4f5c\u7684\u6548\u7387\u548c\u80fd\u529b\u3002\u636e\u62a5\u544a\uff0c\u5e73\u5747 ChatGPT Enterprise \u7528\u6237\u6bcf\u5929\u8282\u7701 40"}


identifier: gh_issue_3725027061
source: github_issue
status: new
created_at: 2025-12-16 14:25:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3725027061", "title": "Consider marking npm's next as a directly affected (downstream) package for CVE-2025-55183 / CVE-2025-55184", "url": "https://github.com/google/osv.dev/issues/4485", "user": "fingeromer", "user_url": "https://github.com/fingeromer", "repo": "osv.dev", "body_preview": "I'd like to raise a modeling question regarding CVE-2025-55183 and CVE-2025-55184, [currently associated with the upstream React RSC packages](https://osv.dev/vulnerability/GHSA-925w-6v3x-g4j4) (react-server-dom-*).\n\nIn practice, Next.js is affected even when those packages do not appear as npm dependencies, because Next copies the React Server Components implementation directly into the next package itself ([under next/dist/compiled](https://github.com/vercel/next.js/commit/9a0dc9c#diff-8c7614b", "created": "2025-12-12T22:34:26Z", "labels": [], "context": "Consider marking npm's next as a directly affected (downstream) package for CVE-2025-55183 / CVE-2025-55184 I'd like to raise a modeling question regarding CVE-2025-55183 and CVE-2025-55184, [currently associated with the upstream React RSC packages](https://osv.dev/vulnerability/GHSA-925w-6v3x-g4j4) (react"}


identifier: gh_issue_3720800938
source: github_issue
status: new
created_at: 2025-12-16 14:25:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3720800938", "title": "nextra-theme-docs-4.6.0.tgz: 4 vulnerabilities (highest severity is: 10.0) [main] (unreachable)", "url": "https://github.com/hughcdemocorp-mend-dp/onemcp/issues/37", "user": "renovate[bot]", "user_url": "https://github.com/apps/renovate", "repo": "onemcp", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>nextra-theme-docs-4.6.0.tgz</strong></summary>\n\nA Nextra theme for documentation sites.\n\n\n\n**Path to dependency file:** /docs/package.json\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available | **Reachability** |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- | --- |\n| [ CVE-2025-55182 ](https://www.mend.io/vulnerability-database", "created": "2025-12-11T20:10:13Z", "labels": [], "context": "nextra-theme-docs-4.6.0.tgz: 4 vulnerabilities (highest severity is: 10.0) [main] (unreachable) <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>nextra-theme-docs-4.6.0.tgz</strong></summary>\n\nA Nextra theme for documentation sites.\n\n\n\n**Path to dependency file:** /docs/package.json\n\n\n\n\n</det"}


identifier: gh_issue_3720800890
source: github_issue
status: new
created_at: 2025-12-16 14:25:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3720800890", "title": "nextra-4.6.0.tgz: 5 vulnerabilities (highest severity is: 10.0) [main] (unreachable)", "url": "https://github.com/hughcdemocorp-mend-dp/onemcp/issues/36", "user": "renovate[bot]", "user_url": "https://github.com/apps/renovate", "repo": "onemcp", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>nextra-4.6.0.tgz</strong></summary>\n\nNext.js and MDX based site generator.\n\n\n\n**Path to dependency file:** /docs/package.json\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available | **Reachability** |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- | --- |\n| [ CVE-2025-55182 ](https://www.mend.io/vulnerability-database/CVE-2025-551", "created": "2025-12-11T20:10:12Z", "labels": [], "context": "nextra-4.6.0.tgz: 5 vulnerabilities (highest severity is: 10.0) [main] (unreachable) <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>nextra-4.6.0.tgz</strong></summary>\n\nNext.js and MDX based site generator.\n\n\n\n**Path to dependency file:** /docs/package.json\n\n\n\n\n</details>\n\n\n# Fin"}


identifier: gh_issue_3720800796
source: github_issue
status: new
created_at: 2025-12-16 14:25:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3720800796", "title": "next-15.5.4.tgz: 4 vulnerabilities (highest severity is: 10.0) [main] (unreachable)", "url": "https://github.com/hughcdemocorp-mend-dp/onemcp/issues/33", "user": "renovate[bot]", "user_url": "https://github.com/apps/renovate", "repo": "onemcp", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>next-15.5.4.tgz</strong></summary>\n\nThe React Framework\n\n**Library home page:** [ https://registry.npmjs.org/next/-/next-15.5.4.tgz ](https://registry.npmjs.org/next/-/next-15.5.4.tgz)\n\n**Path to dependency file:** /docs/package.json\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available | **Reachability** |\n| ------------- | ------------- | ---- | --- | ----- | --", "created": "2025-12-11T20:10:10Z", "labels": [], "context": "next-15.5.4.tgz: 4 vulnerabilities (highest severity is: 10.0) [main] (unreachable) <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>next-15.5.4.tgz</strong></summary>\n\nThe React Framework\n\n**Library home page:** [ https://registry.npmjs.org/next/-/next-15.5.4.tgz ](https://regist"}


identifier: gh_issue_3706829400
source: github_issue
status: new
created_at: 2025-12-16 14:25:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3706829400", "title": "Pre-patch React canaries in patched Next.js versions (CVE-2025-55182)", "url": "https://github.com/vercel/next.js/issues/86944", "user": "jonaseriksson84", "user_url": "https://github.com/jonaseriksson84", "repo": "next.js", "body_preview": "### Link to the code that reproduces this issue\n\nhttps://github.com/jonaseriksson84/verify-nextjs-react-versions/tree/main\n\n### To Reproduce\n\nFor example:\n```\nnpm pack next@15.2.6 --silent \ntar -xzf next-15.2.6.tgz \ngrep -oE '19\\.[0-9]+\\.[0-9]+-[a-z]+-[a-f0-9]+-[0-9]+' package/dist/compiled/next-server/app-page.runtime.prod.js | sort -u\n```\nWith the result:\n`19.1.0-canary-029e8bd6-20250306`\n\n### Current vs. Expected behavior\n\n**Current**\nLinked script that checks each of the patched Next.js vers", "created": "2025-12-08T15:17:04Z", "labels": ["Server Actions"], "context": "Pre-patch React canaries in patched Next.js versions (CVE-2025-55182) ### Link to the code that reproduces this issue\n\nhttps://github.com/jonaseriksson84/verify-nextjs-react-versions/tree/main\n\n### To Reproduce\n\nFor example:\n```\nnpm pack next@15.2.6 --silent \ntar -xzf n"}


identifier: gh_issue_3705047055
source: github_issue
status: new
created_at: 2025-12-16 14:25:17
data:
  {"source": "github_issue", "identifier": "gh_issue_3705047055", "title": "Small upgrade for Next.js", "url": "https://github.com/erxes/erxes/issues/6719", "user": "mendorshikh", "user_url": "https://github.com/mendorshikh", "repo": "erxes", "body_preview": "Find more live information in Aikido here: https://app.aikido.dev/queue?sidebarIssue=18598684&groupId=3319&sidebarIssueTask=2090507&sidebarTab=tasks\r\n\r\n\r\n### Scope\r\nThese issues affect the following code repository:\r\n- erxes: apps/client-portal-template/package-lock.json\r\n\r\n\r\n### TLDR\r\nAffected versions of this package are vulnerable to unauthenticated remote code execution due to a flaw in how React Server Components decode payloads sent to Server Function endpoints. The issue can be exploited ", "created": "2025-12-08T07:37:04Z", "labels": ["Security issue", "critical"], "context": "Small upgrade for Next.js Find more live information in Aikido here: https://app.aikido.dev/queue?sidebarIssue=18598684&groupId=3319&sidebarIssueTask=2090507&sidebarTab=tasks\r\n\r\n\r\n### Scope\r\nThese issues affect the following c"}


identifier: gh_issue_3734935411
source: github_issue
status: new
created_at: 2025-12-16 14:26:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3734935411", "title": "Dependency Remediation Plan", "url": "https://github.com/00felix/DSpace/issues/8", "user": "00felix-app[bot]", "user_url": "https://github.com/apps/00felix-app", "repo": "DSpace", "body_preview": "## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-16T14:05:34Z", "labels": [], "context": "Dependency Remediation Plan ## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3734972272
source: github_issue
status: new
created_at: 2025-12-16 14:26:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3734972272", "title": "Fix 3 security findings on 6 assets (critical severity)", "url": "https://github.com/Bajusz15/beacon/issues/24", "user": "Bajusz15", "user_url": "https://github.com/Bajusz15", "repo": "beacon", "body_preview": "Mondoo has assigned this ticket to fix 3 components with critical vulnerabilities on 6 assets. The risk score was evaluated to 100/100\n\nWhy it matters:\n\n- Risk score: 100/100 is critical, [link](https://mondoo.com/docs/platform/security/posture/findings/) for details\n- Risk factors: Known exploited vulnerability (3/3)\n- First detected: October 15, 2025\n- About the Mondoo scoring method: [link](https://mondoo.com/docs/platform/security/posture/findings/)\n\n\n## Apply Ensure repository branch protec", "created": "2025-12-16T14:14:20Z", "labels": ["mondoo", "security", "vulnerability"], "context": "Fix 3 security findings on 6 assets (critical severity) Mondoo has assigned this ticket to fix 3 components with critical vulnerabilities on 6 assets. The risk score was evaluated to 100/100\n\nWhy it matters:\n\n- Risk score: 100/100 is critical, [link](https"}


identifier: gh_issue_3735017604
source: github_issue
status: new
created_at: 2025-12-16 14:32:25
data:
  {"source": "github_issue", "identifier": "gh_issue_3735017604", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/mafpbiaggi/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @mafpbiaggi! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, ", "created": "2025-12-16T14:23:47Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @mafpbiaggi! Welcome to"}


identifier: gh_issue_3730113570
source: github_issue
status: new
created_at: 2025-12-16 14:35:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3730113570", "title": "Data quality: CVE->OSV conversion drops affected React/Next.js ranges for CVE-2025-67779, CVE-2025-55184, CVE-2025-55183, CVE-2025-55182 (OSV incomplete vs NVD)", "url": "https://github.com/google/osv.dev/issues/4489", "user": "fingeromer", "user_url": "https://github.com/fingeromer", "repo": "osv.dev", "body_preview": "These CVEs' affected packages/versions are substantially incomplete compared to NVD\u2019s \u201cKnown Affected Software Configurations (CPE)\u201d ranges for the same CVEs.\n\nImpact:\nDownstream consumers relying on OSV affected ranges may miss vulnerable Next.js 15.x/16.x and/or React versions.\n\nAffected OSV pages:\n- https://osv.dev/vulnerability/CVE-2025-67779\n- https://osv.dev/vulnerability/CVE-2025-55184\n- https://osv.dev/vulnerability/CVE-2025-55183\n- https://osv.dev/vulnerability/CVE-2025-55182\n\nEvidence ", "created": "2025-12-15T12:05:10Z", "labels": [], "context": "Data quality: CVE->OSV conversion drops affected React/Next.js ranges for CVE-2025-67779, CVE-2025-55184, CVE-2025-55183, CVE-2025-55182 (OSV incomplete vs NVD) These CVEs' affected packages/versions are substantially incomplete compared to NVD\u2019s \u201cKnown Affected Software Configurations (CPE)\u201d ranges for the same CVEs.\n\nImpact:\nDownstream consumers relying on "}


identifier: gh_issue_3722866936
source: github_issue
status: new
created_at: 2025-12-16 14:35:35
data:
  {"source": "github_issue", "identifier": "gh_issue_3722866936", "title": "Adding lock scanner for vulnerabilities", "url": "https://github.com/vercel-labs/fix-react2shell-next/issues/42", "user": "rully-saputra15", "user_url": "https://github.com/rully-saputra15", "repo": "fix-react2shell-next", "body_preview": "## \ud83d\udccb Problem Statement\n\nCurrently, `fix-react2shell-next` only scans `package.json` files for vulnerable package versions. However, this approach has limitations:\n\n- \u274c Doesn't detect vulnerable packages in transitive dependencies\n- \u274c Misses vulnerabilities that exist in lock files but not in `package.json`\n- \u274c Cannot verify the actual resolved versions in the dependency tree\n- \u274c Users may have vulnerable React 19 packages installed that aren't directly specified\n\n## \ud83d\udca1 Proposed Solution\n\nAdd a ne", "created": "2025-12-12T10:20:21Z", "labels": [], "context": "Adding lock scanner for vulnerabilities ## \ud83d\udccb Problem Statement\n\nCurrently, `fix-react2shell-next` only scans `package.json` files for vulnerable package versions. However, this approach has limitations:\n\n- \u274c Doesn't detect vulnerable packag"}


identifier: gh_issue_3735069251
source: github_issue
status: new
created_at: 2025-12-16 14:36:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3735069251", "title": "[FEAT] \ucc38\uac00\uc790\uc758 \ucf54\ub4dc \ubcc0\uacbd\uc2dc \uc774\ubca4\ud2b8 \ubc1c\uc0dd", "url": "https://github.com/boostcampwm2025/web30-boostcamp/issues/19", "user": "eeekeee", "user_url": "https://github.com/eeekeee", "repo": "web30-boostcamp", "body_preview": "## \ud83e\uddfe \uc774\uc288 \uac1c\uc694\n\n\ucc38\uac00\uc790 \ucf54\ub4dc \ubcc0\uacbd\uc2dc \uc774\ubca4\ud2b8 \ubc1c\uc0dd\uc744 \ud1b5\ud574 \uc774\ubca4\ud2b8 \uc804\ud30c\n\n## \ud83d\udc64 \uc0ac\uc6a9\uc790 \uc2dc\ub098\ub9ac\uc624\n\n1. \ucc38\uac00\uc790\uac00 \ucf54\ub4dc \uc5d0\ub514\ud130\uc5d0 \ucf54\ub4dc\ub97c \ubcc0\uacbd\ud55c\ub2e4.\n2. \uad00\uc804\uc790\ub4e4\uc740 \ubcc0\uacbd\ub41c \ucf54\ub4dc\ub97c \uc2e4\uc2dc\uac04\uc73c\ub85c \ud655\uc778\ud55c\ub2e4.\n\n## \u2705 TODO\n\n\uad6c\ud604\uc5d0 \ud544\uc694\ud55c \uc791\uc5c5\n\n- [ ]\n\n## \ud83d\udccc Acceptance Criteria\n\n\n## \ud83d\udcac Remarks\n\n- \uad00\ub828 \uc774\uc288/PR: #\n- \ub808\ud37c\ub7f0\uc2a4:\n", "created": "2025-12-16T14:36:30Z", "labels": [], "context": "[FEAT] \ucc38\uac00\uc790\uc758 \ucf54\ub4dc \ubcc0\uacbd\uc2dc \uc774\ubca4\ud2b8 \ubc1c\uc0dd ## \ud83e\uddfe \uc774\uc288 \uac1c\uc694\n\n\ucc38\uac00\uc790 \ucf54\ub4dc \ubcc0\uacbd\uc2dc \uc774\ubca4\ud2b8 \ubc1c\uc0dd\uc744 \ud1b5\ud574 \uc774\ubca4\ud2b8 \uc804\ud30c\n\n## \ud83d\udc64 \uc0ac\uc6a9\uc790 \uc2dc\ub098\ub9ac\uc624\n\n1. \ucc38\uac00\uc790\uac00 \ucf54\ub4dc \uc5d0\ub514\ud130\uc5d0 \ucf54\ub4dc\ub97c \ubcc0\uacbd\ud55c\ub2e4.\n2. \uad00\uc804\uc790\ub4e4\uc740 \ubcc0\uacbd\ub41c \ucf54\ub4dc\ub97c \uc2e4\uc2dc\uac04\uc73c\ub85c \ud655\uc778\ud55c\ub2e4.\n\n## \u2705 TODO\n\n\uad6c\ud604\uc5d0 \ud544\uc694\ud55c \uc791\uc5c5\n\n- [ ]\n\n## \ud83d\udccc Acceptance Criteria\n\n\n## \ud83d\udcac Remarks\n\n- \uad00\ub828 \uc774\uc288/PR: #\n- "}


identifier: gh_issue_3735055302
source: github_issue
status: new
created_at: 2025-12-16 14:36:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3735055302", "title": ".codex/prompts\u3092\u547c\u3073\u51fa\u3057\u6642\u306b\u30d5\u30a1\u30a4\u30eb\u304b\u3089\u8aad\u307f\u8fbc\u3080\u3088\u3046\u306b\u3059\u308b", "url": "https://github.com/harukary/codex-mine/issues/19", "user": "harukary", "user_url": "https://github.com/harukary", "repo": "codex-mine", "body_preview": "", "created": "2025-12-16T14:32:59Z", "labels": [], "context": ".codex/prompts\u3092\u547c\u3073\u51fa\u3057\u6642\u306b\u30d5\u30a1\u30a4\u30eb\u304b\u3089\u8aad\u307f\u8fbc\u3080\u3088\u3046\u306b\u3059\u308b "}


identifier: gh_issue_3735036821
source: github_issue
status: new
created_at: 2025-12-16 14:36:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3735036821", "title": "[TASK] \ub178\uc158 \ucef4\ud3ec\ub10c\ud2b8 \ubc94\uc704 \uc815\uc758\ud398\uc774\uc9c0 \uc791\uc131", "url": "https://github.com/FE19-Team3/global_nomad/issues/19", "user": "yujinimda", "user_url": "https://github.com/yujinimda", "repo": "global_nomad", "body_preview": "## \ud83d\udee0 \uc791\uc5c5 \uc124\uba85\n\n\ub178\uc158 \ucef4\ud3ec\ub10c\ud2b8 \ubc94\uc704 \uc815\uc758 \ud398\uc774\uc9c0 \uc791\uc131\n(\uacf5\ud1b5 \ucef4\ud3ec\ub10c\ud2b8\uc640 \ud398\uc774\uc9c0 \uc804\uc6a9 \ucef4\ud3ec\ub10c\ud2b8 \uad6c\ubd84)\n\n## \ud83d\udccb \uc138\ubd80 \uc791\uc5c5 \ub0b4\uc6a9\n\n- \uc791\uc5c5 1: \uac01 \ud398\uc774\uc9c0\uc5d0\uc11c \uc0ac\uc6a9\ub418\ub294 \ucef4\ud3ec\ub10c\ud2b8 \ubaa9\ub85d \uc815\ub9ac\n- \uc791\uc5c5 2: \uc911\ubcf5 \uc0ac\uc6a9 \ucef4\ud3ec\ub10c\ud2b8\ub294 \uacf5\ud1b5 \ucef4\ud3ec\ub10c\ud2b8\ub85c \ubd84\ub958\n- \uc791\uc5c5 3: \ud398\uc774\uc9c0 \uc804\uc6a9 \ucef4\ud3ec\ub10c\ud2b8\ub294 \ud398\uc774\uc9c0 \ucef4\ud3ec\ub10c\ud2b8\ub85c \ubd84\ub9ac\n\n## \ud83e\udd1d \ucc38\uace0\n\n\uc791\uc131 \ud398\uc774\uc9c0: https://www.notion.so/2c9add99c04280dd9d3ae965579e1c5e", "created": "2025-12-16T14:28:31Z", "labels": ["\ud83d\udd27 chore"], "context": "[TASK] \ub178\uc158 \ucef4\ud3ec\ub10c\ud2b8 \ubc94\uc704 \uc815\uc758\ud398\uc774\uc9c0 \uc791\uc131 ## \ud83d\udee0 \uc791\uc5c5 \uc124\uba85\n\n\ub178\uc158 \ucef4\ud3ec\ub10c\ud2b8 \ubc94\uc704 \uc815\uc758 \ud398\uc774\uc9c0 \uc791\uc131\n(\uacf5\ud1b5 \ucef4\ud3ec\ub10c\ud2b8\uc640 \ud398\uc774\uc9c0 \uc804\uc6a9 \ucef4\ud3ec\ub10c\ud2b8 \uad6c\ubd84)\n\n## \ud83d\udccb \uc138\ubd80 \uc791\uc5c5 \ub0b4\uc6a9\n\n- \uc791\uc5c5 1: \uac01 \ud398\uc774\uc9c0\uc5d0\uc11c \uc0ac\uc6a9\ub418\ub294 \ucef4\ud3ec\ub10c\ud2b8 \ubaa9\ub85d \uc815\ub9ac\n- \uc791\uc5c5 2: \uc911\ubcf5 \uc0ac\uc6a9 \ucef4\ud3ec\ub10c\ud2b8\ub294 \uacf5\ud1b5 \ucef4\ud3ec\ub10c\ud2b8\ub85c \ubd84\ub958\n- \uc791\uc5c5 3: \ud398\uc774\uc9c0 \uc804\uc6a9 \ucef4\ud3ec\ub10c\ud2b8\ub294 \ud398\uc774\uc9c0 \ucef4\ud3ec\ub10c\ud2b8\ub85c \ubd84\ub9ac\n\n## \ud83e\udd1d \ucc38\uace0\n\n\uc791\uc131 \ud398\uc774\uc9c0: https://w"}


identifier: gh_issue_3735031633
source: github_issue
status: new
created_at: 2025-12-16 14:36:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3735031633", "title": "How Notifications work", "url": "https://github.com/lingqianmeng/ChernoCppTutorialCodes/issues/19", "user": "lingqianmeng", "user_url": "https://github.com/lingqianmeng", "repo": "ChernoCppTutorialCodes", "body_preview": "Doc it:\nhttps://app.pluralsight.com/ilx/video-courses/1dcb054c-cf89-4b67-ac25-07734446d4dc/cd2174bb-8457-4e0a-8312-39da8fad3485/4eb8b8d2-cf58-4760-b6b4-6419c18c3c92", "created": "2025-12-16T14:27:06Z", "labels": ["documentation"], "context": "How Notifications work Doc it:\nhttps://app.pluralsight.com/ilx/video-courses/1dcb054c-cf89-4b67-ac25-07734446d4dc/cd2174bb-8457-4e0a-8312-39da8fad3485/4eb8b8d2-cf58-4760-b6b4-6419c18c3c92"}


identifier: gh_issue_3735012972
source: github_issue
status: new
created_at: 2025-12-16 14:36:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3735012972", "title": "low performance in NDS mASE and mAOE", "url": "https://github.com/Public-BOTs/GaussianPretrain/issues/19", "user": "AniKnow", "user_url": "https://github.com/AniKnow", "repo": "GaussianPretrain", "body_preview": "great job\nWe trained the model in 5 4090GPUs in the Nuscene dataset, then evaluated the task of 3D Object Detection, the value of NDS mASE and mAOE, Can you give any tips to help us figure this out?\n\n<img width=\"353\" height=\"206\" alt=\"Image\" src=\"https://github.com/user-attachments/assets/dd4565f7-0ed8-436b-aedc-9f8de1353996\" />", "created": "2025-12-16T14:22:43Z", "labels": [], "context": "low performance in NDS mASE and mAOE great job\nWe trained the model in 5 4090GPUs in the Nuscene dataset, then evaluated the task of 3D Object Detection, the value of NDS mASE and mAOE, Can you give any tips to help us figure this out?\n\n"}


identifier: gh_issue_3735048570
source: github_issue
status: new
created_at: 2025-12-16 14:36:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3735048570", "title": "Dependency Dashboard", "url": "https://github.com/k4ntz/JAXAtari/issues/196", "user": "dominikmandok", "user_url": "https://github.com/dominikmandok", "repo": "JAXAtari", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n<!-- config-migration-pr-info --> See Config Migration PR: #197.\n\n## Pending Approval\n\nThe following branches are pending approval. To create them, click on a checkbox below.\n\n - [ ] <!-- approve-branch=renovate/cloudpickle-3.x -->Update dependency cloudpickle to v3.1.2\n - [ ] <!-- approve-branch=renova", "created": "2025-12-16T14:31:16Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.\n\n## Config Migration Needed\n\n<!--"}


identifier: gh_issue_3734997117
source: github_issue
status: new
created_at: 2025-12-16 14:37:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3734997117", "title": "Fix the criticial security vulnerabilities reported by npm audit", "url": "https://github.com/Nosto/nosto-cli/issues/181", "user": "timowestnosto", "user_url": "https://github.com/timowestnosto", "repo": "nosto-cli", "body_preview": "Fix the criticial security vulnerabilities reported by npm audit", "created": "2025-12-16T14:19:23Z", "labels": [], "context": "Fix the criticial security vulnerabilities reported by npm audit Fix the criticial security vulnerabilities reported by npm audit"}


identifier: gh_issue_3734994699
source: github_issue
status: new
created_at: 2025-12-16 14:37:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3734994699", "title": "Fix the criticial security vulnerabilities reported by npm audit", "url": "https://github.com/Nosto/nosto-autocomplete/issues/589", "user": "timowestnosto", "user_url": "https://github.com/timowestnosto", "repo": "nosto-autocomplete", "body_preview": "Fix the criticial security vulnerabilities reported by npm audit", "created": "2025-12-16T14:18:57Z", "labels": [], "context": "Fix the criticial security vulnerabilities reported by npm audit Fix the criticial security vulnerabilities reported by npm audit"}


identifier: gh_issue_3734993389
source: github_issue
status: new
created_at: 2025-12-16 14:37:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3734993389", "title": "Fix the criticial security vulnerabilities reported by npm audit", "url": "https://github.com/Nosto/search-templates-starter/issues/808", "user": "timowestnosto", "user_url": "https://github.com/timowestnosto", "repo": "search-templates-starter", "body_preview": "Fix the criticial security vulnerabilities reported by npm audit", "created": "2025-12-16T14:18:42Z", "labels": [], "context": "Fix the criticial security vulnerabilities reported by npm audit Fix the criticial security vulnerabilities reported by npm audit"}


identifier: gh_issue_3734992062
source: github_issue
status: new
created_at: 2025-12-16 14:37:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3734992062", "title": "Fix the criticial security vulnerabilities reported by npm audit", "url": "https://github.com/Nosto/search-js/issues/568", "user": "timowestnosto", "user_url": "https://github.com/timowestnosto", "repo": "search-js", "body_preview": "Fix the criticial security vulnerabilities reported by npm audit", "created": "2025-12-16T14:18:22Z", "labels": [], "context": "Fix the criticial security vulnerabilities reported by npm audit Fix the criticial security vulnerabilities reported by npm audit"}


identifier: gh_issue_3734990308
source: github_issue
status: new
created_at: 2025-12-16 14:37:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3734990308", "title": "Fix the criticial security vulnerabilities reported by npm audit", "url": "https://github.com/Nosto/nosto-js/issues/420", "user": "timowestnosto", "user_url": "https://github.com/timowestnosto", "repo": "nosto-js", "body_preview": "Fix the criticial security vulnerabilities reported by npm audit", "created": "2025-12-16T14:18:05Z", "labels": [], "context": "Fix the criticial security vulnerabilities reported by npm audit Fix the criticial security vulnerabilities reported by npm audit"}


identifier: gh_issue_3735090588
source: github_issue
status: new
created_at: 2025-12-16 14:55:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3735090588", "title": "Fix 3 security findings on 6 assets (critical severity)", "url": "https://github.com/Bajusz15/beacon/issues/26", "user": "Bajusz15", "user_url": "https://github.com/Bajusz15", "repo": "beacon", "body_preview": "Mondoo has assigned this ticket to fix 3 components with critical vulnerabilities on 6 assets. The risk score was evaluated to 100/100\n\nWhy it matters:\n\n- Risk score: 100/100 is critical, [link](https://mondoo.com/docs/platform/security/posture/findings/) for details\n- Risk factors: Known exploited vulnerability (3/3)\n- First detected: October 15, 2025\n- About the Mondoo scoring method: [link](https://mondoo.com/docs/platform/security/posture/findings/)\n\n\n## Apply CVE-2025-6554 on windows\n\nRemed", "created": "2025-12-16T14:41:39Z", "labels": ["mondoo", "security", "vulnerability"], "context": "Fix 3 security findings on 6 assets (critical severity) Mondoo has assigned this ticket to fix 3 components with critical vulnerabilities on 6 assets. The risk score was evaluated to 100/100\n\nWhy it matters:\n\n- Risk score: 100/100 is critical, [link](https"}


identifier: gh_issue_3735080674
source: github_issue
status: new
created_at: 2025-12-16 14:55:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3735080674", "title": "Nuget Update Request for NPOI 2.7.5", "url": "https://github.com/mganss/ExcelMapper/issues/332", "user": "clauener", "user_url": "https://github.com/clauener", "repo": "ExcelMapper", "body_preview": "Could you create a new release using 2.7.5?\n\nhttps://github.com/nissl-lab/npoi/releases\n\nThere is a regression bug from version 2.7.4 fixed in there https://github.com/nissl-lab/npoi/issues/1594 which was a reason we couldn't update to the current version yet although that would fix the https://nvd.nist.gov/vuln/detail/CVE-2025-54575 vulnerability.", "created": "2025-12-16T14:39:14Z", "labels": [], "context": "Nuget Update Request for NPOI 2.7.5 Could you create a new release using 2.7.5?\n\nhttps://github.com/nissl-lab/npoi/releases\n\nThere is a regression bug from version 2.7.4 fixed in there https://github.com/nissl-lab/npoi/issues/1594 which"}


identifier: gh_issue_3735071508
source: github_issue
status: new
created_at: 2025-12-16 14:55:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3735071508", "title": "Fix 3 security findings on 6 assets (critical severity)", "url": "https://github.com/Bajusz15/beacon/issues/25", "user": "Bajusz15", "user_url": "https://github.com/Bajusz15", "repo": "beacon", "body_preview": "Mondoo has assigned this ticket to fix 3 components with critical vulnerabilities on 6 assets. The risk score was evaluated to 100/100\n\nWhy it matters:\n\n- Risk score: 100/100 is critical, [link](https://mondoo.com/docs/platform/security/posture/findings/) for details\n- Risk factors: Known exploited vulnerability (3/3)\n- First detected: October 15, 2025\n- About the Mondoo scoring method: [link](https://mondoo.com/docs/platform/security/posture/findings/)\n\n\n## Apply CVE-2025-53786 on windows\n\nReme", "created": "2025-12-16T14:37:03Z", "labels": ["mondoo", "security", "vulnerability"], "context": "Fix 3 security findings on 6 assets (critical severity) Mondoo has assigned this ticket to fix 3 components with critical vulnerabilities on 6 assets. The risk score was evaluated to 100/100\n\nWhy it matters:\n\n- Risk score: 100/100 is critical, [link](https"}


identifier: gh_issue_3735125455
source: github_issue
status: new
created_at: 2025-12-16 15:08:34
data:
  {"source": "github_issue", "identifier": "gh_issue_3735125455", "title": "some input ...", "url": "https://github.com/rsionnach/sloppylint/issues/12", "user": "bitranox", "user_url": "https://github.com/bitranox", "repo": "sloppylint", "body_preview": "### What looks solid\n\n* CI is real and multi-version. Tests run on Python 3.9, 3.10, 3.11, 3.12, with coverage upload to Codecov (on one version). \n* Formatting is enforced in CI via `black --check` and `isort --check-only`. \n* There\u2019s a \u201cself-check\u201d job that runs the tool on its own source tree. That\u2019s a nice regression tripwire for a linter project. \n* The README is extensive and includes usage, flags, and example output, which usually correlates with decent project hygiene.\n\n### What\u2019s a bit ", "created": "2025-12-16T14:49:49Z", "labels": [], "context": "some input ... ### What looks solid\n\n* CI is real and multi-version. Tests run on Python 3.9, 3.10, 3.11, 3.12, with coverage upload to Codecov (on one version). \n* Formatting is enforced in CI via `black --check` a"}


identifier: gh_issue_3735222306
source: github_issue
status: new
created_at: 2025-12-16 15:20:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3735222306", "title": "Fix 3 security findings on 6 assets (critical severity)", "url": "https://github.com/Bajusz15/beacon/issues/27", "user": "Bajusz15", "user_url": "https://github.com/Bajusz15", "repo": "beacon", "body_preview": "Mondoo has assigned this ticket to fix 3 components with critical vulnerabilities on 6 assets. The risk score was evaluated to 100/100\n\nWhy it matters:\n\n- Risk score: 100/100 is critical, [link](https://mondoo.com/docs/platform/security/posture/findings/) for details\n- Risk factors: Known exploited vulnerability (3/3)\n- First detected: October 15, 2025\n- About the Mondoo scoring method: [link](https://mondoo.com/docs/platform/security/posture/findings/)\n\n\n## Apply CVE-2025-6554 on windows\n\nRemed", "created": "2025-12-16T15:12:48Z", "labels": ["mondoo", "security", "vulnerability"], "context": "Fix 3 security findings on 6 assets (critical severity) Mondoo has assigned this ticket to fix 3 components with critical vulnerabilities on 6 assets. The risk score was evaluated to 100/100\n\nWhy it matters:\n\n- Risk score: 100/100 is critical, [link](https"}


identifier: gh_issue_3735081382
source: github_issue
status: new
created_at: 2025-12-16 15:20:41
data:
  {"source": "github_issue", "identifier": "gh_issue_3735081382", "title": "Exercise: Introduction to CodeQL", "url": "https://github.com/KONElindfors/skills-introduction-to-codeql/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-codeql", "body_preview": "## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @KONElindfors! Welcome to your Skills exercise!\n\nLearn to use CodeQL to find security vulnerabilities in your code.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step, I\u2019ll leave updates in the comments:\n\n- \u2705 Check your work and guide you forward\n- \ud83d\udca1 Share helpful tips and resources\n- \ud83d\ude80 Celebrate", "created": "2025-12-16T14:39:24Z", "labels": [], "context": "Exercise: Introduction to CodeQL ## Introduction to CodeQL\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @KONElindfors! Welcome to your Skills exer"}


identifier: gh_issue_3735202600
source: github_issue
status: new
created_at: 2025-12-16 15:33:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3735202600", "title": "Phase 5 Pivot Epic \u2014 High-Signal Extractor + Token Saving", "url": "https://github.com/rogermt/mcp-repo-onboarding/issues/17", "user": "rogermt", "user_url": "https://github.com/rogermt", "repo": "mcp-repo-onboarding", "body_preview": "---\nname: Phase 5 Pivot Epic \u2014 High-Signal Extractor + Token Saving\nabout: Pivot Phase 5 from onboarding generation to high-signal grounded extraction + measurable token savings; implement P0 noise fixes; re-run A/B; make Go/No-Go decision.\nlabels: epic, phase5, pivot\n---\n\n## Summary\n\nPhase 5 A/B testing shows `mcp-repo-onboarding` can reduce token usage materially (observed ~50\u201380% on some repos), but utility is not yet good enough because MCP output is too noisy or misses common repo patterns.", "created": "2025-12-16T15:08:04Z", "labels": ["enhancement", "epic"], "context": "Phase 5 Pivot Epic \u2014 High-Signal Extractor + Token Saving ---\nname: Phase 5 Pivot Epic \u2014 High-Signal Extractor + Token Saving\nabout: Pivot Phase 5 from onboarding generation to high-signal grounded extraction + measurable token savings; implement P0 noise fi"}


identifier: gh_issue_3735301963
source: github_issue
status: new
created_at: 2025-12-16 15:34:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3735301963", "title": "tfm-api-1.0.0.tgz: 1 vulnerabilities (highest severity is: 7.5)", "url": "https://github.com/UK-Export-Finance/dtfs2/issues/4589", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "dtfs2", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tfm-api-1.0.0.tgz</b></summary>\n\n<p></p>\n<p>Path to dependency file: /package.json</p>\n<p>Path to vulnerable library: /trade-finance-manager-api/node_modules/jws/package.json,/node_modules/jws/package.json,/utils/node_modules/jws/package.json,/portal-api/node_modules/jws/package.json</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com", "created": "2025-12-16T15:32:57Z", "labels": ["Mend: dependency security vulnerability"], "context": "tfm-api-1.0.0.tgz: 1 vulnerabilities (highest severity is: 7.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>tfm-api-1.0.0.tgz</b></summary>\n\n<p></p>\n<p>Pat"}


identifier: gh_issue_3735283447
source: github_issue
status: new
created_at: 2025-12-16 15:34:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3735283447", "title": "\ud83d\udcda Monthly Flashcard Review - December 2025", "url": "https://github.com/Chris-Girolamo-dev/modern-wisdom-flashcards/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "modern-wisdom-flashcards", "body_preview": "# Modern Wisdom Monthly Review - December 2025\n\n**13 episodes analyzed** | **97 flashcards suggested**\n\n---\n\n## \ud83e\udde0 Self-Improvement (19 cards)\n\n### 1. #1033- Judd Apatow - Why Comedies Suck Now\n\n**Q:** How does Judd Apatow suggest dealing with failure in comedy?\n\n**A:** View bombing on stage as research and development (R&D) for your craft. Embrace it as a necessary step to discover what truly resonates with your audience.\n\n---\n\n### 2. #1032 - Joshua Citarella - The Dark Subcultures of Online Pol", "created": "2025-12-16T15:27:59Z", "labels": ["automation", "flashcards"], "context": "\ud83d\udcda Monthly Flashcard Review - December 2025 # Modern Wisdom Monthly Review - December 2025\n\n**13 episodes analyzed** | **97 flashcards suggested**\n\n---\n\n## \ud83e\udde0 Self-Improvement (19 cards)\n\n### 1. #1033- Judd Apatow - Why Comedies Suck Now\n\n**Q:**"}


identifier: gh_issue_3735161817
source: github_issue
status: new
created_at: 2025-12-16 15:34:03
data:
  {"source": "github_issue", "identifier": "gh_issue_3735161817", "title": "\ud83c\udfaf [MASTER] Q1 2026 Infrastructure & Security Suite", "url": "https://github.com/Brunzendorf/SHIBC-AITO/issues/286", "user": "Brunzendorf", "user_url": "https://github.com/Brunzendorf", "repo": "SHIBC-AITO", "body_preview": "# Infrastructure & Security Master Issue - Konsolidiert 12+ DevOps Issues\n\n## Konsolidierte Sub-Issues:\n\n### Monitoring & Observability:\n- #233 Infrastructure Observability Stack\n- #262 Agent Health Dashboard\n- #269 Weekly Agent Availability Report\n- #257 Security Posture Dashboard\n\n### Security & Compliance:\n- #250 Container Image Vulnerability Scanning\n- #248 Dependency Vulnerability Scanner\n- #260 Pre-Launch Security Compliance Badge\n- #254 Container Base Image Hardening\n\n### DevOps & Deploym", "created": "2025-12-16T14:58:22Z", "labels": ["priority:medium", "security", "infrastructure", "q1-2026"], "context": "\ud83c\udfaf [MASTER] Q1 2026 Infrastructure & Security Suite # Infrastructure & Security Master Issue - Konsolidiert 12+ DevOps Issues\n\n## Konsolidierte Sub-Issues:\n\n### Monitoring & Observability:\n- #233 Infrastructure Observability Stack\n- #262 Agent Health D"}


identifier: gh_issue_3735314673
source: github_issue
status: new
created_at: 2025-12-16 15:58:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3735314673", "title": "security: Fix L1 - Overly permissive Kubernetes RBAC roles", "url": "https://github.com/mckinsey/agents-at-scale-ark/issues/622", "user": "amanvr", "user_url": "https://github.com/amanvr", "repo": "agents-at-scale-ark", "body_preview": "## Vulnerability Details\n- **Finding**: L1 - [Kubernetes] Overly permissive RBAC roles\n- **Source**: DataArt Penetration Test Report v1.0 (12/11/2025)\n- **Severity**: Low\n- **CVSS**: 6.0 (AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N)\n- **Component**: Kubernetes RBAC configurations\n- **Remediation Effort**: Medium\n\n## Description\nService accounts in the ARK Kubernetes deployment have overly permissive RBAC privileges. This presents several security risks including privilege escalation p", "created": "2025-12-16T15:36:34Z", "labels": [], "context": "security: Fix L1 - Overly permissive Kubernetes RBAC roles ## Vulnerability Details\n- **Finding**: L1 - [Kubernetes] Overly permissive RBAC roles\n- **Source**: DataArt Penetration Test Report v1.0 (12/11/2025)\n- **Severity**: Low\n- **CVSS**: 6.0 (AV:N/AC:L/AT"}


identifier: gh_issue_3734758029
source: github_issue
status: new
created_at: 2025-12-16 15:58:20
data:
  {"source": "github_issue", "identifier": "gh_issue_3734758029", "title": "optimize an  translate titel, descriptions and commenst of existinz issues ONCE", "url": "https://github.com/BPMspaceUG/bpm-ContinousClaudeManager/issues/38", "user": "Kuhlig", "user_url": "https://github.com/Kuhlig", "repo": "bpm-ContinousClaudeManager", "body_preview": "ich weis nicht wie oft wir das jetz schon auf haben \n\nNICHT \u00dcBER DIE API \nwie kannst du sagen es funktioniert wenn es das nicht TUT ? \n\ndu sollet continuous-claude nehem aber nur 1 Itteration \ndabei veresser und translaate auf en \n1) titel\n2) secription) \ndann pr\u00e4sentier echo das ergebnsi das zur\u00fcckekommet \n1) verbesssrteret Titel \n2) verebsserte Beschreibung \nwarte auf best\u00e4tigung! wen ok dann \u00fcberschreibe titel bzw descitiption bze commet im dem isseu \nMarkiere dann mitz z.b: [optimzae_date] d", "created": "2025-12-16T13:17:34Z", "labels": [], "context": "optimize an  translate titel, descriptions and commenst of existinz issues ONCE ich weis nicht wie oft wir das jetz schon auf haben \n\nNICHT \u00dcBER DIE API \nwie kannst du sagen es funktioniert wenn es das nicht TUT ? \n\ndu sollet continuous-claude nehem aber nur 1 Itteration \ndabei v"}


identifier: gh_issue_3735395159
source: github_issue
status: new
created_at: 2025-12-16 15:58:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3735395159", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Katrina-Hicks_1216_155609_gh_gw2/issues/1", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Katrina-Hicks_1216_155609_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.", "created": "2025-12-16T15:57:59Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3735395201
source: github_issue
status: new
created_at: 2025-12-16 15:58:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3735395201", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Katrina-Hicks_1216_155609_gh_gw2/issues/2", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Katrina-Hicks_1216_155609_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.io/v", "created": "2025-12-16T15:57:59Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3735329759
source: github_issue
status: new
created_at: 2025-12-16 15:58:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3735329759", "title": "spring-boot-starter-web-3.2.5.jar: 14 vulnerabilities (highest severity is: 9.6)", "url": "https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-7e09e1e7-b73b-4541-ad58-510f9c55495e/issues/2", "user": "staging-whitesource-for-github-com[bot]", "user_url": "https://github.com/apps/staging-whitesource-for-github-com", "repo": "SAST-Test-Repo-7e09e1e7-b73b-4541-ad58-510f9c55495e", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-boot-starter-web-3.2.5.jar</b></summary>\n\n<p></p>\n<p>Path to dependency file: /secretsForGH/pom.xml</p>\n<p>Path to vulnerable library: /secretsForGH/pom.xml</p>\n<p>\n\n\n<p>Found in HEAD commit: <a href=\"https://github.com/SAST-UP-Global-Config-STG/SAST-Test-Repo-7e09e1e7-b73b-4541-ad58-510f9c55495e/commit/9021ee0cc31095d6ffa12c6ef4dd6c0d10e", "created": "2025-12-16T15:40:59Z", "labels": ["Mend: dependency security vulnerability"], "context": "spring-boot-starter-web-3.2.5.jar: 14 vulnerabilities (highest severity is: 9.6) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>spring-boot-starter-web-3.2.5.jar</b></summary>"}


identifier: gh_issue_3735306548
source: github_issue
status: new
created_at: 2025-12-16 15:58:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3735306548", "title": "Dependency Dashboard", "url": "https://github.com/MaibornWolff/DependaCharta/issues/150", "user": "renovate[bot]", "user_url": "https://github.com/apps/renovate", "repo": "DependaCharta", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/MaibornWolff/DependaCharta).\n\n## Deprecations / Replacements\n> [!WARNING]\nThese dependencies are either deprecated or have replacements available:\n\n| Datasource | Name | Replacement PR? |\n|------------|------|--------------|\n| npm | `@types/cytosca", "created": "2025-12-16T15:34:13Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the M"}


identifier: gh_issue_3735422380
source: github_issue
status: new
created_at: 2025-12-16 16:11:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3735422380", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/William-Joseph_1216_160352_gh_gw0/issues/6", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "William-Joseph_1216_160352_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.", "created": "2025-12-16T16:05:56Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3735422335
source: github_issue
status: new
created_at: 2025-12-16 16:11:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3735422335", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate/William-Joseph_1216_160352_gh_gw0/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "William-Joseph_1216_160352_gh_gw0", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.io/v", "created": "2025-12-16T16:05:55Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [main] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3735411535
source: github_issue
status: new
created_at: 2025-12-16 16:11:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3735411535", "title": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Christopher-Diaz_1216_160034_gh_gw2/issues/5", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Christopher-Diaz_1216_160034_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.io/v", "created": "2025-12-16T16:02:45Z", "labels": [], "context": "log4j-core-2.6.1.jar: 3 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.6.1.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ http://www.apache.org ](http://www.apache.org)\n\n*"}


identifier: gh_issue_3735411501
source: github_issue
status: new
created_at: 2025-12-16 16:11:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3735411501", "title": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [develop]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Christopher-Diaz_1216_160034_gh_gw2/issues/4", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Christopher-Diaz_1216_160034_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/)\n\n**Path to dependency file:** /pom.xml\n\n\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | Exploit Maturity | EPSS | Library | Type | Fixed in | Remediation Available |\n| ------------- | ------------- | ---- | --- | ----- | ----- | ----- | --- | --- |\n| [ CVE-2021-44228 ](https://www.mend.", "created": "2025-12-16T16:02:44Z", "labels": [], "context": "log4j-core-2.8.2.jar: 2 vulnerabilities (highest severity is: 10.0) [develop] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>log4j-core-2.8.2.jar</strong></summary>\n\nThe Apache Log4j Implementation\n\n**Library home page:** [ https://www.apache.org/ ](https://www.apache.org/"}


identifier: gh_issue_3735410627
source: github_issue
status: new
created_at: 2025-12-16 16:11:24
data:
  {"source": "github_issue", "identifier": "gh_issue_3735410627", "title": "rdoc-3.12.2.gem: 2 vulnerabilities (highest severity is: 7.5) [integration]", "url": "https://github.com/ghc-cloneRepoStaging-scaAndRenovate3/Christopher-Diaz_1216_160034_gh_gw2/issues/2", "user": "unified-repo-staging[bot]", "user_url": "https://github.com/apps/unified-repo-staging", "repo": "Christopher-Diaz_1216_160034_gh_gw2", "body_preview": "<details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>rdoc-3.12.2.gem</strong></summary>\n\nRDoc produces HTML and command-line documentation for Ruby projects.  RDoc\nincludes the +rdoc+ and +ri+ tools for generating and displaying online\ndocumentation.\n\nSee RDoc for a description of RDoc's markup and basic use.\n\n\n\n**Path to dependency file:** /Gemfile.lock\n\n**Path to vulnerable library:** /tmp/containerbase/cache/.ruby/cache/rdoc-3.12.2.gem\n\n\n</details>\n\n\n# Findings\n| Finding | Severity | \ud83c\udfaf CVSS | ", "created": "2025-12-16T16:02:30Z", "labels": [], "context": "rdoc-3.12.2.gem: 2 vulnerabilities (highest severity is: 7.5) [integration] <details>\n  <summary>\ud83d\udcc2 Vulnerable Library - <strong>rdoc-3.12.2.gem</strong></summary>\n\nRDoc produces HTML and command-line documentation for Ruby projects.  RDoc\nincludes the +rdoc+ and +ri+ tools fo"}


identifier: gh_issue_3735422125
source: github_issue
status: new
created_at: 2025-12-16 16:11:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3735422125", "title": "Dependency Remediation Plan", "url": "https://github.com/00felix/alfresco-community-repo/issues/4", "user": "00felix-app[bot]", "user_url": "https://github.com/apps/00felix-app", "repo": "alfresco-community-repo", "body_preview": "## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-16T16:05:51Z", "labels": [], "context": "Dependency Remediation Plan ## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3734547578
source: github_issue
status: new
created_at: 2025-12-16 16:23:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3734547578", "title": "Exercise: Introduction to Repository Management", "url": "https://github.com/PDDirk/skills-introduction-to-repository-management/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-repository-management", "body_preview": "## Introduction to Repository Management\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @PDDirk! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll configure your repository for easier collaboration. You&#39;ll learn how to protect your code, prepare for collaboration, and foster healthy growth in your projects.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete eac", "created": "2025-12-16T12:18:00Z", "labels": [], "context": "Exercise: Introduction to Repository Management ## Introduction to Repository Management\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @PDDirk! Welcome to your Sk"}


identifier: gh_issue_3735413354
source: github_issue
status: new
created_at: 2025-12-16 16:35:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3735413354", "title": "\ud83d\udd12 Security vulnerabilities in ripple-binary-codec@2.6.0", "url": "https://github.com/XRPLF/xrpl.js/issues/3158", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "xrpl.js", "body_preview": "The vulnerability scan has detected **CRITICAL/HIGH** vulnerabilities for `ripple-binary-codec@2.6.0` on branch `release-rbc-2.6.0`.\n\n**Release Branch:** `release-rbc-2.6.0`\n**Package Version:** `2.6.0`\n\n**Full vulnerability report:** https://github.com/XRPLF/xrpl.js/actions/runs/20274264008/artifacts/4887569714\n\nPlease review the report and take necessary action.\n\n---\n_This issue was automatically generated by the Release Pipeline._\n", "created": "2025-12-16T16:03:17Z", "labels": ["security"], "context": "\ud83d\udd12 Security vulnerabilities in ripple-binary-codec@2.6.0 The vulnerability scan has detected **CRITICAL/HIGH** vulnerabilities for `ripple-binary-codec@2.6.0` on branch `release-rbc-2.6.0`.\n\n**Release Branch:** `release-rbc-2.6.0`\n**Package Version:** `2.6."}


identifier: gh_issue_3735455892
source: github_issue
status: new
created_at: 2025-12-16 16:59:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3735455892", "title": "CVE-2017-7275", "url": "https://github.com/shivammathur/cve-bot-test/issues/168", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "cve-bot-test", "body_preview": "- Source: cve@mitre.org\n- Status: Deferred\n\nThe ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause a denial of service (attempted large memory allocation and application crash) via a crafted file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862 and CVE-2016-8866.\n\n### Affected versions\n\n- imagemagick/imagemagick: {7.0.4-9}\n\n### References\n\n- http://www.securityfocus.com/bid/97166\n- https://blogs.gentoo.org/ago/2017/03/27/i", "created": "2025-12-16T16:15:48Z", "labels": [], "context": "CVE-2017-7275 - Source: cve@mitre.org\n- Status: Deferred\n\nThe ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause a denial of service (attempted large memory allocation and"}


identifier: gh_issue_3735445583
source: github_issue
status: new
created_at: 2025-12-16 16:59:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3735445583", "title": "CVE-2016-9773", "url": "https://github.com/shivammathur/cve-bot-test/issues/89", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "cve-bot-test", "body_preview": "- Source: secalert@redhat.com\n- Status: Deferred\n\nHeap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9556.\n\n### Affected versions\n\n- imagemagick/imagemagick: {7.0.3-8}\n\n### References\n\n- http://www.openwall.com/lists/oss-security/2016/12/01/4\n- http://www.openwa", "created": "2025-12-16T16:13:03Z", "labels": [], "context": "CVE-2016-9773 - Source: secalert@redhat.com\n- Status: Deferred\n\nHeap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial"}


identifier: gh_issue_3735445491
source: github_issue
status: new
created_at: 2025-12-16 16:59:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3735445491", "title": "CVE-2016-8866", "url": "https://github.com/shivammathur/cve-bot-test/issues/86", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "cve-bot-test", "body_preview": "- Source: cve@mitre.org\n- Status: Deferred\n\nThe AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862.\n\n### Affected versions\n\n- imagemagick/imagemagick: <6.9.6-6, >=7.0.0-0, <=7.0.3-7\n\n### References\n\n- http://lists.opensuse.org/opensuse-security-announce/2016-12/msg", "created": "2025-12-16T16:13:02Z", "labels": [], "context": "CVE-2016-8866 - Source: cve@mitre.org\n- Status: Deferred\n\nThe AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a craft"}


identifier: gh_issue_3735568247
source: github_issue
status: new
created_at: 2025-12-16 17:11:42
data:
  {"source": "github_issue", "identifier": "gh_issue_3735568247", "title": "Update pbkdf2 to >= 3.1.3", "url": "https://github.com/wamp-proto/wamp-xbr/issues/167", "user": "oberstet", "user_url": "https://github.com/oberstet", "repo": "wamp-xbr", "body_preview": "## Bug Description\n\nSee: https://github.com/wamp-proto/wamp-xbr/actions/runs/20275591925/job/58223239617\n\nThe failure is caused by a security vulnerability in pbkdf2 where the lowest-non-vulnerable-version is 3.1.3, but dependencies are constraining it to the vulnerable version 3.1.1. Dependencies requiring pbkdf2@^3.1.5 via transitive dependencies on parse-asn1@5.1.9 are responsible.\n\n### Solution\n\nResolve the dependency chain conflict and ensure pbkdf2 gets upgraded to >=3.1.3 (non-vulnerable ", "created": "2025-12-16T16:49:23Z", "labels": ["bug"], "context": "Update pbkdf2 to >= 3.1.3 ## Bug Description\n\nSee: https://github.com/wamp-proto/wamp-xbr/actions/runs/20275591925/job/58223239617\n\nThe failure is caused by a security vulnerability in pbkdf2 where the lowest-non-vulnerable-ve"}


identifier: gh_issue_3735589707
source: github_issue
status: new
created_at: 2025-12-16 17:11:46
data:
  {"source": "github_issue", "identifier": "gh_issue_3735589707", "title": "Directly skip validating admission webhooks when extension was disabled", "url": "https://github.com/gardener/gardener/issues/13671", "user": "Gerrit91", "user_url": "https://github.com/Gerrit91", "repo": "gardener", "body_preview": "<!-- Please ensure that you do not include company internal information. -->\n\n**How to categorize this issue?**\n<!--\nPlease select area, kind, and priority for this issue. This helps the community categorizing it.\nReplace below TODOs or exchange the existing identifiers with those that fit best in your opinion.\nIf multiple identifiers make sense you can also state the commands multiple times, e.g.\n  /area control-plane\n  /area auto-scaling\n  ...\n\n\"/area\" identifiers:     audit-logging|auto-scali", "created": "2025-12-16T16:56:42Z", "labels": ["kind/enhancement", "area/control-plane"], "context": "Directly skip validating admission webhooks when extension was disabled <!-- Please ensure that you do not include company internal information. -->\n\n**How to categorize this issue?**\n<!--\nPlease select area, kind, and priority for this issue. This helps the community cat"}


identifier: gh_issue_3735662181
source: github_issue
status: new
created_at: 2025-12-16 17:23:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3735662181", "title": "Dependency Dashboard", "url": "https://github.com/Renan1fps/Desafio-Mb-labs/issues/6", "user": "renovate[bot]", "user_url": "https://github.com/apps/renovate", "repo": "Desafio-Mb-labs", "body_preview": "This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/Renan1fps/Desafio-Mb-labs).\n\n## Rate-Limited\n\nThe following updates are currently rate-limited. To force their creation now, click on a checkbox below.\n\n - [ ] <!-- unlimit-branch=renovate/phc-argon2-1.x -->fix(deps): update dependency phc-argon2 t", "created": "2025-12-16T17:20:00Z", "labels": [], "context": "Dependency Dashboard This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the M"}


identifier: gh_issue_3735582556
source: github_issue
status: new
created_at: 2025-12-16 17:23:47
data:
  {"source": "github_issue", "identifier": "gh_issue_3735582556", "title": "Latest 15 Papers - December 17, 2025", "url": "https://github.com/Yatogaii/DailyArXiv/issues/49", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "DailyArXiv", "body_preview": "**Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Symbolic Execution\n| **Title** | **Date** | **Comment** |\n| --- | --- | --- |\n| **[Vital: Vulnerability-Oriented Symbolic Execution via Type-Unsafe Pointer-Guided Monte Carlo Tree Search](https://arxiv.org/abs/2408.08772v2)** | 2025-12-12 | <details><summary>Just ...</summary><p>Just Accepted in ACM Transactions on Software Engineering and Methodology (ACM TOSEM)<", "created": "2025-12-16T16:54:16Z", "labels": ["documentation"], "context": "Latest 15 Papers - December 17, 2025 **Please check the [Github](https://github.com/zezhishao/MTS_Daily_ArXiv) page for a better reading experience and more papers.**\n\n## Symbolic Execution\n| **Title** | **Date** | **Comment** |\n| --- | "}


identifier: gh_issue_3735690608
source: github_issue
status: new
created_at: 2025-12-16 17:36:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3735690608", "title": "Security: Redis and Flower ports exposed to public internet", "url": "https://github.com/Tarun-joy/porpertyos-scrapers/issues/27", "user": "Tarun-joy", "user_url": "https://github.com/Tarun-joy", "repo": "porpertyos-scrapers", "body_preview": "## \ud83d\udea8 Security Vulnerability\n\nRedis (port 6379) and Flower (port 5555) are exposed to the public internet without authentication.\n\n## Current Configuration\n\n```yaml\n# docker-compose.yml\nredis:\n  ports:\n    - \"6379:6379\"  # \u274c Exposed to 0.0.0.0\n\nflower:\n  ports:\n    - \"5555:5555\"  # \u274c Exposed to 0.0.0.0\n```\n\n## Evidence\n\n```bash\n$ ss -tlnp | grep LISTEN\nLISTEN 0.0.0.0:6379   # Redis - publicly accessible\nLISTEN 0.0.0.0:5555   # Flower - publicly accessible\n```\n\n## Risk Assessment\n\n### Redis (Port ", "created": "2025-12-16T17:29:07Z", "labels": [], "context": "Security: Redis and Flower ports exposed to public internet ## \ud83d\udea8 Security Vulnerability\n\nRedis (port 6379) and Flower (port 5555) are exposed to the public internet without authentication.\n\n## Current Configuration\n\n```yaml\n# docker-compose.yml\nredis:\n  ports:"}


identifier: gh_issue_3735625879
source: github_issue
status: new
created_at: 2025-12-16 17:36:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3735625879", "title": "DeepAudit AI Security Audit Report", "url": "https://github.com/SatoshiNakamotoBitcoin/CoinbaseChecker/issues/1", "user": "admin1douyin", "user_url": "https://github.com/admin1douyin", "repo": "CoinbaseChecker", "body_preview": "DeepAudit AI Security Audit Report\nTarget Codebase: `CoinbaseChecker.py`\n1. Business Function Panorama\nThis Python script, `CoinbaseChecker.py`, functions as a specialized parser for Bitcoin Stratum `mining.notify` messages. Its primary purpose is to ingest a JSON-formatted `mining.notify` message (either via command-line argument or standard input), extract key block-related information, and then meticulously dissect the coinbase transaction data to identify the block height and any associated ", "created": "2025-12-16T17:08:24Z", "labels": [], "context": "DeepAudit AI Security Audit Report DeepAudit AI Security Audit Report\nTarget Codebase: `CoinbaseChecker.py`\n1. Business Function Panorama\nThis Python script, `CoinbaseChecker.py`, functions as a specialized parser for Bitcoin Stratum `"}


identifier: gh_issue_3735621347
source: github_issue
status: new
created_at: 2025-12-16 17:36:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3735621347", "title": "Silent Heap Buffer Overflow in standard ops (add, pinv) via implicit view resizing", "url": "https://github.com/pytorch/pytorch/issues/170573", "user": "jiren-the-gray", "user_url": "https://github.com/jiren-the-gray", "repo": "pytorch", "body_preview": "### \ud83d\udc1b Describe the bug\n\nWhen passing an undersized view as the out argument to standard operations (e.g., torch.add, torch.matmul, torch.linalg.pinv), PyTorch fails to validate the size requirements or safely handle the resize.\n\nInstead of raising a RuntimeError (as expected for views), the operation triggers a deprecated implicit resize path. This path successfully updates the tensor's metadata (shape) to match the operation result, but fails to update the storage (because views cannot be reall", "created": "2025-12-16T17:06:53Z", "labels": [], "context": "Silent Heap Buffer Overflow in standard ops (add, pinv) via implicit view resizing ### \ud83d\udc1b Describe the bug\n\nWhen passing an undersized view as the out argument to standard operations (e.g., torch.add, torch.matmul, torch.linalg.pinv), PyTorch fails to validate the size requirements o"}


identifier: gh_issue_3735594649
source: github_issue
status: new
created_at: 2025-12-16 17:36:04
data:
  {"source": "github_issue", "identifier": "gh_issue_3735594649", "title": "Vulnerabilities detected in ghcr.io/kyverno/kyverno:release-1.15", "url": "https://github.com/kyverno/kyverno/issues/14530", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "kyverno", "body_preview": "High or critical vulnerabilities detected in Kyverno container images.\n\n## Image: `ko-app/kyverno`\n\n| CVE ID | Package | Severity | CVSS | Installed | Fixed | Description |\n|--------|---------|----------|------|-----------|-------|-------------|\n| [CVE-2025-66506](https://avd.aquasec.com/nvd/cve-2025-66506) | `github.com/sigstore/fulcio` | **HIGH** | 7.5 | v1.6.6 | 1.8.3 | github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token |\n| [CVE-2025-66564](https://a", "created": "2025-12-16T16:58:20Z", "labels": ["security"], "context": "Vulnerabilities detected in ghcr.io/kyverno/kyverno:release-1.15 High or critical vulnerabilities detected in Kyverno container images.\n\n## Image: `ko-app/kyverno`\n\n| CVE ID | Package | Severity | CVSS | Installed | Fixed | Description |\n|--------|---------|-------"}


identifier: gh_issue_3735683333
source: github_issue
status: new
created_at: 2025-12-16 17:48:27
data:
  {"source": "github_issue", "identifier": "gh_issue_3735683333", "title": "Exercise: Introduction to Repository Management", "url": "https://github.com/priya-srikanth/skills-introduction-to-repository-management/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-introduction-to-repository-management", "body_preview": "## Introduction to Repository Management\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @priya-srikanth! Welcome to your Skills exercise!\n\nIn this exercise, you&#39;ll configure your repository for easier collaboration. You&#39;ll learn how to protect your code, prepare for collaboration, and foster healthy growth in your projects.\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you comp", "created": "2025-12-16T17:26:52Z", "labels": [], "context": "Exercise: Introduction to Repository Management ## Introduction to Repository Management\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @priya-srikanth! Welcome to"}


identifier: gh_issue_3735362696
source: github_issue
status: new
created_at: 2025-12-16 18:00:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3735362696", "title": "Create weighting for each domain", "url": "https://github.com/redhat-cop/viewfinder/issues/3", "user": "boogiespook", "user_url": "https://github.com/boogiespook", "repo": "viewfinder", "body_preview": "Some domains could have a higher weighting than others, as per https://commission.europa.eu/document/download/09579818-64a6-4dd5-9577-446ab6219113_en\n\nSOV-1 Strategic Sovereignty 15%\nSOV-2 Legal & Jurisdictional Sovereignty 10%\nSOV-3 Data & AI Sovereignty 10%\nSOV-4 Operational Sovereignty 15%\nSOV-5 Supply Chain Sovereignty 20%\nSOV-6 Technology Sovereignty 15%\nSOV-7 Security & Compliance Sovereignty 10%\nSOV-8 Environmental Sustainability 5%", "created": "2025-12-16T15:50:16Z", "labels": [], "context": "Create weighting for each domain Some domains could have a higher weighting than others, as per https://commission.europa.eu/document/download/09579818-64a6-4dd5-9577-446ab6219113_en\n\nSOV-1 Strategic Sovereignty 15%\nSOV-2 Legal & Jur"}


identifier: gh_issue_3735784093
source: github_issue
status: new
created_at: 2025-12-16 18:00:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3735784093", "title": "Security Vulnerability", "url": "https://github.com/thedotmack/claude-mem/issues/354", "user": "Andrew112", "user_url": "https://github.com/Andrew112", "repo": "claude-mem", "body_preview": "\n**Don't merge yet. ** The command injection vulnerability needs to be fixed first, along with adding Windows logging support. Once those are addressed, this will be a solid contribution that solves a real Windows UX problem.\n\n\nconst psCommand = `${envVars}; Start-Process -FilePath '${bunPath}' -ArgumentList '${script}'...`;\n\nCritical Finding: \ud83d\udea8 Security Vulnerability\nLocation: ProcessManager.ts:80\n\nThere's a command injection vulnerability in the PowerShell command construction:\n\nTypeScript\ncon", "created": "2025-12-16T17:58:08Z", "labels": [], "context": "Security Vulnerability \n**Don't merge yet. ** The command injection vulnerability needs to be fixed first, along with adding Windows logging support. Once those are addressed, this will be a solid contribution that solves a"}


identifier: gh_issue_3735810161
source: github_issue
status: new
created_at: 2025-12-16 18:12:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3735810161", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/felix-test/issues/82", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "felix-test", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-16T18:05:33Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3735804923
source: github_issue
status: new
created_at: 2025-12-16 18:12:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3735804923", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/felix-test/issues/81", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "felix-test", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-16T18:04:10Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3735687506
source: github_issue
status: new
created_at: 2025-12-16 18:12:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3735687506", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/felix-test/issues/80", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "felix-test", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-16T17:28:07Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3735682914
source: github_issue
status: new
created_at: 2025-12-16 18:12:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3735682914", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/felix-test/issues/79", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "felix-test", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-16T17:26:43Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3735647286
source: github_issue
status: new
created_at: 2025-12-16 18:12:19
data:
  {"source": "github_issue", "identifier": "gh_issue_3735647286", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/java-sec-code/issues/13", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "java-sec-code", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-16T17:15:29Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3735824643
source: github_issue
status: new
created_at: 2025-12-16 18:35:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3735824643", "title": "New proposed SIG: Upstream Supply Chain Security Compliance Preparation", "url": "https://github.com/ossf/wg-orbit/issues/32", "user": "sevansdell", "user_url": "https://github.com/sevansdell", "repo": "wg-orbit", "body_preview": "I propose a new OpenSSF SIG: https://docs.google.com/document/d/1H_P4x7BgAD-6SGhFcPtKD3iJcmXmnlnRBu2RNpJ0KAU/edit?tab=t.0#heading=h.ko4zx4u0voyg for Upstream Supply Chain Security Compliance Preparation. \n\nI do not yet know which WG is most appropriate for this effort, but would like to start by sharing it with the ORBIT WG.\n", "created": "2025-12-16T18:09:44Z", "labels": [], "context": "New proposed SIG: Upstream Supply Chain Security Compliance Preparation I propose a new OpenSSF SIG: https://docs.google.com/document/d/1H_P4x7BgAD-6SGhFcPtKD3iJcmXmnlnRBu2RNpJ0KAU/edit?tab=t.0#heading=h.ko4zx4u0voyg for Upstream Supply Chain Security Compliance Preparati"}


identifier: gh_issue_3735919068
source: github_issue
status: new
created_at: 2025-12-16 18:47:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3735919068", "title": "feat(frontend): implement organization management pages", "url": "https://github.com/naroga/eggsnmilk/issues/66", "user": "naroga", "user_url": "https://github.com/naroga", "repo": "eggsnmilk", "body_preview": "## Context\nPart of #38: Authentication & Authorization System\n\n## Feature Branch\n`feature/38-authentication-authorization`\n\n## Requirements\nImplement organization management UI:\n\n1. **Organization Switcher**\n   - Dropdown in header/sidebar\n   - List user's organizations\n   - Personal org at top\n   - \"Create organization\" link\n\n2. **Create Organization Page** (/new/organization)\n   - Name input\n   - Slug input (auto-generated from name)\n   - Description input\n   - Create button\n\n3. **Organization", "created": "2025-12-16T18:38:17Z", "labels": ["enhancement", "frontend"], "context": "feat(frontend): implement organization management pages ## Context\nPart of #38: Authentication & Authorization System\n\n## Feature Branch\n`feature/38-authentication-authorization`\n\n## Requirements\nImplement organization management UI:\n\n1. **Organization Swi"}


identifier: gh_issue_3735650194
source: github_issue
status: new
created_at: 2025-12-16 18:47:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3735650194", "title": "[Bug]Step Audio x Model is in exactly the same structure as shown in this repo, Dropdown not clickable on step model engine node", "url": "https://github.com/diodiogod/TTS-Audio-Suite/issues/199", "user": "Porndli", "user_url": "https://github.com/Porndli", "repo": "TTS-Audio-Suite", "body_preview": "**Describe the bug**\nA clear and concise description of what the bug is.\n\n\n\nExpected Behavior\n\nBasically as described the node allways defaults to\n\n<img width=\"445\" height=\"287\" alt=\"Image\" src=\"https://github.com/user-attachments/assets/a4e174dc-49d1-4598-af2e-34cd5caafa88\" /> cant be clicked\n\nError:\nFile \"C:\\AI\\ComfyUI\\custom_nodes\\tts_audio_suite\\engines\\step_audio_editx\\step_audio_editx_downloader.py\", line 301, in resolve_model_path\nif model_identifier.startswith(\"local:\"):\n^^^^^^^^^^^^^^^^", "created": "2025-12-16T17:16:29Z", "labels": [], "context": "[Bug]Step Audio x Model is in exactly the same structure as shown in this repo, Dropdown not clickable on step model engine node **Describe the bug**\nA clear and concise description of what the bug is.\n\n\n\nExpected Behavior\n\nBasically as described the node allways defaults to\n\n<img width=\"445\" height=\"287\" alt=\"Image\" src=\"https"}


identifier: gh_issue_3735538425
source: github_issue
status: new
created_at: 2025-12-16 18:47:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3735538425", "title": "Couldn't parse CURLOPT_RESOLVE entry in setup lib.sh of tls branch", "url": "https://github.com/deviantony/docker-elk/issues/1137", "user": "ssimmons806", "user_url": "https://github.com/ssimmons806", "repo": "docker-elk", "body_preview": "<!--\nThanks for your issue report!\n\nIn order for us to be able to reproduce the problem and identify the root cause\nquickly, we kindly ask you to include *all* the information requested below in\nyour issue report. It saves us a lot of effort and allows us to provide you\nwith a solution with as little delay as possible.\n\nIssues submitted without the requested information will be closed.\nThank you for your understanding.\n-->\n\n\n### Problem description\n\n<!--\nPlease be as descriptive as possible rega", "created": "2025-12-16T16:41:02Z", "labels": [], "context": "Couldn't parse CURLOPT_RESOLVE entry in setup lib.sh of tls branch <!--\nThanks for your issue report!\n\nIn order for us to be able to reproduce the problem and identify the root cause\nquickly, we kindly ask you to include *all* the information requested below in\nyour "}


identifier: gh_issue_3735963690
source: github_issue
status: new
created_at: 2025-12-16 18:58:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3735963690", "title": "[personal] i can't freaking code omniblocks", "url": "https://github.com/OmniBlocks/scratch-gui/issues/548", "user": "supervoidcoder", "user_url": "https://github.com/supervoidcoder", "repo": "scratch-gui", "body_preview": "so i ran out of codespaces and i tried downloading omniblocks to code locally. it kinda worked at first, i can push and pull and have the codebase... but installing dependencies...oh boy\nso basically im a file hoarder + i install apps a lot... storagemaxxing.\n\ni literally can't npm ci.\nliterally:\n```powershell\n> Get-CimInstance Win32_LogicalDisk | Format-Table DeviceID,FreeSpace\n\nDeviceID FreeSpace\n-------- ---------\nC:       0\n\n```\n\nwhat do i do \ud83d\ude2d\ud83d\ude2d\ud83d\ude2d\ud83d\ude2d\ud83d\ude2d\ud83d\ude2d\ud83d\ude2d", "created": "2025-12-16T18:55:56Z", "labels": [], "context": "[personal] i can't freaking code omniblocks so i ran out of codespaces and i tried downloading omniblocks to code locally. it kinda worked at first, i can push and pull and have the codebase... but installing dependencies...oh boy\nso basically "}


identifier: gh_issue_3735938638
source: github_issue
status: new
created_at: 2025-12-16 18:58:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3735938638", "title": "Upgrade Apache Solr from 9.8.0 to 9.10.0", "url": "https://github.com/NASA-PDS/registry-legacy-solr/issues/228", "user": "jordanpadams", "user_url": "https://github.com/jordanpadams", "repo": "registry-legacy-solr", "body_preview": "## Are you sure this is not a new requirement or bug?\nYes\n\n## Task Type\nSub-task\n\n## \ud83d\udca1 Description\nUpgrade Apache Solr and SolrJ dependencies from version 9.8.0 to 9.10.0 across all modules in the registry-legacy-solr project.\n\n**Components Updated:**\n- Maven dependencies in harvest-legacy, registry-mgr-legacy, and catalog-legacy modules\n- Docker base image in Dockerfile (FROM solr:9.10.0)\n- Lucene version in solrconfig.xml files for both data and registry collections\n- Documentation (CLAUDE.md)", "created": "2025-12-16T18:46:03Z", "labels": ["i&t.skip", "task"], "context": "Upgrade Apache Solr from 9.8.0 to 9.10.0 ## Are you sure this is not a new requirement or bug?\nYes\n\n## Task Type\nSub-task\n\n## \ud83d\udca1 Description\nUpgrade Apache Solr and SolrJ dependencies from version 9.8.0 to 9.10.0 across all modules in the reg"}


identifier: gh_issue_3735937751
source: github_issue
status: new
created_at: 2025-12-16 18:58:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3735937751", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/java-sec-code/issues/15", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "java-sec-code", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-16T18:45:43Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3735931839
source: github_issue
status: new
created_at: 2025-12-16 18:58:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3735931839", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/java-sec-code/issues/14", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "java-sec-code", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-16T18:43:20Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3735907669
source: github_issue
status: new
created_at: 2025-12-16 18:58:58
data:
  {"source": "github_issue", "identifier": "gh_issue_3735907669", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/felix-test/issues/84", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "felix-test", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-16T18:33:49Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3735916955
source: github_issue
status: new
created_at: 2025-12-16 18:59:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3735916955", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-16", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/327", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (149)\n1. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n2. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:439`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n3. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:450`", "created": "2025-12-16T18:37:28Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-16 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (149)\n1. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without "}


identifier: gh_issue_3735778481
source: github_issue
status: new
created_at: 2025-12-16 18:59:01
data:
  {"source": "github_issue", "identifier": "gh_issue_3735778481", "title": "PR review workflow runs but fails due to missing repository / pull request context", "url": "https://github.com/google-github-actions/run-gemini-cli/issues/425", "user": "rodrigohfsantos1", "user_url": "https://github.com/rodrigohfsantos1", "repo": "run-gemini-cli", "body_preview": "### TL;DR\n\nThe Gemini CLI PR review GitHub Action runs but fails because it cannot detect the repository or pull request context, even when using the workflow generated by the Gemini setup and following the documentation on both GitHub Enterprise and standard GitHub.\n\n### Expected behavior\n\n_No response_\n\n### Observed behavior\n\nI set up GitHub Actions using the Gemini CLI as described in the official documentation:\nhttps://github.com/google-github-actions/run-gemini-cli/tree/main/examples/workfl", "created": "2025-12-16T17:56:59Z", "labels": ["priority/p0"], "context": "PR review workflow runs but fails due to missing repository / pull request context ### TL;DR\n\nThe Gemini CLI PR review GitHub Action runs but fails because it cannot detect the repository or pull request context, even when using the workflow generated by the Gemini setup and followi"}


identifier: gh_issue_3736026662
source: github_issue
status: new
created_at: 2025-12-16 19:22:05
data:
  {"source": "github_issue", "identifier": "gh_issue_3736026662", "title": "\ud83d\udcda Monthly Flashcard Review - December 2025", "url": "https://github.com/Chris-Girolamo-dev/modern-wisdom-flashcards/issues/4", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "modern-wisdom-flashcards", "body_preview": "# Modern Wisdom Monthly Review - December 2025\n\n**13 episodes analyzed** | **64 flashcards suggested**\n\n---\n\n## \ud83e\udde0 Comedy & Culture (1 cards)\n\n### 1. #1033- Judd Apatow - Why Comedies Suck Now\n\n**Q:** How does Judd Apatow view the impact of political correctness on modern comedy, and what does he believe is essential for comedy to thrive despite these constraints?\n\n**A:** Judd Apatow believes that while political correctness has made navigating comedy more challenging, it hasn't made comedy impos", "created": "2025-12-16T19:20:00Z", "labels": ["automation", "flashcards"], "context": "\ud83d\udcda Monthly Flashcard Review - December 2025 # Modern Wisdom Monthly Review - December 2025\n\n**13 episodes analyzed** | **64 flashcards suggested**\n\n---\n\n## \ud83e\udde0 Comedy & Culture (1 cards)\n\n### 1. #1033- Judd Apatow - Why Comedies Suck Now\n\n**Q:** "}


identifier: gh_issue_3735981213
source: github_issue
status: new
created_at: 2025-12-16 19:22:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3735981213", "title": "[Phase 1] Legacy build, Node compatibility and desktop packaging analysis", "url": "https://github.com/bitpredator/ets2-dashboard-skin/issues/34", "user": "bitpredator", "user_url": "https://github.com/bitpredator", "repo": "ets2-dashboard-skin", "body_preview": "This issue documents the current state of the build system, dependency compatibility, and desktop packaging feasibility of the ETS2 Dashboard Skin.\n\nThe goal is not to fix the legacy stack, but to clearly identify structural blockers, security risks, and technical constraints that justify a controlled modernization in Phase 2.\n\n**Environment tested**\n\n- OS: Windows 10 x64\n- Node.js:\n\n- \u274c Node 25.x \u2192 build fails (expected)\n\n- \u2705 Node 16.x LTS \u2192 build succeeds\n\nPackage manager: npm\n\n**Findings**\n- ", "created": "2025-12-16T19:02:35Z", "labels": [], "context": "[Phase 1] Legacy build, Node compatibility and desktop packaging analysis This issue documents the current state of the build system, dependency compatibility, and desktop packaging feasibility of the ETS2 Dashboard Skin.\n\nThe goal is not to fix the legacy stack, but to cle"}


identifier: gh_issue_3735978279
source: github_issue
status: new
created_at: 2025-12-16 19:22:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3735978279", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-16", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/331", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (149)\n1. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n2. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:439`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n3. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:450`", "created": "2025-12-16T19:01:34Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-16 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (149)\n1. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without "}


identifier: gh_issue_3735978251
source: github_issue
status: new
created_at: 2025-12-16 19:22:08
data:
  {"source": "github_issue", "identifier": "gh_issue_3735978251", "title": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-16", "url": "https://github.com/UniversalStandards/New-Government-agency-banking-Program/issues/330", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "New-Government-agency-banking-Program", "body_preview": "## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (149)\n1. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n2. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:439`\n   - Issue: Call to requests without timeout\n   - Confidence: LOW\n\n3. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:450`", "created": "2025-12-16T19:01:34Z", "labels": ["security", "vulnerability", "automated", "high-priority"], "context": "\ud83d\udd12 Security Vulnerabilities Detected - 2025-12-16 ## \ud83d\udd12 Security Scan Results\n\n### Bandit Security Issues (149)\n1. **request_without_timeout** (MEDIUM)\n   - File: `./modern_treasury/modern_treasury_helpers.py:426`\n   - Issue: Call to requests without "}


identifier: gh_issue_3735913428
source: github_issue
status: new
created_at: 2025-12-16 19:33:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3735913428", "title": "Security Health Check - GOOD (85/100) - 2025-12-16", "url": "https://github.com/Sami9889/Sami.dev-website/issues/185", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "Sami.dev-website", "body_preview": "# Security Health Check Report\n\n**Generated:** 12/16/2025, 6:36:00 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Incidents\n\n\u2705 No security incidents in the last 7 days\n\n## 3. Failed Security Scans (Last 24 Hours)\n\n\u2705 No failed security scans\n\n## 4. Open Pull Requests\n\n**Total Open PRs:** 7\n**PRs with Security Issues:** 0\n\n## 5. Security Vulnerabilities\n\n\u26a0\ufe0f Unable to fetch vulnerability data\n\n## 6. Repository Securi", "created": "2025-12-16T18:36:03Z", "labels": ["security-health", "automated-report", "good"], "context": "Security Health Check - GOOD (85/100) - 2025-12-16 # Security Health Check Report\n\n**Generated:** 12/16/2025, 6:36:00 PM\n**Scan Version:** v2.1.0\n\n---\n\n## 1. Branch Protection Status\n\n\n**Summary:** 0 protected, 0 unprotected\n\n## 2. Recent Security Inc"}


identifier: gh_issue_3735906190
source: github_issue
status: new
created_at: 2025-12-16 19:33:39
data:
  {"source": "github_issue", "identifier": "gh_issue_3735906190", "title": "\ud83d\udd12 Security vulnerabilities in xrpl@4.5.0", "url": "https://github.com/XRPLF/xrpl.js/issues/3160", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "xrpl.js", "body_preview": "The vulnerability scan has detected **CRITICAL/HIGH** vulnerabilities for `xrpl@4.5.0` on branch `release-xrpl-4.5.0`.\n\n**Release Branch:** `release-xrpl-4.5.0`\n**Package Version:** `4.5.0`\n\n**Full vulnerability report:** https://github.com/XRPLF/xrpl.js/actions/runs/20278553949/artifacts/4889396657\n\nPlease review the report and take necessary action.\n\n---\n_This issue was automatically generated by the Release Pipeline._\n", "created": "2025-12-16T18:33:25Z", "labels": ["security"], "context": "\ud83d\udd12 Security vulnerabilities in xrpl@4.5.0 The vulnerability scan has detected **CRITICAL/HIGH** vulnerabilities for `xrpl@4.5.0` on branch `release-xrpl-4.5.0`.\n\n**Release Branch:** `release-xrpl-4.5.0`\n**Package Version:** `4.5.0`\n\n**Full vu"}


identifier: gh_issue_3736072624
source: github_issue
status: new
created_at: 2025-12-16 20:09:50
data:
  {"source": "github_issue", "identifier": "gh_issue_3736072624", "title": "Explore Transitioning TDP Deployments from Cloud.gov Buildpacks to Docker Containers", "url": "https://github.com/raft-tech/TANF-app/issues/5542", "user": "elipe17", "user_url": "https://github.com/elipe17", "repo": "TANF-app", "body_preview": "## Background ##\n\nTDP currently deploys both frontend and backend applications to Cloud.gov using buildpacks. While buildpacks provide a convenient abstraction for deployment, they introduce several operational challenges including extended deployment times, dependency re-downloading on each deployment, and potential inconsistencies between environments. This spike explores transitioning to Docker container deployments to address these pain points while ensuring continued compliance with ACF's A", "created": "2025-12-16T19:37:09Z", "labels": ["dev", "spike"], "context": "Explore Transitioning TDP Deployments from Cloud.gov Buildpacks to Docker Containers ## Background ##\n\nTDP currently deploys both frontend and backend applications to Cloud.gov using buildpacks. While buildpacks provide a convenient abstraction for deployment, they introduce several o"}


identifier: gh_issue_3736205298
source: github_issue
status: new
created_at: 2025-12-16 20:22:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3736205298", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/nickwalkmsft/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @nickwalkmsft! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step", "created": "2025-12-16T20:21:45Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @nickwalkmsft! Welcome "}


identifier: gh_issue_3735970131
source: github_issue
status: new
created_at: 2025-12-16 20:22:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3735970131", "title": "[Application] Production readiness audit", "url": "https://github.com/pulibrary/lae-blacklight/issues/479", "user": "tpendragon", "user_url": "https://github.com/tpendragon", "repo": "lae-blacklight", "body_preview": "PUL IT has put together a [checklist for production applications](https://github.com/pulibrary/pul-it-handbook/blob/main/norms/production_application_checklist.md).\n\nThe work of this ticket is to go through the checklist and evaluate which of the criteria an application meets, and to create tickets for any criteria which an application does not meet.\n\n## Infrastructure\n  - [ ] All environments can be fully build using a playbook in [Princeton Ansible](https://github.com/pulibrary/princeton_ansib", "created": "2025-12-16T18:58:26Z", "labels": [], "context": "[Application] Production readiness audit PUL IT has put together a [checklist for production applications](https://github.com/pulibrary/pul-it-handbook/blob/main/norms/production_application_checklist.md).\n\nThe work of this ticket is to go t"}


identifier: gh_issue_3735969009
source: github_issue
status: new
created_at: 2025-12-16 20:22:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3735969009", "title": "Production readiness audit", "url": "https://github.com/pulibrary/imagecat-rails/issues/323", "user": "tpendragon", "user_url": "https://github.com/tpendragon", "repo": "imagecat-rails", "body_preview": "PUL IT has put together a [checklist for production applications](https://github.com/pulibrary/pul-it-handbook/blob/main/norms/production_application_checklist.md).\n\nThe work of this ticket is to go through the checklist and evaluate which of the criteria an application meets, and to create tickets for any criteria which an application does not meet.\n\n## Infrastructure\n  - [ ] All environments can be fully build using a playbook in [Princeton Ansible](https://github.com/pulibrary/princeton_ansib", "created": "2025-12-16T18:57:59Z", "labels": ["dls-work-cycle"], "context": "Production readiness audit PUL IT has put together a [checklist for production applications](https://github.com/pulibrary/pul-it-handbook/blob/main/norms/production_application_checklist.md).\n\nThe work of this ticket is to go t"}


identifier: gh_issue_3735967189
source: github_issue
status: new
created_at: 2025-12-16 20:22:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3735967189", "title": "Production Readiness Audit", "url": "https://github.com/pulibrary/dpul-collections/issues/1002", "user": "tpendragon", "user_url": "https://github.com/tpendragon", "repo": "dpul-collections", "body_preview": "PUL IT has put together a [checklist for production applications](https://github.com/pulibrary/pul-it-handbook/blob/main/norms/production_application_checklist.md).\n\nThe work of this ticket is to go through the checklist and evaluate which of the criteria an application meets, and to create tickets for any criteria which an application does not meet.\n\n## Infrastructure\n  - [ ] All environments can be fully build using a playbook in [Princeton Ansible](https://github.com/pulibrary/princeton_ansib", "created": "2025-12-16T18:57:16Z", "labels": ["dls-work-cycle"], "context": "Production Readiness Audit PUL IT has put together a [checklist for production applications](https://github.com/pulibrary/pul-it-handbook/blob/main/norms/production_application_checklist.md).\n\nThe work of this ticket is to go t"}


identifier: gh_issue_3735965109
source: github_issue
status: new
created_at: 2025-12-16 20:22:54
data:
  {"source": "github_issue", "identifier": "gh_issue_3735965109", "title": "Production readiness audit", "url": "https://github.com/pulibrary/dpul/issues/1661", "user": "tpendragon", "user_url": "https://github.com/tpendragon", "repo": "dpul", "body_preview": "PUL IT has put together a [checklist for production applications](https://github.com/pulibrary/pul-it-handbook/blob/main/norms/production_application_checklist.md).\n\nThe work of this ticket is to go through the checklist and evaluate which of the criteria an application meets, and to create tickets for any criteria which an application does not meet.\n\n## Infrastructure\n  - [ ] All environments can be fully build using a playbook in [Princeton Ansible](https://github.com/pulibrary/princeton_ansib", "created": "2025-12-16T18:56:29Z", "labels": ["dls-work-cycle"], "context": "Production readiness audit PUL IT has put together a [checklist for production applications](https://github.com/pulibrary/pul-it-handbook/blob/main/norms/production_application_checklist.md).\n\nThe work of this ticket is to go t"}


identifier: gh_issue_3736190761
source: github_issue
status: queued
created_at: 2025-12-16 20:34:38
data:
  {"source": "github_issue", "identifier": "gh_issue_3736190761", "title": "Update next package dependency to 15.5.9", "url": "https://github.com/matthewctechnology/stacked/issues/38", "user": "matthewctechnology", "user_url": "https://github.com/matthewctechnology", "repo": "stacked", "body_preview": "## Summary\nnext 15.5.6 has a critical vulnerability\n\n## Description\n`next` 15.5.6 has a critical vulnerability and neede to be updated.  The \n\n## Proposal\n- Run `npm audit` to identify vulnerability\n- Run `npm audit fix --force` to update to `next` `^15.5.9`\n\n## Acceptance Criteria\n- Given an audit identifies a package with a vulnerability, when npm audit forces a fix, then package is updated and there is no longer a  vulnerability", "created": "2025-12-16T20:15:53Z", "labels": ["enhancement"], "context": "Update next package dependency to 15.5.9 ## Summary\nnext 15.5.6 has a critical vulnerability\n\n## Description\n`next` 15.5.6 has a critical vulnerability and neede to be updated.  The \n\n## Proposal\n- Run `npm audit` to identify vulnerability\n-"}


identifier: gh_issue_3736254448
source: github_issue
status: new
created_at: 2025-12-16 20:46:28
data:
  {"source": "github_issue", "identifier": "gh_issue_3736254448", "title": "[ENHANCEMENT]: Implement Dependabot Security Updates", "url": "https://github.com/CrowdUp-org/CrowdUp/issues/27", "user": "LoackyBit", "user_url": "https://github.com/LoackyBit", "repo": "CrowdUp", "body_preview": "### Affected area / component\n\nInfrastucture, Dependencies\n\n### Current behavior\n\nThe repository does not currently have Dependabot configured or its security recommendations have not been implemented, leaving potential vulnerabilities in unresolved dependencies.\n\n### Proposed improvement\n\nConfigure and enable Dependabot for automatic vulnerability monitoring in dependencies, review all active alerts and implement critical security updates suggested.\n\n### Impact\n\nMedium\n\n### Acceptance criteria\n", "created": "2025-12-16T20:41:23Z", "labels": ["Enhancement \u2728"], "context": "[ENHANCEMENT]: Implement Dependabot Security Updates ### Affected area / component\n\nInfrastucture, Dependencies\n\n### Current behavior\n\nThe repository does not currently have Dependabot configured or its security recommendations have not been implemented"}


identifier: gh_issue_3736225262
source: github_issue
status: new
created_at: 2025-12-16 20:46:32
data:
  {"source": "github_issue", "identifier": "gh_issue_3736225262", "title": "Phase 11: Serverless Migration + Security", "url": "https://github.com/billgrant/music-graph/issues/25", "user": "billgrant", "user_url": "https://github.com/billgrant", "repo": "music-graph", "body_preview": "## Overview\nMigrate from single VM with docker-compose to serverless architecture for better redundancy, rolling updates, and lower operational burden.\n\n## Scope\n\n### Serverless Migration\n- [ ] Move database to managed service (Neon free tier or Cloud SQL)\n- [ ] Deploy Flask app to Cloud Run\n- [ ] Update Terraform for new architecture (Cloud Run, database, IAM)\n- [ ] Update CI/CD pipeline for Cloud Run deployments\n- [ ] Decommission current Compute Engine VM\n- [ ] Update documentation (README, C", "created": "2025-12-16T20:29:25Z", "labels": [], "context": "Phase 11: Serverless Migration + Security ## Overview\nMigrate from single VM with docker-compose to serverless architecture for better redundancy, rolling updates, and lower operational burden.\n\n## Scope\n\n### Serverless Migration\n- [ ] Move d"}


identifier: gh_issue_3736327094
source: github_issue
status: new
created_at: 2025-12-16 21:11:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3736327094", "title": "CVE-2025-61919 (High) detected in rack-2.2.19.gem", "url": "https://github.com/ManageIQ/miq_bot/issues/839", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "miq_bot", "body_preview": "## CVE-2025-61919 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>rack-2.2.19.gem</b></summary>\n\n<p>Rack provides a minimal, modular and adaptable interface for developing\nweb applications in Ruby. By wrapping HTTP requests and responses in\nthe simplest way possible, it unifies and distills the API for web\nservers, web frameworks, and software in between (the so-", "created": "2025-12-16T21:08:39Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-61919 (High) detected in rack-2.2.19.gem ## CVE-2025-61919 - High Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b"}


identifier: gh_issue_3736327022
source: github_issue
status: new
created_at: 2025-12-16 21:11:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3736327022", "title": "CVE-2025-61780 (Medium) detected in rack-2.2.19.gem", "url": "https://github.com/ManageIQ/miq_bot/issues/838", "user": "mend-bolt-for-github[bot]", "user_url": "https://github.com/apps/mend-bolt-for-github", "repo": "miq_bot", "body_preview": "## CVE-2025-61780 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>rack-2.2.19.gem</b></summary>\n\n<p>Rack provides a minimal, modular and adaptable interface for developing\nweb applications in Ruby. By wrapping HTTP requests and responses in\nthe simplest way possible, it unifies and distills the API for web\nservers, web frameworks, and software in between (the s", "created": "2025-12-16T21:08:37Z", "labels": ["Mend: dependency security vulnerability"], "context": "CVE-2025-61780 (Medium) detected in rack-2.2.19.gem ## CVE-2025-61780 - Medium Severity Vulnerability\n<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - "}


identifier: gh_issue_3736314745
source: github_issue
status: new
created_at: 2025-12-16 21:11:18
data:
  {"source": "github_issue", "identifier": "gh_issue_3736314745", "title": "netty-codec-http-4.1.125.Final.jar: 1 vulnerabilities (highest severity is: 6.5)", "url": "https://github.com/opensearch-project/opensearch-protobufs/issues/334", "user": "mend-for-github-com[bot]", "user_url": "https://github.com/apps/mend-for-github-com", "repo": "opensearch-protobufs", "body_preview": "<details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>netty-codec-http-4.1.125.Final.jar</b></summary>\n\n<p></p>\n<p>Library home page: <a href=\"https://netty.io/\">https://netty.io/</a></p>\n<p>Path to dependency file: /WORKSPACE</p>\n<p>Path to vulnerable library: /tmp/containerbase/cache/.cache/bazel/_bazel_wss-scanner/e9f87fdbefc81034778f5e91abcd9b44/external/maven/v1/https/repo.maven.apache.org/mav", "created": "2025-12-16T21:03:34Z", "labels": ["Mend: dependency security vulnerability", "untriaged"], "context": "netty-codec-http-4.1.125.Final.jar: 1 vulnerabilities (highest severity is: 6.5) <details><summary><img src='https://whitesource-resources.whitesourcesoftware.com/vulnerability_details.png' width=19 height=20> Vulnerable Library - <b>netty-codec-http-4.1.125.Final.jar</b></summary"}


identifier: gh_issue_3736283142
source: github_issue
status: new
created_at: 2025-12-16 21:11:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3736283142", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/felix-test/issues/91", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "felix-test", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-16T20:51:59Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3736258266
source: github_issue
status: new
created_at: 2025-12-16 21:11:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3736258266", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/reactor/issues/39", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "reactor", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-16T20:42:51Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3736254956
source: github_issue
status: new
created_at: 2025-12-16 21:11:21
data:
  {"source": "github_issue", "identifier": "gh_issue_3736254956", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/reactor/issues/38", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "reactor", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-16T20:41:36Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3736195944
source: github_issue
status: new
created_at: 2025-12-16 21:22:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3736195944", "title": "[BUG]: Dependabot's new ecosystems are not supported", "url": "https://github.com/zizmorcore/zizmor/issues/1451", "user": "JackPlowman", "user_url": "https://github.com/JackPlowman", "repo": "zizmor", "body_preview": "### Pre-submission checks\n\n- [x] I am **not** filing a feature request. These should be filed via the feature request form instead.\n- [x] I have checked the [Troubleshooting Guide](https://docs.zizmor.sh/troubleshooting) for my problem.\n- [x] I have looked through both the [open](https://github.com/zizmorcore/zizmor/issues?q=is%3Aissue+is%3Aopen+) and [closed](https://github.com/zizmorcore/zizmor/issues?q=is%3Aissue%20state%3Aclosed) issues for a duplicate report.\n\n### zizmor version\n\nv1.18.0\n\n#", "created": "2025-12-16T20:17:51Z", "labels": ["bug"], "context": "[BUG]: Dependabot's new ecosystems are not supported ### Pre-submission checks\n\n- [x] I am **not** filing a feature request. These should be filed via the feature request form instead.\n- [x] I have checked the [Troubleshooting Guide](https://docs.zizmor"}


identifier: gh_issue_3736328807
source: github_issue
status: new
created_at: 2025-12-16 21:22:59
data:
  {"source": "github_issue", "identifier": "gh_issue_3736328807", "title": "Exercise: Secure your Repository's Supply Chain", "url": "https://github.com/abusebastian/skills-secure-repository-supply-chain/issues/1", "user": "github-actions[bot]", "user_url": "https://github.com/apps/github-actions", "repo": "skills-secure-repository-supply-chain", "body_preview": "## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @abusebastian! Welcome to your Skills exercise!\n\nLet&#39;s explore how to secure your repository&#39;s supply chain, understand dependencies in your environment, and find vulnerabilities in those dependencies and patch them. \ud83d\udcbb\u2728\n\n---\n\n\u2728 **This is an interactive, hands-on GitHub Skills exercise!**\n\nAs you complete each step", "created": "2025-12-16T21:09:21Z", "labels": [], "context": "Exercise: Secure your Repository's Supply Chain ## Secure your Repository&#39;s Supply Chain\n\n<img alt=\"original github octocat\" src=\"https://octodex.github.com/images/original.png\" align=\"left\" height=\"80px\" />\n\n\ud83d\udc4b Hey there @abusebastian! Welcome "}


identifier: gh_issue_3736371869
source: github_issue
status: new
created_at: 2025-12-16 21:35:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3736371869", "title": "Dependency Audit", "url": "https://github.com/Testing-For-Organization/reactor/issues/40", "user": "alchemain-qa-bot[bot]", "user_url": "https://github.com/apps/alchemain-qa-bot", "repo": "reactor", "body_preview": "## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-16T21:25:38Z", "labels": [], "context": "Dependency Audit ## Dependency Audit Overview\n\nThe table presented below outlines a dependency audit based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3736366870
source: github_issue
status: new
created_at: 2025-12-16 21:35:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3736366870", "title": "Dependency Remediation Plan", "url": "https://github.com/00felix/git-machete-intellij-plugin/issues/2", "user": "00felix-app[bot]", "user_url": "https://github.com/apps/00felix-app", "repo": "git-machete-intellij-plugin", "body_preview": "## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-16T21:24:14Z", "labels": [], "context": "Dependency Remediation Plan ## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3736354350
source: github_issue
status: new
created_at: 2025-12-16 21:35:22
data:
  {"source": "github_issue", "identifier": "gh_issue_3736354350", "title": "Dependency Remediation Plan", "url": "https://github.com/00felix/DivineRPG/issues/2", "user": "00felix-app[bot]", "user_url": "https://github.com/apps/00felix-app", "repo": "DivineRPG", "body_preview": "## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependencies within this project that require attention to ensure compliance, security, and optimal performance.\n\n### Key Highlights:\n\n- **Dependencies**: The table lists dependencies under review for upgrade and remediation.\n- **Current vs. Target Versions**: Each dependency is accompanied by its current ve", "created": "2025-12-16T21:19:31Z", "labels": [], "context": "Dependency Remediation Plan ## Remediation Plan Overview\n\nThe table presented below outlines a remediation plan based on the findings from our recent Software Composition Analysis (SCA) scan. We have identified several dependenc"}


identifier: gh_issue_3736385978
source: github_issue
status: new
created_at: 2025-12-16 22:11:56
data:
  {"source": "github_issue", "identifier": "gh_issue_3736385978", "title": "Tech-stack-aware prompts: Different attack patterns for Node, Java, .NET, Python", "url": "https://github.com/doogie-bigmack/shaart/issues/20", "user": "doogie-bigmack", "user_url": "https://github.com/doogie-bigmack", "repo": "shaart", "body_preview": "## Summary\nCreate technology-specific prompt variants for better vulnerability detection accuracy.\n\n## Current State\n- All applications treated uniformly\n- Tech-specific vulnerabilities missed\n- Generic payloads used regardless of stack\n\n## Tech-Specific Patterns\n\n### Node.js / JavaScript\n- Prototype pollution\n- Template injection (EJS, Pug, Handlebars)\n- npm package vulnerabilities\n- Event loop blocking\n\n### Python\n- Pickle deserialization\n- Jinja2 SSTI\n- Django ORM injection\n- Flask debug mode", "created": "2025-12-16T21:29:44Z", "labels": [], "context": "Tech-stack-aware prompts: Different attack patterns for Node, Java, .NET, Python ## Summary\nCreate technology-specific prompt variants for better vulnerability detection accuracy.\n\n## Current State\n- All applications treated uniformly\n- Tech-specific vulnerabilities missed\n- Gener"}


identifier: gh_issue_3736473532
source: github_issue
status: new
created_at: 2025-12-16 22:24:37
data:
  {"source": "github_issue", "identifier": "gh_issue_3736473532", "title": "[Docs]: Update and Simplify Documentation for Recent Features", "url": "https://github.com/dawidurbanski/universal-data-layer/issues/46", "user": "dawidurbanski", "user_url": "https://github.com/dawidurbanski", "repo": "universal-data-layer", "body_preview": "# [Docs]: Update and Simplify Documentation for Recent Features\n\n## Summary\n\nUpdate the documentation site to be accurate, up-to-date, and structured as a progressive learning journey from simplest concepts to advanced usage.\n\n## Context\n\n**Component**: `docs/` - Nuxt/Docus documentation app\n**Estimated Time**: 2-3 days\n**Priority**: High\n\n## Problem Statement\n\nThe current documentation needs:\n\n1. **Accuracy review**: Ensure all code samples and instructions work with current packages\n2. **Missi", "created": "2025-12-16T21:55:52Z", "labels": [], "context": "[Docs]: Update and Simplify Documentation for Recent Features # [Docs]: Update and Simplify Documentation for Recent Features\n\n## Summary\n\nUpdate the documentation site to be accurate, up-to-date, and structured as a progressive learning journey from simplest co"}


identifier: gh_issue_3736542150
source: github_issue
status: new
created_at: 2025-12-16 22:48:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3736542150", "title": "Update npm publishing to use provenance and granular access tokens", "url": "https://github.com/migration-script-runner/msr-core/issues/133", "user": "vlavrynovych", "user_url": "https://github.com/vlavrynovych", "repo": "msr-core", "body_preview": "## Context\n\nnpm has deprecated classic tokens in favor of more secure granular access tokens with automatic expiration (max 90 days). Manual publishing using classic tokens is no longer sustainable.\n\n## Current State\n\n- Publishing is done manually using classic tokens\n- `.github/workflows/npm-publish.yml` exists but not configured for automated publishing\n- Trusted publisher already configured on npm for the workflow\n\n## Proposed Solution\n\nUpdate to modern npm publishing with **provenance** (cry", "created": "2025-12-16T22:22:16Z", "labels": ["\ud83d\udfe1 Priority: Medium", "\ud83d\udfe2 Test: Low", "\ud83e\uddf9 Type: Tech Debt"], "context": "Update npm publishing to use provenance and granular access tokens ## Context\n\nnpm has deprecated classic tokens in favor of more secure granular access tokens with automatic expiration (max 90 days). Manual publishing using classic tokens is no longer sustainable.\n\n"}


identifier: gh_issue_3736536435
source: github_issue
status: new
created_at: 2025-12-16 22:48:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3736536435", "title": "[Security] npm dependency chain for MCP is negligent - ship native binaries", "url": "https://github.com/anthropics/claude-code/issues/14239", "user": "nfguide", "user_url": "https://github.com/nfguide", "repo": "claude-code", "body_preview": "### Preflight Checklist\n\n- [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet\n- [x] This is a single bug report (please file separate reports for different bugs)\n- [x] I am using the latest version of Claude Code\n\n### What's Wrong?\n\n  MCP plugins rely on npm/npx to fetch dependencies at runtime. npm has a documented history of supply chain\n  compromises (event-stream, ua-parser-js, no", "created": "2025-12-16T22:20:14Z", "labels": ["enhancement", "has repro", "area:mcp", "area:security"], "context": "[Security] npm dependency chain for MCP is negligent - ship native binaries ### Preflight Checklist\n\n- [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet\n- [x] Thi"}


identifier: gh_issue_3736310405
source: github_issue
status: new
created_at: 2025-12-16 22:48:55
data:
  {"source": "github_issue", "identifier": "gh_issue_3736310405", "title": "ci: Standardize GitHub Actions SHA pinning across all workflows", "url": "https://github.com/mickdarling/merview/issues/321", "user": "mickdarling", "user_url": "https://github.com/mickdarling", "repo": "merview", "body_preview": "## Summary\n\nStandardize the use of SHA-pinned GitHub Actions dependencies across all workflow files for improved security.\n\n## Background\n\nDuring PR #320 (Internal Link Verification workflow), Claude review identified that the repository has inconsistent SHA pinning:\n\n- `security.yml` uses SHA-pinned actions (e.g., `actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4`)\n- `ci.yml` uses version tags (e.g., `actions/checkout@v4`)\n- New `internal-link-check.yml` follows security.yml patte", "created": "2025-12-16T21:01:44Z", "labels": ["enhancement", "area: security", "github_actions"], "context": "ci: Standardize GitHub Actions SHA pinning across all workflows ## Summary\n\nStandardize the use of SHA-pinned GitHub Actions dependencies across all workflow files for improved security.\n\n## Background\n\nDuring PR #320 (Internal Link Verification workflow), Claude "}


