5 Pull requests merged by 4 people

• [GHSA-q34m-jh98-gwm2] Werkzeug possible resource exhaustion when parsing file data in forms

  #5124 merged Dec 27, 2024

• [GHSA-5qww-56gc-f66c] An OS command injection vulnerability exists in the name...

  #5128 merged Dec 26, 2024

• [GHSA-76h9-2vwh-w278] The ObjectSerializationDecoder in Apache MINA uses Java’s...

  #5127 merged Dec 26, 2024

• [GHSA-5j33-cvvr-w245] Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

  #5125 merged Dec 26, 2024

• [GHSA-9vm7-v8wj-3fqw] keycloak-core: open redirect via "form_post.jwt" JARM response mode

  #5117 merged Dec 26, 2024

3 Pull requests opened by 2 people

• [GHSA-w3c8-7r8f-9jp8] Spring MVC controller vulnerable to a DoS attack

  #5129 opened Dec 26, 2024

• [GHSA-pr98-23f8-jwxv] QOS.CH logback-core Expression Language Injection vulnerability

  #5132 opened Dec 30, 2024

• [GHSA-6v67-2wr5-gvf4] QOS.CH logback-core Server-Side Request Forgery vulnerability

  #5133 opened Dec 30, 2024

2 Issues closed by 2 people

• q

  #4778 closed Dec 24, 2024

• Same ID with different scores and information

  #5123 closed Dec 23, 2024

2 Issues opened by 1 person

• 42

  #5131 opened Dec 28, 2024

• This change appears to be invalid.

  #5130 opened Dec 28, 2024

5 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Stop creation of CVSS v4 by yourself

  #5058 commented on Dec 30, 2024 • 0 new comments

• [GHSA-w3c8-7r8f-9jp8] Spring MVC controller vulnerable to a DoS attack

  #5080 commented on Dec 28, 2024 • 0 new comments

• [GHSA-2w89-5px3-fvx6] iperf v3.17.1 was discovered to contain a segmentation...

  #5100 commented on Dec 24, 2024 • 0 new comments

• [GHSA-6gq9-2wfh-4rj3] Buffer Overflow vulnerability in radarorg radare2 v.5.8.8...

  #5101 commented on Dec 24, 2024 • 0 new comments

• [GHSA-6c5p-j8vq-pqhj] python-jose algorithm confusion with OpenSSH ECDSA keys

  #5121 commented on Dec 23, 2024 • 0 new comments