All pull requests

Pull requests

• [GHSA-rmxm-3fg6-px4f] @hono/node-server: serveStatic decodes the request path a second time, leading to bypass of middleware on static paths

  #11093·yusukebe opened Nov 11, 2026·

  ·
  3

• Improve GHSA-4ppq-6vhc-4q97 (CVE-2026-115448): add missing version ranges

  #11092·rushitparekh opened Nov 11, 2026·

  ·
  3

• Improve GHSA-mf84-q3cw-6ch9 (CVE-2026-116593): add missing version ranges

  #11091·rushitparekh opened Nov 11, 2026·

  ·
  4

• Improve GHSA-jmxh-862m-3gxj (CVE-2026-115644): add missing version ranges

  #11090·rushitparekh opened Nov 11, 2026·

  ·
  2

• Improve GHSA-f6x4-cq8q-x8cq (CVE-2026-111496): add missing version ranges

  #11089·rushitparekh opened Nov 11, 2026·

  ·
  2

• Improve GHSA-7xcv-9qfj-9q57 (CVE-2026-111115): add missing version ranges

  #11088·rushitparekh opened Nov 11, 2026·

  ·
  2

• Improve GHSA-ppj6-m59w-vr92 (CVE-2026-111108): add missing version ranges

  #11087·rushitparekh opened Nov 11, 2026·

  ·
  3

• Improve GHSA-j27v-m9ww-p89m (CVE-2026-110985): add missing version ranges

  #11086·rushitparekh opened Nov 11, 2026·

  ·
  3

• Add missing ecosystem packages for GHSA-h5hj-56h4-rwcp (CVE-2026-41606)

  #11085·rushitparekh opened Nov 11, 2026·

  ·
  1

• Add missing ecosystem packages for GHSA-7gqw-825c-3842 (CVE-2026-41607)

  #11084·rushitparekh opened Nov 11, 2026·

  ·
  1

• Add missing ecosystem packages for GHSA-jr4c-vcm8-65vh (CVE-2026-24343)

  #11083·rushitparekh opened Nov 11, 2026·

  ·
  1

• [GHSA-w6c6-c85g-mmv6] Name the module paths github.com/sigstore/cosign/v3 and /v2

  #11082·jamesconwaydev opened Nov 11, 2026·

  ·
  3

• [GHSA-hcm4-6hpj-vghm] use the Go module github.com/zarf-dev/zarf instead of the package path .../src/pkg/archive

  #11078·zyl71 opened Nov 11, 2026·

  ·
  1

• Add sagemaker-core to GHSA-rjrp-m2jw-pv9c

  #11076·dougj-contrast opened Nov 10, 2026·

  ·
  1

• Add opentelemetry-instrumentation-wsgi to GHSA-5rv5-6h4r-h22v

  #11075·dougj-contrast opened Nov 10, 2026·

  ·
  1

• Add langgraph-checkpoint to GHSA-g48c-2wqr-h844

  #11074·dougj-contrast opened Nov 10, 2026·

  ·
  2

• Add langchain-openai to GHSA-2g6r-c272-w58r

  #11073·dougj-contrast opened Nov 10, 2026·

  ·
  1

• Add langchain-core to GHSA-h9j7-5xvc-qhg5

  #11072·dougj-contrast opened Nov 10, 2026·

  ·
  1

• Add llama-index-core to GHSA-rg9h-vx28-xxp5

  #11071·dougj-contrast opened Nov 10, 2026·

  ·
  1

• Add the eight affected vector store packages to GHSA-v3c8-3pr6-gr7p

  #11070·dougj-contrast opened Nov 10, 2026·

  ·
  2

• Add llama-index-core, llama-index-experimental to GHSA-jmgm-gx32-vp4w

  #11069·dougj-contrast opened Nov 10, 2026·

  ·
  2

• Add llama-index-readers-web to GHSA-jvpf-xf32-2w4q

  #11068·dougj-contrast opened Nov 10, 2026·

  ·
  2

• [GHSA-75pg-wvh3-34jr] When coalescing adjacent text nodes in addText and...

  #11067·marquiz opened Nov 10, 2026·

  ·
  1

• [GHSA-vr39-qqr3-x9v4] Mozilla blocked compromised intermediate eMudhra...

  #11065·ultragangster7 opened Nov 10, 2026·

  ·
  3

• Ultragangster7 ghsa 2x8c 95vh gfv4

  #11064·ultragangster7 opened Nov 10, 2026·

  ·
  3