All pull requests

Pull requests

• Add advisories for four published SurrealDB GHSAs (surrealdb, surrealdb-core, surrealdb-parser, surrealkv)

  #3505·YZL0v3ZZ opened Nov 6, 2026·4 tasks done·

  ·

• Add advisory for rmcp unbounded HTTP response bodies

  #3504·DaleSeo opened Nov 5, 2026Contributor·4 tasks done·

  ·

• Add advisory for rmcp OAuth SSRF via DNS resolution

  #3503·DaleSeo opened Nov 5, 2026Contributor·4 tasks done·

  ·

• Add advisory for rmcp unbounded tool schema cache

  #3502·DaleSeo opened Nov 5, 2026Contributor·4 tasks done·

  ·

• astral-tl: mark as unmaintained

  #3500·woodruffw opened Nov 5, 2026Contributor·4 tasks done·

  ·

• Drop references to GitHub advisories mentioned in aliases

  #3499·djc opened Nov 5, 2026Member·

  ·

• add advisory cpio

  #3482·muhammad-hassnain opened Nov 1, 2026Contributor·3 of 4 tasks·

  ·
  2

• add advisory ocipkg

  #3474·muhammad-hassnain opened Oct 31, 2026Contributor·4 tasks done·

  ·
  5

• Add advisory for postrust-core: unbounded recursion aborts the process

  #3473·bhanuc opened Oct 31, 2026·

  ·
  1

• Add advisory for postrust-core: SQL injection through a cast's type name

  #3472·bhanuc opened Oct 31, 2026·

  ·
  1

• dnp3: remotely reachable panic in the outstation (GHSA-9f93-5j9q-v692)

  #3462·jadamcrain opened Oct 29, 2026·

  ·
  1

• Add advisory for rodbus GHSA-x8fh-359r-wgxm

  #3461·jadamcrain opened Oct 29, 2026·

  ·
  1

• Adds unmaintained serde_urlencoded crate

  #3456·sanpii opened Oct 28, 2026Contributor·4 tasks done·

  ·
  1

• added two new advisories for brotlic & brotli-sys related to CVE-2026-111497

  #3443·6mile opened Oct 25, 2026·

  ·
  5

• owned-alloc: RawVec::resize calls realloc on a dangling pointer

  #3442·hardhus opened Oct 24, 2026·

  ·
  1

• Add advisory for xmloxide DTD content-model stack overflow (CVE-2026-61727)

  #3436·williamareynolds opened Oct 23, 2026·4 tasks done·

  ·
  3

• Add advisory for ark-groth16 missing public input length check

  #3410·D33BaT0 opened Oct 20, 2026·3 of 4 tasks·

  ·
  1

• Add ligerito advisories: proof forgery, 64-bit Fiat–Shamir challenges

  #3370·hitchho opened Oct 14, 2026·

  ·
  1

• Add advisories for ephemeral-rollups-sdk and ephemeral-rollups-pinocchio: undelegation buffer not validated

  #3356·kriss39 opened Oct 11, 2026·3 of 4 tasks·

  ·
  4

• Added gaoya advisory

  #3350·Ollie-Pearce opened Oct 10, 2026Contributor·3 of 4 tasks·

  ·
  3

• Added advisory for grin_secp256k1zkp

  #3349·Ollie-Pearce opened Oct 10, 2026Contributor·3 of 4 tasks·

  ·
  1

• Added libvips advisory

  #3348·Ollie-Pearce opened Oct 10, 2026Contributor·3 of 4 tasks·

  ·
  2

• Added advisory for pcap-async

  #3347·Ollie-Pearce opened Oct 10, 2026Contributor·3 of 4 tasks·

  ·
  1

• Add advisory for openjp2 memory corruption bug

  #3346·Ollie-Pearce opened Oct 10, 2026Contributor·3 of 4 tasks·

  ·
  1

• Add advisory: finalfusion unbounded allocations (CWE-770)

  #3338·li-jin-quan opened Oct 9, 2026Contributor·

  ·
  1