3 Pull requests merged by 3 people

• [GHSA-8gqj-226h-gm8r] Passport-wsfed-saml2 allows SAML Authentication Bypass via Attribute Smuggling

  #5509 merged May 7, 2025

• [GHSA-rhh4-rh7c-7r5v] Archiver Path Traversal vulnerability

  #5506 merged May 7, 2025

• [GHSA-pfrc-5hhq-6hvr] Showdoc Unauthenticated Access

  #5505 merged May 6, 2025

4 Pull requests opened by 1 person

• [GHSA-jfh8-c2jp-5v3q] Remote code injection in Log4j

  #5501 opened May 5, 2025

• Add `pax-logging-log4j2` to CVE-2021-45046

  #5502 opened May 5, 2025

• Add affected `pax-logging-log4j2` to CVE-2021-45105

  #5503 opened May 5, 2025

• Add affected `pax-logging-log4j2` to CVE-2021-44832

  #5504 opened May 5, 2025

1 Unresolved conversation

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• [GHSA-gvwq-6fmx-28xm] node-opcua-alarm-condition prototype pollution vulnerability

  #5474 commented on May 7, 2025 • 0 new comments