10 Pull requests merged by 3 people

• fix: pax-logging-log4j2 ranges affected by CVE-2021-44832

  #5523 merged May 9, 2025

• fix: pax-logging-log4j2 ranges affected by CVE-2021-45105

  #5522 merged May 9, 2025

• fix: pax-logging-log4j2 ranges affected by CVE-2021-45046

  #5521 merged May 9, 2025

• fix: pax-logging-log4j2 ranges affected by CVE-2021-44228

  #5520 merged May 9, 2025

• Update GHSA-9q29-jcjw-fw7h.json

  #5514 merged May 8, 2025

• Update GHSA-vm9c-39jx-q45w.json

  #5515 merged May 8, 2025

• Update GHSA-rg56-94j7-hjx9.json

  #5516 merged May 8, 2025

• Update GHSA-pj96-xh2w-fgqx.json

  #5518 merged May 8, 2025

• Update GHSA-hxgg-4qww-85ph.json

  #5517 merged May 8, 2025

• [GHSA-9w9f-6mg8-jp7w] Missing Role Based Access Control for the REST handlers in bleve/http package

  #5511 merged May 8, 2025

1 Pull request opened by 1 person

• [GHSA-c678-jfcj-6jmf] A vulnerability was found in PyTorch 2.6.0+cu124. It has...

  #5512 opened May 8, 2025

2 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• [GHSA-fc9h-whq2-v747] Valid ECDSA signatures erroneously rejected in Elliptic

  #5442 commented on May 8, 2025 • 0 new comments

• [GHSA-hw58-3793-42gg] Keycloak hostname verification

  #5495 commented on May 8, 2025 • 0 new comments