This repository was archived by the owner on Jun 12, 2026. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issues
is:issue state:open
is:issue state:open
Search results
[Security] [Dependabot] Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
security:findingSecurity finding requiring remediationSecurity finding requiring remediationStatus: Open.#741 In ianlintner/caretaker;[Security] [Dependabot] React Router's vendored turbo-stream v2 allows arbitrary constructor invocation via TYPE_ERROR deserialization leading to Unauth RCE
security:findingSecurity finding requiring remediationSecurity finding requiring remediationStatus: Open.#739 In ianlintner/caretaker;[Security] [Dependabot] React Router vulnerable to DoS via unbounded path expansion in __manifest endpoint
security:findingSecurity finding requiring remediationSecurity finding requiring remediationStatus: Open.#736 In ianlintner/caretaker;[Security] [Dependabot] React Router's vendored turbo-stream v2 allows arbitrary constructor invocation via TYPE_ERROR deserialization leading to Unauth RCE
security:findingSecurity finding requiring remediationSecurity finding requiring remediationStatus: Open.#737 In ianlintner/caretaker;[Security] [Dependabot] React Router's vendored turbo-stream v2 allows arbitrary constructor invocation via TYPE_ERROR deserialization leading to Unauth RCE
security:findingSecurity finding requiring remediationSecurity finding requiring remediationStatus: Open.#738 In ianlintner/caretaker;[Security] [Dependabot] React Router vulnerable to DoS via unbounded path expansion in __manifest endpoint
security:findingSecurity finding requiring remediationSecurity finding requiring remediationStatus: Open.#735 In ianlintner/caretaker;[Security] [Dependabot] AIOHTTP is Vulnerable to Deserialization of Untrusted Data
security:findingSecurity finding requiring remediationSecurity finding requiring remediationStatus: Open.#733 In ianlintner/caretaker;[Caretaker] Human action required — 2026-W21
maintainer:escalation-digestWeekly human-action-required digestWeekly human-action-required digestStatus: Open.#729 In ianlintner/caretaker;[Security] [Dependabot] Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix
security:findingSecurity finding requiring remediationSecurity finding requiring remediationStatus: Open.#728 In ianlintner/caretaker;[Security] [Dependabot] Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix
security:findingSecurity finding requiring remediationSecurity finding requiring remediationStatus: Open.#727 In ianlintner/caretaker;[Security] [Dependabot] Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path
security:findingSecurity finding requiring remediationSecurity finding requiring remediationStatus: Open.#725 In ianlintner/caretaker;- Status: Open.#717 In ianlintner/caretaker;