All pull requests

Pull requests

• PYSEC-2020-108: fix affected range — fixed: 0.24.dev0 → fixed: 1.0.1

  #411·lorepirri opened Oct 26, 2026·

  ·

• fix(PYSEC-2026-3729): remove incorrect GHSA-5wp5-5229-5g6q alias

  #410·lorepirri opened Oct 26, 2026·

  ·

• fix(PYSEC-2025-148): remove incorrect GHSA-6rq9-53c3-f7vj alias

  #409·lorepirri opened Oct 25, 2026·

  ·
  1

• Add mcp-gee-sweet advisory (GHSA-8jqx-w7j8-6xwm, shared world-readable cache)

  #408·khuisman opened Oct 25, 2026·

  ·

• Add mcp-gee-sweet advisory (GHSA-mpw3-mr4r-6cqh, missing authentication on HTTP transports)

  #407·khuisman opened Oct 25, 2026·

  ·

• Add memtomem and memtomem-stm advisories (8 entries)

  #406·memtomem opened Oct 25, 2026·

  ·

• Add advisory for Pillow bundled Brotli vulnerability

  #405·6mile opened Oct 24, 2026Contributor·

  ·

• Add mcp-gee-sweet advisory (GHSA-hx2f-x3v8-jq2v, path traversal)

  #398·khuisman opened Oct 20, 2026·

  ·

• Add thumbnail advisory for CVE-2026-110650

  #397·zachariah-mithani opened Oct 19, 2026·

  ·

• Add webdav4 advisories (path traversal, symlink following, CLI password logging)

  #396·manfred-kaiser opened Oct 15, 2026·

  ·
  1

• Update PYSEC-2026-161.yaml - add advisory

  #296·nic-lovin opened May 26, 2026·

  ·

• chore: Pin OSV Go dependencies to stable pseudo-version

  #294·jess-lowe opened May 25, 2026Contributor·

  ·
  1

• fix: correct ECOSYSTEM fixed versions in 6 PYSEC advisories (artifact-level verification)

  #278·DEVSOG12 opened Apr 21, 2026·

  ·

• fix: pin advisory converter to stable commit

  #274·jess-lowe opened Mar 29, 2026Contributor·

  ·
  1

• Add a few instances of ecosystem_specific data

  #263·kelbyludwig opened Mar 13, 2026·

  ·
  1

• ci: Pin GitHub Actions and Go tools to commit hashes

  #262·cuixq opened Mar 4, 2026Contributor·

  ·

• PYSEC-2022-43170/PYSEC-2022-43171: Remove extra 'fixed' events that refer to the server software

  #254·progval opened Jan 16, 2026Contributor·

  ·