pullrequests Search Results · language:Edge language:TypeScript language:PHP language:JavaScript language:Java language:HTML
Filter by
250M results
Fixes three findings from a full codebase review.
1. Script injection in the Slack notifier (security)
issue-to-slack-improved.yml interpolated github.event.issue.title / pull_request.title directly ...
This was AI-generated by OX.
The vulnerability is a path traversal attack caused by unvalidated user input in the filename parameter, allowing an
attacker to access arbitrary files outside the intended ...
Unified replay for ast-grep/ast-grep-vscode
Summary
Implements PR0 / WS0 from docs/local-model-connection-sanity-scope.md:
- adds the local model connection sanity migration and reference schema updates
- exports additive Platform contracts ...
🛡️ Sentinel: [security improvement] Mask raw error details in production
- 🚨 Severity: MEDIUM
- 💡 Vulnerability: Information Leakage via raw error messages and console logs.
- 🎯 Impact: Raw error ...
Bumps brace-expansion to 5.0.6 and updates ancestor dependencies brace-expansion, bcrypt and nodemon. These dependencies
need to be updated together.
Updates brace-expansion from 1.1.11 to 5.0.6 details ...
dependencies
javascript
Bumps minimatch to 10.2.5 and updates ancestor dependencies minimatch, bcrypt and nodemon. These dependencies need to be
updated together.
Updates minimatch from 3.0.4 to 10.2.5 details summary Changelog ...
dependencies
javascript
💡 What: Implemented the Knuth Minimum Size (S) Heuristic in the dlxSolveCheck function s implementation of Algorithm X.
🎯 Why: The backtracking solver was picking the first available column instead of ...