diff --git a/documentation/security-watch/state.json b/documentation/security-watch/state.json
index bbd0fa1d..5b705077 100644
--- a/documentation/security-watch/state.json
+++ b/documentation/security-watch/state.json
@@ -1241,6 +1241,12 @@
    "program": "louislam/uptime-kuma 2.5.6 (uptimekuma-system/uptimekuma.yaml)",
    "summary": "Node.js 22.22.3 inside the image: Brotli decoder out-of-bounds write (HTTP2Shell): a crafted compressed body can run code in the process"
   },
+  "dooplex:louislam/uptime-kuma|GHSA-86ch-2247-gr56": {
+   "first": "2026-11-01",
+   "last_mailed": "2026-11-01",
+   "program": "louislam/uptime-kuma 2.5.6 (uptimekuma-system/uptimekuma.yaml)",
+   "summary": "Unauthenticated Host-header injection and RSS cache poisoning"
+  },
   "dooplex:louislam/uptime-kuma|GHSA-qjxc-h5jf-c7rj": {
    "first": "2026-10-28",
    "last_mailed": "2026-10-28",
@@ -1259,6 +1265,12 @@
    "program": "louislam/uptime-kuma 2.5.5 (uptime-kuma)",
    "summary": "⬆️ Security Fixes"
   },
+  "dooplex:louislam/uptime-kuma|release:louislam/uptime-kuma@2.5.9": {
+   "first": "2026-11-01",
+   "last_mailed": "2026-11-01",
+   "program": "louislam/uptime-kuma 2.5.6 (uptimekuma-system/uptimekuma.yaml)",
+   "summary": "⬆️ Security Fixes"
+  },
   "dooplex:outlinewiki/outline|CVE-2026-111497": {
    "first": "2026-10-28",
    "last_mailed": "2026-10-28",
@@ -1529,6 +1541,12 @@
    "program": "ghcr.io/lukegus/termix 26.10.5 (termix)",
    "summary": "0 for a security fix"
   },
+  "ghcr.io/mealie-recipes/mealie|release:mealie-recipes/mealie@v3.30.0": {
+   "first": "2026-11-01",
+   "last_mailed": "2026-11-01",
+   "program": "ghcr.io/mealie-recipes/mealie v3.29.0 (mealie)",
+   "summary": "fix(deps): update dependency pillow to v13 [security] @ renovate[bot]  ( #8822 )"
+  },
   "ghcr.io/paperless-ngx/paperless-ngx|CVE-2026-111497": {
    "first": "2026-10-28",
    "last_mailed": "2026-10-28",
@@ -1683,6 +1701,12 @@
    "program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
    "summary": "Authenticated Modify-only user can create new files through WebDAV PUT despite Create permission being disabled"
   },
+  "gtstef/filebrowser|GHSA-892f-9h5p-mfc8": {
+   "first": "2026-11-01",
+   "last_mailed": "2026-11-01",
+   "program": "gtstef/filebrowser 1.5.8-stable (controller infra)",
+   "summary": "Sensitive Data Exposure via /api/settings"
+  },
   "gtstef/filebrowser|GHSA-8m35-wcjh-95q7": {
    "first": "2026-10-26",
    "last_mailed": "2026-10-26",
@@ -1827,6 +1851,12 @@
    "program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
    "summary": "Share authorization gaps let read-only users delete files"
   },
+  "louislam/uptime-kuma|GHSA-86ch-2247-gr56": {
+   "first": "2026-11-01",
+   "last_mailed": "2026-11-01",
+   "program": "louislam/uptime-kuma 2.5.7 (uptime-kuma)",
+   "summary": "Unauthenticated Host-header injection and RSS cache poisoning"
+  },
   "louislam/uptime-kuma|GHSA-qjxc-h5jf-c7rj": {
    "first": "2026-10-28",
    "last_mailed": "2026-10-28",
@@ -1839,6 +1869,12 @@
    "program": "louislam/uptime-kuma 2.5.5 (uptime-kuma)",
    "summary": "⬆️ Security Fixes"
   },
+  "louislam/uptime-kuma|release:louislam/uptime-kuma@2.5.9": {
+   "first": "2026-11-01",
+   "last_mailed": "2026-11-01",
+   "program": "louislam/uptime-kuma 2.5.7 (uptime-kuma)",
+   "summary": "⬆️ Security Fixes"
+  },
   "n8nio/n8n|GHSA-2x68-96jw-5r6c": {
    "first": "2026-10-29",
    "last_mailed": "2026-10-29",
@@ -1946,11 +1982,11 @@
  "failures": {
   "registry:docker.io": {
    "mailed": true,
-   "streak": 5
+   "streak": 6
   },
   "runtime": {
    "mailed": true,
-   "streak": 4
+   "streak": 5
   }
  },
  "runtime_cache": {