admin
f5a4995da5
gates / gates (push) Successful in 3m27s
- scripts/image_runtime.py: Node / Python Brotli / brotlicffi / apk / dpkg read from an image's registry config and layers (no pull; HEAD for the nightly digest; zstd via the zstd program where present; quay.io, index.docker.io). - security_watch.py: a „runtime" source (security_watch_runtimes.json), cached by digest in state.json (154 images, filled on DooPlex tonight); ghcr.io tag lists are paged; the DooPlex group (own block, homelab next-step). - dooplex_inventory.py + documentation/security-watch/dooplex-workloads.txt (89 images, homelab-manifests 5aeec8d). - Tests W10–W12 (58 checks) + test_image_runtime.py (13), each red-proved. - audits/http2shell-2026-10-27: the Home Assistant lane walk (proven), HOMELAB-LIST.md (19 to update), the run log. - 08 §11 design line; 09 §3 decision 276 (HA monthly = same main version; decided by CC unattended).
3677 lines
125 KiB
JSON
3677 lines
125 KiB
JSON
{
|
||
"advisories": {
|
||
"calcom/cal.com|GHSA-cpf2-q635-xrwx": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "calcom/cal.com v6.2.0 (calcom)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Not expiring old sessions after enabling 2FA"
|
||
},
|
||
"calcom/cal.com|GHSA-p3f6-52gv-cj7m": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "calcom/cal.com v6.2.0 (calcom)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Repository takeover via `.github/workflows/pr.yml`"
|
||
},
|
||
"cloudflare/cloudflared|feed:cloudflare-blog:01M5DK5J81T0VC8YTBR2FKD8A3": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "cloudflare/cloudflared 2026.10.3 (controller infra)",
|
||
"summary": "8 eMudhra certificates are compromised. Here's what you need to know"
|
||
},
|
||
"cloudflare/cloudflared|vulnnotes:cloudflared@2026.10.4:VULN-176088": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "cloudflare/cloudflared 2026.10.3 (controller infra)",
|
||
"summary": "- 2026-10-23 VULN-176088: Allowlist debug endpoints on the metrics server"
|
||
},
|
||
"docmost/docmost|release:docmost/docmost@v0.97.0": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "docmost/docmost 0.96.0 (docmost)",
|
||
"summary": "This release includes security fixes for the latest Node"
|
||
},
|
||
"flomp/wanderer-db|release:open-wanderer/wanderer@v0.21.0": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "flomp/wanderer-db v0.20.0 (wanderer)",
|
||
"summary": "Inbound ActivityPub deliveries are now authenticated between the web and db services ( GHSA-mr29-2qg5-m4fw , PR #1205 )"
|
||
},
|
||
"flomp/wanderer-db|release:open-wanderer/wanderer@v0.21.2": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "flomp/wanderer-db v0.20.0 (wanderer)",
|
||
"summary": "( GHSA-fprh-3pp9-68m9 , thanks @zer0d4y5 )"
|
||
},
|
||
"flomp/wanderer-web|release:open-wanderer/wanderer@v0.21.0": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "flomp/wanderer-web v0.20.0 (wanderer)",
|
||
"summary": "Inbound ActivityPub deliveries are now authenticated between the web and db services ( GHSA-mr29-2qg5-m4fw , PR #1205 )"
|
||
},
|
||
"flomp/wanderer-web|release:open-wanderer/wanderer@v0.21.2": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "flomp/wanderer-web v0.20.0 (wanderer)",
|
||
"summary": "( GHSA-fprh-3pp9-68m9 , thanks @zer0d4y5 )"
|
||
},
|
||
"freikin/dawarich|release:Freika/dawarich@1.17.0": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "freikin/dawarich 1.15.3 (dawarich)",
|
||
"summary": "js 20 package, which no longer receives upstream security fixes"
|
||
},
|
||
"ghcr.io/advplyr/audiobookshelf|release:advplyr/audiobookshelf@v2.37.2": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "ghcr.io/advplyr/audiobookshelf 2.37.1 (audiobookshelf)",
|
||
"summary": "1 (October 2026 security release)"
|
||
},
|
||
"ghcr.io/alam00000/bentopdf|release:alam00000/bentopdf@v2.8.10": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "ghcr.io/alam00000/bentopdf v2.8.6 (bentopdf)",
|
||
"summary": "Warning This release addresses security vulnerabilities ( GHSA-v77x-cvmx-ggp4 , GHSA-qch9-77q9-j7p6 ) affecting all versions up to and including v2"
|
||
},
|
||
"ghcr.io/alam00000/bentopdf|release:alam00000/bentopdf@v2.8.7": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "ghcr.io/alam00000/bentopdf v2.8.6 (bentopdf)",
|
||
"summary": "Warning This release addresses security vulnerabilities ( GHSA-wh78-rcw2-hhg9 , GHSA-5xjf-rr5x-pcfj , GHSA-cx8x-7rrr-r9x8 ) affecting all versions up to and "
|
||
},
|
||
"ghcr.io/cmintey/wishlist|release:cmintey/wishlist@v0.68.0": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "ghcr.io/cmintey/wishlist v0.67.1 (wishlist)",
|
||
"summary": "Update dependency nodemailer to v10 [SECURITY] by @renovate [bot] in #798"
|
||
},
|
||
"ghcr.io/cmintey/wishlist|release:cmintey/wishlist@v0.69.0": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "ghcr.io/cmintey/wishlist v0.67.1 (wishlist)",
|
||
"summary": "org/en/blog/vulnerability/october-2026-security-releases"
|
||
},
|
||
"ghcr.io/gethomepage/homepage|GHSA-669x-4pg4-w24r": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/gethomepage/homepage v1.13.2 (homepage)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Homepage service proxy allows client-controlled methods and bodies to configured widget endpoints"
|
||
},
|
||
"ghcr.io/immich-app/immich-machine-learning|release:immich-app/immich@v3.3.5": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "ghcr.io/immich-app/immich-machine-learning v3.2.4 (immich)",
|
||
"summary": "com/ ) as well as some nodejs security patches"
|
||
},
|
||
"ghcr.io/immich-app/immich-server|release:immich-app/immich@v3.3.5": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "ghcr.io/immich-app/immich-server v3.2.4 (immich)",
|
||
"summary": "com/ ) as well as some nodejs security patches"
|
||
},
|
||
"ghcr.io/karakeep-app/karakeep|release:karakeep-app/karakeep@v0.34.0": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "ghcr.io/karakeep-app/karakeep 0.33.2 (karakeep)",
|
||
"summary": "1 for its October security release ( #3196 )"
|
||
},
|
||
"ghcr.io/karakeep-app/karakeep|release:karakeep-app/karakeep@v0.34.1": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "ghcr.io/karakeep-app/karakeep 0.33.2 (karakeep)",
|
||
"summary": "This is a security release on top of 0"
|
||
},
|
||
"ghcr.io/lukegus/termix|GHSA-3q2m-5r5p-w45r": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/lukegus/termix 2.8.0 (termix)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Cross-user nested automation execution bypasses ownership checks and runs actions with victim privileges"
|
||
},
|
||
"ghcr.io/lukegus/termix|GHSA-6gr3-r7jx-wfmh": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/lukegus/termix 2.8.0 (termix)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Two-factor authentication can be bypassed via a forged client-supplied device identifier"
|
||
},
|
||
"ghcr.io/lukegus/termix|GHSA-7j7m-85p4-2cpm": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/lukegus/termix 2.8.0 (termix)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Authentication Bypass by Spoofing and Improper Restriction of Excessive Authentication Attempts in Termix"
|
||
},
|
||
"ghcr.io/lukegus/termix|GHSA-fj9w-vcj9-66qh": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/lukegus/termix 2.8.0 (termix)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Termix: the automation `run_command` step substitutes untrusted template values straight into a shell command, ignoring the quoting contract its own template mo"
|
||
},
|
||
"ghcr.io/lukegus/termix|GHSA-frx8-qqgg-7j7g": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/lukegus/termix 2.8.0 (termix)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Termix Desktop: any website can obtain a session on the embedded backend (CORS allows all origins + passwordless loopback auto-session)"
|
||
},
|
||
"ghcr.io/lukegus/termix|GHSA-hmv7-25x4-vp6w": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/lukegus/termix 2.8.0 (termix)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Termix: a read-only session-share guest can delete its own participant record and then type into the owner's live SSH session, turning a \"watch only\" link into "
|
||
},
|
||
"ghcr.io/lukegus/termix|GHSA-j7j4-82wh-3vj5": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/lukegus/termix 2.8.0 (termix)",
|
||
"silent": "first read after the seed",
|
||
"summary": "LDAPS certificate validation is disabled, allowing MITM capture of LDAP and user credentials"
|
||
},
|
||
"ghcr.io/lukegus/termix|GHSA-r7x4-j6x8-jxrx": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/lukegus/termix 2.8.0 (termix)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Authenticated users can mint Guacamole tokens for arbitrary RDP/VNC/Telnet targets"
|
||
},
|
||
"ghcr.io/lukegus/termix|GHSA-r9gw-3w87-mhh7": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/lukegus/termix 2.8.0 (termix)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Improper certificate validation in Electron desktop client enables MITM credential/token theft"
|
||
},
|
||
"ghcr.io/lukegus/termix|GHSA-rgf3-2q88-q4wp": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/lukegus/termix 2.8.0 (termix)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Cross-User File Manager SSH Session Termination and State Replacement"
|
||
},
|
||
"ghcr.io/lukegus/termix|GHSA-v3vp-ffww-q7pw": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/lukegus/termix 2.8.0 (termix)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Credential disclosure vulnerability in Termix"
|
||
},
|
||
"ghcr.io/lukegus/termix|GHSA-wv2p-5jqw-9qf3": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/lukegus/termix 2.8.0 (termix)",
|
||
"silent": "first read after the seed",
|
||
"summary": "User-controlled Vault address is fetched without SSRF controls"
|
||
},
|
||
"ghcr.io/mealie-recipes/mealie|GHSA-99wf-32rc-2767": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/mealie-recipes/mealie v3.28.0 (mealie)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Recipe zip import lets a user take over another group's tools and read another group's recipes"
|
||
},
|
||
"ghcr.io/paperless-ngx/paperless-ngx|GHSA-2jhj-xqrq-rmrq": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/paperless-ngx/paperless-ngx 2.20.15 (paperless-ngx)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Path traversal in filename generation when `FILENAME_FORMAT_REMOVE_NONE` enabled"
|
||
},
|
||
"ghcr.io/paperless-ngx/paperless-ngx|GHSA-c8f3-pqr2-rr24": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/paperless-ngx/paperless-ngx 2.20.15 (paperless-ngx)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Cross-user information disclosure in AI classification workflows on ownerless documents"
|
||
},
|
||
"ghcr.io/sysadminsmedia/homebox|GHSA-4gp5-59x3-vhhg": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/sysadminsmedia/homebox 0.26.2 (homebox)",
|
||
"silent": "first read after the seed",
|
||
"summary": " Homebox generic notifier SSRF via HTTP redirect after URL validation"
|
||
},
|
||
"ghcr.io/sysadminsmedia/homebox|GHSA-4p8r-vm9v-c9pm": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/sysadminsmedia/homebox 0.26.2 (homebox)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Timing Side-Channel in Login Endpoint Allows User Enumeration via Bcrypt Hashing Delay"
|
||
},
|
||
"ghcr.io/sysadminsmedia/homebox|GHSA-58m4-m8xj-v3j2": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/sysadminsmedia/homebox 0.26.2 (homebox)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Unauthenticated /api/v1/users/register lacks rate limiting while Argon2id runs per request (default-enabled) — resource exhaustion DoS"
|
||
},
|
||
"ghcr.io/sysadminsmedia/homebox|GHSA-59cq-p2m6-hh23": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/sysadminsmedia/homebox 0.26.2 (homebox)",
|
||
"silent": "first read after the seed",
|
||
"summary": "API keys are not revoked on password change and never expire by default, so a leaked key survives full credential rotation"
|
||
},
|
||
"ghcr.io/sysadminsmedia/homebox|GHSA-754m-5j7m-8wfv": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/sysadminsmedia/homebox 0.26.2 (homebox)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Unauthenticated X-Forwarded-Host injection into /swagger/doc.json lets an attacker control the host of the served OpenAPI spec (host-header injection / cache po"
|
||
},
|
||
"ghcr.io/sysadminsmedia/homebox|GHSA-g3p9-jfjj-pqgw": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/sysadminsmedia/homebox 0.26.2 (homebox)",
|
||
"silent": "first read after the seed",
|
||
"summary": "No Mechanism to Revoke Other Active Sessions on Login or Logout, Allowing Persistent Stolen-Token Access"
|
||
},
|
||
"ghcr.io/sysadminsmedia/homebox|GHSA-h7wm-wjr6-cfxh": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/sysadminsmedia/homebox 0.26.2 (homebox)",
|
||
"silent": "first read after the seed",
|
||
"summary": "CSV formula injection in entities export and bill-of-materials export"
|
||
},
|
||
"ghcr.io/sysadminsmedia/homebox|GHSA-j935-m3f2-frrj": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/sysadminsmedia/homebox 0.26.2 (homebox)",
|
||
"silent": "first read after the seed",
|
||
"summary": "EntityRepository.UpdateByGroup mutates custom Fields on another tenant's item — outer entity update is group-scoped, but the Fields create/update/delete block i"
|
||
},
|
||
"ghcr.io/sysadminsmedia/homebox|GHSA-jm28-2xm3-m6m5": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/sysadminsmedia/homebox 0.26.2 (homebox)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Group members can rename, delete, and take over groups they don't own"
|
||
},
|
||
"ghcr.io/sysadminsmedia/homebox|GHSA-mw9p-fhpj-jf82": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/sysadminsmedia/homebox 0.26.2 (homebox)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Invitation usage limit is raceable, oversubscribing a group beyond the owner-granted quota in Homebox"
|
||
},
|
||
"ghcr.io/sysadminsmedia/homebox|GHSA-rhfm-x4x2-p3qr": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/sysadminsmedia/homebox 0.26.2 (homebox)",
|
||
"silent": "first read after the seed",
|
||
"summary": "SSRF via generic:// notifier with insecure defaults allows authenticated users to reach localhost and internal network services"
|
||
},
|
||
"ghcr.io/sysadminsmedia/homebox|GHSA-wxcf-4p4j-vhvg": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/sysadminsmedia/homebox 0.26.2 (homebox)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Cross-Tenant IDOR in Entity Update Endpoint Leaks Full Entity Data Across Group Boundaries"
|
||
},
|
||
"ghcr.io/sysadminsmedia/homebox|GHSA-xqg9-6xxv-3452": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/sysadminsmedia/homebox 0.26.2 (homebox)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Email Case-Sensitivity Bypass Allows Duplicate Account Creation and Login Denial of Service"
|
||
},
|
||
"ghcr.io/sysadminsmedia/homebox|release:sysadminsmedia/homebox@v0.27.0": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "ghcr.io/sysadminsmedia/homebox 0.26.2 (homebox)",
|
||
"summary": "Security Issues Patched"
|
||
},
|
||
"ghcr.io/sysadminsmedia/homebox|release:sysadminsmedia/homebox@v0.27.1": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "ghcr.io/sysadminsmedia/homebox 0.26.2 (homebox)",
|
||
"summary": "Warning This release is a security release to patch a NodeJS upstream vulnerability"
|
||
},
|
||
"ghcr.io/tandoorrecipes/recipes|GHSA-5f74-7rgh-pc97": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/tandoorrecipes/recipes 2.6.15 (tandoor)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Recipe import subsystem: XXE local file read via lxml default parser (rezeptsuitede/Cookmate XML importers) and SSRF in the pestle importer left out of the GHSA"
|
||
},
|
||
"ghcr.io/tandoorrecipes/recipes|GHSA-5p9v-743w-79h3": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/tandoorrecipes/recipes 2.6.15 (tandoor)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Shopping-list bulk create accepts foreign-Space Food/Unit/Ingredient IDs and returns their names"
|
||
},
|
||
"ghcr.io/tandoorrecipes/recipes|GHSA-69q3-5q6x-7hmx": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/tandoorrecipes/recipes 2.6.15 (tandoor)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Group-Permission Cache Key Omits Active Space"
|
||
},
|
||
"ghcr.io/tandoorrecipes/recipes|GHSA-748x-xc8h-95hj": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/tandoorrecipes/recipes 2.6.15 (tandoor)",
|
||
"silent": "first read after the seed",
|
||
"summary": "User can move an owned entry into another user’s unshared recipe book"
|
||
},
|
||
"ghcr.io/tandoorrecipes/recipes|GHSA-c7mc-c9jr-38hf": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/tandoorrecipes/recipes 2.6.15 (tandoor)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Any user can read other spaces' meal plans via mealplan_id on shopping list entries"
|
||
},
|
||
"ghcr.io/tandoorrecipes/recipes|GHSA-cqj3-64qw-4w52": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/tandoorrecipes/recipes 2.6.15 (tandoor)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Private recipe file and share-link authorization bypass in recipe utility API endpoints"
|
||
},
|
||
"ghcr.io/tandoorrecipes/recipes|GHSA-pcq2-64qw-jm4x": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/tandoorrecipes/recipes 2.6.15 (tandoor)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Private recipe overview disclosed through ShoppingListRecipe API in 2.6.15"
|
||
},
|
||
"ghcr.io/tandoorrecipes/recipes|GHSA-vc5c-xh64-79vp": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/tandoorrecipes/recipes 2.6.15 (tandoor)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Fix for GHSA-5mw3-c978-gc6w checks UserSpace ids against User ids"
|
||
},
|
||
"ghcr.io/tandoorrecipes/recipes|GHSA-xq7g-9q95-vjc6": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "ghcr.io/tandoorrecipes/recipes 2.6.15 (tandoor)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Server-Side Request Forgery (SSRF) in Pestle Recipe Import"
|
||
},
|
||
"ghcr.io/tandoorrecipes/recipes|release:TandoorRecipes/recipes@2.7.0": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "ghcr.io/tandoorrecipes/recipes 2.6.15 (tandoor)",
|
||
"summary": "fixed shopping list bulk API endpoint accepted IDs from foreign spaces GHSA-5p9v-743w-79h3"
|
||
},
|
||
"gitea/gitea|GHSA-467c-4w7p-8427": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Algorithmic Complexity DoS in Issue Reference Parsing"
|
||
},
|
||
"gitea/gitea|GHSA-469m-x4mw-38r3": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "OAuth access tokens can be exchanged as refresh tokens"
|
||
},
|
||
"gitea/gitea|GHSA-4j4g-m7mr-hp5j": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Unapproved fork PR cancels trusted in-progress runs via run-level concurrency"
|
||
},
|
||
"gitea/gitea|GHSA-4jmf-h2cm-hg7w": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Cross-Site Request Forgery on `POST /{owner}/{repo}/topics`"
|
||
},
|
||
"gitea/gitea|GHSA-54w9-6cc5-9wj9": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Migration SSRF policy regression: ALLOWED_DOMAINS permits reserved addresses despite ALLOW_LOCALNETWORKS=false"
|
||
},
|
||
"gitea/gitea|GHSA-6f9g-7jgm-m5ph": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Gitea Actions Artifact V4 API: unbounded request body read in parseProtobufBody enables memory-exhaustion DoS"
|
||
},
|
||
"gitea/gitea|GHSA-6g2h-xpg3-rm48": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Migration / pull-mirror SSRF, egress allow-list bypass via multi-answer DNS - 3 findings"
|
||
},
|
||
"gitea/gitea|GHSA-6pv5-8rp7-8c75": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Duplicate tree-entry name: Gitea renders the benign blob while checkout and CI run the malicious one"
|
||
},
|
||
"gitea/gitea|GHSA-7769-9pr9-m24h": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Deploy keys impersonate the repository owner in the hook pipeline"
|
||
},
|
||
"gitea/gitea|GHSA-7cq7-4v93-8wjm": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Stored XSS in Gitea container registry via unvalidated blob Content-Type (mediaType injection)"
|
||
},
|
||
"gitea/gitea|GHSA-7v5j-mph8-9w6g": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Push-mirror API checks local-path permission on the repository owner instead of the caller"
|
||
},
|
||
"gitea/gitea|GHSA-8hhh-mqpg-jpxc": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Gitea push-mirror creation API does not enforce the site-wide DISABLE_NEW_PUSH policy"
|
||
},
|
||
"gitea/gitea|GHSA-8j56-f865-gqq2": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Draft releases include attachment metadata from other repositories"
|
||
},
|
||
"gitea/gitea|GHSA-8pwg-hcgm-54cp": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Built-in SSH server auth bypass via case-insensitive LIKE key lookup"
|
||
},
|
||
"gitea/gitea|GHSA-93pj-3x56-5gc2": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Cancelled fork-PR Actions jobs are revived by later approval"
|
||
},
|
||
"gitea/gitea|GHSA-94rx-fqm6-q23v": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Stored XSS via Repository Media API"
|
||
},
|
||
"gitea/gitea|GHSA-96qg-qxxj-r8xq": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Issue-scoped attachment routes accept comment-scoped attachment ids, letting an issue opener delete or rename other users' comment attachments"
|
||
},
|
||
"gitea/gitea|GHSA-9h7g-h754-c8x2": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Installer Re-run Against an Already-Populated Database Grants an Authenticated Session for an Existing Admin Account Without Password Verification"
|
||
},
|
||
"gitea/gitea|GHSA-c3cr-qq9g-666c": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Unauthenticated nil-pointer panic on /{username}/-/repositories for individual users"
|
||
},
|
||
"gitea/gitea|GHSA-cwq7-782w-pxcc": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Gitea AddReleaseAttachments missing IssueID check allows issue attachment metadata exposure and deletion via releases"
|
||
},
|
||
"gitea/gitea|GHSA-fqjr-23c8-gg9m": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "SSRF via DNS rebinding: MatchHostOrIP short-circuits IP check when hostname matches ALLOWED_DOMAINS"
|
||
},
|
||
"gitea/gitea|GHSA-fx95-gwfc-grgc": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Gitea push-to-create ignores ForcePrivate server policy, allowing non-admin users to publish repositories as public"
|
||
},
|
||
"gitea/gitea|GHSA-fxq4-gr55-7x5g": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "DeleteLabel compares one untyped id against whichever namespace the label uses, letting a repo collaborator delete an ID-colliding organisation's labels"
|
||
},
|
||
"gitea/gitea|GHSA-g4hw-fg4c-89mq": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Raw Git redirect SSRF bypass in push mirrors, WikiRemoteURL, and PR-head fetches"
|
||
},
|
||
"gitea/gitea|GHSA-hcgw-r9gf-8mph": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Gitea Push Mirror Host Policy Bypass Enables SSRF and Forced Writes to Internal Git Repositories"
|
||
},
|
||
"gitea/gitea|GHSA-hf55-9cwq-2x64": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Web RSS/Atom Accept-header bypass leaks activity feeds of limited/private users and orgs"
|
||
},
|
||
"gitea/gitea|GHSA-jj5r-9rpc-8h6h": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "A migration source reporting max_response_items: 0 makes six paginated loops in the Gitea downloader never terminate, exhausting server memory from one authenti"
|
||
},
|
||
"gitea/gitea|GHSA-mf69-7pqq-86vx": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Cross-Session OpenID Credential Linking Enables Account Takeover"
|
||
},
|
||
"gitea/gitea|GHSA-mw6q-qj47-9g5q": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Uncaught Exception and Out-of-bounds Read results in Gitea crash"
|
||
},
|
||
"gitea/gitea|GHSA-p3pc-g8m5-hrrr": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Migration SSRF via DNS Rebinding — TOCTOU Between DNS Validation and Git Connection"
|
||
},
|
||
"gitea/gitea|GHSA-p3rv-cr5f-9gjh": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Uncontrolled resource consumption — unapproved fork-PR workflow with a large static strategy.matrix exhausts server memory at run-creation"
|
||
},
|
||
"gitea/gitea|GHSA-pvjf-7jrm-6w9g": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Untrusted first-time fork PR achieves self-hosted Actions runner RCE without approval via cancel-then-rerun"
|
||
},
|
||
"gitea/gitea|GHSA-rqhx-647v-wx32": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "SSRF via HTTP Redirect in Repository Migration"
|
||
},
|
||
"gitea/gitea|GHSA-vcp6-2qc6-gvq3": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "VerifyCert maps SSH certificate principals onto other users' SSH public keys"
|
||
},
|
||
"gitea/gitea|GHSA-vvqw-mjq8-x248": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "POST /{owner}/{repo}/tags/delete requires only Code:Write but destroys Releases and their attachment blobs"
|
||
},
|
||
"gitea/gitea|GHSA-wx44-9m3m-rjqx": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Locked issues and comments still accept reactions through the web UI"
|
||
},
|
||
"gitea/gitea|GHSA-x4q3-gcj3-m6cf": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled"
|
||
},
|
||
"gitea/gitea|GHSA-x8c3-3rp8-2j46": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "API team demotion does not reset unit permissions"
|
||
},
|
||
"gitea/gitea|GHSA-xfqq-h54g-92f8": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": " Incorrect Authorization in Repository Transfer Allows Persistent Unauthorized Read Access"
|
||
},
|
||
"gitea/gitea|GHSA-xh39-mxw9-34pp": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Gitea Actions: fork pull request approval bypass via maintainer-triggered pull_request sub-events (ifNeedApprovalWith keys on the event actor, not the pull requ"
|
||
},
|
||
"gitea/gitea|GHSA-xmfc-hqq8-33wh": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "gitea/gitea 1.27.3 (gitea)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Private profile information leaks on POST request"
|
||
},
|
||
"glanceapp/glance|GHSA-r225-jhr6-68cc": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "glanceapp/glance v0.8.5 (glance)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Unauthenticated login requests can cause unbounded memory consumption"
|
||
},
|
||
"grafana/grafana|GHSA-2x6g-h2hg-rq84": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "grafana/grafana 13.2.3 (grafana)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Email addresses and usernames can not be trusted"
|
||
},
|
||
"grafana/grafana|GHSA-4724-7jwc-3fpw": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "grafana/grafana 13.2.3 (grafana)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Spoofing originalUrl of snapshots"
|
||
},
|
||
"grafana/grafana|GHSA-8wjh-59cw-9xh4": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "grafana/grafana 13.2.3 (grafana)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Forward OAuth Identity Token can allow users to access some data sources"
|
||
},
|
||
"grafana/grafana|GHSA-8xmm-x63g-f6xv": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "grafana/grafana 13.2.3 (grafana)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Stored XSS in ResourcePicker component "
|
||
},
|
||
"grafana/grafana|release:grafana/grafana@v13.2.4": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "grafana/grafana 13.2.3 (grafana)",
|
||
"summary": "Security: Fix CVE-2026-15577"
|
||
},
|
||
"gtstef/filebrowser|GHSA-26fh-r34c-qxh6": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Moving or renaming a folder retargets public shares to the whole folder"
|
||
},
|
||
"gtstef/filebrowser|GHSA-3846-gh75-gp3m": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Public upload share AllowReplacements=false is bypassed by override=true (deny only checks unused action=override)"
|
||
},
|
||
"gtstef/filebrowser|GHSA-3j46-5w28-f8p2": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Incomplete symlink-containment remediation: relocated archive symlink allows arbitrary host file write"
|
||
},
|
||
"gtstef/filebrowser|GHSA-4fhx-8pf6-5gmr": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Duplicate finder can show another user’s restricted file names from a shared cache"
|
||
},
|
||
"gtstef/filebrowser|GHSA-4v62-884x-2466": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Read-only sources (`readOnly: true`) can be written and deleted through WebDAV, archive/unarchive and the OnlyOffice save callback"
|
||
},
|
||
"gtstef/filebrowser|GHSA-4vrc-935w-xxq2": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Per-path access DENY rule bypass via filesystem name aliases (case variant, Windows 8.3 short name, trailing-dot) — access rules evaluated before path canonical"
|
||
},
|
||
"gtstef/filebrowser|GHSA-4wmj-rq3c-m65v": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Improper session revocation allows authentication bypass via revoked-JWT resurrection in `extractUserFromExpiredToken`"
|
||
},
|
||
"gtstef/filebrowser|GHSA-55mw-cwg7-m8f5": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "`GET /public/api/media/metadata` returns file content to anonymous share visitors, ignoring the share's download limit and file-viewer setting"
|
||
},
|
||
"gtstef/filebrowser|GHSA-6gr6-5qpq-888p": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Privilege Escalation: Restricted Custom API Token Can Be Upgraded to a Full-Permission Session Token via /api/auth/renew in FileBrowser Quantum"
|
||
},
|
||
"gtstef/filebrowser|GHSA-8655-2ph3-q7q7": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Authenticated Modify-only user can create new files through WebDAV PUT despite Create permission being disabled"
|
||
},
|
||
"gtstef/filebrowser|GHSA-8m35-wcjh-95q7": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Logout Bypass via Alternate JWT Spelling"
|
||
},
|
||
"gtstef/filebrowser|GHSA-9fcr-gm58-p839": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Share directory-archive download skips per-user access rules, exposing admin-denied content to anonymous share visitors"
|
||
},
|
||
"gtstef/filebrowser|GHSA-9wm6-jcjh-3m8c": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Stored XSS via Unsanitized DOCX Hyperlink in DocViewer"
|
||
},
|
||
"gtstef/filebrowser|GHSA-c7pj-xjp9-x4xp": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Read-only users can overwrite files through PUT /api/resources"
|
||
},
|
||
"gtstef/filebrowser|GHSA-c84q-q5g6-r47f": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "createUserDir: new accounts named `..` or `b..ob` are given the folder that holds every user's home, or another user's home (cross-user read and write)"
|
||
},
|
||
"gtstef/filebrowser|GHSA-c9cr-w724-gqj3": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Session tokens issued in the same second are identical, so a low-privilege user's session can resolve to another user, including an admin"
|
||
},
|
||
"gtstef/filebrowser|GHSA-cw65-p35p-633w": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "FileBrowser Quantum: file-upload / mkdir authorization uses the scope-relative path, bypassing per-user access-rule denials (write into a restricted directory)"
|
||
},
|
||
"gtstef/filebrowser|GHSA-g2q5-r6ch-v25f": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "FileBrowser Quantum authenticated arbitrary file read via symlink following on the preview read path (incomplete fix of GHSA-mgqf-5mf5-prfj)"
|
||
},
|
||
"gtstef/filebrowser|GHSA-gfgm-886h-6r47": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Custom API token with no global caps inherits owner admin access"
|
||
},
|
||
"gtstef/filebrowser|GHSA-mgqf-5mf5-prfj": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Symlink following escapes user scope allowing arbitrary file read outside the served directory"
|
||
},
|
||
"gtstef/filebrowser|GHSA-p7x3-p5jj-9xfh": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Incomplete remediation of GHSA-55mw-cwg7-m8f5: public media routes bypass share restrictions"
|
||
},
|
||
"gtstef/filebrowser|GHSA-p93p-v944-4p44": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Unarchive writes into folders denied by access rules and overwrites files without modify permission"
|
||
},
|
||
"gtstef/filebrowser|GHSA-p9wm-f5jj-75pj": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "FileBrowser Quantum SSE EventRouter Concurrent Map Iteration/Write DoS"
|
||
},
|
||
"gtstef/filebrowser|GHSA-qqf3-2wvq-q4w9": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Archive download follows symlinks out of source scope (arbitrary file read)"
|
||
},
|
||
"gtstef/filebrowser|GHSA-qv53-4557-m65h": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Improper authorization in public upload endpoint allows anonymous bypass of er-folder DENY ACLs via Scope-Stripped path key"
|
||
},
|
||
"gtstef/filebrowser|GHSA-qx86-4v5r-26g5": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "MFA bypass and account takeover via unauthenticated TOTP re-enrollment in FileBrowser Quantum (`/api/auth/otp/generate` + `/api/auth/otp/verify`)"
|
||
},
|
||
"gtstef/filebrowser|GHSA-r744-4vm3-2px3": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Passkey MFA factor can be wiped, overwritten or attacker-enrolled with only a session cookie, bypassing the password re-authentication enforced for TOTP and pas"
|
||
},
|
||
"gtstef/filebrowser|GHSA-rmjp-pfrq-cc3v": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Stored XSS in the File Size Analyzer tooltip (unescaped v-html) with a nonce-CSP bypass via an allowlisted CDN"
|
||
},
|
||
"gtstef/filebrowser|GHSA-rqqq-wv83-rp74": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Absolute Path Traversal Bypass in SanitizeUserPath allows authenticated arbitrary file read outside user scope"
|
||
},
|
||
"gtstef/filebrowser|GHSA-vvm6-jwrf-hgmg": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": " Stored XSS via HTML Preview — `<script>` Whitelist + `allow-same-origin` Sandbox Escape"
|
||
},
|
||
"gtstef/filebrowser|GHSA-wfjp-qhvc-69wp": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Share path re-point allows scope escape (arbitrary read/write across the source root)"
|
||
},
|
||
"gtstef/filebrowser|GHSA-wjp8-g49g-xrhx": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Failed-login lockout bypass: client-controlled leftmost X-Forwarded-For is trusted, and the documented nginx config forwards it"
|
||
},
|
||
"gtstef/filebrowser|GHSA-wxj5-g3qp-g732": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Cross-source view-grant confusion: a public share's view token lets an authenticated user with view=false/download=false read files in their own source scope (/"
|
||
},
|
||
"gtstef/filebrowser|GHSA-x79q-5hqm-x839": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "Share authorization gaps let read-only users delete files"
|
||
},
|
||
"gtstef/filebrowser|release:gtsteffaniak/filebrowser@v1.5.7-stable": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "[High] TOTP re-enrollment via POST /api/auth/otp/generate and POST /api/auth/otp/verify no longer allows anonymous callers to replace an existing second fac"
|
||
},
|
||
"gtstef/filebrowser|release:gtsteffaniak/filebrowser@v1.5.8-stable": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "gtstef/filebrowser 1.5.6-stable (controller infra)",
|
||
"summary": "[High] TOTP re-enrollment via POST /api/auth/otp/generate and POST /api/auth/otp/verify no longer allows anonymous callers to replace an existing second fac"
|
||
},
|
||
"louislam/uptime-kuma|release:louislam/uptime-kuma@2.5.6": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "louislam/uptime-kuma 2.5.5 (uptime-kuma)",
|
||
"summary": "⬆️ Security Fixes"
|
||
},
|
||
"louislam/uptime-kuma|release:louislam/uptime-kuma@2.5.7": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "louislam/uptime-kuma 2.5.5 (uptime-kuma)",
|
||
"summary": "⬆️ Security Fixes"
|
||
},
|
||
"louislam/uptime-kuma|release:louislam/uptime-kuma@2.5.8": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "louislam/uptime-kuma 2.5.5 (uptime-kuma)",
|
||
"summary": "⬆️ Security Fixes"
|
||
},
|
||
"lscr.io/linuxserver/bookstack|release:BookStackApp/BookStack@v26.09.2": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "lscr.io/linuxserver/bookstack 26.09.1 (bookstack)",
|
||
"summary": "Security Release"
|
||
},
|
||
"lscr.io/linuxserver/code-server|release:coder/code-server@v4.141.1": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "lscr.io/linuxserver/code-server 4.129.0 (code-server)",
|
||
"summary": "Brotli decoder ( CVE-2026-111497 )"
|
||
},
|
||
"lukevella/rallly|release:lukevella/rallly@v4.15.4": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "lukevella/rallly 4.15.3 (rallly)",
|
||
"summary": "🔒 Critical security fix: remote code execution in poll preview images"
|
||
},
|
||
"lukevella/rallly|release:lukevella/rallly@v4.15.5": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "lukevella/rallly 4.15.3 (rallly)",
|
||
"summary": "🔒 Security fix: denial of service through Server Actions"
|
||
},
|
||
"lukevella/rallly|release:lukevella/rallly@v4.16.0": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "lukevella/rallly 4.15.3 (rallly)",
|
||
"summary": "The Control Panel tells you when an update is available and whether it fixes a security issue"
|
||
},
|
||
"lukevella/rallly|release:lukevella/rallly@v4.16.2": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "lukevella/rallly 4.15.3 (rallly)",
|
||
"summary": "js security update"
|
||
},
|
||
"n8nio/n8n|GHSA-365g-vjw2-grx8": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "n8nio/n8n 2.42.1 (n8n)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Execute Command Node in n8n Allows Authenticated Users to Run Arbitrary Commands on Host"
|
||
},
|
||
"n8nio/n8n|GHSA-43v8-hjhm-chjp": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "n8nio/n8n 2.42.1 (n8n)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Chat Hub: chat-only users can register tool types the product already tries to sandbox"
|
||
},
|
||
"n8nio/n8n|GHSA-65mv-v8rp-54wc": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "n8nio/n8n 2.42.1 (n8n)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Quick Base Node Allows Filter Injection Through the Where Parameter"
|
||
},
|
||
"n8nio/n8n|GHSA-8crx-5h96-q72q": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "n8nio/n8n 2.42.1 (n8n)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Execute Sub-workflow `source: url` / `source: localFile` Bypasses Shared-Workflow Credential Guard"
|
||
},
|
||
"n8nio/n8n|GHSA-8vrr-mgc5-jg55": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "n8nio/n8n 2.42.1 (n8n)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Credential Permission Check Skips Inline Sub-Workflow Nodes With a Non-Boolean Disabled Value"
|
||
},
|
||
"n8nio/n8n|GHSA-crfj-5wv6-8v86": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "n8nio/n8n 2.42.1 (n8n)",
|
||
"silent": "first read after the seed",
|
||
"summary": "SeaTable Trigger Node Stores the API Token in Failed Poll Execution Data"
|
||
},
|
||
"n8nio/n8n|GHSA-m7gv-mpg5-7c9v": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "n8nio/n8n 2.42.1 (n8n)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Read/Write Files Node Glob Pattern Causes Unbounded Event-Loop Block"
|
||
},
|
||
"n8nio/n8n|GHSA-mgpr-56r4-5c67": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "n8nio/n8n 2.42.1 (n8n)",
|
||
"silent": "first read after the seed",
|
||
"summary": "OData $filter Injection in Microsoft Outlook and SharePoint v1 Nodes"
|
||
},
|
||
"n8nio/n8n|GHSA-mp7q-23hg-35cf": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "n8nio/n8n 2.42.1 (n8n)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Webhook Responses Without the Sandbox Policy Allow Stored Cross-Site Scripting"
|
||
},
|
||
"n8nio/n8n|GHSA-pcr3-v5vr-qppf": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "n8nio/n8n 2.42.1 (n8n)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Per-User Credential Theft via Error-Workflow Execution Context Inheritance"
|
||
},
|
||
"n8nio/n8n|GHSA-qmvv-q3c9-wpp7": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "n8nio/n8n 2.42.1 (n8n)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Credential Secrets Exposed in Execution Error Data of Several Nodes"
|
||
},
|
||
"n8nio/n8n|GHSA-v9cx-v88r-42vw": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "n8nio/n8n 2.42.1 (n8n)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Credential Permission Check Skips Nodes Whose Default Parameters Are Omitted"
|
||
},
|
||
"n8nio/n8n|GHSA-wvjj-qg37-pv73": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "n8nio/n8n 2.42.1 (n8n)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Crafted Workflow ID Gives Access to Data Tables in Other Projects"
|
||
},
|
||
"outlinewiki/outline|GHSA-27h6-gg7j-wj5w": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "outlinewiki/outline 1.10.1 (outline)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Cross-tenant authorization gap in the GitLab integration inbound-webhook handler"
|
||
},
|
||
"outlinewiki/outline|GHSA-48rq-wx9j-g949": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "outlinewiki/outline 1.10.1 (outline)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Account takeover via cross-provider providerId collision in userProvisioner (SSO/OIDC login)"
|
||
},
|
||
"outlinewiki/outline|GHSA-65xg-84g9-7hrm": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "outlinewiki/outline 1.10.1 (outline)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Existing collaboration connection remains writable after document archive or deletion"
|
||
},
|
||
"outlinewiki/outline|GHSA-97vv-f6qq-6842": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "outlinewiki/outline 1.10.1 (outline)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Auth-changing routes accept API keys / OAuth tokens (missing AuthenticationType.APP guard) → account takeover & persistence"
|
||
},
|
||
"outlinewiki/outline|GHSA-cprf-crfh-w3p4": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "outlinewiki/outline 1.10.1 (outline)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Email sign-in token has no server-side redemption check (confirmed in code; asymmetric with the sibling code+email flow; live replay not executed)"
|
||
},
|
||
"outlinewiki/outline|GHSA-f28f-75h4-499q": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "outlinewiki/outline 1.10.1 (outline)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Cross-tenant account takeover via unverified Microsoft Graph `mail` attribute in Azure SSO callback"
|
||
},
|
||
"outlinewiki/outline|GHSA-h6ff-rw9x-5mq2": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "outlinewiki/outline 1.10.1 (outline)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Authenticated members can publish documents into private collections through a retained parent link"
|
||
},
|
||
"outlinewiki/outline|GHSA-m9vh-j2wc-xj24": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "outlinewiki/outline 1.10.1 (outline)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Pre-auth account takeover via Azure and Discord OAuth adapters trusting unverified email claim (nOAuth-class, shared email-merge primitive in userProvisioner)"
|
||
},
|
||
"outlinewiki/outline|GHSA-rq53-m97j-f2pg": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "outlinewiki/outline 1.10.1 (outline)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Unpublished documents remain publicly accessible and their shares cannot be revoked"
|
||
},
|
||
"outlinewiki/outline|GHSA-rvj7-2gww-6xfq": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "outlinewiki/outline 1.10.1 (outline)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Outline: shares.info parent-share discovery leaks private-collection name/path (and ancestor document titles/URLs + sharer identity) to a non-member"
|
||
},
|
||
"outlinewiki/outline|GHSA-w8vg-8mjx-xq8x": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "outlinewiki/outline 1.10.1 (outline)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Logout-revoked JWTs retain read/write access through existing document collaboration WebSockets"
|
||
},
|
||
"outlinewiki/outline|GHSA-x4w3-9p9j-cprh": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "outlinewiki/outline 1.10.1 (outline)",
|
||
"silent": "first read after the seed",
|
||
"summary": "users.update_role reveals whether a user id from another team exists and which role it has"
|
||
},
|
||
"outlinewiki/outline|release:outline/outline@v1.12.0": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "outlinewiki/outline 1.10.1 (outline)",
|
||
"summary": "1 which fixes multiple recently disclosed vulnerabilities"
|
||
},
|
||
"privatebin/pdo|GHSA-w873-3ghv-hmh6": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "privatebin/pdo 2.0.6 (privatebin)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Insufficient Markdown/HTML Sanitization enables Deceptive Popups due to Bootstrap classes"
|
||
},
|
||
"privatebin/pdo|release:PrivateBin/PrivateBin@2.1.0": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "privatebin/pdo 2.0.6 (privatebin)",
|
||
"summary": "More details on this issue can be found in the security advisory:"
|
||
},
|
||
"rommapp/romm|GHSA-722m-w9p2-xv2j": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "rommapp/romm 5.3.1 (romm)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Unauthenticated WebSocket Scan Trigger"
|
||
},
|
||
"rommapp/romm|GHSA-7jw3-ppmp-57wc": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "rommapp/romm 5.3.1 (romm)",
|
||
"silent": "first read after the seed",
|
||
"summary": "RomM hidden ROM child routes bypass entity visibility restrictions and allow unauthorized media modification"
|
||
},
|
||
"rommapp/romm|GHSA-9q83-m866-5jrp": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "rommapp/romm 5.3.1 (romm)",
|
||
"silent": "first read after the seed",
|
||
"summary": "RomM Public Save Download Endpoint Bypasses Hidden ROM Visibility and Leaks Protected Save Files"
|
||
},
|
||
"rommapp/romm|GHSA-q7fg-rj3q-m3gm": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "rommapp/romm 5.3.1 (romm)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Any user can read and download other users' private collections and Favourites via `/api/roms` collection filters"
|
||
},
|
||
"rommapp/romm|release:rommapp/romm@5.4.0": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "rommapp/romm 5.3.1 (romm)",
|
||
"summary": "0 [security] by @renovate [bot] in #4966"
|
||
},
|
||
"rommapp/romm|release:rommapp/romm@5.4.1": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "rommapp/romm 5.3.1 (romm)",
|
||
"summary": "While we don't believe RomM instances are vulnerable, we recommend upgrading as soon as possible"
|
||
},
|
||
"traefik|GHSA-28hp-c82p-8vqj": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "traefik v3.7.13 (controller infra)",
|
||
"summary": "Kubernetes Ingress NGINX provider: a TLS-option cache hit skips the cross-namespace authorization check, letting an Ingress use another namespace's CA secret"
|
||
},
|
||
"traefik|GHSA-53qr-784g-cj35": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "traefik v3.7.13 (controller infra)",
|
||
"summary": "FastProxy backend connection pool leaks connection-bound NTLM/Negotiate identity to unauthenticated clients"
|
||
},
|
||
"traefik|GHSA-cw35-4q88-3rmp": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "traefik v3.7.13 (controller infra)",
|
||
"summary": "Connection-scoped NTLM/Kerberos sticky round tripper is not keyed by service, applying one service TLS client config to another"
|
||
},
|
||
"traefik|GHSA-fh26-gfpp-7xxx": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "traefik v3.7.13 (controller infra)",
|
||
"summary": "snicheck skips the check when `req.TLS` is nil (HTTP/2 `:scheme http`)"
|
||
},
|
||
"traefik|GHSA-hrpp-p4fc-wwf8": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "traefik v3.7.13 (controller infra)",
|
||
"summary": "ForwardAuth shares the auth-server connection pool, leaking NTLM/Negotiate-bound identity across clients"
|
||
},
|
||
"traefik|GHSA-mhjw-hmjv-p99x": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "traefik v3.7.13 (controller infra)",
|
||
"summary": "Unsynchronized write to the per-connection sticky round tripper shared by concurrent HTTP/2 streams"
|
||
},
|
||
"traefik|GHSA-mwrr-6hp4-pxr6": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "traefik v3.7.13 (controller infra)",
|
||
"summary": "Ingress-NGINX provider forwards forged Ssl-Client-* identity headers on its HTTP route"
|
||
},
|
||
"traefik|GHSA-p8wx-ph99-xgcr": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "traefik v3.7.13 (controller infra)",
|
||
"summary": "ingress-nginx provider: mTLS (auth-tls-secret) silently disabled for a host when another Ingress on the same host has no matching auth-tls annotation"
|
||
},
|
||
"traefik|GHSA-qm9f-w54v-q2qh": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "traefik v3.7.13 (controller infra)",
|
||
"summary": "Preauthenticated Negotiate contaminates Traefik's globally shared backend connection pool"
|
||
},
|
||
"traefik|GHSA-qvj7-gq9c-hp7q": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "traefik v3.7.13 (controller infra)",
|
||
"summary": "Kubernetes Ingress NGINX provider: ssl-passthrough sibling HTTP router serves the auth-protected backend without auth"
|
||
},
|
||
"traefik|GHSA-rv2h-qh7j-xrjw": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "traefik v3.7.13 (controller infra)",
|
||
"summary": "Ingress-NGINX provider: colliding auth-tls-secret names merge two client CAs into one TLS option, so a host is gated by another host's CA"
|
||
},
|
||
"traefik|GHSA-ww7c-q3mv-xx22": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "traefik v3.7.13 (controller infra)",
|
||
"summary": "Data race on the shared bufio.Reader after an HTTP/1 upgrade in FastProxy panics the whole process"
|
||
},
|
||
"traefik|release:traefik/traefik@v3.7.14": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "traefik v3.7.13 (controller infra)",
|
||
"summary": "Advisory GHSA-53qr-784g-cj35"
|
||
},
|
||
"traefik|release:traefik/traefik@v3.7.15": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "traefik v3.7.13 (controller infra)",
|
||
"summary": "Advisory GHSA-p8wx-ph99-xgcr"
|
||
},
|
||
"traefik|release:traefik/traefik@v3.7.16": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "traefik v3.7.13 (controller infra)",
|
||
"summary": "Advisory GHSA-hrpp-p4fc-wwf8"
|
||
},
|
||
"vikunja/vikunja|GHSA-2f75-93c9-xf32": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Stored rich-text images make viewers' clients probe loopback and LAN addresses"
|
||
},
|
||
"vikunja/vikunja|GHSA-3x3m-2j93-w46j": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Unbounded avatar size cache exhausts server memory"
|
||
},
|
||
"vikunja/vikunja|GHSA-49pj-52x6-8gpj": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "No brute-force limit on password re-authentication; TOTP can be disabled with the password alone"
|
||
},
|
||
"vikunja/vikunja|GHSA-4hv6-xc92-j86g": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "WebSocket authentication ignores server-side session state, so revoked sessions keep receiving live pushes"
|
||
},
|
||
"vikunja/vikunja|GHSA-4qvp-948j-4cgv": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Revoked session's access token keeps working and can mint new credentials"
|
||
},
|
||
"vikunja/vikunja|GHSA-586f-48mj-3rwr": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Read-only project members see credential-bearing webhook URLs"
|
||
},
|
||
"vikunja/vikunja|GHSA-5f6v-j6xm-wwj9": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Project-webhook token scope reaches user-level webhooks"
|
||
},
|
||
"vikunja/vikunja|GHSA-5fc2-w2j4-6r8w": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Bot API tokens keep working after the bot owner's account is disabled or locked"
|
||
},
|
||
"vikunja/vikunja|GHSA-5q33-h98p-rgh9": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Webhook task payloads bypass read authorization via a no-op kanban bucket move"
|
||
},
|
||
"vikunja/vikunja|GHSA-66cq-j6rw-pjch": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Webhook payloads leak related tasks from projects the webhook owner can't read"
|
||
},
|
||
"vikunja/vikunja|GHSA-7f23-p76f-cx74": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Unbounded resize output in task-attachment image preview enables in-process API OOM (unfixed sibling of CVE-2026-91971)"
|
||
},
|
||
"vikunja/vikunja|GHSA-7gmh-4fw6-8xc5": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Export archives are orphaned on disk and never cleaned up"
|
||
},
|
||
"vikunja/vikunja|GHSA-9hxw-pxcq-4q8q": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Image decodes have no concurrency bound"
|
||
},
|
||
"vikunja/vikunja|GHSA-9rfw-7hv4-3vv3": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Local file storage blobs and SQLite database are world-readable"
|
||
},
|
||
"vikunja/vikunja|GHSA-9xh7-5jg8-mf43": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Bucket delete uses the URL view instead of the bucket's real view"
|
||
},
|
||
"vikunja/vikunja|GHSA-c934-xjq2-mrg3": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "CalDAV VTODO RELATED-TO entries fan out into unbounded dummy tasks"
|
||
},
|
||
"vikunja/vikunja|GHSA-ff52-3296-2fvr": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Link-share hash logged in the request path"
|
||
},
|
||
"vikunja/vikunja|GHSA-fjrf-gjmg-9v6g": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Team members cannot be removed after a client writes `external_id`"
|
||
},
|
||
"vikunja/vikunja|GHSA-fmmf-xq98-g327": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Write-level project members can delete admin-tier link shares through an unloaded permission check"
|
||
},
|
||
"vikunja/vikunja|GHSA-fprf-r6rv-xg99": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Saved filter creation with an empty filter string recalculates task positions across all tenants"
|
||
},
|
||
"vikunja/vikunja|GHSA-frf4-3prf-3vch": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Login CSRF via form-encoded login and OIDC callback on /api/v2"
|
||
},
|
||
"vikunja/vikunja|GHSA-g2xc-jv9q-46wq": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "WeKan and vikunja-file imports have no item-count cap, enabling in-process API OOM (unfixed variant of CVE-2026-91969)"
|
||
},
|
||
"vikunja/vikunja|GHSA-h4q3-mc9r-q7vv": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "TOTP can be enrolled and enabled without the password, letting a stolen session lock the owner out"
|
||
},
|
||
"vikunja/vikunja|GHSA-h8wj-3gwg-jjjg": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Release toolchain (xgo) pulled by mutable ref"
|
||
},
|
||
"vikunja/vikunja|GHSA-hjx8-qv73-f7cm": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Webhooks and link shares survive every revocation path, so a removed collaborator keeps a live feed"
|
||
},
|
||
"vikunja/vikunja|GHSA-hm4w-h7v8-ch43": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Nil bucket filter makes project view reads panic"
|
||
},
|
||
"vikunja/vikunja|GHSA-hq66-9qg8-jwqg": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Account deletion escalates read-only shares to project admin or owner"
|
||
},
|
||
"vikunja/vikunja|GHSA-hrw2-p27j-8mj8": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Plugin and log directories not re-anchored to the rootpath"
|
||
},
|
||
"vikunja/vikunja|GHSA-j5v7-qcwp-5g32": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "API token scopes collide between v1 and v2, granting a different verb than intended"
|
||
},
|
||
"vikunja/vikunja|GHSA-m687-p538-r5hp": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Permissive Cross-domain Security Policy trusts every localhost origin which should not be trusted"
|
||
},
|
||
"vikunja/vikunja|GHSA-mqq8-869v-48q8": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Vikunja-file ZIP import has no entry-count cap"
|
||
},
|
||
"vikunja/vikunja|GHSA-p23m-cq25-pc4j": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Stored CSS injection in rich-text (TipTap) renderer via table-cell data-background-color"
|
||
},
|
||
"vikunja/vikunja|GHSA-p697-wq4x-grpj": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Unbounded bucket count causes per-bucket query fan-out on kanban reads"
|
||
},
|
||
"vikunja/vikunja|GHSA-pjr3-86v4-5p7w": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Explicit lower-permission share on a sub-project is silently overridden by an inherited parent permission (broken access control / privilege-management regressi"
|
||
},
|
||
"vikunja/vikunja|GHSA-qf5p-grf5-wcq4": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Password-reset, email-confirm and account-deletion tokens in the URL query reach access logs"
|
||
},
|
||
"vikunja/vikunja|GHSA-rj93-wmch-2crq": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Changing the API URL sends stored auth tokens to the new origin"
|
||
},
|
||
"vikunja/vikunja|GHSA-rp33-8f2m-hm6j": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "HTML injection in conversational notification email headers via unescaped doer name and task/project titles (incomplete fix of GHSA-45q4-x4r9-8fqj)"
|
||
},
|
||
"vikunja/vikunja|GHSA-rp64-xg8g-9mpr": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Dump archive is created with umask permissions"
|
||
},
|
||
"vikunja/vikunja|GHSA-v3r6-33v3-79c2": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Team self-removal endpoint reveals whether a private team exists"
|
||
},
|
||
"vikunja/vikunja|GHSA-v579-5fwc-gr28": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "page=0 on v1 list endpoints returns the whole result set, bypassing service.maxitemsperpage"
|
||
},
|
||
"vikunja/vikunja|GHSA-w64q-7p4m-j8g8": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Kanban task-bucket move lets a user put a task into another project's bucket"
|
||
},
|
||
"vikunja/vikunja|GHSA-wqjr-22r7-5437": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Trello, Todoist and Microsoft To Do migrations buffer remote downloads and API responses without limits, enabling in-process API OOM"
|
||
},
|
||
"vikunja/vikunja|GHSA-xgw3-ccqg-f6ww": {
|
||
"first": "2026-10-27",
|
||
"last_mailed": "2026-10-27",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"silent": "first read after the seed",
|
||
"summary": "Migration OAuth callbacks are not bound to the initiating user"
|
||
},
|
||
"vikunja/vikunja|release:go-vikunja/vikunja@v2.7.0": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"summary": "🔒 Six security fixes"
|
||
},
|
||
"vikunja/vikunja|release:go-vikunja/vikunja@v2.7.1": {
|
||
"first": "2026-10-26",
|
||
"last_mailed": "2026-10-26",
|
||
"program": "vikunja/vikunja 2.6.0 (vikunja)",
|
||
"summary": "🔒 A whopping 41(!) security fixes from community reports and an automated audit, reworked attachment previews, signed Docker images and a pile of bugfixes"
|
||
}
|
||
},
|
||
"failures": {
|
||
"registry:docker.io": {
|
||
"mailed": false,
|
||
"streak": 1
|
||
}
|
||
},
|
||
"runtime_cache": {
|
||
"sha256:01bdf0ad6d53198da4331540c1e73ab65db7a72e961fff97ecb0847d46055c5f": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:066877418cd11b59edbf56ee31848ee96381b9860eccea94d6233ebf7ece15cf",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2build2"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:0250d9cb0d745a8d768f31d3cdc68ac14bfa8b43dedfe0f550158e3861c12db7": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:00724fc1f511635e3675538a326915474d486fcc9409a8b0f574da543e5980a1",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2+b7",
|
||
"python3": "3.13.5-1",
|
||
"python3.13": "3.13.5-2+deb13u4"
|
||
},
|
||
"env": {
|
||
"PYTHON_VERSION": "3.13.15"
|
||
},
|
||
"node": null,
|
||
"python": "3.13.15",
|
||
"unchecked": []
|
||
},
|
||
"sha256:03295f95a6290e752641f9553ac4198b0e5b71b879d57f7b2371b98f608feb54": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1",
|
||
"nodejs": "24.18.1-r0"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:d5cd2424802f2649dbd6526c07a8de335b9687a4c032b46256c96c82217067f6",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": "24.18.1",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:039239902a01e58a5a0f52e29039fafa18ffc2a481bb8acd807599f1c6dde7ef": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:07a683755cc5eef919d807e53d9e0eaf136607e3f7ed47333e1f629d37834b84",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:084b3b2ab1d0ef930660727259546a241f2bdf67c9ed085d54bf1486a6887c9b": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.1-r0"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:41fdc1672209c2ef31c5260015ec8b96e3c75513e60a667eb052e1ff54b4cfa9",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:08ee9ffdb847e1bd35ded30ee832090dd06a7f93f67422687db59e70bc7f5393": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:898e4e94aeeb1e95a5d2a637dbcb51393cfd1e041d65381ab182cf2aade585fe",
|
||
"dpkg": {},
|
||
"env": {
|
||
"NODE_VERSION": "26.3.0"
|
||
},
|
||
"node": "26.3.0",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:0985e772fb9f729e6fa0980da05fca5d9c468e870eed43071545afa9d2e27d94": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:8f84ed99befc3891b8f329c5c202785278a2cfb7c25107d57fb2a134a3117433",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:09b5aacb0b23e5bff5e09dc87211f64b5beb82010107a1f63f121e343f4c6bf3": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:9855801a896b636f697a49c86f14192ac9fd4fe883a0da90d3f8f86761aab756",
|
||
"dpkg": {
|
||
"libbrotli1": "1.0.9-2+b6",
|
||
"python3": "3.11.2-1+b1",
|
||
"python3.11": "3.11.2-6+deb12u9"
|
||
},
|
||
"env": {
|
||
"PYTHON_VERSION": "3.15.2"
|
||
},
|
||
"node": null,
|
||
"python": "3.15.2",
|
||
"unchecked": []
|
||
},
|
||
"sha256:0cefaabd882e42bcb2a2f3dc56d3ce4770560ba62fd7f197f1a2e008fd5731ab": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:cbf42f0edc946c0bc1b8eeed62403734e1f25dc67a3491455d07a92fdb558b28",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:0e5688ba0988b9112cf03f9c6bab53eccb466d278435f6596f16c1f25acacf74": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:1d154af14e2e590de1b3df3459e4e883e3fda7882ec49ad0e98978da868ddf9a",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2+b7",
|
||
"python3": "3.13.5-1",
|
||
"python3.13": "3.13.5-2+deb13u5"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:10a5c69a83035ab5239f5620d708520e8b28f5aa1f2b20143e6024532edadfb5": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:3b0ef735388b2cb097fc29b8bb421d86d57d0ddbe7aa1fbd6493e06d65028503",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:13290e2f04bfd98cf8fc7e8d216fb76b2b2d12373d4923b859cd41c2d984fde8": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:40e9b3aa6bc2fb28cfdeeeefe4f1b838d42fd78d750d3c90d1715f3461fd0faf",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:1336e85aaed293bd63d005086e0dd013b04078b26aaeb1c18b26a2f928af7e65": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:abb2b9c1b132b5b0be40d09c85bf8d3dab2a59fa0eb3aa955ab8be5efbb73de6",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:186694f07bb1d6449efbebbd3efb1ec09b476732e77eb80618afb96fa35c5da4": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:39289781f568f61a710f9ebbf734750d3f7eab7635d7cc962d893fb983d39cdb",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2+b7",
|
||
"python3": "3.13.5-1",
|
||
"python3.13": "3.13.5-2+deb13u5"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:19764751d501495b021530c9426f25d8f9f8748dc38ab3ba48eb62d7df2cd92e": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:abdbd75d465f3bf9d55063c8b3caa43b75e4f4c141f7afc03c4be9e23ab2fe4a",
|
||
"dpkg": {
|
||
"libbrotli1": "1.2.0-3build1"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:19ea2b669945d842dadc3d500f2d6a795866a003330f59a47b9634658bae98bb": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:7d90670a4e2531e752f014e58f7283b9d197847b6f073bf84e99598f49d80ffd",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:1a078b237c1d9b420b0ee59147386b4aa60d3a07a8e6a402fc84a57e41b043a4": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:886090efddca88b0498f775acea8a11b9d4cbb4a101626759c7ce53768e06d10",
|
||
"dpkg": {
|
||
"python3": "3.11.2-1+b1"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:1b4e4438faca4dd7e001dd445d161a4a2091b0fededa84093b3a8dfeae1f1be0": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:da83fae85603c4e47e6c68369a7d746e2dda683dc35ea2e234b4f171e0d92798",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:1b5875fe3193d450a62e7b438eb6701195c841f14f3dcb962e545eda42d3696f": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:6681d91b75ecfedfb9df4b2e251345a89f79a511aa14dade1193320e38c892e1",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2+b7"
|
||
},
|
||
"env": {
|
||
"PYTHON_VERSION": "3.13.15"
|
||
},
|
||
"node": null,
|
||
"python": "3.13.15",
|
||
"unchecked": []
|
||
},
|
||
"sha256:1c5789b93bfe5eed0b7287255782d9177027b255de2b22b59f511a693a48db04": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:112a5a87010d39124c8c31499745184c283f0e5bc56b672d2eda84c7131e8300",
|
||
"dpkg": {
|
||
"python3": "3.12.3-0ubuntu2.1",
|
||
"python3.12": "3.12.3-1ubuntu0.16"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:1e7c2345c493f9228a5dc2102be06b5a33331100f303fe0078502f4ef1068724": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:20a187e25a0872c2b7147c729e949c1611bdd32273109e92bb14ad08211d1b36",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:1f7ecf094d54363014636c3540dbe9c368394504abaa283914e4fcf8d699f331": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:7cdfce0cbaec91b166bf61f7fafa1199f7b71c8e2c42a3ac1a44279c56ad0d10",
|
||
"dpkg": {},
|
||
"env": {
|
||
"NODE_VERSION": "22.23.3"
|
||
},
|
||
"node": "22.23.3",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:1feaaf724694d08a1fb19370b6ff37e6669edb16cae69e02660177253f903dc1": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:6a2db9c82657be91326fd8eec3ac5d8ca9a7758ee778b5034520ec8e13df393e",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:203a0854738be101bfdada825ac3cbf95e5681bc849757b6bc199e4cfae98faa": {
|
||
"apk": {
|
||
"brotli-libs": "1.1.0-r2"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:e0ffa3534f2a8e1691c687f3c087f2801b5e14b9ca57f0884280d4836bcdb0df",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:23ddf8660087d6b9f5dbdca2ca09817b84db45cb2d9d6e2e0176e70f514629e7": {
|
||
"apk": {
|
||
"brotli-libs": "1.1.0-r2"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:8828499b52c4bebfc266c287f5c1be5cdefe907dc035ac1d01c530e972020814",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:24645e971da6bb1a1f953d6859e307a0b29be1e8b4130a35b3220c209b5b860c": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:bdfbb624d5fe9df05481d8eb6791a00a4a78ab8152bce31e79c6f18917e6933e",
|
||
"dpkg": {},
|
||
"env": {
|
||
"NODE_VERSION": "24.21.0"
|
||
},
|
||
"node": "24.21.0",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:25d6a2ced2f1f0cf03c09abd776d87ba31941ed96d3a99992aa84b3bd0afc074": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:5d506854fed4940177e37cec1a28e9189dd26f404faafaa978a746038b6c2dfb",
|
||
"dpkg": {},
|
||
"env": {
|
||
"NODE_VERSION": "26.12.1"
|
||
},
|
||
"node": "26.12.1",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:25e8a0eb39f45c9ac5e8e7615fd84a0380018ea012317bc665b86458d900b4b9": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:eed3001be168d4c20e6a4b0087cca33bae98c5107b93a641d94980de09b6f8ee",
|
||
"dpkg": {
|
||
"python3": "3.13.5-1",
|
||
"python3.13": "3.13.5-2+deb13u5"
|
||
},
|
||
"env": {
|
||
"NODE_VERSION": "26.9.0"
|
||
},
|
||
"node": "26.9.0",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:266d3c257594e195b309ae9d1805e54c788f1d7b375f56bf6c367aac6c917e7b": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:e4cb93687b062cd25a0e8f672d85a7708235009d70d31f8a7698d9370092a9c4",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:294b683cb724975bec92580e1e685676bd4b50bda910ddb8c51d4cabeaec77e6": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:d56c381f961d307a21b3ca004cf1e3910f106644aefb1f43e654c8a56c4fd395",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:2e759dd1478a2ed119ee474e28522079fb1cfa50b3fd25cba89f6b9a67abad72": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r0",
|
||
"nodejs": "24.18.1-r0"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:187871639d9ca05cfb17c248d432518cd51d1bc57afbdada744f7e2857c3127c",
|
||
"dpkg": {},
|
||
"env": {
|
||
"PYTHON_VERSION": "3.13.15"
|
||
},
|
||
"node": "24.18.1",
|
||
"python": "3.13.15",
|
||
"unchecked": []
|
||
},
|
||
"sha256:2fdeeb1a2028ce7cb1274696237e32b9f849e16b6d77314d08c78356a6016fca": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:9ecfcc16092957520389b4955d6eb5a2ef2b59bc054e5ef39e4d5de3cc731956",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:3084f1e5ecdc10afafc193911039a06cdabda4473f3a48d62edbe460e3c154ee": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:ece46f9548c8b7ba80aa135d36f0636d1fbe26fe83d55583684c0967e64a1695",
|
||
"dpkg": {
|
||
"libbrotli1": "1.0.9-2+b6"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:32ab73d80f2b8b5fb0735b0431deb36b93fbb6b2fb43592449b0178c8b83e350": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:abd3a252d538f24afa0759d677d531dedccd4e4239c524202255cf72de80a2be",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:3400b0a4714d62161727a710c82a3e319cfea364ac6e591aed653f5bb6bb8055": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:997a7318c8affaaf7013f82716b36b17c17af69deea1452d4c9d3b8cc068ce44",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:35d599d80e8a06c0a4b218d6fa7c23d6d3e5818ee7db17edb6820c6deb9611b2": {
|
||
"apk": {
|
||
"brotli-libs": "1.1.0-r2"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:c58aa3d711a2f2537962a1edb0a4ad46f8212490e2b20de7307b7314f49bb840",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:36a92e9344ef965e9318c8d2f70dd35cad654a4615b889c6a4dd483ca1ddec7c": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:36a92e9344ef965e9318c8d2f70dd35cad654a4615b889c6a4dd483ca1ddec7c",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:377b66bec5645510ed52549bb00e648c273edc604d230a3f90fd2b2433afcb97": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:bc1a44f83c207dd9607cad8f5a13843918131361e899b4ebae9b786f5adbb76f",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2+deb13u1"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:38dc2727bfcfd5ede290f8ada114fc90368146f265ae4701ddddbcbe2a44ee52": {
|
||
"apk": {
|
||
"brotli-libs": "1.1.0-r2"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:59ce76e6e06193fbfbb1736a93b8468227e1ea663fc7b25b1da13fbb97f5197b",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:3ac1c9ea03bafa2588dd8acdcb809857bae305e71d2d90e11d689c78076a9c01": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1",
|
||
"python3": "3.14.8-r0"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:93e23ba7dd20c4a00da1bdeb9adf9d622890a11caed4f5468892f48eef7b0c0c",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:3e6710a7ab2a61311d9d899b719f6c3657791c63e8f4942cec4ebc42401d6b76": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": "1.2.0",
|
||
"brotlicffi": null,
|
||
"digest": "sha256:e47c978e1b801466e7f62f612fd552bc3a228e077b31a3f1c22c05cf63d754da",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:40c454d74ffdd9ecb15833e4d96f3a630d59aad862a1869381ae6ee086454419": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:a54abf44e6927355f58e4995461d7daf97250d4d390acff48dea16bb04579d56",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2+deb13u1"
|
||
},
|
||
"env": {
|
||
"NODE_VERSION": "26.12.1"
|
||
},
|
||
"node": "26.12.1",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:43cd93b9e1f02d760923f67f6e74e1c4d4a9cccb9b08fa42ad60770333f231eb": {
|
||
"apk": {
|
||
"brotli-libs": "1.1.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:065e1a518711d716619e0b15a5e1895457f62e055548d463e05ccc711fe643fe",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:4524d0b00478e41264f42e0e660c1819e3b7d0c460f78ce73e44fa39b2b55134": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:45c2e5c840248cc431260bac20219ad5b3b6124fcd8dab346cf85e3cb6b8963c",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2build2"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:4538137bc5af902dece165f2bf73776d9cf4eafb6dd714670724af8f3eb77764": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:499fbe958fa4a0c93172a231c14898986556bb28bd5cd569a0f41dbf887b04d7",
|
||
"dpkg": {},
|
||
"env": {
|
||
"NODE_VERSION": "22.18.0"
|
||
},
|
||
"node": "22.18.0",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:46d90e46bd87312fcbbbb05036d99e4cb1c821e928b0516ee727de4c3c90752b": {
|
||
"apk": {
|
||
"brotli-libs": "1.1.0-r2"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:93e2efccb4d0111c045d9f46c27343df0114faa050e210d2f95b50671eb98529",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:47b08295737773de3b711fb86f13ae802f5074e96a9a2d29f5f80164ac08c046": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:be7c1cada5a6eb1656adfa2635b99296af725881301b21f84f35a71fac072c7f",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:47e961a569fd52ff31f0fe205ed91eeab17d9f5fff6722e6d7ea6b588748b293": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:682bb307fed2165594aa60883dc142c757fa70894b1802c0ef0814e02a8c1844",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:48e36b608b461273b9dae857725cd0561a127f2c694b687318f6d0c5ce63e5c9": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:a674ae620ca7ce1246b377bcac13a7500567196cf2207059e68146fa4dc169f7",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:4b3d9475d65571d28cbb19544d3820ec2945e4c8b2f18279394282b8dc3a592e": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:2d6a23c682c574ae49320fdf2419441b6f10658588d44b6d8739d673b96903e5",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:4b95dbe7ac5343b768f8e04e3035ccd59997872b1a35ab9b0f082d2cc279070e": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:2e1a606449aab9b7577620ec87554c71e924d8f3dedd50e69b938c63c8d5d1b9",
|
||
"dpkg": {
|
||
"libbrotli1": "1.0.9-2+b6",
|
||
"python3": "3.11.2-1+b1",
|
||
"python3.11": "3.11.2-6+deb12u9"
|
||
},
|
||
"env": {
|
||
"NODE_VERSION": "22.23.4"
|
||
},
|
||
"node": "22.23.4",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:4d7cd163d60c81c257badef488707601fa02c56368894bde4af69839fc761d69": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:5c1a104885622f3566161a6262b6909f00d39783d22499daf8cc1c727c019b51",
|
||
"dpkg": {
|
||
"libbrotli1": "1.0.9-2build6",
|
||
"python3": "3.10.6-1~22.04.1",
|
||
"python3.10": "3.10.12-1~22.04.10"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:4f733dc50b0c77517db402541f88c5489d4c9eedb32ac6c5eef7cadd8a594196": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:a39e5d7f885dac95005e39345e629d5047696ca0f1320cb332cf6f403d6fb795",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2build2",
|
||
"python3": "3.12.3-0ubuntu2.1",
|
||
"python3.12": "3.12.3-1ubuntu0.13"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:51ee22428b4192f4372b54f84c8b90cd710311ad99993c5045f53b51717dd3f7": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:db459d08b5f3b900e9a646920e58c1087497a9f070f9142ed8f0fca8e81b1350",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": "26.3.0",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:54d9406cd30f9e206a9dd6d61dfac48da26b9afc37200e14f23beb8fafa7d11c": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:f5b936519c0041c17ea79eb85444e86d7fc55bdcc271b74d722f62537323eb84",
|
||
"dpkg": {},
|
||
"env": {
|
||
"PYTHON_VERSION": "3.14.7"
|
||
},
|
||
"node": null,
|
||
"python": "3.14.7",
|
||
"unchecked": []
|
||
},
|
||
"sha256:54e0dd8e8cddcdbb9156c2486eed5a43eccb7214d7c6828097d41ce049fb3984": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:1d4031d6ed0a9b774b365f99a3c16127217eb19f699d8d43fc43b732748601ef",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:552beab3dec8c93d46b8b9245612d63c3f123b8a45063a474f53e229b17621d3": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:59cab86c77e764855119e2d5ddd96b9c9cefd90913f4feed7f4ee1433a6482c5",
|
||
"dpkg": {},
|
||
"env": {
|
||
"NODE_VERSION": "24.20.0"
|
||
},
|
||
"node": "24.20.0",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:568b1be1c42f456df066a8bb55be8ce0046b2c6fc96b1650db5d2162eb4f1ce9": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:cff6177bc30fcc2e96deb2c5dd4e626720e9bd20dea9d8d5f79e521c8ce1709c",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": "26.12.1",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:581d68b2a6fc7ebf58d81c878a9f387cbbc0d88ac9d37b298b9cee10168af85b": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:10f3490855630aa024ba618b90ba6f58f3d9d7063dd77e1d1e958fdc4ede7c70",
|
||
"dpkg": {},
|
||
"env": {
|
||
"NODE_VERSION": "24.21.0"
|
||
},
|
||
"node": "24.21.0",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:589e3606b11b61c3fa2d9661832cb73645a9b93a9cc7d807a071e2bc6c584498": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:b29c63de16524ac92971b465a0487cd396bd7c7498d1a2c01440ac42aac818e6",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2+b7",
|
||
"nodejs": "20.19.2+dfsg-1+deb13u3",
|
||
"python3": "3.13.5-1",
|
||
"python3.13": "3.13.5-2+deb13u5"
|
||
},
|
||
"env": {},
|
||
"node": "20.19.2",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:591974a7cb92be1d30a9033da0b97ef628d0ee1328e3ec29683b0075619805ba": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:27e97da27f1581e8e134009230d6bc2ec62757fda13d23095ebcb349f935a702",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:599b99bbae1a297fa8169734cf9267dc97c330f5c9abd21ebdaab32869c9a42c": {
|
||
"apk": {},
|
||
"brotli": "1.2.0",
|
||
"brotlicffi": null,
|
||
"digest": "sha256:d9927bdad52483f16eb172ad7809425898cb8a0970a42e4f996127012d4ef68b",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2build2",
|
||
"python3": "3.12.3-0ubuntu2.1",
|
||
"python3.13": "3.13.15-1+noble1"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:5b19bbb160e9ff60681a3abd97e1c4ec9f64212301410de658c3900ab7ef31e7": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:7dd0edb7a82dd71a574a968e0361bf6e0ae850c4b291e14539e0f0000d810e36",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2+b7"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:5e00373854247750cc3e4479b492ae09293ff5e06ed10177f226634d97888679": {
|
||
"apk": {},
|
||
"brotli": "1.2.0",
|
||
"brotlicffi": null,
|
||
"digest": "sha256:1297be5207318acea7030884a2d283ef3e805c745eaeaa4c5602bc3dc9b7f47a",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2build2",
|
||
"python3": "3.12.3-0ubuntu2.1",
|
||
"python3.13": "3.13.15-1+noble1"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:61d2b391e3e324d05edc6c65c555989a7c544ddb72ef271b3abd4a35b57942b1": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:c266a6e065eb1aed529058245446139e6a13cedd12b892f7867cd402b0760ecc",
|
||
"dpkg": {
|
||
"python3": "3.9.2-3",
|
||
"python3.9": "3.9.2-1+deb11u2"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:6282144f9a14d4a4dca2bc96801a2e43a2ff51116f001b13e5488eacad7b80e2": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:cb02c63fdc2dd9536ca9614d74f0a130b318c5813f76963570db1f782968c574",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:62bd423aeee912639ca8ee681c2b762cb3e25137e0a92b20be455898a9f034ad": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:4876fdea29cac1a33a3195f1eb1952feb1fca7dd6dd00be3e2f1879cf20d34d2",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:68455d4953bad8e984e1bc5d112ed1e9c918a0a04f104c13c9ece50790308894": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:41a515f2282aca486e1d41941362d4f3c49fb3460a51ec77e145410af9893de5",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:6aa7d9832324ea403be144a26398a82afbf04abbb4da89f9d04ba61838516b3f": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:d16c593650c975b9c6c044363fd7bfe95b6cee311fb8af2bc49079a42072e333",
|
||
"dpkg": {},
|
||
"env": {
|
||
"NODE_VERSION": "24.18.0"
|
||
},
|
||
"node": "24.18.0",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:6ba19c50b56777f5c11c58eff8ddb69d0d5f27ba131cffb63f180ccfd43c66af": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:1cf73a2f04808e55a8bd2f5706c2aa0ebb0f71938f93deb7af79f48311cd5cb9",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:6c86cad803970ea782683a8e80e7403444c5bf3cf70de63b4d3c8e87500db92f": {
|
||
"apk": {},
|
||
"brotli": "1.1.0",
|
||
"brotlicffi": null,
|
||
"digest": "sha256:835974fc3368fc6714aa38542db7a1f0f542d03244e39b981e519aefc100f355",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2+b7"
|
||
},
|
||
"env": {
|
||
"PYTHON_VERSION": "3.12.12"
|
||
},
|
||
"node": null,
|
||
"python": "3.12.12",
|
||
"unchecked": []
|
||
},
|
||
"sha256:6f8f1fc29d1ff67b4d8d503bb4e0a69b55c8d42600decafde951344218193a27": {
|
||
"apk": {
|
||
"brotli-libs": "1.1.0-r2"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:df2df6d13efea6d86c86091a549d8adcf6301a7fb9558d2870f69d3a485d479d",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:712dc5385d1c1a3f83b747fa9e40f64d433a97f72ff42f9755ff7dd1f62846e4": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1",
|
||
"python3": "3.14.7-r0"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:a466f1230db238e7e534c633619b4c4c2fa5fded43c74bd7600e17545929ae98",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:75ecbb1c89ab7b0a21c4bde40b4820e4f1649d2d56d83b91913422155e8d2a5f": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.1-r0",
|
||
"python3": "3.14.8-r0"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:236a7a3a81a3706182ae1f12ee55aa3781c753963e680b2d9c8e55541686d0ce",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:76f0358884cb92d9a086d24e5671c38048d3fef40f2588703d73eb55392d6b69": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:2068651a18ac6048578647ea57b940ca2daed3f504ebe7fba6a93beeb39aaa1f",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:7837f8148cc6db5e3e9a8df199912950adaee66898ebad4949d9dbb2f30aa02b": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:bdc2aaeee2f5d2ad478bae33fdfd2e6881b55bdabcbb3f6b4f7dc297c1013d6c",
|
||
"dpkg": {
|
||
"libbrotli1": "1.0.9-2+deb12u1"
|
||
},
|
||
"env": {
|
||
"NODE_VERSION": "24.22.1"
|
||
},
|
||
"node": "24.22.1",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:78eb28b8776d0bad40c5e605c72b3f4f5976793e491558c7dcbdfc04c835d4bc": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:243e33ea66e71b2094cb1f9c9167af24452405a33fc899a1dc7359dc210506f8",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2+b7"
|
||
},
|
||
"env": {
|
||
"PYTHON_VERSION": "3.14.8"
|
||
},
|
||
"node": null,
|
||
"python": "3.14.8",
|
||
"unchecked": []
|
||
},
|
||
"sha256:7a6779d345d4d678614aa1a0a8a4d8456aeb98de10dfae700b839c3140c89f39": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:b0808c771d92d24980188352acdbd9215edcbbf522b947bbd8b2763ae63c7ae7",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:7b6e87514259549647e15ceeaf73d238792e6d77e2c79fc744d5badc8d6e997c": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:224de96048a5bb7319aff1068f509a904849edb3fe8caabe24a90da65e52d366",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2build2",
|
||
"python3": "3.12.3-0ubuntu2.1",
|
||
"python3.12": "3.12.3-1ubuntu0.17"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:7d13848af12645600a5f9d93ee2560daa9c6fa6b5b859b7bff3a5e1c0b661031": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r0"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:0b35a8706dd0171866ca4b787b53b272a519fff5ba7520ef4bddbe58121411f9",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:823dc5036b911696c27faacf7664219b28e6e15826405720df29aad208d19f25": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:1af003c7f40d6c692a4ee5bd5e02f01e42b7f6ea07924f3c9d7505898e6a5c9b",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2build2",
|
||
"python3": "3.12.3-0ubuntu2.1",
|
||
"python3.12": "3.12.3-1ubuntu0.17"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:860fa4baed04ae1c235de870edab0c8006227546dea1bbb6411fbfc5e27cf1db": {
|
||
"apk": {
|
||
"brotli-libs": "1.1.0-r2"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:d84b081420b2e5899f5acc3745e1d6510950430fef3ee6b9df5e53b0bf3e19c9",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:8677fb7b81b1d3db20b849e989a1dadc2a11159e51eb34a2acdcb01102274edf": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.1-r0",
|
||
"nodejs": "24.18.1-r0"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:923a808be529a834a171b3e045821aeb7e2851f4b6fc9514076785b68a9142f6",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": "24.18.1",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:87a67ee09d3ae0d1df5fda5dcda3e2a1f9236a45b0a59025d6e00e46adc43bef": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:d584940b7143982682ac4541509dd628506c2b568221e6af41e5a2ead1de4fe7",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:894f570c0cf0664ed5576a8fd5d5bfb8fb1b19d592885b686c3a88c8bd90c41f": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:1e85984a7261b01b38a8e7d4166abcdb35370e6b7667a6d6fd9caa057f64eab6",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:8974eaa9ba32f713daf311e7cc8cd7e4cdfba1edea39eed75524e78ef4b08f4f": {
|
||
"apk": {
|
||
"brotli-libs": "1.0.9-r14"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:f39258e35244b6bf79bc6ac4e60eee176aea6f6a5adb13e8c3090e48df8ae515",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:8a0ef97527544baa2b35825940ddf4db6e2d09c30cd5aa31fd269ff604cc8b75": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:fcc6a6b011a8c0adbf4489384588442224c01f74b6f63739e50b089d54b98371",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:8ae3cdf8cdbba2ac98754e9fc4ccec67bbaa86b6e6ab1ccf9683ddcff85eee72": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r0"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:280421e740e660db04c5c907810a01cb1a53becbefbf8dda2f0e0bb7edeceaca",
|
||
"dpkg": {},
|
||
"env": {
|
||
"NODE_VERSION": "24.21.0"
|
||
},
|
||
"node": "24.21.0",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:8c45e21f95875ccd35a6e68f7da72504df9e837d6ee703379512cb8de6a67082": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:01324c091da066333a2efb0f124a80dc2f0afcc87ffd79f948bf2436f9d0b1aa",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2+deb13u1",
|
||
"python3": "3.13.5-1",
|
||
"python3.13": "3.13.5-2+deb13u5"
|
||
},
|
||
"env": {
|
||
"PYTHON_VERSION": "3.13.18"
|
||
},
|
||
"node": null,
|
||
"python": "3.13.18",
|
||
"unchecked": []
|
||
},
|
||
"sha256:8e2fe9beeefc55a02f6e1d04cad0fc3c22e8f067d309188f016551dc99ec27b3": {
|
||
"apk": {},
|
||
"brotli": "1.2.0",
|
||
"brotlicffi": null,
|
||
"digest": "sha256:8f7c95941bcc560ea4ddd9ac27142698000e1abf08ac43d709828e712f71a4ea",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2+b7"
|
||
},
|
||
"env": {
|
||
"PYTHON_VERSION": "3.14.7"
|
||
},
|
||
"node": null,
|
||
"python": "3.14.7",
|
||
"unchecked": []
|
||
},
|
||
"sha256:92bfd78d731e254ba64f62b77b0696add6447a33642ee5feda106a26b285aa7f": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1",
|
||
"python3": "3.14.7-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:f5d34c27db7853bef7262666561d1b6e84fbffde0ffa7e9e24ed21337f006ef1",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:94146ac37bc61e2322f88016056c5920729cb8c64c8542ed590af8fc2abdac07": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:7ef699637304feff96028edbc7a653e135f2db2236d322b5cb2bfca11fd920bc",
|
||
"dpkg": {
|
||
"libbrotli1": "1.0.9-2+b2"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:942bc274709f27f99f7c6024a785d8e8f75ac06838cabcba448abb8d9127ec7b": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:7a7708314f9b1d0656e2e7f697abb64fae5f76e1895f0a9ccb9036c3933a0394",
|
||
"dpkg": {},
|
||
"env": {
|
||
"NODE_VERSION": "26.12.1-r0"
|
||
},
|
||
"node": "26.12.1-r0",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:97ec88159e6d7cfb5ddef9015386087d58a912de80112f06ebdfa78fa5989901": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:13ad9044b4b2fd2abe4c5aad8c384b0504a71006fa33f023fc68998453a2eeca",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:9912da7d7d9b6ddc0c2d904beb84d24689c1ed9c33b81419eb9008663a92a329": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:99286a05eb86191f3f1aab9b537950aa55b958e77d9f7a2385bc9332674e6e00",
|
||
"dpkg": {
|
||
"libbrotli1": "1.0.9-2+b6",
|
||
"python3": "3.11.2-1+b1",
|
||
"python3.11": "3.11.2-6+deb12u7"
|
||
},
|
||
"env": {
|
||
"NODE_VERSION": "22.22.3"
|
||
},
|
||
"node": "22.22.3",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:9bc6e8248891bcfa6f52fffe8b81e4ea8cae75790c3ec1b9906961a7ba55c969": {
|
||
"apk": {},
|
||
"brotli": "1.2.0",
|
||
"brotlicffi": null,
|
||
"digest": "sha256:b3f480cc5a8beb3ad45cb484b7c606f93240ae58fbfaf4f609be1cfa248267e8",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2+b7"
|
||
},
|
||
"env": {
|
||
"PYTHON_VERSION": "3.14.9"
|
||
},
|
||
"node": null,
|
||
"python": "3.14.9",
|
||
"unchecked": []
|
||
},
|
||
"sha256:9c8137a169ccb1f4946137736fbfffd091f6ce9c95c1f504bd7c996e9938a4be": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:baea1fb7cfd458687ded4aeb7187f0c4074107e55765ace026d1e2764d65c37c",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:9d0b64776c694f018c0ca06faf52105a33ca376024f46bb58e6ab0e2b728bb61": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.1-r0"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:1cd73f053e07828478922e9bca4b38ed819da8beac067459bd7da085a1296469",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:9ebc7c4c2f0f9376c981f2b172f8e01c103a09b6464097432b08bee8e698d681": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:59fe90b30e8560352a9c41547ee16426aa471cba61c0cebaeae90b6f88966ae0",
|
||
"dpkg": {
|
||
"libbrotli1": "1.0.9-2+b6",
|
||
"python3": "3.11.2-1+b1",
|
||
"python3.11": "3.11.2-6+deb12u6"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:a0b71c8e757298d02560186bab9fbe3fc2d375c523a62cc1019177b37e48aa28": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:c881120b024d6a8e2f3c9664efc568984e4352e47df459d6b32e225374c71955",
|
||
"dpkg": {},
|
||
"env": {
|
||
"NODE_VERSION": "22.22.3"
|
||
},
|
||
"node": "22.22.3",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:a2501141440f10516d329fdfba2c68082e19eb9ba6016c061ac80d23beadf7f3": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:c7a8bd9cc982024a55da94c235122449ff8fa91347b6e99f902f31e0349fc623",
|
||
"dpkg": {},
|
||
"env": {
|
||
"PYTHON_VERSION": "3.11.14"
|
||
},
|
||
"node": null,
|
||
"python": "3.11.14",
|
||
"unchecked": []
|
||
},
|
||
"sha256:a281cb44176dbe5323e0f7ea2d6fd34d58914a3a8525c36437a086d1d7c4fef8": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:7512ade4f436688782c85e07da559fc3af73e80ed568f674fda11c960a2e9d02",
|
||
"dpkg": {},
|
||
"env": {
|
||
"NODE_VERSION": "26.4.0"
|
||
},
|
||
"node": "26.4.0",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:a3554c0d0b48177b1413c26e01f695334428020d9df01243fbae3e11cfd17417": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:2db7d28517d1fba17c2da3210395f7be11a11b419246ad0da2edf782af72f367",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:a3c0482c5d55155a3aa96c4cbb63d2aa379f02ae3bbeb76909ffed2b15980f36": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:b15ec813f2d8f0ad1e51f4964eca02e1e76fa3b4c2fb6cf21f988227a6155e21",
|
||
"dpkg": {},
|
||
"env": {
|
||
"NODE_VERSION": "24.22.1"
|
||
},
|
||
"node": "24.22.1",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:a469ea076d4a1b4b1d86a41d130f2f536cd9da996a2b1fb39c0d7635f9d89b9a": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:1bc61f3b452ae458c0f5be7867fcc0c78476bbd48c5546b41d7d66a6df04db71",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:a76e08dbf5db4781fefd1ed81c65ad46ae8d2849dae6b6d3acebcde2fc4e59d6": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:4b2b5c9912c95899ad4720b3ada368e7b0d46f4c2fd6dc7d174922c325ef9855",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:ace3bb1219fb7306585ab9f4d94d41af7ee064c343db0498173436bbe857bd49": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:9d962292d21244382560a129fc0a5519b83fff9fd2ad77baa72947db2b3c5001",
|
||
"dpkg": {
|
||
"libbrotli1": "1.0.9-2+b6",
|
||
"python3": "3.11.2-1+b1",
|
||
"python3.11": "3.11.2-6+deb12u6"
|
||
},
|
||
"env": {
|
||
"NODE_VERSION": "20.20.0"
|
||
},
|
||
"node": "20.20.0",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:ae9094a0ead891eef80499a072e680734bcb34892242f0e232223c65eb4c3af8": {
|
||
"apk": {
|
||
"brotli-libs": "1.1.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:8491074e73af38d8ddfc227d0a8cbbf1a38c51475ff450ed9034613e6dd5a50e",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:af535d94061cf97a52e1661945ffba78c03f9443eae7c0da1a80a5a4be56b520": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:89c48c73e5285bfd707afcf02d5d8d6dcfc1d955aa7160d08145654b4bc8dfbc",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:af721ffac56fd33243043211fc49e4d5c5651f784551ae7b5b05d845c7c41147": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:f516dabf6dcac490826d826b58b80598afc054862e5ad040256f282afdb8098c",
|
||
"dpkg": {},
|
||
"env": {
|
||
"NODE_VERSION": "22.23.3"
|
||
},
|
||
"node": "22.23.3",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:b069e4307dec06ea06d16989c6861c30a1ff208568be44ed5fb5d422cd3e950c": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:3d57623bf031f32a0597a3ebe0cd869bff6ba181c02ebc90fac492458bcfd4a4",
|
||
"dpkg": {
|
||
"libbrotli1": "1.0.9-2+b6"
|
||
},
|
||
"env": {
|
||
"NODE_VERSION": "24.18.1"
|
||
},
|
||
"node": "24.18.1",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:b09d9b21381f47a79b3cbcb30da25266dc17186ea00ae65e99fdc51396f48e70": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1",
|
||
"python3": "3.14.5-r2"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:147f2c4cb0aa7a741151bce2bfef71d9e1a04631636e24665ee2a5ed799feb47",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:b11583ad2e93e4671128538c88cf11f460444a5d7e449311dd1933a400ab849d": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:5244f014aa3ad6b80db621ce161989d3cfc2a03c16024525e72d1b40a7a5dd2e",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:b3b00047ed20f6ce2b16780145cb6a0acb51c9e28ea6aa6f5dcd33c7034f1797": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:9ad6d7c7f1334a879b1d8aa488539c8cad5d19e7a876bb2ca2f6fd47b23fbc81",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:b578b7599d65c0279f6e1aad201bba737b9b15e6a4f308281d9e26f765e6657f": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:f23e297aff60046ab53d327d7705ec92228bf9e61f0f720d6038c651f664066c",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:b897c33f05972fb1bf484f7487bc878fa91ec8691335c1db6e2929c3a7658efa": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.1-r0"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:37c2057e150694970442579815c646fe6bdc01c95b9d1547c4c9068be8844ef3",
|
||
"dpkg": {},
|
||
"env": {
|
||
"NODE_VERSION": "24.22.1"
|
||
},
|
||
"node": "24.22.1",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:ba7bd45b8177fec7a31d297ecaf3c98e94aabb4fc043f167df35aeba8b93468c": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:25e49d3730a077afafcb37ee6c7cbf63d6a4d21eadfb64174a68bdacf521d1da",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:bc5a392672c1ec8823c50b61f3bd4b7e5acc34fcbb8477862577b3af1c633875": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:e976c3f0d43fe4ac2020bd7b496712108bba6ada27fb6784defe0cd187024d9f",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:bf6fe21c6e247597f7869664a440b5a34242e2d2940575cae39c17bfaa66dc0b": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:83597bf02da48a8ec4042fd4d4f58b9631f5b131d6dee7d2fcc5cf3f2eec2526",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:c124b9ad3452f46061b5054607d26ea51730dae5372c5e469920063ba2bc6dcc": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:8aa2821993207ae840ce09e4223217efcd14e01f71525db734faf4232bd59999",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2+b7",
|
||
"python3": "3.13.5-1",
|
||
"python3.13": "3.13.5-2+deb13u5"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:c15bff75068effb03f4355997d03dc7e0fc58720c2b54ad6f7f10d1bc57efaa5": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:cd4aaf5d917fe19b942bba0df4e50eed8e6766190b381e85687cc7880255674e",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2+b7"
|
||
},
|
||
"env": {
|
||
"NODE_VERSION": "24.14.1"
|
||
},
|
||
"node": "24.14.1",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:c4124d1afa875e47f2892edf26b482fa54f796e2f342d3717a04ca091a22a9bd": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:8a4a99eff981d95c3ab12d019b82fe59725fb7761f1f9a5f155bc3f025528f4f",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:c5f2c369bbe47d0b712601bf44af5927e67a18cb5816dc378efb45eb993dab0a": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:813c41c0f5d2023c987e90ecf47e162dfc7afe62f93a8ad0f8392b5046f39961",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:c6c7ae1d5dfdcb094ad344ed68ccffc26635c9c6be80965664c33baf064b0515": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:4c72c1af2984a66a255efd20fc4ec73fe0f7267384b55315ad953b354b3361b4",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:c6ec6d72ff3d2d96cafaf673d64b17e709d0abdae20db218bd13a29348fb212f": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.1-r0"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:5e17dc583ad1bc49a137691d660b6aa6b8a46a4da0a4b9bebf6ad5074a1edb25",
|
||
"dpkg": {},
|
||
"env": {
|
||
"NODE_VERSION": "24.22.1"
|
||
},
|
||
"node": "24.22.1",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:c9d2bbb48c7f84d90e54496e2cd60422e56a5f2345c8a539ebe09f77e629d321": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:192fdcf5a91c193a0a7d3a854c1213f8be767854cb8e07204c9789ec2cba8422",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:cdcb7b1c7b6f1c9cb9442c71ac6275e78184657448407b2c1fdde7ee8024f4fb": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:48dc9d22ed984d9599e0d5823726053b0b426a86cff534f6bf1bd3dfb951f33e",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:d1891ede5a559f1086f55053bb8cc1569b0298338c4d72d71725a7f74f6ba620": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:d9fc02976678d4236145299c40dc267051681b33489c994f0ec4a097ce4a9521",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:d200d2dd76b03a99b52651fd1325aff7dcd35422c35c01bac56571b0507f3deb": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:bff16a94c0b4b6d9642581e2a3aa81beb3edb940b2f5a3aac1d22c6a68cb7747",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:d317916b28090c33eb36b308464ea391f8b7df1d850fcfea227a39ec879718c2": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:04225d8995a221de3b73a6131fe25eed14448830e54998f30877a70f48c6ac13",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2+b7"
|
||
},
|
||
"env": {
|
||
"NODE_VERSION": "24.21.0"
|
||
},
|
||
"node": "24.21.0",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:d4057e7019e9b19f25e039d4a204cc502e1a112d1a2305966a534f3d7079e644": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:15aef503f27e9919847595a81ab4e0fcbf2889effffd7995a09fe5a95c3add8f",
|
||
"dpkg": {
|
||
"libbrotli1": "1.2.0-3build1",
|
||
"python3": "3.14.3-0ubuntu2",
|
||
"python3.14": "3.14.4-1ubuntu0.2"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:d46e102fa8b9b72bfcdeb56f9dd538742092119dc8b11f31fe662605cd234cd9": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:71541e69e0a1fbec2fa57d6b3b30d751c7847ca77ce66f5af4ffff48060c37c8",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:d64c841a560c54aa7c27b0e6bbd2fbf8b51073565040d2a6bfbc127f0a72cf1e": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:b3322549752cd0b5b3c72adee7ac727130365089de66743875d10225c17e0549",
|
||
"dpkg": {},
|
||
"env": {
|
||
"NODE_VERSION": "26.10.0"
|
||
},
|
||
"node": "26.10.0",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:d76177573caab135e8167179c9954168b5c582a48cbef0fcb7e1571af0c84d98": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:aa7226cab445342c5271844424663c59cdd635af5ccde63e4e3a362662fa86bf",
|
||
"dpkg": {},
|
||
"env": {
|
||
"NODE_VERSION": "22.23.1"
|
||
},
|
||
"node": "22.23.1",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:d8fab675b55ad293ded98fd71efcfd46054cbad9746534ae1cc4794a88c0b3be": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:2636191726a315dbd75228537f7be74b2fa7498998bb22e37b5b5c8756018fba",
|
||
"dpkg": {},
|
||
"env": {
|
||
"NODE_VERSION": "22.23.4"
|
||
},
|
||
"node": "22.23.4",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:dbbc38ea21103cefb50396340cd88afec779c7e070b0a7bf5a75b4ce46651d3f": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:7b22f3edf947329d75eba7a62d9f6ea1ac1e786736813ef7a98cfb275a52e49b",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:def2480040adc164b3a57340e77674eadfd88fb7f0593df25e93297f29c7fd7c": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:965ca448f19e0d2f1afb2b36e951cc6fdd371f3d928616229de88819108a947b",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:e16c2f166a8174901959fdf85e2e4c7bd1ebc4b37e0b6655de97c41408a260c4": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:7909f11a1ce217ed660afb02545f26e4adf72a5282633db436972abdfa026d20",
|
||
"dpkg": {},
|
||
"env": {
|
||
"PYTHON_VERSION": "3.11.15"
|
||
},
|
||
"node": null,
|
||
"python": "3.11.15",
|
||
"unchecked": []
|
||
},
|
||
"sha256:e3da62a847b9a5d51a11f73cfea1d9c13c3be3809614490d4edddcf01dcf919b": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:8c114db7648a1654828d33e1f9f3b18e97c4caae6707d34bf04d793d260f7e67",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2build2",
|
||
"python3": "3.12.3-0ubuntu2.1",
|
||
"python3.12": "3.12.3-1ubuntu0.13"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:e9733bafb1bdef9b00e25a21f8f99dc26a22224bf16641ad754d1649f4c3357a": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:84967b9b7ba45e38a9278d3e594305f43d4993c310df3905b51138b816c365f3",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:ea1c7aa3ef3f307cd03e85f34abb604478ccb90b567fc690da0cd9776da76b13": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:66eae352a79e6f677aeddd8c25a9bdb017586dc5fbd230f22329213d891f94bd",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:eae9a374d22f8bf73311ac7d1f37fc4e78822d196117a0a42d5e9ba6cd749d01": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:9066789006d76cd8214f5fff86e6c092ed79f6e3502d51d0aff0517da9e406e6",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:ebefa8cb3e36a8ce667b7739f51b86c24e9fd07f367e9fee9f21df48ea4e6542": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.1-r0",
|
||
"python3": "3.14.10-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:5483bf13c33be98fe1df144e6281f13cd48ee77aa68b4ef46e7cf02c02998f54",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:efb3cde962015fcc036b2ea625242248611943b27212ebf4392841fb30fad055": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:2bb2e0344616c62a6d76ea10558497499f8ed3f731400e143dc7bf17b757b5b9",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2+b7"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:efd719c99d83b060d9daefdcf00360461adf279f45ef5391f8d111892118753e": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:86b17a25c2db1d16a61b16b3c8f336679eb19e26333d03e808da387206e40faa",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:f344085e618bb05e22b964b0208dbd06d3468275bac70206f93805245e067b40": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:50484043eadd8d9562053940c0ed523dbddaf9086c370127b2f4acabb8bddddc",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2build2"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:f451d98066cbc0c108146420a61a60f7638de50e067738951461e0105eeaa56d": {
|
||
"apk": {
|
||
"python3": "3.12.14-r0"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:0902d473d575082781b3fd4f56a6eb5550a5e121838156e0a26f2fdd104288fc",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:f5dd39cc9409b4006f8b090e5f9ed042cdb736d28a06b4f985c674dacafc94d5": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:3752fb2a467b4fc5e19a6ba4985f5a84e005b62c3fbb63536aea1f8f2d3a6222",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:f7dc8428d10aef17f3075886d3c1c022f566ec456f88985f02c137f4fc534576": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:3a848c83404d59ba9df4d91b92af4c400c8876ccdbbf3b563d41019cee29df39",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:f8be8d6963d17e4e5e406a4a8462c0ca4ce5c7e54fd9cb52890f5bfb7012b365": {
|
||
"apk": {
|
||
"brotli-libs": "1.2.0-r1"
|
||
},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:8e652a04a2b631f5ac5f7dd04c5c156dc9377a4dbe7f8bf55bd52da05184ca3e",
|
||
"dpkg": {},
|
||
"env": {
|
||
"NODE_VERSION": "24.22.0"
|
||
},
|
||
"node": "24.22.0",
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:fbfbb6903bb98087454861f73335a193c8a76fd54e58616b7be8e0b2f70ba7a2": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:ee15d7e813f27ea4cdbfd683715360c1e8edb4b5decd30ecaecd775d969b0087",
|
||
"dpkg": {
|
||
"python3": "3.11.2-1+b1"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:fd7dc98638c8e305f4dc34e979f1c0fdfdcaeb0fbf8fcff77ae834b6da3d7e6e": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:f97baa533a26513c453a362be331a43eb60214302f449c16571b23cea141dce4",
|
||
"dpkg": {},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:fea863d0cd9ec445985d9c75fc6ed64e38a1d2766cf0c250a33d553f4fc1b771": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:7da5184caa38c553f219f6772476540081f392a68049e2b68c923f6daf877f8e",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2+deb13u1"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
},
|
||
"sha256:ffbb7ba5c4f017e4b2a5bd4013b5c90f86f38123b21d9fbda69af6ec6c112b2b": {
|
||
"apk": {},
|
||
"brotli": null,
|
||
"brotlicffi": null,
|
||
"digest": "sha256:1663512e484c86f784e986f55cfe5c5bc3da77dd9a217ab327b2f84b53d8bf03",
|
||
"dpkg": {
|
||
"libbrotli1": "1.1.0-2build2"
|
||
},
|
||
"env": {},
|
||
"node": null,
|
||
"python": null,
|
||
"unchecked": []
|
||
}
|
||
},
|
||
"seed_pending": [],
|
||
"seeded_at": "2026-10-26",
|
||
"version": 1,
|
||
"weekly_last": "2026-10-26"
|
||
}
|