You are viewing a plain text version of this content. The canonical link for it is here.
- [PR] Treat a CVE follow-up as a new thread [security-dash] - posted by "raboof (via GitHub)" <gi...@apache.org> on 2026/10/01 08:52:50 UTC, 1 replies.
- [PR] CVE updates from 2026-09-29 through 2026-10-01 [security-site] - posted by "ppkarwasz (via GitHub)" <gi...@apache.org> on 2026/10/01 16:48:58 UTC, 1 replies.
- (security-site) branch cve-updates-2026-10-01 created (now 83776082) - posted by pk...@apache.org on 2026/10/01 16:49:02 UTC, 0 replies.
- (security-site) branch main updated: CVE updates from 2026-09-29 through 2026-10-01 (#110) - posted by pk...@apache.org on 2026/10/02 08:03:57 UTC, 0 replies.
- (security-site) branch cve-updates-2026-10-01 deleted (was 83776082) - posted by pk...@apache.org on 2026/10/02 08:03:59 UTC, 0 replies.
- (security-site) branch asf-site updated: Updated site from main (0b8b72266bba8d2d33feb7c6b9c1037e78f0d926) - posted by gi...@apache.org on 2026/10/02 08:11:25 UTC, 0 replies.
- [PR] improve project links: ignore invalid security@ addressees [security-dash] - posted by "raboof (via GitHub)" <gi...@apache.org> on 2026/10/02 12:05:54 UTC, 2 replies.
- (security-dash) branch frontend updated: update authz and diagnostics - posted by en...@apache.org on 2026/10/02 12:07:08 UTC, 0 replies.
- (security-dash) branch frontend updated (c943e4f -> 0ff14a5) - posted by en...@apache.org on 2026/10/02 12:35:27 UTC, 0 replies.
- (security-dash) 01/01: Merge pull request #38 from raboof/improve-project-links - posted by en...@apache.org on 2026/10/02 12:35:28 UTC, 0 replies.
- [PR] CVE updates from 2026-10-01 through 2026-10-02 [security-site] - posted by "ppkarwasz (via GitHub)" <gi...@apache.org> on 2026/10/02 13:44:40 UTC, 1 replies.
- (security-site) branch cve-updates-2026-10-02 created (now 60ee7e32) - posted by pk...@apache.org on 2026/10/02 13:44:41 UTC, 0 replies.
- [PR] Update project-page.py [security-site] - posted by "elecharny (via GitHub)" <gi...@apache.org> on 2026/10/02 14:07:45 UTC, 1 replies.
- (security-site) branch main updated (0b8b7226 -> 21af4ff5) - posted by en...@apache.org on 2026/10/02 14:09:26 UTC, 0 replies.
- (security-site) 01/01: Merge pull request #112 from elecharny/patch-1 - posted by en...@apache.org on 2026/10/02 14:09:27 UTC, 0 replies.
- [I] stats permissions are tighter than general authz [security-dash] - posted by "raboof (via GitHub)" <gi...@apache.org> on 2026/10/02 16:27:57 UTC, 1 replies.
- (security-site) branch main updated: CVE updates from 2026-10-01 through 2026-10-02 (#111) - posted by pk...@apache.org on 2026/10/02 21:42:37 UTC, 0 replies.
- (security-site) branch cve-updates-2026-10-02 deleted (was 60ee7e32) - posted by pk...@apache.org on 2026/10/02 21:42:40 UTC, 0 replies.
- (security-site) branch asf-site updated: Updated site from main (0883741ed9b7eec770decab837323eeb8caec8f2) - posted by gi...@apache.org on 2026/10/02 21:47:09 UTC, 0 replies.
- [PR] Sort keys in generated CVE json for deterministic output [security-site] - posted by "basantjamwal (via GitHub)" <gi...@apache.org> on 2026/10/03 17:05:24 UTC, 1 replies.
- Re: [I] generate advisories deterministically [security-site] - posted by "raboof (via GitHub)" <gi...@apache.org> on 2026/10/05 07:28:30 UTC, 2 replies.
- [PR] fix: let the statistics API follow the project authorization [security-dash] - posted by "CaptainAni187 (via GitHub)" <gi...@apache.org> on 2026/10/05 22:14:50 UTC, 4 replies.
- [PR] Link to roller security model [security-site] - posted by "raboof (via GitHub)" <gi...@apache.org> on 2026/10/06 07:06:00 UTC, 1 replies.
- (security-site) branch main updated (0883741e -> f4e6ff7a) - posted by en...@apache.org on 2026/10/06 08:10:47 UTC, 0 replies.
- (security-site) 01/01: Merge pull request #114 from raboof/roller-model - posted by en...@apache.org on 2026/10/06 08:10:48 UTC, 0 replies.
- (security-site) branch asf-site updated: Updated site from main (f4e6ff7a7ef4cd336d5d84a760d9d74009203150) - posted by gi...@apache.org on 2026/10/06 08:15:18 UTC, 0 replies.
- [PR] various updates [security-site] - posted by "raboof (via GitHub)" <gi...@apache.org> on 2026/10/06 08:47:53 UTC, 1 replies.
- (security-site) branch main updated (f4e6ff7a -> 3485d7be) - posted by en...@apache.org on 2026/10/06 09:32:02 UTC, 0 replies.
- (security-site) 01/01: Merge pull request #115 from raboof/update - posted by en...@apache.org on 2026/10/06 09:32:03 UTC, 0 replies.
- (security-site) branch asf-site updated: Updated site from main (3485d7be77a8ba30ef247a6b352451d51f1fd95e) - posted by gi...@apache.org on 2026/10/06 09:34:02 UTC, 0 replies.
- (security-site) branch main updated: Sort keys in generated CVE json for deterministic output (#113) - posted by pk...@apache.org on 2026/10/06 09:59:02 UTC, 0 replies.
- (security-site) branch sort-cve-json-keys created (now 9b3c6f7e) - posted by pk...@apache.org on 2026/10/06 10:05:24 UTC, 0 replies.
- (security-site) 01/01: Re-serialize CVE json files with sorted keys - posted by pk...@apache.org on 2026/10/06 10:05:25 UTC, 0 replies.
- [PR] Re-serialize CVE json files with sorted keys [security-site] - posted by "ppkarwasz (via GitHub)" <gi...@apache.org> on 2026/10/06 10:05:30 UTC, 1 replies.
- (security-site) branch main updated (3b9566eb -> 581d7b2e) - posted by en...@apache.org on 2026/10/06 10:11:49 UTC, 0 replies.
- (security-site) 01/01: Merge pull request #116 from apache/sort-cve-json-keys - posted by en...@apache.org on 2026/10/06 10:11:50 UTC, 0 replies.
- (security-site) branch sort-cve-json-keys deleted (was 9b3c6f7e) - posted by en...@apache.org on 2026/10/06 10:11:54 UTC, 0 replies.
- (security-site) branch asf-site updated: Updated site from main (581d7b2ee16b785da93a65058535d2a78a452629) - posted by gi...@apache.org on 2026/10/06 10:16:25 UTC, 0 replies.
- (security-site) branch cve-updates-2026-10-06 created (now e615af65) - posted by pk...@apache.org on 2026/10/06 10:28:14 UTC, 0 replies.
- (security-site) 01/01: Restore Traffic Server 8.x affected ranges - posted by pk...@apache.org on 2026/10/06 10:28:15 UTC, 0 replies.
- [PR] Restore Traffic Server 8.x affected ranges [security-site] - posted by "ppkarwasz (via GitHub)" <gi...@apache.org> on 2026/10/06 10:28:17 UTC, 1 replies.
- (security-site) branch main updated (581d7b2e -> 5aa0da50) - posted by en...@apache.org on 2026/10/06 10:33:07 UTC, 0 replies.
- (security-site) 01/01: Merge pull request #117 from apache/cve-updates-2026-10-06 - posted by en...@apache.org on 2026/10/06 10:33:08 UTC, 0 replies.
- (security-site) branch cve-updates-2026-10-06 deleted (was e615af65) - posted by en...@apache.org on 2026/10/06 10:33:12 UTC, 0 replies.
- (security-site) branch asf-site updated: Updated site from main (5aa0da504637ee8acd09017741a7ba59b33e0af6) - posted by gi...@apache.org on 2026/10/06 10:34:00 UTC, 0 replies.
- [PR] Add osv.dev records for ASF CVEs [security-site] - posted by "ppkarwasz (via GitHub)" <gi...@apache.org> on 2026/10/06 11:22:03 UTC, 2 replies.
- (security-site) branch feat/osv-dev-records created (now 1f278a01) - posted by pk...@apache.org on 2026/10/06 11:22:05 UTC, 0 replies.
- (security-site) branch feat/osv-dev-records updated (1f278a01 -> acd3d6e5) - posted by pk...@apache.org on 2026/10/06 11:26:01 UTC, 0 replies.
- (security-site) branch feat/osv-dev-records updated (acd3d6e5 -> 8f63503d) - posted by pk...@apache.org on 2026/10/06 11:38:49 UTC, 0 replies.
- (security-site) branch feat/osv-dev-records updated (8f63503d -> 858c91e4) - posted by pk...@apache.org on 2026/10/06 11:39:42 UTC, 0 replies.
- [PR] chore(deps): bump pyjwt from 2.14.0 to 2.15.0 [security-dash] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/07 07:05:46 UTC, 1 replies.
- (security-dash) branch dependabot/uv/pyjwt-2.15.0 created (now dc5b3b2) - posted by gi...@apache.org on 2026/10/07 07:05:47 UTC, 0 replies.
- [PR] chore(deps): bump urllib3 from 2.7.0 to 2.8.0 [security-dash] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/08 01:03:19 UTC, 1 replies.
- (security-dash) branch dependabot/uv/urllib3-2.8.0 created (now 17eda45) - posted by gi...@apache.org on 2026/10/08 01:03:24 UTC, 0 replies.
- Re: [I] add UI to accept/reject untriaged issues [security-dash] - posted by "raboof (via GitHub)" <gi...@apache.org> on 2026/10/08 09:10:18 UTC, 1 replies.
- (security-dash) branch feat/triage-every-state created (now ecbc70a) - posted by pk...@apache.org on 2026/10/08 09:22:04 UTC, 0 replies.
- (security-dash) 01/01: Show the triage form for reports in every state - posted by pk...@apache.org on 2026/10/08 09:22:05 UTC, 0 replies.
- [PR] Show the triage form for reports in every state [security-dash] - posted by "ppkarwasz (via GitHub)" <gi...@apache.org> on 2026/10/08 09:22:07 UTC, 1 replies.
- (security-dash) branch frontend updated (0ff14a5 -> 6ce4654) - posted by en...@apache.org on 2026/10/08 10:47:45 UTC, 0 replies.
- (security-dash) branch frontend updated (6ce4654 -> 59d22d4) - posted by en...@apache.org on 2026/10/08 10:47:53 UTC, 0 replies.
- (security-dash) 01/01: Merge pull request #41 from apache/dependabot/uv/pyjwt-2.15.0 - posted by en...@apache.org on 2026/10/08 10:47:54 UTC, 0 replies.
- (security-dash) branch dependabot/uv/urllib3-2.8.0 deleted (was 17eda45) - posted by gi...@apache.org on 2026/10/08 10:47:56 UTC, 0 replies.
- (security-dash) branch dependabot/uv/pyjwt-2.15.0 deleted (was dc5b3b2) - posted by gi...@apache.org on 2026/10/08 10:48:01 UTC, 0 replies.
- Re: [PR] feat: link to security list archive for pmcs with failing moderation [security-dash] - posted by "raboof (via GitHub)" <gi...@apache.org> on 2026/10/08 10:49:04 UTC, 1 replies.
- Re: [PR] Fix #26: pass reporter emails to cveprocess [security-dash] - posted by "raboof (via GitHub)" <gi...@apache.org> on 2026/10/08 10:54:23 UTC, 4 replies.
- (security-dash) branch autotagger updated (6e34359 -> 3c7c935) - posted by en...@apache.org on 2026/10/08 10:54:50 UTC, 0 replies.
- (security-dash) 01/01: Merge pull request #37 from raboof/follow-up - posted by en...@apache.org on 2026/10/08 10:54:51 UTC, 0 replies.
- (security-dash) branch frontend updated (59d22d4 -> eea0e5d) - posted by en...@apache.org on 2026/10/08 11:00:38 UTC, 0 replies.
- (security-dash) 01/01: Merge pull request #43 from apache/feat/triage-every-state - posted by en...@apache.org on 2026/10/08 11:00:39 UTC, 0 replies.
- [PR] chore(deps): bump werkzeug from 3.1.8 to 3.1.9 [security-dash] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/08 11:49:56 UTC, 1 replies.
- (security-dash) branch dependabot/uv/werkzeug-3.1.9 created (now 4c6ff18) - posted by gi...@apache.org on 2026/10/08 11:49:59 UTC, 0 replies.
- [PR] chore(deps): bump multidict from 6.8.0 to 6.9.1 [security-dash] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/08 11:50:08 UTC, 1 replies.
- (security-dash) branch dependabot/uv/multidict-6.9.1 created (now a9a17f1) - posted by gi...@apache.org on 2026/10/08 11:50:12 UTC, 0 replies.
- Re: [I] pass reporter email(s) to cveprocess [security-dash] - posted by "raboof (via GitHub)" <gi...@apache.org> on 2026/10/08 12:01:26 UTC, 0 replies.
- (security-dash) branch frontend updated (eea0e5d -> f975de1) - posted by en...@apache.org on 2026/10/08 12:01:28 UTC, 0 replies.
- (security-dash) 01/01: Merge pull request #36 from oscerd/feature/26-reporter-emails - posted by en...@apache.org on 2026/10/08 12:01:29 UTC, 0 replies.
- (security-dash) branch frontend updated: Merge pull request #40 from CaptainAni187/fix/stats-authz-39 - posted by en...@apache.org on 2026/10/08 12:33:36 UTC, 0 replies.
- (security-dash) branch frontend updated: chore(deps): bump werkzeug from 3.1.8 to 3.1.9 (#44) - posted by en...@apache.org on 2026/10/08 12:33:51 UTC, 0 replies.
- (security-dash) branch dependabot/uv/werkzeug-3.1.9 deleted (was 4c6ff18) - posted by gi...@apache.org on 2026/10/08 12:33:59 UTC, 0 replies.
- (security-dash) branch frontend updated: chore(deps): bump multidict from 6.8.0 to 6.9.1 (#45) - posted by en...@apache.org on 2026/10/08 12:34:01 UTC, 0 replies.
- (security-dash) branch dependabot/uv/multidict-6.9.1 deleted (was a9a17f1) - posted by gi...@apache.org on 2026/10/08 12:34:09 UTC, 0 replies.
- [I] Add 'closing due to inactivity' template [security-dash] - posted by "raboof (via GitHub)" <gi...@apache.org> on 2026/10/09 11:14:33 UTC, 0 replies.
- (security-site) branch dashboard-backend updated: feat(deployment): define pipservice for watch refresh - posted by en...@apache.org on 2026/10/09 15:01:32 UTC, 0 replies.
- [PR] feat: skip 'incomplete CVE-x-y fix' autotagging [security-dash] - posted by "raboof (via GitHub)" <gi...@apache.org> on 2026/10/10 05:17:37 UTC, 1 replies.
- [PR] chore: remove some python3 warnings [security-dash] - posted by "raboof (via GitHub)" <gi...@apache.org> on 2026/10/10 05:18:20 UTC, 1 replies.
- [PR] Add 'closing due to inactivity' email and /triage/close-inactive endpoint [security-dash] - posted by "basantjamwal (via GitHub)" <gi...@apache.org> on 2026/10/10 18:53:58 UTC, 0 replies.
- (security-dash) branch autotagger updated: feat: skip 'incomplete CVE-x-y fix' autotagging (#47) - posted by en...@apache.org on 2026/10/11 09:51:56 UTC, 0 replies.
- (security-dash) branch autotagger updated: chore: remove some python3 warnings (#48) - posted by en...@apache.org on 2026/10/11 09:52:10 UTC, 0 replies.
- [I] Triage "Submit decision" button doing nothing [security-dash] - posted by "solomax (via GitHub)" <gi...@apache.org> on 2026/10/15 02:57:59 UTC, 5 replies.
- [I] Add 'accept as duplicate' triage option [security-dash] - posted by "raboof (via GitHub)" <gi...@apache.org> on 2026/10/15 14:46:51 UTC, 3 replies.
- [PR] Add Airflow advisories CVE-2026-92228, CVE-2026-94134, CVE-2026-94135 and CVE-2026-96806 [security-site] - posted by "potiuk (via GitHub)" <gi...@apache.org> on 2026/10/16 03:52:39 UTC, 1 replies.
- (security-site) branch main updated (5aa0da50 -> ccd10a1a) - posted by po...@apache.org on 2026/10/16 04:03:30 UTC, 0 replies.
- (security-site) 01/01: Merge pull request #119 from potiuk/airflow-cve-updates-2026-10-16 - posted by po...@apache.org on 2026/10/16 04:03:31 UTC, 0 replies.
- (security-site) branch asf-site updated: Updated site from main (ccd10a1a8255817da80d0deb4a26bd23f760f207) - posted by gi...@apache.org on 2026/10/16 04:07:13 UTC, 0 replies.
- Re: [PR] feat: add unreleased_pmcs configuration and update project template to hide CVE allocation for unreleased projects while mocking user sessions [security-dash] - posted by "raboof (via GitHub)" <gi...@apache.org> on 2026/10/19 08:48:02 UTC, 0 replies.
- [PR] feat(autotagger): autotag updates to CVEs from audits [security-dash] - posted by "raboof (via GitHub)" <gi...@apache.org> on 2026/10/19 08:50:51 UTC, 0 replies.
- [PR] credit for Grafana permissions report [security-site] - posted by "raboof (via GitHub)" <gi...@apache.org> on 2026/10/19 13:49:27 UTC, 2 replies.
- (security-site) branch main updated (ccd10a1a -> d707e83d) - posted by en...@apache.org on 2026/10/19 14:12:46 UTC, 0 replies.
- (security-site) 01/01: Merge pull request #120 from raboof/beam-grafana-credit - posted by en...@apache.org on 2026/10/19 14:12:47 UTC, 0 replies.
- (security-site) branch asf-site updated: Updated site from main (d707e83db708ce8aa8bfb5b363df6b12cef366c0) - posted by gi...@apache.org on 2026/10/19 14:19:41 UTC, 0 replies.
- [PR] Update credits for issue reporter and mention Beam, not vendor [security-site] - posted by "damccorm (via GitHub)" <gi...@apache.org> on 2026/10/19 14:54:47 UTC, 1 replies.
- (security-site) branch main updated (d707e83d -> df982864) - posted by en...@apache.org on 2026/10/19 15:03:37 UTC, 0 replies.
- (security-site) 01/01: Merge pull request #121 from damccorm/patch-1 - posted by en...@apache.org on 2026/10/19 15:03:38 UTC, 0 replies.
- (security-site) branch asf-site updated: Updated site from main (df982864f0b84304b26b6adde46ff0c61bc760e8) - posted by gi...@apache.org on 2026/10/19 15:07:08 UTC, 0 replies.
- [PR] chore(deps): bump aiohttp from 3.14.3 to 3.14.4 [security-dash] - posted by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/10/20 09:41:28 UTC, 0 replies.
- (security-dash) branch dependabot/uv/aiohttp-3.14.4 created (now 6070948) - posted by gi...@apache.org on 2026/10/20 09:41:31 UTC, 0 replies.
- [PR] Update credits to include Maulik Mehta [security-site] - posted by "damccorm (via GitHub)" <gi...@apache.org> on 2026/10/20 20:17:01 UTC, 2 replies.
- (security-site) branch main updated (df982864 -> 5cdb8b37) - posted by en...@apache.org on 2026/10/20 20:37:47 UTC, 0 replies.
- (security-site) 01/01: Merge pull request #122 from damccorm/patch-1 - posted by en...@apache.org on 2026/10/20 20:37:48 UTC, 0 replies.
- Re: [I] Link to CVE app does not preserve issue details [security-dash] - posted by "raboof (via GitHub)" <gi...@apache.org> on 2026/10/21 10:10:49 UTC, 1 replies.
- Re: [I] Links to issues initially appear to be broken [security-dash] - posted by "raboof (via GitHub)" <gi...@apache.org> on 2026/10/21 10:11:17 UTC, 1 replies.
- [I] Allocate CVE as part of triage [security-dash] - posted by "raboof (via GitHub)" <gi...@apache.org> on 2026/10/21 10:13:32 UTC, 0 replies.
- [PR] CVE updates from 2026-10-16 through 2026-10-21 [security-site] - posted by "ppkarwasz (via GitHub)" <gi...@apache.org> on 2026/10/21 19:39:46 UTC, 5 replies.
- (security-site) branch main updated: CVE updates from 2026-10-16 through 2026-10-21 (#123) - posted by pk...@apache.org on 2026/10/22 06:43:23 UTC, 0 replies.
- (security-site) branch asf-site updated: Updated site from main (ede11d2abf8d91176bde5ca522314fa5850d4340) - posted by gi...@apache.org on 2026/10/22 06:48:12 UTC, 0 replies.
- (security-site) branch feat/tsfile-security-model created (now 0347a9e0) - posted by pk...@apache.org on 2026/10/22 15:36:04 UTC, 0 replies.
- (security-site) 01/01: feat: add Apache TsFile security model links - posted by pk...@apache.org on 2026/10/22 15:36:05 UTC, 0 replies.
- [PR] feat: add Apache TsFile security model links [security-site] - posted by "ppkarwasz (via GitHub)" <gi...@apache.org> on 2026/10/22 15:36:14 UTC, 0 replies.