dgtlmoon 4ac13d10cd GHSA-23mp-8222-96fr - reflected XSS in /diff/<uuid>/download-patch via from_version - Using built-in plain text response instead. Reported-by: Mayssare Amakhtari (@cy3erm) Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-24 14:03:30 +02:00

..

add_watch_ui

GHSA-56fq-63vj-9992 Improved URL filtering (#4315)

2026-08-20 15:49:41 +02:00

backups

GHSA-3v57-xv5m-v7m7 - Multiple front-end endpoints lacking CSRF protection

2026-08-20 10:59:38 +02:00

browser_steps

GHSA-23mp-8222-96fr - reflected XSS in /diff/<uuid>/download-patch via from_version - Using built-in plain text response instead. Reported-by: Mayssare Amakhtari (@cy3erm) Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-24 14:03:30 +02:00

check_proxies

GHSA-q85w-c766-h5g8 - Advisory for four unprotected routes in price_data_follower, check_proxy and language handling that missing. Reported-by: Mayssare Amakhtari (@cy3erm) Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-24 13:47:31 +02:00

imports

i18n: Fix broken HTML tags and enforce dennis lint warnings in CI (#4116)

2026-05-05 05:51:54 +02:00

price_data_follower

GHSA-q85w-c766-h5g8 - Advisory for four unprotected routes in price_data_follower, check_proxy and language handling that missing. Reported-by: Mayssare Amakhtari (@cy3erm) Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-24 13:47:31 +02:00

rss

RSS - RSS pubDate is wrong on any non-UTC container: local time is relabelled as UTC - #4309 (#4314)

2026-08-20 15:49:29 +02:00

settings

UI full refactor / upgrade (#4183)

2026-07-16 15:08:29 +02:00

tags

GHSA-4j9m-cxq4-9c36 - Improved validation Stored CSS Injection via tag_colour Field (#4317)

2026-08-20 17:59:02 +02:00

ui

GHSA-23mp-8222-96fr - reflected XSS in /diff/<uuid>/download-patch via from_version - Using built-in plain text response instead. Reported-by: Mayssare Amakhtari (@cy3erm) Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-24 14:03:30 +02:00

watchlist

GHSA-4j9m-cxq4-9c36 - Improved validation Stored CSS Injection via tag_colour Field (#4317)

2026-08-20 17:59:02 +02:00

__init__.py

GHSA-23mp-8222-96fr - reflected XSS in /diff/<uuid>/download-patch via from_version - Using built-in plain text response instead. Reported-by: Mayssare Amakhtari (@cy3erm) Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-24 14:03:30 +02:00