Skip to content
This repository was archived by the owner on Oct 13, 2026. It is now read-only.
This repository was archived by the owner on Oct 13, 2026. It is now read-only.

🔒 [IBM OSPO Security Notification] — IBM/cloud-native-starter #94

Open
Open
🔒 [IBM OSPO Security Notification] — IBM/cloud-native-starter#94
Labels
security

Description

@security-ops-bot
security-ops-bot
bot
opened on Sep 9, 2026

🔒 [IBM OSPO Security Notification] — IBM/cloud-native-starter

Action required: Remediate the alerts listed below before their SLA deadline.
This issue will be closed automatically once all alerts are resolved.

SLA policy: critical = 7 days, high = 30 days, medium = 90 days, low = no deadline.
Alerts at or above medium severity will trigger a warning comment before the deadline and
repo archiving if unresolved. Low-severity alerts are tracked here for visibility only —
they will never trigger warnings or archiving.

💡 Tip: To have Dependabot automatically open fix PRs for dependency alerts, enable
Dependabot security updates in your repo settings:
Settings → Advanced Security → Dependabot security updates → Enable.

Attention: (no direct admin collaborators assigned to this repo — please add an admin to receive security notifications)

Dependabot Alerts

Severity CVE/GHSA Package Affected Patched Deadline Fix PR
🔴 critical CVE-2026-54466 websocket-driver < 0.7.5 0.7.5 2026-10-20 —
🟠 high CVE-2026-13149 brace-expansion < 1.1.16 1.1.16 2026-11-12 —
🟠 high CVE-2026-13311 shell-quote <= 1.8.4 1.9.0 2026-11-12 —
🟠 high CVE-2026-73650 svgo >= 1.0.0, < 2.8.3 2.8.3 2026-11-12 —
🟠 high CVE-2026-59869 js-yaml >= 3.0.0, < 3.15.0 3.15.0 2026-11-02 —
🟠 high CVE-2026-45623 postcss <= 8.5.11 8.5.12 2026-11-02 —
🟠 high CVE-2026-73646 postcss <= 8.5.17 8.5.18 2026-11-02 —
🟠 high GHSA-5p4m-2wfm-xmqj js-yaml >= 3.0.0, < 3.15.1 3.15.1 2026-10-25 —
🟠 high CVE-2026-73088 browserslist <= 4.28.6 4.28.7 2026-10-25 —
🟠 high CVE-2026-84370 svgo >= 1.0.0, < 2.8.4 2.8.4 2026-10-25 —
🟠 high CVE-2026-84375 js-yaml >= 3.0.0, < 3.15.2 3.15.2 2026-10-13 —
🟠 high CVE-2026-85393 node-forge <= 1.4.0 — 2026-11-11 —
🟡 medium CVE-2026-55602 http-proxy-middleware >= 0.16.0, < 2.0.10 2.0.10 2027-01-11 —
🟡 medium CVE-2026-53550 js-yaml < 3.15.0 3.15.0 2027-01-11 —
🟡 medium CVE-2026-14631 webpack-dev-server <= 5.2.5 5.2.6 2027-01-11 —
🟡 medium CVE-2026-14620 webpack-dev-server <= 5.2.5 5.2.6 2027-01-11 —
🟡 medium CVE-2026-67316 axios < 0.33.0 0.33.0 2027-01-11 —
🟡 medium CVE-2026-67319 axios >= 0.8.0, < 0.33.0 0.33.0 2027-01-11 —
🟡 medium CVE-2026-69153 postcss <= 8.5.22 8.5.23 2026-12-31 —
🟡 medium CVE-2026-45822 decode-uri-component <= 0.4.2 0.5.0 2026-12-24 —
🟡 medium CVE-2026-82417 qs >= 2.2.5, < 6.16.0 6.16.0 2026-12-24 —
🟡 medium CVE-2026-84369 svgo >= 1.0.0, < 2.8.4 2.8.4 2026-12-24 —
🟡 medium CVE-2026-102277 brace-expansion < 1.1.21 1.1.21 2027-01-02 —

Code Scanning Alerts

Severity Rule Tool Deadline
🟡 medium js/missing-rate-limiting CodeQL 2026-12-09
🟡 medium js/missing-rate-limiting CodeQL 2026-12-09
🟡 medium js/missing-rate-limiting CodeQL 2026-12-09
🟡 medium js/clear-text-cookie CodeQL 2026-12-09

Secret Scanning Alerts

No open secret scanning alerts.

Activity

  1. security-ops-bot
    added
    security
    on Sep 9, 2026

  2. security-ops-bot commented on Sep 10, 2026

    @security-ops-bot
    security-ops-botBot
    on Sep 10, 2026 – with security-ops-bot
    Author

    🔄 Dependabot Alert Changes

    Added: CVE-2025-13465 (medium), CVE-2026-24400 (high), CVE-2021-27515 (medium), CVE-2021-3664 (medium), CVE-2022-0691 (medium), CVE-2022-25883 (high), CVE-2026-2391 (low)

    Resolved: CVE-2019-10744, CVE-2020-7598, CVE-2020-28168, CVE-2020-7774, CVE-2021-23358, CVE-2021-23337, CVE-2021-23386, CVE-2021-3918, CVE-2019-16769, CVE-2020-7660, CVE-2020-7720, CVE-2020-28498, CVE-2021-32640, CVE-2022-0155, GHSA-5rrq-pxf6-6jx5, GHSA-gf8q-jrpm-jvxq, CVE-2022-21704, CVE-2022-0122, CVE-2020-15366, CVE-2022-0536, CVE-2022-0686, CVE-2022-24773, CVE-2022-24772, CVE-2022-24771, CVE-2022-1650, CVE-2023-26136, CVE-2017-16137, CVE-2023-44270, CVE-2023-45133, CVE-2020-8203, CVE-2023-46234, CVE-2023-26159, CVE-2023-45857, CVE-2023-42282, CVE-2024-28849, CVE-2024-29180, CVE-2024-29041, CVE-2024-33883, CVE-2024-29415, CVE-2024-4068, CVE-2024-37890, CVE-2020-15168, CVE-2024-6783, CVE-2024-42459, CVE-2024-42461, CVE-2024-42460, CVE-2019-17495, CVE-2024-45296, CVE-2024-45590, CVE-2024-43800, CVE-2024-43799, CVE-2024-43796, CVE-2024-47764, CVE-2024-48949, CVE-2024-9506, CVE-2024-48948, CVE-2024-52798, GHSA-vjh7-7g9h-fjfh, CVE-2025-30359, CVE-2025-30360, CVE-2025-6545, CVE-2025-7339, CVE-2025-7783, CVE-2025-9288, CVE-2025-9287, CVE-2021-42740, CVE-2020-28500, CVE-2025-64718, CVE-2025-66030, CVE-2025-12816, CVE-2025-15284, CVE-2026-42041, CVE-2026-42035, CVE-2026-6402, CVE-2026-41907, CVE-2026-42036, CVE-2026-42033, CVE-2026-44490, CVE-2024-52011, CVE-2026-44496, CVE-2026-44487, CVE-2026-14631, CVE-2026-14620, CVE-2026-67316, CVE-2026-67319, CVE-2026-59869

  3. security-ops-bot commented on Sep 10, 2026

    @security-ops-bot
    security-ops-botBot
    on Sep 10, 2026 – with security-ops-bot
    Author

    🔄 Code & Secret Scanning Alert Changes

    Added: cs-5 (code-scanning, medium), cs-4 (code-scanning, medium), cs-3 (code-scanning, medium), cs-2 (code-scanning, medium), cs-1 (code-scanning, medium)

  4. security-ops-bot commented on Sep 12, 2026

    @security-ops-bot
    security-ops-botBot
    on Sep 12, 2026 – with security-ops-bot
    Author

    🔄 Dependabot Alert Changes

    Added: CVE-2026-53632 (medium), CVE-2026-9595 (medium), CVE-2026-49356 (low), CVE-2026-55602 (medium), CVE-2026-53550 (medium), CVE-2026-54466 (critical), CVE-2026-13149 (high), CVE-2026-13311 (high), CVE-2026-73650 (high), CVE-2026-14631 (medium), CVE-2026-14620 (medium), CVE-2026-67316 (medium), CVE-2026-67319 (medium), CVE-2026-59869 (high)

    Resolved: CVE-2025-13465, CVE-2026-24400, CVE-2021-27515, CVE-2021-3664, CVE-2022-0691, CVE-2022-25883, CVE-2026-2391, CVE-2025-6547, CVE-2026-25639, CVE-2022-0639, CVE-2022-0512, CVE-2025-69873, CVE-2026-27903, GHSA-5c6j-r48x-rmvq, CVE-2026-27601, CVE-2026-32141, CVE-2026-33228, CVE-2026-33895, CVE-2026-33896, CVE-2026-33894, CVE-2026-4867, CVE-2026-33672, CVE-2026-4800, CVE-2026-2950, GHSA-r4q5-vmmm-2653, CVE-2026-40175, CVE-2025-62718, CVE-2026-42043, CVE-2026-42042, CVE-2026-42040, CVE-2026-42034

  5. security-ops-bot commented on Sep 13, 2026

    @security-ops-bot
    security-ops-botBot
    on Sep 13, 2026 – with security-ops-bot
    Author

    🔄 Dependabot Alert Changes

    Added: CVE-2026-84375 (high)

  6. security-ops-bot commented on Sep 15, 2026

    @security-ops-bot
    security-ops-botBot
    on Sep 15, 2026 – with security-ops-bot
    Author

    🔄 Dependabot Alert Changes

    Added: CVE-2026-42043 (high), CVE-2026-42042 (medium), CVE-2026-42040 (low), CVE-2026-42034 (medium), CVE-2026-42038 (medium), CVE-2026-42039 (medium), CVE-2026-42041 (medium), CVE-2026-42035 (high)

    Resolved: CVE-2026-53632, CVE-2026-9595, CVE-2026-49356, CVE-2026-55602, CVE-2026-53550

  7. security-ops-bot commented on Sep 16, 2026

    @security-ops-bot
    security-ops-botBot
    on Sep 16, 2026 – with security-ops-bot
    Author

    🔄 Dependabot Alert Changes

    Resolved: CVE-2026-42043, CVE-2026-42042, CVE-2026-42040, CVE-2026-42034, CVE-2026-42038, CVE-2026-42039, CVE-2026-42041, CVE-2026-42035, CVE-2026-54466, CVE-2026-13149, CVE-2026-13311, CVE-2026-73650, CVE-2026-14631, CVE-2026-14620, CVE-2026-67316, CVE-2026-67319, CVE-2026-59869, CVE-2026-12590, CVE-2026-45623, CVE-2026-73646, CVE-2026-69153, GHSA-5p4m-2wfm-xmqj, CVE-2026-45822

  8. security-ops-bot commented on Sep 17, 2026

    @security-ops-bot
    security-ops-botBot
    on Sep 17, 2026 – with security-ops-bot
    Author

    🔄 Dependabot Alert Changes

    Added: CVE-2019-10744 (critical), CVE-2020-7598 (medium), CVE-2020-28168 (medium), CVE-2020-7774 (high), CVE-2021-23358 (critical), CVE-2021-23337 (high), CVE-2021-23386 (high), CVE-2021-3918 (critical), CVE-2019-16769 (medium), CVE-2020-7660 (high), CVE-2020-7720 (high), CVE-2020-28498 (medium), CVE-2021-32640 (medium), CVE-2022-0155 (high), GHSA-5rrq-pxf6-6jx5 (low), GHSA-gf8q-jrpm-jvxq (low), CVE-2022-21704 (medium), CVE-2022-0122 (medium), CVE-2020-15366 (medium), CVE-2022-0536 (medium), CVE-2022-0686 (critical), CVE-2022-24773 (medium), CVE-2022-24772 (high), CVE-2022-24771 (high), CVE-2022-1650 (critical), CVE-2021-43138 (high), CVE-2022-0235 (high), CVE-2020-28471 (critical), CVE-2022-37601 (critical), CVE-2022-38900 (high), CVE-2022-24999 (high), CVE-2022-46175 (high), CVE-2021-44906 (critical), CVE-2023-28155 (medium), CVE-2021-3749 (high), GHSA-wxgw-qj99-44c2 (low), CVE-2021-3807 (high), CVE-2023-26136 (medium), CVE-2017-16137 (low), CVE-2023-44270 (medium), CVE-2023-45133 (critical), CVE-2020-8203 (high), CVE-2023-46234 (high), CVE-2023-26159 (medium), CVE-2023-45857 (medium), CVE-2023-42282 (low), CVE-2024-28849 (medium), CVE-2024-29180 (high), CVE-2024-29041 (medium), CVE-2024-33883 (medium), CVE-2024-29415 (high), CVE-2024-4068 (high), CVE-2024-37890 (high), CVE-2020-15168 (low), CVE-2024-6783 (medium), CVE-2024-42459 (low), CVE-2024-42461 (low), CVE-2024-42460 (low), CVE-2019-17495 (critical), CVE-2024-45296 (high), CVE-2024-45590 (high), CVE-2024-43800 (low), CVE-2024-43799 (low), CVE-2024-43796 (low), CVE-2025-13465 (medium), CVE-2026-24400 (high), CVE-2021-27515 (medium), CVE-2021-3664 (medium), CVE-2022-0691 (medium), CVE-2022-25883 (high), CVE-2026-2391 (low), CVE-2025-6547 (critical), CVE-2026-25639 (high), CVE-2022-0639 (medium), CVE-2022-0512 (medium), CVE-2025-69873 (medium), CVE-2026-27903 (high), GHSA-5c6j-r48x-rmvq (high), CVE-2026-27601 (high), CVE-2026-32141 (high), CVE-2026-33228 (high), CVE-2026-33895 (high), CVE-2026-33896 (high), CVE-2026-33894 (high), CVE-2026-4867 (high), CVE-2026-33672 (medium), CVE-2026-4800 (high), CVE-2026-2950 (medium), GHSA-r4q5-vmmm-2653 (medium), CVE-2026-40175 (medium), CVE-2025-62718 (medium), CVE-2026-42043 (high), CVE-2026-42042 (medium), CVE-2026-42040 (low), CVE-2026-42034 (medium), CVE-2026-42041 (medium), CVE-2026-42035 (high), CVE-2026-6402 (medium), CVE-2026-41907 (medium), CVE-2026-42036 (medium), CVE-2026-42033 (high), CVE-2026-44490 (medium), CVE-2024-52011 (high), CVE-2026-44496 (high), CVE-2026-44487 (high), CVE-2026-53550 (medium), CVE-2026-54466 (critical), CVE-2026-13149 (high), CVE-2026-13311 (high), CVE-2026-73650 (high), CVE-2026-14631 (medium), CVE-2026-14620 (medium), CVE-2026-67316 (medium), CVE-2026-67319 (medium), CVE-2026-59869 (high), CVE-2026-12590 (low), CVE-2026-45623 (high), CVE-2026-73646 (high), CVE-2026-69153 (medium), GHSA-5p4m-2wfm-xmqj (high), CVE-2026-45822 (medium)

  9. security-ops-bot commented on Sep 18, 2026

    @security-ops-bot
    security-ops-botBot
    on Sep 18, 2026 – with security-ops-bot
    Author

    🔄 Dependabot Alert Changes

    Resolved: CVE-2019-10744, CVE-2020-7598, CVE-2020-28168, CVE-2020-7774, CVE-2021-23358, CVE-2021-23337, CVE-2021-23386, CVE-2021-3918, CVE-2019-16769, CVE-2020-7660, CVE-2020-7720, CVE-2020-28498, CVE-2021-32640, CVE-2022-0155, GHSA-5rrq-pxf6-6jx5, GHSA-gf8q-jrpm-jvxq, CVE-2022-21704, CVE-2022-0122, CVE-2020-15366, CVE-2022-0536, CVE-2022-0686, CVE-2022-24773, CVE-2022-24772, CVE-2022-24771, CVE-2022-1650, CVE-2021-43138, CVE-2022-0235, CVE-2020-28471, CVE-2022-37601, CVE-2022-38900, CVE-2022-24999, CVE-2022-46175, CVE-2021-44906, CVE-2023-28155, CVE-2021-3749, GHSA-wxgw-qj99-44c2, CVE-2021-3807, CVE-2023-26136, CVE-2017-16137, CVE-2023-44270, CVE-2023-45133, CVE-2020-8203, CVE-2023-46234, CVE-2023-26159, CVE-2023-45857, CVE-2023-42282, CVE-2024-28849, CVE-2024-29180, CVE-2024-29041, CVE-2024-33883, CVE-2024-29415, CVE-2024-4068, CVE-2024-37890, CVE-2020-15168, CVE-2024-6783, CVE-2024-42459, CVE-2024-42461, CVE-2024-42460, CVE-2019-17495, CVE-2024-45296, CVE-2024-45590, CVE-2024-43800, CVE-2024-43799, CVE-2024-43796, CVE-2025-13465, CVE-2026-24400, CVE-2021-27515, CVE-2021-3664, CVE-2022-0691, CVE-2022-25883, CVE-2026-2391, CVE-2025-6547, CVE-2026-25639, CVE-2022-0639, CVE-2022-0512, CVE-2025-69873, CVE-2026-27903, GHSA-5c6j-r48x-rmvq, CVE-2026-27601, CVE-2026-32141, CVE-2026-33228, CVE-2026-33895, CVE-2026-33896, CVE-2026-33894, CVE-2026-4867, CVE-2026-33672, CVE-2026-4800, CVE-2026-2950, GHSA-r4q5-vmmm-2653, CVE-2026-40175, CVE-2025-62718, CVE-2026-42043, CVE-2026-42042, CVE-2026-42040, CVE-2026-42034, CVE-2026-42041, CVE-2026-42035, CVE-2026-6402, CVE-2026-41907, CVE-2026-42036, CVE-2026-42033, CVE-2026-44490, CVE-2024-52011, CVE-2026-44496, CVE-2026-44487, CVE-2026-53550, CVE-2026-54466, CVE-2026-13149, CVE-2026-13311, CVE-2026-73650, CVE-2026-14631, CVE-2026-14620, CVE-2026-67316, CVE-2026-67319, CVE-2026-59869, CVE-2026-12590

  10. security-ops-bot
    changed the title [-]🔒 Security Alerts — IBM/cloud-native-starter[/-] [+]🔒 [IBM OSPO Security Notification] — IBM/cloud-native-starter[/+] on Sep 18, 2026

  11. security-ops-bot commented on Sep 20, 2026

    @security-ops-bot
    security-ops-botBot
    on Sep 20, 2026 – with security-ops-bot
    Author

    🔄 Dependabot Alert Changes

    Added: CVE-2026-12590 (low)

  12. security-ops-bot commented on Sep 23, 2026

    @security-ops-bot
    security-ops-botBot
    on Sep 23, 2026 – with security-ops-bot
    Author

    🔄 Dependabot Alert Changes

    Added: CVE-2026-67316 (medium), CVE-2026-67319 (medium), CVE-2026-59869 (high)

  13. security-ops-bot commented on Sep 24, 2026

    @security-ops-bot
    security-ops-botBot
    on Sep 24, 2026 – with security-ops-bot
    Author

    🔄 Dependabot Alert Changes

    Resolved: CVE-2026-67316, CVE-2026-67319, CVE-2026-59869, CVE-2026-12590, CVE-2026-45623, CVE-2026-73646, CVE-2026-69153, GHSA-5p4m-2wfm-xmqj, CVE-2026-45822, CVE-2026-73088, CVE-2026-82417, CVE-2026-84370, CVE-2026-84369

  14. security-ops-bot commented on Sep 25, 2026

    @security-ops-bot
    security-ops-botBot
    on Sep 25, 2026 – with security-ops-bot
    Author

    🔄 Dependabot Alert Changes

    Added: CVE-2022-0155 (high), GHSA-5rrq-pxf6-6jx5 (low), GHSA-gf8q-jrpm-jvxq (low), CVE-2022-21704 (medium), CVE-2022-0122 (medium), CVE-2020-15366 (medium), CVE-2022-0536 (medium), CVE-2022-0686 (critical), CVE-2022-24773 (medium), CVE-2022-24772 (high), CVE-2022-24771 (high), CVE-2022-1650 (critical), CVE-2021-43138 (high), CVE-2022-0235 (high), CVE-2020-28471 (critical), CVE-2022-37601 (critical), CVE-2022-38900 (high), CVE-2022-24999 (high), CVE-2022-46175 (high), CVE-2021-44906 (critical), CVE-2023-28155 (medium), CVE-2021-3749 (high), GHSA-wxgw-qj99-44c2 (low), CVE-2021-3807 (high), CVE-2022-29078 (critical), CVE-2023-26136 (medium), CVE-2017-16137 (low), CVE-2023-44270 (medium), CVE-2023-45133 (critical), CVE-2020-8203 (high), CVE-2023-46234 (high), CVE-2023-26159 (medium), CVE-2023-45857 (medium), CVE-2023-42282 (low), CVE-2024-28849 (medium), CVE-2024-29180 (high), CVE-2024-29041 (medium), CVE-2024-33883 (medium), CVE-2024-29415 (high), CVE-2024-4068 (high), CVE-2024-37890 (high), CVE-2020-15168 (low), CVE-2024-6783 (medium), CVE-2024-42459 (low), CVE-2024-42461 (low), CVE-2024-42460 (low), CVE-2019-17495 (critical), CVE-2024-45296 (high), CVE-2024-45590 (high), CVE-2024-43800 (low), CVE-2024-43799 (low), CVE-2024-43796 (low), CVE-2024-47764 (low), CVE-2024-48949 (low), CVE-2024-9506 (low), CVE-2024-48948 (low), CVE-2024-52798 (high), GHSA-vjh7-7g9h-fjfh (critical), CVE-2025-30359 (medium), CVE-2025-30360 (medium), CVE-2025-6545 (critical), CVE-2025-7339 (low), CVE-2025-7783 (critical), CVE-2025-9288 (critical), CVE-2025-9287 (critical), CVE-2021-42740 (critical), CVE-2020-28500 (medium), CVE-2025-64718 (medium), CVE-2025-66030 (medium), CVE-2025-12816 (high), CVE-2025-15284 (medium), CVE-2025-14505 (low), CVE-2025-13465 (medium), CVE-2026-24400 (high), CVE-2021-27515 (medium), CVE-2021-3664 (medium), CVE-2022-0691 (medium), CVE-2022-25883 (high), CVE-2026-2391 (low), CVE-2025-6547 (critical), CVE-2026-25639 (high), CVE-2022-0639 (medium), CVE-2022-0512 (medium), CVE-2025-69873 (medium), CVE-2026-27903 (high), GHSA-5c6j-r48x-rmvq (high), CVE-2026-27601 (high), CVE-2026-32141 (high), CVE-2026-33228 (high), CVE-2026-33895 (high), CVE-2026-33896 (high), CVE-2026-33894 (high), CVE-2026-4867 (high), CVE-2026-33672 (medium), CVE-2026-4800 (high), CVE-2026-2950 (medium), GHSA-r4q5-vmmm-2653 (medium), CVE-2026-40175 (medium), CVE-2025-62718 (medium), CVE-2026-42043 (high), CVE-2026-42042 (medium), CVE-2026-42040 (low), CVE-2026-42034 (medium), CVE-2026-42038 (medium), CVE-2026-42039 (medium), CVE-2026-42041 (medium), CVE-2026-42035 (high), CVE-2026-6402 (medium), CVE-2026-41907 (medium), CVE-2026-42036 (medium), CVE-2026-42033 (high), CVE-2026-53550 (medium), CVE-2026-54466 (critical), CVE-2026-13149 (high), CVE-2026-13311 (high), CVE-2026-73650 (high), CVE-2026-14631 (medium), CVE-2026-14620 (medium), CVE-2026-67316 (medium), CVE-2026-67319 (medium), CVE-2026-59869 (high), CVE-2026-12590 (low), CVE-2026-45623 (high), CVE-2026-73646 (high), CVE-2026-69153 (medium), GHSA-5p4m-2wfm-xmqj (high), CVE-2026-45822 (medium), CVE-2026-73088 (high), CVE-2026-82417 (medium), CVE-2026-84370 (high), CVE-2026-84369 (medium)

  15. security-ops-bot commented on Sep 26, 2026

    @security-ops-bot
    security-ops-botBot
    on Sep 26, 2026 – with security-ops-bot
    Author

    🔄 Dependabot Alert Changes

    Resolved: CVE-2026-53550

  16. security-ops-bot commented on Sep 29, 2026

    @security-ops-bot
    security-ops-botBot
    on Sep 29, 2026 – with security-ops-bot
    Author

    🔄 Dependabot Alert Changes

    Added: CVE-2026-44490 (medium), CVE-2024-52011 (high), CVE-2026-44496 (high), CVE-2026-44487 (high), CVE-2026-44486 (high), CVE-2026-44492 (high), CVE-2026-9277 (critical)

    Resolved: CVE-2022-0155, GHSA-5rrq-pxf6-6jx5, GHSA-gf8q-jrpm-jvxq, CVE-2022-21704, CVE-2022-0122, CVE-2020-15366, CVE-2022-0536, CVE-2022-0686, CVE-2022-24773, CVE-2022-24772, CVE-2022-24771, CVE-2022-1650, CVE-2021-43138, CVE-2022-0235, CVE-2020-28471, CVE-2022-37601, CVE-2022-38900, CVE-2022-24999, CVE-2022-46175, CVE-2021-44906, CVE-2023-28155, CVE-2021-3749, GHSA-wxgw-qj99-44c2, CVE-2021-3807, CVE-2022-29078, CVE-2023-26136, CVE-2017-16137, CVE-2023-44270, CVE-2023-45133, CVE-2020-8203, CVE-2023-46234, CVE-2023-26159, CVE-2023-45857, CVE-2023-42282, CVE-2024-28849, CVE-2024-29180, CVE-2024-29041, CVE-2024-33883, CVE-2024-29415, CVE-2024-4068, CVE-2024-37890, CVE-2020-15168, CVE-2024-6783, CVE-2024-42459, CVE-2024-42461, CVE-2024-42460, CVE-2019-17495, CVE-2024-45296, CVE-2024-45590, CVE-2024-43800, CVE-2024-43799, CVE-2024-43796, CVE-2024-47764, CVE-2024-48949, CVE-2024-9506, CVE-2024-48948, CVE-2024-52798, GHSA-vjh7-7g9h-fjfh, CVE-2025-30359, CVE-2025-30360, CVE-2025-6545, CVE-2025-7339, CVE-2025-7783, CVE-2025-9288, CVE-2025-9287, CVE-2021-42740, CVE-2020-28500, CVE-2025-64718, CVE-2025-66030, CVE-2025-12816, CVE-2025-15284, CVE-2025-14505, CVE-2025-13465, CVE-2026-24400, CVE-2021-27515, CVE-2021-3664, CVE-2022-0691, CVE-2022-25883, CVE-2026-2391, CVE-2025-6547, CVE-2026-25639, CVE-2022-0639, CVE-2022-0512, CVE-2025-69873, CVE-2026-27903, GHSA-5c6j-r48x-rmvq, CVE-2026-27601, CVE-2026-32141, CVE-2026-33228, CVE-2026-33895, CVE-2026-33896, CVE-2026-33894, CVE-2026-42038, CVE-2026-42039, CVE-2026-54466, CVE-2026-13149, CVE-2026-13311, CVE-2026-73650, CVE-2026-14631, CVE-2026-14620, CVE-2026-67316, CVE-2026-67319, CVE-2026-59869, CVE-2026-12590, CVE-2026-45623, CVE-2026-73646, CVE-2026-69153

  17. security-ops-bot commented on Sep 29, 2026

    @security-ops-bot
    security-ops-botBot
    on Sep 29, 2026 – with security-ops-bot
    Author

    🔄 Code & Secret Scanning Alert Changes

    Resolved: cs-1 (code-scanning)

  18. security-ops-bot commented on Oct 2, 2026

    @security-ops-bot
    security-ops-botBot
    on Oct 2, 2026 – with security-ops-bot
    Author

    🔄 Dependabot Alert Changes

    Added: CVE-2026-69153 (medium)

    Resolved: CVE-2026-4867, CVE-2026-33672, CVE-2026-4800, CVE-2026-2950, GHSA-r4q5-vmmm-2653, CVE-2026-40175, CVE-2025-62718, CVE-2026-42043, CVE-2026-42042, CVE-2026-42040, CVE-2026-42034, CVE-2026-42041, CVE-2026-42035, CVE-2026-6402, CVE-2026-41907

  19. security-ops-bot commented on Oct 3, 2026

    @security-ops-bot
    security-ops-botBot
    on Oct 3, 2026 – with security-ops-bot
    Author

    🔄 Dependabot Alert Changes

    Added: CVE-2026-59869 (high), CVE-2026-12590 (low), CVE-2026-45623 (high), CVE-2026-73646 (high)

    Resolved: CVE-2026-42036, CVE-2026-42033, CVE-2026-44490, CVE-2024-52011, CVE-2026-44496, CVE-2026-44487, CVE-2026-44486, CVE-2026-44492, CVE-2026-9277

  20. security-ops-bot commented on Oct 4, 2026

    @security-ops-bot
    security-ops-botBot
    on Oct 4, 2026 – with security-ops-bot
    Author

    🔄 Dependabot Alert Changes

    Added: CVE-2026-102277 (medium)

  21. security-ops-bot commented on Oct 6, 2026

    @security-ops-bot
    security-ops-botBot
    on Oct 6, 2026 – with security-ops-bot
    Author

    🔄 Dependabot Alert Changes

    Resolved: CVE-2026-12590

  22. security-ops-bot commented on Oct 7, 2026

    @security-ops-bot
    security-ops-botBot
    on Oct 7, 2026 – with security-ops-bot
    Author

    🔄 Dependabot Alert Changes

    Added: CVE-2026-44496 (high), CVE-2026-44487 (high), CVE-2026-44486 (high), CVE-2026-44492 (high), CVE-2026-9277 (critical), CVE-2026-41305 (medium), CVE-2026-12143 (high), CVE-2026-53632 (medium), CVE-2026-9595 (medium), CVE-2026-55602 (medium), CVE-2026-53550 (medium), CVE-2026-54466 (critical), CVE-2026-13149 (high), CVE-2026-13311 (high), CVE-2026-73650 (high), CVE-2026-14631 (medium), CVE-2026-14620 (medium), CVE-2026-67316 (medium), CVE-2026-67319 (medium)

  23. security-ops-bot commented on Oct 8, 2026

    @security-ops-bot
    security-ops-botBot
    on Oct 8, 2026 – with security-ops-bot
    Author

    🔄 Dependabot Alert Changes

    Added: CVE-2026-42036 (medium), CVE-2026-42033 (high), CVE-2026-44490 (medium), CVE-2024-52011 (high)

  24. security-ops-bot commented on Oct 12, 2026

    @security-ops-bot
    security-ops-botBot
    on Oct 12, 2026 – with security-ops-bot
    Author

    🔄 Dependabot Alert Changes

    Added: CVE-2026-85393 (high)

    Resolved: CVE-2026-42036, CVE-2026-42033, CVE-2026-44490, CVE-2024-52011, CVE-2026-44496, CVE-2026-44487, CVE-2026-44486, CVE-2026-44492, CVE-2026-9277, CVE-2026-41305, CVE-2026-12143, CVE-2026-53632, CVE-2026-9595, CVE-2026-55602, CVE-2026-53550, CVE-2026-54466, CVE-2026-13149, CVE-2026-13311, CVE-2026-73650, CVE-2026-14631, CVE-2026-14620, CVE-2026-67316, CVE-2026-67319

  25. security-ops-bot commented on Oct 12, 2026

    @security-ops-bot
    security-ops-botBot
    on Oct 12, 2026 – with security-ops-bot
    Author

    ⚠️ SLA Warning — IBM/cloud-native-starter

    The following alert is approaching their SLA deadline with 1 day remaining. Please remediate before the deadline to avoid automatic repository archiving.

    To prevent archiving, open a pull request that fixes each alert and include the alert ID (e.g. #CVE-XXXX-YYYY) in the PR title.

    Alert Severity Deadline
    CVE-2026-84375 high 2026-10-13

  26. security-ops-bot commented on Oct 12, 2026

    @security-ops-bot
    security-ops-botBot
    on Oct 12, 2026 – with security-ops-bot
    Author

    ⚠️ SLA Warning — IBM/cloud-native-starter

    The following alert is approaching their SLA deadline with 1 day remaining. Please remediate before the deadline to avoid automatic repository archiving.

    To prevent archiving, open a pull request that fixes each alert and include the alert ID (e.g. #CVE-XXXX-YYYY) in the PR title.

    Alert Severity Deadline
    CVE-2026-84375 high 2026-10-13

  27. security-ops-bot commented on Oct 13, 2026

    @security-ops-bot
    security-ops-botBot
    on Oct 13, 2026 – with security-ops-bot
    Author

    🔄 Dependabot Alert Changes

    Added: CVE-2026-55602 (medium), CVE-2026-53550 (medium), CVE-2026-54466 (critical), CVE-2026-13149 (high), CVE-2026-13311 (high), CVE-2026-73650 (high), CVE-2026-14631 (medium), CVE-2026-14620 (medium), CVE-2026-67316 (medium), CVE-2026-67319 (medium)

  28. security-ops-bot commented on Oct 13, 2026

    @security-ops-bot
    security-ops-botBot
    on Oct 13, 2026 – with security-ops-bot
    Author

    🔒 Repository Archived — IBM/cloud-native-starter

    The following alert has exceeded their SLA deadline without being remediated. This repository has been archived.

    Alert Severity Deadline
    CVE-2026-84375 high 2026-10-13

    To request unarchiving, contact your security team and provide a remediation plan.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    security

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions