Open_Ultra_SAST/benchmarks/unseen/draft-p1.toml

status = "draft"
pool = "p1"
seed = 20260601

[[repository]]
advisory = "GHSA-gg9m-x3cg-69vh"
changes = [{"advisory" = "GHSA-gg9m-x3cg-69vh", "base" = "a4f37e9bf38b7fe025833b1b5d71e2e324e6f9b6", "bias" = "Pessimistic lower bound: the flaw may already exist in base, so a delta hook can correctly stay quiet.", "fallback_reasons" = {"merge_or_root" = 7, "unresolved_function" = 4, "version_bracket" = 7}, "family" = "config_secrets", "files" = [{"head_lines" = [[1, 6]], "path" = ".github/dependabot.yml"}, {"head_lines" = [[1, 7]], "path" = ".mvn/extensions.xml"}, {"head_lines" = [[1, 2]], "path" = ".mvn/maven.config"}, {"head_lines" = [[1, 29]], "path" = "BUILD.adoc"}, {"head_lines" = [[1, 11]], "path" = "Jenkinsfile"}, {"head_lines" = [[21, 21]], "path" = "LICENSE.md"}, {"head_lines" = [[1, 273]], "path" = "README.adoc"}, {"head_lines" = [[1, 1]], "path" = "README.md"}, {"head_lines" = [], "path" = "docs/machine-access-config.png"}, {"head_lines" = [], "path" = "docs/operational-menu-config.png"}, {"head_lines" = [], "path" = "docs/user-access-config.png"}, {"head_lines" = [[32, 32], [36, 36], [43, 43], [47, 47], [58, 58], [63, 63], [67, 71], [77, 77], [83, 83], [87, 97], [104, 110], [116, 122], [128, 134], [140, 158], [165, 169], [181, 190], [197, 212], [222, 222]], "path" = "pom.xml"}, {"head_lines" = [[1, 1]], "path" = "src/findbugs/excludesFilter.xml"}, {"head_lines" = [[1, 105]], "path" = "src/main/java/jenkins/metrics/api/HealthCheckProviderListener.java"}, {"head_lines" = [[1, 98]], "path" = "src/main/java/jenkins/metrics/api/MetricProviderListener.java"}, {"head_lines" = [[28, 28], [36, 36], [41, 41], [54, 54], [69, 69], [72, 73], [75, 75], [82, 82], [118, 128], [162, 162], [171, 171], [187, 187], [203, 203], [210, 218], [225, 225], [234, 234], [243, 243], [252, 252], [261, 261], [265, 265], [267, 267], [272, 272], [281, 286], [300, 300], [312, 313], [330, 330], [338, 338], [358, 358], [383, 384], [435, 436], [495, 495], [500, 500], [505, 505], [511, 511], [516, 517], [521, 521], [532, 532], [538, 538], [548, 548], [553, 553], [585, 588], [594, 599], [603, 603], [658, 676]], "path" = "src/main/java/jenkins/metrics/api/Metrics.java"}, {"head_lines" = [[30, 30], [367, 367], [370, 370], [374, 374], [386, 386], [391, 391], [445, 448], [460, 461], [500, 502]], "path" = "src/main/java/jenkins/metrics/api/MetricsAccessKey.java"}, {"head_lines" = [[42, 42], [44, 45], [49, 49], [77, 77], [80, 80], [537, 537], [538, 538], [607, 607], [608, 608], [659, 659], [667, 667], [702, 702], [713, 713], [736, 736], [741, 741], [748, 748], [1015, 1015], [1016, 1016], [1071, 1071], [1077, 1095]], "path" = "src/main/java/jenkins/metrics/api/MetricsRootAction.java"}, {"head_lines" = [[1, 351]], "path" = "src/main/java/jenkins/metrics/api/QueueItemMetricsEvent.java"}, {"head_lines" = [[1, 111]], "path" = "src/main/java/jenkins/metrics/api/QueueItemMetricsListener.java"}, {"head_lines" = [[55, 55], [76, 76], [84, 84], [95, 95], [103, 103]], "path" = "src/main/java/jenkins/metrics/impl/JenkinsHealthCheckProviderImpl.java"}, {"head_lines" = [[4, 4], [27, 27], [35, 35], [38, 38], [40, 42], [46, 47], [49, 49], [52, 52], [55, 56], [62, 66], [68, 68], [72, 72], [74, 74], [78, 83], [85, 99], [101, 101], [104, 104], [109, 112], [136, 136], [144, 144], [148, 148], [152, 152], [156, 176], [178, 178], [180, 188], [192, 192], [196, 196], [202, 203], [211, 229], [233, 233], [242, 242], [248, 251], [263, 278], [279, 279], [286, 286], [302, 304], [308, 310], [321, 321], [403, 403], [405, 405], [412, 412], [419, 419], [425, 426], [432, 433], [439, 450], [456, 458], [469, 471], [481, 481], [489, 491], [501, 507], [509, 509], [515, 515], [519, 519], [522, 524], [549, 553], [555, 555], [557, 562], [566, 567], [682, 684], [691, 693], [695, 695], [703, 721], [727, 728], [730, 732], [746, 746], [748, 750], [755, 756], [768, 770], [772, 772], [779, 779], [781, 799], [800, 800], [807, 809], [813, 819], [828, 846], [849, 870], [896, 897], [899, 900], [902, 905], [907, 916], [918, 999], [1001, 1024], [1027, 1029], [1032, 1032], [1034, 1034], [1037, 1037], [1041, 1041], [1044, 1046], [1052, 1052], [1055, 1055], [1058, 1060], [1063, 1063], [1065, 1065], [1067, 1
ecosystem = "maven"
family = "config_secrets"
first_affected = "4.0.2.8"
fix = "9810480370d4c5e04a2b710934db5461bde0d1b6"
id = "r-037e297c4d3a1f1aeb32ab6f"
instrument = {"bytes" = 2582, "files" = 1}
license_class = "permissive"
license_path = "LICENSE.md"
license_ref = "06a8665d291df51a3d0c10df96ccca0ecbe1f560"
license_spdx = "MIT"
parent = "06a8665d291df51a3d0c10df96ccca0ecbe1f560"
post_cutoff = false
repository = "jenkinsci/metrics-plugin"
slice = 1
url = "https://github.com/jenkinsci/metrics-plugin.git"

[[repository]]
id = "r-04d4ea3f3455cbdc39da6767"
private = true
sha256 = "04d4ea3f3455cbdc39da67676c68dd3e52e170341c2b748b370e43365a7a7816"
slice = 1

[[repository]]
id = "r-0a150fd20fa070e72505bed9"
private = true
sha256 = "0a150fd20fa070e72505bed9d35b12926d69e6b6fb94ec6ccf0feeb34e2ed822"
slice = 1

[[repository]]
id = "r-0b45a36c69a87d46e5d1136a"
private = true
sha256 = "0b45a36c69a87d46e5d1136a4d2a3de9f2e4f6812d19a8198d2668b15e746427"
slice = 1

[[repository]]
id = "r-125eb08d13799344d870d64d"
private = true
sha256 = "125eb08d13799344d870d64d114a02c96d66d67dd398d42b7a16849765ead87c"
slice = 1

[[repository]]
id = "r-1357133802bf5d9e25dc1612"
private = true
sha256 = "1357133802bf5d9e25dc1612be3e3a5dcb8449995106064486bfbba3aff48b83"
slice = 1

[[repository]]
advisory = "GHSA-j6g5-3hh3-pgw8"
changes = [{"advisory" = "GHSA-j6g5-3hh3-pgw8", "base" = "b414068efca9eb7a55eedae80bcab56f67034206", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "injection", "files" = [{"head_lines" = [[7, 7], [11, 11], [14, 14], [36, 59], [87, 87], [92, 92], [435, 756]], "path" = "src/bedrock_agentcore/tools/code_interpreter_client.py"}, {"head_lines" = [[1, 1], [3, 3], [37, 40], [659, 1342]], "path" = "tests/bedrock_agentcore/tools/test_code_interpreter_client.py"}, {"head_lines" = [[10, 10], [12, 195], [210, 211], [213, 214], [216, 216], [218, 218], [220, 222], [224, 229]], "path" = "tests_integ/tools/test_code.py"}], "function" = "install_packages", "function_lines" = [540, 581], "head" = "bcdc6ebda4224d2e2ba696fec65b7078bb7a8970", "kind" = "vulnerability", "method" = "introducing", "path" = "src/bedrock_agentcore/tools/code_interpreter_client.py", "post_cutoff" = true}, {"base" = "ecba82dc5f3136eeab107096e58867e12e794f97", "files" = [{"head_lines" = [[92, 94], [144, 146]], "path" = "src/bedrock_agentcore/memory/session.py"}], "head" = "245f3c1e1ad6e663922080262e8152096407ea2a", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "a9ad13ac581f2a48c7c9dd80802cee1b35420391", "files" = [{"head_lines" = [[14, 14], [18, 18], [78, 83], [89, 89], [102, 102]], "path" = "src/bedrock_agentcore/runtime/app.py"}, {"head_lines" = [[392, 421]], "path" = "tests/bedrock_agentcore/runtime/test_app.py"}], "head" = "f30e281449c69c9c7251584b4fcdc66a47f53486", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "df70612ca4f474103392d16cb664d04aff433d3c", "files" = [{"head_lines" = [[40, 42], [44, 51], [53, 55], [57, 65], [67, 67], [97, 97], [147, 147], [149, 149], [350, 351], [382, 382], [384, 384], [430, 430], [439, 439], [494, 494]], "path" = "src/bedrock_agentcore/runtime/app.py"}, {"head_lines" = [[1467, 1467], [1473, 1473], [1479, 1485], [1489, 1489], [1495, 1495], [1501, 1507], [1512, 1512], [1517, 1517], [1527, 1533]], "path" = "tests/bedrock_agentcore/runtime/test_app.py"}, {"head_lines" = [[18, 18]], "path" = "tests_integ/runtime/test_simple_agent.py"}], "head" = "114a67031bb9563b653f0a07b3b9b9c7137a27b1", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "3093768aa8600509c3bbba899123d78a6a1fedcb", "files" = [{"head_lines" = [[31, 31], [435, 446]], "path" = "src/bedrock_agentcore/runtime/app.py"}, {"head_lines" = [[1, 35]], "path" = "src/bedrock_agentcore/runtime/utils.py"}, {"head_lines" = [[721, 722], [883, 883], [885, 895]], "path" = "tests/bedrock_agentcore/runtime/test_app.py"}, {"head_lines" = [[1, 337]], "path" = "tests/bedrock_agentcore/runtime/test_utils.py"}], "head" = "00cc7edc082b2b0a1b3fa01b468ae4deb1522b6f", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 3, "time_third" = 0}, {"base" = "8b8c6fde07434a0a7fe4cd960efe823c9592dc0b", "files" = [{"head_lines" = [[141, 141]], "path" = "src/bedrock_agentcore/memory/integrations/strands/converters/openai.py"}, {"head_lines" = [[2, 2]], "path" = "tests/bedrock_agentcore/memory/integrations/strands/test_agentcore_memory_session_manager_openai_converter.py"}], "head" = "98871e929a43df05a52ec77ce371150ce21adba3", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "ef448dc58fd78e3da8d9c51bece9cec1b6fe2bad", "files" = [{"head_lines" = [[125, 127], [286, 290], [338, 342], [384, 389]], "path" = "src/bedrock_agentcore/memory/integrations/strands/session_manager.py"}, {"head_lines" = [[425, 441]], "path" = "tests/bedrock_agentcore/memory/integrations/strands/test_agentcore_memory_session_manager.py"}], "head" = "1dd896e476cf140d61c75fc8e9228f286b145e90", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 1}, {"base" = "be1be55c38b13918b75852c79b20bacaddd11656", "files" = [{"head_lines" = [[56, 62], [71, 71]], "path" = "src/bedrock_agentcore/memory/client.py"}, {"hea
ecosystem = "pip"
family = "injection"
fix = "3c4b4ee6b8730e6313a82c743ac37dbcc1c21cdb"
id = "r-13fec1f643915e9e5f851a62"
instrument = {"bytes" = 3202, "files" = 1}
license_class = "permissive"
license_path = "LICENSE.txt"
license_ref = "bcdc6ebda4224d2e2ba696fec65b7078bb7a8970"
license_spdx = "Apache-2.0"
parent = "986801f10f3a8e2482d81f5c50330109355921e3"
post_cutoff = true
repository = "aws/bedrock-agentcore-sdk-python"
slice = 1
url = "https://github.com/aws/bedrock-agentcore-sdk-python.git"

[[repository]]
id = "r-1503dedd0c3a56028eca32b2"
private = true
sha256 = "1503dedd0c3a56028eca32b2d21719d93588a6f6b88ec684b17d9e5215327535"
slice = 1

[[repository]]
advisory = "GHSA-v5gw-mw7f-84px"
changes = [{"advisory" = "GHSA-v5gw-mw7f-84px", "base" = "ea70fd57b286824350da88c6d484c32bdf31627a", "bias" = "Pessimistic lower bound: the flaw may already exist in base, so a delta hook can correctly stay quiet.", "fallback_reasons" = {"version_bracket" = 3}, "family" = "path", "files" = [{"head_lines" = [[1, 2], [4, 4], [6, 6], [8, 12]], "path" = ".github/pull_request_template.md"}, {"head_lines" = [[138, 138]], "path" = "README.md"}, {"head_lines" = [[243, 243]], "path" = "docs/config.md"}, {"head_lines" = [[21, 22], [49, 53], [87, 87]], "path" = "docs/database.md"}, {"head_lines" = [[1, 1]], "path" = "docs/events.md"}, {"head_lines" = [[134, 134]], "path" = "docs/index.md"}, {"head_lines" = [[1, 92]], "path" = "docs/lifespan.md"}, {"head_lines" = [[775, 775], [781, 785]], "path" = "docs/middleware.md"}, {"head_lines" = [[1, 58]], "path" = "docs/release-notes.md"}, {"head_lines" = [[84, 84], [117, 129], [134, 135], [138, 138], [153, 155]], "path" = "docs/requests.md"}, {"head_lines" = [[39, 39]], "path" = "docs/responses.md"}, {"head_lines" = [[154, 155]], "path" = "docs/routing.md"}, {"head_lines" = [[6, 6], [12, 12]], "path" = "docs/staticfiles.md"}, {"head_lines" = [[67, 70]], "path" = "docs/testclient.md"}, {"head_lines" = [[150, 159], [173, 173], [183, 184], [186, 186], [188, 188]], "path" = "docs/third-party-packages.md"}, {"head_lines" = [[42, 42], [58, 58]], "path" = "mkdocs.yml"}, {"head_lines" = [[58, 63]], "path" = "pyproject.toml"}, {"head_lines" = [[5, 6], [8, 12], [14, 14], [19, 19], [23, 23]], "path" = "requirements.txt"}, {"head_lines" = [[11, 11], [12, 12], [14, 14]], "path" = "scripts/check"}, {"head_lines" = [[10, 10], [12, 12]], "path" = "scripts/lint"}, {"head_lines" = [[1, 1], [14, 14]], "path" = "setup.cfg"}, {"head_lines" = [[1, 1]], "path" = "starlette/__init__.py"}, {"head_lines" = [[12, 12]], "path" = "starlette/_compat.py"}, {"head_lines" = [[3, 3], [5, 10], [20, 74]], "path" = "starlette/_utils.py"}, {"head_lines" = [[12, 14], [42, 44], [48, 48], [63, 63], [71, 71], [80, 80], [114, 116], [120, 121], [137, 139], [140, 140], [147, 147]], "path" = "starlette/applications.py"}, {"head_lines" = [[1, 1], [116, 116], [121, 127], [190, 190], [203, 203], [436, 436], [439, 439], [441, 442], [446, 447], [450, 453], [456, 456], [461, 463]], "path" = "starlette/datastructures.py"}, {"head_lines" = [[57, 57], [92, 92]], "path" = "starlette/endpoints.py"}, {"head_lines" = [[2, 2], [4, 4], [12, 12], [25, 31], [119, 120], [122, 127], [134, 145], [148, 148], [151, 155], [158, 170], [173, 173], [176, 176], [179, 186], [189, 221], [224, 224], [228, 228], [232, 232], [252, 273], [276, 276]], "path" = "starlette/formparsers.py"}, {"head_lines" = [[5, 5], [7, 7], [79, 81], [100, 101], [116, 134]], "path" = "starlette/middleware/base.py"}, {"head_lines" = [[24, 24]], "path" = "starlette/middleware/cors.py"}, {"head_lines" = [[7, 7], [15, 15], [176, 176], [178, 178], [191, 192], [202, 202], [216, 216], [218, 218], [247, 253], [262, 267], [280, 289], [291, 291]], "path" = "starlette/requests.py"}, {"head_lines" = [[7, 8], [109, 109], [121, 124]], "path" = "starlette/responses.py"}, {"head_lines" = [[20, 20], [173, 173], [252, 252], [256, 257], [327, 327], [331, 332], [409, 410], [418, 418], [421, 421], [424, 424], [440, 440], [487, 488], [496, 496], [499, 499], [502, 502], [512, 512], [583, 585], [593, 600], [602, 602], [640, 640], [643, 643], [646, 646], [674, 674], [677, 683], [854, 854]], "path" = "starlette/routing.py"}, {"head_lines" = [[11, 11], [134, 134]], "path" = "starlette/schemas.py"}, {"head_lines" = [[48, 48], [55, 55], [166, 170]], "path" = "starlette/staticfiles.py"}, {"head_lines" = [[5, 5], [21, 21], [45, 45], [48, 52], [71, 71], [81, 81]], "path" = "starlette/templating.py"}, {"head_lines" = [[148, 148], [191, 192], [198, 198], [249, 249], [266, 267], [332, 334], [388, 388], [394, 394], [759, 759]], "path" = "starlette/testclient.py"}, {"head_lines" = [[3, 4], [12, 17]], "path" = "starlette/types.py"}, {"head_lines" = [[68, 69], [171, 171]], "path" = "starlette/websockets.py"}, {"head_lines" = 
ecosystem = "pip"
family = "path"
first_affected = "0.13.5"
fix = "1797de464124b090f10cf570441e8292936d63e3"
id = "r-159e352538d960cf55caa0c6"
instrument = {"bytes" = 75, "files" = 1}
license_class = "permissive"
license_path = "LICENSE.md"
license_ref = "24c1fac62a80bb153c6548145334fc643991e35a"
license_spdx = "BSD-3-Clause"
parent = "24c1fac62a80bb153c6548145334fc643991e35a"
post_cutoff = false
repository = "kludex/starlette"
slice = 1
url = "https://github.com/Kludex/starlette.git"

[[repository]]
advisory = "GHSA-2xhg-73j7-rrgx"
changes = [{"advisory" = "GHSA-2xhg-73j7-rrgx", "base" = "07430f734323942c38546172092d8c9f6813807f", "bias" = "Pessimistic lower bound: the flaw may already exist in base, so a delta hook can correctly stay quiet.", "fallback_reasons" = {"size_cap" = 3}, "family" = "untrusted_destination", "files" = [{"head_lines" = [[1, 17]], "path" = ".bito.yaml"}, {"head_lines" = [[1, 46]], "path" = ".bito/guidelines/domain-invariants.txt"}, {"head_lines" = [[1, 23]], "path" = ".bito/guidelines/repo-truth-and-boundaries.txt"}, {"head_lines" = [[1, 20]], "path" = ".bito/guidelines/review-posture.txt"}, {"head_lines" = [[10, 12], [29, 29]], "path" = ".github/workflows/build.yml"}, {"head_lines" = [[7, 7], [10, 12], [28, 32], [34, 34], [42, 44]], "path" = ".github/workflows/check.yml"}, {"head_lines" = [[11, 14]], "path" = ".github/workflows/main.yml"}, {"head_lines" = [[68, 68]], "path" = ".github/workflows/release.yml"}, {"head_lines" = [[1, 3]], "path" = ".husky/pre-commit"}, {"head_lines" = [[2, 3]], "path" = ".npmrc"}, {"head_lines" = [[1, 60]], "path" = "AGENTS.md"}, {"head_lines" = [[1, 133]], "path" = "ARCHITECTURE.md"}, {"head_lines" = [[133, 138], [182, 182], [207, 241]], "path" = "CONTRIBUTING.md"}, {"head_lines" = [[24, 24], [26, 26], [53, 58], [80, 80], [149, 149], [157, 158], [183, 187]], "path" = "README.md"}, {"head_lines" = [[1, 26]], "path" = "docs/ADRs/2025-07-01-esm-only-with-tsup.md"}, {"head_lines" = [[1, 33]], "path" = "docs/ADRs/2025-07-01-mcp-protocol-and-local-server.md"}, {"head_lines" = [[1, 21]], "path" = "docs/ADRs/2025-07-01-zod-for-tool-schemas.md"}, {"head_lines" = [[1, 32]], "path" = "docs/ADRs/2025-10-01-monorepo-for-shared-tools.md"}, {"head_lines" = [[1, 22]], "path" = "docs/ADRs/2026-01-01-dxt-packaging.md"}, {"head_lines" = [[1, 22]], "path" = "docs/ADRs/2026-04-09-cma-v12-namespace-imports.md"}, {"head_lines" = [[1, 12]], "path" = "docs/ADRs/README.md"}, {"head_lines" = [[1, 4]], "path" = "docs/specs/README.md"}, {"head_lines" = [[1, 1]], "path" = "manifest.json"}, {"head_lines" = [[47, 47], [2719, 2721], [2916, 2927], [3542, 3544], [3585, 3587], [3590, 3590], [3598, 3602], [3605, 3606], [3612, 3613], [3618, 3620], [5717, 5719], [5730, 5732], [5743, 5745], [5756, 5758], [5769, 5771], [5782, 5784], [5795, 5797], [5808, 5810], [5821, 5823], [5834, 5836], [5847, 5862], [5873, 5888], [5899, 5901], [5912, 5914], [5925, 5927], [5938, 5940], [5951, 5953], [5963, 5975], [5977, 5979], [5990, 5992], [6003, 6005], [6016, 6018], [6029, 6031], [6595, 6611], [7388, 7390], [7674, 7676], [7679, 7680], [7969, 7971], [7976, 7976], [7978, 7978], [7980, 7982], [7986, 8005], [8897, 8912], [9071, 9073], [9127, 9154], [9513, 9515], [9519, 9520], [9522, 9523], [9526, 9526], [9542, 9544], [9548, 9548], [9550, 9550], [10735, 10737], [11119, 11121], [11125, 11125], [11131, 11131], [11162, 11164], [11166, 11168], [11338, 11340], [11349, 11349], [12280, 12288], [12516, 12516], [12700, 12708], [13165, 13173], [13243, 13248], [14080, 14088], [15589, 15589], [15733, 15735], [16746, 16748], [17321, 17323], [17336, 17360], [18406, 18408], [20429, 20431], [20439, 20439], [20442, 20443], [20473, 20473], [20477, 20477], [20480, 20482], [20489, 20489]], "path" = "package-lock.json"}, {"head_lines" = [[28, 28], [68, 68]], "path" = "package.json"}, {"head_lines" = [[1, 1]], "path" = "packages/mcp-server/.gitignore"}, {"head_lines" = [[1, 96]], "path" = "packages/mcp-server/CHANGELOG.md"}, {"head_lines" = [[1, 330]], "path" = "packages/mcp-server/manifest.json"}, {"head_lines" = [[3, 3], [27, 27], [29, 29], [34, 38], [48, 49]], "path" = "packages/mcp-server/package.json"}, {"head_lines" = [[11, 11], [24, 24], [32, 32], [63, 69]], "path" = "packages/mcp-server/project.json"}, {"head_lines" = [[1, 14]], "path" = "packages/mcp-server/scripts/injectMCPVersion.cjs"}, {"head_lines" = [[1, 27]], "path" = "packages/mcp-server/scripts/searchAndReplaceMCPVersion.cjs"}, {"head_lines" = [[3, 3]], "path" = "packages/mcp-server/src/config/env.ts"}, {"head_lines" = [[1, 1], [4, 4]], "path" = "packages/mcp-server/src/getVersion.ts"}, {"head_lines" = [[5
ecosystem = "npm"
family = "untrusted_destination"
fix = "fa7477ee48515f4248bc91a025eab0ca83423fe0"
id = "r-17d736b8fe7f9c593157d519"
instrument = {"bytes" = 65, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "6e0038494a09c435f6a0a9a76fde2dc077f18b18"
license_spdx = "MIT"
parent = "6e0038494a09c435f6a0a9a76fde2dc077f18b18"
post_cutoff = true
repository = "contentful/contentful-mcp-server"
slice = 1
url = "https://github.com/contentful/contentful-mcp-server.git"

[[repository]]
id = "r-1b182086a5e198f1d36c0218"
private = true
sha256 = "1b182086a5e198f1d36c0218c92491c65d8a21dec646ef2c1484a0a4617d6cf7"
slice = 1

[[repository]]
id = "r-1b5601dba3c90099c97a410e"
private = true
sha256 = "1b5601dba3c90099c97a410ef11808e7f627ff3edba55ef2813ef07d3b44c4af"
slice = 1

[[repository]]
id = "r-1d36dd34dd37729acbbc4c6c"
private = true
sha256 = "1d36dd34dd37729acbbc4c6cbb5aed3cc8d51cc77dcf9bccada903a44e7d0f52"
slice = 1

[[repository]]
id = "r-21448c76605469b75e580635"
private = true
sha256 = "21448c76605469b75e580635c6c85b3aba5ee8cee4a16c8c01a4c5a2aad4568f"
slice = 1

[[repository]]
advisory = "GHSA-32wx-4gxx-h48f"
changes = [{"advisory" = "GHSA-32wx-4gxx-h48f", "base" = "e2b008705f82ea63bff35ebd8a43341aa9cf503a", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "access_control", "files" = [{"head_lines" = [[12, 13], [40, 40], [42, 43], [47, 47]], "path" = "extend.php"}, {"head_lines" = [[14, 14], [18, 18], [23, 23], [31, 31], [70, 70]], "path" = "src/Listener/AddForumTagsRelationship.php"}, {"head_lines" = [[1, 42]], "path" = "src/Listener/PrepareForumTagsApiAttributes.php"}, {"head_lines" = [[19, 19], [51, 51], [57, 57]], "path" = "src/Listener/SaveTagsToDatabase.php"}], "function" = "handle", "function_lines" = [57, 115], "head" = "73c0626e722d2be2b82804eec5746646b64b0c44", "kind" = "vulnerability", "method" = "introducing", "path" = "src/Listener/SaveTagsToDatabase.php", "post_cutoff" = false}, {"base" = "53406e6d3dbcccfffeb1b3693aa323a13ea3f100", "files" = [{"head_lines" = [[47, 47]], "path" = "src/Api/Controller/CreateTagController.php"}, {"head_lines" = [[48, 48]], "path" = "src/Api/Controller/UpdateTagController.php"}], "head" = "2628a5cb389d1f0a305f06ab1ff4f8fce31a9469", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "d2d904cbeeecdfebc47da55b284211e6732753d3", "files" = [{"head_lines" = [[20, 20], [22, 22], [24, 24], [26, 26]], "path" = "bootstrap.php"}], "head" = "7945f4c3db05e9da0684c53471fc9a5220549b09", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "1c01f03f037b51e7a70ecfef7490839fbe8c0771", "files" = [{"head_lines" = [[225, 225]], "path" = "js/bootstrap.js"}], "head" = "06b34996d1ce05a7ed9f52e190aa6ea79f632088", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "0279ddf25569230217904d164f5a700307ad09f1", "files" = [{"head_lines" = [[534, 534], [537, 552], [605, 605]], "path" = "js/admin/dist/extension.js"}, {"head_lines" = [[1, 1], [12, 25]], "path" = "js/admin/src/addTagsPermissionScope.js"}], "head" = "00753b3e7c0bbb76c42c307116f3bf46f2198630", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "03cf4439007020ecda96376a4f1df16a9de8fb56", "files" = [{"head_lines" = [[1, 1], [3, 3], [17, 19], [21, 22], [24, 28], [30, 42], [44, 62]], "path" = "js/admin/src/components/TagSettingsModal.js"}], "head" = "bef55e08baa84c32f16d8b10274054137d4fd756", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "97f039e9b3ebfcc1ab36de58a14e3bd419f11036", "files" = [{"head_lines" = [[2, 2], [21, 21], [28, 28]], "path" = "js/src/common/helpers/tagLabel.js"}], "head" = "837fce3861f6b40b2a20771fd43c579bd6321b25", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "c53315d05e76e0b60e587ee9a5153dc86fc10cf6", "files" = [{"head_lines" = [[64, 64]], "path" = "src/TagRepository.php"}], "head" = "f61bdffd636e1c74047cb1062a790868d91f63fb", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "93533d4f56d7cfcd65f4ff26af79107c282525fb", "files" = [{"head_lines" = [[12, 12], [19, 19], [25, 25]], "path" = "src/Api/Controller/OrderTagsController.php"}, {"head_lines" = [[14, 14], [17, 17], [40, 40]], "path" = "src/Command/CreateTagHandler.php"}, {"head_lines" = [[13, 13], [16, 16], [41, 41]], "path" = "src/Command/DeleteTagHandler.php"}, {"head_lines" = [[14, 14], [17, 17], [50, 50]], "path" = "src/Command/EditTagHandler.php"}], "head" = "260071b382f4e675f0ba9c58687509757285da36", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 1}, {"base" = "7552ef852beda2cfe1789a3663e8b4077bcaf282", "files" = [{"head_lines" = [[132, 132]], "path" = "tests/integration/api/tags/ListTest.php"}], "head" = "e1e585b56c946bb8c238dfd4d34c6130cd653662", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 2}, {"base" = "bd0dee4b60ddeb1a618ee62ba55ae7cdfd5b84c5", "files" = [{"head_lines" = [[13,
ecosystem = "composer"
family = "access_control"
fix = "c8fcd000857493f1e4cc00b6f2771ce388b93e9d"
id = "r-2da284c8e29bfcc0e0da0af2"
instrument = {"bytes" = 2353, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "73c0626e722d2be2b82804eec5746646b64b0c44"
license_spdx = "MIT"
parent = "c207faa17ffc496d5ce0161923f19556a0ac4c5b"
post_cutoff = false
repository = "flarum/tags"
slice = 1
url = "https://github.com/flarum/tags.git"

[[repository]]
advisory = "GHSA-35g4-qx3c-vjhx"
changes = [{"advisory" = "GHSA-35g4-qx3c-vjhx", "base" = "83a9fb4eac25eb5f9f248d7a381744218c7fd5da", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "access_control", "files" = [{"head_lines" = [[104, 104]], "path" = "src/components/bridge-store.ts"}, {"head_lines" = [[1, 1]], "path" = "src/components/room-upgrade-handler.js"}, {"head_lines" = [[1, 218]], "path" = "src/components/room-upgrade-handler.ts"}, {"head_lines" = [[38, 41]], "path" = "src/models/rooms/matrix.ts"}], "function" = "onJoinedNewRoom", "function_lines" = [97, 134], "head" = "e52f25cc6edbddc089eed366b71f988908d3a02c", "kind" = "vulnerability", "method" = "introducing", "path" = "src/components/room-upgrade-handler.ts", "post_cutoff" = false}, {"base" = "fb0e4ce13394693eb58b001364abaa09c102c2f0", "files" = [{"head_lines" = [[2, 2]], "path" = "index.js"}, {"head_lines" = [[1, 3]], "path" = "lib/bridge.js"}, {"head_lines" = [[11, 11]], "path" = "package.json"}, {"head_lines" = [[3, 4], [6, 7], [9, 9]], "path" = "spec/integ/user-bridge-store.spec.js"}], "head" = "46ab90fb8a37c0500435b311781bd9280b83f6a7", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "92ab998972e2828a22fabe2da6db44c335d9c97d", "files" = [{"head_lines" = [[78, 79]], "path" = "lib/components/state-lookup.js"}], "head" = "b7d3963551505b771367e2a5e5a3bf0cc0aa0c0f", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "8e21cb1fdc8bc630d096f957a45f8d70dee805b4", "files" = [{"head_lines" = [[4, 5], [32, 48]], "path" = "lib/components/config-validator.js"}, {"head_lines" = [[30, 31]], "path" = "package.json"}], "head" = "12e0a3bf2f3da65f745ead876cbb000bea6cd740", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "0cd01b8fbca5894c351b152fe5c6d671cde4239a", "files" = [{"head_lines" = [[110, 110]], "path" = "lib/store/user-bridge-store.js"}, {"head_lines" = [[14, 14]], "path" = "lib/users/matrix.js"}, {"head_lines" = [[193, 232]], "path" = "spec/integ/user-bridge-store.spec.js"}], "head" = "01d5a0190dd68099ab927f31fedd15c6d3368bc2", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "9089f0d94f3d98662c767f5f9563badb437c394c", "files" = [{"head_lines" = [[16, 17], [59, 59], [64, 64], [71, 76], [107, 110], [112, 112], [132, 134], [142, 144], [153, 153]], "path" = "lib/components/cli.js"}], "head" = "d6cab6c9703e8a316980ff313ca452b6090cf59d", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "35fd903ffed658da41819f4061f0006316b874dc", "files" = [{"head_lines" = [[3, 3], [17, 22], [279, 283], [299, 336], [340, 340], [344, 351]], "path" = "lib/components/intent.js"}, {"head_lines" = [[4, 4]], "path" = "lib/imports.js"}], "head" = "66cf54470381ad067a6216bcc629abd739fc4af3", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "e22977db1d765c07c3fbbe669045fff6a7108901", "files" = [{"head_lines" = [[12, 23], [40, 76], [78, 85]], "path" = "lib/components/app-service-bot.js"}], "head" = "b87da0fefe6bb3c47dd387694e8b88519c2e108b", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "66bcf64fb588d4229d90cd81b4a42246623c94e2", "files" = [{"head_lines" = [[2, 2]], "path" = "index.js"}, {"head_lines" = [[1, 99]], "path" = "lib/components/cli.js"}, {"head_lines" = [[1, 20]], "path" = "lib/exports.js"}, {"head_lines" = [[1, 1]], "path" = "lib/imports.js"}], "head" = "e32392a2da0f24f32cea0d9425c9a49135c7377a", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "942dd83948886f89431973ca5a235dd92f1d2fcd", "files" = [{"head_lines" = [[2, 2], [18, 169], [175, 175], [178, 290], [292, 295]], "path" = "lib/components/intent.js"}], "head" = "015f8c582b154605adaa1d1827971abdec50760e", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 3, "time_third" =
ecosystem = "npm"
family = "access_control"
fix = "b69e745584a34fcfd858df33e4631e420da07b9f"
id = "r-2f2536d69163d990723deaa9"
instrument = {"bytes" = 3805, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "e52f25cc6edbddc089eed366b71f988908d3a02c"
license_spdx = "Apache-2.0"
parent = "1b587e2455cbd30779f5052d2d2d46d58463a3e2"
post_cutoff = false
repository = "matrix-org/matrix-appservice-bridge"
slice = 1
url = "https://github.com/matrix-org/matrix-appservice-bridge.git"

[[repository]]
advisory = "GHSA-rp4x-h577-chvq"
changes = [{"advisory" = "GHSA-rp4x-h577-chvq", "base" = "0f6619d3201cab1f1b25783cc586d8fd60405366", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "output_encoding", "files" = [{"head_lines" = [[574, 575]], "path" = "README.md"}, {"head_lines" = [[38, 39], [166, 166]], "path" = "src/main/java/org/biouno/unochoice/AbstractCascadableParameter.java"}, {"head_lines" = [[1, 121]], "path" = "src/test/java/org/biouno/unochoice/jenkins_cert_2192/TestDynamicReferenceXss.java"}], "function" = "testChoicesParameterXss", "function_lines" = [69, 97], "head" = "d0b768c18bafd812b52fe579def8b14e26033ec9", "kind" = "vulnerability", "method" = "introducing", "path" = "src/test/java/org/biouno/unochoice/jenkins_cert_2192/TestDynamicReferenceXss.java", "post_cutoff" = false}, {"base" = "7922df53cee483ac3febc55f8881359dc8f2b36b", "files" = [{"head_lines" = [[151, 151]], "path" = "src/main/java/org/biouno/unochoice/CascadeChoiceParameter.java"}, {"head_lines" = [[138, 138]], "path" = "src/main/java/org/biouno/unochoice/ChoiceParameter.java"}], "head" = "503414fad3d38df7f3d9e1b7bd8392a89465d05e", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "6e2bc72b6ba625a89a9f0c97ebf5b44ff7e1b68a", "files" = [{"head_lines" = [[248, 248], [254, 254]], "path" = "src/main/webapp/js/cascade.js"}], "head" = "a0880cf40ec89dd859da215ac96bc293646acb22", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "e1ae4d4d0c8130d650a4518531306a8b581265df", "files" = [{"head_lines" = [[14, 16], [19, 19]], "path" = "src/main/resources/org/biouno/unochoice/common/checkboxContent.jelly"}, {"head_lines" = [[621, 621], [626, 627], [641, 642], [727, 727]], "path" = "src/main/resources/org/biouno/unochoice/stapler/unochoice/unochoice.js"}], "head" = "16e490ce9e881ea8447c76ecb9e10ac183959963", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "2c966b6fc68837a02c863a7dad7ddca38a1c1aab", "files" = [{"head_lines" = [[4, 4]], "path" = "src/test/java/org/biouno/unochoice/TestAbstractUnoChoiceParameter.java"}, {"head_lines" = [[4, 4]], "path" = "src/test/java/org/biouno/unochoice/TestCascadeChoiceParameter.java"}, {"head_lines" = [[4, 4]], "path" = "src/test/java/org/biouno/unochoice/TestChoiceParameter.java"}, {"head_lines" = [[4, 4]], "path" = "src/test/java/org/biouno/unochoice/TestDynamicReferenceParameter.java"}, {"head_lines" = [[4, 4]], "path" = "src/test/java/org/biouno/unochoice/TestParametersOrder.java"}, {"head_lines" = [[4, 4]], "path" = "src/test/java/org/biouno/unochoice/util/TestScriptCallback.java"}, {"head_lines" = [[4, 4]], "path" = "src/test/java/org/biouno/unochoice/util/TestUtils.java"}], "head" = "04439028597d44f0e9cdbd65af729c8436b8f3b9", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "10dc9d255dc44560c0178904ffcff3514581ae0a", "files" = [{"head_lines" = [[636, 643], [649, 650], [655, 664], [668, 668]], "path" = "src/main/resources/org/biouno/unochoice/stapler/unochoice/unochoice.js"}], "head" = "d373b34da90d14b569102c0afe66a1b86ecea47e", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "18f05fe1e23f17871fb7b21f6bf7ee0ddae5e6f1", "files" = [{"head_lines" = [[1, 84]], "path" = "src/test/java/org/biouno/unochoice/issue28785/TestIssue28785.java"}, {"head_lines" = [[1, 28]], "path" = "src/test/java/org/biouno/unochoice/issue28785/package-info.java"}], "head" = "457164bfbeea30905e45cbebc5371c15b92f652e", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "b658f0d25ee7d10613c87568fa9cd5d74cd04a45", "files" = [{"head_lines" = [[13, 15]], "path" = "README.md"}, {"head_lines" = [[1, 10]], "path" = "TODO"}, {"head_lines" = [[60, 67]], "path" = "pom.xml"}, {"head_lines" = [[1, 220]], "path" = "src/main/java/org/biouno/unochoice/scriptler/ScriptlerCascadeChoiceParameterDefinition.java"}, {"hea
ecosystem = "maven"
family = "output_encoding"
fix = "4529ab6413d4ec70d02455536ea6c5196332ba62"
id = "r-317b03b16ac11bd44096c99a"
instrument = {"bytes" = 6333, "files" = 1}
license_class = "permissive"
license_path = "LICENSE.txt"
license_ref = "d0b768c18bafd812b52fe579def8b14e26033ec9"
license_spdx = "MIT"
parent = "8eb9560476db9885bd4cd27876b2e6fc3278b01e"
post_cutoff = false
repository = "jenkinsci/active-choices-plugin"
slice = 1
url = "https://github.com/jenkinsci/active-choices-plugin.git"

[[repository]]
advisory = "GHSA-qw28-g63m-jxqv"
changes = [{"advisory" = "GHSA-qw28-g63m-jxqv", "base" = "27c6ff18c46118caf7673979ae0ce1f34034a2bd", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {"unresolved_function" = 1}, "family" = "access_control", "files" = [{"head_lines" = [[88, 88]], "path" = "pom.xml"}, {"head_lines" = [[4, 4], [21, 21], [41, 41], [45, 52]], "path" = "src/main/java/net/nemerosa/ontrack/jenkins/AbstractOntrackParameterDefinition.java"}, {"head_lines" = [[13, 13], [16, 17], [44, 44], [49, 49], [54, 54], [59, 59], [64, 64], [69, 69], [83, 94], [97, 97]], "path" = "src/main/java/net/nemerosa/ontrack/jenkins/OntrackDSLNotifier.java"}, {"head_lines" = [[7, 7], [10, 10], [12, 12], [16, 16], [36, 36], [41, 41], [46, 46], [51, 51], [56, 56], [61, 61], [80, 91], [94, 95]], "path" = "src/main/java/net/nemerosa/ontrack/jenkins/OntrackDSLRunCondition.java"}, {"head_lines" = [[8, 8], [11, 11], [13, 13], [41, 41], [46, 46], [51, 51], [56, 56], [61, 61], [66, 66], [76, 88], [91, 91], [93, 93], [97, 97]], "path" = "src/main/java/net/nemerosa/ontrack/jenkins/OntrackDSLStep.java"}, {"head_lines" = [[6, 7], [67, 67], [78, 78]], "path" = "src/main/java/net/nemerosa/ontrack/jenkins/OntrackPluginSupport.java"}, {"head_lines" = [[1, 51]], "path" = "src/main/java/net/nemerosa/ontrack/jenkins/dsl/AbstractDSLLauncher.java"}, {"head_lines" = [[1, 18]], "path" = "src/main/java/net/nemerosa/ontrack/jenkins/dsl/ApprovalBasedDSLLauncher.java"}, {"head_lines" = [[1, 7]], "path" = "src/main/java/net/nemerosa/ontrack/jenkins/dsl/DSLLauncher.java"}, {"head_lines" = [[1, 4]], "path" = "src/main/java/net/nemerosa/ontrack/jenkins/dsl/DefaultDSLLauncher.java"}, {"head_lines" = [[1, 1]], "path" = "src/main/java/net/nemerosa/ontrack/jenkins/dsl/OntrackDSL.java"}, {"head_lines" = [[1, 14]], "path" = "src/main/java/net/nemerosa/ontrack/jenkins/dsl/OntrackDSLException.java"}, {"head_lines" = [[3, 3], [5, 5], [7, 7], [10, 17]], "path" = "src/main/java/net/nemerosa/ontrack/jenkins/dsl/OntrackDSLResult.java"}, {"head_lines" = [[4, 6], [9, 9], [11, 12], [16, 16], [20, 20], [32, 41], [56, 74], [76, 76], [78, 78], [80, 92], [95, 140]], "path" = "src/main/java/net/nemerosa/ontrack/jenkins/dsl/OntrackDSLRunner.java"}, {"head_lines" = [[1, 12]], "path" = "src/main/java/net/nemerosa/ontrack/jenkins/dsl/OntrackDSLWhitelist.java"}, {"head_lines" = [[1, 49]], "path" = "src/main/java/net/nemerosa/ontrack/jenkins/dsl/SandboxDSLLauncher.java"}], "function" = "run", "function_lines" = [35, 48], "head" = "3ec46f46aa648c1301da97adbfa2ff8c78037fb4", "kind" = "vulnerability", "method" = "introducing", "path" = "src/main/java/net/nemerosa/ontrack/jenkins/dsl/SandboxDSLLauncher.java", "post_cutoff" = false}, {"base" = "a1d1043c841909661fab2be02ccf9a55f41ce6a8", "files" = [{"head_lines" = [[131, 133]], "path" = "src/main/java/net/nemerosa/ontrack/jenkins/changelog/OntrackChangelogPublisher.java"}], "head" = "590f0f1bf1311a42cd03aee32147fbe876ce5747", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "c02639d77bdc60d01d58271ba5f49d69bd012577", "files" = [{"head_lines" = [[92, 92]], "path" = "src/main/java/net/nemerosa/ontrack/jenkins/OntrackBuildPropertySetter.java"}], "head" = "d46f1a7378da4cd331f70f4b62efbd106e763b14", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "1580a722b5aff8878248dc9fa63137fc3bd4cddf", "files" = [{"head_lines" = [[4, 4], [22, 24], [30, 33], [39, 48], [65, 72]], "path" = "src/main/java/net/nemerosa/ontrack/jenkins/OntrackDSLStep.java"}, {"head_lines" = [[2, 2]], "path" = "src/main/resources/net/nemerosa/ontrack/jenkins/OntrackDSLNotifier/config.jelly"}, {"head_lines" = [[2, 15]], "path" = "src/main/resources/net/nemerosa/ontrack/jenkins/OntrackDSLStep/config.jelly"}], "head" = "1a956486ad9f77936747ccda80d8e6f49642a8a5", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "905b1654c6a6c2a82be8a0a2a67c415744ee4d99", "files" = [{"head_lines" = [[3, 4], [6, 7], 
ecosystem = "maven"
family = "access_control"
fix = "7f0f806c18fdd6043103d848ba4c813cb805dd85"
id = "r-31c46498ce4be2d174a1a7f9"
instrument = {"bytes" = 1468, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "3ec46f46aa648c1301da97adbfa2ff8c78037fb4"
license_spdx = "MIT"
parent = "9235d26eea938649b73fac07b4c749838c0b0d7b"
post_cutoff = false
repository = "jenkinsci/ontrack-plugin"
slice = 1
url = "https://github.com/jenkinsci/ontrack-plugin.git"

[[repository]]
advisory = "GHSA-x949-7cm6-fm6p"
changes = [{"advisory" = "GHSA-x949-7cm6-fm6p", "base" = "7de643519d479a973fc68b8c45a721eb49945d9c", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "injection", "files" = [{"head_lines" = [[81, 82]], "path" = "readme.md"}, {"head_lines" = [[1, 1], [4, 4], [6, 6], [7, 7], [9, 9]], "path" = "src/lib/get-output-file-path.ts"}, {"head_lines" = [[15, 15], [18, 18], [20, 20], [60, 60], [75, 77]], "path" = "src/lib/md-to-pdf.ts"}, {"head_lines" = [[3, 3], [14, 14], [16, 16], [19, 22], [27, 27], [47, 47], [51, 51], [53, 58], [60, 60], [65, 65]], "path" = "src/lib/write-output.ts"}, {"head_lines" = [[108, 109]], "path" = "src/test/lib.spec.ts"}], "function" = "convertMdToPdf", "function_lines" = [14, 84], "head" = "bb466261ba28f283e01e01260a4de04c2c398c6d", "kind" = "vulnerability", "method" = "introducing", "path" = "src/lib/md-to-pdf.ts", "post_cutoff" = false}, {"base" = "47775c6a764b46a0f11432fbc7740ca988894266", "files" = [{"head_lines" = [[115, 115]], "path" = "test.js"}], "head" = "5db402decd1748a8eaf50e5317f4ba851852cf06", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "63ddd9681f58aca01b69f389842f651cde6cf879", "files" = [{"head_lines" = [[98, 98], [102, 103]], "path" = "src/cli.ts"}], "head" = "ca9fe3dd3877c02af7aa0f7f1ee67e99012e8a70", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "3019cec43985a399927ecf6fdf60e27d095f65c3", "files" = [{"head_lines" = [[14, 14], [19, 19], [24, 24], [28, 29]], "path" = "test.js"}], "head" = "08479d6982f8cb27e939d45e73fe821464837847", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "0b62710a51a8dd5c4d53204c6498378d621c3458", "files" = [{"head_lines" = [[15, 16]], "path" = "index.js"}, {"head_lines" = [[76, 76]], "path" = "markdown.css"}], "head" = "000a74c0f49c2f2d1dddbab7c6baed746b4ab177", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "56addfe2daba187c19a2e58e3c3e3120ab37040b", "files" = [{"head_lines" = [[74, 74], [76, 76]], "path" = "test.js"}, {"head_lines" = [[21, 22], [27, 28], [31, 39]], "path" = "util/helpers.js"}], "head" = "b83e9f1630078a14d17b1a0d7c28afbb10c4f6ee", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "d77ab207e71dcdad9cdd05b79141cec5089d6d65", "files" = [{"head_lines" = [[3, 3], [7, 7], [12, 22]], "path" = "lib/get-marked-with-highlighter.js"}], "head" = "46116886cf51bce4d6eeff25211ce5154d90f4d2", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "6333ed78daa1fbe4a50410ecb9322581aa0cac0b", "files" = [{"head_lines" = [[7, 9], [11, 11], [15, 18], [20, 20]], "path" = "test/api.spec.js"}], "head" = "b0ce9b6ddd68441fc935cefbe8f026700bdf460d", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "94e91bca097973d1aa8eccb1d131d3d9dc831a04", "files" = [{"head_lines" = [[10, 10], [111, 122]], "path" = "test.js"}, {"head_lines" = [[1, 16]], "path" = "util/is-url.js"}, {"head_lines" = [[3, 3], [38, 38]], "path" = "util/write-pdf.js"}], "head" = "e3a4a0c11436401d6032c8bc7561e64508f5cffd", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "d513317e71e16bacd04c1171d7409fe149b6d271", "files" = [{"head_lines" = [[1, 16]], "path" = "lib/is-http-url.js"}, {"head_lines" = [[1, 1]], "path" = "lib/is-url.js"}, {"head_lines" = [[4, 4], [39, 39]], "path" = "lib/write-pdf.js"}, {"head_lines" = [[11, 11], [116, 123]], "path" = "test.js"}], "head" = "2ed9d7b7450da949bc8a89e6d324d43abc35cf3c", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "a4a2d2911df53e15d7987438290fdb2a0c908c06", "files" = [{"head_lines" = [[4, 4]], "path" = ".gitignore"}, {"head_lines" = [[37, 37], [104, 104]], "path" = "cli.js"}, {"head_lines" = [[74, 78]], "path" = "lib/config.js"}, {"head_li
ecosystem = "npm"
family = "injection"
fix = "a716259c548c82fa1d3b14a3422e9100619d2d8a"
id = "r-33fb3d7cf06f13faa7330fa9"
instrument = {"bytes" = 4135, "files" = 1}
license_class = "permissive"
license_path = "license"
license_ref = "bb466261ba28f283e01e01260a4de04c2c398c6d"
license_spdx = "MIT"
parent = "a1044e0b6e9064970b6575fe3230d40c72b039ff"
post_cutoff = false
repository = "simonhaenisch/md-to-pdf"
slice = 1
url = "https://github.com/simonhaenisch/md-to-pdf.git"

[[repository]]
id = "r-341a63bc27b20e4928a8b135"
private = true
sha256 = "341a63bc27b20e4928a8b1358d081b5dfc9b2895751872e36fa5e69b94b2fc49"
slice = 1

[[repository]]
advisory = "GHSA-3rm2-h79c-8qw6"
changes = [{"advisory" = "GHSA-3rm2-h79c-8qw6", "base" = "c93e1cffbaef52e5951af6d2cfd261bb31aeaddf", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "output_encoding", "files" = [{"head_lines" = [[120, 120]], "path" = "README-CN.md"}, {"head_lines" = [[121, 121]], "path" = "README.md"}, {"head_lines" = [[18, 18], [350, 370]], "path" = "dev/Preview/index.tsx"}, {"head_lines" = [[66, 66]], "path" = "package.json"}, {"head_lines" = [[38, 39]], "path" = "packages/MdEditor/components/Icon/Icon.tsx"}, {"head_lines" = [[4, 4]], "path" = "packages/MdEditor/components/Icon/Str.ts"}, {"head_lines" = [[10, 11], [412, 412], [416, 416]], "path" = "packages/MdEditor/config.ts"}, {"head_lines" = [[35, 35], [37, 37], [39, 43], [46, 50]], "path" = "packages/MdEditor/layouts/Content/composition/useCopyCode.ts"}, {"head_lines" = [[17, 23], [71, 71], [118, 119]], "path" = "packages/MdEditor/layouts/Content/composition/useMarkdownIt.ts"}, {"head_lines" = [[10, 11], [14, 14], [21, 21], [63, 63], [68, 71], [88, 88], [90, 91], [145, 145], [147, 148]], "path" = "packages/MdEditor/layouts/Content/markdownIt/code/index.ts"}, {"head_lines" = [[10, 11]], "path" = "packages/index.ts"}, {"head_lines" = [[1476, 1479]], "path" = "yarn.lock"}], "function" = "initCopyEntry", "function_lines" = [12, 54], "head" = "c431fe7000a57f802a2c854f621b2493c10f3894", "kind" = "vulnerability", "method" = "introducing", "path" = "packages/MdEditor/layouts/Content/composition/useCopyCode.ts", "post_cutoff" = true}, {"base" = "0e4f05593ebdd655a3c5c6e2d8293b9caa8806af", "files" = [{"head_lines" = [[363, 364], [376, 376], [383, 383]], "path" = "MdEditor/layouts/Content/composition.ts"}], "head" = "5049538035c98b9b1e3cb67a1fc11c0acd2a7b64", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "cca4da4ea44c0765aa7dc7168907e4a2f1703e75", "files" = [{"head_lines" = [[1, 2], [5, 8]], "path" = "dev/Preview/index.less"}, {"head_lines" = [[55, 58]], "path" = "dev/Preview/index.tsx"}], "head" = "8786114ad561641e352eeb236deed0a3a856347b", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "abd852615786f802a2e859cd4238d2ed28faf87b", "files" = [{"head_lines" = [[5, 5], [48, 67]], "path" = "dev/Preview/index.tsx"}], "head" = "13878970f9064dd86ec53b7c5c3140ea497d085e", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "92142caf7c6b251d43975ddfcb937a83ab510c77", "files" = [{"head_lines" = [[4, 4], [7, 9], [32, 32], [37, 37], [45, 45], [54, 54], [60, 60], [71, 71], [76, 76], [85, 85], [92, 92], [99, 99], [106, 106], [113, 113], [120, 120], [127, 127], [134, 134], [146, 146], [155, 155], [161, 161], [170, 170], [179, 179], [185, 185], [196, 196]], "path" = "MdEditor/capi.ts"}], "head" = "057dd1b7a2f2bbf73b4bec12639ca6b6332ba80a", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "f09d72f4076f9826cad497e4c645120b159f935f", "files" = [{"head_lines" = [[6, 6], [296, 300]], "path" = "MdEditor/layouts/Toolbar/index.tsx"}, {"head_lines" = [[193, 226]], "path" = "MdEditor/utils/index.ts"}], "head" = "9d7ab655481c965965e6cc211fafcd3534fe74e4", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "dbbda36f5b7813651f79c4411bd4aabb44fbee6e", "files" = [{"head_lines" = [[35, 37], [94, 106], [116, 116], [131, 144]], "path" = "MdEditor/Editor.tsx"}, {"head_lines" = [[68, 70], [81, 85], [87, 87], [90, 90], [92, 92], [105, 105]], "path" = "MdEditor/layouts/Content/index.tsx"}, {"head_lines" = [[70, 83]], "path" = "MdEditor/layouts/Content/props.ts"}, {"head_lines" = [[384, 395]], "path" = "MdEditor/props.ts"}], "head" = "698d50d62ab903627415b2856ebfb6f561d5af36", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "bb33bbeaa3356fc8d62ea09b9d1d37e4f7cf8070", "files" = [{"head_lines" = [[48, 48]], "path" = "packages/MdEditor/layouts/Conte
ecosystem = "npm"
family = "output_encoding"
fix = "2c07360420e74087f5bc63032ab155d93e0a0b10"
id = "r-343df757059249557b2b3608"
instrument = {"bytes" = 2245, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "c431fe7000a57f802a2c854f621b2493c10f3894"
license_spdx = "MIT"
parent = "bea48ec0ba51c19deda9486eb06050b5b8f50b51"
post_cutoff = true
repository = "imzbf/md-editor-v3"
slice = 1
url = "https://github.com/imzbf/md-editor-v3.git"

[[repository]]
advisory = "GHSA-4qhp-652w-c22x"
changes = [{"advisory" = "GHSA-4qhp-652w-c22x", "base" = "03c40ce1a0e196e516e6f451bc2824fe0c654406", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {"unresolved_function" = 1}, "family" = "path", "files" = [{"head_lines" = [[3, 3], [113, 113], [120, 120]], "path" = "packages/jupyterlab-lsp/src/utils.ts"}, {"head_lines" = [[7, 7], [62, 78]], "path" = "py_src/jupyter_lsp/handlers.py"}, {"head_lines" = [[1, 1], [4, 4], [7, 15], [17, 17]], "path" = "py_src/jupyter_lsp/paths.py"}, {"head_lines" = [[3, 3], [5, 5], [7, 7], [9, 9], [14, 14], [17, 17], [20, 20], [22, 22], [24, 25], [32, 37]], "path" = "py_src/jupyter_lsp/serverextension.py"}, {"head_lines" = [[1, 3], [6, 23], [26, 26], [28, 28], [30, 32], [35, 38]], "path" = "py_src/jupyter_lsp/tests/test_paths.py"}], "function" = "normalized_uri", "function_lines" = [7, 17], "head" = "00759e435c9845db6b4d33344e997a898004c669", "kind" = "vulnerability", "method" = "introducing", "path" = "py_src/jupyter_lsp/paths.py", "post_cutoff" = false}, {"base" = "c781693444623db7ff1ea92895ea43a0830c1147", "files" = [{"head_lines" = [[83, 83], [191, 194]], "path" = "src/adapters/jupyterlab/jl_adapter.ts"}], "head" = "541a3774eee8b62a4d27c7a48c990afd9ceffecd", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "4c9a22c8966be614587b9c24a648d6be11e65016", "files" = [{"head_lines" = [[68, 70]], "path" = "src/adapters/notebook.ts"}], "head" = "e192de40907d59046ab0255bdc7504feb17199b7", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "ca1f87bb4be932b0004c1cc689b2e1d965441a27", "files" = [{"head_lines" = [[3, 3]], "path" = "package.json"}, {"head_lines" = [[443, 444]], "path" = "src/index.ts"}], "head" = "2623421b8a1e81fd89c4f60c2ebee2f14c985d03", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "bf6589b4c796f85cb16c24008b7e4b1de07c4647", "files" = [{"head_lines" = [[71, 71], [133, 133], [135, 135]], "path" = "packages/jupyterlab-lsp/src/adapters/jupyterlab/components/completion.ts"}], "head" = "08ee4f8ace41dd46400e088e4c5c0d0f5ba1023d", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "f49d14aa05d5bc087a40d33ee0667b34c128165f", "files" = [{"head_lines" = [[71, 71], [106, 106], [108, 108], [122, 131], [138, 138]], "path" = "src/completion.ts"}], "head" = "cd0e838f03de5997706e6137bb80973985696163", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "eb79664ad46ca063dfbdd73d0185cedca072a393", "files" = [{"head_lines" = [[13, 15]], "path" = "src/extractors/types.ts"}, {"head_lines" = [[6, 11]], "path" = "src/virtual/editor.ts"}, {"head_lines" = [[47, 47]], "path" = "src/virtual/editors/notebook.ts"}], "head" = "6282f23b097b5edd3e61b224fc2bcf87c7f9f560", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "ae51119952c9db26c6b1c07a565ec156b3b021d3", "files" = [{"head_lines" = [[1, 1]], "path" = "src/notebook_private.ts"}], "head" = "b28ea0f695c48817692a4007a51190c1aec347f9", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "e4535386de6feb59c32a23a0f44caf6ff0c0aee2", "files" = [{"head_lines" = [[8, 8], [11, 11], [22, 22], [38, 38], [99, 99], [118, 126], [177, 177], [183, 183], [186, 200], [205, 205], [359, 359]], "path" = "src/completion.ts"}, {"head_lines" = [[1, 1], [6, 12], [14, 14], [21, 21], [23, 24], [56, 106]], "path" = "src/connection.ts"}], "head" = "f8ceda8864000b547225655dd9c96f0e955a542d", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "558de0935b12ac2b25304074b91d1cc84b2c398e", "files" = [{"head_lines" = [[117, 117], [119, 119], [220, 221], [231, 273]], "path" = "src/adapters/codemirror.ts"}], "head" = "c36589ca0bb761ee9603a1e97b54446f9a22f323", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"b
ecosystem = "pip"
family = "path"
fix = "4ad12f204ad0b85580fc32137c647baaff044e95"
id = "r-378e918d7f0ca2af9ecd5442"
instrument = {"bytes" = 442, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "00759e435c9845db6b4d33344e997a898004c669"
license_spdx = "BSD-3-Clause"
parent = "1f1ddca8192a37754d33618de8a37f61ae1e007a"
post_cutoff = false
repository = "jupyter-lsp/jupyterlab-lsp"
slice = 1
url = "https://github.com/jupyter-lsp/jupyterlab-lsp.git"

[[repository]]
id = "r-390967d4024b58e337145010"
private = true
sha256 = "390967d4024b58e33714501041e0f717b6fbf5f6b3a6c04458f467371a9380c1"
slice = 1

[[repository]]
id = "r-3a916d5978e22fd94ceac840"
private = true
sha256 = "3a916d5978e22fd94ceac84031f0ed1f91b9a223d14e936b36f9687b247b2406"
slice = 1

[[repository]]
advisory = "GHSA-x8wg-4xgc-vr54"
changes = [{"advisory" = "GHSA-x8wg-4xgc-vr54", "base" = "a425d7ea0847eb287db2e057a4755296c6c05ba5", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {"unresolved_function" = 1}, "family" = "path", "files" = [{"head_lines" = [[35, 35], [71, 71], [147, 148], [182, 182], [200, 201], [204, 204]], "path" = "pyproject.toml"}, {"head_lines" = [[30, 30], [104, 104], [138, 141]], "path" = "src/banks/registries/directory.py"}], "function" = "_load", "function_lines" = [135, 141], "head" = "5e7093c9b3c2bbe2e0bc281f5a3602bbdabf00b9", "kind" = "vulnerability", "method" = "introducing", "path" = "src/banks/registries/directory.py", "post_cutoff" = true}, {"base" = "3c3e9990d1e6d1b27b178b470367c10e69347b76", "files" = [{"head_lines" = [[31, 31]], "path" = "src/banks/env.py"}, {"head_lines" = [[43, 43], [48, 48]], "path" = "src/banks/registries/file.py"}, {"head_lines" = [[23, 23]], "path" = "src/banks/registry.py"}], "head" = "28348b73221018fced7751e0a7699c709fc2b898", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "ecbebda5989fb619d73df11025b12ad46db76566", "files" = [{"head_lines" = [[5, 5]], "path" = "src/banks/__init__.py"}], "head" = "c2aa2d4719b13c8bc56755b86445488a30e7204e", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "51be2c70e5ced97340ed71c2567be941808334d7", "files" = [{"head_lines" = [[175, 175]], "path" = "pyproject.toml"}, {"head_lines" = [[4, 4], [12, 29]], "path" = "src/banks/env.py"}], "head" = "28018b68cad21149281aa43b07ae1f4ae934ca85", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "af8bf9f6c736be5dafcbfe5b479eb50c11712e5b", "files" = [{"head_lines" = [[20, 20], [179, 215]], "path" = "README.md"}, {"head_lines" = [[1, 5]], "path" = "src/banks/templates/banks_macros.jinja"}, {"head_lines" = [[1, 7]], "path" = "src/banks/templates/run_prompt.jinja"}, {"head_lines" = [[43, 43]], "path" = "tests/test_default_templates.py"}, {"head_lines" = [[1, 13]], "path" = "tests/test_run_prompt.py"}], "head" = "0007626f3b16fe34056559854b44d3fd967fc1eb", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "7dd263a0bcd10d453aa1c913d117df9e636d920b", "files" = [{"head_lines" = [[8, 8], [11, 11]], "path" = "src/banks/env.py"}, {"head_lines" = [[1, 25]], "path" = "src/banks/loader.py"}], "head" = "f988eeef72af5adc34b0dfc5a6fe956d98674576", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "6c5481496079efd5470b4c7bdb2aec5e00c26333", "files" = [{"head_lines" = [[6, 6], [13, 13]], "path" = "src/banks/env.py"}, {"head_lines" = [[5, 5], [7, 7]], "path" = "src/banks/extensions/__init__.py"}, {"head_lines" = [[1, 51]], "path" = "src/banks/extensions/inference_endpoint.py"}], "head" = "7d6d7aef5339a1682b6b148209fb94e62c171fa0", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "0ded5a5f74daa5fe777ddfdc2d137958c6a4e033", "files" = [{"head_lines" = [[32, 32]], "path" = "src/banks/config.py"}, {"head_lines" = [[10, 10]], "path" = "tests/test_env.py"}, {"head_lines" = [[16, 16], [19, 19]], "path" = "tests/test_loader.py"}], "head" = "c15f8492ad0fc29a19c3fcb12d57597c784e1b90", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "6c337857163c9b93e668102c2e19fc6a8708dcea", "files" = [{"head_lines" = [[19, 19], [164, 164], [166, 174], [177, 177]], "path" = "src/banks/types.py"}], "head" = "ca2950a88655e869cb1b3049990bb2d6dfd71285", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 1}, {"base" = "4b8d3a0189f69a5c0607333e53b8819f518824b0", "files" = [{"head_lines" = [[29, 29]], "path" = "pyproject.toml"}, {"head_lines" = [[2, 2], [43, 43], [48, 50]], "path" = "src/banks/extensions/docs.py"}, {"head_lines" = [[10, 10], [19, 19]], "path" = "src/banks/extensions/generate.py"}, {"head_lines" = [[8, 8], [13, 13], [
ecosystem = "pip"
family = "path"
fix = "a215f6d779966945c56e0af5abed1ae5916fd9d3"
id = "r-3afcafba3bdb3ea13d54035f"
instrument = {"bytes" = 132, "files" = 1}
license_class = "permissive"
license_path = "LICENSE.txt"
license_ref = "5e7093c9b3c2bbe2e0bc281f5a3602bbdabf00b9"
license_spdx = "MIT"
parent = "3ab65baca00fd3917a12ca1fcfaab03176782bc4"
post_cutoff = true
repository = "masci/banks"
slice = 1
url = "https://github.com/masci/banks.git"

[[repository]]
id = "r-3f225a440808e600449a4d3e"
private = true
sha256 = "3f225a440808e600449a4d3e095ff7d15a48029d6321ffedaf8e8d038d644989"
slice = 1

[[repository]]
id = "r-420935e9a1fde8c7f71fda39"
private = true
sha256 = "420935e9a1fde8c7f71fda3987c53dbbd09aa64ef11b87930c3f6c5933576701"
slice = 1

[[repository]]
id = "r-449e0c7a21e0f4033ed863a9"
private = true
sha256 = "449e0c7a21e0f4033ed863a945994499ca49e9b3560594240a4924c9e3bce747"
slice = 1

[[repository]]
advisory = "GHSA-mwwr-p57h-56pf"
changes = [{"advisory" = "GHSA-mwwr-p57h-56pf", "base" = "aab13129aff308499c64fca02a1589a386f0f25a", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "access_control", "files" = [{"head_lines" = [[69, 220]], "path" = "src/utils/__tests__/allowed-keywords.test.ts"}, {"head_lines" = [[10, 13], [18, 71], [74, 78], [80, 80], [87, 87], [88, 88], [92, 120]], "path" = "src/utils/allowed-keywords.ts"}], "function" = "checkReadOnly", "function_lines" = [80, 121], "head" = "4236ba4923bcf9ec0c01942cb49bd70a50ca4766", "kind" = "vulnerability", "method" = "introducing", "path" = "src/utils/allowed-keywords.ts", "post_cutoff" = true}, {"base" = "920549b50eaffd9623860ff6ec8507b2fec119c0", "files" = [{"head_lines" = [[48, 49]], "path" = "src/index.ts"}], "head" = "2f2f2ff9ff3e0c4a633d75fe64e9b07ce885b84f", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "513c5f3d53ab55ee237e60ef434a5a341b7077ca", "files" = [{"head_lines" = [[10, 10]], "path" = "package.json"}, {"head_lines" = [[20, 39], [42, 42], [44, 44], [51, 51]], "path" = "src/index.ts"}], "head" = "f2a9176a0c38047f8f028f7181b0357252b73485", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "9c8a2811234eea167b2a438db75c3755dab11f37", "files" = [{"head_lines" = [[8, 8], [28, 28], [39, 46], [159, 160], [170, 174]], "path" = "src/index.ts"}], "head" = "513c5f3d53ab55ee237e60ef434a5a341b7077ca", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "b8a23c8d22eff30906711f920da6b8e76e22749d", "files" = [{"head_lines" = [[76, 77], [84, 84], [105, 105], [109, 109], [139, 139], [141, 141]], "path" = "src/tools/__tests__/execute-sql.test.ts"}], "head" = "13520064ad1cd27f4722d0bc5fe7e9f33f5ba7ce", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "3d6301277c442c973a8b410fac964fa5e6f67dae", "files" = [{"head_lines" = [[153, 153]], "path" = "src/tools/__tests__/execute-sql.test.ts"}], "head" = "cd4a29faa065d093721a9eda3fda931362eb7a12", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "8bb1aadb5872cc4e628fd15554c7f245f643be38", "files" = [{"head_lines" = [[8, 8], [133, 133], [143, 143], [146, 150], [153, 153], [270, 270], [273, 275]], "path" = "frontend/src/components/views/RequestView.tsx"}], "head" = "31d5a04b0faa5ec06bb17c6d0400d229966cfa70", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 1}, {"base" = "69287af62cd7df204d4b4a63bdaa59ba5ddecbc4", "files" = [{"head_lines" = [[33, 34]], "path" = "package.json"}, {"head_lines" = [[1, 58]], "path" = "scripts/smoke-test-build.mjs"}], "head" = "aab13129aff308499c64fca02a1589a386f0f25a", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 1}, {"base" = "7b52f11bd28b5c9897245aeaa800842731f47f3e", "files" = [{"head_lines" = [[1, 1], [9, 10], [15, 56], [58, 73], [76, 76], [122, 135], [140, 141], [165, 165], [175, 177], [187, 187], [197, 202]], "path" = "frontend/src/components/tool/ResultsTable.tsx"}, {"head_lines" = [[21, 22], [100, 102], [106, 106], [109, 109], [112, 112], [116, 118], [120, 121], [127, 127], [231, 237]], "path" = "frontend/src/components/views/ToolDetailView.tsx"}], "head" = "f1248241e001b98c04a8417d9d4a4c5a239ad8a1", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 1}, {"base" = "648a376d99467da878a6ca2629e6741f609e6824", "files" = [{"head_lines" = [[2, 2], [55, 56], [68, 69], [85, 86], [103, 104], [116, 117], [125, 126], [138, 139], [158, 159], [172, 173], [186, 187], [198, 199], [214, 215], [228, 229], [243, 244], [255, 256]], "path" = "src/tools/__tests__/execute-sql.test.ts"}, {"head_lines" = [[10, 10], [78, 80], [82, 87], [89, 95], [97, 98], [100, 105], [107, 111]], "path" = "src/tools/execute-sql.ts"}, {"head_lines" = [[2, 5], [8, 8], [13, 26], [28, 41], [43, 50]], "path" = "src/tools/index.ts"}, {"h
ecosystem = "npm"
family = "access_control"
fix = "872bb338f7d31f6afe517a076ac3e3edafaaaf08"
id = "r-4c72d5ac8fc7c1c45483b4ec"
instrument = {"bytes" = 1949, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "4236ba4923bcf9ec0c01942cb49bd70a50ca4766"
license_spdx = "MIT"
parent = "d65c6b424e9d10678fb6f7dda93fba180d7baff9"
post_cutoff = true
repository = "bytebase/dbhub"
slice = 1
url = "https://github.com/bytebase/dbhub.git"

[[repository]]
advisory = "GHSA-8vwh-pr89-4mw2"
changes = [{"advisory" = "GHSA-8vwh-pr89-4mw2", "base" = "6d27eede84bed499b5baaf720a14ccec7f6bb9c9", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "injection", "files" = [{"head_lines" = [[7, 9], [21, 21], [23, 23]], "path" = "src/Livewire/Concerns/RemembersQueries.php"}], "function" = "remember", "function_lines" = [21, 30], "head" = "37f64394258d7e690667010cc587c4ec1bc95a83", "kind" = "vulnerability", "method" = "introducing", "path" = "src/Livewire/Concerns/RemembersQueries.php", "post_cutoff" = false}, {"base" = "9ab920b5894582698669cc9c0b7e8b3aa74465d5", "files" = [{"head_lines" = [[12, 12]], "path" = "src/Recorders/Concerns/Groups.php"}, {"head_lines" = [[13, 13]], "path" = "src/Recorders/Concerns/Ignores.php"}, {"head_lines" = [[15, 15], [26, 26]], "path" = "src/Recorders/Concerns/Sampling.php"}, {"head_lines" = [[12, 12]], "path" = "src/Recorders/Concerns/Thresholds.php"}], "head" = "6d27eede84bed499b5baaf720a14ccec7f6bb9c9", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "f31d48178313e2922d49dfb54cb1332f173afc28", "files" = [{"head_lines" = [[2, 2]], "path" = "phpstan-baseline.neon"}, {"head_lines" = [[250, 250]], "path" = "src/Pulse.php"}], "head" = "276264c112765501394c21b2357842ac72c8ff6d", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "4d3b6f766c579ee56b8da10f3402157d71cbf7a3", "files" = [{"head_lines" = [[25, 25]], "path" = "resources/views/components/scroll.blade.php"}, {"head_lines" = [[36, 40]], "path" = "tailwind.config.js"}], "head" = "05ffea026370ef8b7bd573feb7653ef4ba9e685a", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "bf5ec22f61df839b0910c29268ff9823d870f8a2", "files" = [{"head_lines" = [[137, 137]], "path" = "config/pulse.php"}], "head" = "06b8e35de8de58d550e3d1d7b75dbd75ced7ef38", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "ea9e3a4ed68b3a553fc74272c484e6163affdbdd", "files" = [{"head_lines" = [[140, 140], [142, 142]], "path" = "config/pulse.php"}], "head" = "d60f11b7dc3f2237b46f89cb3b5905efa10b2558", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "3bde2534b6facdef7613f76de20562a38acfe760", "files" = [{"head_lines" = [[87, 87], [89, 89]], "path" = "src/Pulse.php"}, {"head_lines" = [[2, 2], [5, 5], [13, 13], [14, 14], [17, 17], [84, 85], [118, 119]], "path" = "tests/Feature/HandleExceptionTest.php"}, {"head_lines" = [[2, 2], [14, 14], [15, 15], [125, 126], [159, 160]], "path" = "tests/Feature/HandleQueryTest.php"}, {"head_lines" = [[55, 56]], "path" = "tests/Pest.php"}], "head" = "26f7ff42c67e7f2e1769da694865c0fabe33a01d", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "3d88255a3a0389fa5cf71c6b922e86defa35ae8b", "files" = [{"head_lines" = [[85, 89], [477, 494]], "path" = "src/Pulse.php"}, {"head_lines" = [[99, 109]], "path" = "src/PulseServiceProvider.php"}], "head" = "889bb44d281a689c5b769862db85e71722e89816", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "413efa52c4edbd61cc2b76d9c39aa98a22beebff", "files" = [{"head_lines" = [[5, 5], [8, 8]], "path" = "src/Livewire/Cache.php"}, {"head_lines" = [[8, 8], [9, 9]], "path" = "src/Queries/CacheKeyInteractions.php"}, {"head_lines" = [[16, 16], [21, 21], [26, 26], [31, 31], [36, 36], [41, 41], [46, 46], [51, 51], [61, 61], [66, 66], [76, 76], [81, 81]], "path" = "tests/Feature/Queries/CacheKeyInteractionsTest.php"}], "head" = "405fc2042dfc159e9f177c9aa50cdf63491d78bf", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "d5a99db0de5a8a606cd23f945c2f32f7b2115c0c", "files" = [{"head_lines" = [[34, 41]], "path" = "config/pulse.php"}, {"head_lines" = [[1, 1]], "path" = "dist/pulse.css"}, {"head_lines" = [[1, 1], [35, 35], [37, 37], [39, 42], [44, 44], [47, 50], 
ecosystem = "composer"
family = "injection"
fix = "d1a5bf2eca36c6e3bedb4ceecd45df7d002a1ebc"
id = "r-4cdac7b91b85be663ea0ff3a"
instrument = {"bytes" = 8437, "files" = 1}
license_class = "permissive"
license_path = "LICENSE.md"
license_ref = "37f64394258d7e690667010cc587c4ec1bc95a83"
license_spdx = "MIT"
parent = "f8dc1460ae4f361a35cb78efd336a582f01ea2ce"
post_cutoff = false
repository = "laravel/pulse"
slice = 1
url = "https://github.com/laravel/pulse.git"

[[repository]]
advisory = "GHSA-pgr8-jg6h-8gw6"
changes = [{"advisory" = "GHSA-pgr8-jg6h-8gw6", "base" = "bfaf8ef1b0e65cfd2afe158a400e6cc968a7973c", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "output_encoding", "files" = [{"head_lines" = [[1, 2], [5, 11], [13, 16]], "path" = ".babelrc"}, {"head_lines" = [[11, 13]], "path" = ".eslintignore"}, {"head_lines" = [[20, 37]], "path" = "client/components/CheckboxList.jsx"}, {"head_lines" = [[25, 26], [28, 31], [46, 46], [49, 49], [109, 128]], "path" = "client/components/ModulesTreemap.jsx"}, {"head_lines" = [[8, 14], [16, 29], [31, 39]], "path" = "client/viewer.jsx"}, {"head_lines" = [[1, 1]], "path" = "gulpfile.babel.js"}, {"head_lines" = [[26, 27], [45, 46], [52, 53], [55, 55]], "path" = "package.json"}, {"head_lines" = [[28, 28], [83, 95]], "path" = "src/BundleAnalyzerPlugin.js"}, {"head_lines" = [[3, 3], [5, 5], [25, 25], [35, 35], [51, 51], [56, 60], [62, 62], [64, 72], [74, 98]], "path" = "src/viewer.js"}, {"head_lines" = [[2, 4]], "path" = "test/.gitignore"}, {"head_lines" = [[5, 5], [7, 8], [31, 31], [35, 45], [49, 49]], "path" = "webpack.config.js"}, {"head_lines" = [[259, 259], [301, 301], [392, 392], [396, 396], [413, 413], [421, 421], [429, 429], [442, 442], [452, 452], [466, 466], [473, 473], [479, 479], [486, 486], [492, 492], [506, 506], [514, 514], [523, 523], [531, 531], [539, 539], [546, 546], [557, 557], [570, 570], [584, 584], [590, 590], [598, 598], [606, 606], [621, 621], [626, 626], [634, 636], [639, 640], [643, 649], [651, 657], [659, 659], [661, 666], [840, 840], [910, 911], [961, 961], [1152, 1154], [1158, 1159], [1161, 1163], [1165, 1165], [1168, 1170], [1346, 1347], [2334, 2339], [2488, 2488], [3555, 3556], [3558, 3562], [4198, 4203], [4215, 4215], [4282, 4282], [4737, 4740], [4944, 4945], [4947, 4947], [4978, 4984]], "path" = "yarn.lock"}], "function" = "chartData", "function_lines" = [51, 51], "head" = "279bb2638f1cddf04b319966c71565c48d874f3a", "kind" = "vulnerability", "method" = "introducing", "path" = "src/viewer.js", "post_cutoff" = false}, {"base" = "c2feb7af5b2e6c1d5f6517722fc31262e8fd4bf6", "files" = [{"head_lines" = [[19, 19]], "path" = "src/BundleAnalyzerPlugin.js"}], "head" = "43f323b48dc867c18ca218a1ce6ac4b4475b65bb", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "876bb3a2ea413ef5e38431974c36fb4f15232ae6", "files" = [{"head_lines" = [[3, 3], [63, 65], [84, 84]], "path" = "src/bin/analyzer.js"}], "head" = "a9dd7a95bca0bcb15b75534d30bc330b28e85c6e", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "0ce95e5ad155670a8b7f7085684185849acf70a6", "files" = [{"head_lines" = [[15, 18]], "path" = "src/analyzer.js"}], "head" = "0d03f0ad184c5c34b9f3e71d2404e8b6777f05bb", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "59fc731bb2774dfc3b4b0d795b5bbd9d78abb71d", "files" = [{"head_lines" = [[1, 9]], "path" = "test/bundles/validCommonBundleWithDedupePlugin.modules.json"}, {"head_lines" = [[1, 1]], "path" = "test/bundles/validCommonBundleWithDedupePlugin.sizes.json"}, {"head_lines" = [[1, 7]], "path" = "test/bundles/validCommonBundleWithModulesAsArray.modules.json"}, {"head_lines" = [[1, 1]], "path" = "test/bundles/validCommonBundleWithModulesAsArray.sizes.json"}, {"head_lines" = [[1, 7]], "path" = "test/bundles/validCommonBundleWithModulesAsObject.modules.json"}, {"head_lines" = [[1, 1]], "path" = "test/bundles/validCommonBundleWithModulesAsObject.sizes.json"}, {"head_lines" = [[1, 6]], "path" = "test/bundles/validExtraBundleWithModulesAsArray.modules.json"}, {"head_lines" = [[1, 1]], "path" = "test/bundles/validExtraBundleWithModulesAsArray.sizes.json"}, {"head_lines" = [[1, 8]], "path" = "test/bundles/validUmdLibraryBundleWithModulesAsArray.modules.json"}, {"head_lines" = [[1, 1]], "path" = "test/bundles/validUmdLibraryBundleWithModulesAsArray.sizes.json"}, {"head_lines" = [[8, 12], [14, 19], [21, 21], [23, 23]], "path" = "test/parseUtils.js"},
ecosystem = "npm"
family = "output_encoding"
fix = "20f2b4c553ee343f491faf63e39427fba9908c7c"
id = "r-4d83f5a653133747a24e119e"
instrument = {"bytes" = 874, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "279bb2638f1cddf04b319966c71565c48d874f3a"
license_spdx = "MIT"
parent = "9836649e870ef2e0a19da1ad4b17bf92c645e536"
post_cutoff = false
repository = "webpack/webpack-bundle-analyzer"
slice = 1
url = "https://github.com/webpack/webpack-bundle-analyzer.git"

[[repository]]
advisory = "GHSA-798p-78g2-v556"
changes = [{"advisory" = "GHSA-798p-78g2-v556", "base" = "fb685c0c314cc00bd59904277e528f398e616bb1", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "untrusted_destination", "files" = [{"head_lines" = [[3, 8]], "path" = "LOG.md"}, {"head_lines" = [[4, 4]], "path" = "manifest.json"}, {"head_lines" = [[3, 3], [9, 9]], "path" = "package-lock.json"}, {"head_lines" = [[3, 3]], "path" = "package.json"}, {"head_lines" = [[22, 22]], "path" = "src/server.ts"}, {"head_lines" = [[299, 315]], "path" = "src/tools/package.ts"}, {"head_lines" = [[223, 223]], "path" = "src/worker.ts"}], "function" = "createServer", "function_lines" = [19, 24], "head" = "6cb16d5a32df83b640070392329633b3f315564e", "kind" = "vulnerability", "method" = "introducing", "path" = "src/server.ts", "post_cutoff" = true}, {"base" = "cacbdce49f8940dcbdb998988b71a450113dfd5b", "files" = [{"head_lines" = [[3, 3], [6, 8]], "path" = "src/types.ts"}], "head" = "9ba207cef434ef9fac78d0f7b9a4026e5c2a52b2", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "ea1a9841bfa680764a29dddd9ee97258ba37f52d", "files" = [{"head_lines" = [[3, 10]], "path" = "LOG.md"}, {"head_lines" = [[3, 3]], "path" = "package.json"}, {"head_lines" = [[148, 148], [162, 162]], "path" = "src/README.md"}, {"head_lines" = [[82, 93]], "path" = "src/portals.json"}, {"head_lines" = [[48, 50], [99, 99]], "path" = "src/tools/datastore.ts"}, {"head_lines" = [[347, 347]], "path" = "src/tools/group.ts"}, {"head_lines" = [[395, 395]], "path" = "src/tools/organization.ts"}, {"head_lines" = [[610, 610], [790, 790], [1010, 1010]], "path" = "src/tools/package.ts"}], "head" = "40aff756ed87b3221d38b572085c06f969667a84", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "f533ba067ca31c6a92987b11109a4b63174d8878", "files" = [{"head_lines" = [[48, 54], [83, 83], [132, 143], [175, 175], [180, 180], [191, 191]], "path" = "src/README.md"}, {"head_lines" = [[101, 113]], "path" = "src/portals.json"}, {"head_lines" = [[11, 11], [297, 320], [328, 330], [340, 341], [723, 724]], "path" = "src/tools/package.ts"}, {"head_lines" = [[23, 23], [100, 104]], "path" = "src/utils/portal-config.ts"}], "head" = "4c0120f2d8b63519e62c1b272e5f70f1757af3e9", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "b1fd273230c3889f06728becaceb5015a4455c8d", "files" = [{"head_lines" = [[5, 10]], "path" = "LOG.md"}, {"head_lines" = [[15, 17]], "path" = "src/portals.json"}, {"head_lines" = [[11, 11], [552, 576], [589, 589]], "path" = "src/tools/package.ts"}, {"head_lines" = [[7, 10], [16, 16], [69, 73]], "path" = "src/utils/portal-config.ts"}], "head" = "9705f3074c0518f7b91ac66bf9a5dad1fa746634", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "7f14290e1dd39465d8d5162e2bf9031b86fa42ce", "files" = [{"head_lines" = [[104, 105], [204, 210], [213, 216], [242, 242], [244, 244], [250, 250], [254, 254], [261, 266], [291, 297], [301, 303]], "path" = "src/resources/datastore-table-ui.ts"}], "head" = "6203ae19e7e77ba415bd77f74538b9a409aad97d", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "f046bcbb94cbcd3de081d36596ac492f23c56d54", "files" = [{"head_lines" = [[1, 37]], "path" = "openspec/changes/archive/2026-02-28-add-ckan-catalog-stats/proposal.md"}, {"head_lines" = [[1, 29]], "path" = "openspec/changes/archive/2026-02-28-add-ckan-catalog-stats/specs/ckan-catalog-stats/spec.md"}, {"head_lines" = [[1, 26]], "path" = "openspec/changes/archive/2026-02-28-add-ckan-catalog-stats/tasks.md"}, {"head_lines" = [[13, 13], [33, 33]], "path" = "src/server.ts"}, {"head_lines" = [[208, 301]], "path" = "src/tools/analyze.ts"}, {"head_lines" = [[1, 30]], "path" = "tests/fixtures/responses/catalog-stats.json"}, {"head_lines" = [[3, 3], [6, 6], [165, 212]], "path" = "tests/integration/analyze.test.ts"}], "head" = "cf3022d3c924540e40f135a8d056a9
ecosystem = "npm"
family = "untrusted_destination"
fix = "bb7439b553b9f965adc3d43bcd415c42eebe2f40"
id = "r-4fb8c45f7036891c156b9495"
instrument = {"bytes" = 5412, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "6cb16d5a32df83b640070392329633b3f315564e"
license_spdx = "MIT"
parent = "129ba172ec15429347ea1faf5c919af730720370"
post_cutoff = true
repository = "ondata/ckan-mcp-server"
slice = 1
url = "https://github.com/ondata/ckan-mcp-server.git"

[[repository]]
id = "r-526603aa7725b36a1db022ec"
private = true
sha256 = "526603aa7725b36a1db022ec88f664256c7600c203219a4b32d4b5158f09ba58"
slice = 1

[[repository]]
id = "r-54feaf100f84e60b1b25e1da"
private = true
sha256 = "54feaf100f84e60b1b25e1da02de63beed2d10bc0c35c36965ea7a2896f83212"
slice = 1

[[repository]]
id = "r-553190e14c064c05fd2d4ff1"
private = true
sha256 = "553190e14c064c05fd2d4ff13a1f1a37b0c977184ae64333e62656589b6d55a5"
slice = 1

[[repository]]
advisory = "GHSA-v92f-jx6p-73rx"
changes = [{"advisory" = "GHSA-v92f-jx6p-73rx", "base" = "f292a07aa5b7ef1c19d970f8163ff5f1241926cf", "bias" = "Pessimistic lower bound: the flaw may already exist in base, so a delta hook can correctly stay quiet.", "fallback_reasons" = {"size_cap" = 5, "unresolved_function" = 1}, "family" = "injection", "files" = [{"head_lines" = [[22, 22], [317, 317], [324, 324]], "path" = "jt-bandmerge/src/main/java/it/geosolutions/jaiext/bandmerge/BandMergeOpImage.java"}, {"head_lines" = [[21, 21], [446, 446]], "path" = "jt-bandmerge/src/main/java/it/geosolutions/jaiext/bandmerge/ExtendedBandMergeOpImage.java"}, {"head_lines" = [[27, 27], [47, 47], [58, 58], [99, 99], [101, 114], [116, 116], [332, 359]], "path" = "jt-colorindexer/src/main/java/it/geosolutions/jaiext/colorindexer/Quantizer.java"}, {"head_lines" = [[22, 22], [35, 36], [39, 39], [52, 63], [165, 198]], "path" = "jt-colorindexer/src/test/java/it/geosolutions/jaiext/colorindexer/ColorIndexerTest.java"}, {"head_lines" = [], "path" = "jt-colorindexer/src/test/resources/transparent_sample.png"}, {"head_lines" = [[141, 145], [161, 161], [177, 179], [299, 299]], "path" = "jt-jiffle/jt-jiffle-language/src/main/antlr4/it/geosolutions/jaiext/jiffle/parser/Jiffle.g4"}, {"head_lines" = [[217, 217], [437, 437], [555, 557]], "path" = "jt-jiffle/jt-jiffle-language/src/main/java/it/geosolutions/jaiext/jiffle/Jiffle.java"}, {"head_lines" = [[5, 5], [15, 15], [39, 39], [54, 54], [62, 62], [65, 65], [67, 68], [79, 79], [86, 86], [117, 117], [124, 124], [129, 129], [140, 140], [151, 151], [155, 155], [169, 169], [179, 179], [195, 195], [205, 205], [214, 214], [222, 222], [226, 226], [244, 254], [262, 262], [266, 266], [278, 278], [281, 281], [302, 302], [304, 304], [316, 316], [319, 320], [323, 325], [327, 327], [331, 331], [336, 337], [342, 342], [351, 351], [353, 353], [357, 357], [361, 361], [365, 365], [369, 369], [405, 405], [410, 410], [414, 416], [418, 418], [433, 433]], "path" = "jt-jiffle/jt-jiffle-language/src/main/java/it/geosolutions/jaiext/jiffle/parser/AbstractModelWorker.java"}, {"head_lines" = [[101, 103]], "path" = "jt-jiffle/jt-jiffle-language/src/main/java/it/geosolutions/jaiext/jiffle/parser/Errors.java"}, {"head_lines" = [[51, 51], [175, 182], [220, 220], [231, 231], [251, 251], [257, 257], [259, 259]], "path" = "jt-jiffle/jt-jiffle-language/src/main/java/it/geosolutions/jaiext/jiffle/parser/ExpressionWorker.java"}, {"head_lines" = [[1, 114]], "path" = "jt-jiffle/jt-jiffle-language/src/main/java/it/geosolutions/jaiext/jiffle/parser/RepeatedReadOptimizer.java"}, {"head_lines" = [[4, 4], [8, 8], [10, 10], [18, 41], [60, 60], [67, 67], [81, 81], [90, 90], [99, 99], [114, 114], [123, 123], [126, 126], [128, 129], [135, 136], [138, 139], [143, 143], [148, 148], [155, 159], [164, 165], [168, 168], [172, 172], [174, 174], [176, 176], [183, 183], [198, 199], [201, 201], [217, 217], [226, 230], [235, 235], [237, 237], [239, 239], [243, 244], [248, 251], [255, 258], [260, 260], [271, 293], [296, 296], [315, 315], [317, 317], [331, 331], [337, 337], [342, 342], [355, 355], [363, 363], [383, 383], [390, 390], [403, 403], [405, 413]], "path" = "jt-jiffle/jt-jiffle-language/src/main/java/it/geosolutions/jaiext/jiffle/parser/RuntimeModelWorker.java"}, {"head_lines" = [[161, 161], [195, 196], [221, 224]], "path" = "jt-jiffle/jt-jiffle-language/src/main/java/it/geosolutions/jaiext/jiffle/parser/VarWorker.java"}, {"head_lines" = [[59, 59], [78, 80], [118, 121]], "path" = "jt-jiffle/jt-jiffle-language/src/main/java/it/geosolutions/jaiext/jiffle/parser/node/GetSourceValue.java"}, {"head_lines" = [[1, 76]], "path" = "jt-jiffle/jt-jiffle-language/src/main/java/it/geosolutions/jaiext/jiffle/parser/node/ImageProperty.java"}, {"head_lines" = [[51, 51], [55, 55], [63, 63], [74, 75], [81, 81], [202, 202], [218, 220], [225, 225]], "path" = "jt-jiffle/jt-jiffle-language/src/main/java/it/geosolutions/jaiext/jiffle/parser/node/Script.java"}, {"head_lines" = [[60, 60], [70, 75], [82, 82], [95, 101], [103, 109], [115, 121]], "path" = "jt-jiffle/jt-jiffle-language/src/main/java/it/geosolutions/jaiext/j
ecosystem = "maven"
family = "injection"
fix = "cb1d6565d38954676b0a366da4f965fef38da1cb"
id = "r-576acb2b3b8e2d2ee40b4ba5"
instrument = {"bytes" = 314212, "files" = 1}
license_class = "permissive"
license_path = "LICENSE.txt"
license_ref = "8d2ab594dc3295c5c6eabb7da3568f734521bf2d"
license_spdx = "Apache-2.0"
parent = "8d2ab594dc3295c5c6eabb7da3568f734521bf2d"
post_cutoff = false
repository = "geosolutions-it/jai-ext"
slice = 1
url = "https://github.com/geosolutions-it/jai-ext.git"

[[repository]]
id = "r-5925939dfc40a5047412c478"
private = true
sha256 = "5925939dfc40a5047412c4789924e786dda1bd7f9c91385b0f75012e4c8b6418"
slice = 1

[[repository]]
advisory = "GHSA-6pw3-h7xf-x4gp"
changes = [{"advisory" = "GHSA-6pw3-h7xf-x4gp", "base" = "7e9101ff49099220b37fa53ed7c90cdd224a7882", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {"size_cap" = 6}, "family" = "output_encoding", "files" = [{"head_lines" = [[8, 21]], "path" = "CHANGELOG.md"}, {"head_lines" = [[8, 8], [10, 10], [28, 28], [32, 32], [34, 34], [164, 165]], "path" = "blacksheep/messages.py"}, {"head_lines" = [[179, 179]], "path" = "blacksheep/messages.pyi"}, {"head_lines" = [[7, 7], [10, 10], [30, 30], [34, 34], [36, 36], [182, 182], [187, 188]], "path" = "blacksheep/messages.pyx"}, {"head_lines" = [[329, 335]], "path" = "blacksheep/server/bindings.py"}, {"head_lines" = [[1, 91]], "path" = "blacksheep/settings/encodings.py"}, {"head_lines" = [[26, 26]], "path" = "pyproject.toml"}, {"head_lines" = [[1, 1]], "path" = "requirements.pypy.txt"}, {"head_lines" = [[1, 1]], "path" = "requirements.txt"}, {"head_lines" = [[638, 653]], "path" = "tests/test_requests.py"}], "function" = "test_request_charset", "function_lines" = [651, 653], "head" = "6801abe96ae0b1797b735d62c965c7aff3704cee", "kind" = "vulnerability", "method" = "introducing", "path" = "tests/test_requests.py", "post_cutoff" = false}, {"base" = "486f04ba2045f31dd3e188f52c45a275eb150967", "files" = [{"head_lines" = [[14, 14], [159, 165]], "path" = "blacksheep/server/controllers.py"}], "head" = "1c4db01b36bcc4333330c75a07555b9a60cc9a8e", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "f7ede5cbb5fd43688ab7df8054a7f17b4837a54f", "files" = [{"head_lines" = [[14, 14]], "path" = "blacksheep/connection.pxd"}, {"head_lines" = [[20, 20], [105, 105]], "path" = "blacksheep/connection.pyx"}, {"head_lines" = [[29, 30], [131, 131]], "path" = "blacksheep/headers.pyx"}, {"head_lines" = [[166, 173], [281, 281], [328, 331], [336, 336]], "path" = "blacksheep/server/application.py"}, {"head_lines" = [[1, 11]], "path" = "profiling.sh"}], "head" = "84846ec55a071adad3c37df073bd9e870a25ad75", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "df004393966359e7cac9940203ad854981fe1279", "files" = [{"head_lines" = [[76, 76], [82, 82]], "path" = "blacksheep/server/handlers.py"}, {"head_lines" = [[732, 732], [743, 743], [745, 745], [755, 755], [781, 781], [855, 855], [866, 866], [868, 868], [878, 878], [885, 885], [889, 889], [891, 891], [902, 902], [907, 909], [913, 913], [915, 916], [924, 924], [935, 935], [937, 937], [946, 946], [959, 959], [961, 961], [970, 970], [984, 984], [986, 986], [995, 995], [1002, 1002], [1006, 1006], [1008, 1008], [1019, 1019], [1028, 1028], [1030, 1031], [1039, 1039], [1050, 1050], [1052, 1052], [1061, 1061], [1072, 1072], [1074, 1074], [1083, 1083], [1089, 1089], [1092, 1092], [1100, 1100], [1106, 1106], [1109, 1109], [1117, 1117]], "path" = "tests/test_application.py"}], "head" = "2186a2765fb7bdb711213f17602c04d944c8c64d", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "788d993c8cbc1ab9a703132bc8d07cca6977bb8c", "files" = [{"head_lines" = [[8, 8], [20, 23], [63, 63]], "path" = "blacksheep/baseapp.pyx"}, {"head_lines" = [[23, 23]], "path" = "blacksheep/contents.pyi"}, {"head_lines" = [[39, 48]], "path" = "blacksheep/contents.pyx"}, {"head_lines" = [[29, 34], [50, 61]], "path" = "blacksheep/exceptions.pyi"}, {"head_lines" = [[35, 64]], "path" = "blacksheep/exceptions.pyx"}, {"head_lines" = [[16, 16], [160, 160]], "path" = "blacksheep/messages.pyx"}, {"head_lines" = [[1, 170]], "path" = "blacksheep/ranges.py"}, {"head_lines" = [[2, 2], [4, 4], [6, 7], [9, 10], [14, 14], [34, 35], [49, 121], [124, 124], [141, 220], [223, 229], [231, 233], [240, 240], [244, 248], [251, 279]], "path" = "blacksheep/server/files/__init__.py"}, {"head_lines" = [[102, 102]], "path" = "blacksheep/server/files/dynamic.py"}, {"head_lines" = [[33, 33], [40, 40]], "path" = "blacksheep/server/pathsutils.py"}, {"head_lines" = [[1, 46]], "path" = "itests/static/example-com.html"}, {"he
ecosystem = "pip"
family = "output_encoding"
fix = "bd4ecb9542b5d52442276b5a6907931b90f38d12"
id = "r-5b0de489f0b3907c38418598"
instrument = {"bytes" = 4263, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "6801abe96ae0b1797b735d62c965c7aff3704cee"
license_spdx = "MIT"
parent = "ca4252cc0dc93dd39cab3cba99790ec408465191"
post_cutoff = false
repository = "neoteroi/blacksheep"
slice = 1
url = "https://github.com/Neoteroi/BlackSheep.git"

[[repository]]
id = "r-5b5fc0e4e76bfcad15292f06"
private = true
sha256 = "5b5fc0e4e76bfcad15292f069c40bc6444a022280b7120a6734308657fc6974a"
slice = 1

[[repository]]
id = "r-5b8eaeadce542f71b7286667"
private = true
sha256 = "5b8eaeadce542f71b72866670c81afdcfe9be34c53d102892b7b86ba666db026"
slice = 1

[[repository]]
advisory = "GHSA-mgcp-mfp8-3q45"
changes = [{"advisory" = "GHSA-mgcp-mfp8-3q45", "base" = "b29e3cc3aafb991d251d2e7a533d9d7fe6cdf84a", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {"size_cap" = 1, "unresolved_function" = 6}, "family" = "path", "files" = [{"head_lines" = [[9, 9]], "path" = ".gitignore"}, {"head_lines" = [[1, 4]], "path" = "CHANGELOG.md"}, {"head_lines" = [[79, 79], [87, 179]], "path" = "README.md"}, {"head_lines" = [[71, 97], [136, 137], [142, 142], [145, 149], [159, 173], [181, 181], [185, 219], [223, 223], [248, 248], [254, 254], [260, 260], [270, 270], [276, 276], [281, 282], [315, 315], [322, 322], [350, 350], [354, 355], [357, 357]], "path" = "i18nextLocizeBackend.js"}, {"head_lines" = [[1, 1]], "path" = "i18nextLocizeBackend.min.js"}, {"head_lines" = [[12, 12], [16, 17]], "path" = "karma.conf.js"}, {"head_lines" = [[3, 3]], "path" = "package.json"}, {"head_lines" = [[35, 36], [41, 46], [51, 61], [68, 68], [73, 104], [106, 106], [153, 154]], "path" = "src/index.js"}, {"head_lines" = [[57, 84]], "path" = "src/utils.js"}, {"head_lines" = [[1, 18]], "path" = "test/languages/test.json"}, {"head_lines" = [[1, 51]], "path" = "test/locize.spec.js"}, {"head_lines" = [[1, 1], [7, 7]], "path" = "test/xhr.spec.js"}], "function" = "interpolate", "function_lines" = [78, 96], "head" = "32005b0fcd6ea9dfc43c2cc50ab64bbeade9f2fe", "kind" = "vulnerability", "method" = "introducing", "path" = "i18nextLocizeBackend.js", "post_cutoff" = false}, {"base" = "0125d06fc511e18b5e1510854f8dafb4f8ad91ea", "files" = [{"head_lines" = [[44, 47]], "path" = "karma.conf.js"}, {"head_lines" = [[38, 38]], "path" = "package.json"}], "head" = "3ae5d8a5a6350c96af7106933e67cf64a1015200", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "5e33c821cfa51146aa6bf35f5ec4a86793c4c652", "files" = [{"head_lines" = [[2, 2]], "path" = "test/xhr.spec.js"}], "head" = "a4cea27340af56ef06ac4861ea94cbe4fb9ff8b3", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "ca95a008368398d1211cfa38dba200b356e6a693", "files" = [{"head_lines" = [[182, 183]], "path" = "i18next-locize-backend.js"}, {"head_lines" = [[1, 1]], "path" = "i18next-locize-backend.min.js"}, {"head_lines" = [[66, 67], [83, 83]], "path" = "src/index.js"}], "head" = "42315bdcbf46de40c7892a062f52a24a65345e7b", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "6ed5d2f82effcebce9970da8fc0d7d42029bbcce", "files" = [{"head_lines" = [[4, 4], [6, 6], [7, 7]], "path" = ".travis.yml"}, {"head_lines" = [[1, 54]], "path" = "karma.conf.js"}, {"head_lines" = [[26, 26], [33, 44], [49, 50]], "path" = "package.json"}, {"head_lines" = [[1, 1], [78, 78]], "path" = "src/index.js"}, {"head_lines" = [[1, 1]], "path" = "src/utils.js"}], "head" = "10ecc6ff52922bdd7cd998f4ebd01cd3d26ed0f8", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "ee8f99406d2dcc3ae0ee8c312a7fd6aa451ce192", "files" = [{"head_lines" = [[47, 47]], "path" = "src/index.js"}], "head" = "cb1a8a9dfa10b005d8835376c6e45dcbe4f030e7", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "0dae2435ba8e83163be5b34677cc08fe6de894e1", "files" = [{"head_lines" = [[16, 16]], "path" = "index.d.ts"}], "head" = "5dbd2527644c0fd58168f5608e58a8a3a21ff913", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "0dd11996af17ca7f622b3f2609e8998e257cfee1", "files" = [{"head_lines" = [[1, 4]], "path" = "CHANGELOG.md"}, {"head_lines" = [[229, 233]], "path" = "src/index.js"}], "head" = "ef8c4bd65ea3c04536d21493a7893552a70bacdd", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "66807eda14fe970af4da3a3a2e86d4b157a91021", "files" = [{"head_lines" = [[60, 61]], "path" = "index.d.ts"}], "head" = "08f3147b32dca5bce6b1823fe484233b411e56b4", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "
ecosystem = "npm"
family = "path"
fix = "8f81ad4707aa0e90647fde4da5fbe5b23153c6e1"
id = "r-5c788c6a01e5e47d62403356"
instrument = {"bytes" = 1006, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "32005b0fcd6ea9dfc43c2cc50ab64bbeade9f2fe"
license_spdx = "MIT"
parent = "1a6808dc4fb47fdb85ac99e25ae07707d3402b4e"
post_cutoff = false
repository = "locize/i18next-locize-backend"
slice = 1
url = "https://github.com/locize/i18next-locize-backend.git"

[[repository]]
advisory = "GHSA-64mj-3p92-589v"
changes = [{"advisory" = "GHSA-64mj-3p92-589v", "base" = "022143b9af09efcd6a0245d98e8be90dfee1b1f1", "bias" = "Pessimistic lower bound: the flaw may already exist in base, so a delta hook can correctly stay quiet.", "fallback_reasons" = {"size_cap" = 1}, "family" = "output_encoding", "files" = [{"head_lines" = [[1, 1]], "path" = ".gitattributes"}, {"head_lines" = [[1, 10]], "path" = ".github/dependabot.yml"}, {"head_lines" = [[1, 15]], "path" = ".github/workflows/cd.yaml"}, {"head_lines" = [[15, 15]], "path" = ".gitignore"}, {"head_lines" = [[1, 7]], "path" = ".mvn/extensions.xml"}, {"head_lines" = [[1, 3]], "path" = ".mvn/maven.config"}, {"head_lines" = [[1, 1]], "path" = "Jenkinsfile"}, {"head_lines" = [[1, 21]], "path" = "LICENSE"}, {"head_lines" = [[1, 84]], "path" = "README.md"}, {"head_lines" = [], "path" = "images/checks.png"}, {"head_lines" = [[1, 1], [6, 7], [10, 10], [14, 14], [16, 19], [24, 24], [28, 32], [36, 36], [42, 42], [46, 91], [95, 141], [145, 146], [152, 191], [195, 211]], "path" = "pom.xml"}, {"head_lines" = [[27, 29], [31, 31], [33, 33], [40, 42], [45, 46], [49, 49], [53, 53], [107, 158], [257, 257], [259, 259], [296, 298], [304, 308], [310, 325], [336, 338], [354, 354], [366, 366], [372, 372], [406, 406], [409, 409], [411, 411], [415, 415], [417, 420], [443, 443], [447, 451], [454, 454], [456, 456], [462, 462], [464, 465], [467, 474], [509, 509], [524, 524], [535, 542], [544, 544], [598, 598], [607, 607], [615, 615], [617, 617], [630, 630], [652, 678], [683, 686], [688, 693], [704, 704], [706, 707], [751, 751], [754, 754], [811, 811], [814, 814]], "path" = "src/main/java/hudson/tasks/junit/CaseResult.java"}, {"head_lines" = [[47, 47], [55, 55], [65, 65], [90, 90], [92, 92], [95, 95], [106, 106], [130, 130], [140, 140], [145, 145], [151, 151], [157, 157], [163, 163], [169, 169], [184, 184], [199, 199], [209, 209], [236, 236], [249, 249]], "path" = "src/main/java/hudson/tasks/junit/ClassResult.java"}, {"head_lines" = [[1, 1]], "path" = "src/main/java/hudson/tasks/junit/Helper.java"}, {"head_lines" = [[25, 25], [27, 41], [43, 43], [50, 50], [52, 54], [56, 57], [58, 58], [60, 62], [65, 70], [71, 71], [74, 75], [77, 81], [83, 87], [89, 90], [92, 96], [98, 99], [101, 103], [105, 106], [108, 109], [112, 121], [123, 124], [126, 128], [130, 133], [136, 137], [140, 141], [143, 143], [145, 148], [151, 151], [153, 154], [156, 157], [159, 178], [181, 183], [187, 187]], "path" = "src/main/java/hudson/tasks/junit/History.java"}, {"head_lines" = [[1, 60]], "path" = "src/main/java/hudson/tasks/junit/HistoryTestResultSummary.java"}, {"head_lines" = [[27, 27], [33, 33], [35, 35], [38, 40], [50, 50], [53, 54], [58, 60], [72, 72], [80, 80], [82, 85], [88, 88], [106, 106], [108, 111], [114, 135], [140, 143], [145, 150], [152, 152], [155, 157], [160, 161], [162, 162], [165, 165], [168, 176], [180, 180], [183, 183], [187, 202], [205, 223]], "path" = "src/main/java/hudson/tasks/junit/JUnitParser.java"}, {"head_lines" = [[31, 31], [36, 36], [46, 46], [49, 54], [59, 59], [62, 63], [65, 65], [68, 68], [75, 77], [103, 112], [141, 141], [146, 147], [150, 159], [176, 185], [188, 188], [190, 190], [204, 204], [209, 209], [211, 211], [214, 214], [221, 222], [225, 225], [236, 324], [342, 342], [347, 347], [352, 352], [366, 369], [377, 378], [385, 385], [403, 403], [408, 432], [437, 454], [460, 460], [476, 476], [482, 482]], "path" = "src/main/java/hudson/tasks/junit/JUnitResultArchiver.java"}, {"head_lines" = [[1, 22]], "path" = "src/main/java/hudson/tasks/junit/JUnitTask.java"}, {"head_lines" = [[27, 27], [48, 48], [53, 53], [63, 63], [69, 69], [79, 79], [152, 152], [154, 154], [163, 163], [181, 181], [183, 188], [206, 206], [217, 222], [230, 230], [241, 246], [254, 254], [282, 282], [321, 321], [348, 348]], "path" = "src/main/java/hudson/tasks/junit/PackageResult.java"}, {"head_lines" = [[26, 26], [33, 33], [36, 36], [38, 39], [41, 41], [45, 45], [51, 51], [70, 70], [81, 83], [86, 99], [103, 104], [107, 107], [109, 115], [119, 126], [130, 130], [132, 132], [134, 134], [142, 142], [144, 144], [146, 146], [160, 162], [166, 172], [
ecosystem = "maven"
family = "output_encoding"
fix = "c43d0fc455619dd652ec87939ac3d70d6134fea1"
id = "r-5dce8802248358789acabb37"
instrument = {"bytes" = 26270, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "f69ed5dc6bf866b0479cab9c5f379085ad025b84"
license_spdx = "MIT"
parent = "f69ed5dc6bf866b0479cab9c5f379085ad025b84"
post_cutoff = false
repository = "jenkinsci/junit-plugin"
slice = 1
url = "https://github.com/jenkinsci/junit-plugin.git"

[[repository]]
advisory = "GHSA-pc6w-59fv-rh23"
changes = [{"advisory" = "GHSA-pc6w-59fv-rh23", "base" = "209cddff070d0f3cc7c2dd829f132e002e12edff", "bias" = "Pessimistic lower bound: the flaw may already exist in base, so a delta hook can correctly stay quiet.", "fallback_reasons" = {"size_cap" = 7}, "family" = "untrusted_destination", "files" = [{"head_lines" = [[1, 11]], "path" = ".github/dependabot.yml"}, {"head_lines" = [[5, 5], [45, 56]], "path" = ".github/scripts/check_diff.py"}, {"head_lines" = [[24, 24]], "path" = ".github/workflows/_compile_integration_test.yml"}, {"head_lines" = [[33, 33]], "path" = ".github/workflows/_lint.yml"}, {"head_lines" = [[15, 15], [29, 29], [165, 165]], "path" = ".github/workflows/_release.yml"}, {"head_lines" = [[25, 25]], "path" = ".github/workflows/_test.yml"}, {"head_lines" = [[1, 63]], "path" = ".github/workflows/_test_pydantic.yml"}, {"head_lines" = [[22, 22]], "path" = ".github/workflows/_test_release.yml"}, {"head_lines" = [[39, 40], [65, 78], [90, 133], [136, 136]], "path" = ".github/workflows/check_diffs.yml"}, {"head_lines" = [[1, 116], [118, 118], [120, 186]], "path" = ".gitignore"}, {"head_lines" = [[1, 1], [3, 3], [5, 5], [7, 13]], "path" = "README.md"}, {"head_lines" = [[1, 79]], "path" = "libs/community/Makefile"}, {"head_lines" = [[1, 38]], "path" = "libs/community/README.md"}, {"head_lines" = [[1, 108]], "path" = "libs/community/extended_testing_deps.txt"}, {"head_lines" = [[1, 10]], "path" = "libs/community/langchain_community/__init__.py"}, {"head_lines" = [[1, 8]], "path" = "libs/community/langchain_community/adapters/__init__.py"}, {"head_lines" = [[1, 421]], "path" = "libs/community/langchain_community/adapters/openai.py"}, {"head_lines" = [[1, 170]], "path" = "libs/community/langchain_community/agent_toolkits/__init__.py"}, {"head_lines" = [[1, 1]], "path" = "libs/community/langchain_community/agent_toolkits/ainetwork/__init__.py"}, {"head_lines" = [[1, 70]], "path" = "libs/community/langchain_community/agent_toolkits/ainetwork/toolkit.py"}, {"head_lines" = [], "path" = "libs/community/langchain_community/agent_toolkits/amadeus/__init__.py"}, {"head_lines" = [[1, 38]], "path" = "libs/community/langchain_community/agent_toolkits/amadeus/toolkit.py"}, {"head_lines" = [[1, 31]], "path" = "libs/community/langchain_community/agent_toolkits/azure_ai_services.py"}, {"head_lines" = [[1, 34]], "path" = "libs/community/langchain_community/agent_toolkits/azure_cognitive_services.py"}, {"head_lines" = [[1, 5]], "path" = "libs/community/langchain_community/agent_toolkits/base.py"}, {"head_lines" = [[1, 1]], "path" = "libs/community/langchain_community/agent_toolkits/cassandra_database/__init__.py"}, {"head_lines" = [[1, 37]], "path" = "libs/community/langchain_community/agent_toolkits/cassandra_database/toolkit.py"}, {"head_lines" = [], "path" = "libs/community/langchain_community/agent_toolkits/clickup/__init__.py"}, {"head_lines" = [[1, 120]], "path" = "libs/community/langchain_community/agent_toolkits/clickup/toolkit.py"}, {"head_lines" = [[1, 1]], "path" = "libs/community/langchain_community/agent_toolkits/cogniswitch/__init__.py"}, {"head_lines" = [[1, 45]], "path" = "libs/community/langchain_community/agent_toolkits/cogniswitch/toolkit.py"}, {"head_lines" = [[1, 7]], "path" = "libs/community/langchain_community/agent_toolkits/connery/__init__.py"}, {"head_lines" = [[1, 60]], "path" = "libs/community/langchain_community/agent_toolkits/connery/toolkit.py"}, {"head_lines" = [[1, 26]], "path" = "libs/community/langchain_community/agent_toolkits/csv/__init__.py"}, {"head_lines" = [[1, 7]], "path" = "libs/community/langchain_community/agent_toolkits/file_management/__init__.py"}, {"head_lines" = [[1, 88]], "path" = "libs/community/langchain_community/agent_toolkits/file_management/toolkit.py"}, {"head_lines" = [[1, 1]], "path" = "libs/community/langchain_community/agent_toolkits/financial_datasets/__init__.py"}, {"head_lines" = [[1, 44]], "path" = "libs/community/langchain_community/agent_toolkits/financial_datasets/toolkit.py"}, {"head_lines" = [[1, 1]], "path" = "libs/community/langchain_community/agent_toolkits/gith
ecosystem = "pip"
family = "untrusted_destination"
fix = "e842452108089524e22c3a2ced851c021884556f"
id = "r-5e9eaecda1a2a92d80421d02"
instrument = {"bytes" = 1882, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "6057ba567d4339b48acbffb55f0885dcd05a0892"
license_spdx = "MIT"
parent = "6057ba567d4339b48acbffb55f0885dcd05a0892"
post_cutoff = false
repository = "langchain-ai/langchain-community"
slice = 1
url = "https://github.com/langchain-ai/langchain-community.git"

[[repository]]
advisory = "GHSA-rv97-r8f7-8wmg"
changes = [{"advisory" = "GHSA-rv97-r8f7-8wmg", "base" = "16eab873e45668809b98919f7220cd96adea4943", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "config_secrets", "files" = [{"head_lines" = [[1, 302]], "path" = "src/main/java/jenkinsci/plugins/influxdb/InfluxDbPublicationService.java"}, {"head_lines" = [[29, 29], [31, 31], [289, 289], [291, 291], [295, 295], [297, 297], [301, 310], [332, 333], [334, 334], [343, 343]], "path" = "src/main/java/jenkinsci/plugins/influxdb/InfluxDbPublisher.java"}, {"head_lines" = [[1, 88]], "path" = "src/main/java/jenkinsci/plugins/influxdb/global/GlobalRunListener.java"}, {"head_lines" = [[14, 15], [93, 108]], "path" = "src/main/java/jenkinsci/plugins/influxdb/models/Target.java"}], "function" = "<global>", "function_lines" = [1, 302], "head" = "e5d995db00d8f9b7b06a0b8a124c52515bfcc44e", "kind" = "vulnerability", "method" = "introducing", "path" = "src/main/java/jenkinsci/plugins/influxdb/InfluxDbPublicationService.java", "post_cutoff" = false}, {"base" = "66d807fc72484c4bfe9fe0319d434124d9dcace4", "files" = [{"head_lines" = [[40, 40]], "path" = "src/main/java/jenkinsci/plugins/influxdb/generators/CoberturaPointGenerator.java"}], "head" = "62fdf75b498e4bcdc3a4d0c4715707ec8e8bf515", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "058f41965023d0fa12057aa6212cd800a126cf20", "files" = [{"head_lines" = [[190, 190]], "path" = "src/main/java/jenkinsci/plugins/influxdb/InfluxDbPublisher.java"}], "head" = "c3a69d5ad64bd9089c7b3fdb932d3c762a995c18", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "5053a52026a34f2d5f6c0dd9f4aefe44d69fe5fc", "files" = [{"head_lines" = [[42, 42], [242, 242]], "path" = "src/main/java/jenkinsci/plugins/influxdb/InfluxDbPublisher.java"}], "head" = "0f8f134bcfe043e7c10a15d348961affa760ddb0", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "657bdb24dc0251d2461dee1ed39b2aefcb05b08d", "files" = [{"head_lines" = [[5, 5], [46, 46]], "path" = "src/main/java/jenkinsci/plugins/influxdb/DescriptorImpl.java"}], "head" = "020e2907eccb712a70ce3d8f6ae83866ffc16211", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "a5246b537380b4bf37a769e34329f2bbd564d56d", "files" = [{"head_lines" = [[23, 23]], "path" = "src/main/java/jenkinsci/plugins/influxdb/renderer/ProjectNameRenderer.java"}], "head" = "c649563e8d5f72f024199e3ba5f79214805d72f6", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "eb4743b46538be8fe5a2bb4814c24803d2a5da68", "files" = [{"head_lines" = [[242, 249]], "path" = "src/main/java/jenkinsci/plugins/influxdb/InfluxDbPublisher.java"}], "head" = "562ac43b0a6ddc924ee593326693f42b05c890ef", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "11769ea3c47be88157efe7ac3e3caf5fd7e46dc2", "files" = [{"head_lines" = [[254, 254]], "path" = "src/main/java/jenkinsci/plugins/influxdb/InfluxDbPublisher.java"}, {"head_lines" = [[11, 11], [19, 20], [51, 51], [54, 54], [58, 58], [111, 121], [122, 122], [124, 125]], "path" = "src/main/java/jenkinsci/plugins/influxdb/generators/SonarQubePointGenerator.java"}], "head" = "ad5ec48a3699ca91de8ea5601352b6ddd0d58cc1", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "d1c90908166ce14730c8b76dbd7cf014606e269d", "files" = [{"head_lines" = [[79, 91]], "path" = "src/main/java/jenkinsci/plugins/influxdb/generators/SonarQubePointGenerator.java"}], "head" = "d413f21122c35cf3826dd92fdb2bc4ae4eadfb70", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "7e8b8ec99885866e2c40b1057975d9aca15d7a4f", "files" = [{"head_lines" = [[138, 143]], "path" = "pom.xml"}, {"head_lines" = [[207, 211]], "path" = "src/main/java/jenkinsci/plugins/influxdb/InfluxDbPublisher.java"}, {"head_lines" = [[1, 65
ecosystem = "maven"
family = "config_secrets"
fix = "bfc2fcc0d8e6fb6f2dff5a45353abac5cefc0573"
id = "r-5fa5c78a8f895a01fd1204fe"
instrument = {"bytes" = 2210, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "e5d995db00d8f9b7b06a0b8a124c52515bfcc44e"
license_spdx = "MIT"
parent = "4e0b62f1fc07010da314a8d4092dfac7714f9867"
post_cutoff = false
repository = "jenkinsci/influxdb-plugin"
slice = 1
url = "https://github.com/jenkinsci/influxdb-plugin.git"

[[repository]]
id = "r-61476e9bbdbb38312076e211"
private = true
sha256 = "61476e9bbdbb38312076e211096e77deebed813fe89d52fccb80e294e5b8aa47"
slice = 1

[[repository]]
advisory = "GHSA-38cw-85xc-xr9x"
changes = [{"advisory" = "GHSA-38cw-85xc-xr9x", "base" = "5474ef6ceb9451d2b545fe2bb2aac272be840abb", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {"text_present" = 1}, "family" = "injection", "files" = [{"head_lines" = [[10, 22]], "path" = "examples/generic/handle-msg.ts"}, {"head_lines" = [[9, 9], [19, 19], [36, 37], [44, 46], [69, 69]], "path" = "examples/generic/setup.ts"}, {"head_lines" = [[1, 322]], "path" = "packages/daf-typeorm/src/data-store-orm.ts"}, {"head_lines" = [[143, 157]], "path" = "packages/daf-typeorm/src/entities/credential.ts"}, {"head_lines" = [[179, 212]], "path" = "packages/daf-typeorm/src/entities/message.ts"}, {"head_lines" = [[116, 130]], "path" = "packages/daf-typeorm/src/entities/presentation.ts"}, {"head_lines" = [[4, 4]], "path" = "packages/daf-typeorm/src/index.ts"}], "function" = "decorateQB", "function_lines" = [163, 180], "head" = "cd2052fe5245ce3c631e8e180a225bf1d841e89d", "kind" = "vulnerability", "method" = "introducing", "path" = "packages/daf-typeorm/src/data-store-orm.ts", "post_cutoff" = false}, {"base" = "3c876a9993c4bb48af2c289a095d4a6144a34f12", "files" = [{"head_lines" = [[17, 18]], "path" = "packages/daf-selective-disclosure/src/action-handler.ts"}, {"head_lines" = [[75, 75]], "path" = "packages/daf-selective-disclosure/src/graphql.ts"}], "head" = "45bb8bfe0d8ea270e08a0578a8d995d4e04b21c2", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "2b2c00f9312ae67cdeca4a5f15b729391226500e", "files" = [{"head_lines" = [[44, 44]], "path" = "packages/daf-cli/README.md"}, {"head_lines" = [[13, 13], [64, 64]], "path" = "packages/daf-cli/src/identity-manager.ts"}], "head" = "9cbff8a47022a2dc3378ff2f2df78a2f0e0656af", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "bcfa660259186f0f287e9718361a538e4d559833", "files" = [{"head_lines" = [[148, 148]], "path" = "examples/expressjs-ethr/src/web-server.ts"}, {"head_lines" = [[1, 2]], "path" = "packages/daf-trust-graph/src/config.ts"}], "head" = "23ebcea0fbc3aa39410b538cb3a08e89916e2232", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "c0562fc70cefedf48615214489e05a4361fd3643", "files" = [{"head_lines" = [[22, 22], [32, 32], [70, 70]], "path" = "packages/daf-did-comm/src/action-handler.ts"}], "head" = "03f3dbb9c1f8a2b061234cdddf4d70953209c1b3", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "df94e1c4282b5a8501edc2981d8df7d893d510ab", "files" = [{"head_lines" = [[66, 66]], "path" = "packages/daf-trust-graph/src/service-controller.ts"}], "head" = "a38961238af36277cf1cf8316148cb947aa37f6a", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "14736eaf7e31415a1e5162bfb0cb6177790fafd2", "files" = [{"head_lines" = [[12, 14]], "path" = "packages/daf-data-store/src/graphql.ts"}], "head" = "fdb1e54fbd43657dd42180926cc160da7245db31", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "d6d5c76a9b1dc10f8dd2bf0d52632024857227ff", "files" = [{"head_lines" = [[8, 21]], "path" = "examples/react-graphql/client/src/index.tsx"}, {"head_lines" = [[64, 73]], "path" = "examples/react-graphql/server/index.ts"}], "head" = "ef30a6e766ddb7048e5a94f99070fb875e8f4da1", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "bc6d3a36f8ed633aa7edf7ae40eb2dec17ef4f27", "files" = [{"head_lines" = [[23, 23]], "path" = "examples/id-hub/package.json"}, {"head_lines" = [[9, 9], [34, 45], [49, 51]], "path" = "examples/id-hub/src/index.ts"}, {"head_lines" = [[864, 865], [871, 871], [873, 874], [876, 876], [878, 878], [882, 882], [891, 891], [894, 895], [897, 897], [901, 901], [904, 905], [999, 1002], [1014, 1017], [2724, 2728]], "path" = "examples/id-hub/yarn.lock"}], "head" = "0d29b4ce0a933748be9b0eca1168ba1902d73d53", "kind" = "ordinary", "method" = "first_parent", "size_
ecosystem = "npm"
family = "injection"
fix = "067e39dd76f11ee2d25b99c8361d4f02a4223e3b"
id = "r-6667f50ff0be00176348b8dc"
instrument = {"bytes" = 4193, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "cd2052fe5245ce3c631e8e180a225bf1d841e89d"
license_spdx = "Apache-2.0"
parent = "0e4a3f7d755831ee650fd9cc1d4491030af74f48"
post_cutoff = false
repository = "decentralized-identity/veramo"
slice = 1
url = "https://github.com/decentralized-identity/veramo.git"

[[repository]]
advisory = "GHSA-45h5-66jx-r2wf"
changes = [{"advisory" = "GHSA-45h5-66jx-r2wf", "base" = "652e6c12751823069814e7e78437bdebb143e36c", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {"unresolved_function" = 1}, "family" = "path", "files" = [{"head_lines" = [[195, 195]], "path" = "packages/mjml-migrate/src/migrate.js"}, {"head_lines" = [[37, 37], [150, 150]], "path" = "packages/mjml-parser-xml/src/index.js"}], "function" = "MJMLParser", "function_lines" = [30, 229], "head" = "b17d5585830822ecdc7bd6b3628249e3731e2750", "kind" = "vulnerability", "method" = "introducing", "path" = "packages/mjml-parser-xml/src/index.js", "post_cutoff" = false}, {"base" = "7706eaa0503bccf2afee92c555361497b81cbd5f", "files" = [{"head_lines" = [[36, 36]], "path" = "src/components/Social.js"}], "head" = "600fb81b10476ec3d46b3839a7033da6542ae5c2", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "84a2dcedf79e5db15e982dffeb18f55d33fa7561", "files" = [{"head_lines" = [[43, 43]], "path" = "src/cli.js"}], "head" = "cff6f86cd0672ee999db146a7bac5b4ea3e36371", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "3bb3ca45852d35451e8ce13f90d6e54409c5af79", "files" = [{"head_lines" = [[93, 93], [97, 98]], "path" = "src/components/MJMLElement.js"}], "head" = "2be19cef0460b2c4fbd6a0dde8d98c5da6f90320", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "4958503985683cc44e639d42cbdf7add2a148d1d", "files" = [{"head_lines" = [[71, 71]], "path" = "packages/mjml-column/src/index.js"}], "head" = "017adb4d3f5a51073f58d3f65ee5c4df8d822b72", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "e0cd2d24f06366f2f29bf5693d02f0b8064b6b4e", "files" = [{"head_lines" = [[72, 72], [104, 104], [133, 136]], "path" = "packages/mjml-social/src/SocialElement.js"}, {"head_lines" = [[50, 50]], "path" = "packages/mjml-table/src/index.js"}], "head" = "dfff1aba58e3391177d436a95255433fa9f2a554", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "26c7655b307e04b4e753703f876426ea838d5ed6", "files" = [{"head_lines" = [[22, 22], [48, 48], [51, 51], [56, 56], [58, 58], [65, 71], [79, 81], [95, 101]], "path" = "packages/mjml-image/src/index.js"}, {"head_lines" = [[10, 11], [12, 12]], "path" = "test.js"}], "head" = "52e207f75feb0f7f82333d3517e060c4de80bbde", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "47cbcfd1e37f7fb0b7fa854f63141e4950db61ed", "files" = [{"head_lines" = [[264, 264]], "path" = "packages/mjml-core/src/createComponent.js"}], "head" = "154650c1a434c90669c5ea1a1b68a4378962f339", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "9ee7dc2746b3dc4f1ea1a979cdd9c6807392ec34", "files" = [{"head_lines" = [[79, 79]], "path" = "packages/mjml-core/src/helpers/skeleton.js"}], "head" = "e4933c0b7b168ba5a0cc78a2736181f869c933ce", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "728d7282311d8c78a91d25d140bfd6843f48d083", "files" = [{"head_lines" = [[57, 57]], "path" = "packages/mjml-table/README.md"}, {"head_lines" = [[27, 27], [70, 70]], "path" = "packages/mjml-table/src/index.js"}], "head" = "49b53fae2daee0e6cbd8042d292f418cfc9fa5fe", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "f334d30eb0c8f63115540d7e15fb216c51dbb2de", "files" = [{"head_lines" = [[7, 7]], "path" = "packages/mjml-divider/src/index.js"}, {"head_lines" = [[5, 5]], "path" = "packages/mjml-head-font/src/index.js"}, {"head_lines" = [[9, 9]], "path" = "packages/mjml-image/src/index.js"}], "head" = "ae55dc28342b6b1fdcb59fe57f9a53d875cbfcac", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "249dfb4aaff2c5642e745b835142c63e993e24fc", "files" = [{"head_lines" = [[16, 19]], "path" = "packages/mjml-head-html-attr
ecosystem = "npm"
family = "path"
fix = "517b376b068e71c713ec4bb4ef9e5b0b7235b8ce"
id = "r-6a14b17aa5f42e701caf6072"
instrument = {"bytes" = 526, "files" = 1}
license_class = "permissive"
license_path = "LICENSE.md"
license_ref = "b17d5585830822ecdc7bd6b3628249e3731e2750"
license_spdx = "MIT"
parent = "e3cc1230086bc199ff89a31d42a3c3d1bbf2d62f"
post_cutoff = false
repository = "mjmlio/mjml"
slice = 1
url = "https://github.com/mjmlio/mjml.git"

[[repository]]
advisory = "GHSA-76w6-m7vv-7hhw"
changes = [{"advisory" = "GHSA-76w6-m7vv-7hhw", "base" = "b819c8e01d1e74611b34f1ce8472c11dc588e81b", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "access_control", "files" = [{"head_lines" = [[58, 81]], "path" = "pom.xml"}, {"head_lines" = [[1, 222]], "path" = "src/main/java/com/nirima/jenkins/plugins/docker/DockerManagement.java"}, {"head_lines" = [[1, 88]], "path" = "src/main/java/com/nirima/jenkins/plugins/docker/DockerManagementServer.java"}, {"head_lines" = [[1, 103]], "path" = "src/main/java/com/nirima/jenkins/plugins/docker/PluginImpl.java"}, {"head_lines" = [[1, 20]], "path" = "src/main/java/com/nirima/jenkins/plugins/docker/utils/Consts.java"}, {"head_lines" = [[1, 22]], "path" = "src/main/resources/com/nirima/jenkins/plugins/docker/DockerManagement/index.jelly"}, {"head_lines" = [[1, 96]], "path" = "src/main/resources/com/nirima/jenkins/plugins/docker/DockerManagementServer/index.jelly"}, {"head_lines" = [[1, 6]], "path" = "src/main/resources/com/nirima/jenkins/plugins/docker/Messages.properties"}, {"head_lines" = [[1, 10]], "path" = "src/main/webapp/js/docker-manage.js"}], "function" = "getImages", "function_lines" = [39, 44], "head" = "826961e2f5737fbd734f3ab9a1a2d02a0f995620", "kind" = "vulnerability", "method" = "introducing", "path" = "src/main/java/com/nirima/jenkins/plugins/docker/DockerManagementServer.java", "post_cutoff" = false}, {"base" = "80aa6b8572b4540e10ef488711d3e0a2508512cd", "files" = [{"head_lines" = [[172, 175]], "path" = "docker-plugin/src/main/java/com/nirima/jenkins/plugins/docker/utils/JenkinsUtils.java"}], "head" = "6e10e70cce24426fc6f9eadebf8328b356331095", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "29773ba99604da4e77e3df4b1d42b9bd04d5cab2", "files" = [{"head_lines" = [[78, 78], [103, 103]], "path" = "docker-plugin/src/main/java/com/nirima/jenkins/plugins/docker/launcher/DockerComputerSSHLauncher.java"}], "head" = "fad7f3d08e3941d76aebd713cd9379134d0d7350", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "a2b6e11672b7a0a8482ca0409b9a59dc2549eec0", "files" = [{"head_lines" = [[4, 4], [85, 87]], "path" = "src/main/java/com/nirima/jenkins/plugins/docker/DockerComputerLauncher.java"}, {"head_lines" = [[62, 62], [64, 64]], "path" = "src/main/java/com/nirima/jenkins/plugins/docker/PluginImpl.java"}], "head" = "29e8f69b08c5c75cb295e9111359e1ddb91851af", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "942f406e9ad4e8b4dcc147b77662e445af00fd47", "files" = [{"head_lines" = [[34, 34], [386, 386], [747, 747], [749, 749], [755, 755], [757, 757], [763, 763], [766, 766], [768, 768]], "path" = "docker-plugin/src/main/java/com/nirima/jenkins/plugins/docker/DockerCloud.java"}, {"head_lines" = [[287, 287]], "path" = "docker-plugin/src/main/java/com/nirima/jenkins/plugins/docker/DockerSlave.java"}, {"head_lines" = [[123, 123]], "path" = "docker-plugin/src/main/java/com/nirima/jenkins/plugins/docker/builder/DockerBuilderControlOptionRun.java"}, {"head_lines" = [[330, 330], [389, 389]], "path" = "docker-plugin/src/main/java/com/nirima/jenkins/plugins/docker/builder/DockerBuilderPublisher.java"}, {"head_lines" = [[16, 16], [78, 78], [91, 91]], "path" = "docker-plugin/src/main/java/io/jenkins/docker/DockerSlaveProvisioner.java"}], "head" = "0c77dc39a0661e5e358e0f1477301f8c1f31f3a9", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "cfb346bfad620c7abc1385b5669c164d3d75b81c", "files" = [{"head_lines" = [[65, 65], [107, 107], [137, 137], [174, 180], [602, 603]], "path" = "docker-plugin/src/main/java/com/nirima/jenkins/plugins/docker/DockerCloud.java"}], "head" = "d056f3c91b0f0a1c9d9255d8438ab58b760ea993", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "c12a225432da755b5cf99d59dd6c6ce04217d530", "files" = [{"head_lines" = [[3, 3], [4, 4], [7, 7], [9, 9], [11, 1
ecosystem = "maven"
family = "access_control"
fix = "6ad27199f6fad230be72fd45da78ddac85c075db"
id = "r-6a37d1a52ca8e27c665be137"
instrument = {"bytes" = 4174, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "826961e2f5737fbd734f3ab9a1a2d02a0f995620"
license_spdx = "MIT"
parent = "3e94c787e5dd09763f0a77590e2f2c1ea1f07136"
post_cutoff = false
repository = "jenkinsci/docker-plugin"
slice = 1
url = "https://github.com/jenkinsci/docker-plugin.git"

[[repository]]
id = "r-6ae50c5ff6928859977ab88c"
private = true
sha256 = "6ae50c5ff6928859977ab88c6efb3aa0d1827a81252ebb7a0ebffb109ead771f"
slice = 1

[[repository]]
id = "r-6dae711d8794fe4bd8073ae9"
private = true
sha256 = "6dae711d8794fe4bd8073ae9039e0d0a7c07e7936794f79d8a1ec56ac4fbdee9"
slice = 1

[[repository]]
id = "r-6db8add2fb3fcd7f393bf97d"
private = true
sha256 = "6db8add2fb3fcd7f393bf97d309cbd232a97d3abe3231464e74136bada216854"
slice = 1

[[repository]]
id = "r-75b31e60bfbdc3dd5b011c38"
private = true
sha256 = "75b31e60bfbdc3dd5b011c389277443141df4603a08df033a0624fa11d8a8add"
slice = 1

[[repository]]
id = "r-7b7295394b43993e29e61069"
private = true
sha256 = "7b7295394b43993e29e610693e7d586dc34aad31bc8ecbe083bf1775eaddba44"
slice = 1

[[repository]]
id = "r-8234b2984e848be4fb90a490"
private = true
sha256 = "8234b2984e848be4fb90a490b6ba9a03b4ed6540341cb02587608b2be2099cc3"
slice = 1

[[repository]]
advisory = "GHSA-rm4m-39fj-288c"
changes = [{"advisory" = "GHSA-rm4m-39fj-288c", "base" = "14b54729e3cea176fab1c3ea116d27670c932a6d", "bias" = "Pessimistic lower bound: the flaw may already exist in base, so a delta hook can correctly stay quiet.", "fallback_reasons" = {"unresolved_function" = 1}, "family" = "access_control", "files" = [{"head_lines" = [[1, 17]], "path" = ".dependabot/config.yml"}, {"head_lines" = [[1, 1]], "path" = ".github/CODEOWNERS"}, {"head_lines" = [[1, 3]], "path" = ".github/release-drafter.yml"}, {"head_lines" = [[1, 7], [41, 42]], "path" = ".gitignore"}, {"head_lines" = [[1, 7]], "path" = ".mvn/extensions.xml"}, {"head_lines" = [[1, 2]], "path" = ".mvn/maven.config"}, {"head_lines" = [[1, 1]], "path" = "CONTRIBUTORS"}, {"head_lines" = [[1, 9]], "path" = "Jenkinsfile"}, {"head_lines" = [[1, 21]], "path" = "LICENSE.md"}, {"head_lines" = [[3, 63]], "path" = "README.md"}, {"head_lines" = [[1, 13]], "path" = "docs/DEVELOPER.md"}, {"head_lines" = [[1, 34]], "path" = "docs/MACROS.md"}, {"head_lines" = [[1, 21]], "path" = "docs/USERSCRIPTS.md"}, {"head_lines" = [[1, 1]], "path" = "docs/images/.keepit"}, {"head_lines" = [], "path" = "docs/images/assignRoles.png"}, {"head_lines" = [], "path" = "docs/images/configureSecurity.png"}, {"head_lines" = [], "path" = "docs/images/jenkins-userscripts.png"}, {"head_lines" = [], "path" = "docs/images/macroDefinition.PNG"}, {"head_lines" = [], "path" = "docs/images/manageAndAssignRoles.png"}, {"head_lines" = [], "path" = "docs/images/manageRoles.png"}, {"head_lines" = [], "path" = "docs/images/role-strategy-ui-enhancer.png"}, {"head_lines" = [[3, 3], [7, 8], [10, 10], [13, 13], [15, 16], [21, 23], [41, 41], [43, 48], [50, 50], [54, 54], [61, 61], [64, 64], [68, 68], [72, 72], [77, 101], [104, 104]], "path" = "pom.xml"}, {"head_lines" = [[32, 33], [35, 36], [38, 41], [47, 49], [60, 65], [90, 99], [105, 106], [108, 108], [111, 118], [145, 154], [174, 174]], "path" = "src/main/java/com/michelin/cio/hudson/plugins/rolestrategy/Role.java"}, {"head_lines" = [[28, 28], [34, 34], [42, 42], [46, 46], [56, 56], [66, 66], [68, 71], [75, 75], [79, 79], [95, 120], [127, 127], [129, 129], [131, 131], [133, 137], [139, 158], [160, 161], [166, 169], [173, 176], [178, 178], [184, 184], [186, 189], [197, 198], [200, 201], [203, 203], [207, 210], [212, 213], [215, 215], [217, 217], [219, 219], [221, 223], [227, 227], [232, 237], [242, 242], [245, 246], [255, 257], [261, 261], [272, 272], [283, 283], [292, 292], [294, 294], [296, 301], [304, 304], [306, 307], [309, 309], [312, 312], [316, 352], [369, 374], [397, 400], [402, 402], [431, 431], [450, 456], [460, 463], [464, 464], [468, 468], [470, 475], [477, 477], [479, 483], [486, 506], [527, 527], [529, 530], [533, 533], [566, 566], [578, 578], [580, 580], [597, 597], [609, 609], [613, 614], [620, 621], [628, 628], [633, 633], [645, 645], [651, 651], [659, 659], [661, 661], [663, 663], [672, 672], [677, 686], [713, 713], [716, 716], [718, 718], [722, 722], [726, 726], [745, 745], [753, 753], [771, 772], [777, 777], [783, 784], [797, 798], [800, 800], [805, 809], [812, 812], [817, 817], [820, 820], [849, 849], [854, 854], [875, 878], [880, 881], [884, 884], [888, 888], [895, 895], [899, 900], [909, 909], [913, 923], [924, 924], [925, 925]], "path" = "src/main/java/com/michelin/cio/hudson/plugins/rolestrategy/RoleBasedAuthorizationStrategy.java"}, {"head_lines" = [[28, 28], [33, 34], [39, 47], [49, 51], [62, 62], [64, 65], [70, 70], [83, 89], [96, 105], [108, 108], [111, 121], [127, 129], [131, 136], [138, 144], [146, 149], [151, 151], [153, 162], [164, 164], [174, 174], [176, 194], [196, 213], [215, 217], [222, 224], [226, 226], [243, 246], [257, 257], [268, 271], [272, 272], [282, 282], [285, 285], [291, 291], [297, 297], [329, 330], [332, 332], [341, 341], [348, 348], [350, 350], [382, 384], [396, 397], [399, 399], [409, 413], [415, 418], [419, 419], [421, 421], [424, 426], [431, 433], [437, 440], [442, 453], [454, 454], [456, 456], [471, 471], [481, 481], [495, 495], [499, 506], [513, 513], [515, 515], [517, 519]], "path" = "src/main/java/com/michelin/cio/hudson/plu
ecosystem = "maven"
family = "access_control"
fix = "2490ed51c30f6df9db809a7dcf637ac8ac08233a"
id = "r-89ca7680366a42dd20982f4e"
instrument = {"bytes" = 7258, "files" = 1}
license_class = "permissive"
license_path = "LICENSE.md"
license_ref = "fb70998f467a42cf2164d72bde3a21ec878490e0"
license_spdx = "MIT"
parent = "fb70998f467a42cf2164d72bde3a21ec878490e0"
post_cutoff = false
repository = "jenkinsci/role-strategy-plugin"
slice = 1
url = "https://github.com/jenkinsci/role-strategy-plugin.git"

[[repository]]
advisory = "GHSA-fpg6-xqj4-j7wf"
changes = [{"advisory" = "GHSA-fpg6-xqj4-j7wf", "base" = "40d2fa1be831c9fd7a16ef0042e636c7e284415d", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "access_control", "files" = [{"head_lines" = [[75, 75]], "path" = "src/main/java/hudson/plugins/jira/JiraChangeLogAnnotator.java"}, {"head_lines" = [[335, 335], [337, 337], [344, 344], [390, 390], [392, 392], [423, 423], [434, 434], [456, 459], [460, 460], [469, 472], [473, 473]], "path" = "src/main/java/hudson/plugins/jira/JiraCreateIssueNotifier.java"}, {"head_lines" = [[30, 30], [34, 34], [109, 109], [132, 132]], "path" = "src/main/java/hudson/plugins/jira/JiraIssueUpdateBuilder.java"}, {"head_lines" = [[6, 6], [21, 21], [34, 44], [45, 45]], "path" = "src/main/java/hudson/plugins/jira/JiraMailAddressResolver.java"}, {"head_lines" = [[122, 122], [200, 204]], "path" = "src/main/java/hudson/plugins/jira/JiraSession.java"}, {"head_lines" = [[15, 19], [37, 42], [284, 284], [297, 298], [300, 300], [382, 384], [385, 385], [455, 455], [458, 458], [474, 477], [479, 479], [496, 496], [498, 498], [500, 502], [504, 516], [523, 523], [525, 525], [533, 533], [542, 542], [550, 550], [552, 552], [561, 561], [571, 571], [574, 576], [578, 578], [595, 595], [602, 602], [604, 604], [620, 620], [622, 622], [638, 638], [640, 640], [658, 658], [660, 660], [671, 671], [708, 718], [736, 736], [772, 772]], "path" = "src/main/java/hudson/plugins/jira/JiraSite.java"}, {"head_lines" = [[6, 6], [28, 33], [97, 97]], "path" = "src/main/java/hudson/plugins/jira/Updater.java"}, {"head_lines" = [[2, 2], [3, 3], [10, 16], [78, 78], [80, 81], [82, 82]], "path" = "src/main/java/hudson/plugins/jira/pipeline/CommentStep.java"}, {"head_lines" = [[2, 2], [4, 4], [13, 16], [22, 30], [89, 89], [105, 105]], "path" = "src/main/java/hudson/plugins/jira/pipeline/IssueFieldUpdateStep.java"}, {"head_lines" = [[2, 2], [4, 4], [12, 20], [77, 78], [79, 79]], "path" = "src/main/java/hudson/plugins/jira/pipeline/SearchIssuesStep.java"}, {"head_lines" = [[68, 68]], "path" = "src/main/java/hudson/plugins/jira/selector/DefaultIssueSelector.java"}, {"head_lines" = [[2, 2], [5, 6], [11, 16], [19, 20], [56, 56]], "path" = "src/main/java/hudson/plugins/jira/selector/JqlIssueSelector.java"}, {"head_lines" = [[55, 55], [166, 168]], "path" = "src/test/java/hudson/plugins/jira/JiraChangeLogAnnotatorTest.java"}, {"head_lines" = [[2, 2], [7, 7], [15, 15], [17, 17], [19, 19], [21, 53], [100, 100], [117, 117], [133, 133], [138, 141], [161, 161], [163, 163], [169, 171], [244, 244], [248, 251], [296, 296], [305, 305], [307, 307]], "path" = "src/test/java/hudson/plugins/jira/UpdaterTest.java"}], "function" = "doValidate", "function_lines" = [729, 770], "head" = "23a00c1cedaaa3d4b0b00ff8f1cdeece5053bc2c", "kind" = "vulnerability", "method" = "introducing", "path" = "src/main/java/hudson/plugins/jira/JiraSite.java", "post_cutoff" = false}, {"base" = "3f3c16a796c80cce028e68156beb64e793b151c3", "files" = [{"head_lines" = [[11, 11], [54, 54], [59, 59], [92, 93]], "path" = "src/main/java/hudson/plugins/jira/JiraSession.java"}], "head" = "62b749ea9fae9d9cc3492e43b0a5a332c1c10198", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "e0eb7968b69e72ea7f9d5a675933c6f78ee807fb", "files" = [{"head_lines" = [[149, 149], [152, 152]], "path" = "src/main/java/hudson/plugins/jira/JiraProjectProperty.java"}], "head" = "dbf1fc8020025ded55b5ab5aa0dec87dc86e56f9", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "80ba851d402a28392de21bb72c4658df433b7ea2", "files" = [{"head_lines" = [[60, 60], [82, 84]], "path" = "src/main/java/hudson/plugins/jira/Updater.java"}], "head" = "2e4b1649309b6a36c2d06614cc714df2e558b9ea", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "b49de034db70ec0001ac4c90ce43e69962cc2368", "files" = [{"head_lines" = [[42, 45], [114, 114], [166, 169], [211, 240]], "path" = "pom.xml"}, {"head_lines" = [[233
ecosystem = "maven"
family = "access_control"
fix = "612a6ef06dbd5a63bea0b128142c726e96195eda"
id = "r-8f8658165acb261dde9cd70b"
instrument = {"bytes" = 24220, "files" = 1}
license_class = "permissive"
license_path = "LICENSE.md"
license_ref = "23a00c1cedaaa3d4b0b00ff8f1cdeece5053bc2c"
license_spdx = "MIT"
parent = "f7a8dae8309b323531f923b1007772e11f04dafc"
post_cutoff = false
repository = "jenkinsci/jira-plugin"
slice = 1
url = "https://github.com/jenkinsci/jira-plugin.git"

[[repository]]
id = "r-94d0974978868065c648f1cf"
private = true
sha256 = "94d0974978868065c648f1cfdf1c9efa36c0a5423abded7054c04872443bc51a"
slice = 1

[[repository]]
id = "r-95f0b1d04fd5edc5c2f8498f"
private = true
sha256 = "95f0b1d04fd5edc5c2f8498ffea68c9c97c4a85fd19a5ccab5197050ce93e787"
slice = 1

[[repository]]
id = "r-970156cf603bba3eb3aad1de"
private = true
sha256 = "970156cf603bba3eb3aad1de08357fbc757079a17b3bd0e17ed70a6014755c5b"
slice = 1

[[repository]]
advisory = "GHSA-cc7g-9pcj-7gwm"
changes = [{"advisory" = "GHSA-cc7g-9pcj-7gwm", "base" = "06f94ace1e3e3cc5f348398b08815553e7a75a5d", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "untrusted_destination", "files" = [{"head_lines" = [[195, 195], [203, 203]], "path" = "application/libraries/REST_Controller.php"}], "function" = "__construct", "function_lines" = [195, 318], "head" = "ac033c423175a62f5768e9951021b91bf6a55b80", "kind" = "vulnerability", "method" = "introducing", "path" = "application/libraries/REST_Controller.php", "post_cutoff" = false}, {"base" = "e86ecc977994fd5cc16057ebaa4dfe3724c9c323", "files" = [{"head_lines" = [[493, 499]], "path" = "application/libraries/REST_Controller.php"}], "head" = "31fa9183a8016dc5a70d8a041473c2574bca5dfc", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "df470e087e339e1d5381ad8ebca0e8ce3c9bc8e2", "files" = [{"head_lines" = [[403, 403], [457, 457]], "path" = "application/libraries/REST_Controller.php"}], "head" = "f3d8b527060cab7c61de5cdb4b9963eed620d72b", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "48153bcf3d5bdf08aff2930651eeb0f135b14128", "files" = [{"head_lines" = [[887, 893]], "path" = "application/libraries/REST_Controller.php"}], "head" = "660b3a3e30c1d4604105cbdfe8cdbac4b3242c02", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "5284df58f1e75ad453168a44661777c66c64520d", "files" = [{"head_lines" = [[25, 29]], "path" = "README.md"}, {"head_lines" = [[32, 32], [70, 70]], "path" = "application/controllers/api/example.php"}, {"head_lines" = [[39, 40], [115, 118], [123, 130], [132, 134]], "path" = "application/libraries/Format.php"}], "head" = "21ec0ff9895ce26de35f44495fc424ce2ab760ff", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "119073449de54463017eabea6d2a4a6bd6a7e3f7", "files" = [{"head_lines" = [[83, 88]], "path" = "application/controllers/api/example.php"}, {"head_lines" = [[60, 61], [68, 68], [85, 85], [87, 87], [98, 98]], "path" = "application/libraries/Format.php"}], "head" = "0a14e87811652c5ae1225aab0e6ff6a0a394ac06", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "5da2df3f09e94f138433afa3e078439bc2479489", "files" = [{"head_lines" = [[20, 24], [97, 97], [108, 108], [119, 151]], "path" = "application/controllers/api/keys.php"}, {"head_lines" = [[6, 7], [121, 121]], "path" = "application/libraries/REST_Controller.php"}], "head" = "9decacdec81ee0e5562a7137a613d28ab51ae608", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "0ad0310056756e88f8d328d65b2744e9cbc48762", "files" = [{"head_lines" = [[18, 18]], "path" = "application/migrations/20170706030520_create_table_api_keys.php"}, {"head_lines" = [[18, 18]], "path" = "application/migrations/20170706031435_create_table_api_logs.php"}, {"head_lines" = [[18, 18]], "path" = "application/migrations/20170706032133_create_table_api_access.php"}, {"head_lines" = [[18, 18]], "path" = "application/migrations/20170706032825_create_table_api_limits.php"}], "head" = "579885ac21123ecfe007de46f6686a584a198ec2", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "d70785d802a6361d268c7165f37b8cdf7d8b09e1", "files" = [{"head_lines" = [[2, 3], [119, 119]], "path" = "application/libraries/Format.php"}], "head" = "d03f6141794fbf8ee1e011f24090ddbae9530fb1", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "03383563745de74b792b577ba6d5020f9638604e", "files" = [{"head_lines" = [[2105, 2105]], "path" = "application/libraries/REST_Controller.php"}], "head" = "f3ba7d76cb14c11602f72b432926a17b8ff7c590", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "aca82471a2406e05ff846b2140a89342967c5f17", "files" = [{"head_lines" = [[1107, 1107], [1112, 
ecosystem = "composer"
family = "untrusted_destination"
fix = "852740e7c636e4f44b3a8e3afc15155795e22c9b"
id = "r-9911de0bf40142924791ac6c"
instrument = {"bytes" = 14357, "files" = 1}
license_class = "permissive"
license_path = "LICENSE.txt"
license_ref = "ac033c423175a62f5768e9951021b91bf6a55b80"
license_spdx = "MIT"
parent = "5a3c00363550c04cd63d0b8953d43a0a33fc5ec2"
post_cutoff = false
repository = "chriskacerguis/codeigniter-restserver"
slice = 1
url = "https://github.com/chriskacerguis/codeigniter-restserver.git"

[[repository]]
id = "r-99f0ca1549281e68b7b7f649"
private = true
sha256 = "99f0ca1549281e68b7b7f649f5eb04bcd3c43a6a5a0c8ba54f6c91768d27caaf"
slice = 1

[[repository]]
id = "r-9d6cb9acb587aa73a2c915c0"
private = true
sha256 = "9d6cb9acb587aa73a2c915c02ccd7f5444cc019d62866a37ff5df4fcc334f08c"
slice = 1

[[repository]]
advisory = "GHSA-fv3m-xhqw-9m79"
changes = [{"advisory" = "GHSA-fv3m-xhqw-9m79", "base" = "caef7ba99fb4ba29e58a6912173bcfb8036ea139", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "injection", "files" = [{"head_lines" = [[57, 62]], "path" = "ballcat-codegen-backend/pom.xml"}, {"head_lines" = [[1, 48]], "path" = "ballcat-codegen-backend/src/main/java/com/hccake/ballcat/codegen/engine/FreemarkerTemplateEngine.java"}, {"head_lines" = [[20, 23]], "path" = "ballcat-codegen-backend/src/main/java/com/hccake/ballcat/codegen/engine/TemplateEngineTypeEnum.java"}, {"head_lines" = [[19, 22], [88, 88], [90, 90]], "path" = "ballcat-codegen-frontend/src/views/gen/template-group/components/TemplateEntryFormModal.vue"}], "function" = "FreemarkerTemplateEngine", "function_lines" = [23, 26], "head" = "47e08b41732b363c078dacee05bdc78cbb8fc4c8", "kind" = "vulnerability", "method" = "introducing", "path" = "ballcat-codegen-backend/src/main/java/com/hccake/ballcat/codegen/engine/FreemarkerTemplateEngine.java", "post_cutoff" = false}, {"base" = "b91d13717fd0c000ab678e69e20cebe2af3c03f6", "files" = [{"head_lines" = [[199, 199]], "path" = "ballcat-codegen-backend/src/main/java/com/hccake/ballcat/codegen/service/impl/TemplateDirectoryEntryServiceImpl.java"}], "head" = "56d413ba366295205c1421438fb58a10914af166", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "26adfd74c072338cbf75f7254e41ce64c03b946d", "files" = [{"head_lines" = [[3, 3], [42, 49]], "path" = "ballcat-codegen-backend/src/main/java/com/hccake/ballcat/codegen/model/entity/TemplateGroup.java"}, {"head_lines" = [[67, 74]], "path" = "ballcat-codegen-backend/src/main/java/com/hccake/ballcat/codegen/model/entity/TemplateProperty.java"}, {"head_lines" = [[10, 10]], "path" = "ballcat-codegen-backend/src/main/resources/mapper/TemplateGroupMapper.xml"}], "head" = "cde9ae2d3af465e271d870244d9e0b110a77ed57", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "f9d38d9effacb819692ce61f05f9b23284ee1872", "files" = [{"head_lines" = [[1, 4]], "path" = "ballcat-codegen-frontend/.eslintignore"}, {"head_lines" = [[1, 1], [3, 3], [5, 7], [9, 36]], "path" = "ballcat-codegen-frontend/.eslintrc.js"}, {"head_lines" = [[2, 9], [11, 18]], "path" = "ballcat-codegen-frontend/babel.config.js"}, {"head_lines" = [[2, 23]], "path" = "ballcat-codegen-frontend/jest.config.js"}, {"head_lines" = [[39, 42], [45, 58], [61, 61], [63, 63], [65, 175], [191, 193], [196, 214], [218, 220], [223, 242], [246, 248], [251, 254], [258, 260], [263, 351], [355, 357], [360, 361], [364, 367], [370, 488], [492, 494], [497, 515], [539, 541], [544, 656], [660, 662], [665, 683], [687, 689], [692, 710], [713, 838], [840, 843], [846, 864], [867, 872], [874, 876], [879, 899], [903, 905], [908, 1022], [1026, 1028], [1031, 1076], [1091, 1098], [1101, 1103], [1106, 1220], [1224, 1226], [1229, 1342], [1362, 1372], [1374, 1376], [1379, 1381], [1385, 1387], [1390, 1391], [1395, 1397], [1400, 1402], [1406, 1418], [1421, 1422], [1426, 1438], [1441, 1442], [1446, 1448], [1451, 1452], [1456, 1458], [1461, 1462], [1466, 1468], [1471, 1475], [1479, 1481], [1484, 1485], [1489, 1491], [1494, 1496], [1500, 1502], [1505, 1506], [1510, 1512], [1515, 1516], [1529, 1531], [1534, 1534], [1538, 1540], [1543, 1543], [1555, 1563], [1574, 1585], [1588, 1588], [1601, 1603], [1606, 1606], [1637, 1639], [1642, 1642], [1646, 1648], [1651, 1651], [1655, 1657], [1660, 1662], [1666, 1668], [1671, 1671], [1675, 1677], [1680, 1680], [1684, 1686], [1689, 1694], [1696, 1779], [1783, 1785], [1788, 1788], [1792, 1794], [1797, 1797], [1801, 1803], [1806, 1807], [1811, 1813], [1816, 1816], [1820, 1822], [1825, 1826], [1830, 1832], [1835, 1835], [1839, 1841], [1844, 1920], [1924, 1926], [1929, 1929], [1933, 1935], [1938, 1938], [1942, 1944], [1947, 1948], [1953, 1955], [1958, 1960], [1965, 1967], [1970, 1973], [1975, 1982], [1986, 1988], [1991, 1992], [1996, 1998], [2001, 2001], [2005, 2007], [2010, 2010], [2014, 20
ecosystem = "maven"
family = "injection"
fix = "84a7cb38daf0295b93aba21d562ec627e4eb463b"
id = "r-9db62bfcccf6798fac9743aa"
instrument = {"bytes" = 1046, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "47e08b41732b363c078dacee05bdc78cbb8fc4c8"
license_spdx = "MIT"
parent = "719dd74cab14c094a483b4ba735fcd3c5cc4058e"
post_cutoff = false
repository = "ballcat-projects/ballcat-codegen"
slice = 1
url = "https://github.com/ballcat-projects/ballcat-codegen.git"

[[repository]]
advisory = "GHSA-gg5m-55jj-8m5g"
changes = [{"advisory" = "GHSA-gg5m-55jj-8m5g", "base" = "d725fcdf8e5a49b5a61bf2e01e4ea0652c549d72", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "injection", "files" = [{"head_lines" = [[315, 317], [322, 322]], "path" = "graphiti_core/driver/driver.py"}, {"head_lines" = [[40, 72], [75, 75], [206, 206], [249, 251], [265, 265], [280, 280]], "path" = "graphiti_core/driver/falkordb_driver.py"}, {"head_lines" = [[75, 75], [77, 77], [80, 80], [82, 85], [92, 92], [99, 99], [106, 108]], "path" = "graphiti_core/graph_queries.py"}, {"head_lines" = [[4, 4]], "path" = "pyproject.toml"}, {"head_lines" = [[786, 786]], "path" = "uv.lock"}], "function" = "build_fulltext_query", "function_lines" = [249, 280], "head" = "36056ad1413ee20cffdb940fb8afe8cf81d46cca", "kind" = "vulnerability", "method" = "introducing", "path" = "graphiti_core/driver/falkordb_driver.py", "post_cutoff" = false}, {"base" = "1a447d75a2ddd59ef8cca044b7264c80d5b111e6", "files" = [{"head_lines" = [[415, 415]], "path" = "graphiti_core/graphiti.py"}], "head" = "3f12254916b84e5823ce8e8d78b41caf654fc8d6", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "17c177e91a62159e525efed4a9590e859da8fe29", "files" = [{"head_lines" = [[75, 75]], "path" = "graphiti_core/utils/maintenance/graph_data_operations.py"}], "head" = "abe43ceba480dfb4fd44f150f9de43deb513e168", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "57aed456fabf3237797f0430f1ad094fcdb6ed24", "files" = [{"head_lines" = [[50, 50]], "path" = "core/llm_client/openai_client.py"}, {"head_lines" = [[57, 59], [134, 137]], "path" = "core/prompts/dedupe_edges.py"}, {"head_lines" = [[125, 125]], "path" = "core/prompts/extract_edges.py"}, {"head_lines" = [[128, 128], [132, 132]], "path" = "core/prompts/extract_nodes.py"}], "head" = "0d2942daea59939a401c5e482f94be4d79f93487", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "43072749678cf9fc7f70b84839fc860567e9815b", "files" = [{"head_lines" = [[88, 91]], "path" = "graphiti_core/prompts/summarize_nodes.py"}, {"head_lines" = [[367, 371], [393, 393], [398, 398]], "path" = "graphiti_core/utils/maintenance/node_operations.py"}, {"head_lines" = [[3, 3]], "path" = "pyproject.toml"}], "head" = "04203506d962fe9dfa48ed83b7111590446e8dfa", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "a9091b06ff87c1f114de2313fb2e5bee07e14eed", "files" = [{"head_lines" = [[25, 25], [27, 28], [49, 49], [51, 51], [53, 53], [69, 69], [71, 71], [80, 80], [82, 82], [84, 84], [90, 90], [92, 92], [105, 105], [107, 107], [109, 109], [129, 129], [131, 131], [140, 140], [142, 142], [144, 144], [151, 151], [153, 153], [163, 163], [165, 165], [167, 167], [189, 189], [191, 191], [198, 198], [200, 200], [202, 202], [226, 226], [228, 228], [230, 230], [236, 236], [238, 238], [240, 240], [250, 250], [252, 252], [259, 259], [261, 261], [263, 263], [280, 280], [282, 282], [284, 285], [288, 288], [290, 291], [297, 297], [299, 299], [314, 314], [316, 316], [318, 318], [374, 374], [376, 376], [389, 389], [391, 391], [393, 393], [422, 422], [424, 425], [428, 428], [430, 431], [437, 437], [439, 439], [447, 447], [449, 450], [467, 467], [469, 469], [477, 477], [479, 481], [483, 483], [485, 485], [492, 492], [494, 494], [496, 496], [515, 516], [522, 522], [566, 566]], "path" = "examples/langgraph-agent/agent.ipynb"}, {"head_lines" = [[1, 162]], "path" = "graphiti_core/llm_client/openai_generic_client.py"}], "head" = "9f3dd5552a611b7c329e3c1c7d1254102ad2e40a", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "dab3a6224761b407fc4a9afba5210bc63405b851", "files" = [{"head_lines" = [[2, 2], [14, 14], [20, 20], [25, 26], [32, 36], [38, 38], [42, 42], [64, 65], [73, 86]], "path" = "core/edges.py"}, {"head_lines" = [[1, 1], [4, 4], [5, 5], [8, 9], [14, 27], [29, 31], [34, 37], [40, 148]], "pat
ecosystem = "pip"
family = "injection"
fix = "7d65d5e77e89a199a62d737634eaa26dbb04d037"
id = "r-a14eb01bc7effae0d90def0e"
instrument = {"bytes" = 464, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "36056ad1413ee20cffdb940fb8afe8cf81d46cca"
license_spdx = "Apache-2.0"
parent = "b10b4889481ec13744243ba22af3ea5f049c2202"
post_cutoff = false
repository = "getzep/graphiti"
slice = 1
url = "https://github.com/getzep/graphiti.git"

[[repository]]
id = "r-a16a93b285a204660610ed39"
private = true
sha256 = "a16a93b285a204660610ed396870f9e60e6cf04f9811421dbb315b39ab921cba"
slice = 1

[[repository]]
id = "r-a449408db68d2d9fd752d5ae"
private = true
sha256 = "a449408db68d2d9fd752d5ae98645bebce2494411a9a311fbb8e530e556cef50"
slice = 1

[[repository]]
advisory = "GHSA-2mm9-c2fx-c7m4"
changes = [{"advisory" = "GHSA-2mm9-c2fx-c7m4", "base" = "0f3211ee77303f8f1c2e40ed5221ed9d8a988d81", "bias" = "Pessimistic lower bound: the flaw may already exist in base, so a delta hook can correctly stay quiet.", "fallback_reasons" = {"size_cap" = 1}, "family" = "output_encoding", "files" = [{"head_lines" = [[5, 5], [10, 10]], "path" = ".eslintignore"}, {"head_lines" = [[8, 8]], "path" = ".eslintrc.js"}, {"head_lines" = [[10, 10]], "path" = ".github/ISSUE_TEMPLATE/bug_report.md"}, {"head_lines" = [[1, 5]], "path" = ".github/ISSUE_TEMPLATE/config.yml"}, {"head_lines" = [[1, 1]], "path" = ".github/workflows/e2e.yml"}, {"head_lines" = [[1, 1], [3, 3], [5, 7], [9, 11], [15, 15], [17, 17], [19, 19], [22, 30]], "path" = ".github/workflows/lint.yml"}, {"head_lines" = [[1, 42]], "path" = ".github/workflows/test.yml"}, {"head_lines" = [[1, 1]], "path" = ".github/workflows/unit.yml"}, {"head_lines" = [[4, 5], [7, 7]], "path" = ".gitignore"}, {"head_lines" = [[1, 73]], "path" = ".vscode/launch.json"}, {"head_lines" = [[1, 47]], "path" = "CHANGELOG.md"}, {"head_lines" = [[20, 20], [39, 39]], "path" = "README.md"}, {"head_lines" = [[1, 12]], "path" = "babel.config.js"}, {"head_lines" = [[1, 1]], "path" = "cypress.json"}, {"head_lines" = [[1, 1]], "path" = "cypress/fixtures/tpl/docs.index.html"}, {"head_lines" = [[1, 1]], "path" = "cypress/integration/routing/fallback.spec.js"}, {"head_lines" = [[1, 1]], "path" = "cypress/integration/search/config.spec.js"}, {"head_lines" = [[1, 1]], "path" = "cypress/integration/sidebar/config.spec.js"}, {"head_lines" = [[1, 1]], "path" = "cypress/live.server.js"}, {"head_lines" = [[1, 1]], "path" = "cypress/plugins/index.js"}, {"head_lines" = [[1, 1]], "path" = "cypress/setup.js"}, {"head_lines" = [], "path" = "cypress/snapshots/sidebar/config.spec.js/sidebar.configurations -- go to #Language-highlight.snap.png"}, {"head_lines" = [], "path" = "cypress/snapshots/sidebar/config.spec.js/sidebar.configurations -- go to #cdnid=compressed-file.snap.png"}, {"head_lines" = [], "path" = "cypress/snapshots/sidebar/config.spec.js/sidebar.configurations -- go to #cdnid=latest-version.snap.png"}, {"head_lines" = [], "path" = "cypress/snapshots/sidebar/config.spec.js/sidebar.configurations -- go to #cdnid=other-cdn.snap.png"}, {"head_lines" = [], "path" = "cypress/snapshots/sidebar/config.spec.js/sidebar.configurations -- go to #cdnid=specific-version.snap.png"}, {"head_lines" = [], "path" = "cypress/snapshots/sidebar/config.spec.js/sidebar.configurations -- go to #configurationid=alias.snap.png"}, {"head_lines" = [], "path" = "cypress/snapshots/sidebar/config.spec.js/sidebar.configurations -- go to #configurationid=auto2top.snap.png"}, {"head_lines" = [], "path" = "cypress/snapshots/sidebar/config.spec.js/sidebar.configurations -- go to #configurationid=autoheader.snap.png"}, {"head_lines" = [], "path" = "cypress/snapshots/sidebar/config.spec.js/sidebar.configurations -- go to #configurationid=basepath.snap.png"}, {"head_lines" = [], "path" = "cypress/snapshots/sidebar/config.spec.js/sidebar.configurations -- go to #configurationid=cornerexternallinktarget.snap.png"}, {"head_lines" = [], "path" = "cypress/snapshots/sidebar/config.spec.js/sidebar.configurations -- go to #configurationid=coverpage.snap.png"}, {"head_lines" = [], "path" = "cypress/snapshots/sidebar/config.spec.js/sidebar.configurations -- go to #configurationid=el.snap.png"}, {"head_lines" = [], "path" = "cypress/snapshots/sidebar/config.spec.js/sidebar.configurations -- go to #configurationid=executescript.snap.png"}, {"head_lines" = [], "path" = "cypress/snapshots/sidebar/config.spec.js/sidebar.configurations -- go to #configurationid=ext.snap.png"}, {"head_lines" = [], "path" = "cypress/snapshots/sidebar/config.spec.js/sidebar.configurations -- go to #configurationid=externallinkrel.snap.png"}, {"head_lines" = [], "path" = "cypress/snapshots/sidebar/config.spec.js/sidebar.configurations -- go to #configurationid=externallinktarget.snap.png"}, {"head_lines" = [], "path" = "cypress/snapshots/sidebar/config.spec.js/sidebar.configurations -- go 
ecosystem = "npm"
family = "output_encoding"
fix = "ff2a66f12752471277fe81a64ad6c4b2c08111fe"
id = "r-a4f5613d52d14462e083e02d"
instrument = {"bytes" = 1683, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "6c13bdb7bdbcc2de4b36906a5e982092e4456d95"
license_spdx = "MIT"
parent = "6c13bdb7bdbcc2de4b36906a5e982092e4456d95"
post_cutoff = false
repository = "docsifyjs/docsify"
slice = 1
url = "https://github.com/docsifyjs/docsify.git"

[[repository]]
id = "r-a7ef71ae8a8fb74ffe91e6de"
private = true
sha256 = "a7ef71ae8a8fb74ffe91e6ded1ec44b9b9e97097124e0ad5456b8d8ced1246d5"
slice = 1

[[repository]]
id = "r-a81bcfeb2dd98ac0715ecf35"
private = true
sha256 = "a81bcfeb2dd98ac0715ecf3567e379f3e99e7bbb930145733eb95a083ffbec83"
slice = 1

[[repository]]
advisory = "GHSA-8wwf-2644-f8x4"
changes = [{"advisory" = "GHSA-8wwf-2644-f8x4", "base" = "a4c391096aa9f6f3e7e2b5536deae9830097b728", "bias" = "Pessimistic lower bound: the flaw may already exist in base, so a delta hook can correctly stay quiet.", "fallback_reasons" = {"size_cap" = 2}, "family" = "path", "files" = [{"head_lines" = [[1, 11]], "path" = ".editorconfig"}, {"head_lines" = [[1, 34]], "path" = ".github/ISSUE_TEMPLATE.md"}, {"head_lines" = [[1, 49]], "path" = ".github/workflows/test.yml"}, {"head_lines" = [[1, 1]], "path" = ".travis.yml"}, {"head_lines" = [[26, 61]], "path" = "CONTRIBUTING.md"}, {"head_lines" = [[4, 4]], "path" = "LICENSE.md"}, {"head_lines" = [[2, 2]], "path" = "MANIFEST.in"}, {"head_lines" = [[1, 1], [3, 5], [6, 6], [8, 12], [58, 58], [79, 80], [94, 106], [109, 109], [113, 128], [130, 130], [132, 132], [135, 138], [140, 140], [143, 143], [146, 146], [148, 150], [153, 153], [155, 155], [160, 173], [175, 175], [177, 177], [180, 180], [183, 183], [187, 189], [191, 194], [197, 197], [199, 199], [202, 203], [205, 206], [213, 213], [215, 215], [217, 217], [220, 223], [225, 226], [229, 232], [235, 240], [244, 244], [246, 246], [248, 258], [260, 266], [269, 269], [272, 273], [277, 280], [285, 286], [288, 291], [294, 296], [298, 301], [303, 303], [305, 310], [315, 315], [318, 318], [325, 325], [327, 334], [336, 336], [340, 343], [345, 347], [349, 360], [363, 364], [367, 368], [375, 375], [380, 383], [384, 384], [386, 387], [389, 392], [396, 397], [418, 419], [422, 423], [425, 425], [431, 437], [439, 439], [449, 452], [458, 458], [464, 470], [481, 482], [485, 485], [487, 487], [489, 501], [504, 504], [506, 506], [508, 508], [510, 516], [518, 521], [524, 524], [527, 532], [535, 549]], "path" = "README.md"}, {"head_lines" = [], "path" = "example_instant_mode.gif"}, {"head_lines" = [[1, 110]], "path" = "fastentrypoints.py"}, {"head_lines" = [[3, 4]], "path" = "install.sh"}, {"head_lines" = [[35, 37]], "path" = "release.py"}, {"head_lines" = [[1, 1], [11, 11]], "path" = "requirements.txt"}, {"head_lines" = [[3, 3], [6, 15], [29, 30], [34, 34], [36, 40], [51, 51], [57, 58]], "path" = "setup.py"}, {"head_lines" = [[1, 25]], "path" = "snapcraft.yaml"}, {"head_lines" = [[1, 1], [3, 11], [15, 15], [30, 30], [49, 49], [57, 73]], "path" = "tests/conftest.py"}, {"head_lines" = [], "path" = "tests/entrypoints/__init__.py"}, {"head_lines" = [[1, 30]], "path" = "tests/entrypoints/test_alias.py"}, {"head_lines" = [[1, 26]], "path" = "tests/entrypoints/test_fix_command.py"}, {"head_lines" = [[1, 140]], "path" = "tests/entrypoints/test_not_configured.py"}, {"head_lines" = [[83, 83]], "path" = "tests/functional/plots.py"}, {"head_lines" = [[6, 37], [42, 42], [44, 44], [48, 48], [50, 50], [54, 54], [56, 56], [60, 60], [62, 62], [65, 65], [67, 67]], "path" = "tests/functional/test_bash.py"}, {"head_lines" = [[5, 9], [10, 10], [13, 17], [18, 18], [24, 24], [27, 27], [33, 33], [38, 38], [43, 43], [48, 48]], "path" = "tests/functional/test_fish.py"}, {"head_lines" = [[1, 1]], "path" = "tests/functional/test_install.py"}, {"head_lines" = [[1, 1]], "path" = "tests/functional/test_performance.py"}, {"head_lines" = [[5, 6], [7, 7], [10, 11], [12, 12], [18, 18], [20, 21], [23, 23], [28, 28], [33, 33], [38, 38], [43, 43]], "path" = "tests/functional/test_tcsh.py"}, {"head_lines" = [[6, 44], [48, 48], [54, 54], [60, 60], [66, 66], [72, 72], [74, 74]], "path" = "tests/functional/test_zsh.py"}, {"head_lines" = [[1, 58]], "path" = "tests/output_readers/test_rerun.py"}, {"head_lines" = [[1, 1]], "path" = "tests/rules/conftest.py"}, {"head_lines" = [[1, 41]], "path" = "tests/rules/test_adb_unknown_command.py"}, {"head_lines" = [[1, 25]], "path" = "tests/rules/test_ag_literal.py"}, {"head_lines" = [[1, 1], [3, 3], [6, 7], [9, 11], [13, 16], [18, 18], [19, 19], [21, 33], [35, 35], [38, 39], [41, 41], [44, 44], [46, 46], [49, 52]], "path" = "tests/rules/test_apt_get.py"}, {"head_lines" = [[3, 3], [7, 7], [11, 18], [25, 26]], "path" = "tests/rules/test_apt_get_search.py"}, {"head_lines" = [[1, 164]], "path" = "tests/rules/test_apt_invalid_operation.py"}, {"head_lines" = [[
ecosystem = "pip"
family = "path"
fix = "e343c577cd7da4d304b837d4a07ab4df1e023092"
id = "r-ad7b2a0fe2ee17390e143a6e"
instrument = {"bytes" = 3952, "files" = 1}
license_class = "permissive"
license_path = "LICENSE.md"
license_ref = "6da0bc557f0fd94ea1397d3a7f508be896cc98d8"
license_spdx = "MIT"
parent = "6da0bc557f0fd94ea1397d3a7f508be896cc98d8"
post_cutoff = false
repository = "nvbn/thefuck"
slice = 1
url = "https://github.com/nvbn/thefuck.git"

[[repository]]
id = "r-b622f3e78cee3f688317fe40"
private = true
sha256 = "b622f3e78cee3f688317fe4079e1240dfb67574519470365d66ffa73b684e542"
slice = 1

[[repository]]
advisory = "GHSA-c3h8-g69v-pjrg"
changes = [{"advisory" = "GHSA-c3h8-g69v-pjrg", "base" = "63a80fe70465806cab34d876957902b2f4398f2d", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {"unresolved_function" = 1}, "family" = "output_encoding", "files" = [{"head_lines" = [[5, 6]], "path" = ".eslintignore"}, {"head_lines" = [[1, 25]], "path" = ".github/workflows/deno.yml"}, {"head_lines" = [[1, 24]], "path" = ".github/workflows/node.yml"}, {"head_lines" = [[1, 1]], "path" = ".github/workflows/test.yml"}, {"head_lines" = [[3, 4], [5, 5]], "path" = "README.md"}, {"head_lines" = [[37, 37]], "path" = "example/deno/index.js"}, {"head_lines" = [[27, 27], [34, 34], [56, 56], [70, 70], [80, 80]], "path" = "lib/httpFunctions.js"}, {"head_lines" = [[7, 16], [20, 22], [105, 107], [116, 116], [137, 137], [139, 140], [147, 149], [158, 175], [178, 178]], "path" = "lib/index.js"}, {"head_lines" = [[61, 61]], "path" = "package.json"}, {"head_lines" = [[1, 45]], "path" = "test/deno/addRoute.abc.js"}, {"head_lines" = [[1, 36]], "path" = "test/deno/getResourcesHandler.abc.js"}, {"head_lines" = [[1, 44]], "path" = "test/deno/middleware.abc.js"}, {"head_lines" = [[1, 36]], "path" = "test/deno/missingKeyHandler.abc.js"}, {"head_lines" = [[23, 24]], "path" = "test/missingKeyHandler.custom.js"}, {"head_lines" = [[24, 24], [27, 28]], "path" = "test/missingKeyHandler.express.js"}, {"head_lines" = [[16, 16], [19, 21]], "path" = "test/missingKeyHandler.fastify.js"}], "function" = "getBody", "function_lines" = [158, 172], "head" = "d77fa7fc8e4b32fe7f16bbb1f55a032b3a956a13", "kind" = "vulnerability", "method" = "introducing", "path" = "lib/index.js", "post_cutoff" = false}, {"base" = "3626323c3e20361f31d73303091db9e893127218", "files" = [{"head_lines" = [[1, 3]], "path" = "CHANGELOG.md"}, {"head_lines" = [[129, 129], [134, 134]], "path" = "lib/index.js"}], "head" = "3bb0dcedb2c0118abb3abce993607a8f716cc0b9", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "3930b3d61d49684581da9f8e8450c47b7cc7a2b7", "files" = [{"head_lines" = [[12, 13]], "path" = "example/basic-locize/package.json"}, {"head_lines" = [[20, 20]], "path" = "example/basic-pug/index.js"}, {"head_lines" = [[12, 12]], "path" = "example/basic-pug/package.json"}, {"head_lines" = [[12, 13]], "path" = "example/basic/package.json"}, {"head_lines" = [[13, 15]], "path" = "example/fastify-pug/package.json"}, {"head_lines" = [[12, 14]], "path" = "example/fastify/package.json"}, {"head_lines" = [[23, 27], [29, 29], [36, 37], [39, 40]], "path" = "package.json"}], "head" = "8b6d7faf6d79911e2e153074cfd6184adb4be7eb", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "a527a8aa6affbfdeafae9c172287f3f0437a9d61", "files" = [{"head_lines" = [[8, 8], [38, 38]], "path" = "test/languageDetector.js"}], "head" = "0ecb06a5c9319e1d3b69ebf89a2fc8f226a1de3c", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "aeb8ca775783d3a0bb7976a0cadfe359cadab39a", "files" = [{"head_lines" = [[1, 3]], "path" = "CHANGELOG.md"}, {"head_lines" = [[25, 25]], "path" = "lib/httpFunctions.js"}], "head" = "0a762997017e7a14949463417bb50814dafb4754", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "36ed8d94d2bc67c3adf23fcecfa360c24d37d945", "files" = [{"head_lines" = [[32, 32]], "path" = "example/deno/index.js"}], "head" = "8e05560bbe6778b30e8d42e6d968a94ad70ebeff", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "113ed2f4238deb8f61977605ee05d590c0bc537e", "files" = [{"head_lines" = [[11, 29], [32, 32], [36, 38]], "path" = "example/basic/index.js"}, {"head_lines" = [[11, 14]], "path" = "example/basic/package.json"}], "head" = "40fda3719079f3f2c3d17d0fb3bc7f061def81d2", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "6a9b09c6bdd2fa25cd6ac1510c09e3c10413bd63", "files" = [{"head_lines" = [[23, 25], [32, 38], [
ecosystem = "npm"
family = "output_encoding"
fix = "65301c194593d46a84623b64e5fde2f51d3550f6"
id = "r-b70ddad3082d56f79cfea87d"
instrument = {"bytes" = 755, "files" = 1}
license_class = "permissive"
license_path = "licence"
license_ref = "d77fa7fc8e4b32fe7f16bbb1f55a032b3a956a13"
license_spdx = "MIT"
parent = "a1d92a8f03292644d1c6fa83f1b77121d39daf4d"
post_cutoff = false
repository = "i18next/i18next-http-middleware"
slice = 1
url = "https://github.com/i18next/i18next-http-middleware.git"

[[repository]]
id = "r-b91db3bd59167843b2c54d36"
private = true
sha256 = "b91db3bd59167843b2c54d36ce04ab9fefce058fd0231363b004a8d767493ceb"
slice = 1

[[repository]]
advisory = "GHSA-c27g-q93r-2cwf"
changes = [{"advisory" = "GHSA-c27g-q93r-2cwf", "base" = "5541bdedc254a43c47525a8e2a6923c85392c42b", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "injection", "files" = [{"head_lines" = [[110, 110]], "path" = "packages/launch-editor/index.js"}], "function" = "launchEditor", "function_lines" = [64, 170], "head" = "033271cfa9f257c62721604fa424c7614c7bb9da", "kind" = "vulnerability", "method" = "introducing", "path" = "packages/launch-editor/index.js", "post_cutoff" = true}, {"base" = "4f18afdfeca4b2a5e7b407c5e1644e612f729b72", "files" = [{"head_lines" = [[10, 10]], "path" = "packages/launch-editor/editor-info/linux.js"}], "head" = "9a439cfcd5f33194006e39210bb211dfc5d14ea4", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "cf575715fd5bc01a78c71f7bcd703e5a942748e7", "files" = [{"head_lines" = [[14, 14], [24, 24], [31, 31]], "path" = "packages/launch-editor/index.js"}, {"head_lines" = [[21, 21]], "path" = "packages/launch-editor/package.json"}, {"head_lines" = [[221, 221], [1801, 1805]], "path" = "yarn.lock"}], "head" = "f12462868e9956070192f476095c3a8645c982a1", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "fbec6cbe28a8739f71625c26f5bc40e83bb966fd", "files" = [{"head_lines" = [[21, 25], [58, 60]], "path" = "packages/launch-editor/guess.js"}], "head" = "33d606532e697da9cd8b75f016c04b88eabfb9f2", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "a29f564a949b787b7338099fe0de66c56fbbb5e1", "files" = [{"head_lines" = [[5, 7], [9, 9], [16, 18]], "path" = "packages/launch-editor/editor-info/linux.js"}, {"head_lines" = [[17, 17], [33, 38]], "path" = "packages/launch-editor/editor-info/osx.js"}, {"head_lines" = [[4, 5], [20, 24]], "path" = "packages/launch-editor/editor-info/windows.js"}, {"head_lines" = [[22, 22], [27, 27], [36, 36], [38, 39], [41, 42], [57, 60]], "path" = "packages/launch-editor/get-args.js"}], "head" = "55e3f2ec6342e250001e27b268c1b13385867004", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 1}, {"base" = "09f91fcf6a7b45464f0641c444d908a25f484e13", "files" = [{"head_lines" = [[1, 38]], "path" = ".github/workflows/publish.yml"}, {"head_lines" = [[1, 92]], "path" = "MAINTENANCE.md"}, {"head_lines" = [[1, 8]], "path" = "bump.config.mjs"}, {"head_lines" = [[6, 6], [11, 11]], "path" = "package.json"}, {"head_lines" = [[14, 16], [19, 19], [105, 107], [173, 175], [182, 190], [282, 284], [364, 372], [501, 504], [525, 527], [648, 650], [677, 680], [699, 701], [722, 726], [808, 815], [820, 825], [845, 849], [860, 860], [862, 862], [917, 920], [966, 967], [975, 988], [1074, 1075], [1095, 1095], [1097, 1097], [1132, 1133], [1175, 1178], [1280, 1281], [1299, 1300], [1464, 1465], [1485, 1486], [1500, 1501], [1519, 1520], [1586, 1592], [1597, 1609], [1626, 1627]], "path" = "pnpm-lock.yaml"}], "head" = "c63b5b13bee21a1f1209bc29d487f07cebfb5391", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 2}, {"base" = "5ad87f680410710e261f4acdaddecaa808312029", "files" = [{"head_lines" = [[24, 27]], "path" = "packages/launch-editor/editor-info/osx.js"}], "head" = "633b2b0da3aefa5eab14159bd3a64d6db8f143c6", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 2}, {"base" = "f47b0040254afc01df76c60ef4c844474434623b", "files" = [{"head_lines" = [[10, 10], [12, 12], [14, 14], [16, 16], [20, 20], [22, 22], [24, 24]], "path" = "packages/launch-editor/editor-info/linux.js"}], "head" = "a8bc91afa2e9b3bc8396f0c4d2c449d807167cdd", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 2}, {"base" = "0de38964058db8c8f89babc12ed463586390358e", "files" = [{"head_lines" = [[8, 8]], "path" = "packages/launch-editor/editor-info/linux.js"}], "head" = "05b19a999fbc9c0b8d0f59af3ea16bf15ca31b00", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 2}, {"ba
ecosystem = "npm"
family = "injection"
fix = "971291e8a6a91226e1616c5c0ec85423d2d50a5e"
id = "r-bd1aeda0f94d4a9b11c4ba96"
instrument = {"bytes" = 433, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "033271cfa9f257c62721604fa424c7614c7bb9da"
license_spdx = "MIT"
parent = "a8bc91afa2e9b3bc8396f0c4d2c449d807167cdd"
post_cutoff = true
repository = "vitejs/launch-editor"
slice = 1
url = "https://github.com/vitejs/launch-editor.git"

[[repository]]
id = "r-bd321acd878096c651bdfa51"
private = true
sha256 = "bd321acd878096c651bdfa515ad2c3c1c6aba51dbdf36fb687409fdf76895d51"
slice = 1

[[repository]]
advisory = "GHSA-6fv3-w7j6-5xfc"
changes = [{"advisory" = "GHSA-6fv3-w7j6-5xfc", "base" = "8334effb2da1fb7003e3bf93f02762d5af7602e3", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {"size_cap" = 2, "unresolved_function" = 1}, "family" = "config_secrets", "files" = [{"head_lines" = [[25, 25], [31, 31], [34, 34], [38, 38], [41, 41], [46, 46], [49, 49], [54, 54]], "path" = "src/main/java/org/jenkinsci/plugins/sonargerrit/config/AuthenticationConfig.java"}, {"head_lines" = [[31, 34]], "path" = "src/main/java/org/jenkinsci/plugins/sonargerrit/filter/predicates/ByChangedLinesPredicate.java"}, {"head_lines" = [[46, 46], [53, 53], [67, 67], [90, 90], [97, 97], [104, 104], [111, 111], [128, 128], [135, 135], [142, 142], [149, 149], [166, 166], [181, 181]], "path" = "src/test/java/org/jenkinsci/plugins/sonargerrit/config/NullValuesTest.java"}, {"head_lines" = [[1, 1]], "path" = "src/test/java/org/jenkinsci/plugins/sonargerrit/inspection/sonarqube/ChangedFilesTest.java"}, {"head_lines" = [[1, 150]], "path" = "src/test/java/org/jenkinsci/plugins/sonargerrit/inspection/sonarqube/CustomProjectPathAndFilePredicateMatchTest.java"}, {"head_lines" = [[1, 39]], "path" = "src/test/java/org/jenkinsci/plugins/sonargerrit/inspection/sonarqube/ProjectPathToGerritChangedLinesMatchTest.java"}, {"head_lines" = [[1, 63]], "path" = "src/test/java/org/jenkinsci/plugins/sonargerrit/inspection/sonarqube/ProjectPathToGerritFilenameMatchTest.java"}], "function" = "setPassword", "function_lines" = [54, 56], "head" = "be36d7871d41dfdaea987d5218aaa662a0fb1f06", "kind" = "vulnerability", "method" = "introducing", "path" = "src/main/java/org/jenkinsci/plugins/sonargerrit/config/AuthenticationConfig.java", "post_cutoff" = false}, {"base" = "9e4066084a7aff3b8dd0e74aa4a4c5481f11eacb", "files" = [{"head_lines" = [[28, 28], [30, 30], [43, 43], [52, 53]], "path" = "src/main/java/com/aquarellian/genar/data/converter/BasicIssueFormatter.java"}], "head" = "4f9d0233ab8ea70de8ad438d988e3b932c85e68c", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "618e4da57011314dcff1ca27718d4acac8b492c7", "files" = [{"head_lines" = [[14, 14], [84, 84]], "path" = "pom.xml"}, {"head_lines" = [], "path" = "sonar-gerrit.hpi"}, {"head_lines" = [], "path" = "sonar-gerrit_test.hpi"}, {"head_lines" = [[1, 1]], "path" = "src/main/java/org/jenkinsci/plugins/sonargerrit/SonarGerritPlugin.java"}], "head" = "c81fdbadc4496f52b99e0e571ac01d5eaa59c81f", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "8e8600c5bbb639a299301242a7065e9a89429cf9", "files" = [{"head_lines" = [], "path" = "genar.hpi"}, {"head_lines" = [[4, 4], [55, 55], [80, 82], [86, 88], [91, 93], [96, 103], [118, 120], [129, 136], [142, 148], [156, 158]], "path" = "src/main/java/com/aquarellian/genar/jenkins/SonarToGerritBuilder.java"}], "head" = "5f7d08bb05b7ffe79816bb3ed6847e9fb366a30a", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "4da653dd3faf6161d5dac13db4092133acde7865", "files" = [{"head_lines" = [[23, 23], [34, 39]], "path" = "genar/genar/pom.xml"}, {"head_lines" = [[3, 3], [12, 12], [14, 14], [16, 16], [18, 18], [28, 35], [43, 46], [48, 53], [55, 55], [64, 65], [74, 75]], "path" = "genar/genar/src/main/java/com/aquarellian/genar/data/entity/Component.java"}, {"head_lines" = [[21, 21], [26, 26], [43, 43], [55, 56]], "path" = "genar/genar/src/main/java/com/aquarellian/genar/data/entity/Issue.java"}, {"head_lines" = [[1, 104]], "path" = "genar/genar/src/test/java/com/aquarellian/genar/data/SonarReportBuilderTest.java"}, {"head_lines" = [[1, 3087]], "path" = "genar/genar/src/test/resources/example.json"}, {"head_lines" = [[1, 39]], "path" = "genar/genar/src/test/resources/test.json"}, {"head_lines" = [], "path" = "genar/genar/target/classes/com/aquarellian/genar/data/entity/Component.class"}, {"head_lines" = [], "path" = "genar/genar/target/classes/com/aquarellian/genar/data/entity/Issue.class"}], "head" = "070d6732ed4d3161379
ecosystem = "maven"
family = "config_secrets"
fix = "d86de84131660051de7a90195478761b7d087630"
id = "r-bd3753caecd490c6076be6fe"
instrument = {"bytes" = 18419, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "be36d7871d41dfdaea987d5218aaa662a0fb1f06"
license_spdx = "MIT"
parent = "3219b25569bcced57aa5b42c722d148866c383d2"
post_cutoff = false
repository = "jenkinsci/sonar-gerrit-plugin"
slice = 1
url = "https://github.com/jenkinsci/sonar-gerrit-plugin.git"

[[repository]]
id = "r-bf5c6d19d787d8055f9bd535"
private = true
sha256 = "bf5c6d19d787d8055f9bd5356eb509661a7856a282a3b3ad6201738e4fb744d3"
slice = 1

[[repository]]
id = "r-bfdc98bfd69e8ad7d666cdfa"
private = true
sha256 = "bfdc98bfd69e8ad7d666cdfa02f708935f83732968c99f1e65c383e8aacb66c6"
slice = 1

[[repository]]
advisory = "GHSA-7r3h-m5j6-3q42"
changes = [{"advisory" = "GHSA-7r3h-m5j6-3q42", "base" = "da34bfb74d2827749824ce21f0d3d74a412d7fbf", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "injection", "files" = [{"head_lines" = [[9, 9], [127, 128], [133, 196]], "path" = "docs/commands.md"}, {"head_lines" = [[1, 1], [24, 28], [32, 38], [40, 40], [42, 42], [46, 46], [51, 51], [59, 59], [65, 65], [70, 70], [75, 104], [111, 120], [310, 327]], "path" = "packages/core/__tests__/core.test.ts"}, {"head_lines" = [[2, 2], [79, 79]], "path" = "packages/core/src/command.ts"}, {"head_lines" = [[1, 3], [44, 52], [68, 73]], "path" = "packages/core/src/core.ts"}, {"head_lines" = [[1, 24]], "path" = "packages/core/src/file-command.ts"}, {"head_lines" = [[1, 15]], "path" = "packages/core/src/utils.ts"}], "function" = "toCommandValue", "function_lines" = [42, 50], "head" = "0759cdc2309acfd91b6503597dcfa02a3cee99d0", "kind" = "vulnerability", "method" = "introducing", "path" = "packages/core/src/core.ts", "post_cutoff" = false}, {"base" = "5b940ebda7e7b86545fe9741903c930bc1191eb0", "files" = [{"head_lines" = [[8, 8]], "path" = ".eslintrc.json"}, {"head_lines" = [[3889, 3894], [3952, 3957], [4010, 4023], [4036, 4038], [4041, 4127], [4176, 4177], [6675, 6709]], "path" = "package-lock.json"}, {"head_lines" = [[19, 19]], "path" = "package.json"}, {"head_lines" = [[14, 14]], "path" = "packages/github/__tests__/github.test.ts"}, {"head_lines" = [[1, 6]], "path" = "tsconfig.eslint.json"}], "head" = "3c125ce4e0d4893c10c4093562d27eafbca595c5", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "e7914df1c693604a029b58f24b5a77e8ffad3272", "files" = [{"head_lines" = [[229, 229], [231, 231]], "path" = "packages/io/src/io.ts"}], "head" = "7d605994f9106dc6b25c5cf78ad172256cc8428d", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "09e59b9a5c98f9f11f768b0a262f05be859ea49a", "files" = [{"head_lines" = [[475, 475], [477, 477], [517, 517], [655, 660], [670, 680]], "path" = "packages/tool-cache/src/tool-cache.ts"}], "head" = "1c367e0a268083c64ff9a70e122cbd61f8d741c6", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "fecf6cdd59adb3ba017ac8b9814d04fa75d50b3c", "files" = [{"head_lines" = [[541, 556]], "path" = "packages/exec/__tests__/exec.test.ts"}, {"head_lines" = [[417, 417], [436, 439]], "path" = "packages/exec/src/toolrunner.ts"}], "head" = "09e59b9a5c98f9f11f768b0a262f05be859ea49a", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "c9af6bb1b3ae4728501b2b1ae42adcf3c3888977", "files" = [{"head_lines" = [[1, 126]], "path" = "packages/glob/__tests__/hash-files.test.ts"}, {"head_lines" = [[3, 4], [20, 37]], "path" = "packages/glob/src/glob.ts"}, {"head_lines" = [[1, 12]], "path" = "packages/glob/src/internal-hash-file-options.ts"}, {"head_lines" = [[1, 42]], "path" = "packages/glob/src/internal-hash-files.ts"}], "head" = "c5e1af5dc3cce694ff27128f2bd846c46a4557cf", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "4381229e809d4576a00da17380bd85f8f5812f87", "files" = [{"head_lines" = [[1, 2], [6, 12], [14, 23], [25, 28], [30, 30], [32, 43], [45, 48]], "path" = "packages/toolkit/__tests__/toolkit.test.ts"}, {"head_lines" = [[6, 22], [33, 34], [47, 47], [52, 52], [59, 83], [85, 85]], "path" = "packages/toolkit/src/toolkit.ts"}], "head" = "4e7d45abe0ccaae463195e7d929007e1ecdd1120", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "73d5917a6b5ea646ac3173cfceb727ee914ff6ed", "files" = [{"head_lines" = [[53, 56]], "path" = "packages/artifact/RELEASES.md"}, {"head_lines" = [[74, 74], [116, 116]], "path" = "packages/artifact/__tests__/download.test.ts"}, {"head_lines" = [[1, 114]], "path" = "packages/artifact/__tests__/retry.test.ts"}, {"head_lines" = [[105, 105], [128, 128], [365, 367]], "path" = "packages/artifact/__tests__/u
ecosystem = "npm"
family = "injection"
fix = "4beda9cbc00ba6eefe387a937c21087ccb8ee9df"
id = "r-c2bfb6d165474dbf26da099a"
instrument = {"bytes" = 242, "files" = 1}
license_class = "permissive"
license_path = "LICENSE.md"
license_ref = "0759cdc2309acfd91b6503597dcfa02a3cee99d0"
license_spdx = "MIT"
parent = "90be12a59c20a6ecc43b234c1885fc2852d3212d"
post_cutoff = false
repository = "actions/toolkit"
slice = 1
url = "https://github.com/actions/toolkit.git"

[[repository]]
advisory = "GHSA-xvq9-wjp8-hwqf"
changes = [{"advisory" = "GHSA-xvq9-wjp8-hwqf", "base" = "64c110597cfe008d50c9e744e4718124eef3b11e", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "untrusted_destination", "files" = [{"head_lines" = [[1, 4]], "path" = "CHANGELOG.md"}, {"head_lines" = [[17, 17], [23, 23]], "path" = "i18nextHttpBackend.js"}, {"head_lines" = [[1, 1]], "path" = "i18nextHttpBackend.min.js"}, {"head_lines" = [[23, 25], [34, 35], [41, 41], [44, 45], [48, 48], [52, 52], [54, 61]], "path" = "lib/utils.js"}, {"head_lines" = [[47, 48], [52, 53], [63, 63]], "path" = "test/security.spec.js"}], "function" = "isSafeUrlSegmentBase", "function_lines" = [11, 20], "head" = "2b2e771b0103fb7e90c9beba9ac285cec7839bd3", "kind" = "vulnerability", "method" = "introducing", "path" = "i18nextHttpBackend.js", "post_cutoff" = true}, {"base" = "b32668586cdb44165fea2120d29966c8acd46abf", "files" = [{"head_lines" = [[81, 81]], "path" = "index.d.ts"}], "head" = "7e06806e53bd2ae091c3a9530a7f6b7bebe43e54", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "8b561e0eaeb32456262f7b763bc1ac3826ee15e7", "files" = [{"head_lines" = [[3, 3], [24, 24]], "path" = "test/deno/fixtures/server.js"}], "head" = "ae169767fe25706fcffc231af5968abf46d103da", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "42c024bd041ab00860a7cd14457c2e14e4811c3b", "files" = [{"head_lines" = [[67, 67], [77, 81], [92, 93]], "path" = "index.d.ts"}], "head" = "2f285af7e4569a612cc84c8ab8d2b3f00e194481", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "63638aa9d2455913584264a29304ee95f5798663", "files" = [{"head_lines" = [[11, 15], [18, 21], [24, 24]], "path" = "example/vue/package.json"}, {"head_lines" = [[16, 16]], "path" = "example/vue/src/Suspenser.vue"}, {"head_lines" = [[5, 5], [7, 7]], "path" = "example/vue/src/components/TranslationShowCase.vue"}, {"head_lines" = [[73, 73]], "path" = "example/vue/src/vue-i18next.js"}], "head" = "2365cbb69b1706455a142ace089279d0af54681d", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "5d27e51f1d49c95ac28d807e340e316cf66ad9af", "files" = [{"head_lines" = [[1, 23]], "path" = "example/node/app.js"}, {"head_lines" = [[1, 3]], "path" = "example/node/locales/de/translation.json"}, {"head_lines" = [[1, 3]], "path" = "example/node/locales/en/translation.json"}, {"head_lines" = [[1, 10]], "path" = "example/node/package.json"}], "head" = "d41a46bbf318d783647eb4636112f5fac2172495", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "cee078351981136efad503cdac3b86b935ee2955", "files" = [{"head_lines" = [[1, 23]], "path" = "example/vue/.gitignore"}, {"head_lines" = [[1, 24]], "path" = "example/vue/README.md"}, {"head_lines" = [[1, 5]], "path" = "example/vue/babel.config.js"}, {"head_lines" = [[1, 45]], "path" = "example/vue/package.json"}, {"head_lines" = [], "path" = "example/vue/public/favicon.ico"}, {"head_lines" = [[1, 17]], "path" = "example/vue/public/index.html"}, {"head_lines" = [[1, 5]], "path" = "example/vue/public/locales/de/translation.json"}, {"head_lines" = [[1, 5]], "path" = "example/vue/public/locales/en/translation.json"}, {"head_lines" = [[1, 33]], "path" = "example/vue/src/App.vue"}, {"head_lines" = [[1, 24]], "path" = "example/vue/src/Suspenser.vue"}, {"head_lines" = [], "path" = "example/vue/src/assets/logo.png"}, {"head_lines" = [[1, 65]], "path" = "example/vue/src/components/TranslationShowCase.vue"}, {"head_lines" = [[1, 19]], "path" = "example/vue/src/i18n.js"}, {"head_lines" = [[1, 5]], "path" = "example/vue/src/main.js"}, {"head_lines" = [[1, 147]], "path" = "example/vue/src/vue-i18next.js"}], "head" = "212e1a69b5b14b41d4e1246a244b5a5b9b843db9", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "5a620505c1f767e37490bb45001b06934d004f57", "files" = [{"head_lines" = [[1, 63]
ecosystem = "npm"
family = "untrusted_destination"
fix = "07e028862b25d0b9251bf3cafb92be2d35285f85"
id = "r-c34066ecde40533e2a73c5c4"
instrument = {"bytes" = 566, "files" = 1}
license_class = "permissive"
license_path = "licence"
license_ref = "2b2e771b0103fb7e90c9beba9ac285cec7839bd3"
license_spdx = "MIT"
parent = "08cb05d3ef8396cb74ab9d6885f4c3ddb43bfbf3"
post_cutoff = true
repository = "i18next/i18next-http-backend"
slice = 1
url = "https://github.com/i18next/i18next-http-backend.git"

[[repository]]
advisory = "GHSA-723p-9rcj-xv8j"
changes = [{"advisory" = "GHSA-723p-9rcj-xv8j", "base" = "928cda412be9587cb30e09bddad8029e217599dc", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "deserialization", "files" = [{"head_lines" = [[22, 33]], "path" = "pom.xml"}, {"head_lines" = [[1, 9]], "path" = "src/main/java/org/jenkinsci/plugins/radargun/config/NodeConfigParser.java"}, {"head_lines" = [[1, 43]], "path" = "src/main/java/org/jenkinsci/plugins/radargun/config/YamlNodeConfigParser.java"}, {"head_lines" = [[3, 4], [7, 9], [12, 12], [18, 18], [21, 21], [40, 47], [53, 57]], "path" = "src/main/java/org/jenkinsci/plugins/radargun/model/impl/Node.java"}, {"head_lines" = [[3, 4], [21, 22]], "path" = "src/main/java/org/jenkinsci/plugins/radargun/util/ParseUtils.java"}, {"head_lines" = [[1, 43]], "path" = "src/test/java/org/jenkinsci/plugins/radargun/config/YamlNodeConfigParserTest.java"}, {"head_lines" = [[1, 10]], "path" = "src/test/resources/testNodeConfig.yaml"}], "function" = "YamlNodeConfigParser", "function_lines" = [15, 17], "head" = "ccf710e1dd0910776b654a674e5c54d86c4c84a4", "kind" = "vulnerability", "method" = "introducing", "path" = "src/main/java/org/jenkinsci/plugins/radargun/config/YamlNodeConfigParser.java", "post_cutoff" = false}, {"base" = "092004eccaf29ab725104c8a679cbb74504625ad", "files" = [{"head_lines" = [[50, 50]], "path" = "src/test/java/org/jenkinsci/plugins/radargun/model/impl/NodeTest.java"}], "head" = "60ae14b9c291d3410d264cd73c47e6b80a90a5e2", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "fea3dcf0e18d975e32fd66d145dee946610a29a8", "files" = [{"head_lines" = [[150, 151]], "path" = "src/main/java/org/jenkinsci/plugins/radargun/RadarGunBuilder.java"}], "head" = "f16501a3dd2156600b9d6de275dd6c7ea1537698", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "c043cf1449c8d30ef11a0d220fc17985b78858b2", "files" = [{"head_lines" = [[5, 5]], "path" = "CHANGELOG.adoc"}, {"head_lines" = [[5, 5], [98, 98]], "path" = "src/main/java/org/jenkinsci/plugins/radargun/config/ScriptSource.java"}], "head" = "3d822e566a05ad09e468c798209252ba61439c29", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "b17653b8f2fc2040c3d28c8c20d9b15dc67214d5", "files" = [{"head_lines" = [[133, 133]], "path" = "src/main/java/org/jenkinsci/plugins/radargun/RadarGunBuilder.java"}, {"head_lines" = [[5, 5], [8, 8], [28, 28], [30, 30], [34, 34]], "path" = "src/main/java/org/jenkinsci/plugins/radargun/config/FileNodeConfigSource.java"}, {"head_lines" = [[9, 9], [23, 23]], "path" = "src/main/java/org/jenkinsci/plugins/radargun/config/NodeConfigSource.java"}, {"head_lines" = [[5, 5], [25, 25]], "path" = "src/main/java/org/jenkinsci/plugins/radargun/config/TextNodeConfigSource.java"}], "head" = "0429f7fa20217b79c5e834378254c09b98811618", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "665aabb34bdfd11fd40dd6427f5333404a5444ce", "files" = [{"head_lines" = [[8, 9], [13, 14], [30, 30], [36, 36], [38, 38], [40, 40]], "path" = "src/main/java/org/jenkinsci/plugins/radargun/NodeRunner.java"}, {"head_lines" = [[3, 3], [26, 27], [40, 41], [119, 119], [130, 131]], "path" = "src/main/java/org/jenkinsci/plugins/radargun/RadarGunBuilder.java"}], "head" = "e4a6c434f04a0196d6cc72469b2790998ed2a495", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "8cbef4365d2a87dcd12e4c8e466c7ae49cd7a9d0", "files" = [{"head_lines" = [[96, 98], [102, 102]], "path" = "src/main/java/org/jenkinsci/plugins/radargun/RadarGunBuilder.java"}, {"head_lines" = [[48, 49], [51, 51], [54, 54], [56, 56]], "path" = "src/main/java/org/jenkinsci/plugins/radargun/config/ScriptSource.java"}, {"head_lines" = [[9, 9]], "path" = "src/main/resources/scripts/start_slave.sh"}], "head" = "665aabb34bdfd11fd40dd6427f5333404a5444ce", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time
ecosystem = "maven"
family = "deserialization"
fix = "63aba3b31d1a8ea140f26923eb48a25ef7f87e87"
id = "r-c35315360cbb854a6547b432"
instrument = {"bytes" = 1483, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "ccf710e1dd0910776b654a674e5c54d86c4c84a4"
license_spdx = "MIT"
parent = "40af49b5ce9d3c9be20320f7fc09ec2656837f4d"
post_cutoff = false
repository = "jenkinsci/radargun-plugin"
slice = 1
url = "https://github.com/jenkinsci/radargun-plugin.git"

[[repository]]
advisory = "GHSA-pg59-2w33-8vmc"
changes = [{"advisory" = "GHSA-pg59-2w33-8vmc", "base" = "1c3f46911952d8926e70453a452825aef35ce00d", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "untrusted_destination", "files" = [{"head_lines" = [[66, 190], [193, 340]], "path" = "src/main/java/org/jenkinsci/plugins/GitLabAuthenticationToken.java"}, {"head_lines" = [[29, 34], [35, 35], [36, 36], [38, 38], [40, 40]], "path" = "src/main/java/org/jenkinsci/plugins/GitLabAuthorizationStrategy.java"}, {"head_lines" = [[124, 124]], "path" = "src/main/java/org/jenkinsci/plugins/GitLabRequireOrganizationMembershipACL.java"}, {"head_lines" = [[36, 36], [102, 103], [105, 105], [111, 111], [128, 128], [140, 140], [146, 146], [165, 165], [192, 192], [205, 205], [232, 232], [234, 234], [243, 243], [246, 246], [271, 271], [287, 287], [341, 341], [346, 346], [405, 406], [436, 436], [445, 445], [468, 468], [496, 499], [531, 532], [548, 548]], "path" = "src/main/java/org/jenkinsci/plugins/GitLabSecurityRealm.java"}, {"head_lines" = [[15, 15], [27, 27]], "path" = "src/main/resources/org/jenkinsci/plugins/GitlabAuthorizationStrategy/config.jelly"}, {"head_lines" = [[22, 22]], "path" = "src/main/resources/org/jenkinsci/plugins/GitlabSecurityRealm/config.jelly"}], "function" = "doCommenceLogin", "function_lines" = [271, 283], "head" = "281cc7285bb66094030f2b2ef6fe02198e18662b", "kind" = "vulnerability", "method" = "introducing", "path" = "src/main/java/org/jenkinsci/plugins/GitLabSecurityRealm.java", "post_cutoff" = false}, {"base" = "2f0985e5666c59991b8041cb099bc3c3e5e48926", "files" = [{"head_lines" = [[213, 213]], "path" = "src/main/java/org/jenkinsci/plugins/GithubRequireOrganizationMembershipACL.java"}], "head" = "4eeb9b55a9e9a01c589013f8e4a5b493b1127f34", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "cb556e1d60672365f3e718534097cc67ae3b4ac7", "files" = [{"head_lines" = [[7, 27], [28, 28]], "path" = "README"}, {"head_lines" = [[55, 55]], "path" = "pom.xml"}, {"head_lines" = [[7, 7], [11, 11], [19, 19]], "path" = "src/main/java/org/jenkinsci/plugins/GithubAuthorizationStrategy.java"}], "head" = "e550345cfe242e74d6e2e2162a8c5104f1320edf", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "3b0e41ba962d387ab29c352a489753e933ff4274", "files" = [{"head_lines" = [[69, 69], [94, 94]], "path" = "pom.xml"}, {"head_lines" = [[63, 63], [68, 68]], "path" = "src/main/java/org/jenkinsci/plugins/GithubAuthenticationToken.java"}, {"head_lines" = [[309, 310], [313, 313]], "path" = "src/main/java/org/jenkinsci/plugins/GithubSecurityRealm.java"}], "head" = "0c95edb6e4f3704186907f915969d5d532d2eb97", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "e9bbe78542116489057ae9288c14a0325a1e0191", "files" = [{"head_lines" = [[36, 36], [53, 53], [57, 57], [76, 77], [366, 366], [431, 445]], "path" = "src/main/java/org/jenkinsci/plugins/GithubSecurityRealm.java"}], "head" = "09dc928f24a633cd5dc41033be3196e6eb47b325", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "d4d1524aab687ffd6f5fdf008cd35dbb8e8288dd", "files" = [{"head_lines" = [[33, 33], [50, 50], [70, 70], [315, 322]], "path" = "src/main/java/org/jenkinsci/plugins/GithubSecurityRealm.java"}], "head" = "bc57272269210dd430cf1709d72f6c3ec1f7d8c1", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "5fba4545f8709844840c1f7de474dc9775b03633", "files" = [{"head_lines" = [[1, 80]], "path" = "src/main/java/org/jenkinsci/plugins/GithubAuthenticationToken.java"}, {"head_lines" = [[19, 19], [127, 128]], "path" = "src/main/java/org/jenkinsci/plugins/GithubSecurityRealm.java"}], "head" = "79cf745b0042a56ee3d2355b172c37f17c82701b", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "65a1ee405f99a04bf45605a390ca72510d15e15d", "files" = [{"head_lines" = [[56, 67]], "path" = "pom.xml"},
ecosystem = "maven"
family = "untrusted_destination"
fix = "10059a4d4e121e0c3b13f6e6f74843565bb0b49a"
id = "r-c86b14904d57556f3eacf3af"
instrument = {"bytes" = 1942, "files" = 1}
license_class = "permissive"
license_path = "LICENSE.txt"
license_ref = "281cc7285bb66094030f2b2ef6fe02198e18662b"
license_spdx = "MIT"
parent = "0f12976f67cd1bb667499824bc343e911e37534c"
post_cutoff = false
repository = "jenkinsci/gitlab-oauth-plugin"
slice = 1
url = "https://github.com/jenkinsci/gitlab-oauth-plugin.git"

[[repository]]
advisory = "GHSA-5xx3-j724-wmx5"
changes = [{"advisory" = "GHSA-5xx3-j724-wmx5", "base" = "98fc8929a925ffe208e142ef1b016e69260e11e3", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "untrusted_destination", "files" = [{"head_lines" = [[51, 51], [77, 77], [81, 81], [83, 87]], "path" = "src/handlers/filesystem-handlers.ts"}, {"head_lines" = [[229, 229], [232, 232], [235, 235], [238, 238], [242, 242], [245, 245], [249, 249], [252, 252], [255, 255], [258, 258], [261, 261], [264, 264], [267, 267], [270, 270], [273, 273], [276, 276]], "path" = "src/server.ts"}, {"head_lines" = [[11, 11], [14, 16], [19, 19], [28, 28], [30, 30]], "path" = "src/tools/edit.ts"}, {"head_lines" = [[115, 115], [139, 139], [145, 145], [161, 161], [164, 164], [194, 194], [199, 199], [210, 210], [220, 220], [223, 223], [233, 237], [240, 241], [259, 259], [265, 265], [271, 271], [274, 274], [280, 280], [282, 285], [297, 297], [299, 300], [321, 321]], "path" = "src/tools/filesystem.ts"}, {"head_lines" = [[82, 82], [89, 93], [96, 96], [110, 114]], "path" = "src/utils.ts"}], "function" = "readFileFromUrl", "function_lines" = [164, 212], "head" = "e73492923f0bbac5d88356600369fbfb4e01d6bd", "kind" = "vulnerability", "method" = "introducing", "path" = "src/tools/filesystem.ts", "post_cutoff" = true}, {"base" = "c7b3e0f34130644bc676b0e5d990c21fedb8d8b9", "files" = [{"head_lines" = [[181, 181], [199, 199], [204, 204], [208, 208]], "path" = "setup-claude-server.js"}], "head" = "5c9e43d723108b91d1e514269f9caa6fc2e6bff4", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "f6f5f5f3217476b7676e2e35401238b882ecf549", "files" = [{"head_lines" = [[314, 314], [344, 344], [350, 350], [402, 402], [418, 418], [434, 434], [450, 450], [466, 466], [482, 482], [509, 509], [546, 546]], "path" = "src/server.ts"}], "head" = "e21a133669a0d6a9204df27dc292ae68296b1656", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "3f17d07ec277918cb990ffcd254e359a8526d4b4", "files" = [{"head_lines" = [[14, 14]], "path" = "docs/css/main.css"}, {"head_lines" = [[1, 190]], "path" = "docs/css/testimonials.css"}, {"head_lines" = [[518, 518], [525, 555], [557, 563]], "path" = "docs/index.html"}, {"head_lines" = [[77, 80], [82, 247]], "path" = "docs/js/main.js"}], "head" = "215bb6816099fc678e4ba66ae2ba6c48880aa514", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "352207430f1a1464af358cde64ec715de6ee3545", "files" = [{"head_lines" = [[487, 487]], "path" = "setup-claude-server.js"}], "head" = "01cf6fff4b8975c8b851fa775eef32b0e1191d93", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "dff904089af0c6f5ee74e818d8d52b900746dcbb", "files" = [{"head_lines" = [[61, 64], [147, 148], [155, 155], [157, 157], [164, 164], [192, 196], [255, 270], [379, 379]], "path" = "README.md"}, {"head_lines" = [[3, 3], [9, 9]], "path" = "package-lock.json"}, {"head_lines" = [[3, 3]], "path" = "package.json"}, {"head_lines" = [[1, 1]], "path" = "src/version.ts"}], "head" = "b8d83310f95b5826744069db77e26e9ef1bb4227", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "9db156e3ad69a2d44992e9381bb39e5316ad5a18", "files" = [{"head_lines" = [[7, 7], [9, 9], [18, 23]], "path" = "src/index.ts"}], "head" = "2a332d16de47c0192c2a554cc74e78b33fbbaafb", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 1}, {"base" = "575e888cb7dcb18321b53511522f31aa62d571b5", "files" = [{"head_lines" = [], "path" = "install.sh"}, {"head_lines" = [[3, 3], [9, 9], [13, 13], [138, 140], [143, 143], [146, 146], [148, 148], [151, 151], [657, 657], [2534, 2534], [2557, 2557], [3496, 3496], [4430, 4432], [4515, 4515], [5957, 5957]], "path" = "package-lock.json"}, {"head_lines" = [[3, 3]], "path" = "package.json"}, {"head_lines" = [[54, 55], [64, 66]], "path" = "src/custom-stdio.ts"}, {"head_lines" = [[4, 4], [12, 17], [42, 42], [4
ecosystem = "npm"
family = "untrusted_destination"
fix = "53699bebba9950047bca16ac4dc8f0568f596aaa"
id = "r-cb34d8b76965ebb3034c6a01"
instrument = {"bytes" = 8503, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "e73492923f0bbac5d88356600369fbfb4e01d6bd"
license_spdx = "MIT"
parent = "eb687ccccf5b40098d69a2b98cb69b8ff1361d94"
post_cutoff = true
repository = "sorlen008/desktopcommandermcp"
slice = 1
url = "https://github.com/sorlen008/DesktopCommanderMCP.git"

[[repository]]
advisory = "GHSA-cv3r-c5h8-f4g5"
changes = [{"advisory" = "GHSA-cv3r-c5h8-f4g5", "base" = "3bb35abe37201273e20019a8a5505dbddeaec9f4", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "path", "files" = [{"head_lines" = [[26, 32]], "path" = ".env.example"}, {"head_lines" = [[164, 177], [193, 270], [369, 388]], "path" = "README.md"}, {"head_lines" = [[8, 8], [255, 328], [339, 340], [460, 477], [481, 505], [510, 512], [1097, 1116], [3520, 3521], [3587, 3590], [3617, 3620], [3646, 3649], [3766, 3767], [3768, 3768], [4353, 4354], [4378, 4381], [4417, 4420], [4450, 4453], [4503, 4503], [4534, 4535], [5757, 5871], [5879, 5901], [5903, 5933], [5935, 5964], [5966, 5979], [5981, 5990], [5992, 6006], [6010, 6037], [6053, 6057], [6067, 6067], [6069, 6069], [6073, 6115], [6153, 6155]], "path" = "index.ts"}, {"head_lines" = [[25, 25], [27, 27]], "path" = "package.json"}, {"head_lines" = [[1, 144]], "path" = "test/clients/custom-header-client.ts"}, {"head_lines" = [[1, 260]], "path" = "test/remote-auth-simple-test.ts"}, {"head_lines" = [[1, 383]], "path" = "test/remote-auth-tests.ts"}, {"head_lines" = [[1, 320]], "path" = "test/utils/mock-gitlab-server.ts"}, {"head_lines" = [[48, 52], [55, 55], [61, 61], [63, 63], [68, 72]], "path" = "test/utils/server-launcher.ts"}], "function" = "validateConfiguration", "function_lines" = [258, 327], "head" = "1f1fd4541b154a7bef35ca632588b4d0425b7d0f", "kind" = "vulnerability", "method" = "introducing", "path" = "index.ts", "post_cutoff" = true}, {"base" = "bb8d553567fe6e05e520559d2132c7e702cec4ee", "files" = [{"head_lines" = [[153, 153]], "path" = "index.ts"}], "head" = "74bb384a376aecfda152d5f58e8bf4faf82907d4", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "622c112f7f8b1ea9e64856321e49692094caa4ef", "files" = [{"head_lines" = [[910, 911], [915, 915], [918, 918]], "path" = "index.ts"}], "head" = "44d8d11b4ab7b02536fa4cf84c4522d08105fc60", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "a7a8149008813079ec77a034ead3476a106430d6", "files" = [{"head_lines" = [[381, 393]], "path" = "index.ts"}], "head" = "11685d7a906eade7f586af1fcd08eaf270972b5e", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "340a5ffdc8db214600e4ee485902085f5e6fdbb0", "files" = [{"head_lines" = [[44, 84]], "path" = "README.md"}, {"head_lines" = [[22, 23]], "path" = "package.json"}, {"head_lines" = [[1, 53]], "path" = "scripts/generate-tools-readme.ts"}], "head" = "95d8118ea542c4885c884e2d9a66e43d2ee1b920", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "e9246e967132ea992b5208cdf41d642329a2011c", "files" = [{"head_lines" = [[990, 990], [1536, 1536], [1538, 1539], [1547, 1551]], "path" = "index.ts"}], "head" = "b423365763cda59fb999ed71920c304c6cc0550b", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 1}, {"base" = "55c7896a56612bad578ceb949a008f4c4cfc5c44", "files" = [{"head_lines" = [[5, 11]], "path" = ".env.example"}, {"head_lines" = [[31, 31], [59, 59], [132, 132], [145, 145], [245, 245], [295, 295], [345, 345], [348, 348]], "path" = "README.md"}, {"head_lines" = [], "path" = "docs/img/step 2.png"}, {"head_lines" = [], "path" = "docs/img/step 3.png"}, {"head_lines" = [], "path" = "docs/img/step 4.png"}, {"head_lines" = [], "path" = "docs/img/step 5.png"}, {"head_lines" = [[25, 25], [30, 31], [33, 33], [39, 41], [45, 46], [48, 48], [51, 54], [79, 79], [88, 89], [103, 103], [117, 117], [123, 123], [129, 129], [144, 144], [163, 163], [182, 182], [191, 191], [198, 198], [206, 206], [213, 213], [220, 220], [227, 227], [252, 278], [281, 282], [284, 288]], "path" = "docs/oauth-setup.md"}, {"head_lines" = [[16, 23], [35, 35], [46, 46], [69, 69], [78, 78], [81, 81], [99, 99], [121, 121], [163, 167], [181, 181], [209, 213], [227, 227], [308, 310], [334, 340], [370, 370], [377, 383], [538, 538], [544, 544], [614, 614], [616, 617], [628, 628]], "
ecosystem = "npm"
family = "path"
fix = "e436ee4ad067b64584ec9312c9e9c9a2641c1976"
id = "r-cc9310641cd79c8b228795dc"
instrument = {"bytes" = 3562, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "1f1fd4541b154a7bef35ca632588b4d0425b7d0f"
license_spdx = "MIT"
parent = "404a993ef5f86e99db693e8075fdb3a63625f1bd"
post_cutoff = true
repository = "zereight/gitlab-mcp"
slice = 1
url = "https://github.com/zereight/gitlab-mcp.git"

[[repository]]
id = "r-d04a16550eb73626f2fcef2e"
private = true
sha256 = "d04a16550eb73626f2fcef2ebe7dd107bba1b8a5e8c85b42750c16438dfc3281"
slice = 1

[[repository]]
id = "r-d40f368e9642505264a1d418"
private = true
sha256 = "d40f368e9642505264a1d4181e2f0bb3783fba514ac39222991e9872b7e1f457"
slice = 1

[[repository]]
advisory = "GHSA-ch57-39q2-4crm"
changes = [{"advisory" = "GHSA-ch57-39q2-4crm", "base" = "61d1ab0674137f74c22e2d8bb54941a8d9308623", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {"merge_or_root" = 27, "size_cap" = 14, "unresolved_function" = 2}, "family" = "output_encoding", "files" = [{"head_lines" = [[16, 16], [291, 292], [356, 366], [449, 466], [1800, 1800], [1877, 2066], [2371, 2371], [2392, 2392], [2474, 2474], [2495, 2495]], "path" = "src/malla/database/repositories.py"}, {"head_lines" = [[775, 804], [1437, 1439], [1450, 1450]], "path" = "src/malla/routes/api_routes.py"}, {"head_lines" = [[14, 14], [16, 16], [87, 119], [130, 130], [150, 150], [189, 220]], "path" = "src/malla/routes/packet_routes.py"}, {"head_lines" = [[1, 182]], "path" = "src/malla/static/js/relay_node_analysis.js"}, {"head_lines" = [[53, 53], [96, 108], [163, 175], [192, 192]], "path" = "src/malla/templates/components/receptions.html"}, {"head_lines" = [[1, 43]], "path" = "src/malla/templates/components/relay_node_analysis.html"}, {"head_lines" = [[324, 326], [727, 729], [896, 897], [899, 899], [965, 965]], "path" = "src/malla/templates/node_detail.html"}, {"head_lines" = [[265, 282], [902, 904], [1151, 1198], [1209, 1209], [1257, 1292], [1368, 1368], [1370, 1468]], "path" = "src/malla/templates/packet_detail.html"}, {"head_lines" = [[459, 476]], "path" = "src/malla/templates/packets.html"}, {"head_lines" = [[763, 866]], "path" = "tests/fixtures/database_fixtures.py"}, {"head_lines" = [[1, 65]], "path" = "tests/integration/test_relay_node.py"}, {"head_lines" = [[1, 44]], "path" = "tests/integration/test_relay_node_analysis.py"}, {"head_lines" = [[1, 245]], "path" = "tests/integration/test_relay_node_analysis_api.py"}], "function" = "renderTable", "function_lines" = [81, 134], "head" = "5535894df529154ea549bc1a523d9c8d301bdf27", "kind" = "vulnerability", "method" = "introducing", "path" = "src/malla/static/js/relay_node_analysis.js", "post_cutoff" = true}, {"base" = "9f00f0fbe04f9fb87b0fcba5ac4b3c463a5fd837", "files" = [{"head_lines" = [[11, 11], [85, 85], [88, 88]], "path" = "tests/integration/test_data_cleanup.py"}], "head" = "3cd173dfd1d2ebd58ba9ec9ef7085aa7ccb1eb5d", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "f0f8d10272ffe8f891731bbf516ac40783daa3f5", "files" = [{"head_lines" = [[13, 13], [43, 43], [45, 45]], "path" = "src/malla/routes/main_routes.py"}], "head" = "c91dc560ca21891fd9cbaab2b711cb924571c14e", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "01ec72e1f752fbb16f7035add3bedcfb049604fd", "files" = [{"head_lines" = [[83, 83]], "path" = "src/malla/templates/map.html"}, {"head_lines" = [[317, 336]], "path" = "tests/e2e/test_map_filters.py"}], "head" = "21c8be6deda13714353bff0e37c373c2a50e4e20", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "c91dc560ca21891fd9cbaab2b711cb924571c14e", "files" = [{"head_lines" = [[182, 186], [191, 195], [201, 205]], "path" = "tests/e2e/test_nodes_search.py"}, {"head_lines" = [[1125, 1141], [1153, 1158]], "path" = "tests/e2e/test_tables.py"}], "head" = "206e980e7d327b098004f4f1cc3fc7a1492c1741", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "1027f56da20e4dbd58be78fec245394a43c8b339", "files" = [{"head_lines" = [[2399, 2440]], "path" = "src/malla/database/repositories.py"}, {"head_lines" = [[1, 68]], "path" = "tests/integration/test_traceroute_route_node_grouped.py"}], "head" = "74a16b54d8f9d6b97ccb92b173a67f73b6d057ba", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "3c708686dc0f7e78f40fc4f3e853c6b22892c8b5", "files" = [{"head_lines" = [[301, 301], [303, 325]], "path" = "README.md"}, {"head_lines" = [[49, 52]], "path" = "src/malla/config.py"}, {"head_lines" = [[9, 14], [23, 30], [80, 82], [95, 96], [827, 901], [1391, 1397], [1409, 1418]], "path" = "src/malla/mqtt_capture.py"}, {"head_lines" = [[1, 2
ecosystem = "pip"
family = "output_encoding"
fix = "4086e2b5f61615a813b70b25bc76095083552135"
id = "r-dc08798f9c7fb9ec26ae43dd"
instrument = {"bytes" = 10431, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "5535894df529154ea549bc1a523d9c8d301bdf27"
license_spdx = "MIT"
parent = "c8a2ed3ce9365c58fd357f66d7fc1b16bbf9b43c"
post_cutoff = true
repository = "zenitram/malla"
slice = 1
url = "https://github.com/zenitraM/malla.git"

[[repository]]
advisory = "GHSA-5j53-63w8-8625"
changes = [{"advisory" = "GHSA-5j53-63w8-8625", "base" = "64d3996415f62e99263adf6aa35f3c14c14d8974", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {"size_cap" = 2, "unresolved_function" = 1}, "family" = "access_control", "files" = [{"head_lines" = [[16, 16], [82, 82], [119, 147], [160, 160]], "path" = "fastapi_users/fastapi_users.py"}, {"head_lines" = [[227, 268]], "path" = "fastapi_users/manager.py"}, {"head_lines" = [[1, 1], [9, 10], [139, 250]], "path" = "fastapi_users/router/oauth.py"}, {"head_lines" = [[31, 33]], "path" = "tests/test_fastapi_users.py"}, {"head_lines" = [[241, 265]], "path" = "tests/test_manager.py"}, {"head_lines" = [[8, 21], [26, 30], [38, 47], [49, 50], [66, 70], [100, 100], [120, 120], [155, 155], [181, 181], [211, 211], [238, 238], [252, 466], [476, 476], [481, 481]], "path" = "tests/test_router_oauth.py"}], "function" = "get_oauth_associate_router", "function_lines" = [141, 250], "head" = "ce15284fe9fd363f0bd19d9580e37f4d265b1e0f", "kind" = "vulnerability", "method" = "introducing", "path" = "fastapi_users/router/oauth.py", "post_cutoff" = false}, {"base" = "7485f79fc50605f1f9ff1bfafd6202b678811c8a", "files" = [{"head_lines" = [[41, 41], [43, 45]], "path" = "fastapi_users/db/base.py"}], "head" = "3875632c80e6b1b0d6e7002b83eaf821b37b07f3", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "bdfef36866b269f935bd36a611d4e3108bcb9c3c", "files" = [{"head_lines" = [[11, 11]], "path" = "fastapi_users/db/tortoise.py"}], "head" = "7817d372c6ed1423c8f484e36f50df3397796955", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "a690e824089556332e8d7ef15503389ea6c44cd0", "files" = [{"head_lines" = [[19, 19], [21, 22], [28, 29], [31, 37]], "path" = "docs/configuration/authentication/cookie.md"}, {"head_lines" = [[14, 14], [19, 19], [21, 24], [26, 32]], "path" = "docs/configuration/authentication/jwt.md"}, {"head_lines" = [[48, 48]], "path" = "docs/src/full_mongodb.py"}, {"head_lines" = [[57, 57]], "path" = "docs/src/full_ormar.py"}, {"head_lines" = [[59, 59]], "path" = "docs/src/full_sqlalchemy.py"}, {"head_lines" = [[57, 57]], "path" = "docs/src/full_tortoise.py"}, {"head_lines" = [[52, 52]], "path" = "docs/src/oauth_full_mongodb.py"}, {"head_lines" = [[72, 72]], "path" = "docs/src/oauth_full_sqlalchemy.py"}, {"head_lines" = [[70, 70]], "path" = "docs/src/oauth_full_tortoise.py"}, {"head_lines" = [[33, 33]], "path" = "fastapi_users/authentication/jwt.py"}], "head" = "455f695f520d646389767bcde3b0fe7c8b2f9b4d", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "6ba8bb835e93ea03bfce920762b87a5235e63551", "files" = [{"head_lines" = [[23, 28]], "path" = "setup.cfg"}, {"head_lines" = [[8, 8]], "path" = "tests/test_authentication_base.py"}, {"head_lines" = [[47, 47], [85, 85], [115, 115]], "path" = "tests/test_authentication_jwt.py"}, {"head_lines" = [[16, 16], [39, 39]], "path" = "tests/test_db_base.py"}, {"head_lines" = [[14, 23], [33, 33]], "path" = "tests/test_db_mongodb.py"}, {"head_lines" = [[37, 37]], "path" = "tests/test_db_sqlalchemy.py"}, {"head_lines" = [[38, 38], [58, 58], [66, 66], [91, 91], [110, 110], [138, 138]], "path" = "tests/test_fastapi_users.py"}, {"head_lines" = [[60, 60], [127, 127], [168, 168], [205, 205], [277, 277], [302, 302], [374, 374], [399, 399], [432, 432], [529, 529]], "path" = "tests/test_router.py"}], "head" = "1811d4aa2d179ccc5e5539005454fccd1b4563b8", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "20bb285f03a281dc4b8d90cfc4539537962dce92", "files" = [{"head_lines" = [[6, 6], [24, 26], [34, 34], [36, 43]], "path" = "fastapi_users/db/__init__.py"}, {"head_lines" = [[45, 49]], "path" = "fastapi_users/db/sqlalchemy.py"}, {"head_lines" = [[1, 2], [8, 9], [12, 12]], "path" = "fastapi_users/password.py"}, {"head_lines" = [[36, 44], [50, 50]], "path" = "tests/test_db_sqlalchemy.py"}], "head" = "c4ff6ca3fe469a
ecosystem = "pip"
family = "access_control"
fix = "7cf413cd766b9cb0ab323ce424ddab2c0d235932"
id = "r-ddfde6eefa3ed29f3430d775"
instrument = {"bytes" = 1105, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "ce15284fe9fd363f0bd19d9580e37f4d265b1e0f"
license_spdx = "MIT"
parent = "bcee8c9b884de31decb5d799aead3974a0b5b158"
post_cutoff = false
repository = "fastapi-users/fastapi-users"
slice = 1
url = "https://github.com/fastapi-users/fastapi-users.git"

[[repository]]
advisory = "GHSA-v5gf-r78h-55q6"
changes = [{"advisory" = "GHSA-v5gf-r78h-55q6", "base" = "cfdf5622a9809a7481f20c8b452564c1231989c2", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "injection", "files" = [{"head_lines" = [[1, 1], [2, 2], [9, 9], [29, 29]], "path" = "document_merge_service/api/engines.py"}, {"head_lines" = [[1, 33]], "path" = "document_merge_service/api/jinja.py"}, {"head_lines" = [], "path" = "document_merge_service/api/tests/data/docx-template-filters.docx"}, {"head_lines" = [[431, 520]], "path" = "document_merge_service/api/tests/snapshots/snap_test_template.py"}, {"head_lines" = [[1, 1]], "path" = "document_merge_service/api/tests/test_filter.py"}, {"head_lines" = [[195, 222]], "path" = "document_merge_service/api/tests/test_template.py"}], "function" = "get_jinja_env", "function_lines" = [28, 33], "head" = "98a27bbd66e7d133f90e1b0dbce816dc80bf9d1d", "kind" = "vulnerability", "method" = "introducing", "path" = "document_merge_service/api/jinja.py", "post_cutoff" = false}, {"base" = "86ce4017c93db638c62067fd0d2fa7f60fc1bebe", "files" = [{"head_lines" = [[84, 84], [86, 88]], "path" = "document_merge_service/api/authentication.py"}], "head" = "442d37bab35463d432873786e1396eb14dbeb8b2", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "f12f0a221b64fb22665ac4609e4f52e34ff767f2", "files" = [{"head_lines" = [[1, 16]], "path" = "document_merge_service/api/tests/test_unoconv.py"}, {"head_lines" = [[29, 29]], "path" = "document_merge_service/api/unoconv.py"}], "head" = "7ba4cbe367265fdd4729c18e6dd0f126639edaab", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "e1a43fa43163bb727ac7d59fb69ef0b933be527e", "files" = [{"head_lines" = [[92, 92], [94, 94], [96, 99]], "path" = "README.md"}, {"head_lines" = [[4, 4], [30, 33], [84, 110], [125, 139]], "path" = "document_merge_service/api/authentication.py"}, {"head_lines" = [[25, 25], [29, 29], [42, 42], [51, 105]], "path" = "document_merge_service/api/tests/test_authentication.py"}, {"head_lines" = [[216, 223], [228, 232]], "path" = "document_merge_service/settings.py"}, {"head_lines" = [[8, 8]], "path" = "requirements.txt"}], "head" = "93cd10d3d6a0709bf5809b481ba4b60a4809b33b", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "41dd0cdebdb5c7613f0087eefde02509b28e22ad", "files" = [{"head_lines" = [[67, 70]], "path" = "CONFIGURATION.md"}, {"head_lines" = [[275, 277]], "path" = "document_merge_service/settings.py"}], "head" = "b76e2930535f15820e449930e57d004c54e1ba2d", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "b485ebd664376377ba3581fd03b28fc2c87caab4", "files" = [{"head_lines" = [[59, 67]], "path" = "CONFIGURATION.md"}, {"head_lines" = [[17, 17], [22, 22], [61, 61], [63, 70], [75, 75], [79, 79], [94, 94], [96, 103]], "path" = "MIGRATE.md"}, {"head_lines" = [[10, 12]], "path" = "docker-compose.yml"}, {"head_lines" = [], "path" = "document_merge_service/extensions/__init__.py"}, {"head_lines" = [[1, 1]], "path" = "document_merge_service/extensions/permissions.py"}, {"head_lines" = [[1, 1]], "path" = "document_merge_service/extensions/visibilities.py"}, {"head_lines" = [[271, 274]], "path" = "document_merge_service/settings.py"}], "head" = "67fc95a16f72e7afed37342972c6101c492d529a", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "e76f66c1fae39d2f343c99e2eeadc57837644667", "files" = [{"head_lines" = [[541, 544]], "path" = "document_merge_service/api/tests/test_template.py"}], "head" = "2f225060b4d21858ec5a457db36cda66a55f21e9", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "2f225060b4d21858ec5a457db36cda66a55f21e9", "files" = [{"head_lines" = [[1, 1], [6, 6], [13, 13], [16, 16]], "path" = "document_merge_service/conftest.py"}], "head" = "06375381f40765a5a68bc51c7b102c414c906482", "kind" = "ordinary", "method" =
ecosystem = "pip"
family = "injection"
fix = "a1edd39d33d1bdf75c31ea01c317547be90ca074"
id = "r-e18f675eb14b04a29324226d"
instrument = {"bytes" = 405, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "98a27bbd66e7d133f90e1b0dbce816dc80bf9d1d"
license_spdx = "MIT"
parent = "696f920a66c7c9d45638f97c62f6480506d87fdb"
post_cutoff = false
repository = "adfinis/document-merge-service"
slice = 1
url = "https://github.com/adfinis/document-merge-service.git"

[[repository]]
id = "r-e1f4285719a8af0914fac74c"
private = true
sha256 = "e1f4285719a8af0914fac74c1ed7e12b74dd9db6ce2a08998d06c45a5f4ce72c"
slice = 1

[[repository]]
advisory = "GHSA-6xpm-ggf7-wc3p"
changes = [{"advisory" = "GHSA-6xpm-ggf7-wc3p", "base" = "9feb734075db302333964b4ee94e61e72467a441", "bias" = "Pessimistic lower bound: the flaw may already exist in base, so a delta hook can correctly stay quiet.", "fallback_reasons" = {"version_bracket" = 1}, "family" = "injection", "files" = [{"head_lines" = [[3, 3]], "path" = "package.json"}, {"head_lines" = [[49, 61]], "path" = "src/lib/utils.test.ts"}, {"head_lines" = [[709, 710], [712, 724]], "path" = "src/lib/utils.ts"}], "function" = "sanitizeUrl", "function_lines" = [708, 729], "head" = "3ad0fc047653e15b29b01d122848a729feb4ec78", "kind" = "vulnerability", "method" = "last_touch", "path" = "src/lib/utils.ts", "post_cutoff" = false}, {"base" = "45c1739b4c849575458565c8f5feb746c917fc64", "files" = [{"head_lines" = [[40, 40]], "path" = "src/lib/node-oauth-client-provider.ts"}], "head" = "63e02eef1c11aa4f218ab94906f3ac1e05591198", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "bd75a1cdf026bed04e03ce097293124028c329f1", "files" = [{"head_lines" = [[6, 6], [15, 15], [357, 371], [460, 462], [466, 467]], "path" = "src/lib/utils.ts"}], "head" = "b209d98074bc680d0bda58ee61075dcbaf4d9026", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "5c71b268694635f7687ab35a38144e6ce4e9db6a", "files" = [{"head_lines" = [[18, 19], [21, 22]], "path" = ".github/workflows/publish.yml"}, {"head_lines" = [[3, 3]], "path" = "package.json"}, {"head_lines" = [[35, 37], [39, 43], [47, 49]], "path" = "src/lib/utils.ts"}], "head" = "45c1739b4c849575458565c8f5feb746c917fc64", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "7f78d4ec642653de708fa823585cfaf2959c3bb9", "files" = [{"head_lines" = [[42, 42], [45, 50], [81, 81], [99, 99], [112, 112], [125, 125], [142, 142], [151, 151], [160, 160], [165, 165], [236, 236], [239, 239], [242, 242], [249, 249], [256, 256], [296, 296], [303, 303], [308, 308], [311, 311], [315, 315], [317, 317], [321, 321], [323, 323], [328, 328], [335, 335], [341, 341], [346, 346], [626, 626]], "path" = "src/lib/utils.ts"}], "head" = "1c52215f419702e8a4a07f47512d5e24895a60f3", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "f8bfde1af2385cf45a2a8b9046062c1aa8ead67e", "files" = [{"head_lines" = [[36, 36]], "path" = "package.json"}, {"head_lines" = [[19, 20], [214, 216], [1225, 1225]], "path" = "pnpm-lock.yaml"}, {"head_lines" = [[21, 21], [24, 24], [35, 35], [42, 42], [52, 52], [58, 58], [70, 70], [74, 74], [85, 85], [93, 93], [97, 97], [101, 101], [106, 106], [109, 109], [113, 113], [120, 120], [139, 139], [144, 144], [148, 148], [166, 166], [173, 173], [175, 175], [181, 181], [185, 185], [189, 189], [194, 194], [198, 198], [209, 209], [213, 213], [217, 217], [221, 221], [226, 226], [236, 236], [238, 238], [244, 244], [248, 248], [265, 265], [269, 269]], "path" = "src/lib/coordination.ts"}, {"head_lines" = [[10, 10], [73, 73], [75, 75], [83, 83], [92, 92], [102, 103], [114, 114], [121, 121], [130, 130], [147, 147], [154, 154], [172, 172], [176, 176], [179, 179], [188, 188], [197, 197], [199, 199], [202, 238]], "path" = "src/lib/node-oauth-client-provider.ts"}, {"head_lines" = [[6, 6], [9, 9], [13, 14], [15, 15], [42, 42], [59, 60], [66, 66], [79, 79], [101, 101], [110, 110], [128, 128], [140, 140], [149, 149], [158, 158], [163, 163], [234, 234], [237, 237], [240, 240], [247, 247], [253, 253], [293, 294], [301, 301], [305, 305], [307, 307], [311, 311], [313, 313], [316, 316], [318, 318], [323, 326], [333, 333], [339, 343], [349, 349], [631, 631], [645, 645]], "path" = "src/lib/utils.ts"}], "head" = "36ed05e60650024e633428bb4038f1c1b85812e0", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 3, "time_third" = 0}, {"base" = "2b2ce49dd939253de8995198d6be191db6224c1f", "files" = [{"head_lines" = [[26, 26]], "path" = "src/lib/node-oauth-client-provider.test.ts"}], "head" = "f4c8ba4745796aaaa632959ae260b9dd219d9dd2", "kind" = "ordinary", "method" = "first_parent", "size_bucket" 
ecosystem = "npm"
family = "injection"
first_affected = "0.0.5"
fix = "607b226a356cb61a239ffaba2fb3db1c9dea4bac"
id = "r-e3cce67ce767dfbfbf53cef6"
instrument = {"bytes" = 5156, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "3ad0fc047653e15b29b01d122848a729feb4ec78"
license_spdx = "MIT"
parent = "3ad0fc047653e15b29b01d122848a729feb4ec78"
post_cutoff = false
repository = "punkpeye/mcp-remote"
slice = 1
url = "https://github.com/punkpeye/mcp-remote.git"

[[repository]]
id = "r-e456810444e8dd51353ea736"
private = true
sha256 = "e456810444e8dd51353ea7368baf44139145b5774974f6c94c503e96fec854b7"
slice = 1

[[repository]]
id = "r-e49edc2063a8b1a34133e584"
private = true
sha256 = "e49edc2063a8b1a34133e584afa6d1e1211aa96defadabae9da6390f10f90d5f"
slice = 1

[[repository]]
advisory = "GHSA-g3q2-vcjq-rgrc"
changes = [{"advisory" = "GHSA-g3q2-vcjq-rgrc", "base" = "9da0d79b2280f6bc7a88addbf8b4af6bd9a913e0", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "injection", "files" = [{"head_lines" = [[16, 16], [408, 408], [412, 412], [517, 517], [530, 530], [541, 541], [559, 559], [789, 789], [805, 805], [849, 849]], "path" = "src/Engine.js"}, {"head_lines" = [[22, 22], [57, 57]], "path" = "src/InstanceEvents.js"}, {"head_lines" = [[83, 83], [85, 85]], "path" = "src/constructor/Port.js"}, {"head_lines" = [[246, 246], [249, 249], [252, 253]], "path" = "src/nodes/FnPortVar.js"}, {"head_lines" = [[129, 129]], "path" = "src/nodes/Var.js"}, {"head_lines" = [[1, 3], [5, 6], [8, 10], [12, 14], [17, 18], [20, 21], [22, 22], [24, 25]], "path" = "src/utils.js"}], "function" = "setDeepProperty", "function_lines" = [3, 26], "head" = "3d73bdb3ea662651171c2936ebe05a7951e03264", "kind" = "vulnerability", "method" = "introducing", "path" = "src/utils.js", "post_cutoff" = false}, {"base" = "86060a0c714c9b7b620e00eb79d2ab989d6de5e1", "files" = [{"head_lines" = [[1, 1], [6, 6], [8, 9]], "path" = "src/utils.js"}], "head" = "446605097f9799806b6b6fa433cb1106f249d5e7", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "c59fe0822f429e8bc7516cd09044c8b1a9b08b4c", "files" = [{"head_lines" = [[39, 39], [48, 48]], "path" = "src/constructor/PortLink.js"}], "head" = "bd0512edf54db548b779678ad4da836aef707df1", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "aa6dcfa9dbbf1edce1a0eea6483b7fc7827ee661", "files" = [{"head_lines" = [[25, 25], [31, 34], [37, 47], [51, 51], [53, 69]], "path" = "src/_init.js"}], "head" = "1f4433a32681b0c19681ece6a594e0e8d4e3ba26", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "5009e4102f3eae96299b934f20b4725887609849", "files" = [{"head_lines" = [[2, 2], [4, 4], [6, 13], [16, 21], [24, 29], [32, 32]], "path" = "src/constructor/Node.js"}, {"head_lines" = [[112, 112]], "path" = "src/constructor/Port.js"}], "head" = "04b04f0b9addd0c3e6b1e4dae04a72879d5bd07f", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "087324ce7d7b789a7f60952a70a7d4d3213790ff", "files" = [{"head_lines" = [[2, 2], [5, 9], [26, 26], [28, 30], [32, 36], [38, 38]], "path" = "example/init.js"}, {"head_lines" = [[1, 31]], "path" = "example/init.mjs"}], "head" = "a94ee209340b8b64bf18e0b8aa170e7611a1edd5", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "7b95dd21161a3ae6e2dcae024c8628136cb82db2", "files" = [{"head_lines" = [[6, 6], [263, 263], [275, 275]], "path" = "example/init.js"}, {"head_lines" = [[2, 2], [22, 22]], "path" = "example/init.mjs"}], "head" = "74991d515075b2e1af8e751038ecfa2bedaccac4", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "6d92d092a1bcdc5c83a41d97af35d2cccd40db82", "files" = [{"head_lines" = [[224, 224]], "path" = "src/nodes/Var.js"}], "head" = "faadce7248a516dcf8adb13b4534b71c24b458d1", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "6b2262732c19d0df3594ec1779cb4a42326ee9c2", "files" = [{"head_lines" = [[152, 152], [168, 168]], "path" = "src/nodes/Var.js"}], "head" = "069be06b1719d78f26dae6c7dd888c7c56df675f", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "1372a60c296be0ed1c818748dc323b495869c9d5", "files" = [{"head_lines" = [[89, 89], [119, 119], [239, 241], [319, 319], [392, 392], [406, 408]], "path" = "src/constructor/Port.js"}, {"head_lines" = [[43, 48]], "path" = "src/constructor/RoutePort.js"}], "head" = "79bbf09be71ad46a45499d509712ca855712bc5d", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 1}, {"base" = "268a79edb6ddfa119dec97f71412a25d8261ab51", "files" = [{"head_lines" = [[6, 7], [156, 163]], "path" = "src/Engine.
ecosystem = "npm"
family = "injection"
first_affected = "0.8.12"
fix = "bd6b965b03c467e7a58ab0cb89b9172fa5e07013"
id = "r-ea0b1d04cc0e6f1d63b766f5"
instrument = {"bytes" = 3641, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "3d73bdb3ea662651171c2936ebe05a7951e03264"
license_spdx = "MIT"
parent = "9e696b77c9d02da0e1dd3e8c9329cdcfdad62151"
post_cutoff = false
repository = "blackprint/engine-js"
slice = 1
url = "https://github.com/Blackprint/engine-js.git"

[[repository]]
advisory = "GHSA-63qj-p8gh-5xxx"
changes = [{"advisory" = "GHSA-63qj-p8gh-5xxx", "base" = "03d5cb9e0229e2e01e842c1075257ecaeeb5b3cd", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {}, "family" = "config_secrets", "files" = [{"head_lines" = [[3, 3], [50, 50], [59, 59], [100, 100], [102, 102]], "path" = "src/Rap2hpoutre/LaravelLogViewer/LaravelLogViewer.php"}, {"head_lines" = [[9, 9], [12, 17], [22, 23], [26, 30], [35, 35], [48, 48]], "path" = "src/controllers/LogViewerController.php"}], "function" = "index", "function_lines" = [19, 40], "head" = "5649c0bc37d8941a2408ed99d0f6f87a83f3eead", "kind" = "vulnerability", "method" = "introducing", "path" = "src/controllers/LogViewerController.php", "post_cutoff" = false}, {"base" = "0d4e385ed3295cc9735b87413eda2c59c0bad90b", "files" = [{"head_lines" = [[67, 69]], "path" = "src/controllers/LogViewerController.php"}], "head" = "52c6a91dab5fcc2177cd2be81aff82dd3a65a782", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "f95d4cf5d00c0d2fcaa4b7c0528fca53aadfd4e1", "files" = [{"head_lines" = [[37, 42]], "path" = "README.md"}, {"head_lines" = [[28, 33]], "path" = "src/Rap2hpoutre/LaravelLogViewer/LaravelLogViewerServiceProvider.php"}], "head" = "badd7811af7a11190a6f68818c210b1511123810", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "b889cdc90598daddecdebe39d179e173106c8102", "files" = [{"head_lines" = [[41, 41], [48, 48]], "path" = "src/Rap2hpoutre/LaravelLogViewer/Pattern.php"}], "head" = "364cd46e977ed2f894c47842ea3470bc183a3173", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "1bab6d8668321600e36c075adb8fb4553974cbfd", "files" = [{"head_lines" = [[4, 4], [11, 11], [56, 56], [72, 72], [165, 165]], "path" = "src/Rap2hpoutre/LaravelLogViewer/LaravelLogViewer.php"}], "head" = "29a5a360561bb25e3b350fade72fbad06ccdcfa4", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "0ec65f0eca56f37948a4d4fc09d23c8956028a25", "files" = [{"head_lines" = [[168, 168]], "path" = "src/Rap2hpoutre/LaravelLogViewer/LaravelLogViewer.php"}], "head" = "f5135771d0f1ae0078d95e3f8ea72a3fdd0d73df", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "8559d0ffed4a061411b8d13461deaddb7b33d4a4", "files" = [{"head_lines" = [[50, 50], [90, 90], [106, 106], [124, 139]], "path" = "src/Rap2hpoutre/LaravelLogViewer/LaravelLogViewer.php"}], "head" = "e6a3f0ba289a0ed8972172945a4c3a06a6065466", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "499263bc8459d3a9ac3950130ca169ce327f40d7", "files" = [{"head_lines" = [[83, 83], [109, 109], [138, 139], [142, 142], [147, 148]], "path" = "src/Rap2hpoutre/LaravelLogViewer/LaravelLogViewer.php"}], "head" = "2a557969a8a23d6b5320f1716748d9577f27f303", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "b0a7055fcca10eb1b6981b4d9828a0eb050b7f52", "files" = [{"head_lines" = [[21, 25], [48, 49], [57, 57], [84, 84], [136, 136], [142, 142], [153, 153], [198, 198], [224, 224]], "path" = "src/Rap2hpoutre/LaravelLogViewer/LaravelLogViewer.php"}, {"head_lines" = [[17, 17], [34, 47]], "path" = "src/Rap2hpoutre/LaravelLogViewer/Pattern.php"}, {"head_lines" = [[5, 5]], "path" = "src/config/logviewer.php"}], "head" = "b889cdc90598daddecdebe39d179e173106c8102", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "253dfd468708de8130a08d1d7ba160df88cbce8a", "files" = [{"head_lines" = [[17, 20], [29, 33]], "path" = "composer.json"}, {"head_lines" = [[1, 14]], "path" = "tests/laravel.log"}, {"head_lines" = [[1, 54]], "path" = "tests/testLaravelLogViewer.php"}], "head" = "41d56700dfd4f4cc52793d129b873bf05a9cd7c8", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "e6a3f0ba289a0ed8972172945a4c3a06a6065466", "files" = [{"head_lines" = [[4
ecosystem = "composer"
family = "config_secrets"
fix = "cda89c06dc5331d06fab863d7cb1c4047ad68357"
id = "r-ed4252bfeab8c71c5278c7f8"
instrument = {"bytes" = 4587, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "5649c0bc37d8941a2408ed99d0f6f87a83f3eead"
license_spdx = "MIT"
parent = "2d62e30b5f96565346ec11df5a9e50fd477c6382"
post_cutoff = false
repository = "rap2hpoutre/laravel-log-viewer"
slice = 1
url = "https://github.com/rap2hpoutre/laravel-log-viewer.git"

[[repository]]
advisory = "GHSA-66h4-qj4x-38xp"
changes = [{"advisory" = "GHSA-66h4-qj4x-38xp", "base" = "7adc0e878450229102ec45987af60b4d1e13e045", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {"size_cap" = 1, "unresolved_function" = 1}, "family" = "injection", "files" = [{"head_lines" = [[171, 171], [174, 174], [177, 178], [190, 191], [205, 205]], "path" = "src/Sandbox.ts"}], "function" = "hasOwnProperty", "function_lines" = [190, 192], "head" = "3cf2ba0cc0fa878687d11f28e9204100f6b88c10", "kind" = "vulnerability", "method" = "introducing", "path" = "src/Sandbox.ts", "post_cutoff" = false}, {"base" = "205ce690891848975648060697aeae30af497fa3", "files" = [{"head_lines" = [[391, 391]], "path" = "build/executor.js"}, {"head_lines" = [[1, 1]], "path" = "dist/Sandbox.min.js"}, {"head_lines" = [[1, 1]], "path" = "dist/Sandbox.min.js.map"}, {"head_lines" = [[1947, 1947]], "path" = "dist/node/Sandbox.js"}], "head" = "4b7ddba8c3f2193b00207aba250d2d378afc553a", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "298d030baa7eaa0d9880d4cce8c3333cd333cacd", "files" = [{"head_lines" = [[1077, 1081]], "path" = "build/parser.js"}, {"head_lines" = [[1, 1]], "path" = "dist/Sandbox.min.js"}, {"head_lines" = [[1, 1]], "path" = "dist/Sandbox.min.js.map"}, {"head_lines" = [[1242, 1246]], "path" = "dist/Sandbox.node.js"}], "head" = "c5d9db7a4a40389b7f5349555bcfae3485af9a56", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "610cf571b87770f1f728b0a637673b7f78f74982", "files" = [{"head_lines" = [[378, 387]], "path" = "js/tests.js"}, {"head_lines" = [[2, 3]], "path" = "package-lock.json"}, {"head_lines" = [[3, 3]], "path" = "package.json"}, {"head_lines" = [[35, 35], [451, 451], [543, 545], [1378, 1384], [1386, 1394], [1397, 1397], [1401, 1401]], "path" = "src/Sandbox.ts"}], "head" = "130994f9c7510d558775f2cf386a6269e5ab60bd", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "57d9fff2e0c7e8664bf7da393bb789b9624b2b8d", "files" = [{"head_lines" = [[327, 327], [772, 772]], "path" = "dist/Sandbox.js"}, {"head_lines" = [[1, 1]], "path" = "dist/Sandbox.min.mjs"}, {"head_lines" = [[1, 1]], "path" = "dist/Sandbox.min.mjs.map"}, {"head_lines" = [[329, 329], [774, 774]], "path" = "dist/node/Sandbox.js"}, {"head_lines" = [[3, 3]], "path" = "package.json"}, {"head_lines" = [[379, 379], [821, 821]], "path" = "src/Sandbox.ts"}], "head" = "0caa93134cb37c436371d334c799275d26080942", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "8af747cd52479e85078b43d1a1bec8fb61e62465", "files" = [{"head_lines" = [[50, 50], [135, 135], [388, 388], [538, 539], [555, 563], [567, 568], [570, 570], [585, 585], [612, 612], [621, 627], [629, 629], [631, 631], [658, 659], [661, 661], [663, 663], [665, 665], [789, 793], [814, 814], [820, 827], [829, 829], [835, 835], [1036, 1036], [1041, 1046], [1123, 1123]], "path" = "src/Sandbox.ts"}], "head" = "d687801a608070526ea23a13f131af39e6d1b76c", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "e2c230e67f7b523a7b9843ea1aae2d3b9159d6a2", "files" = [{"head_lines" = [[1, 1], [3, 24]], "path" = "build/Sandbox.d.ts"}, {"head_lines" = [[1, 15]], "path" = "build/Sandbox.js"}, {"head_lines" = [[1, 1]], "path" = "dist/Sandbox.min.js"}, {"head_lines" = [[1, 1]], "path" = "dist/Sandbox.min.js.map"}, {"head_lines" = [[2446, 2458], [2668, 2668]], "path" = "dist/Sandbox.node.js"}, {"head_lines" = [[3, 3]], "path" = "package-lock.json"}, {"head_lines" = [[3, 3]], "path" = "package.json"}, {"head_lines" = [[13, 20], [22, 37]], "path" = "src/Sandbox.ts"}], "head" = "8477f0d9cb1b4ec77be5e701f07d02f03148cae4", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "c5219a23f56aa6814bfd50a903d962296c37d898", "files" = [{"head_lines" = [[36, 36]], "path" = "dist/Sandbox.d.ts"}, {"head_lines" = [[70, 70], [485, 488], [512, 512], [526, 534], [
ecosystem = "npm"
family = "injection"
fix = "67cb186c41c78c51464f70405504e8ef0a6e43c3"
id = "r-f723f668b7bb26324abd0dc4"
instrument = {"bytes" = 562, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "3cf2ba0cc0fa878687d11f28e9204100f6b88c10"
license_spdx = "MIT"
parent = "6103d7147c4666fe48cfda58a4d5f37005b43754"
post_cutoff = false
repository = "nyariv/sandboxjs"
slice = 1
url = "https://github.com/nyariv/SandboxJS.git"

[[repository]]
advisory = "GHSA-g8c6-8fjj-2r4m"
changes = [{"advisory" = "GHSA-g8c6-8fjj-2r4m", "base" = "f480e7aaaf85b98488e3d0f501135927458e866c", "bias" = "SZZ last-writer proxy: refactors, moves and reformats can misidentify the introduction in either direction.", "fallback_reasons" = {"version_bracket" = 8}, "family" = "deserialization", "files" = [{"head_lines" = [[12, 36], [88, 88]], "path" = "README.rst"}, {"head_lines" = [[15, 21], [31, 34], [39, 39], [46, 46], [365, 365], [366, 366], [368, 368], [371, 378]], "path" = "docs/index.rst"}, {"head_lines" = [[2, 5], [8, 9]], "path" = "socketio/__init__.py"}, {"head_lines" = [[15, 16], [21, 23], [75, 75]], "path" = "socketio/base_manager.py"}, {"head_lines" = [[1, 64]], "path" = "socketio/kombu_manager.py"}, {"head_lines" = [[1, 77]], "path" = "socketio/pubsub_manager.py"}, {"head_lines" = [[1, 60]], "path" = "socketio/redis_manager.py"}, {"head_lines" = [[17, 19], [64, 64], [97, 101], [253, 253], [305, 307]], "path" = "socketio/server.py"}, {"head_lines" = [[15, 16], [146, 146], [150, 150]], "path" = "tests/test_base_manager.py"}, {"head_lines" = [[95, 95], [101, 101], [400, 405]], "path" = "tests/test_server.py"}], "function" = "_publish", "function_lines" = [42, 43], "head" = "47620bbebd92a1b388df72a88c0ca35cdb530073", "kind" = "vulnerability", "method" = "introducing", "path" = "socketio/redis_manager.py", "post_cutoff" = false}, {"base" = "af0004d78edda2da1d9bbcab9742ca75976d4373", "files" = [{"head_lines" = [[22, 22]], "path" = "socketio/__init__.py"}], "head" = "351a568cdacb2462913c6de119cb187d44e1e206", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "370db6488bfee5db9d90d675fd0ed8fae9baab0d", "files" = [{"head_lines" = [[357, 357], [359, 359]], "path" = "socketio/server.py"}], "head" = "d34f49b3b19c39f0beaed9d0e762f070b71f7104", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 0}, {"base" = "a58c184b0ffe76d8b00912b0084b12c26bd85631", "files" = [{"head_lines" = [[19, 19], [39, 42], [48, 58], [71, 75]], "path" = "socketio/base_manager.py"}, {"head_lines" = [[301, 301]], "path" = "socketio/server.py"}, {"head_lines" = [[27, 40]], "path" = "tests/test_base_manager.py"}], "head" = "da2d141e8d68fd698ddb2dd5d54c4b1a7622d4df", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 1, "time_third" = 0}, {"base" = "e626e6c41dcc1290d1c16359b9dc43d01803050e", "files" = [{"head_lines" = [[4, 4]], "path" = "socketio/asgi.py"}, {"head_lines" = [[123, 123], [136, 136], [149, 149]], "path" = "socketio/asyncio_namespace.py"}, {"head_lines" = [[152, 152], [162, 162]], "path" = "socketio/namespace.py"}, {"head_lines" = [[6, 6], [11, 11]], "path" = "socketio/tornado.py"}, {"head_lines" = [[182, 215]], "path" = "tests/test_asyncio_namespace.py"}, {"head_lines" = [[77, 81], [637, 709]], "path" = "tests/test_client.py"}, {"head_lines" = [[130, 157]], "path" = "tests/test_namespace.py"}], "head" = "16bdb422d62476fc305ffd624ba86522aee3b839", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 2, "time_third" = 0}, {"base" = "2ae46785d02bb37760542d0fd412e4474c631144", "files" = [{"head_lines" = [[30, 30]], "path" = "socketio/__init__.py"}], "head" = "0cc35ce8f40c22a3cd3a80f9162486d1fa7fc306", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "2a54f6c020a7d93d10ecbd1a64337bd6fa068d30", "files" = [{"head_lines" = [[5, 5], [29, 29], [86, 90]], "path" = "socketio/client.py"}], "head" = "dc89963e328920a3756cefb508213c310ffa730c", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "2f085b3338acc56a5c4625783d50ad53f5ad0c1a", "files" = [{"head_lines" = [[106, 107]], "path" = "socketio/base_manager.py"}, {"head_lines" = [[4, 5], [124, 128]], "path" = "tests/common/test_base_manager.py"}], "head" = "66068d9e968942343c840609e6e062162256111b", "kind" = "ordinary", "method" = "first_parent", "size_bucket" = 0, "time_third" = 1}, {"base" = "8c15b77c9b7f72e104350d2d61ffabbfb6686f0e", "files" = [{"head_lines" = [[44, 44], [54, 54], [59, 60], [69, 70]], "path
ecosystem = "pip"
family = "deserialization"
first_affected = "0.8.0"
fix = "53f6be094257ed81476b0e212c8cddd6d06ca39a"
id = "r-f84da08e6b275ed9dc22ea64"
instrument = {"bytes" = 5540, "files" = 1}
license_class = "permissive"
license_path = "LICENSE"
license_ref = "47620bbebd92a1b388df72a88c0ca35cdb530073"
license_spdx = "MIT"
parent = "a59c6f520059eb095ab4472e5192ce3e486875d9"
post_cutoff = false
repository = "miguelgrinberg/python-socketio"
slice = 1
url = "https://github.com/miguelgrinberg/python-socketio.git"

[[repository]]
id = "r-f9f74963c47521e0b653fc6d"
private = true
sha256 = "f9f74963c47521e0b653fc6df814df1d09bba5a441f3bdf01ddd1802e8ecd027"
slice = 1

[[repository]]
id = "r-fac7a823720b6d516b0b6685"
private = true
sha256 = "fac7a823720b6d516b0b6685502c60c8b4fd2aa90665976e3485157c617cfd54"
slice = 1

[[repository]]
id = "r-fe16ed78cdef32f18743600d"
private = true
sha256 = "fe16ed78cdef32f18743600ddbee0c83decc524412e9aa8e92e10f665c1b5620"
slice = 1