All pull requests

Pull requests

• CVE-2026-12590 CVE-2026-82417 CVE-2026-82562 CVE-2026-110816 CVE-2026-111181 body-parser, qs: Crash on trailing bytes after a compressed body, ignored invalid limit, and qs stringify/comma-parse DoS (body-parser 1.20.5 -> 1.20.9, qs 6.15.2 -> 6.16.2)

  dependenciesjavascript
  #1207·dependabot[bot] opened Oct 28, 2026Bot·

  ·

• CVE-2026-90559 CVE-2026-93451 CVE-2026-93452 CVE-2026-108104 CVE-2026-108106 CVE-2026-116590 GHSA-6gp7-6wmv-gxqw org.xerial.snappy:snappy-java: Out-of-bounds writes, unbounded allocation and pooled-buffer double release on untrusted input (1.1.10.5 -> 1.1.10.12)

  dependenciesjava
  #1206·dependabot[bot] opened Oct 28, 2026Bot·

  ·

• CVE-2026-86472 CVE-2026-110095 CVE-2026-110180 CVE-2026-110306 CVE-2026-110725 fast-uri: Scheme spoofing, host confusion and relative-reference rewriting (3.1.7 -> 3.1.9)

  dependenciesjavascriptsecurityui
  #1204·vharseko opened Oct 27, 2026Member·

  ·

• Use the upstream org.restlet.jee 2.4.4 artifacts instead of the Jakarta-transformed copies, and fix WebFinger answering 500

  bugbuilddependenciesdocumentationjavajavascriptoauth2refactoringsecuritytests
  #1201·maximthomas opened Oct 26, 2026Contributor·

  ·
  10

• [#1196] Accept the DNS aliases of the realms as valid host names, so that a realm alias no longer needs its own entry in the FQDN map

  bugconcurrencydocumentationjavasecuritytests
  #1197·vharseko opened Oct 23, 2026Member·

  ·
  1

  9

• Migrate configurator/upgrade wizard from Apache Click to Jakarta Servlets + FreeMarker

  dependenciesjavaneeds testingrefactoringtestsui
  #1062·maximthomas opened Jul 8, 2026Contributor·

  ·

  · 16.2.0
  2

  20

• Enable HttpOnly session cookies by default

  cidocumentationhelp wantedjavajavascriptneeds testingsecuritytestsui
  #1059·vharseko opened Jun 20, 2026Member·

  ·

  · 16.2.0
  13

• JAXB3 Migration

  builddependenciesdocumentationhelp wantedjavaneeds testingrefactoringsamltestsui
  #1023·maximthomas opened May 21, 2026Contributor·

  ·

  · 16.2.0
  1

  44