/ feed22 advisory · 26 mixed · 326 release-note streams
Checked · Target interval 120 minutes
Loofah: Ruby web servers, framework components and parsing or authentication gems affect deployed Rails/Rack applications.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Checked · Target interval 120 minutes
Rails HTML Sanitizer: Ruby web servers, framework components and parsing or authentication gems affect deployed Rails/Rack applications.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
2 checked entries were not usable (Feed item lacks substantive release notes)
Checked · Target interval 120 minutes
Devise: Ruby web servers, framework components and parsing or authentication gems affect deployed Rails/Rack applications.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
9 checked entries were not usable (Feed item lacks substantive release notes)
Checked · Target interval 120 minutes
WEBrick: Ruby web servers, framework components and parsing or authentication gems affect deployed Rails/Rack applications.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
3 checked entries were not usable (Feed item lacks substantive release notes)
Checked · Target interval 120 minutes
REXML: Ruby web servers, framework components and parsing or authentication gems affect deployed Rails/Rack applications.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Latest dated entry is older than one year; monitor for source stagnation
Checked · Target interval 120 minutes
net-imap: Ruby web servers, framework components and parsing or authentication gems affect deployed Rails/Rack applications.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Checked · Target interval 120 minutes
net-smtp: Ruby web servers, framework components and parsing or authentication gems affect deployed Rails/Rack applications.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
3 checked entries were not usable (Feed item lacks substantive release notes)
Checked · Target interval 120 minutes
Spring Framework: JVM HTTP stacks, deserializers, expression engines, logging and identity libraries have broad transitive deployment.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Checked · Target interval 120 minutes
Spring Boot: JVM HTTP stacks, deserializers, expression engines, logging and identity libraries have broad transitive deployment.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Checked · Target interval 120 minutes
Spring Security: JVM HTTP stacks, deserializers, expression engines, logging and identity libraries have broad transitive deployment.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Checked · Target interval 120 minutes
Spring Cloud Gateway: JVM HTTP stacks, deserializers, expression engines, logging and identity libraries have broad transitive deployment.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Checked · Target interval 120 minutes
Quarkus: JVM HTTP stacks, deserializers, expression engines, logging and identity libraries have broad transitive deployment.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
5 checked entries were not usable (Feed item lacks substantive release notes; Empty or oversized document; requires a dedicated adapter)
Checked · Target interval 120 minutes
Micronaut: JVM HTTP stacks, deserializers, expression engines, logging and identity libraries have broad transitive deployment.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Checked · Target interval 120 minutes
Netty: JVM HTTP stacks, deserializers, expression engines, logging and identity libraries have broad transitive deployment.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
1 checked entries were not usable (Feed item lacks substantive release notes)
Checked · Target interval 120 minutes
Undertow: JVM HTTP stacks, deserializers, expression engines, logging and identity libraries have broad transitive deployment.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
8 checked entries were not usable (Feed item lacks substantive release notes)
Checked · Target interval 120 minutes
Apache Struts: JVM HTTP stacks, deserializers, expression engines, logging and identity libraries have broad transitive deployment.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
2 checked entries were not usable (Feed item lacks substantive release notes)
Checked · Target interval 120 minutes
Apache Log4j: JVM HTTP stacks, deserializers, expression engines, logging and identity libraries have broad transitive deployment.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Checked · Target interval 120 minutes
Logback: JVM HTTP stacks, deserializers, expression engines, logging and identity libraries have broad transitive deployment.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Checked · Target interval 120 minutes
SLF4J: JVM HTTP stacks, deserializers, expression engines, logging and identity libraries have broad transitive deployment.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
6 checked entries were not usable (Feed item lacks substantive release notes)
Checked · Target interval 120 minutes
Gson: JVM HTTP stacks, deserializers, expression engines, logging and identity libraries have broad transitive deployment.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
1 checked entries were not usable (Feed item lacks substantive release notes)
Checked · Target interval 120 minutes
Retrofit: JVM HTTP stacks, deserializers, expression engines, logging and identity libraries have broad transitive deployment.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
6 checked entries were not usable (Feed item lacks substantive release notes); Latest dated entry is older than one year; monitor for source stagnation
Checked · Target interval 120 minutes
Apache Shiro: JVM HTTP stacks, deserializers, expression engines, logging and identity libraries have broad transitive deployment.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Checked · Target interval 120 minutes
Apache Dubbo: JVM HTTP stacks, deserializers, expression engines, logging and identity libraries have broad transitive deployment.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Checked · Target interval 120 minutes
JJWT: JVM HTTP stacks, deserializers, expression engines, logging and identity libraries have broad transitive deployment.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
1 checked entries were not usable (Feed item lacks substantive release notes); Latest dated entry is older than one year; monitor for source stagnation
Structured advisory databases are configured by default; vendor feeds are opt-in. Catalog entries do not establish live uptime or complete coverage. Vendor checks verify retrieval and parsing, not extraction accuracy.