Sebastian Pipping

Hi! I came across Refiner at https://roman.pt/posts/refiner/ — interesting project! The toolbar icons are — at default zoom level — literally too small to be recognizable with normal vision, the...

Resolve direct and indirect parser recursion (fixes #282)

3

Fixes #282

[security] `Bio.Entrez.DataHandler`, `Bio.Entrez.read`, `Bio.Entrez.parse` are vulnerable to XXE and SSRF

4

Hi! The code in class `Bio.Entrez.DataHandler` — that is also powering API functions `Bio.Entrez.read` and `Bio.Entrez.parse` — parses arbitrary XML content in a way where contained DTD and XSD URLs...

CVE-2020-12827 unfixed? (`ignoreIncludes` continues to default to `false`? 🤔 )

2

Hi! Past vulnerability CVE-2020-12827 has come to my attention. After reading [the detailed description](https://seclists.org/fulldisclosure/2020/Jun/23) and inspecting the two related commits… - 21034a7187f2bda4b0d66e7a1c63314c88dce71a - 30e29ed2cdaec8684d60a6d12ea07b611c765a12 …[between releases 4.6.2 and 4.6.3](https://github.com/mjmlio/mjml/compare/v4.6.2...v4.6.3), my...

Hi! Just a quick note that **there is another unfixed vulnerability in Expat** on my desk by now: - It's been reported on September 25th by a human (not fuzzing)...

it should be noted that GitHub Actions is transitioning related image `ubuntu-22.04` at the moment and so a CI run does roulette on these two images: - Version: 202509**07.50**.1 —...

Hi! Thanks for sharing this project as software libre! 🙏 It has come to my attention that use of loaders `http_loader` and `local_loader` is showcased in the docs without any...

Is offlineimap3 maintained? Will it be?

17

Hi! My impression is that this project is severely undermaintained, e.g. from seeing these unfixed issues: - #205 - #206 - #222 - #227 Could you please clarify the current...

### Describe the issue Hi! It has come to my attention that use of `ExactVersion` at… https://github.com/abseil/abseil-cpp/blob/f751e6186da331d7a712256d4cdc5e812cdb60b7/CMakeLists.txt#L204-L207 …makes use of `find_package(absl 20240722.0 CONFIG REQUIRED)` in dependent build systems officially incompatible...

Enabling ASan and UBSan when running tests in CI? / test suite memory leaks?

4

Hello @lexborisov, now that issues #283 and #288 are fixed, because the current CI does not yet compile with ASan and UBSan enabled… https://github.com/lexbor/lexbor/blob/9078f85f6730d96145ece5bc524d0eea3eeb2c37/.github/workflows/cmake.yml#L26 …there is a risk of _regressions_...