https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T22:14:47.494745+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-4957 EUVD-2026-4957 2026-10-04T22:14:47.567193+00:00 EUVD-2026-4957 https://cve.radiocsirt.org/vuln/fkie_cve-2024-31455 fkie_cve-2024-31455 2026-10-04T22:14:47.567256+00:00

Minder by Stacklok is an open source software supply chain security platform. A refactoring in commit `5c381cf` added the ability to get GitHub repositories registered to a project without specifying a specific provider. Unfortunately, the SQL query for doing so was missing parenthesis, and would select a random repository. This issue is patched in pull request 2941. As a workaround, revert prior to `5c381cf`, or roll forward past `2eb94e7`.

 https://cve.radiocsirt.org/vuln/ghsa-ggp5-28x4-xcj9 GHSA-ggp5-28x4-xcj9 — Minder GetRepositoryByName data leak 2026-10-04T22:14:47.567305+00:00

Affected: Go: github.com/stacklok/minder

### Impact A recent refactoring added the ability to get GitHub repositories registered to a project without specifying a specific provider. Unfortunately, the SQL query for doing so was missing parenthesis, and would select a random repository.

### Patches Patched in #2941

### Workarounds Revert prior to `5c381cf`, or roll forward past `2eb94e7`

### References N/A

 https://cve.radiocsirt.org/vuln/gsd-2024-31455 gsd-2024-31455 2026-10-04T22:14:47.567349+00:00 gsd-2024-31455