PT-2026-44980

Name of the Vulnerable Software and Affected Versions FastGPT versions prior to 4.15.0-beta1 Description The JavaScript sandbox worker fails to properly block dynamic import calls due to an insufficient regular expression. The regex /bimports/.testcode only accounts for ASCII whitespace and does...

PT-2026-78409

Name of the Vulnerable Software and Affected Versions Renovate versions 42.68.1 through 42.96.2 Renovate versions 42.68.1 through 43.4.3 renovate/renovate versions 13.3.0 through 13.5.9 mend/renovate-ce versions 13.3.0 through 13.5.9 renovate-ee-server versions 13.3.0 through 13.5.9...