SecObserve icon indicating copy to clipboard operation
SecObserve copied to clipboard

SecObserve is an open source vulnerability management system for software development and cloud environments. It supports a variety of open source vulnerability scanners and integrates easily into CI/...

Results 32 SecObserve issues
Sort by recently updated
recently updated
newest added

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/SecObserve/SecObserve). ## Repository problems These problems occurred while...

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [@mui/icons-material](https://mui.com/material-ui/material-icons/) ([source](https://togithub.com/mui/material-ui/tree/HEAD/packages/mui-icons-material)) | [`5.15.17` -> `5.15.18`](https://renovatebot.com/diffs/npm/@mui%2ficons-material/5.15.17/5.15.18) |...

dependencies

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [@fortawesome/react-fontawesome](https://togithub.com/FortAwesome/react-fontawesome) | [`0.2.0` -> `0.2.1`](https://renovatebot.com/diffs/npm/@fortawesome%2freact-fontawesome/0.2.0/0.2.1) | [![age](https://developer.mend.io/api/mc/badges/age/npm/@fortawesome%2freact-fontawesome/0.2.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)...

dependencies

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://togithub.com/actions/checkout) | action | patch | `v4.1.5` -> `v4.1.6` | ---...

dependencies

It would be nice to have the possibility of ingesting CSAF documents from upstream vendors. I think this would support the whole idea of "Vulnerability Exploitability **eXchange**" and it's very...

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [eslint](https://eslint.org) ([source](https://togithub.com/eslint/eslint)) | [`8.57.0` -> `9.9.0`](https://renovatebot.com/diffs/npm/eslint/8.57.0/9.9.0) |...

dependencies

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Update | Change | |---|---| | lockFileMaintenance | All locks refreshed | 🔧 This Pull Request updates lock files to use...

dependencies

https://github.com/MaibornWolff/SecObserve/discussions/1106#discussioncomment-8530772 could be solved like this: * The product gets another boolean flag `new_observations_in_review` * If it is set, than new observations get the status `in Review` instead of open....

We're currently thinking about how to solve the following scenarios: 1. A product version is affected by a vulnerability and there's a mitigation or a workaround available for it. This...

Tomorrow (1st of November) CVSS 4.0 will be published according to the details at https://www.first.org/cvss/v4-0/ What needs to be done to support this?