Pull Request Explorer
| Title | Author | Size | AI | Cycle Time | Review | Merged |
|---|---|---|---|---|---|---|
| Decode binary LDAP attributes as UUID using mapped attribute name closes #53608 | atiqur-rahman-pro | M | No | 35.2h | 0.0h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [CVE-2026-97311] Filter groups by view permission in getGroupsInRole | pedroigor | M | No | 1.1h | 0.3h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Limit the size in CRL and OCSP http responses | rmartinc | M | No | 20.5h | 0.1h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.6] Username enumeration via empty-password timing | mabartos | XS | No | 1.3h | 0.4h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.6] ConditionalOtpFormAuthenticator skip-header rule behind isProxyTruste… | msdaly200 | L | No | 46.8h | 25.4h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.8] Username enumeration via empty-password timing | mabartos | M | No | 1.0h | 0.5h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.6] Restrict CRL files to conf and omit CRL locations from responses | michalvavrik | L | No | 17.4h | 15.6h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Username enumeration via empty-password timing | mabartos | M | No | 20.1h | 0.0h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| (26.8) Enforce PAR single-use across all authentication paths | abstractj | M | No | 18.9h | 18.4h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.8] Don't swallow local storage failures in graceful degradation | ssilvert | M | AI | 12.9h | 12.8h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix SAML 2.0 link | andymunro | XS | No | 36.9h | 36.9h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.8] Restrict CRL files to conf and omit CRL locations from responses | michalvavrik | L | No | 16.2h | 16.2h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Reject standard token exchange when the client certificate is missing (26.8) | graziang | M | No | 19.4h | 19.3h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.8] Token introspection omits act claim for token-exchange delegation tokens | mabartos | S | No | 17.9h | 17.9h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.8] ConditionalOtpFormAuthenticator skip-header rule behind isProxyTruste… | msdaly200 | XL | No | 42.4h | 0.8h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Bump RESTEasy Jackson Provider to 1.0.0.Final | michalvavrik | XS | No | 14.1h | 0.0h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Backport 26.8 Reject SLO LogoutRequest for unauthorized SessionIndex and add test for session hijacking prevention | jimmychakkalakal | M | No | 44.1h | 44.1h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Backport 26.8 Fix DCR privilege escalation via ssf.* attributes and service-account toggle | jimmychakkalakal | L | No | 44.1h | 25.5h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Close HTTP responses with illegal charsets | ahus1 | M | No | 17.0h | 16.9h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.8] Sign out user session logs out different session | mabartos | M | No | 47.1h | 47.1h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix unstable handling for table rows | ahus1 | S | No | 9.3h | 9.3h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix unstable handling for tables | ahus1 | XS | No | 17.6h | 17.6h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix unstable handling of the help | ahus1 | XS | No | 17.6h | 17.6h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix unstable handling of the help | ahus1 | XS | No | 17.6h | 17.6h | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Revert "Skip GA workflows for tmp branches (#53667)" | stianst | XS | No | 0.1h | - | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Revert "Skip GA workflows for tmp branches (#53666)" | stianst | XS | No | - | - | Oct 08, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Stabilize the pause Operator workflow | ahus1 | XS | No | 7.9h | 0.1h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Verify realm/resource-server ownership before returning per-request c… | sguilhen | M | No | 53.1h | 47.7h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Organization API cannot restore an empty domain list from its GET rep… | vramik | M | No | 5.5h | - | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Enforce view permission on users and clients when resolving them duri… | sguilhen | M | No | 52.4h | 47.7h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Enforce view permission on users and clients when resolving them duri… | sguilhen | M | No | 52.4h | 47.7h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.6] Bind first broker login verification proof to the brokered identity id | michalvavrik | S | No | 32.9h | 32.9h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.8] Bind first broker login verification proof to the brokered identity id | michalvavrik | S | No | 32.9h | 32.9h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Require STARTTLS when SMTP starttls is enabled | edewit | S | No | 4.2h | 0.0h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.8] Authenticator reference incorrectly masked in authenticator config | mabartos | M | No | 3.4h | 2.6h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Stabilize the pause Operator workflow | ahus1 | XS | No | 3.1h | 1.6h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.6] Authenticator reference incorrectly masked in authenticator config | mabartos | M | No | 2.6h | 2.6h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Fix unstable handling for table rows | ahus1 | S | No | 3.1h | 0.7h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Do not chek critical status for key usage validations (26.8) | rmartinc | XL | No | 6.1h | 4.0h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Do not chek critical status for key usage validations (26.6) | rmartinc | M | No | 3.4h | 1.3h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Do not merge granted scopes across resources sharing the same name | sguilhen | M | No | 47.7h | 47.7h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Do not merge granted scopes across resources sharing the same name | sguilhen | M | No | 47.7h | 47.7h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.6] Prevent privilege escalation via group membership to admin-role groups | vramik | L | No | 145.3h | 102.5h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Verify realm/resource-server ownership before returning per-request c… | sguilhen | M | No | 47.8h | 47.8h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.6] Generic user create/update endpoints bypasses denied reset-password p… | vramik | M | No | 41.6h | 41.6h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| [26.8] Generic user create/update endpoints bypasses denied reset-password p… | vramik | M | No | 41.2h | 41.2h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| escape scim filter value in ipatuura user lookup | naruto-lgtm | M | No | 52.8h | 0.0h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Don't swallow local storage failures in graceful degradation | ssilvert | M | AI | 17.3h | 0.0h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Organization invitation redirectUrl is not validated against the acco… | vramik | L | No | 45.5h | 0.1h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||
| Skip GA workflows for tmp branches | stianst | XS | No | 0.9h | 0.5h | Oct 07, 2026 |
|
LLM analysis pending This PR has not been analyzed yet. |
||||||