Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Type
/
to search
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
OpenIdentityPlatform
/
OpenAM
Public
Uh oh!
There was an error while loading.
Please reload this page
.
Notifications
You must be signed in to change notification settings
Fork
177
Star
882
Code
Issues
2
Pull requests
4
Discussions
Actions
Projects
Wiki
Security and quality
33
Insights
Additional navigation options
Code
Issues
Pull requests
Discussions
Actions
Projects
Wiki
Security and quality
Insights
Actions: OpenIdentityPlatform/OpenAM
Actions
All workflows
Workflows
Build
Build
CodeQL
CodeQL
CodeQL
CodeQL
Copilot cloud agent
Copilot cloud agent
Copilot code review
Copilot code review
Dependabot Updates
Dependabot Updates
Package/Deploy
Package/Deploy
Release
Release
Show more workflows...
Management
Caches
Build
Build
Actions
Loading...
Loading
Sorry, something went wrong.
Uh oh!
There was an error while loading.
Please reload this page
.
will be ignored since log searching is not yet available
Show workflow options
Create status badge
Create status badge
Loading
Uh oh!
There was an error while loading.
Please reload this page
.
build.yml
will be ignored since log searching is not yet available
676 workflow runs
676 workflow runs
Event
Filter by Event
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching events.
Status
Filter by Status
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching statuses.
Branch
Filter by Branch
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching branches.
Actor
Filter by Actor
Sorry, something went wrong.
Filter
Loading
Sorry, something went wrong.
No matching users.
GHSA-5p4m-2wfm-xmqj JS-YAML: Quadratic CPU consumption in !!omap reso…
Build
#1632:
Commit
d937e56
pushed by
vharseko
1h 36m 15s
master
master
1h 36m 15s
View workflow file
GHSA-5p4m-2wfm-xmqj JS-YAML: Quadratic CPU consumption in !!omap resolution
Build
#1631:
Pull request
#1106
opened by
dependabot
Bot
1h 11m 45s
dependabot/npm_and_yarn/openam-ui/openam-ui-ria/js-yaml-4.3.1
dependabot/npm_and_yarn/openam-ui/openam-ui-ria/js-yaml-4.3.1
1h 11m 45s
View #1106
View workflow file
[#1103] Add upgrade step syncing missing ScriptingService sub-configu…
Build
#1630:
Commit
7fb46c2
pushed by
vharseko
57m 48s
master
master
57m 48s
View workflow file
CVE-2026-71497 jsoup: Cleaner may expose markup with custom raw-text …
Build
#1629:
Commit
c5dd05f
pushed by
vharseko
24s
master
master
24s
View workflow file
[#1103] Add upgrade step syncing missing ScriptingService sub-configurations
Build
#1628:
Pull request
#1104
synchronize by
vharseko
44m 36s
vharseko:fix/1103-scripting-service-upgrade
vharseko:fix/1103-scripting-service-upgrade
44m 36s
View #1104
View workflow file
CVE-2026-71497 jsoup: Cleaner may expose markup with custom raw-text elements
Build
#1627:
Pull request
#1105
opened by
dependabot
Bot
43m 50s
dependabot/maven/openam-documentation/openam-doc-services-ref/org.jsoup-jsoup-1.23.1
dependabot/maven/openam-documentation/openam-doc-services-ref/org.jsoup-jsoup-1.23.1
43m 50s
View #1105
View workflow file
[#1103] Add upgrade step syncing missing ScriptingService sub-configurations
Build
#1626:
Pull request
#1104
synchronize by
vharseko
46m 15s
vharseko:fix/1103-scripting-service-upgrade
vharseko:fix/1103-scripting-service-upgrade
46m 15s
View #1104
View workflow file
[#1103] Add upgrade step syncing missing ScriptingService sub-configurations
Build
#1625:
Pull request
#1104
opened by
vharseko
1h 3m 13s
vharseko:fix/1103-scripting-service-upgrade
vharseko:fix/1103-scripting-service-upgrade
1h 3m 13s
View #1104
View workflow file
CVE-2026-59869 js-yaml: YAML merge-key chains can force quadratic CPU…
Build
#1624:
Commit
958688e
pushed by
vharseko
42m 38s
master
master
42m 38s
View workflow file
CVE-2026-13149 CVE-2026-14257 CVE-2026-69152 brace-expansion: DoS via…
Build
#1623:
Commit
0db1bda
pushed by
vharseko
17s
master
master
17s
View workflow file
CVE-2026-18446 fast-uri vulnerable to host confusion via backslash au…
Build
#1622:
Commit
3ec2f5a
pushed by
vharseko
41s
master
master
41s
View workflow file
Update org.openidentityplatform.opendj to 5.2.0-SNAPSHOT
Build
#1621:
Pull request
#1102
opened by
vharseko
1h 40m 20s
vharseko:vharseko-patch-2
vharseko:vharseko-patch-2
1h 40m 20s
View #1102
View workflow file
Bump brace-expansion from 1.1.12 to 1.1.18 in /openam-ui/openam-ui-api
Build
#1620:
Pull request
#1101
opened by
dependabot
Bot
2h 23m 55s
dependabot/npm_and_yarn/openam-ui/openam-ui-api/brace-expansion-1.1.18
dependabot/npm_and_yarn/openam-ui/openam-ui-api/brace-expansion-1.1.18
2h 23m 55s
View #1101
View workflow file
CVE-2026-59869 js-yaml: YAML merge-key chains can force quadratic CPU consumption
Build
#1619:
Pull request
#1100
opened by
vharseko
2h 52m 2s
vharseko:fix/cve-2026-59869-js-yaml-api
vharseko:fix/cve-2026-59869-js-yaml-api
2h 52m 2s
View #1100
View workflow file
CVE-2026-13149 CVE-2026-14257 CVE-2026-69152 brace-expansion: DoS via unbounded expansion
Build
#1618:
Pull request
#1099
opened by
vharseko
3h 38m 24s
vharseko:fix/cve-2026-13149-brace-expansion
vharseko:fix/cve-2026-13149-brace-expansion
3h 38m 24s
View #1099
View workflow file
CVE-2026-18446 fast-uri vulnerable to host confusion via backslash authority introducer
Build
#1617:
Pull request
#1098
opened by
vharseko
3h 51m 33s
vharseko:fix/cve-2026-18446-fast-uri
vharseko:fix/cve-2026-18446-fast-uri
3h 51m 33s
View #1098
View workflow file
Bump fast-uri from 3.1.4 to 3.1.5 in /openam-ui/openam-ui-ria
Build
#1616:
Pull request
#1097
opened by
dependabot
Bot
3h 5m 30s
dependabot/npm_and_yarn/openam-ui/openam-ui-ria/fast-uri-3.1.5
dependabot/npm_and_yarn/openam-ui/openam-ui-ria/fast-uri-3.1.5
3h 5m 30s
View #1097
View workflow file
CVE-2026-18446 fast-uri vulnerable to host confusion via backslash authority introducer
Build
#1615:
Pull request
#1096
opened by
dependabot
Bot
1h 22m 17s
dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/fast-uri-3.1.5
dependabot/npm_and_yarn/openam-ui/openam-ui-js-sdk/fast-uri-3.1.5
1h 22m 17s
View #1096
View workflow file
CVE-2026-69185 CVE-2026-33151 Socket.IO: Zero-attachment Memory Exhau…
Build
#1614:
Commit
293a589
pushed by
vharseko
3h 47m 49s
master
master
3h 47m 49s
View workflow file
Harden AuthXMLRequest.setPrincipal against arbitrary class instantiat…
Build
#1613:
Commit
0594405
pushed by
vharseko
54m 24s
master
master
54m 24s
View workflow file
[#1080] OAuth2 consent: accept the resource owner's session id as the…
Build
#1612:
Commit
7c3aa34
pushed by
vharseko
30s
master
master
30s
View workflow file
Harden AuthXMLRequest.setPrincipal against arbitrary class instantiation (same pattern as GHSA-wg5r-wc3x-39vc)
Build
#1611:
Pull request
#1088
synchronize by
BarakSrour
4h 19m 48s
BarakSrour:harden/authxmlrequest-setprincipal-reflection
BarakSrour:harden/authxmlrequest-setprincipal-reflection
4h 19m 48s
View #1088
View workflow file
CVE-2026-69185 CVE-2026-33151 Socket.IO: Zero-attachment Memory Exhaustion + unbounded number of binary attachments
Build
#1610:
Pull request
#1095
opened by
dependabot
Bot
5h 53m 30s
dependabot/npm_and_yarn/openam-ui/openam-ui-ria/socket.io-parser-4.2.7
dependabot/npm_and_yarn/openam-ui/openam-ui-ria/socket.io-parser-4.2.7
5h 53m 30s
View #1095
View workflow file
Harden AuthXMLRequest.setPrincipal against arbitrary class instantiation (same pattern as GHSA-wg5r-wc3x-39vc)
Build
#1609:
Pull request
#1088
opened by
BarakSrour
1h 44m 59s
BarakSrour:harden/authxmlrequest-setprincipal-reflection
BarakSrour:harden/authxmlrequest-setprincipal-reflection
1h 44m 59s
View #1088
View workflow file
[#1082] Fix docs contradicting each other on XUI + HttpOnly session c…
Build
#1608:
Commit
b4c030a
pushed by
maximthomas
2h 36m 56s
master
master
2h 36m 56s
View workflow file
Previous
1
2
3
4
5
…
27
28
Next
You can’t perform that action at this time.