All pull requests

Pull requests

• restrict deserialization in ResolvedTypeMunger.readSourceLocation

  #370·nabhan06 opened Oct 12, 2026·

  ·

• Add regression test for handler(Exception+) advice woven into catch(Exception|LinkageError) multi-catch (#368)

  #369·robinjohri opened Sep 23, 2026·2 tasks done·

  ·
  1

• synchronize lazy unpacking in bcel classfile attributes

  #364·nabhan06 opened Aug 19, 2026·

  ·

• restrict deserialized classes when reading weaving cache index

  #361·nabhan06 opened Jul 23, 2026·

  ·

• keep the shared weaving cache out of the world-writable temp directory

  #360·nabhan06 opened Jul 22, 2026·

  ·

• disable external entity resolution when parsing aop.xml

  #359·nabhan06 opened Jul 21, 2026·

  ·
  1

• reject jar entries that resolve outside the output directory

  #358·nabhan06 opened Jul 20, 2026·

  ·

• Harden .lst config import path validation

  #356·metsw24-max opened May 9, 2026·

  ·
  1

• Harden ASM structure model deserialization against unexpected serialized types

  #355·jmestwa-coder opened May 8, 2026·

  ·
  1

• Harden DocumentParser against XXE attacks

  #354·metsw24-max opened May 7, 2026·

  ·
  1

• Fixes #343 withincode doesn't work as specified

  #345·jafarre-bi opened Jul 15, 2025·

  ·
  9

• Per-classloader weaving cache fails for classes generated for around advice types

  #315·kriegaex opened Jul 18, 2024Contributor·

  ·
  3

  

• Bump maven-clean-plugin from 3.1.0 to 3.3.1

  dependenciesjava
  #244·dependabot[bot] opened Jun 20, 2023Bot·

  ·

• Bump maven-gpg-plugin from 1.6 to 3.1.0

  dependenciesjava
  #239·dependabot[bot] opened May 8, 2023Bot·

  ·

• Bump maven-javadoc-plugin from 3.2.0 to 3.5.0

  dependenciesjava
  #235·dependabot[bot] opened Apr 11, 2023Bot·

  ·

• Bump maven-help-plugin from 3.2.0 to 3.4.0

  dependenciesjava
  #232·dependabot[bot] opened Apr 11, 2023Bot·

  ·

• Bump maven-compiler-plugin from 3.8.1 to 3.11.0

  dependenciesjava
  #231·dependabot[bot] opened Apr 11, 2023Bot·

  ·

• Bump flatten-maven-plugin from 1.2.2 to 1.4.0

  dependenciesjava
  #229·dependabot[bot] opened Mar 20, 2023Bot·

  ·

• Bump maven-assembly-plugin from 3.1.1 to 3.5.0

  dependenciesjava
  #225·dependabot[bot] opened Feb 23, 2023Bot·

  ·

• Avoid unnecessary Map.containsKey calls.

  #213·turbanoff opened Jan 19, 2023Contributor·

  ·

• Bump xstream from 1.4.15 to 1.4.20

  dependenciesjava
  #203·dependabot[bot] opened Dec 26, 2022Bot·

  ·

• Remove unused allocations

  #166·turbanoff opened Apr 21, 2022Contributor·

  ·

• No need to use locks for reflection stuff. Use single-racy reads instead.

  enhancement
  #163·turbanoff opened Apr 20, 2022Contributor·

  ·

• Avoid calling SoftReference.get() twice

  #159·turbanoff opened Apr 13, 2022Contributor·

  ·
  4

• Make Trace instances as static final to give JIT a chance to optimize

  #156·turbanoff opened Apr 12, 2022Contributor·

  ·
  3