Browse Security Advisories
Security Advisories
Moderate
about 4 hours ago
virtualenv: Builtin creation follows linked environment directories
pypi
virtualenv
Moderate
about 4 hours ago
virtualenv: Deletion recovery can change a symlink target's mode
pypi
virtualenv
High
about 4 hours ago
virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax
pypi
virtualenv
High
about 4 hours ago
Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tags
pypi
Pillow
Critical
about 4 hours ago
Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO
pypi
Pillow
Moderate
about 4 hours ago
Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer
pypi
pillow
High
about 4 hours ago
Pillow: Infinite loop in PdfParser.rewrite_pages on page tree Parent cycle
pypi
Pillow
High
about 4 hours ago
Pillow: APNG background disposal allocates full canvas before decompression bomb check
pypi
Pillow
High
about 5 hours ago
Pillow: MSP RLE decoder expands a tiny file into unbounded memory
pypi
pillow
High
about 5 hours ago
Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)
pypi
Pillow
Moderate
about 5 hours ago
Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()
pypi
Pillow
Moderate
about 5 hours ago
Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes
pypi
Pillow
Moderate
about 5 hours ago
Pillow: Image.quantize() with empty palette leaks uninitialized stack memory
pypi
Pillow
Moderate
about 5 hours ago
Pillow: Quadratic GIF comment concatenation allows DoS in Image.open()
pypi
Pillow
High
about 5 hours ago
Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images
pypi
Pillow
High
about 5 hours ago
Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0
pypi
pillow
High
about 6 hours ago
Pillow: Invalid free in FreeType glyph rendering when a stroker is active
pypi
pillow
High
about 6 hours ago
Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform
pypi
Pillow
Moderate
about 6 hours ago
Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
pypi
Pillow
Critical
about 6 hours ago
Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
pypi
Pillow
Moderate
about 6 hours ago
Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file
npm
vite-plus, @vitest/browser, @vitest/ui
Moderate
about 6 hours ago
Vitest: Code injection via unauthenticated manual mock registration
npm
@vitest/mocker
Moderate
about 6 hours ago
Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix
npm
@vitest/mocker
Moderate
about 6 hours ago
ApostropheCMS: Exposure of Sensitive Information via predictable export filenames
npm
@apostrophecms/import-export
Moderate
about 6 hours ago
OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs
npm
openclaw
Critical
about 8 hours ago
Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites
npm
@storybook/addon-mcp, @storybook/addon-vitest, @storybook/experimental-addon-test, @storybook/core-server, @storybook/core, storybook
Moderate
about 8 hours ago
Electron: HID and USB permission checks can be attributed to the wrong origin
npm
electron
Low
about 8 hours ago
djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool
pypi
djust
Moderate
about 8 hours ago
ApostropheCMS: POST /api/v1/@apostrophecms/doc/slugTaken discloses existence of private/admin-only content to any authenticated user
npm
apostrophe
Moderate
about 9 hours ago
ApostropheCMS: GET /api/v1/@apostrophecms/page/:id bypasses viewRole restriction and exposes viewPermission-gated fields to lower-privileged users
npm
apostrophe
Moderate
about 9 hours ago
ApostropheCMS: Stored XSS via Unescaped Widget Style Attribute Serialization
npm
apostrophe
Low
about 9 hours ago
ApostropheCMS: Missing Authentication in `cleanExport` Route
npm
@apostrophecms/import-export
Moderate
about 9 hours ago
ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST API
npm
apostrophe
Moderate
about 9 hours ago
ApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb()/hsl() prefix
npm
apostrophe
Moderate
about 9 hours ago
ApostropheCMS sanitize-html: unbounded recursion when re-sanitizing the fallback of a discarded iframe (stack overflow, nestingLimit not enforced)
npm
sanitize-html
Moderate
about 9 hours ago
ApostropheCMS: Import API bypasses publication roles for protected content
npm
apostrophe, @apostrophecms/import-export
Moderate
about 9 hours ago
ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content
npm
@apostrophecms/import-export
Moderate
about 9 hours ago
ApostropheCMS: Import archives can exhaust server storage and deny service
npm
@apostrophecms/import-export
Moderate
about 9 hours ago
pypdf: Possible infinite loop when hitting EOF in standard xref table
pypi
pypdf
High
about 9 hours ago
virtualenv bash activate runs commands from an environment name with a backslash before $
pypi
virtualenv
Moderate
about 9 hours ago
pypdf: Possible large memory usage for streams with multiple filters
pypi
pypdf
Low
about 9 hours ago
Vite: Cross origin script execution through Vite custom middleware
npm
vite-plus, vite
Moderate
about 9 hours ago
Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine
npm
vite-plus, vite
Moderate
about 9 hours ago
Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`
npm
vite-plus, vite
High
about 9 hours ago
virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST
pypi
virtualenv
High
about 9 hours ago
virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote
pypi
virtualenv
High
about 9 hours ago
virtualenv activation scripts run code from a path that contains a placeholder name
pypi
virtualenv
Moderate
about 9 hours ago
Slack Morphism verifier errors disclose valid HMACs in the logs
cargo
slack-morphism
Moderate
about 9 hours ago
OGNL stricter-invocation block list bypass via java.lang.reflect reflection proxies
maven
ognl:ognl
High
about 9 hours ago
OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runs
go
github.com/openchoreo/openchoreo
High
about 9 hours ago
Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalization
go
github.com/moov-io/signedxml
High
about 12 hours ago
ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export
npm
@apostrophecms/import-export, apostrophe
Moderate
1 day ago
A2A Java SDK: Push notification credentials logged in cleartext on protobuf parse failure
maven
org.a2aproject.sdk:a2a-java-sdk-transport-rest
High
1 day ago
A2A Java SDK: Android synchronous POST forwards credentials across authorities after incomplete redirect fix
maven
org.a2aproject.sdk:a2a-java-sdk-http-client-android
Moderate
1 day ago
A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification delivery
maven
org.a2aproject.sdk:a2a-java-sdk-server-common
High
1 day ago
A2A Java SDK has a fail-open default task authorization
maven
org.a2aproject.sdk:a2a-java-sdk-server-common
Moderate
1 day ago
A2A Java SDK send client credentials under server-controlled HTTP header name, enabling leakage via redirect
maven
org.a2aproject.sdk:a2a-java-sdk-parent
High
1 day ago
Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS
pypi
Pillow
Moderate
1 day ago
Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit
pypi
Pillow
High
1 day ago
Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips
pypi
Pillow
High
1 day ago
Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read
pypi
Pillow
High
1 day ago
Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)
pypi
pillow
Moderate
1 day ago
Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)
pypi
pillow
High
1 day ago
Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels
pypi
Pillow
Moderate
1 day ago
@angular/common: XSRF Token Leakage via URL Parsing Discrepancy in Angular HTTP Client (Incomplete fix for CVE-2025-66035)
npm
@angular/common
Low
1 day ago
markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled
npm
markdown-it
High
1 day ago
MCP TypeScript server SDK: Shared transport or server instances delivered one HTTP client's messages to another
npm
@modelcontextprotocol/server
High
1 day ago
MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation
npm
@modelcontextprotocol/server, @modelcontextprotocol/sdk
Low
1 day ago
AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies
pypi
aiohttp
Moderate
1 day ago
launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors
npm
vite-plus, vite, launch-editor
High
1 day ago
launch-editor: `fs.existsSync()` existence check can be bypassed on Windows
npm
vite-plus, vite, launch-editor
Moderate
1 day ago
MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service
npm
@modelcontextprotocol/server-legacy, @modelcontextprotocol/express, @modelcontextprotocol/server, @modelcontextprotocol/sdk
Critical
1 day ago
uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised
pypi
uv
Critical
1 day ago
certifi bundles emSign root CAs with compromised intermediate CA keys
pypi
certifi
Moderate
1 day ago
launch-editor: escapeCmdArgs() omits % escaping on Windows
npm
vite-plus, vite, launch-editor
High
1 day ago
MCP TypeScript SDK: Experimental tasks were not tied to the session that created them
npm
@modelcontextprotocol/sdk
Moderate
1 day ago
MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies
npm
@modelcontextprotocol/client, @modelcontextprotocol/sdk
Low
1 day ago
ApostropheCMS: Missing Authorization on Notification PATCH/DELETE Endpoints
npm
apostrophe
Moderate
1 day ago
ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring test
npm
@apostrophecms/import-export
Low
1 day ago
ApostropheCMS sanitize-html: SMIL animation namespace-prefix bypass allows javascript: URI injection (XSS)
npm
sanitize-html
Moderate
1 day ago
ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)
npm
uploadfs
Moderate
1 day ago
ApostropheCMS: Authenticated Object-Level Authorization Bypass in exist-in-locale Reveals Restricted Localized Draft Identifiers
npm
apostrophe
Moderate
1 day ago
ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document
npm
@apostrophecms/import-export
Moderate
1 day ago
ApostropheCMS: Client-side Prototype Pollution in apos.http.parseQuery leading to DOM-based XSS against authenticated users
npm
apostrophe
Filter by Severity
Filter by Source
CPAN Security Advisory Database
1,159
Erlang Ecosystem Foundation
341
GitHub Advisory Database
37,070
Filter by Ecosystem
maven
8,620
npm
8,189
pypi
7,543
packagist
7,231
go
5,820
nuget
5,281
cargo
2,070
cpan
1,158
rubygems
1,144
hex
386
swift
63
actions
58
pub
12
Filter by Package
openclaw
592
moodle/moodle
437
tensorflow
433
tensorflow-gpu
427
tensorflow-cpu
423
magento/community-edition
361
org.jenkins-ci.main:jenkins-core
259
Microsoft.ChakraCore
247
github.com/mattermost/mattermost/server/v8
207
github.com/mattermost/mattermost-server
192
typo3/cms
189
Magick.NET-Q16-HDRI-AnyCPU
164
Magick.NET-Q8-AnyCPU
164
Magick.NET-Q16-AnyCPU
164
Magick.NET-Q16-HDRI-x86
163
org.apache.tomcat:tomcat
162
Magick.NET-Q16-x86
162
Magick.NET-Q8-x86
162
magento/project-community-edition
161
Magick.NET-Q16-OpenMP-arm64
160
Magick.NET-Q16-HDRI-OpenMP-arm64
160
open-webui
160
Magick.NET-Q16-arm64
160
Magick.NET-Q16-OpenMP-x64
160
Magick.NET-Q16-HDRI-x64
160
Magick.NET-Q16-HDRI-arm64
159
Magick.NET-Q8-OpenMP-arm64
159
com.liferay.portal:release.portal.bom
159
Magick.NET-Q8-arm64
159
n8n
156
Magick.NET-Q8-OpenMP-x64
156
Magick.NET-Q16-x64
155
Magick.NET-Q8-x64
153
apache-airflow
146
wwbn/avideo
144
pimcore/pimcore
136
typo3/cms-core
128
craftcms/cms
127
Django
127
dolibarr/dolibarr
126
com.liferay.portal:release.dxp.bom
125
concrete5/concrete5
121
parse-server
116
flowise
114
thorsten/phpmyfaq
112
drupal/core
111
code.gitea.io/gitea
109
github.com/siyuan-note/siyuan/kernel
107
phpmyadmin/phpmyadmin
107
microweber/microweber
106
librenms/librenms
106
symfony/symfony
100
getgrav/grav
99
org.keycloak:keycloak-services
98
Magick.NET-Q16-HDRI-OpenMP-x64
95
silverstripe/framework
93
com.fasterxml.jackson.core:jackson-databind
86
drupal/drupal
83
mlflow
82
snipe/snipe-it
81
vm2
78
org.apache.tomcat.embed:tomcat-embed-core
77
vllm
77
gogs.io/gogs
76
github.com/usememos/memos
75
mantisbt/mantisbt
74
shopware/platform
74
next
73
Plone
72
electron
71
Magick.NET-Q16-OpenMP-x86
68
salt
67
github.com/grafana/grafana
67
code.vikunja.io/api
67
apache-superset
66
ansible
65
shopware/core
65
actionpack
62
github.com/rancher/rancher
61
ghost
61
github.com/traefik/traefik/v3
60
froxlor/froxlor
60
org.apache.struts:struts2-core
60
github.com/traefik/traefik/v2
59
django
59
picklescan
59
directus
58
nokogiri
57
pyload-ng
57
mautic/core
57
pypdf
56
baserproject/basercms
56
aiohttp
55
axios
55
Pillow
55
github.com/hashicorp/vault
55
nocodb
54
surrealdb
54
hono
52
praisonai
52
PraisonAI
52
nltk
51
getkirby/cms
51
gradio
50
admidio/admidio
50
praisonaiagents
50
org.keycloak:keycloak-core
50
rack
50
perl
50
nova
49
pillow
49
phpmyfaq/phpmyfaq
47
vyper
47
github.com/mattermost/mattermost-server/v6
47
github.com/zitadel/zitadel
47
org.xwiki.platform:xwiki-platform-oldcore
46
undici
46
DBD-SQLite
45
matrix-synapse
45
statamic/cms
44
k8s.io/kubernetes
43
github.com/filebrowser/filebrowser/v2
43
rdiffweb
43
intelliants/subrion
42
@budibase/server
42
showdoc/showdoc
42
nilsteampassnet/teampass
42
langflow
42
org.elasticsearch:elasticsearch
41
plone
41
litellm
41
org.apache.tomcat:tomcat-catalina
41
wasmtime
40
contao/core-bundle
40
github.com/cilium/cilium
39
github.com/argoproj/argo-cd/v2
39
net.mingsoft:ms-mcms
39
keystone
39
io.undertow:undertow-core
39
MT
38
com.thoughtworks.xstream:xstream
37
org.jenkins-ci.plugins:script-security
37
DotNetNuke.Core
36
ci4-cms-erp/ci4ms
36
com.jfinal:jfinal
36
deno
36
Microsoft.AspNetCore.App.Runtime.win-x64
35
moin
35
github.com/docker/docker
35
apostrophe
35
github.com/0xJacky/Nginx-UI
35
github.com/hashicorp/nomad
34
github.com/argoproj/argo-cd
34
Microsoft.AspNetCore.App.Runtime.win-x86
34
zendframework/zendframework1
34
github.com/answerdev/answer
34
shopware/shopware
34
ash
33
GitPython
33
github.com/openbao/openbao
33
kimai/kimai
33
org.apache.tomcat:tomcat-coyote
33
Microsoft.AspNetCore.App.Runtime.linux-x64
32
pnpm
32
github.com/hashicorp/consul
32
opencv-python
31
prestashop/prestashop
31
phpoffice/phpspreadsheet
31
yeswiki/yeswiki
31
org.apache.solr:solr-core
31
org.opencms:opencms-core
31
Microsoft.AspNetCore.App.Runtime.osx-x64
31
Microsoft.AspNetCore.App.Runtime.linux-arm64
31
Microsoft.AspNetCore.App.Runtime.linux-arm
31
flowise-components
31
opencv-contrib-python
31
org.springframework.security:spring-security-core
31
Microsoft.AspNetCore.App.Runtime.linux-musl-x64
31
Microsoft.AspNetCore.App.Runtime.win-arm64
31
wagtail
30
payload
30
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
30
dompurify
30
github.com/fleetdm/fleet/v4
30
pocketmine/pocketmine-mp
30
mcp-atlassian
30
Microsoft.AspNetCore.App.Runtime.win-arm
29
github.com/traefik/traefik
29
@anthropic-ai/claude-code
29
org.eclipse.jetty:jetty-server
29
github.com/rclone/rclone
29
mediawiki/core
28
vite
28
github.com/coder/coder/v2
28
zebrad
27
centreon/centreon
27
github.com/openfga/openfga
27
org.springframework:spring-webmvc
27
github.com/nats-io/nats-server/v2
27
astro
27
Filter by Repository
https://github.com/tensorflow/tensorflow
433
https://github.com/moodle/moodle
250
https://github.com/xwiki/xwiki-platform
222
https://github.com/chakra-core/ChakraCore
214
https://github.com/jenkinsci/jenkins
178
https://github.com/liferay/liferay-portal
170
https://github.com/django/django
121
https://github.com/apache/tomcat
118
https://github.com/jquery/jquery
118
https://github.com/pimcore/pimcore
116
https://github.com/apache/airflow
105
https://github.com/TYPO3/typo3
93
https://github.com/keycloak/keycloak
90
https://github.com/microweber/microweber
90
https://github.com/librenms/librenms
77
https://github.com/FasterXML/jackson-databind
70
https://github.com/rails/rails
70
https://github.com/thorsten/phpmyfaq
69
https://github.com/usememos/memos
68
https://github.com/silverstripe/silverstripe-framework
68
https://github.com/kubernetes/kubernetes
66
https://github.com/symfony/symfony
64
https://github.com/Dolibarr/dolibarr
60
https://github.com/mattermost/mattermost
59
https://github.com/ansible/ansible
59
https://github.com/erlang/otp
59
https://github.com/python-pillow/Pillow
52
https://github.com/spring-projects/spring-framework
51
https://github.com/argoproj/argo-cd
50
https://github.com/grafana/grafana
47
https://github.com/apache/struts
47
https://github.com/mautic/mautic
46
https://github.com/rancher/rancher
46
https://github.com/phpmyadmin/phpmyadmin
45
https://github.com/concretecms/concretecms
44
https://github.com/vyperlang/vyper
44
https://github.com/saltstack/salt
42
https://github.com/shopware/platform
42
https://github.com/ikus060/rdiffweb
42
https://github.com/mantisbt/mantisbt
42
https://github.com/directus/directus
41
https://github.com/craftcms/cms
41
https://github.com/shopware/shopware
40
https://github.com/mmaitre314/picklescan
39
https://github.com/star7th/showdoc
39
https://github.com/dotnet/runtime
38
https://github.com/openstack/nova
38
https://github.com/gradio-app/gradio
38
https://github.com/magento/magento2
38
https://github.com/plone/Products.CMFPlone
37
https://github.com/x-stream/xstream
37
https://github.com/octobercms/october
36
https://github.com/mlflow/mlflow
36
https://github.com/umbraco/Umbraco-CMS
35
https://github.com/sparklemotion/nokogiri
35
https://github.com/apache/activemq
34
https://github.com/answerdev/answer
34
https://github.com/parse-community/parse-server
34
https://github.com/go-gitea/gitea
32
https://github.com/opencv/opencv
32
https://github.com/matrix-org/synapse
32
https://github.com/PaddlePaddle/Paddle
31
https://github.com/cilium/cilium
31
https://github.com/ash-project/ash
31
https://github.com/apache/inlong
31
https://github.com/contao/contao
30
https://github.com/snipe/snipe-it
30
https://github.com/rack/rack
29
https://github.com/openstack/keystone
28
https://github.com/Perl/perl5
28
https://github.com/strapi/strapi
28
https://github.com/CVEProject/cvelist
28
https://github.com/FlowiseAI/Flowise
28
https://github.com/gogs/gogs
28
https://github.com/electron/electron
28
https://github.com/netty/netty
27
https://github.com/froxlor/froxlor
26
https://github.com/apache/nifi
26
https://github.com/geoserver/geoserver
26
https://github.com/zitadel/zitadel
26
https://github.com/github/advisory-database
26
https://github.com/baserproject/basercms
26
https://github.com/bcgit/bc-java
25
https://github.com/denoland/deno
25
https://github.com/vercel/next.js
25
https://github.com/vllm-project/vllm
25
https://github.com/traefik/traefik
25
https://github.com/langchain-ai/langchain
25
https://github.com/pmmp/PocketMine-MP
25
https://github.com/surrealdb/surrealdb
25
https://github.com/apache/cxf
24
https://github.com/hashicorp/consul
24
https://github.com/getgrav/grav
24
https://github.com/pyload/pyload
24
https://github.com/run-llama/llama_index
24
https://github.com/firefly-iii/firefly-iii
23
https://github.com/dnnsoftware/Dnn.Platform
23
https://github.com/eclipse/jetty.project
23
https://github.com/bytecodealliance/wasmtime
23
https://github.com/moby/moby
23
https://github.com/nilsteampassnet/TeamPass
23
https://github.com/livehelperchat/livehelperchat
23
https://github.com/PrestaShop/PrestaShop
23
https://github.com/TYPO3/TYPO3.CMS
23
https://github.com/getkirby/kirby
22
https://github.com/nervosnetwork/ckb
22
https://github.com/helm/helm
22
https://github.com/jenkinsci/script-security-plugin
22
https://github.com/PHPOffice/PhpSpreadsheet
22
https://github.com/laravel/framework
21
https://github.com/goharbor/harbor
21
https://github.com/hashicorp/vault
21
https://github.com/undertow-io/undertow
21
https://github.com/OpenZeppelin/openzeppelin-contracts
21
https://github.com/funadmin/funadmin
20
https://github.com/OpenNMS/opennms
20
https://github.com/jeecgboot/jeecg-boot
20
https://github.com/opencast/opencast
20
https://github.com/ethyca/fides
20
https://github.com/simplesamlphp/simplesamlphp
19
https://github.com/team-alembic/ash_authentication
19
https://github.com/huggingface/transformers
19
https://github.com/containerd/containerd
19
https://github.com/intelliants/subrion
19
https://github.com/cloudfoundry/uaa
19
https://github.com/TYPO3-CMS/core
19
https://github.com/nilsteampassnet/teampass
19
https://github.com/alkacon/opencms-core
19
https://github.com/backstage/backstage
19
https://github.com/rubygems/rubygems
18
https://github.com/perl5-dbi/dbi
18
https://github.com/OpenMage/magento-lts
18
https://github.com/opencontainers/runc
18
https://github.com/apache/camel
18
https://github.com/vaadin/platform
18
https://github.com/liufee/cms
17
https://github.com/vantage6/vantage6
17
https://github.com/openfga/openfga
17
https://github.com/ethereum/go-ethereum
17
https://github.com/mindsdb/mindsdb
17
https://github.com/apache/kylin
17
https://github.com/forkcms/forkcms
16
https://github.com/vitejs/vite
16
https://github.com/yetiforcecompany/yetiforcecrm
16
https://github.com/etcd-io/etcd
16
https://github.com/rusqlite/rusqlite
16
https://github.com/sequelize/sequelize
16
https://github.com/dotnet/aspnetcore
16
https://github.com/pyca/cryptography
16
https://github.com/hashicorp/nomad
16
https://github.com/ImageMagick/ImageMagick
16
https://github.com/quarkusio/quarkus
16
https://github.com/mojolicious/mojo
16
https://github.com/twbs/bootstrap
16
https://github.com/tinymce/tinymce
16
https://github.com/MobSF/Mobile-Security-Framework-MobSF
15
https://github.com/sqlite/sqlite
15
https://github.com/OPCFoundation/UA-.NETStandard
15
https://github.com/nodejs/undici
15
https://github.com/PHPMailer/PHPMailer
15
https://github.com/puppetlabs/puppet
15
https://github.com/drupal/core
15
https://github.com/dompdf/dompdf
15
https://github.com/centreon/centreon
15
https://github.com/ckeditor/ckeditor4
15
https://github.com/aio-libs/aiohttp
15
https://github.com/thorsten/phpMyFAQ
15
https://github.com/cobbler/cobbler
15
https://github.com/xuxueli/xxl-job
15
https://github.com/containers/podman
15
https://github.com/zendframework/zendframework
15
https://github.com/spring-projects/spring-security
15
https://github.com/decidim/decidim
15
https://github.com/janeczku/calibre-web
14
https://github.com/cosmos/cosmos-sdk
14
https://github.com/publify/publify
14
https://github.com/dpgaspar/Flask-AppBuilder
14
https://github.com/golang/go
14
https://github.com/pimcore/admin-ui-classic-bundle
14
https://github.com/elixir-mint/mint
14
https://github.com/pgadmin-org/pgadmin4
14
https://github.com/cockpit-hq/cockpit
14
https://github.com/twisted/twisted
14
https://github.com/apache/zeppelin
14
https://github.com/Graylog2/graylog2-server
14
https://github.com/TryGhost/Ghost
14
https://github.com/apache/superset
14
https://github.com/rails/rails-html-sanitizer
14
https://github.com/urllib3/urllib3
14
https://github.com/ming-soft/MCMS
14
https://github.com/tonycoz/imager
13
https://github.com/OctoPrint/OctoPrint
13
https://github.com/OpenRefine/OpenRefine
13
https://github.com/apache/dolphinscheduler
13
https://github.com/zenml-io/zenml
13
https://github.com/modoboa/modoboa
13
https://github.com/ZenHive/mpp
13
https://github.com/laurent22/joplin
13
https://github.com/h2oai/h2o-3
13