Browse Security Advisories
Security Advisories
Moderate
34 minutes ago
Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)
pypi
docling-slim, docling
Critical
35 minutes ago
shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` token
npm
shell-quote
Moderate
35 minutes ago
pbkdf2 rehashes long passwords on every iteration, enabling denial of service
npm
pbkdf2
Moderate
36 minutes ago
Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, Glean, Docling)
pypi
lfx-docling, lfx, langflow-base, langflow
Critical
37 minutes ago
Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation
pypi
langflow
Medium
about 6 hours ago
Cloak PBKDF2 field ignores the configured iteration count and runs only :size rounds
hex
cloak_ecto, cloak
High
about 6 hours ago
Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flipping
hex
cloak
Moderate
about 14 hours ago
Docling: `enable_local_fetch` is not enforced in HTML browser-rendering mode
pypi
docling-slim, docling
Low
about 14 hours ago
vLLM: Harmony tool continuations drop `cache_salt` — restoring a cross-tenant prefix-cache membership oracle
pypi
vllm
Critical
about 14 hours ago
simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection
npm
@simple-git/argv-parser
Critical
about 14 hours ago
simple-git unsafe-operation guard does not block trailer command configuration
npm
simple-git
High
about 14 hours ago
simple-git allows command execution through unblocked Git configuration includes
npm
simple-git
High
about 14 hours ago
simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)
npm
simple-git
High
about 14 hours ago
PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding
pypi
pymongo
High
about 14 hours ago
PyMongo: PYTHON-5986 Host injection in PyMongo connection string parsing via percent-encoded delimiters
pypi
pymongo
Moderate
about 14 hours ago
PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption
pypi
pymongo
High
about 15 hours ago
Socket.IO: Prototype Pollution via Unsafe Client Session Lookup
npm
@socket.io/cluster-engine
Moderate
about 15 hours ago
Filament: Multi-factor authentication (app) management actions do not require password reauthentication
packagist
filament/filament
Moderate
about 15 hours ago
PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion
pypi
PyJWT
Low
about 15 hours ago
DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes
npm
dompurify
Moderate
about 15 hours ago
vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach
pypi
vllm
Moderate
about 15 hours ago
vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion
pypi
vllm
Moderate
about 15 hours ago
vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features
pypi
vllm
Moderate
about 15 hours ago
vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)
pypi
vllm
Moderate
about 15 hours ago
vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of service
pypi
vllm
Moderate
about 15 hours ago
Mako: Path traversal via drive-letter URI on Windows in TemplateLookup
pypi
Mako
Moderate
about 15 hours ago
smol-toml: Quadratic-time parse() from parseKey rescanning to end of document on each key line
npm
smol-toml
Moderate
about 15 hours ago
Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction
pypi
multidict
Critical
about 15 hours ago
Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of GHSA-mv8w-475r-vwqw)
npm
seroval
High
about 15 hours ago
Seroval: Memory exhaustion via unchecked TypedArray length in JSON deserialization
npm
seroval
Critical
about 15 hours ago
proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet
npm
proxy-addr
Moderate
about 15 hours ago
Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries
cargo
rustls
High
about 15 hours ago
@nx/docker: OS command injection in the @nx/docker release pipeline
npm
@nx/docker
High
about 15 hours ago
Nx daemon and plugin worker sockets are accessible to other local users
npm
nx
High
about 15 hours ago
compression vulnerable to Denial of Service via memory leak on premature response close
npm
compression
Moderate
about 15 hours ago
OpenClaw: Channel read actions could skip target allowlists
npm
@openclaw/googlechat, @openclaw/matrix, @openclaw/feishu, @openclaw/msteams
Moderate
about 15 hours ago
pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods
pypi
pymongo
Moderate
about 15 hours ago
MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs
packagist
mongodb/mongodb
High
about 15 hours ago
vm2: Host Promise rejection from an exposed constructor can terminate the vm2 host process
npm
vm2
Moderate
about 15 hours ago
vm2: NodeVM zlib Buffers expose pooled host memory across the VM boundary
npm
vm2
High
about 15 hours ago
GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor
npm
@graphql-tools/executor-legacy-ws
High
about 15 hours ago
GraphQL Tools has prototype pollution in well-established utility function `mergeDeep`
npm
@graphql-tools/utils
Moderate
about 15 hours ago
Snowflake drivers writes sensitive information to logs
go, maven, pypi, npm
github.com/snowflakedb/gosnowflake/v2, net.snowflake:snowflake-jdbc-fips, net.snowflake:snowflake-jdbc-thin, net.snowflake:snowflake-jdbc, github.com/snowflakedb/gosnowflake, snowflake-connector-python, snowflake-sdk
Moderate
about 15 hours ago
hickory-resolver follows irrelevant CNAME records
cargo
hickory-resolver
High
about 15 hours ago
hickory-resolver: Unbounded TC-retry loop in `NameServerPool::try_send` (resource-exhaustion DoS)
cargo
hickory-resolver
High
about 15 hours ago
hickory-resolver: Resolver::lookup() and Resolver::lookup_ip() APIs obscure DNSSEC validation failures
cargo
hickory-resolver
Moderate
about 15 hours ago
PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion
npm
postcss-selector-parser
Moderate
about 15 hours ago
Angular SSR: Path Traversal to Sibling Directories in CommonEngine on Windows
npm
@angular/ssr
High
about 15 hours ago
fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution
pypi
fsspec
Critical
about 15 hours ago
Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path
npm, maven, swift
@capacitor/ios, @capacitor/android, com.capacitorjs:core, github.com/ionic-team/capacitor-swift-pm
Moderate
about 15 hours ago
Multiple @opentelemetry/instrumentation-* packages expose database username via unconditional db.user span attribute
npm
@opentelemetry/instrumentation-pg, @opentelemetry/instrumentation-mysql2, @opentelemetry/instrumentation-knex, @opentelemetry/instrumentation-mysql, @opentelemetry/instrumentation-mongoose, @opentelemetry/instrumentation-oracledb, @opentelemetry/instrumentation-tedious, @opentelemetry/instrumentation-cassandra-driver
Moderate
about 15 hours ago
fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values
npm
fast-copy
High
about 15 hours ago
@vue/server-renderer: XSS via missing CR in attribute-name blacklist
npm
@vue/server-renderer
Critical
about 15 hours ago
Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution
npm
tinypool
Critical
about 15 hours ago
Tinypool: Prototype Pollution Gadget to RCE in run() options
npm
tinypool
High
about 15 hours ago
Quart leaks raw request body (incl. plaintext passwords) to stdout via stray debug print in Body.__await__
pypi
quart
High
about 15 hours ago
LangGraph SDK custom auth silently ignores actions= on resource decorators
pypi
langgraph-sdk
Moderate
about 15 hours ago
stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunk
npm
stream-json
Moderate
about 15 hours ago
stream-json has a prototype pollution issue: Assembler writes this.current[this.key] on plain objects
npm
stream-json
High
about 15 hours ago
vm2: `allowAsync: false` can be bypassed through Promise thenable assimilation in VM and NodeVM
npm
vm2
Critical
about 16 hours ago
vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host process
npm
vm2
Critical
about 16 hours ago
vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix
npm
vm2
Critical
about 16 hours ago
vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit
npm
vm2
Moderate
about 16 hours ago
vm2: util.getCallSites() bypasses GHSA-v27g-jcqj-v8rw host-frame redaction, leaks host call stack
npm
vm2
High
about 16 hours ago
ProseMirror has a XSS vulnerability in prosemirror-view's paste handling
npm
prosemirror-view
Moderate
about 16 hours ago
vm2 leaks absolute host filesystem paths to sandbox code via error stack formatting
npm
vm2
High
about 16 hours ago
vm2: timeout Option Bypass via FinalizationRegistry Cleanup Callback (Unbounded Host Event-Loop Block)
npm
vm2
Critical
about 16 hours ago
vm2: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE
npm
vm2
Critical
about 16 hours ago
vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool
npm
vm2
Critical
about 16 hours ago
vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass
npm
vm2
Moderate
about 16 hours ago
Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backend
pypi
docling
Moderate
about 16 hours ago
@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name
npm
@fastify/busboy
Critical
about 16 hours ago
Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass
pypi
langflow
High
about 16 hours ago
Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description
pypi
langflow
High
about 16 hours ago
Langflow: Prompt injection in Langflow Smart Transform can lead to code execution
pypi
langflow
High
about 19 hours ago
Filtering an :atom attribute with unsafe_to_atom? can exhaust the BEAM atom table in Ash
hex
ash
Moderate
about 21 hours ago
SiYuan: TLS Private Keys Readable via getFile (Incomplete Blocklist)
go
github.com/siyuan-note/siyuan/kernel
Moderate
about 21 hours ago
SiYuan: /history/*path and /repo/diff/*path potentially exposing historical snapshots of data/.siyuan/publishAccess.json and data/templates/*
go
github.com/siyuan-note/siyuan/kernel
Critical
4 days ago
gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled
go
gitea.com/gitea/runner
High
4 days ago
probe-image-size: Quadratic-time Denial of Service in the SVG Parser
npm
probe-image-size
High
4 days ago
SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU (Bypass of CheckHostSSRF)
go
github.com/siyuan-note/siyuan/kernel
Moderate
4 days ago
SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass)
go
github.com/siyuan-note/siyuan/kernel
High
4 days ago
@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header
npm
@fastify/busboy
High
4 days ago
@fastify/busboy vulnerable to Denial of Service via oversized multipart boundary
npm
@fastify/busboy
Moderate
4 days ago
sqlite3-ruby: Use-After-Free in SQLite Aggregate Arguments in Heap-Allocated Argument Array
rubygems
sqlite3
Filter by Severity
Filter by Source
CPAN Security Advisory Database
1,151
Erlang Ecosystem Foundation
320
GitHub Advisory Database
36,413
Filter by Ecosystem
maven
8,284
npm
7,838
pypi
7,210
packagist
7,017
go
5,494
nuget
4,557
cargo
1,690
cpan
1,150
rubygems
1,106
hex
373
actions
58
swift
54
pub
11
Filter by Package
openclaw
591
moodle/moodle
437
tensorflow
433
tensorflow-cpu
408
tensorflow-gpu
399
magento/community-edition
361
org.jenkins-ci.main:jenkins-core
259
Microsoft.ChakraCore
247
github.com/mattermost/mattermost/server/v8
205
github.com/mattermost/mattermost-server
188
Magick.NET-Q16-AnyCPU
163
Magick.NET-Q16-HDRI-AnyCPU
163
typo3/cms
161
open-webui
160
org.apache.tomcat:tomcat
160
n8n
156
Magick.NET-Q16-HDRI-x86
156
Magick.NET-Q16-HDRI-OpenMP-arm64
155
Magick.NET-Q16-HDRI-x64
154
Magick.NET-Q16-OpenMP-arm64
153
Magick.NET-Q16-OpenMP-x64
152
com.liferay.portal:release.portal.bom
151
Magick.NET-Q16-x86
150
Magick.NET-Q8-AnyCPU
149
Magick.NET-Q16-HDRI-arm64
148
Magick.NET-Q16-arm64
147
apache-airflow
145
wwbn/avideo
144
Magick.NET-Q16-x64
143
Magick.NET-Q8-OpenMP-arm64
143
Magick.NET-Q8-OpenMP-x64
140
Magick.NET-Q8-arm64
139
Magick.NET-Q8-x86
138
pimcore/pimcore
136
Magick.NET-Q8-x64
131
craftcms/cms
127
dolibarr/dolibarr
126
com.liferay.portal:release.dxp.bom
124
typo3/cms-core
121
concrete5/concrete5
121
magento/project-community-edition
118
parse-server
116
thorsten/phpmyfaq
112
flowise
112
code.gitea.io/gitea
109
Django
108
drupal/core
107
phpmyadmin/phpmyadmin
107
github.com/siyuan-note/siyuan/kernel
107
microweber/microweber
106
librenms/librenms
106
getgrav/grav
99
org.keycloak:keycloak-services
97
silverstripe/framework
91
symfony/symfony
91
Magick.NET-Q16-HDRI-OpenMP-x64
89
com.fasterxml.jackson.core:jackson-databind
85
mlflow
82
snipe/snipe-it
81
vm2
77
vllm
77
github.com/usememos/memos
75
gogs.io/gogs
75
mantisbt/mantisbt
74
shopware/platform
74
electron
69
drupal/drupal
68
github.com/grafana/grafana
67
salt
67
next
67
apache-superset
66
shopware/core
65
ansible
65
Magick.NET-Q16-OpenMP-x86
62
github.com/rancher/rancher
61
froxlor/froxlor
60
org.apache.struts:struts2-core
59
picklescan
59
actionpack
59
directus
58
django
57
org.apache.tomcat.embed:tomcat-embed-core
57
mautic/core
57
github.com/traefik/traefik/v3
57
baserproject/basercms
56
nokogiri
56
github.com/traefik/traefik/v2
55
github.com/hashicorp/vault
55
axios
55
nocodb
54
surrealdb
54
Plone
54
hono
51
getkirby/cms
51
pypdf
51
nltk
51
gradio
50
admidio/admidio
50
rack
50
org.keycloak:keycloak-core
50
PraisonAI
50
perl
49
nova
49
pyload-ng
48
github.com/zitadel/zitadel
47
phpmyfaq/phpmyfaq
47
aiohttp
47
org.xwiki.platform:xwiki-platform-oldcore
46
undici
46
DBD-SQLite
45
matrix-synapse
45
statamic/cms
44
vyper
44
rdiffweb
43
k8s.io/kubernetes
42
showdoc/showdoc
42
intelliants/subrion
42
pillow
42
@budibase/server
42
nilsteampassnet/teampass
42
plone
41
praisonaiagents
41
ghost
41
github.com/filebrowser/filebrowser/v2
41
org.elasticsearch:elasticsearch
41
litellm
41
keystone
39
praisonai
39
io.undertow:undertow-core
39
wasmtime
39
net.mingsoft:ms-mcms
39
github.com/cilium/cilium
39
code.vikunja.io/api
38
github.com/mattermost/mattermost-server/v6
38
MT
37
com.thoughtworks.xstream:xstream
37
github.com/argoproj/argo-cd/v2
37
ci4-cms-erp/ci4ms
36
DotNetNuke.Core
36
com.jfinal:jfinal
36
langflow
36
deno
36
org.jenkins-ci.plugins:script-security
36
moin
35
org.apache.tomcat:tomcat-catalina
35
github.com/answerdev/answer
34
github.com/hashicorp/nomad
34
contao/core-bundle
34
kimai/kimai
33
github.com/docker/docker
33
shopware/shopware
33
Pillow
33
GitPython
33
zendframework/zendframework1
32
github.com/hashicorp/consul
32
pnpm
32
ash
32
opencv-python
31
prestashop/prestashop
31
opencv-contrib-python
31
phpoffice/phpspreadsheet
31
org.opencms:opencms-core
31
github.com/argoproj/argo-cd
31
yeswiki/yeswiki
31
github.com/fleetdm/fleet/v4
30
github.com/openbao/openbao
30
dompurify
30
mcp-atlassian
30
org.apache.solr:solr-core
30
org.springframework.security:spring-security-core
30
pocketmine/pocketmine-mp
30
wagtail
30
org.eclipse.jetty:jetty-server
29
github.com/rclone/rclone
29
github.com/traefik/traefik
28
mediawiki/core
28
flowise-components
28
github.com/coder/coder/v2
28
@anthropic-ai/claude-code
28
astro
27
github.com/openfga/openfga
27
zebrad
27
centreon/centreon
27
github.com/nats-io/nats-server/v2
27
openmage/magento-lts
26
github.com/ethereum/go-ethereum
26
org.keycloak:keycloak-parent
26
funadmin/funadmin
26
facturascripts/facturascripts
26
cockpit-hq/cockpit
26
grumpydictator/firefly-iii
26
pgadmin4
26
laravel/framework
26
typo3/cms-backend
25
golang.org/x/crypto
25
openssl-src
25
rubygems-update
25
org.apache.openmeetings:openmeetings-parent
25
org.springframework:spring-webmvc
25
cryptography
24
Filter by Repository
https://github.com/tensorflow/tensorflow
433
https://github.com/moodle/moodle
250
https://github.com/xwiki/xwiki-platform
222
https://github.com/chakra-core/ChakraCore
214
https://github.com/jenkinsci/jenkins
178
https://github.com/liferay/liferay-portal
170
https://github.com/django/django
121
https://github.com/jquery/jquery
118
https://github.com/apache/tomcat
118
https://github.com/pimcore/pimcore
116
https://github.com/apache/airflow
105
https://github.com/TYPO3/typo3
93
https://github.com/keycloak/keycloak
90
https://github.com/microweber/microweber
90
https://github.com/librenms/librenms
77
https://github.com/FasterXML/jackson-databind
70
https://github.com/rails/rails
70
https://github.com/thorsten/phpmyfaq
69
https://github.com/usememos/memos
68
https://github.com/silverstripe/silverstripe-framework
68
https://github.com/kubernetes/kubernetes
66
https://github.com/symfony/symfony
64
https://github.com/Dolibarr/dolibarr
60
https://github.com/mattermost/mattermost
59
https://github.com/ansible/ansible
59
https://github.com/erlang/otp
56
https://github.com/python-pillow/Pillow
52
https://github.com/spring-projects/spring-framework
51
https://github.com/argoproj/argo-cd
50
https://github.com/grafana/grafana
47
https://github.com/apache/struts
47
https://github.com/rancher/rancher
46
https://github.com/mautic/mautic
46
https://github.com/phpmyadmin/phpmyadmin
45
https://github.com/vyperlang/vyper
44
https://github.com/concretecms/concretecms
44
https://github.com/ikus060/rdiffweb
42
https://github.com/mantisbt/mantisbt
42
https://github.com/saltstack/salt
42
https://github.com/shopware/platform
42
https://github.com/craftcms/cms
41
https://github.com/directus/directus
41
https://github.com/shopware/shopware
40
https://github.com/mmaitre314/picklescan
39
https://github.com/star7th/showdoc
39
https://github.com/openstack/nova
38
https://github.com/magento/magento2
38
https://github.com/dotnet/runtime
38
https://github.com/gradio-app/gradio
38
https://github.com/x-stream/xstream
37
https://github.com/plone/Products.CMFPlone
37
https://github.com/mlflow/mlflow
36
https://github.com/octobercms/october
36
https://github.com/umbraco/Umbraco-CMS
35
https://github.com/sparklemotion/nokogiri
35
https://github.com/apache/activemq
34
https://github.com/answerdev/answer
34
https://github.com/parse-community/parse-server
34
https://github.com/opencv/opencv
32
https://github.com/go-gitea/gitea
32
https://github.com/matrix-org/synapse
32
https://github.com/cilium/cilium
31
https://github.com/PaddlePaddle/Paddle
31
https://github.com/apache/inlong
31
https://github.com/snipe/snipe-it
30
https://github.com/contao/contao
30
https://github.com/ash-project/ash
30
https://github.com/rack/rack
29
https://github.com/electron/electron
28
https://github.com/strapi/strapi
28
https://github.com/openstack/keystone
28
https://github.com/CVEProject/cvelist
28
https://github.com/gogs/gogs
28
https://github.com/FlowiseAI/Flowise
28
https://github.com/Perl/perl5
28
https://github.com/netty/netty
27
https://github.com/github/advisory-database
26
https://github.com/apache/nifi
26
https://github.com/froxlor/froxlor
26
https://github.com/baserproject/basercms
26
https://github.com/zitadel/zitadel
26
https://github.com/geoserver/geoserver
26
https://github.com/vllm-project/vllm
25
https://github.com/bcgit/bc-java
25
https://github.com/traefik/traefik
25
https://github.com/surrealdb/surrealdb
25
https://github.com/denoland/deno
25
https://github.com/vercel/next.js
25
https://github.com/langchain-ai/langchain
25
https://github.com/pmmp/PocketMine-MP
25
https://github.com/hashicorp/consul
24
https://github.com/run-llama/llama_index
24
https://github.com/pyload/pyload
24
https://github.com/apache/cxf
24
https://github.com/getgrav/grav
24
https://github.com/firefly-iii/firefly-iii
23
https://github.com/PrestaShop/PrestaShop
23
https://github.com/moby/moby
23
https://github.com/dnnsoftware/Dnn.Platform
23
https://github.com/livehelperchat/livehelperchat
23
https://github.com/bytecodealliance/wasmtime
23
https://github.com/TYPO3/TYPO3.CMS
23
https://github.com/nilsteampassnet/TeamPass
23
https://github.com/eclipse/jetty.project
23
https://github.com/helm/helm
22
https://github.com/PHPOffice/PhpSpreadsheet
22
https://github.com/nervosnetwork/ckb
22
https://github.com/jenkinsci/script-security-plugin
22
https://github.com/getkirby/kirby
22
https://github.com/laravel/framework
21
https://github.com/undertow-io/undertow
21
https://github.com/OpenZeppelin/openzeppelin-contracts
21
https://github.com/hashicorp/vault
21
https://github.com/goharbor/harbor
21
https://github.com/funadmin/funadmin
20
https://github.com/jeecgboot/jeecg-boot
20
https://github.com/OpenNMS/opennms
20
https://github.com/ethyca/fides
20
https://github.com/opencast/opencast
20
https://github.com/TYPO3-CMS/core
19
https://github.com/cloudfoundry/uaa
19
https://github.com/alkacon/opencms-core
19
https://github.com/huggingface/transformers
19
https://github.com/team-alembic/ash_authentication
19
https://github.com/backstage/backstage
19
https://github.com/simplesamlphp/simplesamlphp
19
https://github.com/intelliants/subrion
19
https://github.com/containerd/containerd
19
https://github.com/nilsteampassnet/teampass
19
https://github.com/opencontainers/runc
18
https://github.com/rubygems/rubygems
18
https://github.com/perl5-dbi/dbi
18
https://github.com/vaadin/platform
18
https://github.com/apache/camel
18
https://github.com/OpenMage/magento-lts
18
https://github.com/vantage6/vantage6
17
https://github.com/mindsdb/mindsdb
17
https://github.com/openfga/openfga
17
https://github.com/apache/kylin
17
https://github.com/ethereum/go-ethereum
17
https://github.com/liufee/cms
17
https://github.com/vitejs/vite
16
https://github.com/rusqlite/rusqlite
16
https://github.com/pyca/cryptography
16
https://github.com/twbs/bootstrap
16
https://github.com/yetiforcecompany/yetiforcecrm
16
https://github.com/ImageMagick/ImageMagick
16
https://github.com/dotnet/aspnetcore
16
https://github.com/hashicorp/nomad
16
https://github.com/sequelize/sequelize
16
https://github.com/quarkusio/quarkus
16
https://github.com/etcd-io/etcd
16
https://github.com/tinymce/tinymce
16
https://github.com/mojolicious/mojo
16
https://github.com/forkcms/forkcms
16
https://github.com/puppetlabs/puppet
15
https://github.com/thorsten/phpMyFAQ
15
https://github.com/ckeditor/ckeditor4
15
https://github.com/containers/podman
15
https://github.com/aio-libs/aiohttp
15
https://github.com/centreon/centreon
15
https://github.com/PHPMailer/PHPMailer
15
https://github.com/spring-projects/spring-security
15
https://github.com/OPCFoundation/UA-.NETStandard
15
https://github.com/nodejs/undici
15
https://github.com/xuxueli/xxl-job
15
https://github.com/zendframework/zendframework
15
https://github.com/dompdf/dompdf
15
https://github.com/drupal/core
15
https://github.com/cobbler/cobbler
15
https://github.com/sqlite/sqlite
15
https://github.com/decidim/decidim
15
https://github.com/MobSF/Mobile-Security-Framework-MobSF
15
https://github.com/publify/publify
14
https://github.com/TryGhost/Ghost
14
https://github.com/dpgaspar/Flask-AppBuilder
14
https://github.com/ming-soft/MCMS
14
https://github.com/pimcore/admin-ui-classic-bundle
14
https://github.com/apache/superset
14
https://github.com/cockpit-hq/cockpit
14
https://github.com/rails/rails-html-sanitizer
14
https://github.com/apache/zeppelin
14
https://github.com/cosmos/cosmos-sdk
14
https://github.com/golang/go
14
https://github.com/Graylog2/graylog2-server
14
https://github.com/twisted/twisted
14
https://github.com/elixir-mint/mint
14
https://github.com/urllib3/urllib3
14
https://github.com/janeczku/calibre-web
14
https://github.com/pgadmin-org/pgadmin4
14
https://github.com/laurent22/joplin
13
https://github.com/OctoPrint/OctoPrint
13
https://github.com/swagger-api/swagger-ui
13
https://sourceforge.net/projects/sourceforge.net
13
https://github.com/tonycoz/imager
13
https://github.com/apache/dolphinscheduler
13
https://github.com/1Panel-dev/1Panel
13
https://github.com/dromara/hutool
13
https://github.com/h2oai/h2o-3
13