Browse Security Advisories
Moderate Security Advisories from github Clear Filters
Moderate
about 9 hours ago
linuxfabrik-lib: fetch() forwards credential headers across a cross-origin redirect
pypi
linuxfabrik-lib
Moderate
about 9 hours ago
MCP Ruby SDK: Unbounded session retention in StreamableHTTPTransport allows memory exhaustion via initialize flood
rubygems
mcp
Moderate
about 9 hours ago
MCP Ruby SDK: Unbounded line buffer in stdio transports leads to memory exhaustion (DoS)
rubygems
mcp
Moderate
about 9 hours ago
MCP Ruby SDK: Streamable HTTP transport lacks DNS-rebinding (Host/Origin) protection
rubygems
mcp
Moderate
about 9 hours ago
OliveTin OS Command Injection via Custom regex: Argument Type Bypassing Shell Safety Check
go
github.com/OliveTin/OliveTin
Moderate
about 10 hours ago
OliveTin: StartActionAndWait Endpoints Bypass `logs` Permission and Return Action Output
go
github.com/OliveTin/OliveTin
Moderate
1 day ago
OpenTelemetry Java Instrumentation: JDBC Auto-Instrumentation Logging Clear-Text Passwords
maven
io.opentelemetry.javaagent:opentelemetry-javaagent
Moderate
1 day ago
OpenTelemetry Javaagent RMI context propagation allows resource exhaustion
maven
io.opentelemetry.javaagent:opentelemetry-javaagent
Moderate
1 day ago
Easy!Appointments has unauthenticated customer PII disclosure on booking reschedule page
packagist
alextselegidis/easyappointments
Moderate
1 day ago
olm dependency deprecation: CVE-2022-39255 and CVE-2024-45193
pypi
matrix-commander
Moderate
1 day ago
Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive
pypi
penelope-shell-handler
Moderate
1 day ago
Req vulnerable to multipart form-data header injection via unescaped name/filename/content_type
hex
req
Moderate
1 day ago
veraPDF-validatio: Use of Default `DocumentBuilderFactory` leads to XXE When Processing Untrusted PDFs
maven
org.verapdf:validation-model-jakarta, org.verapdf:validation-model
Moderate
1 day ago
swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref`
npm
swagger-typescript-api
Moderate
2 days ago
goshs has ACL Bypass & Path Traversal
go
goshs.de/goshs, github.com/patrickhener/goshs, goshs.de/goshs/v2, github.com/patrickhener/goshs/v2
Moderate
2 days ago
Pagy I18n locale option is not validated before being used in a file path
rubygems
pagy
Moderate
2 days ago
skilo add follows symbolic links, allowing arbitrary local file disclosure from a malicious skill source
cargo
skilo
Moderate
2 days ago
goshs has a Path Traversal issue
go
github.com/patrickhener/goshs/v2, goshs.de/goshs/v2, github.com/patrickhener/goshs, goshs.de/goshs
Moderate
2 days ago
NocoBase: Sensitive Data Exposure via SQL Blacklist Bypass
npm
@nocobase/plugin-collection-sql
Moderate
2 days ago
Cosmos-Server has an authentication bypass via forward-auth header smuggling on Constellation tunnel
go
github.com/azukaar/cosmos-server
Moderate
2 days ago
Cosmos-Server's constellation public-devices endpoint accepts arbitrary bearer tokens
go
github.com/azukaar/cosmos-server
Moderate
2 days ago
Fission: HTTPTrigger admission omits RelativeURL / Prefix validation; kubectl apply bypasses CLI checks
go
github.com/fission/fission
Moderate
2 days ago
GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS
go
github.com/gopacket/gopacket
Moderate
2 days ago
GoPacket's Diameter AVP decoder: uint32 underflow on vendor header size leads to unbounded ~4 GiB allocation (unauthenticated remote DoS)
go
github.com/gopacket/gopacket
Moderate
2 days ago
nono-cli'scregistry pack verification can fail open when provenance metadata is absent
cargo
nono-cli
Moderate
2 days ago
@novu/application-generic: `validateUrlSsrf` permits CGNAT (100.64.0.0/10) destinations — affects Workflow HTTP request step + Webhook filter condition
npm
@novu/application-generic
Moderate
2 days ago
Pocket ID has a reauthentication bypass via one-time access token login — passkey step-up requirement defeated by JWT freshness check that accepts any login method
go
github.com/pocket-id/pocket-id/backend
Moderate
3 days ago
org.xwiki.contrib:discussions-server has Cross-Site Request Forgery (CSRF) issue that makes it possible to delete messages
maven
org.xwiki.contrib:discussions-server
Moderate
6 days ago
FrontMCP: Server-Side Request Forgery (SSRF) in the OpenAPI adapter spec-change poller
npm
@frontmcp/adapters
Moderate
6 days ago
kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schema
go
github.com/getkin/kin-openapi
Moderate
6 days ago
Oh My Posh: Terminal escape sequence injection via unsanitized prompt segment data
go
github.com/jandedobbeleer/oh-my-posh
Moderate
6 days ago
Shescape: Home-directory disclosure in assignment context on Unix with Dash
npm
shescape
Moderate
6 days ago
OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API
go
github.com/OpenListTeam/OpenList/v4
Moderate
6 days ago
OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search
go
github.com/OpenListTeam/OpenList/v4
Moderate
6 days ago
swift-nio-http2: Missing CR/LF/NUL validation in header values
swift
swift-nio-http2
Moderate
6 days ago
Cloudreve Admin.Read OAuth tokens can trigger server-side node test requests
go
github.com/cloudreve/Cloudreve/v3, github.com/cloudreve/Cloudreve/v4
Moderate
6 days ago
Hubuum client library (Rust): Configured custom transports may be bypassed, exposing credentials and network traffic
cargo
hubuum_client
Moderate
6 days ago
Hubuum client library (Rust): Authenticated requests may escape the configured base path through redirects
cargo
hubuum_client
Moderate
6 days ago
Kite Kubernetes proxy path traversal allows authenticated users to bypass RBAC and read cluster-wide resources
go
github.com/zxh326/kite
Moderate
6 days ago
Budibase: SSRF via bare fetch() in uploadUrl during AI table generation
npm
@budibase/server
Moderate
6 days ago
Budibase: Account Enumeration via Login Lockout Response Differential
npm
@budibase/server
Moderate
6 days ago
Budibase: OAuth2 Token Disclosure via Automation Test Results Broadcast to Other Builders
npm
@budibase/server
Moderate
6 days ago
Cloudreve WOPI view sessions can write files and WOPI access token secret is ignored
go
github.com/cloudreve/Cloudreve/v3, github.com/cloudreve/Cloudreve/v4
Moderate
6 days ago
Budibase: SSO OAuth2 Token Leakage via User Metadata Endpoints to Power-Role Users
npm
@budibase/server
Moderate
6 days ago
Budibase: Missing RBAC on GET /api/global/groups allows BASIC users to enumerate all tenant groups and role mappings
npm
@budibase/server
Moderate
6 days ago
OpenAM Reflected XSS in the OAuth2/OIDC `wap` consent page
maven
org.openidentityplatform.openam:openam-oauth2
Moderate
6 days ago
Open WebUI: Arena task endpoints can bypass underlying model access controls
pypi
open-webui
Moderate
6 days ago
Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete
pypi
open-webui
Moderate
6 days ago
Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matching
pypi
open-webui
Moderate
6 days ago
webtransport-go: Memory Exhaustion Attack due to Buffering of Unknown Capsules
go
github.com/quic-go/webtransport-go
Moderate
6 days ago
Cloudreve: Broken Access Control in file event stream: a single-file share recipient is subscribed to the owner's parent folder and receives activity events for unshared siblings
go
github.com/cloudreve/Cloudreve/v3, github.com/cloudreve/Cloudreve/v4
Moderate
6 days ago
Cloudreve: Denial of Service - Image decompression / pixel bomb in thumbnail & avatar decoding crashes the server
go
github.com/cloudreve/Cloudreve/v3, github.com/cloudreve/Cloudreve/v4
Moderate
6 days ago
Cloudreve: Information Exposure in `GET /api/v4/user/search`: `SearchActive` omits the active-status predicate, leaking inactive/banned account emails
go
github.com/cloudreve/Cloudreve/v3, github.com/cloudreve/Cloudreve/v4
Moderate
6 days ago
Cloudreve: Path Traversal in WOPI PUT_RELATIVE Allows Arbitrary File Creation in Owner Account
go
github.com/cloudreve/Cloudreve/v3, github.com/cloudreve/Cloudreve/v4
Moderate
6 days ago
Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials
pypi
open-webui
Moderate
6 days ago
Open WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users can add files to KB)
pypi
open-webui
Moderate
6 days ago
Open WebUI: POST /api/v1/images/edit bypasses the global image-edit switch and the per-user image-generation permission
pypi
open-webui
Moderate
6 days ago
Open WebUI: ReDoS in skill-mention regexes causes whole-instance DoS on default config
pypi
open-webui
Moderate
6 days ago
Open WebUI: Account enumeration via observable login timing discrepancy
pypi
open-webui
Moderate
6 days ago
Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names
maven
io.netty:netty-codec-dns
Moderate
6 days ago
cel-go: JSON Private Fields Exposed via NativeTypes and ParseStructTag
go
github.com/google/cel-go
Moderate
6 days ago
Russh: client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS)
cargo
russh
Moderate
6 days ago
Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records
cargo
russh
Moderate
6 days ago
Russh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode_mpint OOB)
cargo
russh
Moderate
6 days ago
@fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths
npm
@fastify/static
Moderate
6 days ago
Mongoose: Prototype pollution in mongoose update casting via __proto__-prefixed dotted path (Schema._getSchema/path getter)
npm
mongoose
Moderate
6 days ago
@backstage/plugin-auth-backend: Unauthenticated OAuth account takeover via `redirect_uri` allowlist bypass
npm
@backstage/plugin-auth-backend
Moderate
6 days ago
ImageMagick: Integer Overflow in JNX decoder causes heap buffer over-write when processing extremly large files on 32-bit builds
nuget
Magick.NET-Q8-x86, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
6 days ago
ImageMagick: Heap Buffer Over-Write in fx operation
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
6 days ago
ImageMagick: Heap Buffer Over-Write in morphology operation when an invalid kernel is provided
nuget
Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
6 days ago
PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path
pypi
pymdown-extensions
Moderate
6 days ago
Trix: Stored XSS via HTMLParser attribute injection on paste
rubygems, npm
action_text-trix, trix
Moderate
6 days ago
Microsoft Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)
nuget
Microsoft.OpenApi.Kiota
Moderate
6 days ago
Valibot: record() issue paths can make flatten() throw for inherited Object property names
npm
valibot
Moderate
6 days ago
LZ4 Java: Native XXHash implementations can crash the JVM when passed invalid byte array ranges
maven
org.lz4:lz4-java, at.yawk.lz4:lz4-java
Moderate
6 days ago
SvelteKit: Prototype pollution in file input deletion path in remote-function forms
npm
@sveltejs/kit
Moderate
6 days ago
SvelteKit: Big remote form function payloads can cause Node process to crash
npm
@sveltejs/kit
Moderate
6 days ago
ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
6 days ago
ImageMagick: Policy Bypass due to an incomplete fix of CVE-2026-49219
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
6 days ago
ImageMagick: Policy Bypass in concatenate operation due to missing checks
nuget
Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
6 days ago
ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
6 days ago
ImageMagick: Infinite Loop in connected-components when providing invalid arguments
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
6 days ago
ImageMagick: Stack Overflow in MVG decoder due to missing depth check.
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
6 days ago
ImageMagick: Use-After-Free in crafted 8BIM when identifying an image
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
7 days ago
c3p0 can, in combination with other libraries, compose to a "sink" for deserialization gadgets
maven
com.mchange:c3p0
Moderate
7 days ago
React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)
npm
react-router
Moderate
7 days ago
React Router: RSCErrorHandler Missing Protocol Validation (XSS)
npm
react-router
Moderate
7 days ago
React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration
npm
react-router
Moderate
7 days ago
ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged
nuget
Magick.NET-Q16-HDRI-arm64, Magick.NET-Q8-x86, Magick.NET-Q8-x64, Magick.NET-Q8-arm64, Magick.NET-Q8-OpenMP-x64, Magick.NET-Q8-OpenMP-arm64, Magick.NET-Q8-AnyCPU, Magick.NET-Q16-x86, Magick.NET-Q16-x64, Magick.NET-Q16-arm64, Magick.NET-Q16-OpenMP-x64, Magick.NET-Q16-OpenMP-arm64, Magick.NET-Q16-HDRI-x86, Magick.NET-Q16-HDRI-x64, Magick.NET-Q16-HDRI-OpenMP-arm64, Magick.NET-Q16-HDRI-AnyCPU, Magick.NET-Q16-AnyCPU
Moderate
7 days ago
pypdf: Possible long runtimes for repeated malformed cross-reference entries
pypi
pypdf
Moderate
7 days ago
Auth.js: OAuth state, nonce, and PKCE check cookies are not bound to the provider that created them
npm
next-auth, @auth/core
Filter by Severity
Filter by Source
Filter by Ecosystem
maven
3,697
packagist
3,673
pypi
2,706
npm
2,507
go
2,240
nuget
2,152
cargo
615
rubygems
495
hex
38
swift
22
actions
16
pub
3
Filter by Package
moodle/moodle
318
openclaw
300
tensorflow
200
magento/community-edition
193
tensorflow-cpu
189
tensorflow-gpu
184
org.jenkins-ci.main:jenkins-core
152
github.com/mattermost/mattermost/server/v8
129
github.com/mattermost/mattermost-server
115
com.liferay.portal:release.portal.bom
114
typo3/cms
111
org.apache.tomcat:tomcat
100
Magick.NET-Q16-HDRI-AnyCPU
97
Magick.NET-Q16-AnyCPU
97
Magick.NET-Q16-HDRI-OpenMP-arm64
92
pimcore/pimcore
91
Magick.NET-Q16-HDRI-x64
90
Magick.NET-Q16-HDRI-x86
90
Magick.NET-Q16-HDRI-arm64
88
Magick.NET-Q16-OpenMP-arm64
87
Magick.NET-Q16-OpenMP-x64
87
Magick.NET-Q16-arm64
86
Magick.NET-Q16-x86
85
Magick.NET-Q8-AnyCPU
85
com.liferay.portal:release.dxp.bom
82
Magick.NET-Q16-x64
81
typo3/cms-core
80
Magick.NET-Q8-x86
79
Magick.NET-Q8-OpenMP-arm64
78
Magick.NET-Q8-arm64
77
Magick.NET-Q8-OpenMP-x64
76
wwbn/avideo
73
microweber/microweber
72
Magick.NET-Q8-x64
72
apache-airflow
69
silverstripe/framework
67
concrete5/concrete5
65
thorsten/phpmyfaq
64
n8n
62
craftcms/cms
59
magento/project-community-edition
57
drupal/core
57
dolibarr/dolibarr
56
phpmyadmin/phpmyadmin
56
Magick.NET-Q16-HDRI-OpenMP-x64
54
open-webui
54
github.com/usememos/memos
54
librenms/librenms
53
org.keycloak:keycloak-services
51
mantisbt/mantisbt
49
apache-superset
47
symfony/symfony
44
Django
44
code.gitea.io/gitea
44
actionpack
42
nocodb
41
parse-server
40
Magick.NET-Q16-OpenMP-x86
40
snipe/snipe-it
39
drupal/drupal
37
github.com/grafana/grafana
36
org.elasticsearch:elasticsearch
35
showdoc/showdoc
35
shopware/platform
34
directus
34
hono
33
admidio/admidio
33
picklescan
33
surrealdb
32
org.keycloak:keycloak-core
32
pypdf
32
getgrav/grav
30
nova
30
github.com/mattermost/mattermost-server/v6
30
shopware/core
30
mautic/core
29
baserproject/basercms
29
plone
29
intelliants/subrion
28
next
28
vllm
28
getkirby/cms
28
moin
27
ansible
27
gogs.io/gogs
26
rack
26
froxlor/froxlor
24
k8s.io/kubernetes
24
aiohttp
24
Plone
23
github.com/cilium/cilium
23
phpmyfaq/phpmyfaq
23
axios
23
grumpydictator/firefly-iii
22
github.com/hashicorp/vault
22
flowise
21
wasmtime
21
github.com/openfga/openfga
21
code.vikunja.io/api
21
github.com/traefik/traefik/v2
21
matrix-synapse
21
gradio
21
DotNetNuke.Core
21
github.com/answerdev/answer
21
nilsteampassnet/teampass
21
mediawiki/core
20
kimai/kimai
20
django
20
pyload-ng
20
github.com/traefik/traefik/v3
20
org.apache.tomcat.embed:tomcat-embed-core
19
electron
19
statamic/cms
19
shopware/shopware
19
org.apache.struts:struts2-core
19
github.com/docker/docker
18
github.com/fleetdm/fleet/v4
18
contao/core-bundle
18
dompurify
18
remdex/livehelperchat
18
salt
17
prestashop/prestashop
17
org.opencms:opencms-core
17
github.com/argoproj/argo-cd/v2
17
keystone
17
github.com/hashicorp/consul
17
github.com/siyuan-note/siyuan/kernel
16
io.undertow:undertow-core
16
sylius/sylius
16
github.com/hashicorp/nomad
16
rdiffweb
16
typo3/cms-backend
16
nokogiri
16
zendframework/zendframework1
16
yetiforce/yetiforce-crm
15
io.netty:netty-codec-http
15
weblate
15
glance
15
vyper
15
org.apache.jspwiki:jspwiki-main
15
org.springframework.security:spring-security-core
15
org.xwiki.platform:xwiki-platform-oldcore
15
com.liferay.portal:com.liferay.portal.impl
15
pnpm
14
feehi/feehicms
14
tinymce
14
github.com/filebrowser/filebrowser/v2
14
github.com/goharbor/harbor
14
activesupport
14
wagtail
14
astro
14
feehi/cms
14
deno
14
puppet
14
Umbraco.Cms
13
com.thoughtworks.xstream:xstream
13
craftcms/commerce
13
transformers
13
github.com/zitadel/zitadel
13
helm.sh/helm/v3
13
org.springframework:spring-webmvc
13
ghost
13
mistune
13
tribalsystems/zenario
13
com.jfinal:jfinal
13
svelte
13
github.com/ethereum/go-ethereum
13
github.com/containerd/containerd
13
forkcms/forkcms
13
org.eclipse.jetty:jetty-server
13
vite
13
coreutils
13
wallabag/wallabag
12
roundup
12
phpoffice/phpspreadsheet
12
github.com/rancher/rancher
12
github.com/openbao/openbao
12
github.com/traefik/traefik
12
laravel/framework
12
ec-cube/ec-cube
12
facturascripts/facturascripts
12
lavalite/cms
12
undici
12
@openzeppelin/contracts
12
OctoPrint
12
simplesamlphp/simplesamlphp
12
mlflow
12
ckan
11
cakephp/cakephp
11
ckeditor4
11
kubevirt.io/kubevirt
11
github.com/argoproj/argo-cd
11
MessagePack
11
nicegui
11
TinyMCE
11
org.bouncycastle:bcprov-jdk14
11
horizon
11
github.com/coder/coder/v2
11
org.keycloak:keycloak-parent
11
renovate
11
Filter by Repository
https://github.com/tensorflow/tensorflow
200
https://github.com/moodle/moodle
192
https://github.com/liferay/liferay-portal
143
https://github.com/jenkinsci/jenkins
109
https://github.com/pimcore/pimcore
85
https://github.com/microweber/microweber
63
https://github.com/TYPO3/typo3
63
https://github.com/apache/tomcat
60
https://github.com/usememos/memos
50
https://github.com/django/django
50
https://github.com/xwiki/xwiki-platform
50
https://github.com/silverstripe/silverstripe-framework
50
https://github.com/rails/rails
46
https://github.com/thorsten/phpmyfaq
45
https://github.com/keycloak/keycloak
45
https://github.com/apache/airflow
44
https://github.com/librenms/librenms
42
https://github.com/kubernetes/kubernetes
40
https://github.com/mattermost/mattermost
36
https://github.com/mantisbt/mantisbt
35
https://github.com/star7th/showdoc
32
https://github.com/mmaitre314/picklescan
30
https://github.com/concretecms/concretecms
28
https://github.com/grafana/grafana
27
https://github.com/mautic/mautic
27
https://github.com/symfony/symfony
27
https://github.com/ansible/ansible
26
https://github.com/spring-projects/spring-framework
26
https://github.com/craftcms/cms
26
https://github.com/phpmyadmin/phpmyadmin
26
https://github.com/directus/directus
24
https://github.com/shopware/shopware
24
https://github.com/argoproj/argo-cd
24
https://github.com/umbraco/Umbraco-CMS
23
https://github.com/Dolibarr/dolibarr
22
https://github.com/answerdev/answer
21
https://github.com/plone/Products.CMFPlone
20
https://github.com/magento/magento2
20
https://github.com/snipe/snipe-it
20
https://github.com/apache/activemq
20
https://github.com/firefly-iii/firefly-iii
20
https://github.com/cilium/cilium
19
https://github.com/livehelperchat/livehelperchat
18
https://github.com/openstack/nova
18
https://github.com/contao/contao
18
https://github.com/apache/struts
17
https://github.com/matrix-org/synapse
16
https://github.com/gradio-app/gradio
16
https://github.com/shopware/platform
16
https://github.com/ikus060/rdiffweb
16
https://github.com/CVEProject/cvelist
15
https://github.com/vyperlang/vyper
15
https://github.com/netty/netty
15
https://github.com/apache/cxf
15
https://github.com/getkirby/kirby
15
https://github.com/tinymce/tinymce
14
https://github.com/saltstack/salt
14
https://github.com/geoserver/geoserver
14
https://github.com/moby/moby
14
https://github.com/TYPO3/TYPO3.CMS
14
https://github.com/froxlor/froxlor
14
https://github.com/yetiforcecompany/yetiforcecrm
14
https://github.com/OpenNMS/opennms
14
https://github.com/baserproject/basercms
14
https://github.com/x-stream/xstream
14
https://github.com/PaddlePaddle/Paddle
14
https://github.com/nilsteampassnet/TeamPass
13
https://github.com/rack/rack
13
https://github.com/PrestaShop/PrestaShop
13
https://github.com/bcgit/bc-java
13
https://github.com/apache/nifi
13
https://github.com/openfga/openfga
13
https://github.com/strapi/strapi
13
https://github.com/containerd/containerd
13
https://github.com/goharbor/harbor
13
https://github.com/octobercms/october
13
https://github.com/go-gitea/gitea
13
https://github.com/traefik/traefik
12
https://github.com/openstack/keystone
12
https://github.com/hashicorp/consul
12
https://github.com/helm/helm
12
https://github.com/OpenZeppelin/openzeppelin-contracts
12
https://github.com/TYPO3-CMS/core
12
https://github.com/huggingface/transformers
12
https://github.com/surrealdb/surrealdb
11
https://github.com/github/advisory-database
11
https://github.com/forkcms/forkcms
11
https://github.com/ethereum/go-ethereum
11
https://github.com/dnnsoftware/Dnn.Platform
11
https://github.com/electron/electron
11
https://github.com/apache/zeppelin
11
https://github.com/intelliants/subrion
11
https://github.com/laravel/framework
11
https://github.com/vitejs/vite
11
https://github.com/rancher/rancher
11
https://github.com/vaadin/platform
11
https://github.com/ckeditor/ckeditor4
11
https://github.com/greenpau/caddy-security
10
https://github.com/decidim/decidim
10
https://github.com/bytecodealliance/wasmtime
10
https://github.com/vercel/next.js
10
https://github.com/simplesamlphp/simplesamlphp
10
https://github.com/TryGhost/Ghost
10
https://github.com/liufee/cms
10
https://github.com/backstage/backstage
10
https://github.com/laurent22/joplin
10
https://github.com/wallabag/wallabag
10
https://github.com/vllm-project/vllm
10
https://github.com/PHPOffice/PhpSpreadsheet
10
https://github.com/aio-libs/aiohttp
10
https://github.com/alkacon/opencms-core
9
https://github.com/jquery/jquery
9
https://github.com/opencast/opencast
9
https://github.com/fatfreecrm/fat_free_crm
9
https://github.com/OctoPrint/OctoPrint
9
https://github.com/dotnet/runtime
9
https://github.com/sparklemotion/nokogiri
9
https://github.com/thorsten/phpMyFAQ
9
https://github.com/jenkinsci/git-plugin
9
https://github.com/publify/publify
9
https://github.com/pimcore/admin-ui-classic-bundle
9
https://github.com/urllib3/urllib3
9
https://github.com/dpgaspar/Flask-AppBuilder
9
https://github.com/puppetlabs/puppet
9
https://github.com/getgrav/grav
8
https://github.com/openbao/openbao
8
https://github.com/onionshare/onionshare
8
https://github.com/gogs/gogs
8
https://github.com/ckan/ckan
8
https://github.com/LavaLite/cms
8
https://github.com/hashicorp/nomad
8
https://github.com/opensearch-project/security
8
https://github.com/pyload/pyload
8
https://github.com/swagger-api/swagger-ui
8
https://github.com/FlowiseAI/Flowise
8
https://github.com/openstack/glance
8
https://github.com/sulu/sulu
8
https://github.com/apache/superset
8
https://github.com/kubeedge/kubeedge
8
https://github.com/nilsteampassnet/teampass
8
https://github.com/zendframework/zendframework
8
https://github.com/rubygems/rubygems
8
https://github.com/eclipse/jetty.project
8
https://github.com/dolibarr/dolibarr
8
https://github.com/pandao/editor.md
8
https://github.com/rails/rails-html-sanitizer
8
https://github.com/modoboa/modoboa
8
https://github.com/parse-community/parse-server
8
https://github.com/croogo/croogo
7
https://github.com/jupyter/notebook
7
https://github.com/kubevirt/kubevirt
7
https://github.com/twbs/bootstrap
7
https://github.com/vega/vega
7
https://github.com/louislam/uptime-kuma
7
https://github.com/vaadin/flow
7
https://github.com/Leantime/leantime
7
https://github.com/treeverse/lakeFS
7
https://github.com/opencontainers/runc
7
https://github.com/igniterealtime/Openfire
7
https://github.com/denoland/deno
7
https://github.com/janeczku/calibre-web
7
https://github.com/nocodb/nocodb
7
https://github.com/opencv/opencv
7
https://github.com/StarCitizenTools/mediawiki-skins-Citizen
7
https://github.com/chakra-core/ChakraCore
7
https://github.com/jenkinsci/blueocean-plugin
7
https://github.com/matrix-org/matrix-rust-sdk
7
https://github.com/scrapy/scrapy
7
https://github.com/n8n-io/n8n
7
https://github.com/modxcms/revolution
7
https://github.com/zitadel/zitadel
7
https://github.com/containers/podman
7
https://github.com/kevinpapst/kimai2
7
https://github.com/Sylius/Sylius
7
https://github.com/openstack/horizon
7
https://github.com/python-pillow/Pillow
7
https://github.com/jeecgboot/jeecg-boot
7
https://github.com/py-pdf/pypdf
7
https://github.com/bagisto/bagisto
7
https://github.com/undertow-io/undertow
7
https://github.com/google/fscrypt
7
https://github.com/MobSF/Mobile-Security-Framework-MobSF
7
https://github.com/dragonflyoss/dragonfly
7
https://github.com/hashicorp/vault
7
https://github.com/nahsra/antisamy
7
https://github.com/OPCFoundation/UA-.NETStandard
7
https://github.com/zenml-io/zenml
7
https://github.com/pmmp/PocketMine-MP
6
https://github.com/cui2shark/security
6
https://github.com/wagtail/wagtail
6
https://github.com/oroinc/orocommerce
6
https://github.com/withastro/astro
6
https://github.com/quarkusio/quarkus
6
https://github.com/jenkinsci/script-security-plugin
6
https://github.com/jenkinsci/config-file-provider-plugin
6
https://github.com/run-llama/llama_index
6
https://github.com/matrix-org/matrix-js-sdk
6
https://github.com/sfackler/rust-openssl
6
https://github.com/lxml/lxml
6