Security Advisories in go
High
4 days ago
Vikunja: Permissive Cross-domain Security Policy trusts every localhost origin which should not be trusted
go
code.vikunja.io/api
Moderate
4 days ago
Vikunja: Write-level project members can delete admin-tier link shares through an unloaded permission check
go
code.vikunja.io/api
Moderate
4 days ago
Vikunja: Webhooks and link shares survive every revocation path, so a removed collaborator keeps a live feed
go
code.vikunja.io/api
Moderate
4 days ago
Vikunja: Saved filter creation with an empty filter string recalculates task positions across all tenants
go
code.vikunja.io/api
Moderate
4 days ago
Vikunja: WebSocket authentication ignores server-side session state, so revoked sessions keep receiving live pushes
go
code.vikunja.io/api
High
4 days ago
Nginx UI: Unauthenticated signed-request body staging can exhaust temporary storage
go
github.com/0xJacky/Nginx-UI
Moderate
4 days ago
Nginx UI: Bundled reverse proxy can bypass IP allowlists and enable shared login lockout
go
github.com/0xJacky/Nginx-UI
Low
4 days ago
Vikunja: Task relation deletion does not check read access to the other task, allowing cross-project relation removal
go
code.vikunja.io/api
Moderate
4 days ago
Vikunja: Assignee email addresses disclosed to read-only project members via the task assignees endpoint
go
code.vikunja.io/api
Moderate
4 days ago
Vikunja: Cross-project task disclosure through subtask expansion
go
code.vikunja.io/api
Moderate
4 days ago
Vikunja: CalDAV relation creation bypasses TaskRelation.CanCreate, allowing an unauthorized write into any task by known UID
go
code.vikunja.io/api
High
4 days ago
Vikunja: Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the API
go
code.vikunja.io/api
High
4 days ago
Vikunja: Unbounded CSV row cardinality permits API process termination
go
code.vikunja.io/api
High
4 days ago
Vikunja: Unbounded nested task-filter recursion permits API process termination
go
code.vikunja.io/api
High
4 days ago
Vikunja: Denial of service via decompression bomb in the data import
go
code.vikunja.io/api
Moderate
4 days ago
Vikunja: Link-share token can enumerate users through the v2 API
go
code.vikunja.io/api
Moderate
4 days ago
Vikunja: Any user can enumerate every team and its members by attaching arbitrary teams to a throwaway project
go
code.vikunja.io/api
High
4 days ago
Vikunja: Unbounded image decode on avatar and project-background uploads enables decode/resize amplification
go
code.vikunja.io/api
Moderate
4 days ago
Vikunja: CalDAV and feeds BasicAuth endpoints have no rate limit, bypassing the anti-brute-force floor on account passwords
go
code.vikunja.io/api
Moderate
4 days ago
Vikunja: API token scopes bypassed via task expand parameter (comments, reactions, time entry counts)
go
code.vikunja.io/api
Moderate
4 days ago
Vikunja: Cross-tenant task-position rows can be injected into arbitrary project views via the unvalidated project_view_id in the task position endpoint (v1 and v2)
go
code.vikunja.io/api
Moderate
4 days ago
Vikunja: TOTP secret is readable after enrollment, no step-up auth
go
code.vikunja.io/api
High
4 days ago
Vikunja: Every /api/v2 pre-auth endpoint is unthrottled on a stock install while its /api/v1 twin is rate limited
go
code.vikunja.io/api
High
4 days ago
Vikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read access
go
code.vikunja.io/api
High
4 days ago
Vikunja: OIDC email-fallback account linking ignores email_verified, enabling local-account takeover
go
code.vikunja.io/api
Critical
4 days ago
Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite
go
github.com/0xJacky/Nginx-UI
High
4 days ago
ageLANServer: Unbounded JSON Array Allocation in AoE3 Cloud `getFileURL` Endpoint Leads to Remote Denial of Service
go
github.com/luskaner/ageLANServer/server
High
4 days ago
Vikunja: Link-share principal-type confusion enables cross-account team removal, bot takeover, and roster disclosure
go
code.vikunja.io/api
High
4 days ago
yopass Prometheus metrics middleware allows remote memory exhaustion through unbounded method labels
go
github.com/jhaals/yopass
Critical
4 days ago
Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide (BOLA)
go
code.vikunja.io/api
High
4 days ago
Vikunja: Link-share principal ID collision allows cross-account API token issuance and management
go
code.vikunja.io/api
High
4 days ago
Vikunja: Scoped API token can mint unrestricted OAuth session credentials
go
code.vikunja.io/api
High
4 days ago
Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin digest → RCE via a compromised mirror or MITM
go
github.com/0xJacky/Nginx-UI
High
4 days ago
Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass)
go
github.com/0xJacky/Nginx-UI
High
4 days ago
Nginx-UI AuthRequired token cookie fallback enables CSRF against management APIs
go
github.com/0xJacky/Nginx-UI
High
4 days ago
Nginx UI: Incomplete fix of CVE-2026-84315 - the api/cluster router was not - wrapped in RequireSecureSession, so those sensitive mutations run without OTP step-up
go
github.com/0xJacky/Nginx-UI
High
4 days ago
0xJacky/nginx-ui /api/nodes Leaks Cluster Node Tokens and Allows Cross-Node Impersonation as initUser
go
github.com/0xJacky/Nginx-UI
High
4 days ago
Nginx UI: Node Secret Credential Exposure via URL Query Parameter
go
github.com/0xJacky/Nginx-UI
High
4 days ago
Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration path before restore flags are applied
go
github.com/0xJacky/Nginx-UI
High
4 days ago
Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL
go
github.com/argoproj/argo-cd/v3, github.com/argoproj/argo-cd/v2
Moderate
5 days ago
amqp091-go: Pre-negotiation frame limit is not enforced to 4KB
go
github.com/rabbitmq/amqp091-go
High
5 days ago
Excelize: Unchecked pivot-cache field index in extractPivotTableFields causes unrecoverable panic
go
github.com/xuri/excelize/v2
Moderate
5 days ago
Coraza: Resource exhaustion via deferred file handle accumulation in multipart body processor
go
github.com/corazawaf/coraza/v3
Moderate
5 days ago
Coraza: URL-encoded form Content-Type parameters bypass Coraza body inspection
go
github.com/corazawaf/coraza/v3
Moderate
5 days ago
Coraza: Unbounded recursion in JSON response body processor causes CPU exhaustion
go
github.com/corazawaf/coraza/v3
Moderate
5 days ago
Coraza: Multipart filename* (RFC 5987) charset restriction lets a decoy filename bypass FILES-based rules
go
github.com/corazawaf/coraza/v3
Moderate
5 days ago
Coraza: ProcessURI silently drops QUERY_STRING and ARGS_GET on URI parse failure — defense-in-depth bypass for non-net/http integrations
go
github.com/corazawaf/coraza/v3
Moderate
5 days ago
Coraza: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypass
go
github.com/corazawaf/coraza/v3
High
5 days ago
Coraza JSON body processor: argument-limit truncation reopens an unbounded-depth gjson.Valid stack overflow (process crash)
go
github.com/corazawaf/coraza/v3
Moderate
5 days ago
Coraza body processor has a JSON key collision that allows unauthenticated attackers to bypass OWASP CRS inspection
go
github.com/corazawaf/coraza/v3
High
5 days ago
Excelize: Unbounded row number in Rows.Columns makes GetRows and the Rows iterator loop for days
go
github.com/xuri/excelize/v2
High
5 days ago
Excelize: Nil-pointer dereference in GetSlicers when a worksheet has extLst present but no drawing element
go
github.com/xuri/excelize/v2
High
5 days ago
Excelize Decrypt: unrecoverable panics on malformed OLE/CFB encrypted workbooks
go
github.com/xuri/excelize/v2
High
5 days ago
Excelize: extractPart allocates attacker-controlled, unbounded and negative-sized buffers from CFB directory entries: remote panic / OOM DoS
go
github.com/xuri/excelize/v2
High
5 days ago
Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow
go
github.com/xuri/excelize/v2
Moderate
5 days ago
github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files
go
github.com/moby/sys/user
High
6 days ago
Excelize ColumnNameToNumber: int64 overflow yields an out-of-domain coordinate with nil error, causing negative slice index panic on r="0" rows
go
github.com/xuri/excelize, github.com/xuri/excelize/v2
Moderate
6 days ago
Excelize: RIGHT() on supplementary-plane text slices with a negative index and panics
go
github.com/xuri/excelize/v2
High
6 days ago
Excelize: Unbounded spinCount in agile decryption burns CPU during OpenFile
go
github.com/xuri/excelize/v2
Moderate
6 days ago
Excelize: Panic in cellInRange on a worksheet with an empty mergeCell ref
go
github.com/xuri/excelize/v2
Moderate
6 days ago
Excelize: a row whose earlier cell has a higher column reference than its last cell panics index out of range on almost every worksheet read API
go
github.com/xuri/excelize/v2
Moderate
6 days ago
Excelize: GetConditionalFormats indexes conditional-formatting rule sub-elements with no length or nil check
go
github.com/xuri/excelize/v2
High
6 days ago
Excelize: Unbounded <col max> attribute is loaded with no MaxColumns check and expanded per-column by flatCols(), so any column mutator hangs or OOMs the process
go
github.com/xuri/excelize/v2
Moderate
6 days ago
Excelize: A Zip64 uncompressed-size of 2^63 panics OpenFile/OpenReader
go
github.com/xuri/excelize/v2
Moderate
6 days ago
Excelize: GetStyle panics on a negative fillId, borderId or fontId in styles.xml
go
github.com/xuri/excelize/v2
High
6 days ago
Homer: Authenticated SQL Injection via Unvalidated rawquery Field in /api/v4/statistics/query
go
github.com/sipcapture/homer-app
Critical
6 days ago
Homer: Hardcoded Default Admin Password 'sipcapture' With No Forced Change on First Login
go
github.com/sipcapture/homer-app
Critical
6 days ago
Homer: Complete Authentication Bypass When coordinator.jwt.secret Is Empty (Default)
go
github.com/sipcapture/homer-app
High
7 days ago
Coraza: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding
go
github.com/corazawaf/coraza/v3
Moderate
7 days ago
Coraza: Truncated multipart body bypasses MULTIPART_STRICT_ERROR (rule 200003) via silent io.ErrUnexpectedEOF handling
go
github.com/corazawaf/coraza/v3
Moderate
7 days ago
Coraza: Native audit-log format allows CRLF injection and log forgery via request body and header fields
go
github.com/corazawaf/coraza/v3
High
7 days ago
External Secrets Operator: label enforcement bypass in webhook generator enables secret exfiltration
go
github.com/external-secrets/external-secrets
Moderate
8 days ago
Snowflake drivers writes sensitive information to logs
go, maven, pypi, npm
github.com/snowflakedb/gosnowflake/v2, net.snowflake:snowflake-jdbc-fips, net.snowflake:snowflake-jdbc-thin, net.snowflake:snowflake-jdbc, github.com/snowflakedb/gosnowflake, snowflake-connector-python, snowflake-sdk
Moderate
8 days ago
SiYuan: TLS Private Keys Readable via getFile (Incomplete Blocklist)
go
github.com/siyuan-note/siyuan/kernel
Moderate
8 days ago
SiYuan: /history/*path and /repo/diff/*path potentially exposing historical snapshots of data/.siyuan/publishAccess.json and data/templates/*
go
github.com/siyuan-note/siyuan/kernel
Critical
11 days ago
gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabled
go
gitea.com/gitea/runner
High
11 days ago
SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU (Bypass of CheckHostSSRF)
go
github.com/siyuan-note/siyuan/kernel
Moderate
11 days ago
SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass)
go
github.com/siyuan-note/siyuan/kernel
High
11 days ago
SiYuan: 17 block metadata/content endpoints in kernel/api/block.go have zero publish-access filtering, reachable by anonymous publish-mode readers
go
github.com/siyuan-note/siyuan/kernel
Low
11 days ago
SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint (`/ws/network/proxy`) via explicit `CheckOrigin: true` bypass
go
github.com/siyuan-note/siyuan/kernel
High
11 days ago
Xray-core: Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks
go
github.com/xtls/xray-core
Moderate
11 days ago
Anubis: Policy bypass via client controlled X-Original-URI header
go
github.com/TecharoHQ/anubis
Moderate
12 days ago
SiYuan: The reference filter for getRefIDs checks visibility but not the password tier, disclosing that password-protected documents reference a given block
go
github.com/siyuan-note/siyuan/kernel
High
12 days ago
SiYuan: getAttributeViewSearchTarget returns database row content to anonymous readers with no publish-access check, reopening the class closed one day earlier at the adjacent route
go
github.com/siyuan-note/siyuan/kernel
Moderate
12 days ago
SiYuan: getBookmarkLabels returns every bookmark label in the workspace to anonymous readers, with no publish-access filtering
go
github.com/siyuan-note/siyuan/kernel
Moderate
12 days ago
SiYuan: getUniqueFilename passes an unvalidated client-supplied path to the filesystem, giving anonymous readers an existence oracle over the entire host filesystem
go
github.com/siyuan-note/siyuan/kernel
Moderate
12 days ago
SiYuan: Outline state for any document, including documents forbidden to readers, is returned by /api/storage/getOutlineStorage with no access check
go
github.com/siyuan-note/siyuan/kernel
Moderate
13 days ago
SiYuan discloses an administrator's open documents and search terms to anonymous readers
go
github.com/siyuan-note/siyuan/kernel
Critical
13 days ago
SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword (publish mode): cross-notebook read/write with statement stacking
go
github.com/siyuan-note/siyuan/kernel
Moderate
14 days ago
OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full
go
go.opentelemetry.io/otel/sdk/log
Moderate
14 days ago
OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation
go
go.opentelemetry.io/otel/sdk
Moderate
18 days ago
Containerd has image-pull DoS via crafted OCI index graph amplification
go
github.com/containerd/containerd/v2, github.com/containerd/containerd
High
19 days ago
Podman: Malformed Image can trick podman run into leaking host environment variables into the container
go
github.com/containers/podman, github.com/containers/podman/v2, github.com/containers/podman/v3, github.com/containers/podman/v4, go.podman.io/podman/v6, github.com/containers/podman/v5
Moderate
19 days ago
Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces
go
github.com/cilium/cilium, github.com/cilium/ciliumCilium
Critical
19 days ago
ixo Blockchain x/bonds DID-resolved payer drain + x/entity ICA authorization bypass
go
github.com/ixofoundation/ixo-blockchain, github.com/ixofoundation/ixo-blockchain/v3, github.com/ixofoundation/ixo-blockchain/v4, github.com/ixofoundation/ixo-blockchain/v5, github.com/ixofoundation/ixo-blockchain/v6, github.com/ixofoundation/ixo-blockchain/v7, github.com/ixofoundation/ixo-blockchain/v8
High
19 days ago
ZITADEL: Actions V1 sandbox escape: host file read via require()
go
github.com/zitadel/zitadel
Filter by Severity
Filter by Package
github.com/mattermost/mattermost/server/v8
207
github.com/mattermost/mattermost-server
192
code.gitea.io/gitea
109
github.com/siyuan-note/siyuan/kernel
107
gogs.io/gogs
76
github.com/usememos/memos
75
code.vikunja.io/api
67
github.com/grafana/grafana
67
github.com/rancher/rancher
61
github.com/traefik/traefik/v3
60
github.com/traefik/traefik/v2
59
github.com/hashicorp/vault
55
github.com/zitadel/zitadel
47
github.com/mattermost/mattermost-server/v6
47
k8s.io/kubernetes
43
github.com/filebrowser/filebrowser/v2
43
github.com/cilium/cilium
39
github.com/argoproj/argo-cd/v2
38
github.com/docker/docker
35
github.com/hashicorp/nomad
34
github.com/argoproj/argo-cd
34
github.com/answerdev/answer
34
github.com/openbao/openbao
33
github.com/hashicorp/consul
32
github.com/fleetdm/fleet/v4
30
github.com/rclone/rclone
29
github.com/traefik/traefik
29
github.com/coder/coder/v2
28
github.com/nats-io/nats-server/v2
27
github.com/openfga/openfga
27
golang.org/x/crypto
26
github.com/0xJacky/Nginx-UI
26
github.com/ethereum/go-ethereum
26
github.com/goharbor/harbor
23
github.com/kyverno/kyverno
22
helm.sh/helm/v3
22
github.com/containerd/containerd
22
golang.org/x/net
21
github.com/gotenberg/gotenberg/v8
20
github.com/casdoor/casdoor
20
github.com/go-gitea/gitea
20
github.com/OliveTin/OliveTin
19
github.com/juju/juju
19
github.com/xuri/excelize/v2
18
github.com/coredns/coredns
18
github.com/klever-io/klever-go
18
github.com/fission/fission
18
github.com/opencontainers/runc
17
k8s.io/ingress-nginx
17
github.com/mattermost/mattermost-server/v5
17
kubevirt.io/kubevirt
17
github.com/pterodactyl/wings
17
github.com/1Panel-dev/1Panel
17
github.com/caddyserver/caddy/v2
16
github.com/moby/moby
16
github.com/ollama/ollama
16
github.com/nezhahq/nezha
16
github.com/authzed/spicedb
16
github.com/cloudreve/Cloudreve/v4
16
github.com/argoproj/argo-workflows/v3
16
github.com/apache/incubator-answer
16
github.com/axllent/mailpit
15
github.com/patrickhener/goshs
15
d7y.io/dragonfly/v2
15
github.com/minio/minio
15
github.com/zitadel/zitadel/v2
15
github.com/containers/podman/v4
14
github.com/QuantumNous/new-api
14
github.com/canonical/lxd
14
github.com/go-git/go-git/v5
14
github.com/ellanetworks/core
14
github.com/corazawaf/coraza/v3
14
github.com/mattermost/mattermost-plugin-confluence
14
github.com/filebrowser/filebrowser
13
github.com/cosmos/cosmos-sdk
13
github.com/nats-io/nats-server
13
github.com/containerd/containerd/v2
13
github.com/cri-o/cri-o
13
go.etcd.io/etcd/v3
13
github.com/lin-snow/ech0
13
gitea.dev
12
github.com/juev/nebula-mesh
12
github.com/gofiber/fiber/v2
12
github.com/gravitl/netmaker
12
github.com/cometbft/cometbft
12
github.com/pomerium/pomerium
12
github.com/kubeedge/kubeedge
12
github.com/portainer/portainer
11
go.opentelemetry.io/obi
11
github.com/gohugoio/hugo
11
github.com/dragonflyoss/dragonfly
11
github.com/cloudflare/cfrpki
11
github.com/bishopfox/sliver
11
github.com/rabbitmq/amqp091-go
11
github.com/envoyproxy/envoy
11
github.com/projectcapsule/capsule
11
github.com/navidrome/navidrome
11
github.com/treeverse/lakefs
11
github.com/patrickhener/goshs/v2
11
github.com/sylabs/singularity
10
github.com/containers/podman/v5
10
github.com/charmbracelet/soft-serve
10
istio.io/istio
10
github.com/forceu/gokapi
10
github.com/osrg/gobgp/v4
10
github.com/argoproj/argo-cd/v3
10
github.com/Tencent/WeKnora
10
github.com/cloudreve/Cloudreve/v3
10
github.com/greenpau/caddy-security
10
github.com/mattermost/mattermost
10
github.com/lxc/incus/v6/cmd/incusd
10
github.com/lxc/incus/v7/cmd/incusd
10
github.com/hashicorp/go-getter
10
github.com/projectdiscovery/nuclei/v3
10
github.com/envoyproxy/gateway
10
github.com/beego/beego/v2
10
github.com/omec-project/amf
9
github.com/zalando/skipper
9
github.com/oauth2-proxy/oauth2-proxy/v7
9
github.com/lf-edge/ekuiper/v2
9
github.com/xyproto/algernon
9
github.com/opentofu/opentofu
9
chainguard.dev/melange
9
github.com/enchant97/note-mark/backend
9
github.com/edgelesssys/contrast
9
github.com/containers/buildah
9
github.com/lxc/incus/v6
9
github.com/moby/buildkit
9
github.com/free5gc/udr
9
github.com/drakkan/sftpgo/v2
9
github.com/argoproj/argo-workflows/v4
9
chainguard.dev/apko
9
github.com/esm-dev/esm.sh
9
github.com/kubernetes/kubernetes
9
github.com/beego/beego
9
github.com/tektoncd/pipeline
8
github.com/consensys/gnark
8
github.com/forgekeep/nebula-mesh
8
github.com/containers/podman/v3
8
github.com/stacklok/minder
8
github.com/gophish/gophish
8
goshs.de/goshs/v2
8
github.com/neuvector/neuvector
8
go.etcd.io/etcd
8
github.com/quic-go/quic-go
8
github.com/sigstore/cosign
8
github.com/getarcaneapp/arcane/backend
8
github.com/free5gc/udm
7
github.com/dgraph-io/dgraph/v25
7
www.velocidex.com/golang/velociraptor
7
github.com/free5gc/nef
7
github.com/pion/dtls
7
github.com/go-git/go-git/v6
7
github.com/rancher/fleet
7
github.com/hyperledger/fabric
7
helm.sh/helm
7
github.com/lf-edge/eve
7
github.com/google/fscrypt
7
github.com/alist-org/alist/v3
7
github.com/russellhaering/gosaml2
7
oras.land/oras-go/v2
7
github.com/authelia/authelia/v4
7
github.com/tinfoil-factory/netfoil
7
github.com/gofiber/fiber/v3
7
vitess.io/vitess
7
google.golang.org/grpc
7
github.com/seaweedfs/seaweedfs
7
github.com/caddyserver/caddy
6
go.temporal.io/server
6
github.com/pion/dtls/v2
6
github.com/CosmWasm/wasmvm
6
github.com/prometheus/prometheus
6
goauthentik.io
6
github.com/amir20/dozzle
6
miniflux.app/v2
6
github.com/cubefs/cubefs
6
github.com/containers/podman
6
github.com/projectcalico/calico
6
github.com/pinchtab/pinchtab
6
github.com/open-policy-agent/opa
6
github.com/ory/oathkeeper
6
github.com/free5gc/free5gc
6
github.com/elastic/beats/v7
6
github.com/external-secrets/external-secrets
6
github.com/dgraph-io/dgraph
6
github.com/cli/cli/v2
6
github.com/apache/trafficcontrol
6
github.com/lf-edge/ekuiper
6
golang.org/x/image
6
github.com/siderolabs/omni
6
github.com/git-lfs/git-lfs
6
github.com/foxcpp/maddy
6
github.com/fluxcd/flux2
6
github.com/mattermost/mattermost-plugin-playbooks
6
github.com/russellhaering/goxmldsig
6
github.com/gtsteffaniak/filebrowser/backend
6
github.com/googleapis/mcp-toolbox
6
cosmwasm-vm
5
github.com/gtsteffaniak/filebrowser
5
github.com/gin-gonic/gin
5
Filter by Repository
https://github.com/usememos/memos
68
https://github.com/kubernetes/kubernetes
65
https://github.com/mattermost/mattermost
59
https://github.com/argoproj/argo-cd
50
https://github.com/grafana/grafana
46
https://github.com/rancher/rancher
46
https://github.com/answerdev/answer
34
https://github.com/go-gitea/gitea
32
https://github.com/cilium/cilium
31
https://github.com/gogs/gogs
28
https://github.com/zitadel/zitadel
26
https://github.com/traefik/traefik
25
https://github.com/hashicorp/consul
24
https://github.com/moby/moby
23
https://github.com/helm/helm
22
https://github.com/goharbor/harbor
21
https://github.com/hashicorp/vault
21
https://github.com/containerd/containerd
19
https://github.com/openfga/openfga
17
https://github.com/ethereum/go-ethereum
17
https://github.com/etcd-io/etcd
16
https://github.com/hashicorp/nomad
16
https://github.com/opencontainers/runc
15
https://github.com/cosmos/cosmos-sdk
14
https://github.com/containers/podman
14
https://github.com/golang/go
14
https://github.com/1Panel-dev/1Panel
13
https://github.com/openbao/openbao
13
https://github.com/nats-io/nats-server
12
https://github.com/dragonflyoss/dragonfly
11
https://github.com/cometbft/cometbft
11
https://github.com/cloudflare/cfrpki
11
https://github.com/cri-o/cri-o
11
https://github.com/pomerium/pomerium
11
https://github.com/filebrowser/filebrowser
11
https://github.com/beego/beego
11
https://github.com/kubevirt/kubevirt
11
https://github.com/greenpau/caddy-security
10
https://github.com/kyverno/kyverno
10
https://github.com/authzed/spicedb
10
https://github.com/canonical/lxd
10
https://github.com/hashicorp/go-getter
9
https://github.com/casdoor/casdoor
9
https://github.com/juju/juju
9
https://github.com/argoproj/argo-workflows
9
https://github.com/treeverse/lakeFS
9
https://github.com/Consensys/gnark
8
https://github.com/docker/docker
8
https://github.com/istio/istio
8
https://github.com/stacklok/minder
8
https://github.com/pterodactyl/wings
8
https://github.com/navidrome/navidrome
8
https://github.com/gofiber/fiber
8
https://github.com/kubeedge/kubeedge
8
https://github.com/containers/buildah
8
https://github.com/minio/minio
8
https://github.com/google/fscrypt
7
https://github.com/hpcng/singularity
7
https://github.com/hyperledger/fabric
7
https://github.com/ollama/ollama
7
https://github.com/neuvector/neuvector
7
https://github.com/evmos/evmos
7
https://github.com/kubernetes/ingress-nginx
7
https://github.com/quic-go/quic-go
6
https://github.com/cubefs/cubefs
6
https://github.com/coredns/coredns
6
https://github.com/moby/buildkit
6
https://github.com/drakkan/sftpgo
6
https://github.com/oauth2-proxy/oauth2-proxy
6
https://github.com/schollz/croc
6
https://github.com/open-policy-agent/opa
6
https://github.com/git-lfs/git-lfs
6
https://github.com/pion/dtls
6
https://github.com/fluxcd/flux2
6
https://github.com/sigstore/cosign
6
https://github.com/gravitl/netmaker
6
https://github.com/lf-edge/ekuiper
6
https://github.com/charmbracelet/soft-serve
6
https://github.com/crewjam/saml
5
https://github.com/IBAX-io/go-ibax
5
https://github.com/siyuan-note/siyuan
5
https://github.com/free5gc/free5gc
5
https://github.com/gophish/gophish
5
https://github.com/CosmWasm/wasmd
5
https://github.com/cli/cli
5
https://github.com/0xJacky/nginx-ui
5
https://github.com/tendermint/tendermint
5
https://github.com/cheqd/cheqd-node
5
https://github.com/edgelesssys/contrast
5
https://github.com/osrg/gobgp
5
https://github.com/foxcpp/maddy
5
https://github.com/ipfs/go-ipfs
5
https://github.com/CosmWasm/wasmvm
5
https://github.com/t2bot/matrix-media-repo
5
https://github.com/babylonlabs-io/babylon
4
https://github.com/lestrrat-go/jwx
4
https://github.com/meshery/meshery
4
https://github.com/russellhaering/gosaml2
4
https://github.com/golang/crypto
4
https://github.com/go-vela/server
4
https://github.com/projectdiscovery/nuclei
4
https://github.com/arduino/arduino-create-agent
4
https://github.com/notaryproject/notation-go
4
https://github.com/tidwall/gjson
4
https://github.com/woodpecker-ci/woodpecker
4
https://github.com/ory/fosite
4
https://github.com/cosmos/ibc-go
4
https://github.com/concourse/concourse
4
https://github.com/IceWhaleTech/CasaOS-UserService
4
https://github.com/containous/traefik
4
https://github.com/edgelesssys/constellation
4
https://github.com/dexidp/dex
4
https://github.com/dhowden/tag
4
https://github.com/siderolabs/talos
4
https://github.com/snapcore/snapd
4
https://github.com/apache/trafficcontrol
4
https://github.com/alist-org/alist
4
https://github.com/owncast/owncast
4
https://github.com/envoyproxy/envoy
4
https://github.com/vitessio/vitess
4
https://github.com/authelia/authelia
4
https://github.com/coder/coder
4
https://github.com/gin-gonic/gin
4
https://github.com/grafana/bugbounty
4
https://github.com/chaos-mesh/chaos-mesh
4
https://github.com/crossplane/crossplane
4
https://github.com/BishopFox/sliver
4
https://github.com/go-git/go-git
4
https://github.com/nats-io/jwt
3
https://github.com/ory/oathkeeper
3
https://github.com/Consensys/gnark-crypto
3
https://github.com/AlexxIT/go2rtc
3
https://github.com/mholt/archiver
3
https://github.com/fleetdm/fleet
3
https://github.com/flipped-aurora/gin-vue-admin
3
https://github.com/kcp-dev/kcp
3
https://github.com/mudler/localai
3
https://github.com/ctfer-io/chall-manager
3
https://github.com/temporalio/temporal
3
https://github.com/kubernetes-sigs/secrets-store-csi-driver
3
https://github.com/NVIDIA/gpu-operator
3
https://github.com/IoFinnet/tss-lib
3
https://github.com/pingcap/tidb
3
https://github.com/goauthentik/authentik
3
https://github.com/karmada-io/karmada
3
https://github.com/tiagorlampert/CHAOS
3
https://github.com/plentico/plenti
3
https://github.com/moby/libnetwork
3
https://github.com/argoproj/argo-events
3
https://github.com/lightningnetwork/lnd
3
https://github.com/caddyserver/caddy
3
https://github.com/imgproxy/imgproxy
3
https://github.com/clidey/whodb
3
https://github.com/project-zot/zot
3
https://github.com/open-telemetry/opentelemetry-go-contrib
3
https://github.com/siderolabs/omni
3
https://github.com/metal3-io/baremetal-operator
3
https://github.com/weaveworks/weave-gitops
3
https://github.com/apache/incubator-answer
3
https://github.com/go-yaml/yaml
3
https://github.com/ElrondNetwork/elrond-go
3
https://github.com/cloudflare/circl
3
https://github.com/syncthing/syncthing
3
https://github.com/gogits/gogs
3
https://github.com/runatlantis/atlantis
3
https://github.com/tailscale/tailscale
3
https://github.com/gohugoio/hugo
3
https://github.com/go-jose/go-jose
3
https://github.com/artifacthub/hub
3
https://github.com/distribution/distribution
3
https://github.com/phachon/mm-wiki
3
https://github.com/ubuntu/authd
3
https://github.com/cortexproject/cortex
3
https://github.com/mattermost/mattermost-plugin-playbooks
3
https://github.com/square/go-jose
3
https://github.com/sylabs/singularity
3
https://github.com/KubeOperator/KubePi
3
https://github.com/SpectoLabs/hoverfly
3
https://github.com/kiali/kiali
3
https://github.com/dutchcoders/transfer.sh
3
https://github.com/aws/aws-sdk-go
3
https://github.com/theupdateframework/go-tuf
3
https://github.com/flyteorg/flyteadmin
3
https://github.com/edgelesssys/marblerun
3
https://github.com/openshift/origin
3
https://github.com/ipfs/boxo
3
https://github.com/libp2p/go-libp2p
3
https://github.com/miniflux/v2
3
https://github.com/u-root/u-root
3
https://github.com/mattermost/mattermost-plugin-boards
3
https://github.com/heketi/heketi
3
https://github.com/spiffe/spire
2
https://github.com/go-viper/mapstructure
2
https://github.com/gomarkdown/markdown
2
https://github.com/swaggo/http-swagger
2
https://github.com/grpc/grpc-go
2
https://github.com/influxdata/influxdb
2
https://github.com/labring/sealos
2
https://github.com/kitabisa/teler
2