Security Advisories in go
Low
about 19 hours ago
File Browser: Trailing-slash directory deletion leaves public shares active for recreated paths
go
github.com/filebrowser/filebrowser/v2
Moderate
about 23 hours ago
OpenTelemetry-Go: Eager W3C baggage-property materialization causes bounded memory-allocation amplification
go
go.opentelemetry.io/otel/propagation, go.opentelemetry.io/otel/baggage
Moderate
about 23 hours ago
opentelemetry-go: AttributeValueLengthLimit is fully bypassed by attribute values composed of valid U+FFFD runes
go
go.opentelemetry.io/otel/trace, go.opentelemetry.io/otel/sdk/log, go.opentelemetry.io/otel/sdk
High
2 days ago
pgEdge Control Plane generates pg_hba.conf with trust authentication for local and loopback connections
go
github.com/pgEdge/control-plane
High
2 days ago
pgEdge RAG Server unbounded corpus read allows resource exhaustion from unauthenticated requests
go
github.com/pgEdge/pgedge-rag-server
Moderate
2 days ago
pgEdge RAG Server discloses part of the configured provider credential through API error messages
go
github.com/pgEdge/pgedge-rag-server
Moderate
2 days ago
pgEdge RAG Server shared keyword index leaked results between concurrent unauthenticated requests
go
github.com/pgEdge/pgedge-rag-server
Moderate
2 days ago
pgEdge Go LLM Library discloses provider API key fragments in error messages
go
github.com/pgEdge/pgedge-go-llm-lib
High
4 days ago
Cocos AI Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks
go
github.com/ultravioletrs/cocos
Moderate
4 days ago
Dagu MCP DAG specification read bypasses path containment and workspace isolation
go
github.com/dagu-org/dagu/v2
Moderate
4 days ago
gopacket: SCTP chunk sub-decoder out-of-bounds panics on crafted segments
go
github.com/gopacket/gopacket
Moderate
5 days ago
Kubeflow Pipelines: Reflected XSS in the frontend pod information and events error responses
go
github.com/kubeflow/pipelines
Moderate
5 days ago
Kubeflow Pipelines: SQL injection through unvalidated pagination tokens in Kubeflow Pipelines API server
go
github.com/kubeflow/pipelines
High
5 days ago
Kubeflow Pipelines: RBAC bypass on shared pipelines allows any authenticated user to delete or modify global pipelines
go
github.com/kubeflow/pipelines
Moderate
5 days ago
Kubeflow Pipelines — API server fetches a caller-supplied pipelineURL without host validation
go
github.com/kubeflow/pipelines
Moderate
5 days ago
Kubeflow Pipelines: Cross-tenant execution-cache poisoning / output substitution via a namespace-blind cache key in the cache webhook (multi-user)
go
github.com/kubeflow/pipelines
Moderate
5 days ago
croc: Overwrite-confirmation bypass via a crafted "croc-stdin-" filename on receive
go
github.com/schollz/croc, github.com/schollz/croc/v6, github.com/schollz/croc/v8, github.com/schollz/croc/v9, github.com/schollz/croc/v10, github.com/schollz/croc/v11
High
5 days ago
DDEV incomplete tar symlink traversal fix allows host file overwrite - Incomplete fix of CVE-2026-32885
go
github.com/ddev/ddev
Moderate
5 days ago
Velociraptor: Low-priv analyst reads arbitrary server files via ungated sql() VQL plugin
go
www.velocidex.com/golang/velociraptor
Critical
5 days ago
Kubeflow Pipelines API server lacks authorization for shared pipeline uploads
go
github.com/kubeflow/pipelines
Critical
5 days ago
Pocket ID: Email verification token remains valid after address change, enabling arbitrary verified-email spoofing
go
github.com/pocket-id/pocket-id/backend
High
5 days ago
esm.sh: web.NewHandler allows arbitrary file read via encoded dot-segment path traversal
go
github.com/esm-dev/esm.sh/web
High
5 days ago
Telepresence: Traffic Manager gRPC has no auth — any pod claims arbitrary namespace and intercepts services, receiving victim environment secrets
go
github.com/telepresenceio/telepresence
High
5 days ago
Telepresence: Tunnel endpoint accepts caller-supplied session ID with no ownership proof — active client sessions hijackable
go
github.com/telepresenceio/telepresence/v2
Moderate
5 days ago
ezBookkeeping: Source-IP allowlist (MCP & API token) is bypassable via a spoofed `X-Forwarded-For` header
go
github.com/mayswind/ezbookkeeping
Moderate
5 days ago
Remark42: Rate limit bypass via unconditional trust of X-Forwarded-For/X-Real-IP headers in direct-internet deployment
go
github.com/umputun/remark42, github.com/umputun/remark42/backend
High
5 days ago
Pocket ID: The client credentials grant allows any OIDC client to obtain tokens for arbitrary audiences
go
github.com/pocket-id/pocket-id/backend
High
5 days ago
traQ: Privilege escalation by OAuth prompt=none request
go
github.com/traPtitech/traQ
Critical
8 days ago
LXD has restricted project bypass leading to arbitrary command execution
go
github.com/canonical/lxd
High
8 days ago
LXD has project restriction bypass for custom volume copy across projects
go
github.com/canonical/lxd
High
8 days ago
LXD has project restriction bypass in instance copy across projects
go
github.com/canonical/lxd
Moderate
8 days ago
LXD has CreateCustomVolumeFromBackup nil-pointer dereference on volumes[0].snapshots[*].expires_at
go
github.com/canonical/lxd
Critical
8 days ago
LXD has arbitrary file write on client due to trusted image hash
go
github.com/canonical/lxd
Critical
8 days ago
LXD has argument injection in backup compression algorithm leading to AFW and ACE
go
github.com/canonical/lxd
Critical
8 days ago
LXD has arbitrary file read+write on host via rootfs/ symlink in malicious image
go
github.com/canonical/lxd
Critical
8 days ago
LXD has arbitrary file read+write on host via templates/ symlink in malicious image
go
github.com/canonical/lxd
Critical
8 days ago
LXD has arbitrary file write on host via `exec-output` symlink in crafted image
go
github.com/canonical/lxd
Moderate
8 days ago
LXD: SSRF via image import from URL allows internal network probing by authenticated users
go
github.com/canonical/lxd
Moderate
8 days ago
listmonk: SQL Injection in `/api/subscribers/export` bypasses table access control, leaking admin password hashes and SMTP credentials
go
github.com/knadh/listmonk
High
8 days ago
OSAC operator: Kubeconfig credential-plugin execution and SSRF in console proxy
go
github.com/osac-project/osac-operator
Critical
9 days ago
kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts
go
github.com/chainguard-dev/kaniko
High
9 days ago
lxd allows Cross-guest volume hijack via DevLXD device patch
go
github.com/canonical/lxd
Moderate
10 days ago
Arc: DuckDB I/O aliases bypass database RBAC after CVE-2026-47735
go
github.com/basekick-labs/arc
High
11 days ago
praktor: Path traversal in Telegram file uploads allows writing outside the agent workspace uploads/ directory (stored instruction injection)
go
github.com/mtzanidakis/praktor
Low
11 days ago
Arc has unauthenticated application log disclosure via `/api/v1/logs`
go
github.com/basekick-labs/arc
High
15 days ago
Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory
go
github.com/kubeflow/pipelines
High
15 days ago
Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs
go
github.com/kubeflow/pipelines
Moderate
15 days ago
Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads
go
github.com/gofiber/fiber/v2
Critical
15 days ago
imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution
go
github.com/imgproxy/imgproxy, github.com/imgproxy/imgproxy/v2, github.com/imgproxy/imgproxy/v3
High
15 days ago
imgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crash
go
github.com/imgproxy/imgproxy/v3
High
15 days ago
imgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size field
go
github.com/imgproxy/imgproxy/v3
Moderate
15 days ago
anacrolix torrent has unbounded recursion in the bencode decoder that causes stack-overflow crash and CPU-exhaustion DoS
go
github.com/anacrolix/torrent
Moderate
15 days ago
charmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated users
go
github.com/charmbracelet/soft-serve
Moderate
15 days ago
charmbracelet/soft-serve HTTP responses disclose the existence and names of private repositories
go
github.com/charmbracelet/soft-serve
High
16 days ago
cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials
go
github.com/cert-manager/cert-manager
High
16 days ago
Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware
go
github.com/daptin/daptin
Moderate
17 days ago
knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion
go
knative.dev/pkg
Moderate
17 days ago
Go JOSE: Panics in JSON parsing
go
github.com/go-jose/go-jose/v3, github.com/go-jose/go-jose/v4
Moderate
17 days ago
Go JOSE: Panic during CBC-HMAC processing
go
github.com/go-jose/go-jose/v3, github.com/go-jose/go-jose/v4
Moderate
17 days ago
Echo: HTTPS Redirect and HSTS Bypass via Unconditional Trust of Forwarded Scheme Headers
go
github.com/labstack/echo/v4, github.com/labstack/echo/v5
Moderate
17 days ago
Echo static file middleware route protection bypass via encoded dot-dot traversal
go
github.com/labstack/echo/v4, github.com/labstack/echo/v5
Moderate
17 days ago
Echo has a Static Middleware Double-Unescape Path Traversal
go
github.com/labstack/echo/v4, github.com/labstack/echo/v5
Moderate
17 days ago
Echo has Open Redirect via Control-Character Prefix Defeating sanitizeURI
go
github.com/labstack/echo/v4, github.com/labstack/echo/v5
Moderate
17 days ago
Echo has Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto
go
github.com/labstack/echo/v4, github.com/labstack/echo/v5
High
17 days ago
Echo's middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served path
go
github.com/labstack/echo/v4, github.com/labstack/echo/v5
Moderate
17 days ago
Echo vulnerable to Reflected Cross-Site Scripting (XSS) via unsanitized JSONP callback in Context.JSONP / Context.JSONPBlob
go
github.com/labstack/echo/v4, github.com/labstack/echo/v5
Moderate
17 days ago
Echo has Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configuration
go
github.com/labstack/echo/v4, github.com/labstack/echo/v5
Moderate
17 days ago
Echo has CSRF Protection Bypass via MethodOverride Rewriting POST to Safe Method
go
github.com/labstack/echo/v4, github.com/labstack/echo/v5
Moderate
17 days ago
Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-IP to Upstream by Default
go
github.com/labstack/echo/v4, github.com/labstack/echo/v5
Low
17 days ago
Caddy has an RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through
go
github.com/caddyserver/caddy/v2
Moderate
18 days ago
Neko: Authorization bypass in legacy WebRTC input handling
go
github.com/m1k1o/neko/server
High
18 days ago
Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan
go
github.com/runatlantis/atlantis
High
18 days ago
FileBrowser: Symlink following escapes user scope allowing arbitrary file read outside the served directory
go
github.com/gtsteffaniak/filebrowser/backend
High
18 days ago
Go JOSE: DoS when parsing JWKs that contain RSA keys
go
github.com/go-jose/go-jose/v3, github.com/go-jose/go-jose/v4
High
18 days ago
CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values
go
github.com/ctfer-io/terraform-provider-ctfd/v2, github.com/ctfer-io/terraform-provider-ctfd
Moderate
18 days ago
SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files
go
github.com/siyuan-note/siyuan/kernel
High
18 days ago
Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins
go
github.com/wailsapp/wails/v2
Moderate
22 days ago
chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For
go
github.com/go-chi/chi/v5
Moderate
22 days ago
Echo: X-Real-IP extractor trusts the header value instead of the sending peer
go
github.com/labstack/echo/v5
High
22 days ago
Echo: WebSocket proxy can retain connections and handlers after client disconnect
go
github.com/labstack/echo/v5, github.com/labstack/echo/v4
High
22 days ago
Echo: Decompress permits unbounded gzip expansion in v4
go
github.com/labstack/echo/v4
Critical
22 days ago
Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls
go
github.com/labstack/echo/v5, github.com/labstack/echo/v4
Moderate
22 days ago
Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests
go
github.com/labstack/echo/v5
High
22 days ago
Echo: BodyDump captures request and response bodies without size limits in v4
go
github.com/labstack/echo/v4
Moderate
22 days ago
SiYuan: Missing consistency check between packageName and repoURL/repoHash in bazaar package install allows overwriting an existing, trusted plugin
go
github.com/siyuan-note/siyuan/kernel
High
22 days ago
SiYuan: A parser differential between the WebSocket keepalive exemption and the session quarantine allows unauthenticated access to the broadcast event stream
go
github.com/siyuan-note/siyuan/kernel
Moderate
22 days ago
SiYuan: authFilePublishAccess distinguishes hidden and forbidden documents from public and nonexistent ones, and issues a publish-auth cookie for documents it reports as forbidden
go
github.com/siyuan-note/siyuan/kernel
Moderate
22 days ago
SiYuan: The publish filter for database backlinks consults the forbidden list instead of the visibility list, disclosing hidden-tier documents to anonymous readers
go
github.com/siyuan-note/siyuan/kernel
Moderate
22 days ago
SiYuan: The publish filter for local storage returns the administrator's entire storage map with only three keys sanitized
go
github.com/siyuan-note/siyuan/kernel
High
24 days ago
OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runs
go
github.com/openchoreo/openchoreo
High
24 days ago
Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalization
go
github.com/moov-io/signedxml
High
25 days ago
Compress/s2: Integer Overflow or Wraparound and Out-of-bounds Write in compress
go
github.com/klauspost/compress
Moderate
26 days ago
agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable
go
github.com/envoyproxy/ai-gateway
High
29 days ago
Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)
go
github.com/getarcaneapp/arcane/backend/v2
Moderate
29 days ago
Arcane: Environment access token bypasses the admin-required authorization gate on `/api/debug/pprof`
go
github.com/getarcaneapp/arcane/backend/v2
High
29 days ago
kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content
go
github.com/getkin/kin-openapi
Low
29 days ago
CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` plugin
go
github.com/coredns/coredns
Filter by Severity
Filter by Package
github.com/mattermost/mattermost/server/v8
207
github.com/mattermost/mattermost-server
192
github.com/siyuan-note/siyuan/kernel
113
code.gitea.io/gitea
109
gogs.io/gogs
76
github.com/usememos/memos
75
github.com/grafana/grafana
67
code.vikunja.io/api
67
github.com/rancher/rancher
61
github.com/traefik/traefik/v3
61
github.com/traefik/traefik/v2
59
github.com/hashicorp/vault
52
github.com/mattermost/mattermost-server/v6
47
github.com/zitadel/zitadel
47
github.com/filebrowser/filebrowser/v2
44
k8s.io/kubernetes
43
github.com/cilium/cilium
39
github.com/argoproj/argo-cd/v2
39
github.com/0xJacky/Nginx-UI
37
github.com/docker/docker
35
github.com/hashicorp/nomad
34
github.com/argoproj/argo-cd
34
github.com/answerdev/answer
34
github.com/openbao/openbao
33
github.com/hashicorp/consul
32
github.com/traefik/traefik
30
github.com/fleetdm/fleet/v4
30
github.com/rclone/rclone
29
github.com/coder/coder/v2
28
github.com/openfga/openfga
27
github.com/nats-io/nats-server/v2
27
golang.org/x/crypto
26
github.com/ethereum/go-ethereum
26
github.com/canonical/lxd
25
github.com/goharbor/harbor
23
github.com/containerd/containerd
23
github.com/kyverno/kyverno
22
golang.org/x/net
21
helm.sh/helm/v3
21
github.com/casdoor/casdoor
20
github.com/gotenberg/gotenberg/v8
20
github.com/go-gitea/gitea
20
github.com/coredns/coredns
19
github.com/OliveTin/OliveTin
19
github.com/juju/juju
19
github.com/xuri/excelize/v2
18
kubevirt.io/kubevirt
18
github.com/klever-io/klever-go
18
github.com/fission/fission
18
github.com/caddyserver/caddy/v2
17
github.com/pterodactyl/wings
17
github.com/opencontainers/runc
17
github.com/1Panel-dev/1Panel
17
k8s.io/ingress-nginx
17
github.com/mattermost/mattermost-server/v5
17
github.com/nezhahq/nezha
17
github.com/labstack/echo/v4
17
github.com/moby/moby
16
github.com/cloudreve/Cloudreve/v4
16
github.com/argoproj/argo-workflows/v3
16
github.com/apache/incubator-answer
16
github.com/ollama/ollama
16
github.com/authzed/spicedb
16
github.com/labstack/echo/v5
16
github.com/patrickhener/goshs
15
github.com/minio/minio
15
github.com/containers/podman/v4
15
github.com/axllent/mailpit
15
github.com/zitadel/zitadel/v2
15
d7y.io/dragonfly/v2
15
github.com/containerd/containerd/v2
15
github.com/QuantumNous/new-api
14
github.com/getkin/kin-openapi
14
github.com/ellanetworks/core
14
github.com/mattermost/mattermost-plugin-confluence
14
github.com/go-git/go-git/v5
14
github.com/corazawaf/coraza/v3
14
github.com/cosmos/cosmos-sdk
13
github.com/cri-o/cri-o
13
github.com/lin-snow/ech0
13
github.com/filebrowser/filebrowser
13
github.com/gofiber/fiber/v2
13
github.com/nats-io/nats-server
13
go.etcd.io/etcd/v3
13
github.com/kubeedge/kubeedge
12
github.com/cometbft/cometbft
12
github.com/pomerium/pomerium
12
gitea.dev
12
github.com/juev/nebula-mesh
12
github.com/charmbracelet/soft-serve
12
github.com/gravitl/netmaker
12
github.com/portainer/portainer
11
github.com/rabbitmq/amqp091-go
11
github.com/projectcapsule/capsule
11
go.opentelemetry.io/obi
11
github.com/cloudflare/cfrpki
11
github.com/argoproj/argo-cd/v3
11
github.com/dragonflyoss/dragonfly
11
github.com/bishopfox/sliver
11
github.com/envoyproxy/envoy
11
github.com/navidrome/navidrome
11
github.com/treeverse/lakefs
11
github.com/drakkan/sftpgo/v2
11
github.com/gohugoio/hugo
11
github.com/containers/podman/v5
11
github.com/patrickhener/goshs/v2
11
github.com/hashicorp/go-getter
10
github.com/greenpau/caddy-security
10
github.com/projectdiscovery/nuclei/v3
10
github.com/lxc/incus/v7/cmd/incusd
10
github.com/cloudreve/Cloudreve/v3
10
github.com/mattermost/mattermost
10
github.com/Tencent/WeKnora
10
github.com/osrg/gobgp/v4
10
github.com/envoyproxy/gateway
10
github.com/sylabs/singularity
10
github.com/beego/beego/v2
10
github.com/forceu/gokapi
10
github.com/lxc/incus/v6/cmd/incusd
10
istio.io/istio
10
github.com/zalando/skipper
9
github.com/enchant97/note-mark/backend
9
github.com/argoproj/argo-workflows/v4
9
chainguard.dev/melange
9
chainguard.dev/apko
9
github.com/cli/cli/v2
9
github.com/esm-dev/esm.sh
9
github.com/edgelesssys/contrast
9
github.com/containers/buildah
9
github.com/free5gc/udr
9
github.com/beego/beego
9
github.com/lxc/incus/v6
9
github.com/oauth2-proxy/oauth2-proxy/v7
9
github.com/opentofu/opentofu
9
github.com/moby/buildkit
9
github.com/xyproto/algernon
9
github.com/lf-edge/ekuiper/v2
9
github.com/omec-project/amf
9
github.com/kubernetes/kubernetes
9
github.com/dgraph-io/dgraph/v25
8
github.com/getarcaneapp/arcane/backend
8
github.com/neuvector/neuvector
8
goshs.de/goshs/v2
8
www.velocidex.com/golang/velociraptor
8
github.com/forgekeep/nebula-mesh
8
github.com/sigstore/cosign
8
github.com/consensys/gnark
8
github.com/quic-go/quic-go
8
github.com/stacklok/minder
8
github.com/gophish/gophish
8
github.com/kubeflow/pipelines
8
github.com/tektoncd/pipeline
8
github.com/tinfoil-factory/netfoil
8
vitess.io/vitess
8
go.etcd.io/etcd
8
github.com/containers/podman/v3
8
github.com/alist-org/alist/v3
7
github.com/lf-edge/eve
7
github.com/free5gc/nef
7
github.com/hatchet-dev/hatchet
7
github.com/pocket-id/pocket-id/backend
7
oras.land/oras-go/v2
7
github.com/seaweedfs/seaweedfs
7
github.com/google/fscrypt
7
github.com/hyperledger/fabric
7
github.com/authelia/authelia/v4
7
github.com/go-git/go-git/v6
7
github.com/pion/dtls
7
github.com/gofiber/fiber/v3
7
helm.sh/helm
7
github.com/rancher/fleet
7
github.com/go-jose/go-jose/v3
7
github.com/free5gc/udm
7
github.com/gtsteffaniak/filebrowser/backend
7
google.golang.org/grpc
7
github.com/russellhaering/gosaml2
7
github.com/googleapis/mcp-toolbox
6
github.com/fluxcd/flux2
6
goauthentik.io
6
github.com/containers/podman
6
github.com/pion/dtls/v2
6
github.com/projectcalico/calico
6
go.temporal.io/server
6
github.com/dgraph-io/dgraph
6
github.com/free5gc/free5gc
6
github.com/mattermost/mattermost-plugin-playbooks
6
github.com/external-secrets/external-secrets
6
github.com/openchoreo/openchoreo
6
github.com/foxcpp/maddy
6
github.com/cubefs/cubefs
6
github.com/CosmWasm/wasmvm
6
github.com/siderolabs/omni
6
github.com/pinchtab/pinchtab
6
github.com/amir20/dozzle
6
github.com/caddyserver/caddy
6
golang.org/x/image
6
github.com/russellhaering/goxmldsig
6
github.com/prometheus/prometheus
6
github.com/go-jose/go-jose/v4
6
github.com/lf-edge/ekuiper
6
Filter by Repository
https://github.com/usememos/memos
68
https://github.com/kubernetes/kubernetes
65
https://github.com/mattermost/mattermost
59
https://github.com/argoproj/argo-cd
50
https://github.com/grafana/grafana
46
https://github.com/rancher/rancher
46
https://github.com/answerdev/answer
34
https://github.com/go-gitea/gitea
32
https://github.com/cilium/cilium
31
https://github.com/gogs/gogs
28
https://github.com/zitadel/zitadel
26
https://github.com/traefik/traefik
25
https://github.com/hashicorp/consul
24
https://github.com/moby/moby
23
https://github.com/helm/helm
22
https://github.com/goharbor/harbor
21
https://github.com/hashicorp/vault
21
https://github.com/containerd/containerd
19
https://github.com/openfga/openfga
17
https://github.com/ethereum/go-ethereum
17
https://github.com/hashicorp/nomad
16
https://github.com/etcd-io/etcd
16
https://github.com/opencontainers/runc
15
https://github.com/containers/podman
14
https://github.com/cosmos/cosmos-sdk
14
https://github.com/golang/go
14
https://github.com/openbao/openbao
13
https://github.com/1Panel-dev/1Panel
13
https://github.com/nats-io/nats-server
12
https://github.com/cometbft/cometbft
11
https://github.com/cri-o/cri-o
11
https://github.com/pomerium/pomerium
11
https://github.com/cloudflare/cfrpki
11
https://github.com/dragonflyoss/dragonfly
11
https://github.com/filebrowser/filebrowser
11
https://github.com/kubevirt/kubevirt
11
https://github.com/beego/beego
11
https://github.com/greenpau/caddy-security
10
https://github.com/authzed/spicedb
10
https://github.com/kyverno/kyverno
10
https://github.com/canonical/lxd
10
https://github.com/hashicorp/go-getter
9
https://github.com/argoproj/argo-workflows
9
https://github.com/juju/juju
9
https://github.com/casdoor/casdoor
9
https://github.com/treeverse/lakeFS
9
https://github.com/navidrome/navidrome
8
https://github.com/gofiber/fiber
8
https://github.com/pterodactyl/wings
8
https://github.com/kubeedge/kubeedge
8
https://github.com/minio/minio
8
https://github.com/istio/istio
8
https://github.com/Consensys/gnark
8
https://github.com/stacklok/minder
8
https://github.com/docker/docker
8
https://github.com/containers/buildah
8
https://github.com/neuvector/neuvector
7
https://github.com/evmos/evmos
7
https://github.com/hyperledger/fabric
7
https://github.com/google/fscrypt
7
https://github.com/hpcng/singularity
7
https://github.com/kubernetes/ingress-nginx
7
https://github.com/ollama/ollama
7
https://github.com/oauth2-proxy/oauth2-proxy
6
https://github.com/fluxcd/flux2
6
https://github.com/open-policy-agent/opa
6
https://github.com/sigstore/cosign
6
https://github.com/drakkan/sftpgo
6
https://github.com/moby/buildkit
6
https://github.com/schollz/croc
6
https://github.com/quic-go/quic-go
6
https://github.com/cubefs/cubefs
6
https://github.com/charmbracelet/soft-serve
6
https://github.com/gravitl/netmaker
6
https://github.com/pion/dtls
6
https://github.com/coredns/coredns
6
https://github.com/git-lfs/git-lfs
6
https://github.com/lf-edge/ekuiper
6
https://github.com/CosmWasm/wasmvm
5
https://github.com/cheqd/cheqd-node
5
https://github.com/edgelesssys/contrast
5
https://github.com/tendermint/tendermint
5
https://github.com/foxcpp/maddy
5
https://github.com/CosmWasm/wasmd
5
https://github.com/t2bot/matrix-media-repo
5
https://github.com/ipfs/go-ipfs
5
https://github.com/cli/cli
5
https://github.com/gophish/gophish
5
https://github.com/siyuan-note/siyuan
5
https://github.com/osrg/gobgp
5
https://github.com/free5gc/free5gc
5
https://github.com/0xJacky/nginx-ui
5
https://github.com/IBAX-io/go-ibax
5
https://github.com/crewjam/saml
5
https://github.com/meshery/meshery
4
https://github.com/tidwall/gjson
4
https://github.com/ory/fosite
4
https://github.com/containous/traefik
4
https://github.com/crossplane/crossplane
4
https://github.com/BishopFox/sliver
4
https://github.com/IceWhaleTech/CasaOS-UserService
4
https://github.com/grafana/bugbounty
4
https://github.com/projectdiscovery/nuclei
4
https://github.com/russellhaering/gosaml2
4
https://github.com/lestrrat-go/jwx
4
https://github.com/owncast/owncast
4
https://github.com/cosmos/ibc-go
4
https://github.com/envoyproxy/envoy
4
https://github.com/chaos-mesh/chaos-mesh
4
https://github.com/notaryproject/notation-go
4
https://github.com/arduino/arduino-create-agent
4
https://github.com/coder/coder
4
https://github.com/gin-gonic/gin
4
https://github.com/babylonlabs-io/babylon
4
https://github.com/go-git/go-git
4
https://github.com/siderolabs/talos
4
https://github.com/alist-org/alist
4
https://github.com/concourse/concourse
4
https://github.com/snapcore/snapd
4
https://github.com/apache/trafficcontrol
4
https://github.com/edgelesssys/constellation
4
https://github.com/woodpecker-ci/woodpecker
4
https://github.com/go-vela/server
4
https://github.com/vitessio/vitess
4
https://github.com/dexidp/dex
4
https://github.com/golang/crypto
4
https://github.com/dhowden/tag
4
https://github.com/authelia/authelia
4
https://github.com/ory/oathkeeper
3
https://github.com/phachon/mm-wiki
3
https://github.com/syncthing/syncthing
3
https://github.com/caddyserver/caddy
3
https://github.com/siderolabs/omni
3
https://github.com/go-yaml/yaml
3
https://github.com/sylabs/singularity
3
https://github.com/ipfs/boxo
3
https://github.com/open-telemetry/opentelemetry-go-contrib
3
https://github.com/clidey/whodb
3
https://github.com/miniflux/v2
3
https://github.com/theupdateframework/go-tuf
3
https://github.com/runatlantis/atlantis
3
https://github.com/cortexproject/cortex
3
https://github.com/project-zot/zot
3
https://github.com/go-jose/go-jose
3
https://github.com/imgproxy/imgproxy
3
https://github.com/gogits/gogs
3
https://github.com/fleetdm/fleet
3
https://github.com/openshift/origin
3
https://github.com/AlexxIT/go2rtc
3
https://github.com/Consensys/gnark-crypto
3
https://github.com/flipped-aurora/gin-vue-admin
3
https://github.com/flyteorg/flyteadmin
3
https://github.com/aws/aws-sdk-go
3
https://github.com/goauthentik/authentik
3
https://github.com/kcp-dev/kcp
3
https://github.com/ctfer-io/chall-manager
3
https://github.com/distribution/distribution
3
https://github.com/apache/incubator-answer
3
https://github.com/mudler/localai
3
https://github.com/pingcap/tidb
3
https://github.com/square/go-jose
3
https://github.com/libp2p/go-libp2p
3
https://github.com/NVIDIA/gpu-operator
3
https://github.com/tailscale/tailscale
3
https://github.com/IoFinnet/tss-lib
3
https://github.com/mattermost/mattermost-plugin-boards
3
https://github.com/lightningnetwork/lnd
3
https://github.com/ElrondNetwork/elrond-go
3
https://github.com/karmada-io/karmada
3
https://github.com/gohugoio/hugo
3
https://github.com/edgelesssys/marblerun
3
https://github.com/nats-io/jwt
3
https://github.com/kubernetes-sigs/secrets-store-csi-driver
3
https://github.com/SpectoLabs/hoverfly
3
https://github.com/cloudflare/circl
3
https://github.com/ubuntu/authd
3
https://github.com/plentico/plenti
3
https://github.com/mholt/archiver
3
https://github.com/heketi/heketi
3
https://github.com/tiagorlampert/CHAOS
3
https://github.com/moby/libnetwork
3
https://github.com/temporalio/temporal
3
https://github.com/artifacthub/hub
3
https://github.com/weaveworks/weave-gitops
3
https://github.com/KubeOperator/KubePi
3
https://github.com/mattermost/mattermost-plugin-playbooks
3
https://github.com/kiali/kiali
3
https://github.com/u-root/u-root
3
https://github.com/metal3-io/baremetal-operator
3
https://github.com/argoproj/argo-events
3
https://github.com/dutchcoders/transfer.sh
3
https://github.com/rancher/fleet
2
https://github.com/cosmos/ibc-apps
2
https://github.com/buger/jsonparser
2
https://github.com/gphper/ginadmin
2
https://github.com/codenotary/immudb
2
https://github.com/apptainer/apptainer
2
https://github.com/mayswind/ezbookkeeping
2
https://github.com/go-viper/mapstructure
2