#vulnerabilities (30 Repositories)
Ranked open-source repositories tagged with #vulnerabilities, scored by pull request acceptance likelihood and maintainer engagement velocity.
54.9%
84.6h
30 repositories tagged #vulnerabilities
DependencyTrack/dependency-track
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
phylum-dev/cli
Command line interface for the Phylum API
seqra/opentaint
The open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.
NixOS/nix-security-tracker
Web service for managing information on vulnerabilities in software distributed through Nixpkgs
opencve/opencve
Vulnerability Intelligence Platform
google/clusterfuzz
Scalable fuzzing infrastructure.
google/oss-fuzz
OSS-Fuzz - continuous fuzzing for open source software.
dependency-check/dependency-check-sonar-plugin
Integrates Dependency-Check reports into SonarQube
eraser-dev/eraser
🧹 Cleaning up images from Kubernetes nodes
lissy93/bug-bounties
⚔️ Community maintained directory, MCP and API of 3,000+ active bug bounty programs and VDPs
snyk/cli
Snyk CLI scans and monitors your projects for security vulnerabilities.
FriendsOfPHP/security-advisories
A database of PHP security advisories
anchore/scan-action
Anchore container analysis and scan provided as a GitHub Action
RAJANAGORI/Nightingale
Nightingale Docker for Pentesters is a comprehensive Dockerized environment tailored for penetration testing and vulnerability assessment. It comes preconfigured with all essential tools and utilities required for efficient Vulnerability Assessment and Penetration Testing (VAPT), streamlining the setup process for security professionals.
lirantal/npq
safely install npm packages by auditing them pre-install stage
fosslight/fosslight
FOSSLight Hub : Integrated management web-service for Open Source Compliance Process
RetireJS/retire.js
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
bugcrowd/vulnerability-rating-taxonomy
Bugcrowd’s baseline priority ratings for common security vulnerabilities
jenkinsci/dependency-check-plugin
Jenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).
jorijn/laravel-security-checker
Added Laravel functionality to Enlightn Security Checker. Adds a command to check for, and optionally emails you, vulnerabilities when they affect you.
OWASP/railsgoat
A vulnerable version of Rails that follows the OWASP Top 10
monarc-project/MonarcAppFO
MONARC - Method for an Optimised aNAlysis of Risks by @NC3-LU
YalcinYolalan/WSSAT
WEB SERVICE SECURITY ASSESSMENT TOOL
ossf/cve-bin-tool
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
six2dez/reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
interference-security/DVWS
OWSAP Damn Vulnerable Web Sockets (DVWS) is a vulnerable web application which works on web sockets for client-server communication.
OWASP/NodeGoat
The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them.
sandworm-hq/sandworm-audit
Security & License Compliance For Your App's Dependencies 🪱
x1337loser/Dependency-Confusion
All About Dependency Confusion Attack, (Detecting, Finding, Mitigating)
swisskyrepo/Vulny-Code-Static-Analysis
Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex