Go
anchore/grype
A vulnerability scanner for container images and filesystems
Apache-2.027 ago 2026 · métricas 2.10.0
Todas las etiquetas
Etiqueta del catálogo
#vulnerability
Todos los repositorios del registro público que llevan esta etiqueta, procedente de sus topics de GitHub o de las palabras clave que publican sus registros de paquetes. La salud se mide con la misma metodología versionada que el resto del registro.
37 registros
Go · crates.io
greenbone/openvas-scanner
This repository contains the scanner component for Greenbone Community Edition.
GPL-2.028 ago 2026 · métricas 2.10.0
PyPI · npm
msaad00/agent-bom
Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
Apache-2.016 jul 2026 · métricas 2.10.0
crates.io
rustsec/rustsec
RustSec API & Tooling
Licencia propia22 ago 2026 · métricas 2.10.0
Go · PyPI
anchore/grype-db
El repositorio no publica descripción.
Apache-2.025 jul 2026 · métricas 2.10.0
—
greenbone/gvm-libs
Greenbone Vulnerability Management Libraries
GPL-2.013 ago 2026 · métricas 2.10.0
—
aquasecurity/trivy-action
Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities
Apache-2.01 ago 2026 · métricas 2.10.0
PyPI
usestrix/strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Apache-2.05 ago 2026 · métricas 2.10.0
Go · npm
jfrog/frogbot
🐸 Scans your Git repository with JFrog Xray & JFrog advanced security for security vulnerabilities. 🤖
Apache-2.018 jul 2026 · métricas 2.10.0
—
mondoohq/installer
Linux, macOS and Windows Install scripts for cnquery & cnspec
Licencia propia16 jul 2026 · métricas 2.10.0
—
mondoolabs/mondoo
Linux, macOS and Windows Install scripts for cnquery & cnspec
Licencia propia17 jul 2026 · métricas 2.10.0
npm
OWASP/cve-lite-cli
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
MIT16 jul 2026 · métricas 2.10.0
Go
l3montree-dev/devguard
DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project
Licencia propia17 jul 2026 · métricas 2.10.0
PyPI
aboutcode-org/vulnerablecode
A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
Apache-2.020 jul 2026 · métricas 2.10.0
Go
l3montree-dev/flawfix
DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project
Licencia propia18 jul 2026 · métricas 2.10.0
—
greenbone/gvm
Greenbone Vulnerability Manager - The database backend for the Greenbone Community Edition
AGPL-3.018 jul 2026 · métricas 2.10.0
—
greenbone/gvmd
Greenbone Vulnerability Manager - The database backend for the Greenbone Community Edition
AGPL-3.017 jul 2026 · métricas 2.10.0
PyPI
infobyte/faraday
Open Source Vulnerability Management Platform
GPL-3.029 ago 2026 · métricas 2.10.0
npm · crates.io
0sec-labs/foxguard
A fast universal code security scanner, written in Rust. Batteries included: supports 12 languages, TUI for triage, secrets, post-quantum audits, diff-aware scans and more 𓃥
MIT17 jul 2026 · métricas 2.10.0
Packagist
dgtlss/warden
A Laravel package that proactively monitors your dependencies for security vulnerabilities by running automated composer audits and sending notifications via webhooks and email
MIT5 sept 2026 · métricas 2.10.0
npm
goklab/guardvibe
Security infrastructure your AI can't be — deterministic, daily CVE intel past your model's training cutoff, whole-repo-aware, author-independent, and shift-left: secure_prompt secures the prompt before code generation. The security MCP for vibe coding: 450 rules, 39 tools, CLI + doctor for Next.js, Supabase, Clerk, Stripe, Prisma, Hono & MCP.
Apache-2.017 jul 2026 · métricas 2.10.0
npm
patchstack/connect
Patchstack connector for JavaScript applications. Scans your lockfile and reports installed packages to Patchstack for vulnerability monitoring.
MIT20 jul 2026 · métricas 2.10.0
PyPI
ra1nb0rn/search_vulns
A modular tool to search for known vulnerabilities, exploits and more across various data sources
MIT18 jul 2026 · métricas 2.10.0
npm
agentgg-dev/agentgg
agentgg cli
Apache-2.05 ago 2026 · métricas 2.10.0
PyPI
manthanghasadiya/mcpsec
An AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI) before your AI agents do.
MIT28 jul 2026 · métricas 2.10.0
Go · npm
scagogogo/cwe-skills
AI-native CWE (Common Weakness Enumeration) integration layer — Skills, Go SDK, CLI & MCP. Ship CVE/CWE tooling to SAST/DAST, vuln-management & AI agents.
MIT19 jul 2026 · métricas 2.10.0
Go
kidoz/go-vulners
Go client library for the Vulners vulnerability database API — search, audit, SBOM, VScanner, and more
MIT22 ago 2026 · métricas 2.10.0
PyPI · crates.io · Maven +2
mattybellx/ansede
Find authorization bugs before attackers do. Free SAST — IDOR detection, 100% CVE recall, 0% false positives. 5 languages. Fully offline.
Licencia propia17 jul 2026 · métricas 2.10.0
Go
mstiri/trivy-epss-kev-exporter
Prometheus exporter that enriches Trivy Operator VulnerabilityReport CVEs with EPSS scores and CISA KEV presence
Apache-2.017 ago 2026 · métricas 2.10.0
Go
Query-farm/vgi-cve
CVE/NVD lookup with offline CVSS scoring in DuckDB (Go)
MIT5 ago 2026 · métricas 2.10.0