Go
aquasecurity/trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Apache-2.0Oct 6, 2026 · metrics 2.10.0
All tags
Catalogue tag
#vulnerability
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
52 records
PyPI
anchore/vunnel
Tool for collecting vulnerability data from various sources (used to build the grype database)
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Go
anchore/grype
A vulnerability scanner for container images and filesystems
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Go · crates.io
greenbone/openvas-scanner
This repository contains the scanner component for Greenbone Community Edition.
GPL-2.0Aug 28, 2026 · metrics 2.10.0
Go
guacsec/guac
GUAC aggregates software security metadata into a high fidelity graph database.
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go · npm
Bearer/bearer
Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Custom licenseSep 20, 2026 · metrics 2.10.0
PyPI · npm
koda-ai-studio/agent-bom
Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
Apache-2.0Oct 16, 2026 · metrics 2.10.0
PyPI · npm
msaad00/agent-bom
Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
Apache-2.0Sep 8, 2026 · metrics 2.10.0
Go · PyPI
anchore/grype-db
No repository description published.
Apache-2.0Sep 13, 2026 · metrics 2.10.0
crates.io
rustsec/rustsec
RustSec API & Tooling
Custom licenseOct 20, 2026 · metrics 2.10.0
—
greenbone/gvm-libs
Greenbone Vulnerability Management Libraries
GPL-2.0Sep 18, 2026 · metrics 2.10.0
Go · npm
jfrog/frogbot
🐸 Scans your Git repository with JFrog Xray & JFrog advanced security for security vulnerabilities. 🤖
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
OWASP/cve-lite-cli
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
MITSep 9, 2026 · metrics 2.10.0
PyPI
usestrix/strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI · npm
freelabz/secator
secator - the pentester's swiss knife
Custom licenseSep 18, 2026 · metrics 2.10.0
Go
l3montree-dev/devguard
DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project
Custom licenseSep 11, 2026 · metrics 2.10.0
—
mondoohq/installer
Linux, macOS and Windows Install scripts for cnquery & cnspec
Custom licenseSep 9, 2026 · metrics 2.10.0
—
aquasecurity/trivy-action
Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities
Apache-2.0Sep 15, 2026 · metrics 2.10.0
PyPI
infobyte/faraday
Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.
GPL-3.0Oct 21, 2026 · metrics 2.10.0
PyPI
aboutcode-org/vulnerablecode
A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm · crates.io
0sec-labs/foxguard
A fast universal code security scanner, written in Rust. Batteries included: supports 14 languages, TUI for triage, secrets, post-quantum audits, diff-aware scans and more 𓃥
MITSep 10, 2026 · metrics 2.10.0
Go
chaitin/SafeLine
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
GPL-3.0Sep 19, 2026 · metrics 2.10.0
—
greenbone/gvmd
Greenbone Vulnerability Manager - The database backend for the Greenbone Community Edition
AGPL-3.0Sep 10, 2026 · metrics 2.10.0
Go
git-pkgs/vulns
Go library for fetching vulnerability data from multiple sources
MITSep 15, 2026 · metrics 2.10.0
npm
patchstack/connect
Patchstack connector for JavaScript applications. Scans your lockfile and reports installed packages to Patchstack for vulnerability monitoring.
MITSep 12, 2026 · metrics 2.10.0
npm · PyPI
sinewaveai/agent-security-scanner-mcp
Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.
MITOct 9, 2026 · metrics 2.10.0
Go
vulncheck-oss/sdk-go-v2
A generated Go SDK from VulnCheck's OpenAPI specification
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
agentgg-dev/agentgg
Open source agentic SAST. The engine behind hundreds of disclosed zero-days. 100+ AI security agents, any repo or PR diff, bring your own model.
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
goklab/guardvibe
Security infrastructure your AI can't be — deterministic, daily CVE intel past your model's training cutoff, whole-repo-aware, author-independent, and shift-left: secure_prompt secures the prompt before code generation. The security MCP for vibe coding: 450 rules, 39 tools, CLI + doctor for Next.js, Supabase, Clerk, Stripe, Prisma, Hono & MCP.
Apache-2.0Sep 10, 2026 · metrics 2.10.0
PyPI
ra1nb0rn/search_vulns
A modular tool to search for known vulnerabilities, exploits and more across various data sources
MITSep 10, 2026 · metrics 2.10.0