All tags
Catalogue tag

#vulnerability

Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.

27 records
Tagged “vulnerability”Ranked by health index
Go
83Goodhealth index
anchore/grype
A vulnerability scanner for container images and filesystems
Go★ 12.6KJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
Go · crates.io
83Goodhealth index
greenbone/openvas-scanner
This repository contains the scanner component for Greenbone Community Edition.
Rust · C · NASL★ 4,717Jul 15, 2026
GPL-2.0Jul 15, 2026 · metrics 1.13.0
PyPI · npm
80Goodhealth index
msaad00/agent-bom
Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
Python · TypeScript★ 28↓ 5,301/moJul 16, 2026
Apache-2.0Jul 16, 2026 · metrics 1.13.0
Go · PyPI
77Goodhealth index
anchore/grype-db
No repository description published.
Python · Go★ 70Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
Go · npm
75Goodhealth index
jfrog/frogbot
🐸 Scans your Git repository with JFrog Xray & JFrog advanced security for security vulnerabilities. 🤖
Go★ 369Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 1.13.0
—
75Goodhealth index
mondoohq/installer
Linux, macOS and Windows Install scripts for cnquery & cnspec
PowerShell · Shell · Python★ 83Jul 16, 2026
Custom licenseJul 16, 2026 · metrics 1.13.0
—
75Goodhealth index
mondoolabs/mondoo
Linux, macOS and Windows Install scripts for cnquery & cnspec
PowerShell · Shell · Python★ 83Jul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
PyPI
75Goodhealth index
usestrix/strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Python · TypeScript★ 43.2KJul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
npm
74Goodhealth index
OWASP/cve-lite-cli
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
TypeScript★ 635↓ 20.2K/moJul 16, 2026
MITJul 16, 2026 · metrics 1.13.0
Go
74Goodhealth index
l3montree-dev/devguard
DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project
Go★ 146Jul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
PyPI
73Goodhealth index
aboutcode-org/vulnerablecode
A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
Python · HTML★ 693Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
—
72Goodhealth index
greenbone/gvm
Greenbone Vulnerability Manager - The database backend for the Greenbone Community Edition
C★ 364Jul 18, 2026
AGPL-3.0Jul 18, 2026 · metrics 1.13.0
—
72Goodhealth index
greenbone/gvmd
Greenbone Vulnerability Manager - The database backend for the Greenbone Community Edition
C★ 364Jul 17, 2026
AGPL-3.0Jul 17, 2026 · metrics 1.13.0
Go
72Goodhealth index
l3montree-dev/flawfix
DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project
Go★ 146Jul 18, 2026
Custom licenseJul 18, 2026 · metrics 1.13.0
npm · crates.io
67Moderatehealth index
0sec-labs/foxguard
A fast universal code security scanner, written in Rust. Batteries included: supports 12 languages, TUI for triage, secrets, post-quantum audits, diff-aware scans and more 𓃥
Rust★ 277↓ 6,899/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Packagist
66Moderatehealth index
dgtlss/warden
A Laravel package that proactively monitors your dependencies for security vulnerabilities by running automated composer audits and sending notifications via webhooks and email
PHP★ 90↓ 5,099/moJul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
PyPI
62Moderatehealth index
ra1nb0rn/search_vulns
A modular tool to search for known vulnerabilities, exploits and more across various data sources
Python · CSS · JavaScript★ 91↓ 3,793/moJul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
npm
61Moderatehealth index
goklab/guardvibe
Security infrastructure your AI can't be — deterministic, daily CVE intel past your model's training cutoff, whole-repo-aware, author-independent, and shift-left: secure_prompt secures the prompt before code generation. The security MCP for vibe coding: 450 rules, 39 tools, CLI + doctor for Next.js, Supabase, Clerk, Stripe, Prisma, Hono & MCP.
TypeScript★ 4↓ 6,125/moJul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
npm
61Moderatehealth index
patchstack/connect
Patchstack connector for JavaScript applications. Scans your lockfile and reports installed packages to Patchstack for vulnerability monitoring.
TypeScript · JavaScript★ 1↓ 4,203/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go · npm
57Moderatehealth index
scagogogo/cwe-skills
AI-native CWE (Common Weakness Enumeration) integration layer — Skills, Go SDK, CLI & MCP. Ship CVE/CWE tooling to SAST/DAST, vuln-management & AI agents.
Go★ 3Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
PyPI · crates.io · Maven +2
56Moderatehealth index
mattybellx/ansede
Find authorization bugs before attackers do. Free SAST — IDOR detection, 100% CVE recall, 0% false positives. 5 languages. Fully offline.
Python · HTML★ 12Jul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
Go
53Moderatehealth index
krisiasty/vcheck
Vulnerability detection and mitigation tool for Copy Fail and Dirty Frag bugs (CVE-2026-31431, CVE-2026-43284, CVE-2026-43500)
Go★ 2Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 1.13.0
npm
53Moderatehealth index
sudoeren/arhus
local-first security analysis for TypeScript & JavaScript
TypeScript★ 6↓ 2,972/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Go
47At riskhealth index
kidoz/go-vulners
Go client library for the Vulners vulnerability database API — search, audit, SBOM, VScanner, and more
Go★ 0↓ 0/moJul 13, 2026
MITJul 13, 2026 · metrics 1.13.0
npm
43At riskhealth index
nsasoft/nsauditor-ai
NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration. Zero data exfiltration. MIT licensed.
JavaScript★ 19↓ 5,644/moJul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
Go
39At riskhealth index
MrEx-Right/DORM
Modern, High-Performance Vulnerability Scanner. Features: Spider Crawler, Chaos Fuzzer, and RAM-based Exploit-DB integration.
Go★ 1↓ 0/moJul 14, 2026
AGPL-3.0Jul 14, 2026 · metrics 1.13.0
PyPI · npm
35At riskhealth index
Stiimy/briar
🥀 Autonomous AI Pentester — find vulns before hackers do. Free, open source, Ollama-powered.
Python★ 1↓ 78/moJul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0