Go
anchore/grype
A vulnerability scanner for container images and filesystems
Apache-2.0Aug 27, 2026 · metrics 2.10.0
All tags
Catalogue tag
#vulnerability
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
37 records
Go · crates.io
greenbone/openvas-scanner
This repository contains the scanner component for Greenbone Community Edition.
GPL-2.0Aug 28, 2026 · metrics 2.10.0
PyPI · npm
msaad00/agent-bom
Open security scanner and self-hosted control plane for AI, MCP, and cloud. One evidence model — run scans in your environment, centralize findings, govern in your VPC.
Apache-2.0Jul 16, 2026 · metrics 2.10.0
crates.io
rustsec/rustsec
RustSec API & Tooling
Custom licenseAug 22, 2026 · metrics 2.10.0
Go · PyPI
anchore/grype-db
No repository description published.
Apache-2.0Jul 25, 2026 · metrics 2.10.0
—
greenbone/gvm-libs
Greenbone Vulnerability Management Libraries
GPL-2.0Aug 13, 2026 · metrics 2.10.0
—
aquasecurity/trivy-action
Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities
Apache-2.0Aug 1, 2026 · metrics 2.10.0
PyPI
usestrix/strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
Apache-2.0Aug 5, 2026 · metrics 2.10.0
Go · npm
jfrog/frogbot
🐸 Scans your Git repository with JFrog Xray & JFrog advanced security for security vulnerabilities. 🤖
Apache-2.0Jul 18, 2026 · metrics 2.10.0
—
mondoohq/installer
Linux, macOS and Windows Install scripts for cnquery & cnspec
Custom licenseJul 16, 2026 · metrics 2.10.0
—
mondoolabs/mondoo
Linux, macOS and Windows Install scripts for cnquery & cnspec
Custom licenseJul 17, 2026 · metrics 2.10.0
npm
OWASP/cve-lite-cli
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
MITJul 16, 2026 · metrics 2.10.0
Go
l3montree-dev/devguard
DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project
Custom licenseJul 17, 2026 · metrics 2.10.0
PyPI
aboutcode-org/vulnerablecode
A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
Apache-2.0Jul 20, 2026 · metrics 2.10.0
Go
l3montree-dev/flawfix
DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project
Custom licenseJul 18, 2026 · metrics 2.10.0
—
greenbone/gvm
Greenbone Vulnerability Manager - The database backend for the Greenbone Community Edition
AGPL-3.0Jul 18, 2026 · metrics 2.10.0
—
greenbone/gvmd
Greenbone Vulnerability Manager - The database backend for the Greenbone Community Edition
AGPL-3.0Jul 17, 2026 · metrics 2.10.0
PyPI
infobyte/faraday
Open Source Vulnerability Management Platform
GPL-3.0Aug 29, 2026 · metrics 2.10.0
npm · crates.io
0sec-labs/foxguard
A fast universal code security scanner, written in Rust. Batteries included: supports 12 languages, TUI for triage, secrets, post-quantum audits, diff-aware scans and more 𓃥
MITJul 17, 2026 · metrics 2.10.0
Packagist
dgtlss/warden
A Laravel package that proactively monitors your dependencies for security vulnerabilities by running automated composer audits and sending notifications via webhooks and email
MITSep 5, 2026 · metrics 2.10.0
npm
goklab/guardvibe
Security infrastructure your AI can't be — deterministic, daily CVE intel past your model's training cutoff, whole-repo-aware, author-independent, and shift-left: secure_prompt secures the prompt before code generation. The security MCP for vibe coding: 450 rules, 39 tools, CLI + doctor for Next.js, Supabase, Clerk, Stripe, Prisma, Hono & MCP.
Apache-2.0Jul 17, 2026 · metrics 2.10.0
npm
patchstack/connect
Patchstack connector for JavaScript applications. Scans your lockfile and reports installed packages to Patchstack for vulnerability monitoring.
MITJul 20, 2026 · metrics 2.10.0
PyPI
ra1nb0rn/search_vulns
A modular tool to search for known vulnerabilities, exploits and more across various data sources
MITJul 18, 2026 · metrics 2.10.0
npm
agentgg-dev/agentgg
agentgg cli
Apache-2.0Aug 5, 2026 · metrics 2.10.0
PyPI
manthanghasadiya/mcpsec
An AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI) before your AI agents do.
MITJul 28, 2026 · metrics 2.10.0
Go · npm
scagogogo/cwe-skills
AI-native CWE (Common Weakness Enumeration) integration layer — Skills, Go SDK, CLI & MCP. Ship CVE/CWE tooling to SAST/DAST, vuln-management & AI agents.
MITJul 19, 2026 · metrics 2.10.0
Go
kidoz/go-vulners
Go client library for the Vulners vulnerability database API — search, audit, SBOM, VScanner, and more
MITAug 22, 2026 · metrics 2.10.0
PyPI · crates.io · Maven +2
mattybellx/ansede
Find authorization bugs before attackers do. Free SAST — IDOR detection, 100% CVE recall, 0% false positives. 5 languages. Fully offline.
Custom licenseJul 17, 2026 · metrics 2.10.0
Go
mstiri/trivy-epss-kev-exporter
Prometheus exporter that enriches Trivy Operator VulnerabilityReport CVEs with EPSS scores and CISA KEV presence
Apache-2.0Aug 17, 2026 · metrics 2.10.0
Go
Query-farm/vgi-cve
CVE/NVD lookup with offline CVSS scoring in DuckDB (Go)
MITAug 5, 2026 · metrics 2.10.0