Go
aquasecurity/trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
Apache-2.0Oct 6, 2026 · metrics 2.10.0
All tags
Catalogue tag
#vulnerability-detection
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
29 records
Go
Checkmarx/kics
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
projectdiscovery/nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
MITSep 16, 2026 · metrics 2.10.0
npm
wazuh/wazuh-dashboard-plugins
Plugins for Wazuh Dashboard
GPL-2.0Sep 19, 2026 · metrics 2.10.0
Go
future-architect/vuls
Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
GPL-3.0Sep 20, 2026 · metrics 2.10.0
Go · crates.io
greenbone/openvas-scanner
This repository contains the scanner component for Greenbone Community Edition.
GPL-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
greenbone/python-gvm
Greenbone Vulnerability Management Python Library
GPL-3.0Oct 18, 2026 · metrics 2.10.0
Go
aquasecurity/trivy-operator
Kubernetes-native security toolkit
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Maven
dependency-check/DependencyCheck
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
wazuh/wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Custom licenseSep 20, 2026 · metrics 2.10.0
—
wazuh/wazuh-docker
Wazuh - Docker containers
Custom licenseSep 20, 2026 · metrics 2.10.0
—
greenbone/gvm-libs
Greenbone Vulnerability Management Libraries
GPL-2.0Sep 18, 2026 · metrics 2.10.0
—
projectdiscovery/nuclei-templates
Community curated list of templates for the nuclei engine to find security vulnerabilities.
MITAug 27, 2026 · metrics 2.10.0
Go
kubescape/kubevuln
Kubevuln is an in-cluster component of the Kubescape security platform. It scans container images for vulnerabilities, using Grype as its engine.
Apache-2.0Sep 15, 2026 · metrics 2.10.0
PyPI
pyupio/safety
Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.
Custom licenseAug 27, 2026 · metrics 2.10.0
—
wazuh/wazuh-ansible
Wazuh - Ansible playbook
Custom licenseSep 19, 2026 · metrics 2.10.0
RubyGems
wazuh/wazuh-puppet
Wazuh - Puppet module
GPL-2.0Sep 19, 2026 · metrics 2.10.0
Maven · npm
eclipse-apoapsis/ort-server
A scalable server implementation of the OSS Review Toolkit.
Apache-2.0Sep 8, 2026 · metrics 2.10.0
PyPI
aboutcode-org/vulnerablecode
A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
Apache-2.0Sep 11, 2026 · metrics 2.10.0
Go · npm
xalgorix/xalgorix
Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.
Apache-2.0Sep 9, 2026 · metrics 2.10.0
Packagist
yoeunes/regex-parser
RegexParser: Static Analysis, Linter & Logic Solver for PHP
MITSep 10, 2026 · metrics 2.10.0
Packagist
php-regex/regex-parser
RegexParser: Static Analysis, Linter & Logic Solver for PHP
MITSep 20, 2026 · metrics 2.10.0
Go
G-Rath/osv-detector
No repository description published.
MITOct 19, 2026 · metrics 2.10.0
PyPI
HeadyZhang/agent-audit
Static security scanner for LLM agents — prompt injection, MCP config auditing, taint analysis. 51 rules mapped to OWASP Agentic Top 10 (2026). Works with LangChain, CrewAI, AutoGen.
MITSep 18, 2026 · metrics 2.10.0
Packagist
php-regex/php-regex
Static analysis, linter & logic solver for PHP regular expressions
MITOct 4, 2026 · metrics 2.10.0
Go
MrEx-Right/DORM
Modern, High-Performance Vulnerability Scanner. Features: Spider Crawler, Chaos Fuzzer, and RAM-based Exploit-DB integration.
AGPL-3.0Oct 21, 2026 · metrics 2.10.0
crates.io
Teycir/ZkPatternMatcher
Pattern-based vulnerability detection for Zero-Knowledge proof circuits. Scan ZK code against YAML patterns to find security issues.
MITAug 24, 2026 · metrics 2.10.0
Go · Maven · PyPI
seqra/opentaint
The open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.
Apache-2.0Sep 10, 2026 · metrics 2.10.0
PyPI
tylerwince/flake8-bandit
Automated security testing using bandit and flake8.
MITSep 14, 2026 · metrics 2.10.0