PyPI
ra1nb0rn/search_vulns
A modular tool to search for known vulnerabilities, exploits and more across various data sources
MITSep 10, 2026 · metrics 2.10.0
All tags
Catalogue tag
#vulnerability
Every repository in the public record carrying this tag — from its GitHub topics or the keywords its package registries publish. Health is measured under the same versioned methodology as the rest of the record.
52 records
PyPI
manthanghasadiya/mcpsec
An AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI) before your AI agents do.
MITSep 14, 2026 · metrics 2.10.0
crates.io
scm-rs/cvss-rs
Rust library for handling CVSS score
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go · npm
scagogogo/cwe-skills
AI-native CWE (Common Weakness Enumeration) integration layer — Skills, Go SDK, CLI & MCP. Ship CVE/CWE tooling to SAST/DAST, vuln-management & AI agents.
MITSep 11, 2026 · metrics 2.10.0
Go
krisiasty/vcheck
Vulnerability detection and mitigation tool for Copy Fail and Dirty Frag bugs (CVE-2026-31431, CVE-2026-43284, CVE-2026-43500)
Apache-2.0Sep 11, 2026 · metrics 2.10.0
PyPI · crates.io · npm
mattybellx/Guardmarly
Find authorization bugs before attackers do. Free SAST — IDOR detection, 100% CVE recall, 0% false positives. 5 languages. Fully offline.
Custom licenseSep 10, 2026 · metrics 2.10.0
Go
kidoz/go-vulners
Go client library for the Vulners vulnerability database API — search, audit, SBOM, VScanner, and more
MITOct 20, 2026 · metrics 2.10.0
npm
nsasoft/nsauditor-ai
NSAuditor AI — Open-source, AI-powered network security scanner. 27 plugins, CVE matching, MITRE ATT&CK mapping, verified vulnerabilities, continuous monitoring, MCP integration. Zero data exfiltration. MIT licensed.
MITOct 22, 2026 · metrics 2.10.0
Go
git-pkgs/cwe
MITRE CWE catalogue lookup for Go: canonical ID, name, description, and View-1400 category
MITSep 19, 2026 · metrics 2.10.0
npm
sudoeren/arhus
local-first security analysis for TypeScript & JavaScript
MITSep 10, 2026 · metrics 2.10.0
PyPI · npm
DevInder1/supply-chain-scanner-public
Supply Chain Scanner is a local-first security tool that scans your project dependencies, developer environment, and IDE extensions for known vulnerabilities using multiple intelligence sources (OSV, NVD, GHSA, Sonatype), then prioritizes remediation with KEV/EPSS insights and easy-to-read reports — with no API key required for default use.
MITSep 30, 2026 · metrics 2.10.0
PyPI
PramanKasliwal/MaunPrekshak
The Silent Observer — Fast, local-first security scanner for dependencies (SCA), exposed secrets & git history, SAST, Dockerfiles, and GitHub Actions with multi-provider AI remediation.
Apache-2.0Oct 12, 2026 · metrics 2.10.0
npm
badchars/cve-mcp
23-tool MCP server for CVE & vulnerability intelligence. NVD, EPSS, CISA KEV, GitHub Advisory, OSV — unified in one server. Risk scoring, bulk triage, exploit search. 2 dependencies, runs with npx.
MITSep 16, 2026 · metrics 2.10.0
Go
mstiri/trivy-epss-kev-exporter
Prometheus exporter that enriches Trivy Operator VulnerabilityReport CVEs with EPSS scores and CISA KEV presence
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
Query-farm/vgi-cve
CVE/NVD lookup with offline CVSS scoring in DuckDB (Go)
MITSep 16, 2026 · metrics 2.10.0
Go
MrEx-Right/DORM
Modern, High-Performance Vulnerability Scanner. Features: Spider Crawler, Chaos Fuzzer, and RAM-based Exploit-DB integration.
AGPL-3.0Oct 21, 2026 · metrics 2.10.0
npm
sjinks/wpscan-mcp-server
MCP Server for the WPScan (wpscan.com) API
MITSep 30, 2026 · metrics 2.10.0
NuGet
dotnetarium/Dotnetarium.Analyzers.SCS
Static code analyzer for .NET (Nuget package) based on Security Code Scan
LGPL-3.0Sep 30, 2026 · metrics 2.10.0
Go
tamish560/mcprobe
Security scanner and introspection tool for MCP servers. Connect, inspect, detect injection patterns, find tool shadowing, baseline for drift. Single binary, zero dependencies, Go stdlib only.
MITSep 12, 2026 · metrics 2.10.0
crates.io
offseq/threat-finder
Runtime vulnerability scanner: finds CVEs in the services actually running on a host and ranks them by network exposure.
Custom licenseOct 3, 2026 · metrics 2.10.0
PyPI · npm
Stiimy/briar
🥀 Autonomous AI Pentester — find vulns before hackers do. Free, open source, Ollama-powered.
Custom licenseSep 10, 2026 · metrics 2.10.0
NuGet
security-code-scan/security-code-scan
Vulnerability Patterns Detector for C# and VB.NET
LGPL-3.0Aug 27, 2026 · metrics 2.10.0