aeon


Secured by aeon.

The vuln-scanner skill audits open-source agent repos, lands real fixes, and runs the disclosure pipeline end to end: scan, patch, PR or private advisory, then track to merge. Every repo below carries a fix that aeon found and shipped.

Among the companies secured
5.4MStars securedAcross 113 hardened repositories.
304.5KLargest repo securedobra/superpowers - HIGH fixed upstream.

Findings by severity

Critical - 5 (3.3%)High - 84 (55.6%)Medium - 48 (31.8%)Low - 14 (9.3%)151findings
  • Critical53.3%
  • High8455.6%
  • Medium4831.8%
  • Low149.3%

Findings by language

TypeScript - 48 (31.8%)Python - 33 (21.9%)Rust - 16 (10.6%)JavaScript - 12 (7.9%)Go - 13 (8.6%)Other - 29 (19.2%)151findings
  • TypeScript4831.8%
  • Python3321.9%
  • Rust1610.6%
  • JavaScript127.9%
  • Go138.6%
  • Other2919.2%

Findings by vuln class

Dependency CVE - 41 (27.2%)Auth / access control - 28 (18.5%)DNS rebinding - 19 (12.6%)Memory safety / other - 18 (11.9%)Command injection / RCE - 13 (8.6%)Path traversal - 12 (7.9%)SSRF - 12 (7.9%)XSS - 8 (5.3%)151findings
  • Dependency CVE4127.2%
  • Auth / access control2818.5%
  • DNS rebinding1912.6%
  • Memory safety / other1811.9%
  • Command injection / RCE138.6%
  • Path traversal127.9%
  • SSRF127.9%
  • XSS85.3%


Companies secured.

The open-source orgs aeon has hardened, orbiting the core. Each logo links straight to the fix that landed - the full ranked set is below.

aeon
Nexu logo
Headroom Labs logo
Career Ops logo
HKU Data Lab logo
Alibaba logo
DeusData logo
Tiny Humans AI logo
Tsinghua MAIC logo
ByteDance logo
Cloak logo
Supermemory logo
Karakeep logo
xAI logo
Firecrawl logo
NVIDIA logo
Rowboat logo
Microsoft logo
InsForge logo
Tencent logo
CocoIndex logo
Presenton logo
Omnigent logo
Kaneo logo
NomaDamas logo
Katanemo logo
Google logo
Dograh logo
Cloudflare logo
Strukto logo
KVCache.AI logo
Vercel logo
Music Assistant logo
Future AGI logo

Every secured repository, ranked by GitHub stars.
GitHub star counts as of Oct 24, 2026.

01obra/superpowersHIGH304,504 stars, fixed upstream Jun 17, 2026 - view the fix on GitHubDNS rebinding: Per-session capability-key gate on the dev server to block DNS rebinding. (fixed upstream Jun 17, 2026)02affaan-m/ECCHIGH287,773 stars, fix merged Sep 10, 2026 - view the fix on GitHubDependency CVE: Host/Origin allowlist + validated git refs + quoted workflow input (CWE-352 + 78 + 918); bumped the lru crate to 0.18.2 to patch RUSTSEC-2026-0253. (fix merged Sep 10, 2026)03affaan-m/ECCLOW287,773 stars, fix merged Sep 10, 2026 - view the fix on GitHubDependency CVE: Host/Origin allowlist + validated git refs + quoted workflow input (CWE-352 + 78 + 918); bumped the lru crate to 0.18.2 to patch RUSTSEC-2026-0253. (fix merged Sep 10, 2026)04harry0703/MoneyPrinterTurboHIGH134,764 stars, fixed upstream Aug 22, 2026 - view the fix on GitHubAuth / access control: Missing API-key enforcement on /api/v1 routes - wired verify_token into the video and LLM-proxy routers (CWE-306). (fixed upstream Aug 22, 2026)05Graphify-Labs/graphifyHIGH134,224 stars, advisory published Sep 27, 2026 - view the fix on GitHubPath traversal: Fortran extractor strips #include directives before its cpp pass, so a scanned .F file can no longer pull absolute paths (e.g. /etc/passwd) or traverse out of the corpus into the graph output (CWE-22 + 73). (advisory published Sep 27, 2026)06nexu-io/open-designHIGH103,711 stars, fix merged May 15, 2026 - view the fix on GitHubSSRF: Resolve hostnames before approving external API base URLs (DNS bypass) + closed an FQDN SSRF bypass. (fix merged May 15, 2026)07nexu-io/open-designMEDIUM103,711 stars, fix merged May 15, 2026 - view the fix on GitHubSSRF: Resolve hostnames before approving external API base URLs (DNS bypass) + closed an FQDN SSRF bypass. (fix merged May 15, 2026)08Panniantong/Agent-ReachMEDIUM101,568 stars, fix merged Jun 10, 2026 - view the fix on GitHubAuth / access control: Create credential files atomically with 0o600 (CWE-732 TOCTOU) - 0-day turnaround. (fix merged Jun 10, 2026)09ruvnet/RuViewHIGH99,392 stars, fix merged Sep 17, 2026 - view the fix on GitHubDNS rebinding: Host-header allowlist on the sensing-server HTTP + WS (DNS rebinding); plus a default-deny token store on the homecore-api server so it no longer starts unauthenticated (broken access control). (fix merged Sep 17, 2026)10ruvnet/RuViewMEDIUM99,392 stars, fix merged Sep 17, 2026 - view the fix on GitHubAuth / access control: Host-header allowlist on the sensing-server HTTP + WS (DNS rebinding); plus a default-deny token store on the homecore-api server so it no longer starts unauthenticated (broken access control). (fix merged Sep 17, 2026)11odysseus-dev/odysseusMEDIUM94,344 stars, fix merged Jun 6, 2026 - view the fix on GitHubDNS rebinding: Closed a DNS-rebinding hole on diffusion_server (wildcard CORS + missing Host check). (fix merged Jun 6, 2026)12infiniflow/ragflowHIGH92,801 stars, fixed upstream Sep 10, 2026 - view the fix on GitHubAuth / access control: Authorization gate on GetDocumentPreview (kbDAO.Accessible) to stop cross-tenant document reads (IDOR / broken access control). (fixed upstream Sep 10, 2026)13koala73/worldmonitorHIGH89,405 stars, fix merged Aug 1, 2026 - view the fix on GitHubDependency CVE: Bump sharp to >=0.35.0 in blog-site to patch four inherited libvips CVEs (GHSA-f88m-g3jw-g9cj). (fix merged Aug 1, 2026)14opendatalab/MinerUMEDIUM82,415 stars, fixed upstream Sep 6, 2026 - view the fix on GitHubMemory safety / other: Removed the stdlib-XML OOXML parsing sinks and delegated document type detection to a hardened parser (XXE / entity-expansion DoS). (fixed upstream Sep 6, 2026)15diegosouzapw/OmniRouteHIGH80,624 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubCommand injection / RCE: Gated the Skills feature's command-exec and cli-tools status routes to LOCAL_ONLY (unauthenticated sandboxed RCE). (fixed upstream Sep 15, 2026)16ruvnet/rufloMEDIUM78,929 stars, fix merged May 19, 2026 - view the fix on GitHubAuth / access control: Verify the plugin-registry Ed25519 signature properly (CWE-347). (fix merged May 19, 2026)17headroomlabs-ai/headroomHIGH77,705 stars, fix merged Jun 11, 2026 - view the fix on GitHubDNS rebinding: Reject non-loopback Host on /debug + /stats/reset (DNS rebinding). (fix merged Jun 11, 2026)18career-ops-hq/career-opsHIGH76,952 stars, fix merged Jun 11, 2026 - view the fix on GitHubSSRF: Closed SSRF guard bypasses in the liveness-browser. (fix merged Jun 11, 2026)19colbymchenry/codegraphMEDIUM75,187 stars, fix merged May 21, 2026 - view the fix on GitHubPath traversal: Refuse to follow symlinks when writing the /tmp session marker (CWE-59 + 732). (fix merged May 21, 2026)20ZhuLinsen/daily_stock_analysisHIGH66,984 stars, fix merged Apr 30, 2026 - view the fix on GitHubPath traversal: Block path traversal in the SPA fallback route. (fix merged Apr 30, 2026)21mvanhorn/last30days-skillHIGH65,265 stars, fix merged Jun 17, 2026 - view the fix on GitHubXSS: Allowlist link URL schemes in the HTML report renderer (CWE-79 + 80 stored XSS). (fix merged Jun 17, 2026)22Alishahryar1/free-claude-codeMEDIUM63,050 stars, fix merged Apr 29, 2026 - view the fix on GitHubAuth / access control: Constant-time comparison for ANTHROPIC_AUTH_TOKEN. (fix merged Apr 29, 2026)23bilawalsidhu/gods-eye-viewHIGH59,930 stars, fix merged Oct 17, 2026 - view the fix on GitHubDependency CVE: Bumped sharp, source-map-js and dompurify to patch disclosed CVEs: librsvg via sharp (GHSA-wq5f-xc86-pv6w), source-map-js event-loop DoS (CVE-2026-93749) and the DOMPurify IN_PLACE sanitizer bypass shipped in the client bundle via Cesium (3 findings). (fix merged Oct 17, 2026)24bilawalsidhu/gods-eye-viewHIGH59,930 stars, fix merged Oct 17, 2026 - view the fix on GitHubDependency CVE: Bumped sharp, source-map-js and dompurify to patch disclosed CVEs: librsvg via sharp (GHSA-wq5f-xc86-pv6w), source-map-js event-loop DoS (CVE-2026-93749) and the DOMPurify IN_PLACE sanitizer bypass shipped in the client bundle via Cesium (3 findings). (fix merged Oct 17, 2026)25bilawalsidhu/gods-eye-viewLOW59,930 stars, fix merged Oct 17, 2026 - view the fix on GitHubDependency CVE: Bumped sharp, source-map-js and dompurify to patch disclosed CVEs: librsvg via sharp (GHSA-wq5f-xc86-pv6w), source-map-js event-loop DoS (CVE-2026-93749) and the DOMPurify IN_PLACE sanitizer bypass shipped in the client bundle via Cesium (3 findings). (fix merged Oct 17, 2026)26HKUDS/CLI-AnythingMEDIUM56,772 stars, fix merged May 20, 2026 - view the fix on GitHubAuth / access control: defusedxml for untrusted XML inputs (XXE / billion-laughs, CWE-776 + 611). (fix merged May 20, 2026)27HKUDS/nanobotHIGH49,325 stars, fixed upstream Jul 8, 2026 - view the fix on GitHubDNS rebinding: DNS-rebinding let attackers mint a WebUI gateway token and reach agent RCE (no Host/Origin check). (fixed upstream Jul 8, 2026)28alibaba/open-code-reviewHIGH48,194 stars, fix merged Jul 29, 2026 - view the fix on GitHubDNS rebinding: Added a Host-header allowlist to the viewer to block DNS rebinding. (fix merged Jul 29, 2026)29alibaba/open-code-reviewHIGH48,194 stars, fix merged Jul 29, 2026 - view the fix on GitHubDependency CVE: Added a Host-header allowlist to the viewer to block DNS rebinding. (fix merged Jul 29, 2026)30abhigyanpatwari/GitNexusHIGH48,016 stars, fix merged Aug 30, 2026 - view the fix on GitHubSSRF: Block IPv4-compatible IPv6 and NAT64 SSRF bypasses; plus bumped undici and 3 more transitive deps (GHSA-vxpw-j846-p89q / CVE-2026-12151). (fix merged Aug 30, 2026)31abhigyanpatwari/GitNexusHIGH48,016 stars, fix merged Aug 30, 2026 - view the fix on GitHubDependency CVE: Block IPv4-compatible IPv6 and NAT64 SSRF bypasses; plus bumped undici and 3 more transitive deps (GHSA-vxpw-j846-p89q / CVE-2026-12151). (fix merged Aug 30, 2026)32DeusData/codebase-memory-mcpHIGH47,391 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubMemory safety / other: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)33DeusData/codebase-memory-mcpHIGH47,391 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubCommand injection / RCE: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)34DeusData/codebase-memory-mcpHIGH47,391 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubAuth / access control: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)35DeusData/codebase-memory-mcpHIGH47,391 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubMemory safety / other: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)36DeusData/codebase-memory-mcpHIGH47,391 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubMemory safety / other: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)37DeusData/codebase-memory-mcpMEDIUM47,391 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubDNS rebinding: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)38DeusData/codebase-memory-mcpMEDIUM47,391 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubAuth / access control: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)39DeusData/codebase-memory-mcpMEDIUM47,391 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubMemory safety / other: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)40DeusData/codebase-memory-mcpMEDIUM47,391 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubMemory safety / other: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)41DeusData/codebase-memory-mcpMEDIUM47,391 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubMemory safety / other: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)42DeusData/codebase-memory-mcpLOW47,391 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubMemory safety / other: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)43DeusData/codebase-memory-mcpLOW47,391 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubAuth / access control: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)44herdrdev/herdrHIGH45,641 stars, fixed upstream Aug 7, 2026 - view the fix on GitHubAuth / access control: Enforced a SHA-256 integrity signature on updater assets, failing closed when a checksum is missing (update fail-open). (fixed upstream Aug 7, 2026)45omacom/omarchyHIGH45,590 stars, fixed upstream Aug 23, 2026 - view the fix on GitHubMemory safety / other: Blocked theme-supplied *.lua from being staged or required and switched notification-click execution to an argv vector with no shell (arbitrary code execution). (fixed upstream Aug 23, 2026)46Wei-Shaw/sub2apiHIGH44,753 stars, fix merged Aug 24, 2026 - view the fix on GitHubXSS: Bumped dompurify to patch a sanitizer-bypass XSS reachable via USE_PROFILES (CVE-2026-65913 + ~18 related advisories). (fix merged Aug 24, 2026)47JustVugg/colibriHIGH43,694 stars, advisory published Aug 5, 2026 - view the fix on GitHubCommand injection / RCE: Heap out-of-bounds write in the c/st.h safetensors loader - unvalidated tensor metadata overflows a heap buffer on model load (CWE-787). (advisory published Aug 5, 2026)48tinyhumansai/openhumanHIGH42,294 stars, fixed upstream May 21, 2026 - view the fix on GitHubAuth / access control: Fetch-metadata CSRF gate on /auth/telegram closes CSRF → session implantation - our exact recommended guard, 7 days after filing (CWE-352/384). (fixed upstream May 21, 2026)49THU-MAIC/OpenMAICHIGH41,360 stars, fix merged Sep 3, 2026 - view the fix on GitHubDependency CVE: Bumped next, js-yaml, undici, nanoid, lodash and sharp to patch disclosed CVEs (6 findings). (fix merged Sep 3, 2026)50THU-MAIC/OpenMAICHIGH41,360 stars, fix merged Sep 3, 2026 - view the fix on GitHubDependency CVE: Bumped next, js-yaml, undici, nanoid, lodash and sharp to patch disclosed CVEs (6 findings). (fix merged Sep 3, 2026)51THU-MAIC/OpenMAICHIGH41,360 stars, fix merged Sep 3, 2026 - view the fix on GitHubDependency CVE: Bumped next, js-yaml, undici, nanoid, lodash and sharp to patch disclosed CVEs (6 findings). (fix merged Sep 3, 2026)52THU-MAIC/OpenMAICHIGH41,360 stars, fix merged Sep 3, 2026 - view the fix on GitHubDependency CVE: Bumped next, js-yaml, undici, nanoid, lodash and sharp to patch disclosed CVEs (6 findings). (fix merged Sep 3, 2026)53THU-MAIC/OpenMAICHIGH41,360 stars, fix merged Sep 3, 2026 - view the fix on GitHubDependency CVE: Bumped next, js-yaml, undici, nanoid, lodash and sharp to patch disclosed CVEs (6 findings). (fix merged Sep 3, 2026)54THU-MAIC/OpenMAICHIGH41,360 stars, fix merged Sep 3, 2026 - view the fix on GitHubDependency CVE: Bumped next, js-yaml, undici, nanoid, lodash and sharp to patch disclosed CVEs (6 findings). (fix merged Sep 3, 2026)55tashfeenahmed/freellmapiHIGH40,697 stars, fix merged Jun 12, 2026 - view the fix on GitHubAuth / access control: Pin AES-256-GCM authTag length to 16 bytes on decrypt (CWE-347). (fix merged Jun 12, 2026)56lfnovo/open-notebookMEDIUM40,534 stars, fix merged Jun 13, 2026 - view the fix on GitHubDependency CVE: Bump starlette to patch CVE-2026-48710 (BadHost) auth-bypass. (fix merged Jun 13, 2026)57bytedance/UI-TARS-desktopHIGH39,373 stars, fix merged Sep 24, 2026 - view the fix on GitHubDNS rebinding: Host-header validation ahead of CORS on the Agent TARS CLI agent server, plus a token requirement off loopback - closes DNS rebinding and unauthenticated network access to an agent with shell and filesystem tools (CWE-346/350/942/1327). (fix merged Sep 24, 2026)58soxoj/maigretHIGH39,327 stars, fixed upstream Jun 17, 2026 - view the fix on GitHubXSS: Jinja2 autoescape=True + MarkupSafe link escaping to close stored XSS (CWE-79); send_from_directory to close path traversal (CWE-22). (fixed upstream Jun 17, 2026)59soxoj/maigretLOW39,327 stars, fixed upstream Jun 17, 2026 - view the fix on GitHubPath traversal: Jinja2 autoescape=True + MarkupSafe link escaping to close stored XSS (CWE-79); send_from_directory to close path traversal (CWE-22). (fixed upstream Jun 17, 2026)60chatwoot/chatwootMEDIUM38,170 stars, fixed upstream Aug 28, 2026 - view the fix on GitHubSSRF: Gated HTTP basic-auth to provider-hosted media and routed all other URLs through SafeFetch (SSRF / credential leak). (fixed upstream Aug 28, 2026)61HKUDS/Vibe-TradingMEDIUM36,498 stars, fix merged Jul 5, 2026 - view the fix on GitHubDependency CVE: Bump Pillow + langchain to patch dependency CVEs. (fix merged Jul 5, 2026)62esengine/DeepSeek-ReasonixHIGH35,956 stars, fixed upstream Aug 30, 2026 - view the fix on GitHubDNS rebinding: CSRF via DNS rebinding on the serve Host guard, plus a preview-path traversal - closed with a Host allowlist and a confinePreview boundary (CWE-352/22). (fixed upstream Aug 30, 2026)63esengine/DeepSeek-ReasonixMEDIUM35,956 stars, fixed upstream Aug 30, 2026 - view the fix on GitHubDNS rebinding: CSRF via DNS rebinding on the serve Host guard, plus a preview-path traversal - closed with a Host allowlist and a confinePreview boundary (CWE-352/22). (fixed upstream Aug 30, 2026)64jdx/miseHIGH35,330 stars, fix merged Sep 2, 2026 - view the fix on GitHubDependency CVE: Bumped self_update to clear quick-xml advisories reached transitively (cross-refs 8 published jdx/mise GHSAs). (fix merged Sep 2, 2026)65Tencent/WeKnoraHIGH35,291 stars, fixed upstream Sep 16, 2026 - view the fix on GitHubPath traversal: Hardened ValidateSQL to reject CTEs and table-function calls anywhere in a query, closing a local file read via crafted SQL (path traversal). (fixed upstream Sep 16, 2026)66davila7/claude-code-templatesHIGH32,871 stars, fixed upstream Jul 14, 2026 - view the fix on GitHubCommand injection / RCE: Sandbox-server host RCE + CSRF + wildcard-CORS fixed: argv-style spawn, exact-match CORS allowlist, loopback bind (CWE-78/352/942). (fixed upstream Jul 14, 2026)67CloakHQ/CloakBrowserHIGH32,451 stars, fix merged May 12, 2026 - view the fix on GitHubDependency CVE: Bumped tar 7.5.9→7.5.15 (2× linkpath-traversal CVEs) + isolated workflow_dispatch input to block GHA shell injection. (fix merged May 12, 2026)68CloakHQ/CloakBrowserHIGH32,451 stars, fix merged May 12, 2026 - view the fix on GitHubCommand injection / RCE: Bumped tar 7.5.9→7.5.15 (2× linkpath-traversal CVEs) + isolated workflow_dispatch input to block GHA shell injection. (fix merged May 12, 2026)69mksglu/context-modeMEDIUM32,084 stars, fix merged May 9, 2026 - view the fix on GitHubDNS rebinding: Closed a DNS-rebinding gap in the ctx_fetch_and_index SSRF guard. (fix merged May 9, 2026)70supermemoryai/supermemoryCRITICAL31,374 stars, fix merged Jun 17, 2026 - view the fix on GitHubDependency CVE: Critical dependency-CVE bump - merged silently in 7 days. (fix merged Jun 17, 2026)71decolua/9routerHIGH31,332 stars, fix merged May 10, 2026 - view the fix on GitHubAuth / access control: Scope the OAuth-callback postMessage + re-enable TLS on DNS-bypass fetches. (fix merged May 10, 2026)72karakeep-app/karakeepMEDIUM29,949 stars, fixed upstream Jul 12, 2026 - view the fix on GitHubDNS rebinding: createPinnedLookup() pins the socket to pre-validated IPs to close DNS-rebinding / TOCTOU SSRF (CWE-918/367). (fixed upstream Jul 12, 2026)73rohitg00/agentmemoryHIGH29,849 stars, fix merged May 17, 2026 - view the fix on GitHubDNS rebinding: Reject non-loopback Host headers in the viewer server (DNS rebinding, CWE-350). (fix merged May 17, 2026)74xai-org/grok-buildHIGH27,524 stars, fixed upstream Jul 16, 2026 - view the fix on GitHubCommand injection / RCE: Argument injection in the plugin-marketplace git clone/fetch path - --upload-pack + file:// allows host RCE before any plugin is staged (CWE-88/78). (fixed upstream Jul 16, 2026)75radareorg/radare2MEDIUM25,138 stars, fix merged Oct 23, 2026 - view the fix on GitHubMemory safety / other: Heap buffer overflow in the pseudo-code output of 12 arch plugins - strcpy/strcat into a fixed +128 byte scratch buffer overran on long operands (stm8 repeats them); output now built in RStrBuf (CWE-122). (fix merged Oct 23, 2026)76guillaumemeyer/watermarks-removerMEDIUM24,790 stars, fixed upstream Aug 18, 2026 - view the fix on GitHubAuth / access control: XML entity-expansion (billion-laughs) DoS in the audit_website.py sitemap parser (CWE-776). (fixed upstream Aug 18, 2026)77HKUDS/AI-TraderHIGH22,943 stars, fix merged May 13, 2026 - view the fix on GitHubAuth / access control: Rate-limit + CSPRNG + constant-time for user verification (CWE-307 / 330 / 208). (fix merged May 13, 2026)78firecrawl/pdf-inspectorMEDIUM19,731 stars, fixed upstream Aug 9, 2026 - view the fix on GitHubMemory safety / other: Two UTF-8 char-boundary panics in a crafted PDF caused DoS crashes (CWE-248). (fixed upstream Aug 9, 2026)79NVIDIA/OpenShellLOW19,212 stars, fixed upstream Sep 2, 2026 - view the fix on GitHubDependency CVE: Bumped the h2 crate 0.4.13 to 0.4.16 to patch RUSTSEC-2026-0258 (GHSA-q83h-524g-xf6h). (fixed upstream Sep 2, 2026)80rowboatlabs/rowboatHIGH18,063 stars, fix merged Jun 25, 2026 - view the fix on GitHubCommand injection / RCE: Closed an & (background) command-executor allowlist bypass (CWE-78 / 88) - 46-day turnaround. (fix merged Jun 25, 2026)81lidge-jun/opencodexLOW17,837 stars, fixed upstream Aug 1, 2026 - view the fix on GitHubMemory safety / other: Unbounded SSE-decoder buffer growth (DoS) - bounded with a mandatory turn budget across all 3 named call sites (CWE-400). (fixed upstream Aug 1, 2026)82microsoft/agent-frameworkMEDIUM14,302 stars, fix merged Sep 9, 2026 - view the fix on GitHubDependency CVE: Bumped ajv, brace-expansion, js-yaml, and nanoid to patch 5 ReDoS/DoS advisories in frontend devDependency build tooling. (fix merged Sep 9, 2026)83fuma-nama/fumadocsMEDIUM13,460 stars, fixed upstream Jul 16, 2026 - view the fix on GitHubSSRF: createProxy() open-proxy SSRF fixed: deny-by-default allowlist + per-hop redirect origin re-validation (fumadocs-openapi@11.2.2, CWE-918). (fixed upstream Jul 16, 2026)84InsForge/InsForgeHIGH13,178 stars, fixed upstream Jul 20, 2026 - view the fix on GitHubDependency CVE: Dep-bump multer ≥2.2.0 and nodemailer ≥9.0.3 - closes DoS (GHSA-72gw), CRLF injection (GHSA-268h), and OAuth TLS advisories. (fixed upstream Jul 20, 2026)85TencentCloud/CubeSandboxCRITICAL13,029 stars, fixed upstream Jul 5, 2026 - view the fix on GitHubCommand injection / RCE: validateHostPath() + configurable prefix allowlist closes unrestricted host-dir bind-mount → microVM escape / host-root RCE / cross-tenant (CWE-284/22/269). (fixed upstream Jul 5, 2026)86jo-inc/camofox-browserHIGH11,890 stars, fixed upstream Sep 10, 2026 - view the fix on GitHubSSRF: Bumped transitive qs/fast-uri/hono/js-yaml to patch disclosed CVEs (fast-uri SSRF-class URI parsing + js-yaml CPU exhaustion, plus qs/hono DoS). (fixed upstream Sep 10, 2026)87jo-inc/camofox-browserMEDIUM11,890 stars, fixed upstream Sep 10, 2026 - view the fix on GitHubSSRF: Bumped transitive qs/fast-uri/hono/js-yaml to patch disclosed CVEs (fast-uri SSRF-class URI parsing + js-yaml CPU exhaustion, plus qs/hono DoS). (fixed upstream Sep 10, 2026)88cocoindex-io/cocoindexMEDIUM11,747 stars, fix merged Jul 26, 2026 - view the fix on GitHubXSS: Validate SQL identifiers in the postgres/sqlite connectors. (fix merged Jul 26, 2026)89BigBodyCobain/ShadowbrokerMEDIUM11,358 stars, fix merged May 21, 2026 - view the fix on GitHubAuth / access control: defusedxml hardening (XXE / billion-laughs in the OpenClaw skill, CWE-776 + 611). (fix merged May 21, 2026)90presenton/presentonHIGH11,303 stars, fix merged Jun 3, 2026 - view the fix on GitHubPath traversal: Closed an nginx /static alias path traversal. (fix merged Jun 3, 2026)91omnigent-ai/omnigentHIGH11,020 stars, advisory published Jun 29, 2026 - view the fix on GitHubCommand injection / RCE: Shell-command parser no longer fails open on unrecognized gated commands - policy-bypass leading to sandbox escape (CWE-184). (advisory published Jun 29, 2026)92reconurge/flowsintMEDIUM9,913 stars, fix merged Jun 22, 2026 - view the fix on GitHubDNS rebinding: WebSocket origin/Host validation + CORS hardening (CWE-350 + 352 + 1021). (fix merged Jun 22, 2026)93dsh-market/dsh-marketLOW9,799 stars, fixed upstream Oct 8, 2026 - view the fix on GitHubDependency CVE: Bumped undici to 7.30.0, js-yaml to 4.3.2, and source-map-js to 1.2.2 to patch published dependency advisories. (fixed upstream Oct 8, 2026)94usekaneo/kaneoHIGH9,577 stars, fixed upstream Aug 5, 2026 - view the fix on GitHubSSRF: Fixed a Gitea-token leak + SSRF among 6 code findings (release 2.13.0); also bumped next to 15.5.21 for 8 disclosed advisories incl. 3 HIGH SSRF/DoS. (fixed upstream Aug 5, 2026)95Universal-Debloater-Alliance/universal-android-debloater-next-generationLOW9,550 stars, fix merged Jun 26, 2026 - view the fix on GitHubMemory safety / other: Validate the package-name charset in request_builder to block malformed entries. (fix merged Jun 26, 2026)96pacifio/atlasHIGH9,538 stars, fix merged Sep 3, 2026 - view the fix on GitHubPath traversal: Bound the ACP fs/read_text_file + fs/write_text_file handlers to the project root and stripped inline event-handler XSS (CWE-22/79); plus dep-bumps of gix/vite/mermaid/tar/js-yaml and jsonwebtoken 10.4.0 (CVE-2026-25537). (fix merged Sep 3, 2026)97pacifio/atlasHIGH9,538 stars, fix merged Sep 3, 2026 - view the fix on GitHubDependency CVE: Bound the ACP fs/read_text_file + fs/write_text_file handlers to the project root and stripped inline event-handler XSS (CWE-22/79); plus dep-bumps of gix/vite/mermaid/tar/js-yaml and jsonwebtoken 10.4.0 (CVE-2026-25537). (fix merged Sep 3, 2026)98pacifio/atlasMEDIUM9,538 stars, fix merged Sep 3, 2026 - view the fix on GitHubDependency CVE: Bound the ACP fs/read_text_file + fs/write_text_file handlers to the project root and stripped inline event-handler XSS (CWE-22/79); plus dep-bumps of gix/vite/mermaid/tar/js-yaml and jsonwebtoken 10.4.0 (CVE-2026-25537). (fix merged Sep 3, 2026)99nexu-io/html-anythingHIGH9,234 stars, fix merged May 29, 2026 - view the fix on GitHubDNS rebinding: Validate the Host header on /api/* to block DNS rebinding (CWE-350 + 352). (fix merged May 29, 2026)100basketikun/infinite-canvasMEDIUM8,946 stars, fix merged Jun 1, 2026 - view the fix on GitHubAuth / access control: CWE-601 open redirect - startsWith("/") bypass in both the Go backend and TS frontend. (fix merged Jun 1, 2026)101NomaDamas/k-skillHIGH8,090 stars, fixed upstream Aug 8, 2026 - view the fix on GitHubDependency CVE: Dep-bump fast-uri + find-my-way to patch inherited Fastify transitive advisories. (fixed upstream Aug 8, 2026)102NomaDamas/k-skillMEDIUM8,090 stars, fixed upstream Aug 8, 2026 - view the fix on GitHubDependency CVE: Dep-bump fast-uri + find-my-way to patch inherited Fastify transitive advisories. (fixed upstream Aug 8, 2026)103katanemo/planoHIGH7,099 stars, fix merged Jul 27, 2026 - view the fix on GitHubDependency CVE: Dep-bump serde_with, tokio-postgres, turbo, undici, and next to patch CVEs across the Rust and JS stacks. (fix merged Jul 27, 2026)104katanemo/planoMEDIUM7,099 stars, fix merged Jul 27, 2026 - view the fix on GitHubDependency CVE: Dep-bump serde_with, tokio-postgres, turbo, undici, and next to patch CVEs across the Rust and JS stacks. (fix merged Jul 27, 2026)105loopx-project/loopxHIGH6,413 stars, advisory published Aug 12, 2026 - view the fix on GitHubCommand injection / RCE: Wildcard CORS on the status control plane exposed machine-wide paths to any web origin (CWE-942 + 346). (advisory published Aug 12, 2026)106shy3130/tick-stock-panelHIGH6,270 stars, fixed upstream Jul 14, 2026 - view the fix on GitHubCommand injection / RCE: Three-layer strategy-code RCE fix: unconditional AST validation, dunder/subscript block, and pre-exec re-validate (CWE-94/95/284). (fixed upstream Jul 14, 2026)107google/agents-cliHIGH6,162 stars, fixed upstream Aug 24, 2026 - view the fix on GitHubPath traversal: Symlink-follow arbitrary file read (CWE-59) + agent_directory path traversal (CWE-22) in the `agents create` remote-template copy. (fixed upstream Aug 24, 2026)108google/agents-cliMEDIUM6,162 stars, fixed upstream Aug 24, 2026 - view the fix on GitHubPath traversal: Symlink-follow arbitrary file read (CWE-59) + agent_directory path traversal (CWE-22) in the `agents create` remote-template copy. (fixed upstream Aug 24, 2026)109oomol-lab/open-connectorHIGH6,080 stars, fixed upstream Aug 20, 2026 - view the fix on GitHubSSRF: Guarded provider egress to resolve hostnames and block private/link-local/metadata IPs, revalidating each redirect hop (SSRF). (fixed upstream Aug 20, 2026)110baairon/torlinkLOW5,968 stars, fix merged Jul 5, 2026 - view the fix on GitHubMemory safety / other: Sanitize terminal escape sequences in the result detail view to prevent clipboard hijacking via OSC-52 (CWE-150/116). (fix merged Jul 5, 2026)111dograh-hq/dograhHIGH5,944 stars, fix merged May 21, 2026 - view the fix on GitHubDependency CVE: Bumped python-multipart 0.0.20→0.0.27 (GHSA-wp53-j4wj-2cfg + 2 more CVEs). (fix merged May 21, 2026)112KnockOutEZ/wigoloMEDIUM5,500 stars, fix merged Oct 21, 2026 - view the fix on GitHubDependency CVE: Bumped ajv 8.17.1 to ^8.18.0 to patch a $data regex ReDoS (GHSA-2g4f-4pwh-qvx6 / CVE-2025-69873). (fix merged Oct 21, 2026)113Waishnav/devspaceHIGH5,290 stars, fix merged Jun 23, 2026 - view the fix on GitHubDependency CVE: Patched undici, ws & protobufjs dep advisories (npm audit 4 HIGH → 0). (fix merged Jun 23, 2026)114CJackHwang/ds2apiLOW4,732 stars, advisory published May 10, 2026 - view the fix on GitHubPath traversal: CWE-22 prefix path traversal + CWE-598 key leak in query params - published advisory. (advisory published May 10, 2026)115cloudflare/workers-sdkCRITICAL4,652 stars, fix merged Sep 10, 2026 - view the fix on GitHubDependency CVE: Bumped shell-quote (a direct prod dep of packages/wrangler) to patch CVE-2026-9277 (prototype-pollution -> MITM) and CVE-2026-13311. (fix merged Sep 10, 2026)116cloudflare/workers-sdkHIGH4,652 stars, fix merged Sep 10, 2026 - view the fix on GitHubDependency CVE: Bumped shell-quote (a direct prod dep of packages/wrangler) to patch CVE-2026-9277 (prototype-pollution -> MITM) and CVE-2026-13311. (fix merged Sep 10, 2026)117Open-Legal-Products/mikeHIGH4,370 stars, fix merged May 10, 2026 - view the fix on GitHubAuth / access control: filterAccessibleDocumentIds - closed a tabular IDOR at 4 entry points. (fix merged May 10, 2026)118yetone/cumoraHIGH4,015 stars, fix merged Aug 18, 2026 - view the fix on GitHubDependency CVE: Bumped axios, dompurify (prod, sanitizes untrusted HTML), nanoid and postcss to patch known CVEs (incl. GHSA-x4vx-rjvf-j5p4). (fix merged Aug 18, 2026)119yetone/cumoraMEDIUM4,015 stars, fix merged Aug 18, 2026 - view the fix on GitHubDependency CVE: Bumped axios, dompurify (prod, sanitizes untrusted HTML), nanoid and postcss to patch known CVEs (incl. GHSA-x4vx-rjvf-j5p4). (fix merged Aug 18, 2026)120Gloridust/WechatOnCloudMEDIUM3,907 stars, fix merged Jun 4, 2026 - view the fix on GitHubDNS rebinding: Gate the panel Host header to block DNS rebinding. (fix merged Jun 4, 2026)121makecindy/cindyHIGH3,852 stars, fix merged Jul 31, 2026 - view the fix on GitHubDependency CVE: Pinned builder-util-runtime to >=9.7.0, patching an Electron auto-updater dependency vulnerability (GHSA-p2f4-r6v6-j797). (fix merged Jul 31, 2026)122makecindy/cindyMEDIUM3,852 stars, fix merged Jul 31, 2026 - view the fix on GitHubDependency CVE: Pinned builder-util-runtime to >=9.7.0, patching an Electron auto-updater dependency vulnerability (GHSA-p2f4-r6v6-j797). (fix merged Jul 31, 2026)123goccy/go-jsonLOW3,754 stars, fixed upstream Oct 28, 2026 - view the fix on GitHubMemory safety / other: Path.Get panicked on a JSON null, a nil pointer or any Go struct, so one null in untrusted JSON could crash the calling goroutine; it now returns an error (CWE-476). (fixed upstream Oct 28, 2026)124strukto-ai/mirageHIGH3,717 stars, fix merged May 17, 2026 - view the fix on GitHubDNS rebinding: DNS rebinding on the FastAPI VFS daemon - Host-header allowlist (CWE-346 + 350). (fix merged May 17, 2026)125kvcache-ai/AgentENVHIGH3,691 stars, fixed upstream Aug 19, 2026 - view the fix on GitHubSSRF: Tightened sandbox host isolation + egress handling to close a host-reachability escape from the agent sandbox (CWE-918 + 284). (fixed upstream Aug 19, 2026)126vercel-labs/wtermMEDIUM3,511 stars, fix merged Apr 19, 2026 - view the fix on GitHubMemory safety / other: Strip ESC bytes from bracketed paste to prevent terminal escape-sequence injection (CWE-150). (fix merged Apr 19, 2026)127Sophomoresty/gemini-web2apiHIGH3,507 stars, fix merged Jun 2, 2026 - view the fix on GitHubAuth / access control: Honor api_keys auth in the monolithic gemini_web2api.py. (fix merged Jun 2, 2026)128cosmicstack-labs/mercury-agentCRITICAL3,456 stars, fix merged May 20, 2026 - view the fix on GitHubCommand injection / RCE: Per-segment shell-pattern check to close a CWE-78 + 184 chaining bypass. (fix merged May 20, 2026)129cpaczek/skylightHIGH3,353 stars, fix merged Jun 7, 2026 - view the fix on GitHubDNS rebinding: Validate Host/Origin headers on REST + WebSocket (CWE-1385 + 350 DNS rebinding). (fix merged Jun 7, 2026)130HarnessRouter/harnessrouterCRITICAL3,304 stars, advisory published Oct 6, 2026 - view the fix on GitHubAuth / access control: Service-only routes that write an organization's provider connections now refuse relayed bearers, so a made-up token sent through a multi-tenant console can no longer repoint another org's model connection (CWE-862 + 863). (advisory published Oct 6, 2026)131music-assistant/serverHIGH3,227 stars, fixed upstream Jul 14, 2026 - view the fix on GitHubPath traversal: Removed unauth /imageproxy file-read, scoped config-secret endpoint, fixed OAuth-callback reflected XSS → session takeover (CWE-22/862/79). (fixed upstream Jul 14, 2026)132music-assistant/serverHIGH3,227 stars, fixed upstream Jul 14, 2026 - view the fix on GitHubAuth / access control: Removed unauth /imageproxy file-read, scoped config-secret endpoint, fixed OAuth-callback reflected XSS → session takeover (CWE-22/862/79). (fixed upstream Jul 14, 2026)133music-assistant/serverMEDIUM3,227 stars, fixed upstream Jul 14, 2026 - view the fix on GitHubXSS: Removed unauth /imageproxy file-read, scoped config-secret endpoint, fixed OAuth-callback reflected XSS → session takeover (CWE-22/862/79). (fixed upstream Jul 14, 2026)134butterbase-ai/butterbaseMEDIUM3,031 stars, fix merged Jun 2, 2026 - view the fix on GitHubAuth / access control: Pin AES-256-GCM auth tag length to 16 bytes on decrypt. (fix merged Jun 2, 2026)135microsoft/mxcLOW2,983 stars, fix merged Sep 28, 2026 - view the fix on GitHubDependency CVE: Bumped the anyhow crate 1.0.102 to 1.0.103 to patch RUSTSEC-2026-0190 (unsound Error::downcast_mut()). (fix merged Sep 28, 2026)136icereed/paperless-gptLOW2,796 stars, fixed upstream Oct 12, 2026 - view the fix on GitHubDependency CVE: Bumped golang.org/x/image to v0.45.0 and quic-go to v0.59.1 to patch published image-decoder and HTTP/3 denial-of-service advisories. (fixed upstream Oct 12, 2026)137zarazhangrui/lark-coding-agent-bridgeHIGH2,744 stars, fixed upstream Jun 3, 2026 - view the fix on GitHubAuth / access control: Gate cloud-doc comment mentions to an allowlist (CWE-862). (fixed upstream Jun 3, 2026)138theagentrouter/agent-routerHIGH2,284 stars, fix merged Oct 7, 2026 - view the fix on GitHubAuth / access control: MCP session resume now checks the caller's subject, and the Helm chart generates a random session-encryption seed kept in a Secret instead of shipping a public default or passing it in pod args (CWE-863 + 798). (fix merged Oct 7, 2026)139theagentrouter/agent-routerMEDIUM2,284 stars, fix merged Oct 7, 2026 - view the fix on GitHubAuth / access control: MCP session resume now checks the caller's subject, and the Helm chart generates a random session-encryption seed kept in a Secret instead of shipping a public default or passing it in pod args (CWE-863 + 798). (fix merged Oct 7, 2026)140future-agi/future-agiMEDIUM2,198 stars, fix merged May 20, 2026 - view the fix on GitHubXSS: Bundle of 4: XSS + TLS-off Vapi + CSV formula injection + GHA shell injection. (fix merged May 20, 2026)141Doorman11991/smallcodeHIGH2,030 stars, fix merged May 23, 2026 - view the fix on GitHubSSRF: Closed SSRF guard bypasses (IPv4-mapped IPv6 + browser redirects) - 0-day turnaround. (fix merged May 23, 2026)142RabbyHub/RabbyMEDIUM1,924 stars, fixed upstream Oct 30, 2026 - view the fix on GitHubMemory safety / other: Any unconnected website could read the active wallet account (address, alias, keyring type) with no connect prompt (CWE-200). (fixed upstream Oct 30, 2026)143haydenbleasel/files-sdkMEDIUM1,601 stars, fix merged May 21, 2026 - view the fix on GitHubAuth / access control: Reject .meta.json sidecar namespace collisions (CWE-73 + 345). (fix merged May 21, 2026)144MiroShark/MiroSharkHIGH1,480 stars, fix merged Sep 5, 2026 - view the fix on GitHubDependency CVE: Bumped mistune to patch a RecursionError DoS (Dependabot alert #74). (fix merged Sep 5, 2026)145ClaudioDrews/memory-osMEDIUM1,381 stars, fix merged Jun 10, 2026 - view the fix on GitHubPath traversal: Path.is_relative_to for WIKI_PATH containment in ingest_file (CWE-22). (fix merged Jun 10, 2026)146apache/strutsMEDIUM1,371 stars, fix merged Oct 15, 2026 - view the fix on GitHubXSS: Eliminate inline event handlers and fix single-quote script breakout in tag onclick strings (CWE-79 XSS). (fix merged Oct 15, 2026)147run-liyi/wechatpayHIGH1,329 stars, fixed upstream Jun 1, 2026 - view the fix on GitHubXSS: Electron stored-XSS → RCE via a malicious bill spreadsheet (CWE-79 + 94). (fixed upstream Jun 1, 2026)148sybil-solutions/codex-shimHIGH1,071 stars, fix merged May 27, 2026 - view the fix on GitHubDNS rebinding: Validate the Host header to block DNS rebinding. (fix merged May 27, 2026)149ComposioHQ/trustclawMEDIUM901 stars, fix merged Jun 3, 2026 - view the fix on GitHubAuth / access control: Timing-safe comparison for API-token auth (CWE-208). (fix merged Jun 3, 2026)150openclaw/clawpatchHIGH814 stars, fixed upstream May 30, 2026 - view the fix on GitHubCommand injection / RCE: Mapper-generator command-injection coverage (CWE-78 + 88) - fix landed in #111. (fixed upstream May 30, 2026)151Capminal/capminal-contractsHIGH96 stars, fixed upstream Sep 6, 2026 - view the fix on GitHubMemory safety / other: Mint-curve over-issuance - price a mint against the supply it creates, not the supply it starts from. (fixed upstream Sep 6, 2026)

25 public advisories and 5 CVEs assigned so far.
Each vendor was told privately first; an entry appears here once the GitHub advisory is published or our write-up is out.



RUN NOW