Secured by aeon.
The vuln-scanner skill audits open-source agent repos, lands real fixes, and runs the disclosure pipeline end to end: scan, patch, PR or private advisory, then track to merge. Every repo below carries a fix that aeon found and shipped.
4.3MStars securedAcross 99 hardened repositories.
282.6KLargest repo securedobra/superpowers - HIGH fixed upstream.
Findings by severity
- Critical43.0%
- High7858.2%
- Medium4332.1%
- Low96.7%
Findings by language
- TypeScript4432.8%
- Python3223.9%
- Rust1511.2%
- JavaScript96.7%
- Go96.7%
- Other2518.7%
Findings by vuln class
- Dependency CVE3425.4%
- Auth / access control2518.7%
- DNS rebinding1813.4%
- Memory safety / other1511.2%
- Command injection / RCE129.0%
- SSRF129.0%
- Path traversal118.2%
- XSS75.2%
Companies secured.
The open-source orgs aeon has hardened, orbiting the core. Each logo links straight to the fix that landed - the full ranked set is below.
Every secured repository, ranked by GitHub stars. Live star counts as of Sep 17, 2026, refetched by the autonomous vuln-tracker.
- CRITICAL
- HIGH
- MEDIUM
- LOW
01obra/superpowersHIGH282,614Per-session capability-key gate on the dev server to block DNS rebinding. (fixed upstream Jun 17, 2026)02affaan-m/ECCHIGH+LOW252,187Host/Origin allowlist + validated git refs + quoted workflow input (CWE-352 + 78 + 918); bumped the lru crate to 0.18.2 to patch RUSTSEC-2026-0253. (fix merged Sep 10, 2026)03harry0703/MoneyPrinterTurboHIGH122,092Missing API-key enforcement on /api/v1 routes - wired verify_token into the video and LLM-proxy routers (CWE-306). (fixed upstream Aug 22, 2026)04nexu-io/open-designHIGH+MEDIUM94,572Resolve hostnames before approving external API base URLs (DNS bypass) + closed an FQDN SSRF bypass. (fix merged May 15, 2026)05ruvnet/RuViewHIGH+MEDIUM94,496Host-header allowlist on the sensing-server HTTP + WS (DNS rebinding); plus a default-deny token store on the homecore-api server so it no longer starts unauthenticated (broken access control). (fix merged Sep 17, 2026)06infiniflow/ragflowHIGH90,881Authorization gate on GetDocumentPreview (kbDAO.Accessible) to stop cross-tenant document reads (IDOR / broken access control). (fixed upstream Sep 17, 2026)07odysseus-dev/odysseusMEDIUM86,942Closed a DNS-rebinding hole on diffusion_server (wildcard CORS + missing Host check). (fix merged Jun 6, 2026)08koala73/worldmonitorHIGH85,949Bump sharp to >=0.35.0 in blog-site to patch four inherited libvips CVEs (GHSA-f88m-g3jw-g9cj). (fix merged Aug 1, 2026)09opendatalab/MinerUMEDIUM80,106Removed the stdlib-XML OOXML parsing sinks and delegated document type detection to a hardened parser (XXE / entity-expansion DoS). (fixed upstream Sep 17, 2026)10Panniantong/Agent-ReachMEDIUM78,525Create credential files atomically with 0o600 (CWE-732 TOCTOU) - 0-day turnaround. (fix merged Jun 10, 2026)11ruvnet/rufloMEDIUM71,175Verify the plugin-registry Ed25519 signature properly (CWE-347). (fix merged May 19, 2026)12career-ops-hq/career-opsHIGH70,382Closed SSRF guard bypasses in the liveness-browser. (fix merged Jun 11, 2026)13colbymchenry/codegraphMEDIUM69,902Refuse to follow symlinks when writing the /tmp session marker (CWE-59 + 732). (fix merged May 21, 2026)14headroomlabs-ai/headroomHIGH69,210Reject non-loopback Host on /debug + /stats/reset (DNS rebinding). (fix merged Jun 11, 2026)15ZhuLinsen/daily_stock_analysisHIGH64,731Block path traversal in the SPA fallback route. (fix merged Apr 30, 2026)16mvanhorn/last30days-skillHIGH61,484Allowlist link URL schemes in the HTML report renderer (CWE-79 + 80 stored XSS). (fix merged Jun 17, 2026)17Alishahryar1/free-claude-codeMEDIUM53,570Constant-time comparison for ANTHROPIC_AUTH_TOKEN. (fix merged Apr 29, 2026)18HKUDS/CLI-AnythingMEDIUM49,088defusedxml for untrusted XML inputs (XXE / billion-laughs, CWE-776 + 611). (fix merged May 20, 2026)19HKUDS/nanobotHIGH47,972DNS-rebinding let attackers mint a WebUI gateway token and reach agent RCE (no Host/Origin check). (fixed upstream Jul 8, 2026)20abhigyanpatwari/GitNexusHIGH×247,107Block IPv4-compatible IPv6 and NAT64 SSRF bypasses; plus bumped undici and 3 more transitive deps (GHSA-vxpw-j846-p89q / CVE-2026-12151). (fix merged Aug 30, 2026)21DeusData/codebase-memory-mcpHIGH+MEDIUM+LOW43,37812 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)22omacom/omarchyHIGH41,693Blocked theme-supplied *.lua from being staged or required and switched notification-click execution to an argv vector with no shell (arbitrary code execution). (fixed upstream Sep 17, 2026)23Wei-Shaw/sub2apiHIGH41,107Bumped dompurify to patch a sanitizer-bypass XSS reachable via USE_PROFILES (CVE-2026-65913 + ~18 related advisories). (fix merged Aug 24, 2026)24tinyhumansai/openhumanHIGH39,603Fetch-metadata CSRF gate on /auth/telegram closes CSRF → session implantation - our exact recommended guard, 7 days after filing (CWE-352/384). (fixed upstream May 21, 2026)25herdrdev/herdrHIGH39,176Enforced a SHA-256 integrity signature on updater assets, failing closed when a checksum is missing (update fail-open). (fixed upstream Sep 17, 2026)26lfnovo/open-notebookMEDIUM38,346Bump starlette to patch CVE-2026-48710 (BadHost) auth-bypass. (fix merged Jun 13, 2026)27soxoj/maigretHIGH+LOW37,418Jinja2 autoescape=True + MarkupSafe link escaping to close stored XSS (CWE-79); send_from_directory to close path traversal (CWE-22). (fixed upstream Jun 17, 2026)28chatwoot/chatwootMEDIUM36,907Gated HTTP basic-auth to provider-hosted media and routed all other URLs through SafeFetch (SSRF / credential leak). (fixed upstream Sep 17, 2026)29esengine/DeepSeek-ReasonixHIGH+MEDIUM35,477CSRF via DNS rebinding on the serve Host guard, plus a preview-path traversal - closed with a Host allowlist and a confinePreview boundary (CWE-352/22). (fixed upstream Aug 30, 2026)30THU-MAIC/OpenMAICHIGH×635,144Bumped next, js-yaml, undici, nanoid, lodash and sharp to patch disclosed CVEs (6 findings). (fix merged Sep 3, 2026)31jdx/miseHIGH33,756Bumped self_update to clear quick-xml advisories reached transitively (cross-refs 8 published jdx/mise GHSAs). (fix merged Sep 2, 2026)32HKUDS/Vibe-TradingMEDIUM33,167Bump Pillow + langchain to patch dependency CVEs. (fix merged Jul 5, 2026)33CloakHQ/CloakBrowserHIGH×231,245Bumped tar 7.5.9→7.5.15 (2× linkpath-traversal CVEs) + isolated workflow_dispatch input to block GHA shell injection. (fix merged May 12, 2026)34davila7/claude-code-templatesHIGH30,582Sandbox-server host RCE + CSRF + wildcard-CORS fixed: argv-style spawn, exact-match CORS allowlist, loopback bind (CWE-78/352/942). (fixed upstream Jul 14, 2026)35supermemoryai/supermemoryCRITICAL29,254Critical dependency-CVE bump - merged silently in 7 days. (fix merged Jun 17, 2026)36karakeep-app/karakeepMEDIUM28,938createPinnedLookup() pins the socket to pre-validated IPs to close DNS-rebinding / TOCTOU SSRF (CWE-918/367). (fixed upstream Jul 12, 2026)37rohitg00/agentmemoryHIGH28,115Reject non-loopback Host headers in the viewer server (DNS rebinding, CWE-350). (fix merged May 17, 2026)38JustVugg/colibriHIGH27,680Heap out-of-bounds write in the c/st.h safetensors loader - unvalidated tensor metadata overflows a heap buffer on model load (CWE-787). (advisory published Aug 5, 2026)39decolua/9routerHIGH27,317Scope the OAuth-callback postMessage + re-enable TLS on DNS-bypass fetches. (fix merged May 10, 2026)40xai-org/grok-buildHIGH26,537Argument injection in the plugin-marketplace git clone/fetch path - --upload-pack + file:// allows host RCE before any plugin is staged (CWE-88/78). (fixed upstream Jul 16, 2026)41Tencent/WeKnoraHIGH26,110Hardened ValidateSQL to reject CTEs and table-function calls anywhere in a query, closing a local file read via crafted SQL (path traversal). (fixed upstream Sep 17, 2026)42tashfeenahmed/freellmapiHIGH24,702Pin AES-256-GCM authTag length to 16 bytes on decrypt (CWE-347). (fix merged Jun 12, 2026)43HKUDS/AI-TraderHIGH22,191Rate-limit + CSPRNG + constant-time for user verification (CWE-307 / 330 / 208). (fix merged May 13, 2026)44alibaba/open-code-reviewHIGH×222,026Added a Host-header allowlist to the viewer to block DNS rebinding. (fix merged Jul 29, 2026)45guillaumemeyer/watermarks-removerMEDIUM21,627XML entity-expansion (billion-laughs) DoS in the audit_website.py sitemap parser (CWE-776). (fixed upstream Aug 18, 2026)46mksglu/context-modeMEDIUM20,514Closed a DNS-rebinding gap in the ctx_fetch_and_index SSRF guard. (fix merged May 9, 2026)47firecrawl/pdf-inspectorMEDIUM18,911Two UTF-8 char-boundary panics in a crafted PDF caused DoS crashes (CWE-248). (fixed upstream Aug 9, 2026)48rowboatlabs/rowboatHIGH17,488Closed an & (background) command-executor allowlist bypass (CWE-78 / 88) - 46-day turnaround. (fix merged Jun 25, 2026)49lidge-jun/opencodexLOW14,159Unbounded SSE-decoder buffer growth (DoS) - bounded with a mandatory turn budget across all 3 named call sites (CWE-400). (fixed upstream Aug 1, 2026)50microsoft/agent-frameworkMEDIUM13,447Bumped ajv, brace-expansion, js-yaml, and nanoid to patch 5 ReDoS/DoS advisories in frontend devDependency build tooling. (fix merged Sep 9, 2026)51fuma-nama/fumadocsMEDIUM13,108createProxy() open-proxy SSRF fixed: deny-by-default allowlist + per-hop redirect origin re-validation (fumadocs-openapi@11.2.2, CWE-918). (fixed upstream Jul 16, 2026)52InsForge/InsForgeHIGH12,861Dep-bump multer ≥2.2.0 and nodemailer ≥9.0.3 - closes DoS (GHSA-72gw), CRLF injection (GHSA-268h), and OAuth TLS advisories. (fixed upstream Jul 20, 2026)53TencentCloud/CubeSandboxCRITICAL11,904validateHostPath() + configurable prefix allowlist closes unrestricted host-dir bind-mount → microVM escape / host-root RCE / cross-tenant (CWE-284/22/269). (fixed upstream Jul 5, 2026)54cocoindex-io/cocoindexMEDIUM11,519Validate SQL identifiers in the postgres/sqlite connectors. (fix merged Jul 26, 2026)55jo-inc/camofox-browserHIGH+MEDIUM11,069Bumped transitive qs/fast-uri/hono/js-yaml to patch disclosed CVEs (fast-uri SSRF-class URI parsing + js-yaml CPU exhaustion, plus qs/hono DoS). (fixed upstream Sep 10, 2026)56BigBodyCobain/ShadowbrokerMEDIUM11,068defusedxml hardening (XXE / billion-laughs in the OpenClaw skill, CWE-776 + 611). (fix merged May 21, 2026)57presenton/presentonHIGH10,060Closed an nginx /static alias path traversal. (fix merged Jun 3, 2026)58omnigent-ai/omnigentHIGH9,756Shell-command parser no longer fails open on unrecognized gated commands - policy-bypass leading to sandbox escape (CWE-184). (advisory published Jun 29, 2026)59Universal-Debloater-Alliance/universal-android-debloater-next-generationLOW9,078Validate the package-name charset in request_builder to block malformed entries. (fix merged Jun 26, 2026)60usekaneo/kaneoHIGH9,028Fixed a Gitea-token leak + SSRF among 6 code findings (release 2.13.0); also bumped next to 15.5.21 for 8 disclosed advisories incl. 3 HIGH SSRF/DoS. (fixed upstream Aug 5, 2026)61nexu-io/html-anythingHIGH8,692Validate the Host header on /api/* to block DNS rebinding (CWE-350 + 352). (fix merged May 29, 2026)62NVIDIA/OpenShellLOW8,526Bumped the h2 crate 0.4.13 to 0.4.16 to patch RUSTSEC-2026-0258 (GHSA-q83h-524g-xf6h). (fixed upstream Sep 2, 2026)63reconurge/flowsintMEDIUM7,803WebSocket origin/Host validation + CORS hardening (CWE-350 + 352 + 1021). (fix merged Jun 22, 2026)64NomaDamas/k-skillHIGH+MEDIUM7,445Dep-bump fast-uri + find-my-way to patch inherited Fastify transitive advisories. (fixed upstream Aug 8, 2026)65katanemo/planoHIGH+MEDIUM7,046Dep-bump serde_with, tokio-postgres, turbo, undici, and next to patch CVEs across the Rust and JS stacks. (fix merged Jul 27, 2026)66basketikun/infinite-canvasMEDIUM6,158CWE-601 open redirect - startsWith("/") bypass in both the Go backend and TS frontend. (fix merged Jun 1, 2026)67google/agents-cliHIGH+MEDIUM5,900Symlink-follow arbitrary file read (CWE-59) + agent_directory path traversal (CWE-22) in the `agents create` remote-template copy. (fixed upstream Aug 24, 2026)68oomol-lab/open-connectorHIGH5,792Guarded provider egress to resolve hostnames and block private/link-local/metadata IPs, revalidating each redirect hop (SSRF). (fixed upstream Sep 17, 2026)69huangruiteng/loopxHIGH5,772Wildcard CORS on the status control plane exposed machine-wide paths to any web origin (CWE-942 + 346). (advisory published Aug 12, 2026)70baairon/torlinkLOW5,610Sanitize terminal escape sequences in the result detail view to prevent clipboard hijacking via OSC-52 (CWE-150/116). (fix merged Jul 5, 2026)71dograh-hq/dograhHIGH5,604Bumped python-multipart 0.0.20→0.0.27 (GHSA-wp53-j4wj-2cfg + 2 more CVEs). (fix merged May 21, 2026)72shy3130/tick-stock-panelHIGH4,772Three-layer strategy-code RCE fix: unconditional AST validation, dunder/subscript block, and pre-exec re-validate (CWE-94/95/284). (fixed upstream Jul 14, 2026)73CJackHwang/ds2apiLOW4,747CWE-22 prefix path traversal + CWE-598 key leak in query params - published advisory. (advisory published May 10, 2026)74cloudflare/workers-sdkCRITICAL+HIGH4,524Bumped shell-quote (a direct prod dep of packages/wrangler) to patch CVE-2026-9277 (prototype-pollution -> MITM) and CVE-2026-13311. (fix merged Sep 10, 2026)75Waishnav/devspaceHIGH4,519Patched undici, ws & protobufjs dep advisories (npm audit 4 HIGH → 0). (fix merged Jun 23, 2026)76Open-Legal-Products/mikeHIGH4,190filterAccessibleDocumentIds - closed a tabular IDOR at 4 entry points. (fix merged May 10, 2026)77Gloridust/WechatOnCloudMEDIUM3,711Gate the panel Host header to block DNS rebinding. (fix merged Jun 4, 2026)78strukto-ai/mirageHIGH3,611DNS rebinding on the FastAPI VFS daemon - Host-header allowlist (CWE-346 + 350). (fix merged May 17, 2026)79yetone/cumoraHIGH+MEDIUM3,546Bumped axios, dompurify (prod, sanitizes untrusted HTML), nanoid and postcss to patch known CVEs (incl. GHSA-x4vx-rjvf-j5p4). (fix merged Aug 18, 2026)80butterbase-ai/butterbaseMEDIUM3,469Pin AES-256-GCM auth tag length to 16 bytes on decrypt. (fix merged Jun 2, 2026)81kvcache-ai/AgentENVHIGH3,448Tightened sandbox host isolation + egress handling to close a host-reachability escape from the agent sandbox (CWE-918 + 284). (fixed upstream Aug 19, 2026)82vercel-labs/wtermMEDIUM3,440Strip ESC bytes from bracketed paste to prevent terminal escape-sequence injection (CWE-150). (fix merged Apr 19, 2026)83pacifio/atlasHIGH+MEDIUM3,293Bound the ACP fs/read_text_file + fs/write_text_file handlers to the project root and stripped inline event-handler XSS (CWE-22/79); plus dep-bumps of gix/vite/mermaid/tar/js-yaml and jsonwebtoken 10.4.0 (CVE-2026-25537). (fix merged Sep 3, 2026)84cpaczek/skylightHIGH3,240Validate Host/Origin headers on REST + WebSocket (CWE-1385 + 350 DNS rebinding). (fix merged Jun 7, 2026)85Sophomoresty/gemini-web2apiHIGH3,124Honor api_keys auth in the monolithic gemini_web2api.py. (fix merged Jun 2, 2026)86cosmicstack-labs/mercury-agentCRITICAL3,068Per-segment shell-pattern check to close a CWE-78 + 184 chaining bypass. (fix merged May 20, 2026)87music-assistant/serverHIGH+MEDIUM3,049Removed unauth /imageproxy file-read, scoped config-secret endpoint, fixed OAuth-callback reflected XSS → session takeover (CWE-22/862/79). (fixed upstream Jul 14, 2026)88makecindy/cindyHIGH+MEDIUM2,495Pinned builder-util-runtime to >=9.7.0, patching an Electron auto-updater dependency vulnerability (GHSA-p2f4-r6v6-j797). (fix merged Jul 31, 2026)89zarazhangrui/lark-coding-agent-bridgeHIGH2,456Gate cloud-doc comment mentions to an allowlist (CWE-862). (fixed upstream Jun 3, 2026)90Doorman11991/smallcodeHIGH2,022Closed SSRF guard bypasses (IPv4-mapped IPv6 + browser redirects) - 0-day turnaround. (fix merged May 23, 2026)91future-agi/future-agiMEDIUM1,944Bundle of 4: XSS + TLS-off Vapi + CSV formula injection + GHA shell injection. (fix merged May 20, 2026)92haydenbleasel/files-sdkMEDIUM1,530Reject .meta.json sidecar namespace collisions (CWE-73 + 345). (fix merged May 21, 2026)93MiroShark/MiroSharkHIGH1,448Bumped mistune to patch a RecursionError DoS (Dependabot alert #74). (fix merged Sep 5, 2026)94ClaudioDrews/memory-osMEDIUM1,355Path.is_relative_to for WIKI_PATH containment in ingest_file (CWE-22). (fix merged Jun 10, 2026)95run-liyi/wechatpayHIGH1,343Electron stored-XSS → RCE via a malicious bill spreadsheet (CWE-79 + 94). (fixed upstream Jun 1, 2026)96sybil-solutions/codex-shimHIGH1,065Validate the Host header to block DNS rebinding. (fix merged May 27, 2026)97ComposioHQ/trustclawMEDIUM892Timing-safe comparison for API-token auth (CWE-208). (fix merged Jun 3, 2026)98openclaw/clawpatchHIGH811Mapper-generator command-injection coverage (CWE-78 + 88) - fix landed in #111. (fixed upstream May 30, 2026)99Capminal/capminal-contractsHIGH95Mint-curve over-issuance - price a mint against the supply it creates, not the supply it starts from. (fixed upstream Sep 6, 2026)