aeon


Secured by aeon.

The vuln-scanner skill audits open-source agent repos, lands real fixes, and runs the disclosure pipeline end to end: scan, patch, PR or private advisory, then track to merge. Every repo below carries a fix that aeon found and shipped.

Among the companies secured
4.8MStars securedAcross 105 hardened repositories.
292.4KLargest repo securedobra/superpowers - HIGH fixed upstream.

Findings by severity

Critical - 5 (3.5%)High - 82 (58.2%)Medium - 44 (31.2%)Low - 10 (7.1%)141findings
  • Critical53.5%
  • High8258.2%
  • Medium4431.2%
  • Low107.1%

Findings by language

TypeScript - 45 (31.9%)Python - 33 (23.4%)Rust - 16 (11.3%)JavaScript - 9 (6.4%)Go - 11 (7.8%)Other - 27 (19.1%)141findings
  • TypeScript4531.9%
  • Python3323.4%
  • Rust1611.3%
  • JavaScript96.4%
  • Go117.8%
  • Other2719.1%

Findings by vuln class

Dependency CVE - 35 (24.8%)Auth / access control - 28 (19.9%)DNS rebinding - 19 (13.5%)Memory safety / other - 15 (10.6%)Command injection / RCE - 13 (9.2%)Path traversal - 12 (8.5%)SSRF - 12 (8.5%)XSS - 7 (5.0%)141findings
  • Dependency CVE3524.8%
  • Auth / access control2819.9%
  • DNS rebinding1913.5%
  • Memory safety / other1510.6%
  • Command injection / RCE139.2%
  • Path traversal128.5%
  • SSRF128.5%
  • XSS75.0%


Companies secured.

The open-source orgs aeon has hardened, orbiting the core. Each logo links straight to the fix that landed - the full ranked set is below.

aeon
Nexu logo
Headroom Labs logo
Career Ops logo
HKU Data Lab logo
DeusData logo
Alibaba logo
Tiny Humans AI logo
Tsinghua MAIC logo
ByteDance logo
Cloak logo
Supermemory logo
Karakeep logo
xAI logo
Firecrawl logo
Rowboat logo
Microsoft logo
InsForge logo
Tencent logo
CocoIndex logo
Presenton logo
Omnigent logo
Kaneo logo
NVIDIA logo
NomaDamas logo
Katanemo logo
Google logo
Dograh logo
Cloudflare logo
Strukto logo
KVCache.AI logo
Vercel logo
Music Assistant logo
Future AGI logo

Every secured repository, ranked by GitHub stars.
Live star counts as of Sep 28, 2026, refetched by the autonomous vuln-tracker.

01obra/superpowersHIGH292,398 stars, fixed upstream Jun 17, 2026 - view the fix on GitHubDNS rebinding: Per-session capability-key gate on the dev server to block DNS rebinding. (fixed upstream Jun 17, 2026)02affaan-m/ECCHIGH268,722 stars, fix merged Sep 10, 2026 - view the fix on GitHubDependency CVE: Host/Origin allowlist + validated git refs + quoted workflow input (CWE-352 + 78 + 918); bumped the lru crate to 0.18.2 to patch RUSTSEC-2026-0253. (fix merged Sep 10, 2026)03affaan-m/ECCLOW268,722 stars, fix merged Sep 10, 2026 - view the fix on GitHubDependency CVE: Host/Origin allowlist + validated git refs + quoted workflow input (CWE-352 + 78 + 918); bumped the lru crate to 0.18.2 to patch RUSTSEC-2026-0253. (fix merged Sep 10, 2026)04harry0703/MoneyPrinterTurboHIGH126,577 stars, fixed upstream Aug 22, 2026 - view the fix on GitHubAuth / access control: Missing API-key enforcement on /api/v1 routes - wired verify_token into the video and LLM-proxy routers (CWE-306). (fixed upstream Aug 22, 2026)05Graphify-Labs/graphifyHIGH122,027 stars, advisory published Sep 27, 2026 - view the fix on GitHubPath traversal: Fortran extractor strips #include directives before its cpp pass, so a scanned .F file can no longer pull absolute paths (e.g. /etc/passwd) or traverse out of the corpus into the graph output (CWE-22 + 73). (advisory published Sep 27, 2026)06nexu-io/open-designHIGH98,456 stars, fix merged May 15, 2026 - view the fix on GitHubSSRF: Resolve hostnames before approving external API base URLs (DNS bypass) + closed an FQDN SSRF bypass. (fix merged May 15, 2026)07nexu-io/open-designMEDIUM98,456 stars, fix merged May 15, 2026 - view the fix on GitHubSSRF: Resolve hostnames before approving external API base URLs (DNS bypass) + closed an FQDN SSRF bypass. (fix merged May 15, 2026)08ruvnet/RuViewHIGH95,271 stars, fix merged Sep 17, 2026 - view the fix on GitHubDNS rebinding: Host-header allowlist on the sensing-server HTTP + WS (DNS rebinding); plus a default-deny token store on the homecore-api server so it no longer starts unauthenticated (broken access control). (fix merged Sep 17, 2026)09ruvnet/RuViewMEDIUM95,271 stars, fix merged Sep 17, 2026 - view the fix on GitHubAuth / access control: Host-header allowlist on the sensing-server HTTP + WS (DNS rebinding); plus a default-deny token store on the homecore-api server so it no longer starts unauthenticated (broken access control). (fix merged Sep 17, 2026)10infiniflow/ragflowHIGH91,425 stars, fixed upstream Sep 10, 2026 - view the fix on GitHubAuth / access control: Authorization gate on GetDocumentPreview (kbDAO.Accessible) to stop cross-tenant document reads (IDOR / broken access control). (fixed upstream Sep 10, 2026)11odysseus-dev/odysseusMEDIUM87,643 stars, fix merged Jun 6, 2026 - view the fix on GitHubDNS rebinding: Closed a DNS-rebinding hole on diffusion_server (wildcard CORS + missing Host check). (fix merged Jun 6, 2026)12koala73/worldmonitorHIGH87,500 stars, fix merged Aug 1, 2026 - view the fix on GitHubDependency CVE: Bump sharp to >=0.35.0 in blog-site to patch four inherited libvips CVEs (GHSA-f88m-g3jw-g9cj). (fix merged Aug 1, 2026)13Panniantong/Agent-ReachMEDIUM85,919 stars, fix merged Jun 10, 2026 - view the fix on GitHubAuth / access control: Create credential files atomically with 0o600 (CWE-732 TOCTOU) - 0-day turnaround. (fix merged Jun 10, 2026)14opendatalab/MinerUMEDIUM80,774 stars, fixed upstream Sep 6, 2026 - view the fix on GitHubMemory safety / other: Removed the stdlib-XML OOXML parsing sinks and delegated document type detection to a hardened parser (XXE / entity-expansion DoS). (fixed upstream Sep 6, 2026)15headroomlabs-ai/headroomHIGH74,006 stars, fix merged Jun 11, 2026 - view the fix on GitHubDNS rebinding: Reject non-loopback Host on /debug + /stats/reset (DNS rebinding). (fix merged Jun 11, 2026)16ruvnet/rufloMEDIUM73,423 stars, fix merged May 19, 2026 - view the fix on GitHubAuth / access control: Verify the plugin-registry Ed25519 signature properly (CWE-347). (fix merged May 19, 2026)17career-ops-hq/career-opsHIGH72,969 stars, fix merged Jun 11, 2026 - view the fix on GitHubSSRF: Closed SSRF guard bypasses in the liveness-browser. (fix merged Jun 11, 2026)18colbymchenry/codegraphMEDIUM72,253 stars, fix merged May 21, 2026 - view the fix on GitHubPath traversal: Refuse to follow symlinks when writing the /tmp session marker (CWE-59 + 732). (fix merged May 21, 2026)19diegosouzapw/OmniRouteHIGH70,944 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubCommand injection / RCE: Gated the Skills feature's command-exec and cli-tools status routes to LOCAL_ONLY (unauthenticated sandboxed RCE). (fixed upstream Sep 15, 2026)20ZhuLinsen/daily_stock_analysisHIGH65,748 stars, fix merged Apr 30, 2026 - view the fix on GitHubPath traversal: Block path traversal in the SPA fallback route. (fix merged Apr 30, 2026)21mvanhorn/last30days-skillHIGH63,095 stars, fix merged Jun 17, 2026 - view the fix on GitHubXSS: Allowlist link URL schemes in the HTML report renderer (CWE-79 + 80 stored XSS). (fix merged Jun 17, 2026)22Alishahryar1/free-claude-codeMEDIUM56,100 stars, fix merged Apr 29, 2026 - view the fix on GitHubAuth / access control: Constant-time comparison for ANTHROPIC_AUTH_TOKEN. (fix merged Apr 29, 2026)23HKUDS/CLI-AnythingMEDIUM50,843 stars, fix merged May 20, 2026 - view the fix on GitHubAuth / access control: defusedxml for untrusted XML inputs (XXE / billion-laughs, CWE-776 + 611). (fix merged May 20, 2026)24HKUDS/nanobotHIGH48,640 stars, fixed upstream Jul 8, 2026 - view the fix on GitHubDNS rebinding: DNS-rebinding let attackers mint a WebUI gateway token and reach agent RCE (no Host/Origin check). (fixed upstream Jul 8, 2026)25abhigyanpatwari/GitNexusHIGH47,631 stars, fix merged Aug 30, 2026 - view the fix on GitHubSSRF: Block IPv4-compatible IPv6 and NAT64 SSRF bypasses; plus bumped undici and 3 more transitive deps (GHSA-vxpw-j846-p89q / CVE-2026-12151). (fix merged Aug 30, 2026)26abhigyanpatwari/GitNexusHIGH47,631 stars, fix merged Aug 30, 2026 - view the fix on GitHubDependency CVE: Block IPv4-compatible IPv6 and NAT64 SSRF bypasses; plus bumped undici and 3 more transitive deps (GHSA-vxpw-j846-p89q / CVE-2026-12151). (fix merged Aug 30, 2026)27DeusData/codebase-memory-mcpHIGH45,273 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubMemory safety / other: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)28DeusData/codebase-memory-mcpHIGH45,273 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubCommand injection / RCE: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)29DeusData/codebase-memory-mcpHIGH45,273 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubAuth / access control: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)30DeusData/codebase-memory-mcpHIGH45,273 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubMemory safety / other: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)31DeusData/codebase-memory-mcpHIGH45,273 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubMemory safety / other: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)32DeusData/codebase-memory-mcpMEDIUM45,273 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubDNS rebinding: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)33DeusData/codebase-memory-mcpMEDIUM45,273 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubAuth / access control: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)34DeusData/codebase-memory-mcpMEDIUM45,273 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubMemory safety / other: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)35DeusData/codebase-memory-mcpMEDIUM45,273 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubMemory safety / other: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)36DeusData/codebase-memory-mcpMEDIUM45,273 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubMemory safety / other: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)37DeusData/codebase-memory-mcpLOW45,273 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubMemory safety / other: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)38DeusData/codebase-memory-mcpLOW45,273 stars, fixed upstream Sep 15, 2026 - view the fix on GitHubAuth / access control: 12 advisories across the C engine, git indexer and local HTTP UI server - Cypher stack OOB, zstd heap overflow, UI-server buffer writes, base_branch option injection, Host-rebinding bypass, Windows process-kill and validator drift, updater fail-open, plus parser/glob/extractor DoS - all fixed across v0.10.0 to v0.10.8. (fixed upstream Sep 15, 2026)39omacom/omarchyHIGH43,470 stars, fixed upstream Aug 23, 2026 - view the fix on GitHubMemory safety / other: Blocked theme-supplied *.lua from being staged or required and switched notification-click execution to an argv vector with no shell (arbitrary code execution). (fixed upstream Aug 23, 2026)40Wei-Shaw/sub2apiHIGH42,976 stars, fix merged Aug 24, 2026 - view the fix on GitHubXSS: Bumped dompurify to patch a sanitizer-bypass XSS reachable via USE_PROFILES (CVE-2026-65913 + ~18 related advisories). (fix merged Aug 24, 2026)41alibaba/open-code-reviewHIGH42,170 stars, fix merged Jul 29, 2026 - view the fix on GitHubDNS rebinding: Added a Host-header allowlist to the viewer to block DNS rebinding. (fix merged Jul 29, 2026)42alibaba/open-code-reviewHIGH42,170 stars, fix merged Jul 29, 2026 - view the fix on GitHubDependency CVE: Added a Host-header allowlist to the viewer to block DNS rebinding. (fix merged Jul 29, 2026)43herdrdev/herdrHIGH41,179 stars, fixed upstream Aug 7, 2026 - view the fix on GitHubAuth / access control: Enforced a SHA-256 integrity signature on updater assets, failing closed when a checksum is missing (update fail-open). (fixed upstream Aug 7, 2026)44tinyhumansai/openhumanHIGH40,148 stars, fixed upstream May 21, 2026 - view the fix on GitHubAuth / access control: Fetch-metadata CSRF gate on /auth/telegram closes CSRF → session implantation - our exact recommended guard, 7 days after filing (CWE-352/384). (fixed upstream May 21, 2026)45lfnovo/open-notebookMEDIUM39,587 stars, fix merged Jun 13, 2026 - view the fix on GitHubDependency CVE: Bump starlette to patch CVE-2026-48710 (BadHost) auth-bypass. (fix merged Jun 13, 2026)46THU-MAIC/OpenMAICHIGH39,372 stars, fix merged Sep 3, 2026 - view the fix on GitHubDependency CVE: Bumped next, js-yaml, undici, nanoid, lodash and sharp to patch disclosed CVEs (6 findings). (fix merged Sep 3, 2026)47THU-MAIC/OpenMAICHIGH39,372 stars, fix merged Sep 3, 2026 - view the fix on GitHubDependency CVE: Bumped next, js-yaml, undici, nanoid, lodash and sharp to patch disclosed CVEs (6 findings). (fix merged Sep 3, 2026)48THU-MAIC/OpenMAICHIGH39,372 stars, fix merged Sep 3, 2026 - view the fix on GitHubDependency CVE: Bumped next, js-yaml, undici, nanoid, lodash and sharp to patch disclosed CVEs (6 findings). (fix merged Sep 3, 2026)49THU-MAIC/OpenMAICHIGH39,372 stars, fix merged Sep 3, 2026 - view the fix on GitHubDependency CVE: Bumped next, js-yaml, undici, nanoid, lodash and sharp to patch disclosed CVEs (6 findings). (fix merged Sep 3, 2026)50THU-MAIC/OpenMAICHIGH39,372 stars, fix merged Sep 3, 2026 - view the fix on GitHubDependency CVE: Bumped next, js-yaml, undici, nanoid, lodash and sharp to patch disclosed CVEs (6 findings). (fix merged Sep 3, 2026)51THU-MAIC/OpenMAICHIGH39,372 stars, fix merged Sep 3, 2026 - view the fix on GitHubDependency CVE: Bumped next, js-yaml, undici, nanoid, lodash and sharp to patch disclosed CVEs (6 findings). (fix merged Sep 3, 2026)52bytedance/UI-TARS-desktopHIGH39,143 stars, fix merged Sep 24, 2026 - view the fix on GitHubDNS rebinding: Host-header validation ahead of CORS on the Agent TARS CLI agent server, plus a token requirement off loopback - closes DNS rebinding and unauthenticated network access to an agent with shell and filesystem tools (CWE-346/350/942/1327). (fix merged Sep 24, 2026)53JustVugg/colibriHIGH38,082 stars, advisory published Aug 5, 2026 - view the fix on GitHubCommand injection / RCE: Heap out-of-bounds write in the c/st.h safetensors loader - unvalidated tensor metadata overflows a heap buffer on model load (CWE-787). (advisory published Aug 5, 2026)54soxoj/maigretHIGH38,031 stars, fixed upstream Jun 17, 2026 - view the fix on GitHubXSS: Jinja2 autoescape=True + MarkupSafe link escaping to close stored XSS (CWE-79); send_from_directory to close path traversal (CWE-22). (fixed upstream Jun 17, 2026)55soxoj/maigretLOW38,031 stars, fixed upstream Jun 17, 2026 - view the fix on GitHubPath traversal: Jinja2 autoescape=True + MarkupSafe link escaping to close stored XSS (CWE-79); send_from_directory to close path traversal (CWE-22). (fixed upstream Jun 17, 2026)56chatwoot/chatwootMEDIUM37,274 stars, fixed upstream Aug 28, 2026 - view the fix on GitHubSSRF: Gated HTTP basic-auth to provider-hosted media and routed all other URLs through SafeFetch (SSRF / credential leak). (fixed upstream Aug 28, 2026)57esengine/DeepSeek-ReasonixHIGH35,705 stars, fixed upstream Aug 30, 2026 - view the fix on GitHubDNS rebinding: CSRF via DNS rebinding on the serve Host guard, plus a preview-path traversal - closed with a Host allowlist and a confinePreview boundary (CWE-352/22). (fixed upstream Aug 30, 2026)58esengine/DeepSeek-ReasonixMEDIUM35,705 stars, fixed upstream Aug 30, 2026 - view the fix on GitHubDNS rebinding: CSRF via DNS rebinding on the serve Host guard, plus a preview-path traversal - closed with a Host allowlist and a confinePreview boundary (CWE-352/22). (fixed upstream Aug 30, 2026)59jdx/miseHIGH34,372 stars, fix merged Sep 2, 2026 - view the fix on GitHubDependency CVE: Bumped self_update to clear quick-xml advisories reached transitively (cross-refs 8 published jdx/mise GHSAs). (fix merged Sep 2, 2026)60HKUDS/Vibe-TradingMEDIUM34,214 stars, fix merged Jul 5, 2026 - view the fix on GitHubDependency CVE: Bump Pillow + langchain to patch dependency CVEs. (fix merged Jul 5, 2026)61davila7/claude-code-templatesHIGH32,048 stars, fixed upstream Jul 14, 2026 - view the fix on GitHubCommand injection / RCE: Sandbox-server host RCE + CSRF + wildcard-CORS fixed: argv-style spawn, exact-match CORS allowlist, loopback bind (CWE-78/352/942). (fixed upstream Jul 14, 2026)62CloakHQ/CloakBrowserHIGH31,760 stars, fix merged May 12, 2026 - view the fix on GitHubDependency CVE: Bumped tar 7.5.9→7.5.15 (2× linkpath-traversal CVEs) + isolated workflow_dispatch input to block GHA shell injection. (fix merged May 12, 2026)63CloakHQ/CloakBrowserHIGH31,760 stars, fix merged May 12, 2026 - view the fix on GitHubCommand injection / RCE: Bumped tar 7.5.9→7.5.15 (2× linkpath-traversal CVEs) + isolated workflow_dispatch input to block GHA shell injection. (fix merged May 12, 2026)64supermemoryai/supermemoryCRITICAL30,969 stars, fix merged Jun 17, 2026 - view the fix on GitHubDependency CVE: Critical dependency-CVE bump - merged silently in 7 days. (fix merged Jun 17, 2026)65Tencent/WeKnoraHIGH30,861 stars, fixed upstream Sep 16, 2026 - view the fix on GitHubPath traversal: Hardened ValidateSQL to reject CTEs and table-function calls anywhere in a query, closing a local file read via crafted SQL (path traversal). (fixed upstream Sep 16, 2026)66decolua/9routerHIGH29,946 stars, fix merged May 10, 2026 - view the fix on GitHubAuth / access control: Scope the OAuth-callback postMessage + re-enable TLS on DNS-bypass fetches. (fix merged May 10, 2026)67tashfeenahmed/freellmapiHIGH29,381 stars, fix merged Jun 12, 2026 - view the fix on GitHubAuth / access control: Pin AES-256-GCM authTag length to 16 bytes on decrypt (CWE-347). (fix merged Jun 12, 2026)68karakeep-app/karakeepMEDIUM29,328 stars, fixed upstream Jul 12, 2026 - view the fix on GitHubDNS rebinding: createPinnedLookup() pins the socket to pre-validated IPs to close DNS-rebinding / TOCTOU SSRF (CWE-918/367). (fixed upstream Jul 12, 2026)69rohitg00/agentmemoryHIGH28,973 stars, fix merged May 17, 2026 - view the fix on GitHubDNS rebinding: Reject non-loopback Host headers in the viewer server (DNS rebinding, CWE-350). (fix merged May 17, 2026)70xai-org/grok-buildHIGH27,135 stars, fixed upstream Jul 16, 2026 - view the fix on GitHubCommand injection / RCE: Argument injection in the plugin-marketplace git clone/fetch path - --upload-pack + file:// allows host RCE before any plugin is staged (CWE-88/78). (fixed upstream Jul 16, 2026)71mksglu/context-modeMEDIUM24,170 stars, fix merged May 9, 2026 - view the fix on GitHubDNS rebinding: Closed a DNS-rebinding gap in the ctx_fetch_and_index SSRF guard. (fix merged May 9, 2026)72guillaumemeyer/watermarks-removerMEDIUM22,994 stars, fixed upstream Aug 18, 2026 - view the fix on GitHubAuth / access control: XML entity-expansion (billion-laughs) DoS in the audit_website.py sitemap parser (CWE-776). (fixed upstream Aug 18, 2026)73HKUDS/AI-TraderHIGH22,615 stars, fix merged May 13, 2026 - view the fix on GitHubAuth / access control: Rate-limit + CSPRNG + constant-time for user verification (CWE-307 / 330 / 208). (fix merged May 13, 2026)74firecrawl/pdf-inspectorMEDIUM19,398 stars, fixed upstream Aug 9, 2026 - view the fix on GitHubMemory safety / other: Two UTF-8 char-boundary panics in a crafted PDF caused DoS crashes (CWE-248). (fixed upstream Aug 9, 2026)75rowboatlabs/rowboatHIGH17,985 stars, fix merged Jun 25, 2026 - view the fix on GitHubCommand injection / RCE: Closed an & (background) command-executor allowlist bypass (CWE-78 / 88) - 46-day turnaround. (fix merged Jun 25, 2026)76lidge-jun/opencodexLOW16,555 stars, fixed upstream Aug 1, 2026 - view the fix on GitHubMemory safety / other: Unbounded SSE-decoder buffer growth (DoS) - bounded with a mandatory turn budget across all 3 named call sites (CWE-400). (fixed upstream Aug 1, 2026)77microsoft/agent-frameworkMEDIUM13,839 stars, fix merged Sep 9, 2026 - view the fix on GitHubDependency CVE: Bumped ajv, brace-expansion, js-yaml, and nanoid to patch 5 ReDoS/DoS advisories in frontend devDependency build tooling. (fix merged Sep 9, 2026)78fuma-nama/fumadocsMEDIUM13,242 stars, fixed upstream Jul 16, 2026 - view the fix on GitHubSSRF: createProxy() open-proxy SSRF fixed: deny-by-default allowlist + per-hop redirect origin re-validation (fumadocs-openapi@11.2.2, CWE-918). (fixed upstream Jul 16, 2026)79InsForge/InsForgeHIGH13,023 stars, fixed upstream Jul 20, 2026 - view the fix on GitHubDependency CVE: Dep-bump multer ≥2.2.0 and nodemailer ≥9.0.3 - closes DoS (GHSA-72gw), CRLF injection (GHSA-268h), and OAuth TLS advisories. (fixed upstream Jul 20, 2026)80TencentCloud/CubeSandboxCRITICAL12,738 stars, fixed upstream Jul 5, 2026 - view the fix on GitHubCommand injection / RCE: validateHostPath() + configurable prefix allowlist closes unrestricted host-dir bind-mount → microVM escape / host-root RCE / cross-tenant (CWE-284/22/269). (fixed upstream Jul 5, 2026)81cocoindex-io/cocoindexMEDIUM11,608 stars, fix merged Jul 26, 2026 - view the fix on GitHubXSS: Validate SQL identifiers in the postgres/sqlite connectors. (fix merged Jul 26, 2026)82BigBodyCobain/ShadowbrokerMEDIUM11,266 stars, fix merged May 21, 2026 - view the fix on GitHubAuth / access control: defusedxml hardening (XXE / billion-laughs in the OpenClaw skill, CWE-776 + 611). (fix merged May 21, 2026)83jo-inc/camofox-browserHIGH11,251 stars, fixed upstream Sep 10, 2026 - view the fix on GitHubSSRF: Bumped transitive qs/fast-uri/hono/js-yaml to patch disclosed CVEs (fast-uri SSRF-class URI parsing + js-yaml CPU exhaustion, plus qs/hono DoS). (fixed upstream Sep 10, 2026)84jo-inc/camofox-browserMEDIUM11,251 stars, fixed upstream Sep 10, 2026 - view the fix on GitHubSSRF: Bumped transitive qs/fast-uri/hono/js-yaml to patch disclosed CVEs (fast-uri SSRF-class URI parsing + js-yaml CPU exhaustion, plus qs/hono DoS). (fixed upstream Sep 10, 2026)85presenton/presentonHIGH10,818 stars, fix merged Jun 3, 2026 - view the fix on GitHubPath traversal: Closed an nginx /static alias path traversal. (fix merged Jun 3, 2026)86omnigent-ai/omnigentHIGH10,322 stars, advisory published Jun 29, 2026 - view the fix on GitHubCommand injection / RCE: Shell-command parser no longer fails open on unrecognized gated commands - policy-bypass leading to sandbox escape (CWE-184). (advisory published Jun 29, 2026)87Universal-Debloater-Alliance/universal-android-debloater-next-generationLOW9,289 stars, fix merged Jun 26, 2026 - view the fix on GitHubMemory safety / other: Validate the package-name charset in request_builder to block malformed entries. (fix merged Jun 26, 2026)88usekaneo/kaneoHIGH9,258 stars, fixed upstream Aug 5, 2026 - view the fix on GitHubSSRF: Fixed a Gitea-token leak + SSRF among 6 code findings (release 2.13.0); also bumped next to 15.5.21 for 8 disclosed advisories incl. 3 HIGH SSRF/DoS. (fixed upstream Aug 5, 2026)89reconurge/flowsintMEDIUM8,993 stars, fix merged Jun 22, 2026 - view the fix on GitHubDNS rebinding: WebSocket origin/Host validation + CORS hardening (CWE-350 + 352 + 1021). (fix merged Jun 22, 2026)90NVIDIA/OpenShellLOW8,991 stars, fixed upstream Sep 2, 2026 - view the fix on GitHubDependency CVE: Bumped the h2 crate 0.4.13 to 0.4.16 to patch RUSTSEC-2026-0258 (GHSA-q83h-524g-xf6h). (fixed upstream Sep 2, 2026)91nexu-io/html-anythingHIGH8,968 stars, fix merged May 29, 2026 - view the fix on GitHubDNS rebinding: Validate the Host header on /api/* to block DNS rebinding (CWE-350 + 352). (fix merged May 29, 2026)92pacifio/atlasHIGH8,184 stars, fix merged Sep 3, 2026 - view the fix on GitHubPath traversal: Bound the ACP fs/read_text_file + fs/write_text_file handlers to the project root and stripped inline event-handler XSS (CWE-22/79); plus dep-bumps of gix/vite/mermaid/tar/js-yaml and jsonwebtoken 10.4.0 (CVE-2026-25537). (fix merged Sep 3, 2026)93pacifio/atlasHIGH8,184 stars, fix merged Sep 3, 2026 - view the fix on GitHubDependency CVE: Bound the ACP fs/read_text_file + fs/write_text_file handlers to the project root and stripped inline event-handler XSS (CWE-22/79); plus dep-bumps of gix/vite/mermaid/tar/js-yaml and jsonwebtoken 10.4.0 (CVE-2026-25537). (fix merged Sep 3, 2026)94pacifio/atlasMEDIUM8,184 stars, fix merged Sep 3, 2026 - view the fix on GitHubDependency CVE: Bound the ACP fs/read_text_file + fs/write_text_file handlers to the project root and stripped inline event-handler XSS (CWE-22/79); plus dep-bumps of gix/vite/mermaid/tar/js-yaml and jsonwebtoken 10.4.0 (CVE-2026-25537). (fix merged Sep 3, 2026)95NomaDamas/k-skillHIGH7,704 stars, fixed upstream Aug 8, 2026 - view the fix on GitHubDependency CVE: Dep-bump fast-uri + find-my-way to patch inherited Fastify transitive advisories. (fixed upstream Aug 8, 2026)96NomaDamas/k-skillMEDIUM7,704 stars, fixed upstream Aug 8, 2026 - view the fix on GitHubDependency CVE: Dep-bump fast-uri + find-my-way to patch inherited Fastify transitive advisories. (fixed upstream Aug 8, 2026)97basketikun/infinite-canvasMEDIUM7,123 stars, fix merged Jun 1, 2026 - view the fix on GitHubAuth / access control: CWE-601 open redirect - startsWith("/") bypass in both the Go backend and TS frontend. (fix merged Jun 1, 2026)98katanemo/planoHIGH7,068 stars, fix merged Jul 27, 2026 - view the fix on GitHubDependency CVE: Dep-bump serde_with, tokio-postgres, turbo, undici, and next to patch CVEs across the Rust and JS stacks. (fix merged Jul 27, 2026)99katanemo/planoMEDIUM7,068 stars, fix merged Jul 27, 2026 - view the fix on GitHubDependency CVE: Dep-bump serde_with, tokio-postgres, turbo, undici, and next to patch CVEs across the Rust and JS stacks. (fix merged Jul 27, 2026)100loopx-project/loopxHIGH6,081 stars, advisory published Aug 12, 2026 - view the fix on GitHubCommand injection / RCE: Wildcard CORS on the status control plane exposed machine-wide paths to any web origin (CWE-942 + 346). (advisory published Aug 12, 2026)101google/agents-cliHIGH6,021 stars, fixed upstream Aug 24, 2026 - view the fix on GitHubPath traversal: Symlink-follow arbitrary file read (CWE-59) + agent_directory path traversal (CWE-22) in the `agents create` remote-template copy. (fixed upstream Aug 24, 2026)102google/agents-cliMEDIUM6,021 stars, fixed upstream Aug 24, 2026 - view the fix on GitHubPath traversal: Symlink-follow arbitrary file read (CWE-59) + agent_directory path traversal (CWE-22) in the `agents create` remote-template copy. (fixed upstream Aug 24, 2026)103oomol-lab/open-connectorHIGH5,910 stars, fixed upstream Aug 20, 2026 - view the fix on GitHubSSRF: Guarded provider egress to resolve hostnames and block private/link-local/metadata IPs, revalidating each redirect hop (SSRF). (fixed upstream Aug 20, 2026)104baairon/torlinkLOW5,794 stars, fix merged Jul 5, 2026 - view the fix on GitHubMemory safety / other: Sanitize terminal escape sequences in the result detail view to prevent clipboard hijacking via OSC-52 (CWE-150/116). (fix merged Jul 5, 2026)105dograh-hq/dograhHIGH5,762 stars, fix merged May 21, 2026 - view the fix on GitHubDependency CVE: Bumped python-multipart 0.0.20→0.0.27 (GHSA-wp53-j4wj-2cfg + 2 more CVEs). (fix merged May 21, 2026)106shy3130/tick-stock-panelHIGH5,298 stars, fixed upstream Jul 14, 2026 - view the fix on GitHubCommand injection / RCE: Three-layer strategy-code RCE fix: unconditional AST validation, dunder/subscript block, and pre-exec re-validate (CWE-94/95/284). (fixed upstream Jul 14, 2026)107Waishnav/devspaceHIGH5,151 stars, fix merged Jun 23, 2026 - view the fix on GitHubDependency CVE: Patched undici, ws & protobufjs dep advisories (npm audit 4 HIGH → 0). (fix merged Jun 23, 2026)108CJackHwang/ds2apiLOW4,738 stars, advisory published May 10, 2026 - view the fix on GitHubPath traversal: CWE-22 prefix path traversal + CWE-598 key leak in query params - published advisory. (advisory published May 10, 2026)109cloudflare/workers-sdkCRITICAL4,590 stars, fix merged Sep 10, 2026 - view the fix on GitHubDependency CVE: Bumped shell-quote (a direct prod dep of packages/wrangler) to patch CVE-2026-9277 (prototype-pollution -> MITM) and CVE-2026-13311. (fix merged Sep 10, 2026)110cloudflare/workers-sdkHIGH4,590 stars, fix merged Sep 10, 2026 - view the fix on GitHubDependency CVE: Bumped shell-quote (a direct prod dep of packages/wrangler) to patch CVE-2026-9277 (prototype-pollution -> MITM) and CVE-2026-13311. (fix merged Sep 10, 2026)111Open-Legal-Products/mikeHIGH4,284 stars, fix merged May 10, 2026 - view the fix on GitHubAuth / access control: filterAccessibleDocumentIds - closed a tabular IDOR at 4 entry points. (fix merged May 10, 2026)112yetone/cumoraHIGH3,902 stars, fix merged Aug 18, 2026 - view the fix on GitHubDependency CVE: Bumped axios, dompurify (prod, sanitizes untrusted HTML), nanoid and postcss to patch known CVEs (incl. GHSA-x4vx-rjvf-j5p4). (fix merged Aug 18, 2026)113yetone/cumoraMEDIUM3,902 stars, fix merged Aug 18, 2026 - view the fix on GitHubDependency CVE: Bumped axios, dompurify (prod, sanitizes untrusted HTML), nanoid and postcss to patch known CVEs (incl. GHSA-x4vx-rjvf-j5p4). (fix merged Aug 18, 2026)114Gloridust/WechatOnCloudMEDIUM3,824 stars, fix merged Jun 4, 2026 - view the fix on GitHubDNS rebinding: Gate the panel Host header to block DNS rebinding. (fix merged Jun 4, 2026)115butterbase-ai/butterbaseMEDIUM3,690 stars, fix merged Jun 2, 2026 - view the fix on GitHubAuth / access control: Pin AES-256-GCM auth tag length to 16 bytes on decrypt. (fix merged Jun 2, 2026)116strukto-ai/mirageHIGH3,666 stars, fix merged May 17, 2026 - view the fix on GitHubDNS rebinding: DNS rebinding on the FastAPI VFS daemon - Host-header allowlist (CWE-346 + 350). (fix merged May 17, 2026)117kvcache-ai/AgentENVHIGH3,560 stars, fixed upstream Aug 19, 2026 - view the fix on GitHubSSRF: Tightened sandbox host isolation + egress handling to close a host-reachability escape from the agent sandbox (CWE-918 + 284). (fixed upstream Aug 19, 2026)118vercel-labs/wtermMEDIUM3,473 stars, fix merged Apr 19, 2026 - view the fix on GitHubMemory safety / other: Strip ESC bytes from bracketed paste to prevent terminal escape-sequence injection (CWE-150). (fix merged Apr 19, 2026)119Sophomoresty/gemini-web2apiHIGH3,347 stars, fix merged Jun 2, 2026 - view the fix on GitHubAuth / access control: Honor api_keys auth in the monolithic gemini_web2api.py. (fix merged Jun 2, 2026)120cpaczek/skylightHIGH3,304 stars, fix merged Jun 7, 2026 - view the fix on GitHubDNS rebinding: Validate Host/Origin headers on REST + WebSocket (CWE-1385 + 350 DNS rebinding). (fix merged Jun 7, 2026)121cosmicstack-labs/mercury-agentCRITICAL3,166 stars, fix merged May 20, 2026 - view the fix on GitHubCommand injection / RCE: Per-segment shell-pattern check to close a CWE-78 + 184 chaining bypass. (fix merged May 20, 2026)122music-assistant/serverHIGH3,116 stars, fixed upstream Jul 14, 2026 - view the fix on GitHubPath traversal: Removed unauth /imageproxy file-read, scoped config-secret endpoint, fixed OAuth-callback reflected XSS → session takeover (CWE-22/862/79). (fixed upstream Jul 14, 2026)123music-assistant/serverHIGH3,116 stars, fixed upstream Jul 14, 2026 - view the fix on GitHubAuth / access control: Removed unauth /imageproxy file-read, scoped config-secret endpoint, fixed OAuth-callback reflected XSS → session takeover (CWE-22/862/79). (fixed upstream Jul 14, 2026)124music-assistant/serverMEDIUM3,116 stars, fixed upstream Jul 14, 2026 - view the fix on GitHubXSS: Removed unauth /imageproxy file-read, scoped config-secret endpoint, fixed OAuth-callback reflected XSS → session takeover (CWE-22/862/79). (fixed upstream Jul 14, 2026)125HarnessRouter/harnessrouterCRITICAL2,906 stars, advisory published Oct 6, 2026 - view the fix on GitHubAuth / access control: Service-only routes that write an organization's provider connections now refuse relayed bearers, so a made-up token sent through a multi-tenant console can no longer repoint another org's model connection (CWE-862 + 863). (advisory published Oct 6, 2026)126makecindy/cindyHIGH2,831 stars, fix merged Jul 31, 2026 - view the fix on GitHubDependency CVE: Pinned builder-util-runtime to >=9.7.0, patching an Electron auto-updater dependency vulnerability (GHSA-p2f4-r6v6-j797). (fix merged Jul 31, 2026)127makecindy/cindyMEDIUM2,831 stars, fix merged Jul 31, 2026 - view the fix on GitHubDependency CVE: Pinned builder-util-runtime to >=9.7.0, patching an Electron auto-updater dependency vulnerability (GHSA-p2f4-r6v6-j797). (fix merged Jul 31, 2026)128zarazhangrui/lark-coding-agent-bridgeHIGH2,579 stars, fixed upstream Jun 3, 2026 - view the fix on GitHubAuth / access control: Gate cloud-doc comment mentions to an allowlist (CWE-862). (fixed upstream Jun 3, 2026)129theagentrouter/agent-routerHIGH2,193 stars, fix merged Oct 7, 2026 - view the fix on GitHubAuth / access control: MCP session resume now checks the caller's subject, and the Helm chart generates a random session-encryption seed kept in a Secret instead of shipping a public default or passing it in pod args (CWE-863 + 798). (fix merged Oct 7, 2026)130theagentrouter/agent-routerMEDIUM2,193 stars, fix merged Oct 7, 2026 - view the fix on GitHubAuth / access control: MCP session resume now checks the caller's subject, and the Helm chart generates a random session-encryption seed kept in a Secret instead of shipping a public default or passing it in pod args (CWE-863 + 798). (fix merged Oct 7, 2026)131future-agi/future-agiMEDIUM2,088 stars, fix merged May 20, 2026 - view the fix on GitHubXSS: Bundle of 4: XSS + TLS-off Vapi + CSV formula injection + GHA shell injection. (fix merged May 20, 2026)132Doorman11991/smallcodeHIGH2,029 stars, fix merged May 23, 2026 - view the fix on GitHubSSRF: Closed SSRF guard bypasses (IPv4-mapped IPv6 + browser redirects) - 0-day turnaround. (fix merged May 23, 2026)133haydenbleasel/files-sdkMEDIUM1,551 stars, fix merged May 21, 2026 - view the fix on GitHubAuth / access control: Reject .meta.json sidecar namespace collisions (CWE-73 + 345). (fix merged May 21, 2026)134MiroShark/MiroSharkHIGH1,457 stars, fix merged Sep 5, 2026 - view the fix on GitHubDependency CVE: Bumped mistune to patch a RecursionError DoS (Dependabot alert #74). (fix merged Sep 5, 2026)135microsoft/mxcLOW1,381 stars, fix merged Sep 28, 2026 - view the fix on GitHubDependency CVE: Bumped the anyhow crate 1.0.102 to 1.0.103 to patch RUSTSEC-2026-0190 (unsound Error::downcast_mut()). (fix merged Sep 28, 2026)136ClaudioDrews/memory-osMEDIUM1,373 stars, fix merged Jun 10, 2026 - view the fix on GitHubPath traversal: Path.is_relative_to for WIKI_PATH containment in ingest_file (CWE-22). (fix merged Jun 10, 2026)137run-liyi/wechatpayHIGH1,343 stars, fixed upstream Jun 1, 2026 - view the fix on GitHubXSS: Electron stored-XSS → RCE via a malicious bill spreadsheet (CWE-79 + 94). (fixed upstream Jun 1, 2026)138sybil-solutions/codex-shimHIGH1,065 stars, fix merged May 27, 2026 - view the fix on GitHubDNS rebinding: Validate the Host header to block DNS rebinding. (fix merged May 27, 2026)139ComposioHQ/trustclawMEDIUM902 stars, fix merged Jun 3, 2026 - view the fix on GitHubAuth / access control: Timing-safe comparison for API-token auth (CWE-208). (fix merged Jun 3, 2026)140openclaw/clawpatchHIGH814 stars, fixed upstream May 30, 2026 - view the fix on GitHubCommand injection / RCE: Mapper-generator command-injection coverage (CWE-78 + 88) - fix landed in #111. (fixed upstream May 30, 2026)141Capminal/capminal-contractsHIGH96 stars, fixed upstream Sep 6, 2026 - view the fix on GitHubMemory safety / other: Mint-curve over-issuance - price a mint against the supply it creates, not the supply it starts from. (fixed upstream Sep 6, 2026)

19 public advisories and 4 CVEs assigned so far.
Each vendor was told privately first; an entry appears here once the GitHub advisory is published or our write-up is out.



RUN NOW