gitxray

Welcome to Gitxray Gitxray short for Git X-Ray is a multifaceted security tool designed for use on GitHub repositories. It can serve many purposes, including OSINT and Forensics. gitxray leverages public GitHub REST APIs to gather information that would otherwise be very time-consuming to obtain...

allstar

Allstar !IMPORTANT La GitHub App de Allstar alojada por OpenSSF ha sido retirada. Allstar, el subproyecto de OpenSSF Scorecard, continúa manteniéndose: ahora debes ejecutarlo tú mismo, ya sea como una GitHub Action o como un daemon de servicio. Consulta ossf/allstar881 para más detalles. Si tu...

securitylab

GitHub Security Lab This is the main git repository of GitHub Security Lab. We use it for these main purposes: We share with our community some best practices about security research and vulnerability disclosures in our docs We use issues on this repo to track CodeQL bounty requests. We use it fo...

Reposilite >= 3.3.0, < 3.5.12 - Arbitrary File Read

Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM ecosystem. Reposilite v3.5.10 is affected by an Arbitrary File Read vulnerability via path traversal while serving expanded javadoc files. Reposilite has addressed this issue in version...

GHSA-2X7J-588G-CCC2

creationtimestamp| type| source ---|---|--- 2026-09-09 00:32:15+00:00| seen| https://gist.github.com/alon710/bd83a6e5a1c5d7e3eb1a208578e25c78...

GHSA-WMMP-3585-3RMP

creationtimestamp| type| source ---|---|--- 2026-09-08 23:32:32+00:00| seen| https://gist.github.com/alon710/5d16343ca1e4ea17a35c27f6e94b12c6 2026-09-09 00:00:05+00:00| seen| https://gist.github.com/alon710/5d16343ca1e4ea17a35c27f6e94b12c6...

GHSA-R3HF-PF7X-WGQG vulnerabilities

Vulnerabilities for packages: eco-python-openssl...

GHSA-66R2-5GWJ-GXM2

creationtimestamp| type| source ---|---|--- 2026-09-05 11:31:54+00:00| seen| https://gist.github.com/alon710/e67772431cb25b3e742f3376d1f6891a...

GHSA-9WHR-FJ92-HCRC vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-7Q9C-HPX7-9CWM

creationtimestamp| type| source ---|---|--- 2026-09-04 22:33:22+00:00| seen| https://gist.github.com/alon710/7b5f9a5f3085441ccfaee4e599346158 2026-09-05 00:01:05+00:00| seen| https://gist.github.com/alon710/7b5f9a5f3085441ccfaee4e599346158 2026-09-05 01:30:02+00:00| seen|...

GHSA-W48P-5MMW-J389 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-RWWX-MFV4-VPRJ vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-J524-J2M2-2MCV vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-W2W2-QQH4-9QM8 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-3357-HR3F-V266 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-55GR-F7M4-MRQX vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-QVQ9-HQ6P-V378

creationtimestamp| type| source ---|---|--- 2026-09-03 23:31:29+00:00| seen| https://gist.github.com/alon710/6d84a03746a753dea4049dd4a31c2df7 2026-09-04 00:00:27+00:00| seen| https://gist.github.com/alon710/6d84a03746a753dea4049dd4a31c2df7...

GHSA-5JGF-P345-68V8 vulnerabilities

Vulnerabilities for packages: nextcloud-server, tileserver-gl, yaml-language-server, vitess, prism, opensearch-dashboards...

GHSA-P44J-XRQG-4XRR

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:40+00:00| seen| https://t.me/hackingAttack/11108 2026-09-02 01:03:16+00:00| seen| https://t.me/hackingAttack/11108 2026-09-08 05:00:04+00:00| published-proof-of-concept| https://t.me/hackingAttack/11108 2026-09-09 00:00:41+00:00|...

GHSA-V8P8-4W8F-QH34

creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:34+00:00| seen| https://t.me/hackingAttack/14865 2026-09-02 01:03:09+00:00| seen| https://t.me/hackingAttack/14865 2026-09-08 01:00:04+00:00| published-proof-of-concept| https://t.me/hackingAttack/14865 2026-09-09 00:00:47+00:00|...