dep-scan

Introducción OWASP dep-scan es una herramienta de auditoría de riesgos y seguridad de próxima generación basada en vulnerabilidades conocidas, avisos y limitaciones de licencia para las dependencias del proyecto. Se admiten tanto repositorios locales como imágenes de contenedores como entrada, y ...

Dependency Scanning

Component for Dependency and License Scanning This component generates a CycloneDX Software Bill of Materials, which is used by GitLab to identify a project's dependencies, and their licenses. This CycloneDX Software Bill of Materials is compatible with the GitLab taxonomy. Additionally, this...

OreNPMGuard

OreNPMGuard - Escáner de Paquetes Shai-Hulud Versión 2.0.0 - Detección Shai-Hulud 2.0 y Sistema de Prevención Mejorado Una herramienta de seguridad para detectar paquetes npm comprometidos en los ataques a la cadena de suministro Shai-Hulud septiembre de 2025 original y Shai-Hulud 2.0 noviembre d...

Vulfy

🐺 Vulfy Escáner de vulnerabilidades rápido, compatible con múltiples lenguajes, que no se anda con tonterías. 🚀 ¿Qué es Vulfy? Vulfy es un escáner de vulnerabilidades ultrarrápido que revisa las dependencias de tu proyecto en busca de problemas de seguridad conocidos en 9 lenguajes de programació...

remic

remic Vulnerability Scanner for Detecting Publicly Disclosed Vulnerabilities in Application Dependencies Usage $ remic -h NAME: remic - A simple and fast tool for detecting vulnerabilities in application dependencies USAGE: remic options file VERSION: 0.0.2 OPTIONS: --format value, -f value forma...

retire.js

Retire.js What you require you must also retire There is a vast ecosystem of JavaScript libraries available for both web and Node.js applications. While these libraries significantly accelerate development, they also require ongoing maintenance to ensure security vulnerabilities are addressed...

foxguard

foxguard Escaneo de seguridad local rápido para código, secretos, dependencias y riesgo criptográfico. Integrado en 0sec, el arnés de ciberseguridad de código abierto. npx foxguard . Por qué Más de 200 reglas integradas en 12 lenguajes fuente, además de comprobaciones de configuración y manifiest...

murphysec

中文 | EN MurphySec CLI is used for detecting vulnerable dependencies from the command-line, and also can be integrated into your CI/CD pipeline. Features 1. Analyze dependencies being used by your project, including direct and indirect dependencies 2. Detect known vulnerabilities in project...

Snyk Scan

Bitbucket Pipelines Pipe: Snyk Este pipe utiliza Snyk para encontrar, corregir y monitorear vulnerabilidades conocidas en las dependencias de tu aplicación y en la imagen de Docker. Definición YAML Agrega el siguiente fragmento a la sección de script de tu archivo bitbucket-pipelines.yml: - pipe:...

scanner-for-CVE-2025-55182-vulnerability

🛡️ GitHub Vulnerability Scanner for CVE-2025-55182 React/Next.js RCE This Python script is designed to scan all your public and private GitHub repositories for dependencies that are potentially vulnerable to CVE-2025-55182 a critical Remote Code Execution affecting specific versions of React Serve...

osv-scanner v2.6.0

Use OSV-Scanner to find existing vulnerabilities affecting your project's dependencies. OSV-Scanner provides an officially supported frontend to the OSV database and CLI interface to OSV-Scalibr that connects a project’s list of dependencies with the vulnerabilities that affect them. OSV-Scanner...

CVE-2026-87052

A flaw was found in operator-foundry. The absence of automated dependency-update and vulnerability-scanning configurations in the repository increases the risk of undetected security vulnerabilities. This lack of automated security checks could potentially lead to the inclusion of known vulnerabl...

Dependency Scanning v2.1.1

Component for Dependency and License Scanning This component generates a CycloneDX Software Bill of Materials, which is used by GitLab to identify a project's dependencies, and their licenses. This CycloneDX Software Bill of Materials is compatible with the GitLab taxonomy. Additionally, this...

vet v1.19.0

Quick Start • Documentation • Community !NOTE vet supports special mode for Agent Skills. Run vet scan --agent-skill to scan an Agent Skill hosted in a GitHub repository. Why vet? 70-90% of modern software is open source code — how do you know it's safe? Traditional SCA tools drown you in CVE...

MINI-2493-G63V-4885

Bulletin has no description...

GO-2025-4098 vulnerabilities

Vulnerabilities for packages: trivy-operator, virt-handler, dagger, grafana-alloy-fips, blob-csi, kubernetes-fips, grype, falco-no-driver, checksec, podman, neuvector-scanner, skaffold, chainctl, cluster-autoscaler-fips, node-feature-discovery, rancher, newrelic-infrastructure-agent-fips,...

GO-2026-4602 vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, cert-manager-cmctl-fips, kube-rbac-proxy-fips, kube-logging-operator, kafkaexporter, blob-csi, kube-rbac-proxy, harbor-registry-fips, dex-k8s-authenticator, flux-helm-controller, aws-iam-authenticator, kubebuilder, cert-manager-fips,...

GO-2026-4982 vulnerabilities

Vulnerabilities for packages: cert-manager-cmctl-fips, kube-rbac-proxy-fips, crossplane-provider-aws-datasync, livekit-cli, harbor-registry-fips, dex-k8s-authenticator, prometheus-statsd-exporter-fips, upwind-agent, cert-manager-fips, spqr, coder-fips, karma-fips, cloudflared-fips,...

GO-2026-4977 vulnerabilities

Vulnerabilities for packages: kube-rbac-proxy-fips, crossplane-provider-aws-datasync, upwind-agent, cert-manager-fips, coder-fips, policy-controller-fips, crossplane-fips, nifikop, crossplane-provider-aws-kafka-fips, kuma, nats-fips, k8ssandra-client-fips, crossplane-provider-aws-ecs,...

GO-2025-4155 vulnerabilities

Vulnerabilities for packages: k8ssandra-operator, datadog-operator-fips, kube-rbac-proxy-fips, go-licenses, kube-logging-operator, kafkaexporter, kube-rbac-proxy, velero-plugin-for-microsoft-azure-fips, ip-masq-agent, kubebuilder, prometheus-statsd-exporter-fips, cert-manager-fips,...