Teire
ChangesScanDocsTrust
Teire

When upstream breaks, Teire fixes your code.

teire-dev/teireSystem status
Built on
  • NVIDIA NemotronNVIDIA Nemotron
  • Nebius Token FactoryNebius Token Factory
  • dependabot-coredependabot-core
  • Cloudflare

Product

Scan a repoChangesInstall on GitHubDashboardDemo video

Developers

DocsGitHubCLI and MCPteire.yml schemanpm

Trust

How Teire runsSource code
Worker running
Watching 44 sources · checked 10 h ago

Changes

2158
in the catalog
492
new this week
62
dated ahead
  • Google Gemini10 h ago · 57
  • Goon demand · 87
  • Maven · Gradleon demand · 44
  • npmon demand · 913
  • Groq18 h ago · 43
  • Cargoon demand · 108
  • PyPIon demand · 243
  • Twitch18 h ago · 5
  • Bitbucket19 h ago · 0
  • GitLab19 h ago · 43
  • Context719 h ago · 0
  • RubyGems19 h ago · 83
  • Tavily19 h ago · 0
  • GitHub19 h ago · 23
  • Stripe19 h ago · 167

What's new

  • npm packages17 h agominimatch 3.1.5 → 11.0.3: changes the arguments of 2 function(s)●breaks on upgrade+13
  • RubyGems packages18 h agoactivesupport: Possible DoS vulnerability in Active Support safe_constantize✕security+8
  • RubyGems packages18 h ago

Picked up, last 30 days

one dot per day · bigger is more
  • npm

Every change

activestorage: Possible arbitrary file read and remote code execution in Active Storage video previews, analysis and image processing
✕security
+6
  • RubyGems packages18 h agoactionview: Possible XSS vulnerability in Action View highlight helper✕security+3
  • RubyGems packages18 h agoactionpack: Possible sensitive session information leak in Active Storage proxy mode✕security+6
  • RubyGems packages18 h agoactionmailbox: Possible signature replay in Action Mailbox Mailgun ingress✕security
  • PyPI packages18 h agoopenai 0.28.1 → 3.41.0: changes parameters of 5 function(s)●breaks on upgrade+21
  • Cargo packages18 h agopin-utils: `pin-utils` is unmaintained✕security
  • GitLab19 h agometrics.prometheus.port deprecated–notice+42
  • npm packages2 d ago@ruby/prism 1.9.0 → 2.1.0: removes 12 API(s)●breaks on upgrade+5
  • GitHub2 d agorerank-multilingual-v2.0 shutdown✕already broken+22
  • npm packages3 d agoopenai 4.104.0 → 7.45.1: removes 38 import path(s)●breaks on upgrade+34
    • 913
    : 110 on 2026-10-27, 18 on 2026-10-28, 22 on 2026-10-29, 738 on 2026-10-30, 6 on 2026-10-31, 5 on 2026-11-02, 5 on 2026-11-03, 6 on 2026-11-04, 3 on 2026-11-05
  • PyPI243: 143 on 2026-10-27, 9 on 2026-10-28, 3 on 2026-10-29, 76 on 2026-10-30, 3 on 2026-10-31, 3 on 2026-11-02, 3 on 2026-11-03, 3 on 2026-11-05
  • Stripe167: 167 on 2026-10-27
  • OpenAI145: 145 on 2026-10-27
  • Cargo108: 20 on 2026-10-27, 56 on 2026-10-28, 31 on 2026-10-30, 1 on 2026-11-05
  • Go87: 7 on 2026-10-27, 43 on 2026-10-28, 37 on 2026-10-30
  • RubyGems83: 17 on 2026-10-27, 6 on 2026-10-28, 16 on 2026-10-30, 4 on 2026-10-31, 7 on 2026-11-01, 12 on 2026-11-02, 21 on 2026-11-05
  • Perplexity59: 35 on 2026-10-27, 3 on 2026-10-30, 21 on 2026-11-03
  • Google Gemini57: 57 on 2026-10-27
  • Maven · Gradle44: 28 on 2026-10-27, 3 on 2026-10-29, 4 on 2026-10-30, 9 on 2026-10-31
    • 10-08today

    Coming up

    1. Nebius Token FactoryNebius Token FactoryNebius Token Factory · 11in 3 days
    2. Google GeminiGoogle Gemini · 5in 11 days
    3. relay-linkapi.relay.linkin 18 days
    541–600 of 2158

    2026-10

    • npm packages
      qs: qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set
      npm · qs✕security
      Quote
      “qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set”
      osv.dev ›
    • npm packages
      qs: qs's arrayLimit bypass in comma parsing allows denial of service
      npm · qs✕security
      Quote
      “qs's arrayLimit bypass in comma parsing allows denial of service”
      osv.dev ›
    • npm packages
      re2js: RE2JS: Quadratic-time denial of service in re2js lookbehind matching
      npm · re2js✕security
      Quote
      “RE2JS: Quadratic-time denial of service in re2js lookbehind matching”
      osv.dev ›
    • npm packages
      react-draft-wysiwyg: React Draft Wysiwyg Cross-Site Scripting (XSS) via the Embedded Button
      npm · react-draft-wysiwyg✕security
      Quote
      “React Draft Wysiwyg Cross-Site Scripting (XSS) via the Embedded Button”
      osv.dev ›
    • npm packages
      react-router: React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation
      npm · react-router✕security
      Quote
      “React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation”
      osv.dev ›
    • npm packages
      react-router: React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration
      npm · react-router✕security
      Quote
      “React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration”
      osv.dev ›
    • npm packages
      react-router: React Router has unexpected external redirect via untrusted paths
      npm · react-router✕security
      Quote
      “React Router has unexpected external redirect via untrusted paths”
      osv.dev ›
    • npm packages
      react-router: React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)
      npm · react-router✕security
      Quote
      “React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)”
      osv.dev ›
    • npm packages
      rollup: DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS
      npm · rollup✕security
      Quote
      “DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS”
      osv.dev ›
    • npm packages
      rollup: Rollup 4 has Arbitrary File Write via Path Traversal
      npm · rollup✕security
      Quote
      “Rollup 4 has Arbitrary File Write via Path Traversal”
      osv.dev ›
    • npm packages
      secp256k1: secp256k1-node allows private key extraction over ECDH
      npm · secp256k1✕security
      Quote
      “secp256k1-node allows private key extraction over ECDH”
      osv.dev ›
    • npm packages
      send: send vulnerable to template injection that can lead to XSS
      npm · send✕security
      Quote
      “send vulnerable to template injection that can lead to XSS”
      osv.dev ›
    • npm packages
      serialize-javascript: Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()
      npm · serialize-javascript✕security
      Quote
      “Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()”
      osv.dev ›
    • npm packages
      serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript
      npm · serialize-javascript✕security
      Quote
      “Cross-site Scripting (XSS) in serialize-javascript”
      osv.dev ›
    • npm packages
      serialize-javascript: Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body
      npm · serialize-javascript✕security
      Quote
      “Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body”
      osv.dev ›
    • npm packages
      serialize-javascript: Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects
      npm · serialize-javascript✕security
      Quote
      “Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects”
      osv.dev ›
    • npm packages
      seroval: Seroval: Script injection through RegExp sources in serialized output
      npm · seroval✕security
      Quote
      “Seroval: Script injection through RegExp sources in serialized output”
      osv.dev ›
    • npm packages
      seroval: Seroval: Code injection through a typed array's own constructor property
      npm · seroval✕security
      Quote
      “Seroval: Code injection through a typed array's own constructor property”
      osv.dev ›
    • npm packages
      serve-static: serve-static vulnerable to template injection that can lead to XSS
      npm · serve-static✕security
      Quote
      “serve-static vulnerable to template injection that can lead to XSS”
      osv.dev ›
    • npm packages
      sha.js: sha.js is missing type checks leading to hash rewind and passing on crafted data
      npm · sha.js✕security
      Quote
      “sha.js is missing type checks leading to hash rewind and passing on crafted data”
      osv.dev ›
    • npm packages
      sharp: sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591
      npm · sharp✕security
      Quote
      “sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591”
      osv.dev ›
    • npm packages
      sharp: sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545
      npm · sharp✕security
      Quote
      “sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545”
      osv.dev ›
    • npm packages
      sharp: sharp : Vulnerability in librsvg dependency CVE-2026-96889
      npm · sharp✕security
      Quote
      “sharp : Vulnerability in librsvg dependency CVE-2026-96889”
      osv.dev ›
    • npm packages
      shell-quote: shell-quote: `quote()` command injection via a line terminator in a token after a `{ comment }` token
      npm · shell-quote✕security
      Quote
      “shell-quote: quote() command injection via a line terminator in a token after a { comment } token”
      osv.dev ›
    • npm packages
      socket.io-parser: Socket.IO: Zero-attachment Memory Exhaustion
      npm · socket.io-parser✕security
      Quote
      “Socket.IO: Zero-attachment Memory Exhaustion”
      osv.dev ›
    • npm packages
      socket.io-parser: socket.io allows an unbounded number of binary attachments
      npm · socket.io-parser✕security
      Quote
      “socket.io allows an unbounded number of binary attachments”
      osv.dev ›
    • npm packages
      source-map-js: source-map-js allows event-loop denial of service through indexed source-map section offsets
      npm · source-map-js✕security
      Quote
      “source-map-js allows event-loop denial of service through indexed source-map section offsets”
      osv.dev ›
    • npm packages
      stream-json: stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)
      npm · stream-json✕security
      Quote
      “stream-json: pick/ignore/filter/replace filters are O(depth²) on nested input — small crafted JSON blocks the event loop for seconds→minutes (DoS)”
      osv.dev ›
    • npm packages
      stream-json: stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunk
      npm · stream-json✕security
      Quote
      “stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunk”
      osv.dev ›
    • npm packages
      stream-json: stream-json has a prototype pollution issue: Assembler writes this.current[this.key] on plain objects
      npm · stream-json✕security
      Quote
      “stream-json has a prototype pollution issue: Assembler writes this.current[this.key] on plain objects”
      osv.dev ›
    • npm packages
      svgo: SVGO removeScripts plugin leaves some executable scripts intact
      npm · svgo✕security
      Quote
      “SVGO removeScripts plugin leaves some executable scripts intact”
      osv.dev ›
    • npm packages
      svgo: SVGO: removeScripts incompletely sanitizes executable HTML in SVG foreignObject elements
      npm · svgo✕security
      Quote
      “SVGO: removeScripts incompletely sanitizes executable HTML in SVG foreignObject elements”
      osv.dev ›
    • npm packages
      svgo: SVGO: removeScripts allows executable links through namespace and control-character bypasses
      npm · svgo✕security
      Quote
      “SVGO: removeScripts allows executable links through namespace and control-character bypasses”
      osv.dev ›
    • npm packages
      systeminformation: systeminformation vulnerable to Windows command injection in services() through Unicode quotation marks
      npm · systeminformation✕security
      Quote
      “systeminformation vulnerable to Windows command injection in services() through Unicode quotation marks”
      osv.dev ›
    • npm packages
      tar-fs: tar-fs can extract outside the specified dir with a specific tarball
      npm · tar-fs✕security
      Quote
      “tar-fs can extract outside the specified dir with a specific tarball”
      osv.dev ›
    • npm packages
      tar-fs: tar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar File
      npm · tar-fs✕security
      Quote
      “tar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar File”
      osv.dev ›
    • npm packages
      tar-fs: tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball
      npm · tar-fs✕security
      Quote
      “tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball”
      osv.dev ›
    • npm packages
      tar: node-tar: Decompression/parse DoS via unlimited input
      npm · tar✕security
      Quote
      “node-tar: Decompression/parse DoS via unlimited input”
      osv.dev ›
    • npm packages
      tar: node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal
      npm · tar✕security
      Quote
      “node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal”
      osv.dev ›
    • npm packages
      tar: Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction
      npm · tar✕security
      Quote
      “Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction”
      osv.dev ›
    • npm packages
      tar: node-tar is Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization
      npm · tar✕security
      Quote
      “node-tar is Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization”
      osv.dev ›
    • npm packages
      tar: node-tar: Negative tar entry size causes infinite loop in archive replace
      npm · tar✕security
      Quote
      “node-tar: Negative tar entry size causes infinite loop in archive replace”
      osv.dev ›
    • npm packages
      tar: node-tar Symlink Path Traversal via Drive-Relative Linkpath
      npm · tar✕security
      Quote
      “node-tar Symlink Path Traversal via Drive-Relative Linkpath”
      osv.dev ›
    • npm packages
      tar: Denial of service while parsing a tar file due to lack of folders count validation
      npm · tar✕security
      Quote
      “Denial of service while parsing a tar file due to lack of folders count validation”
      osv.dev ›
    • npm packages
      tar: node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records
      npm · tar✕security
      Quote
      “node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records”
      osv.dev ›
    • npm packages
      tar: tar has Hardlink Path Traversal via Drive-Relative Linkpath
      npm · tar✕security
      Quote
      “tar has Hardlink Path Traversal via Drive-Relative Linkpath”
      osv.dev ›
    • npm packages
      tar: node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection
      npm · tar✕security
      Quote
      “node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection”
      osv.dev ›
    • npm packages
      tar: Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS
      npm · tar✕security
      Quote
      “Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS”
      osv.dev ›
    • npm packages
      tar: node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)
      npm · tar✕security
      Quote
      “node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)”
      osv.dev ›
    • npm packages
      tar: node-tar: Process crash via PAX numeric path type confusion
      npm · tar✕security
      Quote
      “node-tar: Process crash via PAX numeric path type confusion”
      osv.dev ›
    • npm packages
      toml: toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()
      npm · toml✕security
      Quote
      “toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()”
      osv.dev ›
    • npm packages
      toml: toml-node: Uncontrolled Recursion
      npm · toml✕security
      Quote
      “toml-node: Uncontrolled Recursion”
      osv.dev ›
    • npm packages
      toml: toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse()
      npm · toml✕security
      Quote
      “toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse()”
      osv.dev ›
    • npm packages
      toml: toml-node: Uncontrolled resource consumption (CPU DoS) via unbounded-length integer literals in toml.parse()
      npm · toml✕security
      Quote
      “toml-node: Uncontrolled resource consumption (CPU DoS) via unbounded-length integer literals in toml.parse()”
      osv.dev ›
    • npm packages
      toml: toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype
      npm · toml✕security
      Quote
      “toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype”
      osv.dev ›
    • npm packages
      toml: toml-node: Prototype Pollution Leads to `Object.prototype` Corruption via `__proto__` Key-Path Desynchronization
      npm · toml✕security
      Quote
      “toml-node: Prototype Pollution Leads to Object.prototype Corruption via __proto__ Key-Path Desynchronization”
      osv.dev ›

    2026-11

    • npm packages
      request: Server-Side Request Forgery in Request
      npm · request✕security
      Quote
      “Server-Side Request Forgery in Request”
      osv.dev ›
    • npm packages
      semver: semver vulnerable to Regular Expression Denial of Service
      npm · semver✕security
      Quote
      “semver vulnerable to Regular Expression Denial of Service”
      osv.dev ›
    • npm packages
      tmp: tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter
      npm · tmp✕security
      Quote
      “tmp allows arbitrary temporary file / directory write via symbolic link dir parameter”
      osv.dev ›
    • npm packages
      tmp: tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape
      npm · tmp✕security
      Quote
      “tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape”
      osv.dev ›
    ‹ Previous10 / 36Next ›
  • AnthropicAnthropicclaude-sonnet-4-5-20250929in 24 days
  • OpenAIOpenAIOpenAI · 3in 25 days
    • 14 more ›