Teire
ChangesScanDocsTrust
Teire

When upstream breaks, Teire fixes your code.

teire-dev/teireSystem status
Built on
  • NVIDIA NemotronNVIDIA Nemotron
  • Nebius Token FactoryNebius Token Factory
  • dependabot-coredependabot-core
  • Cloudflare

Product

Scan a repoChangesInstall on GitHubDashboardDemo video

Developers

DocsGitHubCLI and MCPteire.yml schemanpm

Trust

How Teire runsSource code
Worker running
Watching 44 sources · checked 11 h ago

Changes

2158
in the catalog
283
new this week
62
dated ahead
  • Google Gemini11 h ago · 57
  • Goon demand · 87
  • Maven · Gradleon demand · 44
  • npmon demand · 913
  • Groq19 h ago · 43
  • Cargoon demand · 108
  • PyPIon demand · 243
  • Twitch19 h ago · 5
  • Bitbucket20 h ago · 0
  • GitLab20 h ago · 43
  • Context720 h ago · 0
  • RubyGems20 h ago · 83
  • Tavily20 h ago · 0
  • GitHub20 h ago · 23
  • Stripe20 h ago · 167

What's new

  • npm packages18 h agominimatch 3.1.5 → 11.0.3: changes the arguments of 2 function(s)●breaks on upgrade+13
  • RubyGems packages19 h agoactivesupport: Possible DoS vulnerability in Active Support safe_constantize✕security+8
  • RubyGems packages19 h ago

Picked up, last 30 days

one dot per day · bigger is more
  • npm

Every change

activestorage: Possible arbitrary file read and remote code execution in Active Storage video previews, analysis and image processing
✕security
+6
  • RubyGems packages19 h agoactionview: Possible XSS vulnerability in Action View highlight helper✕security+3
  • RubyGems packages19 h agoactionpack: Possible sensitive session information leak in Active Storage proxy mode✕security+6
  • RubyGems packages19 h agoactionmailbox: Possible signature replay in Action Mailbox Mailgun ingress✕security
  • PyPI packages19 h agoopenai 0.28.1 → 3.41.0: changes parameters of 5 function(s)●breaks on upgrade+21
  • Cargo packages19 h agopin-utils: `pin-utils` is unmaintained✕security
  • GitLab20 h agometrics.prometheus.port deprecated–notice+42
  • npm packages2 d ago@ruby/prism 1.9.0 → 2.1.0: removes 12 API(s)●breaks on upgrade+5
  • GitHub2 d agorerank-multilingual-v2.0 shutdown✕already broken+22
  • npm packages3 d agoopenai 4.104.0 → 7.45.1: removes 38 import path(s)●breaks on upgrade+34
    • 913
    : 110 on 2026-10-27, 18 on 2026-10-28, 22 on 2026-10-29, 738 on 2026-10-30, 6 on 2026-10-31, 5 on 2026-11-02, 5 on 2026-11-03, 6 on 2026-11-04, 3 on 2026-11-05
  • PyPI243: 143 on 2026-10-27, 9 on 2026-10-28, 3 on 2026-10-29, 76 on 2026-10-30, 3 on 2026-10-31, 3 on 2026-11-02, 3 on 2026-11-03, 3 on 2026-11-05
  • Stripe167: 167 on 2026-10-27
  • OpenAI145: 145 on 2026-10-27
  • Cargo108: 20 on 2026-10-27, 56 on 2026-10-28, 31 on 2026-10-30, 1 on 2026-11-05
  • Go87: 7 on 2026-10-27, 43 on 2026-10-28, 37 on 2026-10-30
  • RubyGems83: 17 on 2026-10-27, 6 on 2026-10-28, 16 on 2026-10-30, 4 on 2026-10-31, 7 on 2026-11-01, 12 on 2026-11-02, 21 on 2026-11-05
  • Perplexity59: 35 on 2026-10-27, 3 on 2026-10-30, 21 on 2026-11-03
  • Google Gemini57: 57 on 2026-10-27
  • Maven · Gradle44: 28 on 2026-10-27, 3 on 2026-10-29, 4 on 2026-10-30, 9 on 2026-10-31
    • 10-08today

    Coming up

    1. Nebius Token FactoryNebius Token FactoryNebius Token Factory · 11in 3 days
    2. Google GeminiGoogle Gemini · 5in 11 days
    3. relay-linkapi.relay.linkin 18 days
    601–660 of 2158

    2026-11

    • npm packages
      tough-cookie: tough-cookie Prototype Pollution vulnerability
      npm · tough-cookie✕security
      Quote
      “tough-cookie Prototype Pollution vulnerability”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent
      npm · undici✕security
      Quote
      “undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to Denial of Service via unbounded memory in the EventSource parser
      npm · undici✕security
      Quote
      “undici vulnerable to Denial of Service via unbounded memory in the EventSource parser”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects
      npm · undici✕security
      Quote
      “undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor
      npm · undici✕security
      Quote
      “undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor”
      osv.dev ›
    • npm packages
      undici: undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering
      npm · undici✕security
      Quote
      “undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens
      npm · undici✕security
      Quote
      “undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation
      npm · undici✕security
      Quote
      “undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to Denial of Service via unhandled error on excessive content-encodings
      npm · undici✕security
      Quote
      “undici vulnerable to Denial of Service via unhandled error on excessive content-encodings”
      osv.dev ›
    • npm packages
      uuid: uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided
      npm · uuid✕security
      Quote
      “uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided”
      osv.dev ›

    2026-10

    • npm packages
      underscore: Arbitrary Code Execution in underscore
      npm · underscore✕security
      Quote
      “Arbitrary Code Execution in underscore”
      osv.dev ›
    • npm packages
      underscore: Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack
      npm · underscore✕security
      Quote
      “Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to response truncation via oversized chunked responses in the dump interceptor
      npm · undici✕security
      Quote
      “undici vulnerable to response truncation via oversized chunked responses in the dump interceptor”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches
      npm · undici✕security
      Quote
      “undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches”
      osv.dev ›
    • npm packages
      undici: Undici has an HTTP Request/Response Smuggling issue
      npm · undici✕security
      Quote
      “Undici has an HTTP Request/Response Smuggling issue”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse
      npm · undici✕security
      Quote
      “undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse”
      osv.dev ›
    • npm packages
      undici: Undici proxy-authorization header not cleared on cross-origin redirect in fetch
      npm · undici✕security
      Quote
      “Undici proxy-authorization header not cleared on cross-origin redirect in fetch”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression
      npm · undici✕security
      Quote
      “undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to Denial of Service via unbounded decompression of compressed responses
      npm · undici✕security
      Quote
      “undici vulnerable to Denial of Service via unbounded decompression of compressed responses”
      osv.dev ›
    • npm packages
      undici: Undici has CRLF Injection in undici via `upgrade` option
      npm · undici✕security
      Quote
      “Undici has CRLF Injection in undici via upgrade option”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives
      npm · undici✕security
      Quote
      “undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives”
      osv.dev ›
    • npm packages
      undici: CRLF Injection in Nodejs ‘undici’ via host
      npm · undici✕security
      Quote
      “CRLF Injection in Nodejs ‘undici’ via host”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to caching and replay of unsafe HTTP method responses
      npm · undici✕security
      Quote
      “undici vulnerable to caching and replay of unsafe HTTP method responses”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to downstream response desynchronization via retry interceptor
      npm · undici✕security
      Quote
      “undici vulnerable to downstream response desynchronization via retry interceptor”
      osv.dev ›
    • npm packages
      undici: Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect
      npm · undici✕security
      Quote
      “Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect”
      osv.dev ›
    • npm packages
      undici: Use of Insufficiently Random Values in undici
      npm · undici✕security
      Quote
      “Use of Insufficiently Random Values in undici”
      osv.dev ›
    • npm packages
      undici: undici Denial of Service attack via bad certificate data
      npm · undici✕security
      Quote
      “undici Denial of Service attack via bad certificate data”
      osv.dev ›
    • npm packages
      undici: Undici: Malicious WebSocket 64-bit length overflows parser and crashes the client
      npm · undici✕security
      Quote
      “Undici: Malicious WebSocket 64-bit length overflows parser and crashes the client”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching
      npm · undici✕security
      Quote
      “undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching”
      osv.dev ›
    • npm packages
      undici: Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion
      npm · undici✕security
      Quote
      “Undici has an unbounded decompression chain in HTTP responses on Node.js Fetch API via Content-Encoding leads to resource exhaustion”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives
      npm · undici✕security
      Quote
      “undici vulnerable to cross-user information disclosure via whitespace around equals in Cache-Control directives”
      osv.dev ›
    • npm packages
      undici: Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline
      npm · undici✕security
      Quote
      “Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to CRLF Injection via blob-like body 'type' property
      npm · undici✕security
      Quote
      “undici vulnerable to CRLF Injection via blob-like body 'type' property”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to HTTP header injection via Set-Cookie percent-decoding
      npm · undici✕security
      Quote
      “undici vulnerable to HTTP header injection via Set-Cookie percent-decoding”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to Denial of Service via orphaned RetryHandler response body
      npm · undici✕security
      Quote
      “undici vulnerable to Denial of Service via orphaned RetryHandler response body”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to downstream response splitting via retry interceptor
      npm · undici✕security
      Quote
      “undici vulnerable to downstream response splitting via retry interceptor”
      osv.dev ›
    • npm packages
      undici: Regular Expression Denial of Service in Headers
      npm · undici✕security
      Quote
      “Regular Expression Denial of Service in Headers”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to Denial of Service via unrequested WebSocket subprotocol
      npm · undici✕security
      Quote
      “undici vulnerable to Denial of Service via unrequested WebSocket subprotocol”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to Denial of Service via WebSocketStream unclean close
      npm · undici✕security
      Quote
      “undici vulnerable to Denial of Service via WebSocketStream unclean close”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields
      npm · undici✕security
      Quote
      “undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields”
      osv.dev ›
    • npm packages
      undici: Undici has Unhandled Exception in WebSocket Client Due to Invalid server_max_window_bits Validation
      npm · undici✕security
      Quote
      “Undici has Unhandled Exception in WebSocket Client Due to Invalid server_max_window_bits Validation”
      osv.dev ›
    • npm packages
      undici: Undici has Unbounded Memory Consumption in WebSocket permessage-deflate Decompression
      npm · undici✕security
      Quote
      “Undici has Unbounded Memory Consumption in WebSocket permessage-deflate Decompression”
      osv.dev ›
    • npm packages
      undici: undici WebSocket client vulnerable to denial of service via fragment count bypass
      npm · undici✕security
      Quote
      “undici WebSocket client vulnerable to denial of service via fragment count bypass”
      osv.dev ›
    • npm packages
      undici: undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool
      npm · undici✕security
      Quote
      “undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool”
      osv.dev ›
    • npm packages
      undici: Undici's cookie header not cleared on cross-origin redirect in fetch
      npm · undici✕security
      Quote
      “Undici's cookie header not cleared on cross-origin redirect in fetch”
      osv.dev ›
    • npm packages
      vite: Vite has an `server.fs.deny` bypass with an invalid `request-target`
      npm · vite✕security
      Quote
      “Vite has an server.fs.deny bypass with an invalid request-target”
      osv.dev ›
    • npm packages
      vite: Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query
      npm · vite✕security
      Quote
      “Vite has a server.fs.deny bypassed for inline and raw with ?import query”
      osv.dev ›
    • npm packages
      vite: Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling
      npm · vite✕security
      Quote
      “Vite Vulnerable to Path Traversal in Optimized Deps .map Handling”
      osv.dev ›
    • npm packages
      vite: launch-editor: `fs.existsSync()` existence check can be bypassed on Windows
      npm · vite✕security
      Quote
      “launch-editor: fs.existsSync() existence check can be bypassed on Windows”
      osv.dev ›
    • npm packages
      vite: Vite DOM Clobbering gadget found in vite bundled scripts that leads to XSS
      npm · vite✕security
      Quote
      “Vite DOM Clobbering gadget found in vite bundled scripts that leads to XSS”
      osv.dev ›
    • npm packages
      vite: launch-editor: escapeCmdArgs() omits % escaping on Windows
      npm · vite✕security
      Quote
      “launch-editor: escapeCmdArgs() omits % escaping on Windows”
      osv.dev ›
    • npm packages
      vite: Vite's server.fs.deny bypassed with /. for files under project root
      npm · vite✕security
      Quote
      “Vite's server.fs.deny bypassed with /. for files under project root”
      osv.dev ›
    • npm packages
      vite: vite allows server.fs.deny bypass via backslash on Windows
      npm · vite✕security
      Quote
      “vite allows server.fs.deny bypass via backslash on Windows”
      osv.dev ›
    • npm packages
      vite: Vite's `server.fs.deny` is bypassed when using `?import&raw`
      npm · vite✕security
      Quote
      “Vite's server.fs.deny is bypassed when using ?import&raw”
      osv.dev ›
    • npm packages
      vite: Vite: Cross origin script execution through Vite custom middleware
      npm · vite✕security
      Quote
      “Vite: Cross origin script execution through Vite custom middleware”
      osv.dev ›
    • npm packages
      vite: launch-editor vulnerable to command injection via the crafted request on Windows
      npm · vite✕security
      Quote
      “launch-editor vulnerable to command injection via the crafted request on Windows”
      osv.dev ›
    • npm packages
      vite: vite: `server.fs.deny` bypass on Windows alternate paths
      npm · vite✕security
      Quote
      “vite: server.fs.deny bypass on Windows alternate paths”
      osv.dev ›
    • npm packages
      vite: Vite middleware may serve files starting with the same name with the public directory
      npm · vite✕security
      Quote
      “Vite middleware may serve files starting with the same name with the public directory”
      osv.dev ›
    • npm packages
      vite: Vite's `server.fs` settings were not applied to HTML files
      npm · vite✕security
      Quote
      “Vite's server.fs settings were not applied to HTML files”
      osv.dev ›
    • npm packages
      vite: Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket
      npm · vite✕security
      Quote
      “Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket”
      osv.dev ›
    ‹ Previous11 / 36Next ›
  • AnthropicAnthropicclaude-sonnet-4-5-20250929in 24 days
  • OpenAIOpenAIOpenAI · 3in 25 days
    • 14 more ›