Teire
ChangesScanDocsTrust
Teire

When upstream breaks, Teire fixes your code.

teire-dev/teireSystem status
Built on
  • NVIDIA NemotronNVIDIA Nemotron
  • Nebius Token FactoryNebius Token Factory
  • dependabot-coredependabot-core
  • Cloudflare

Product

Scan a repoChangesInstall on GitHubDashboardDemo video

Developers

DocsGitHubCLI and MCPteire.yml schemanpm

Trust

How Teire runsSource code
Worker running
Watching 44 sources · checked 13 h ago

Changes

2158
in the catalog
194
new this week
62
dated ahead
  • Google Gemini13 h ago · 57
  • Goon demand · 87
  • Maven · Gradleon demand · 44
  • npmon demand · 913
  • Groq21 h ago · 43
  • Cargoon demand · 108
  • PyPIon demand · 243
  • Twitch21 h ago · 5
  • Bitbucket22 h ago · 0
  • GitLab22 h ago · 43
  • Context722 h ago · 0
  • RubyGems22 h ago · 83
  • Tavily22 h ago · 0
  • GitHub22 h ago · 23
  • Stripe22 h ago · 167

What's new

  • npm packages20 h agominimatch 3.1.5 → 11.0.3: changes the arguments of 2 function(s)●breaks on upgrade+13
  • RubyGems packages21 h agoactivesupport: Possible DoS vulnerability in Active Support safe_constantize✕security+8
  • RubyGems packages21 h ago

Picked up, last 30 days

one dot per day · bigger is more
  • npm

Every change

activestorage: Possible arbitrary file read and remote code execution in Active Storage video previews, analysis and image processing
✕security
+6
  • RubyGems packages21 h agoactionview: Possible XSS vulnerability in Action View highlight helper✕security+3
  • RubyGems packages21 h agoactionpack: Possible sensitive session information leak in Active Storage proxy mode✕security+6
  • RubyGems packages21 h agoactionmailbox: Possible signature replay in Action Mailbox Mailgun ingress✕security
  • PyPI packages21 h agoopenai 0.28.1 → 3.41.0: changes parameters of 5 function(s)●breaks on upgrade+21
  • Cargo packages21 h agopin-utils: `pin-utils` is unmaintained✕security
  • GitLab22 h agometrics.prometheus.port deprecated–notice+42
  • npm packages2 d ago@ruby/prism 1.9.0 → 2.1.0: removes 12 API(s)●breaks on upgrade+5
  • GitHub2 d agorerank-multilingual-v2.0 shutdown✕already broken+22
  • npm packages3 d agoopenai 4.104.0 → 7.45.1: removes 38 import path(s)●breaks on upgrade+34
    • 913
    : 110 on 2026-10-27, 18 on 2026-10-28, 22 on 2026-10-29, 738 on 2026-10-30, 6 on 2026-10-31, 5 on 2026-11-02, 5 on 2026-11-03, 6 on 2026-11-04, 3 on 2026-11-05
  • PyPI243: 143 on 2026-10-27, 9 on 2026-10-28, 3 on 2026-10-29, 76 on 2026-10-30, 3 on 2026-10-31, 3 on 2026-11-02, 3 on 2026-11-03, 3 on 2026-11-05
  • Stripe167: 167 on 2026-10-27
  • OpenAI145: 145 on 2026-10-27
  • Cargo108: 20 on 2026-10-27, 56 on 2026-10-28, 31 on 2026-10-30, 1 on 2026-11-05
  • Go87: 7 on 2026-10-27, 43 on 2026-10-28, 37 on 2026-10-30
  • RubyGems83: 17 on 2026-10-27, 6 on 2026-10-28, 16 on 2026-10-30, 4 on 2026-10-31, 7 on 2026-11-01, 12 on 2026-11-02, 21 on 2026-11-05
  • Perplexity59: 35 on 2026-10-27, 3 on 2026-10-30, 21 on 2026-11-03
  • Google Gemini57: 57 on 2026-10-27
  • Maven · Gradle44: 28 on 2026-10-27, 3 on 2026-10-29, 4 on 2026-10-30, 9 on 2026-10-31
    • 10-08today

    Coming up

    1. Nebius Token FactoryNebius Token FactoryNebius Token Factory · 11in 3 days
    2. Google GeminiGoogle Gemini · 5in 11 days
    3. relay-linkapi.relay.linkin 18 days
    781–840 of 2158

    2026-10

    • PyPI packages
      starlette: Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows
      PyPI · starlette✕security
      Quote
      “Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows”
      osv.dev ›
    • PyPI packages
      starlette: Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`
      PyPI · starlette✕security
      Quote
      “Starlette: Arbitrary HTTP method dispatched to HTTPEndpoint attributes via getattr”
      osv.dev ›
    • PyPI packages
      urllib3: urllib3 streaming API improperly handles highly compressed data
      PyPI · urllib3✕security
      Quote
      “urllib3 streaming API improperly handles highly compressed data”
      osv.dev ›
    • PyPI packages
      urllib3: Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)
      PyPI · urllib3✕security
      Quote
      “Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)”
      osv.dev ›
    • PyPI packages
      urllib3: urllib3: HTTPS proxy TLS configuration may be ignored or overridden
      PyPI · urllib3✕security
      Quote
      “urllib3: HTTPS proxy TLS configuration may be ignored or overridden”
      osv.dev ›
    • PyPI packages
      urllib3: urllib3: Chunked Deflate streaming can enter an infinite loop
      PyPI · urllib3✕security
      Quote
      “urllib3: Chunked Deflate streaming can enter an infinite loop”
      osv.dev ›
    • PyPI packages
      urllib3: urllib3 allows an unbounded number of links in the decompression chain
      PyPI · urllib3✕security
      Quote
      “urllib3 allows an unbounded number of links in the decompression chain”
      osv.dev ›
    • PyPI packages
      urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation
      PyPI · urllib3✕security
      Quote
      “urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation”
      osv.dev ›
    • PyPI packages
      urllib3: urllib3: Sensitive headers forwarded across origins in proxied low-level redirects
      PyPI · urllib3✕security
      Quote
      “urllib3: Sensitive headers forwarded across origins in proxied low-level redirects”
      osv.dev ›
    • PyPI packages
      urllib3: urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory
      PyPI · urllib3✕security
      Quote
      “urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory”
      osv.dev ›
    • PyPI packages
      uv: uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised
      PyPI · uv✕security
      Quote
      “uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised”
      osv.dev ›
    • PyPI packages
      virtualenv: virtualenv: Xonsh activation literals depend on the script decoding codec
      PyPI · virtualenv✕security
      Quote
      “virtualenv: Xonsh activation literals depend on the script decoding codec”
      osv.dev ›
    • PyPI packages
      virtualenv: virtualenv: Deletion recovery can change a symlink target's mode
      PyPI · virtualenv✕security
      Quote
      “virtualenv: Deletion recovery can change a symlink target's mode”
      osv.dev ›
    • PyPI packages
      virtualenv: virtualenv: Downloaded wheel selection and caching precede verification
      PyPI · virtualenv✕security
      Quote
      “virtualenv: Downloaded wheel selection and caching precede verification”
      osv.dev ›
    • PyPI packages
      virtualenv: virtualenv: Generated files can follow existing destination links
      PyPI · virtualenv✕security
      Quote
      “virtualenv: Generated files can follow existing destination links”
      osv.dev ›
    • PyPI packages
      virtualenv: virtualenv Has TOCTOU Vulnerabilities in Directory Creation
      PyPI · virtualenv✕security
      Quote
      “virtualenv Has TOCTOU Vulnerabilities in Directory Creation”
      osv.dev ›
    • PyPI packages
      virtualenv: virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST
      PyPI · virtualenv✕security
      Quote
      “virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST”
      osv.dev ›
    • PyPI packages
      virtualenv: virtualenv: Bash prompt values can change meaning under older compatibility modes
      PyPI · virtualenv✕security
      Quote
      “virtualenv: Bash prompt values can change meaning under older compatibility modes”
      osv.dev ›
    • PyPI packages
      virtualenv: virtualenv activation scripts run code from a path that contains a placeholder name
      PyPI · virtualenv✕security
      Quote
      “virtualenv activation scripts run code from a path that contains a placeholder name”
      osv.dev ›
    • PyPI packages
      virtualenv: virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use
      PyPI · virtualenv✕security
      Quote
      “virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use”
      osv.dev ›
    • PyPI packages
      virtualenv: virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection
      PyPI · virtualenv✕security
      Quote
      “virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection”
      osv.dev ›
    • PyPI packages
      virtualenv: virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote
      PyPI · virtualenv✕security
      Quote
      “virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote”
      osv.dev ›
    • PyPI packages
      virtualenv: virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax
      PyPI · virtualenv✕security
      Quote
      “virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax”
      osv.dev ›
    • PyPI packages
      virtualenv: virtualenv: Builtin creation follows linked environment directories
      PyPI · virtualenv✕security
      Quote
      “virtualenv: Builtin creation follows linked environment directories”
      osv.dev ›
    • PyPI packages
      virtualenv: virtualenv: Pip seeding with download omits wheel digest verification
      PyPI · virtualenv✕security
      Quote
      “virtualenv: Pip seeding with download omits wheel digest verification”
      osv.dev ›
    • PyPI packages
      virtualenv: virtualenv: Seeded files retain permissions from an older cache
      PyPI · virtualenv✕security
      Quote
      “virtualenv: Seeded files retain permissions from an older cache”
      osv.dev ›
    • PyPI packages
      virtualenv: virtualenv: Seed replacement does not contain metadata deletion paths
      PyPI · virtualenv✕security
      Quote
      “virtualenv: Seed replacement does not contain metadata deletion paths”
      osv.dev ›
    • PyPI packages
      virtualenv: virtualenv bash and fish activation scripts execute commands embedded in paths
      PyPI · virtualenv✕security
      Quote
      “virtualenv bash and fish activation scripts execute commands embedded in paths”
      osv.dev ›
    • PyPI packages
      virtualenv: virtualenv: Venv configuration readback can reinterpret path boundaries
      PyPI · virtualenv✕security
      Quote
      “virtualenv: Venv configuration readback can reinterpret path boundaries”
      osv.dev ›
    • PyPI packages
      virtualenv: virtualenv bash activate runs commands from an environment name with a backslash before $
      PyPI · virtualenv✕security
      Quote
      “virtualenv bash activate runs commands from an environment name with a backslash before $”
      osv.dev ›
    • PyPI packages
      virtualenv: virtualenv: Command injection via --prompt in activate.bat (batch activator)
      PyPI · virtualenv✕security
      Quote
      “virtualenv: Command injection via --prompt in activate.bat (batch activator)”
      osv.dev ›
    • PyPI packages
      werkzeug: Werkzeug safe_join() allows Windows special device names
      PyPI · werkzeug✕security
      Quote
      “Werkzeug safe_join() allows Windows special device names”
      osv.dev ›
    • PyPI packages
      werkzeug: Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain
      PyPI · werkzeug✕security
      Quote
      “Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain”
      osv.dev ›
    • PyPI packages
      werkzeug: Werkzeug safe_join() allows Windows special device names with compound extensions
      PyPI · werkzeug✕security
      Quote
      “Werkzeug safe_join() allows Windows special device names with compound extensions”
      osv.dev ›
    • PyPI packages
      werkzeug: Werkzeug safe_join not safe on Windows
      PyPI · werkzeug✕security
      Quote
      “Werkzeug safe_join not safe on Windows”
      osv.dev ›
    • PyPI packages
      werkzeug: Werkzeug safe_join() allows Windows special device names
      PyPI · werkzeug✕security
      Quote
      “Werkzeug safe_join() allows Windows special device names”
      osv.dev ›
    • PyPI packages
      werkzeug: Pallets Werkzeug Insufficient Entropy
      PyPI · werkzeug✕security
      Quote
      “Pallets Werkzeug Insufficient Entropy”
      osv.dev ›
    • PyPI packages
      werkzeug: Werkzeug safe_join() allows Windows special device names
      PyPI · werkzeug✕security
      Quote
      “Werkzeug safe_join() allows Windows special device names”
      osv.dev ›
    • PyPI packages
      werkzeug: GHSA-hrfv-mqp8-q5rw
      PyPI · werkzeug✕security
    • PyPI packages
      werkzeug: Pallets Werkzeug vulnerable to Path Traversal
      PyPI · werkzeug✕security
      Quote
      “Pallets Werkzeug vulnerable to Path Traversal”
      osv.dev ›
    • PyPI packages
      werkzeug: Incorrect parsing of nameless cookies leads to __Host- cookies bypass
      PyPI · werkzeug✕security
      Quote
      “Incorrect parsing of nameless cookies leads to __Host- cookies bypass”
      osv.dev ›
    • PyPI packages
      werkzeug: High resource usage when parsing multipart form data with many fields
      PyPI · werkzeug✕security
      Quote
      “High resource usage when parsing multipart form data with many fields”
      osv.dev ›
    • PyPI packages
      werkzeug: PYSEC-2022-203
      PyPI · werkzeug✕security
    • RubyGems packages
      activerecord: Active Record RCE bug with Serialized Columns
      RubyGems · activerecord✕security
      Quote
      “Active Record RCE bug with Serialized Columns”
      osv.dev ›
    • RubyGems packages
      activerecord: Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter
      RubyGems · activerecord✕security
      Quote
      “Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter”
      osv.dev ›
    • RubyGems packages
      activerecord: Active Record logging vulnerable to ANSI escape injection
      RubyGems · activerecord✕security
      Quote
      “Active Record logging vulnerable to ANSI escape injection”
      osv.dev ›
    • RubyGems packages
      activerecord: Active Record subject to Regular Expression Denial-of-Service (ReDoS)
      RubyGems · activerecord✕security
      Quote
      “Active Record subject to Regular Expression Denial-of-Service (ReDoS)”
      osv.dev ›

    2026-11

    • RubyGems packages
      actionmailbox: Possible signature replay in Action Mailbox Mailgun ingress
      RubyGems · actionmailbox✕security
      Quote
      “Possible signature replay in Action Mailbox Mailgun ingress”
      github.com ›
    • RubyGems packages
      actionpack: Possible restoration of destroyed sessions in Action Dispatch CacheStore
      RubyGems · actionpack✕security
      Quote
      “Possible restoration of destroyed sessions in Action Dispatch CacheStore”
      github.com ›
    • RubyGems packages
      actionpack: Possible IP spoofing in Action Dispatch RemoteIp
      RubyGems · actionpack✕security
      Quote
      “Possible IP spoofing in Action Dispatch RemoteIp”
      github.com ›
    • RubyGems packages
      actionpack: Missing SameSite attribute on session cookies from Action Pack session stores
      RubyGems · actionpack✕security
      Quote
      “Missing SameSite attribute on session cookies from Action Pack session stores”
      github.com ›
    • RubyGems packages
      actionpack: Possible cache poisoning in Action Pack content negotiation
      RubyGems · actionpack✕security
      Quote
      “Possible cache poisoning in Action Pack content negotiation”
      github.com ›
    • RubyGems packages
      actionpack: Possible DoS vulnerability in Action Controller Live streaming
      RubyGems · actionpack✕security
      Quote
      “Possible DoS vulnerability in Action Controller Live streaming”
      github.com ›
    • RubyGems packages
      actionpack: Possible Strong Parameters bypass in Parameters#each_key in Action Pack
      RubyGems · actionpack✕security
      Quote
      “Possible Strong Parameters bypass in Parameters#each_key in Action Pack”
      github.com ›
    • RubyGems packages
      actionpack: Possible sensitive session information leak in Active Storage proxy mode
      RubyGems · actionpack✕security
      Quote
      “Possible sensitive session information leak in Active Storage proxy mode”
      github.com ›
    • RubyGems packages
      actionview: Possible XSS vulnerability in Action View text helpers
      RubyGems · actionview✕security
      Quote
      “Possible XSS vulnerability in Action View text helpers”
      github.com ›
    • RubyGems packages
      actionview: Possible XSS vulnerability in Action View tag helpers
      RubyGems · actionview✕security
      Quote
      “Possible XSS vulnerability in Action View tag helpers”
      github.com ›
    • RubyGems packages
      actionview: Possible XSS vulnerability in Action View strip_tags
      RubyGems · actionview✕security
      Quote
      “Possible XSS vulnerability in Action View strip_tags”
      github.com ›
    • RubyGems packages
      actionview: Possible XSS vulnerability in Action View highlight helper
      RubyGems · actionview✕security
      Quote
      “Possible XSS vulnerability in Action View highlight helper”
      github.com ›
    • RubyGems packages
      activestorage: Possible local file disclosure in Active Storage video previews and analysis
      RubyGems · activestorage✕security
      Quote
      “Possible local file disclosure in Active Storage video previews and analysis”
      github.com ›
    ‹ Previous14 / 36Next ›
  • AnthropicAnthropicclaude-sonnet-4-5-20250929in 24 days
  • OpenAIOpenAIOpenAI · 3in 25 days
    • 14 more ›