Teire
ChangesScanDocsTrust
Teire

When upstream breaks, Teire fixes your code.

teire-dev/teireSystem status
Built on
  • NVIDIA NemotronNVIDIA Nemotron
  • Nebius Token FactoryNebius Token Factory
  • dependabot-coredependabot-core
  • Cloudflare

Product

Scan a repoChangesInstall on GitHubDashboardDemo video

Developers

DocsGitHubCLI and MCPteire.yml schemanpm

Trust

How Teire runsSource code
Worker running
Watching 44 sources · checked 14 h ago

Changes

2158
in the catalog
194
new this week
62
dated ahead
  • Google Gemini14 h ago · 57
  • Goon demand · 87
  • Maven · Gradleon demand · 44
  • npmon demand · 913
  • Groq21 h ago · 43
  • Cargoon demand · 108
  • PyPIon demand · 243
  • Twitch22 h ago · 5
  • Bitbucket22 h ago · 0
  • GitLab22 h ago · 43
  • Context722 h ago · 0
  • RubyGems22 h ago · 83
  • Tavily22 h ago · 0
  • GitHub22 h ago · 23
  • Stripe22 h ago · 167

What's new

  • npm packages21 h agominimatch 3.1.5 → 11.0.3: changes the arguments of 2 function(s)●breaks on upgrade+13
  • RubyGems packages21 h agoactivesupport: Possible DoS vulnerability in Active Support safe_constantize✕security+8
  • RubyGems packages21 h ago

Picked up, last 30 days

one dot per day · bigger is more
  • npm

Every change

activestorage: Possible arbitrary file read and remote code execution in Active Storage video previews, analysis and image processing
✕security
+6
  • RubyGems packages21 h agoactionview: Possible XSS vulnerability in Action View highlight helper✕security+3
  • RubyGems packages21 h agoactionpack: Possible sensitive session information leak in Active Storage proxy mode✕security+6
  • RubyGems packages21 h agoactionmailbox: Possible signature replay in Action Mailbox Mailgun ingress✕security
  • PyPI packages21 h agoopenai 0.28.1 → 3.41.0: changes parameters of 5 function(s)●breaks on upgrade+21
  • Cargo packages21 h agopin-utils: `pin-utils` is unmaintained✕security
  • GitLab22 h agometrics.prometheus.port deprecated–notice+42
  • npm packages2 d ago@ruby/prism 1.9.0 → 2.1.0: removes 12 API(s)●breaks on upgrade+5
  • GitHub2 d agorerank-multilingual-v2.0 shutdown✕already broken+22
  • npm packages3 d agoopenai 4.104.0 → 7.45.1: removes 38 import path(s)●breaks on upgrade+34
  • 913
    : 110 on 2026-10-27, 18 on 2026-10-28, 22 on 2026-10-29, 738 on 2026-10-30, 6 on 2026-10-31, 5 on 2026-11-02, 5 on 2026-11-03, 6 on 2026-11-04, 3 on 2026-11-05
  • PyPI243: 143 on 2026-10-27, 9 on 2026-10-28, 3 on 2026-10-29, 76 on 2026-10-30, 3 on 2026-10-31, 3 on 2026-11-02, 3 on 2026-11-03, 3 on 2026-11-05
  • Stripe167: 167 on 2026-10-27
  • OpenAI145: 145 on 2026-10-27
  • Cargo108: 20 on 2026-10-27, 56 on 2026-10-28, 31 on 2026-10-30, 1 on 2026-11-05
  • Go87: 7 on 2026-10-27, 43 on 2026-10-28, 37 on 2026-10-30
  • RubyGems83: 17 on 2026-10-27, 6 on 2026-10-28, 16 on 2026-10-30, 4 on 2026-10-31, 7 on 2026-11-01, 12 on 2026-11-02, 21 on 2026-11-05
  • Perplexity59: 35 on 2026-10-27, 3 on 2026-10-30, 21 on 2026-11-03
  • Google Gemini57: 57 on 2026-10-27
  • Maven · Gradle44: 28 on 2026-10-27, 3 on 2026-10-29, 4 on 2026-10-30, 9 on 2026-10-31
  • 10-08today

    Coming up

    1. Nebius Token FactoryNebius Token FactoryNebius Token Factory · 11in 3 days
    2. Google GeminiGoogle Gemini · 5in 11 days
    3. relay-linkapi.relay.linkin 18 days
    841–900 of 2158

    2026-11

    • RubyGems packages
      activestorage: Unsigned Content-Type in Active Storage GCS direct uploads with cache_control
      RubyGems · activestorage✕security
      Quote
      “Unsigned Content-Type in Active Storage GCS direct uploads with cache_control”
      github.com ›
    • RubyGems packages
      activestorage: Possible DoS vulnerability in Active Storage proxy mode via storage errors during streaming
      RubyGems · activestorage✕security
      Quote
      “Possible DoS vulnerability in Active Storage proxy mode via storage errors during streaming”
      github.com ›
    • RubyGems packages
      activestorage: Possible arbitrary file write and read in Active Storage image analysis
      RubyGems · activestorage✕security
      Quote
      “Possible arbitrary file write and read in Active Storage image analysis”
      github.com ›
    • RubyGems packages
      activestorage: Possible circumvention of file size limits in Active Storage direct uploads to Google Cloud Storage
      RubyGems · activestorage✕security
      Quote
      “Possible circumvention of file size limits in Active Storage direct uploads to Google Cloud Storage”
      github.com ›
    • RubyGems packages
      activestorage: Possible DoS vulnerability in Active Storage filename handling
      RubyGems · activestorage✕security
      Quote
      “Possible DoS vulnerability in Active Storage filename handling”
      github.com ›
    • RubyGems packages
      activestorage: Possible arbitrary file read and remote code execution in Active Storage video previews, analysis and image processing
      RubyGems · activestorage✕security
      Quote
      “Possible arbitrary file read and remote code execution in Active Storage video previews, analysis and image processing”
      github.com ›
    • RubyGems packages
      activesupport: Possible XSS vulnerability in Active Support MessagePack serializer
      RubyGems · activesupport✕security
      Quote
      “Possible XSS vulnerability in Active Support MessagePack serializer”
      github.com ›
    • RubyGems packages
      activesupport: Possible DoS vulnerability in Active Support safe_constantize
      RubyGems · activesupport✕security
      Quote
      “Possible DoS vulnerability in Active Support safe_constantize”
      github.com ›
    • RubyGems packages
      addressable: Regular Expression Denial of Service in Addressable templates with several exploded variables
      RubyGems · addressable✕security
      Quote
      “Regular Expression Denial of Service in Addressable templates with several exploded variables”
      github.com ›
    • RubyGems packages
      addressable: Addressable display_uri can show misleading hosts containing bidi and invisible characters
      RubyGems · addressable✕security
      Quote
      “Addressable display_uri can show misleading hosts containing bidi and invisible characters”
      github.com ›
    • RubyGems packages
      addressable: Addressable URI normalization resolves some dotted path segments to the wrong path
      RubyGems · addressable✕security
      Quote
      “Addressable URI normalization resolves some dotted path segments to the wrong path”
      github.com ›
    • RubyGems packages
      addressable: Addressable display_uri can show misleading hosts with invalid Punycode A-labels
      RubyGems · addressable✕security
      Quote
      “Addressable display_uri can show misleading hosts with invalid Punycode A-labels”
      github.com ›
    • RubyGems packages
      addressable: Regular Expression Denial of Service in Addressable templates with multiple variables
      RubyGems · addressable✕security
      Quote
      “Regular Expression Denial of Service in Addressable templates with multiple variables”
      github.com ›
    • RubyGems packages
      addressable: Addressable has a Regular Expression Denial of Service in Addressable templates
      RubyGems · addressable✕security
      Quote
      “Addressable has a Regular Expression Denial of Service in Addressable templates”
      osv.dev ›
    • RubyGems packages
      addressable: Regular Expression Denial of Service in Addressable templates with certain exploded expressions
      RubyGems · addressable✕security
      Quote
      “Regular Expression Denial of Service in Addressable templates with certain exploded expressions”
      github.com ›
    • RubyGems packages
      addressable: Denial of service in Addressable URI path normalization
      RubyGems · addressable✕security
      Quote
      “Denial of service in Addressable URI path normalization”
      github.com ›
    • RubyGems packages
      faraday: Faraday affected by SSRF via protocol-relative URL host override in build_exclusive_url
      RubyGems · faraday✕security
      Quote
      “Faraday affected by SSRF via protocol-relative URL host override in build_exclusive_url”
      osv.dev ›
    • RubyGems packages
      faraday: Faraday has a possible incomplete fix for GHSA-33mh-2634-fwr2: protocol-relative URI objects still bypass host scoping
      RubyGems · faraday✕security
      Quote
      “Faraday has a possible incomplete fix for GHSA-33mh-2634-fwr2: protocol-relative URI objects still bypass host scoping”
      osv.dev ›
    • RubyGems packages
      faraday: Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters
      RubyGems · faraday✕security
      Quote
      “Faraday: Uncontrolled recursion in NestedParamsEncoder allows stack exhaustion DoS via deeply nested query parameters”
      osv.dev ›
    • RubyGems packages
      json: Ruby json: JSON generator heap buffer overflow when streaming to an IO
      RubyGems · json✕security
      Quote
      “Ruby json: JSON generator heap buffer overflow when streaming to an IO”
      osv.dev ›
    • RubyGems packages
      loofah: SVG `<textPath>` and `<mpath>` bypass local-reference restriction in Loofah
      RubyGems · loofah✕security
      Quote
      “SVG <textPath> and <mpath> bypass local-reference restriction in Loofah”
      github.com ›
    • RubyGems packages
      loofah: Mutation XSS in Loofah HTML5 scrubbers through unescaped attribute values
      RubyGems · loofah✕security
      Quote
      “Mutation XSS in Loofah HTML5 scrubbers through unescaped attribute values”
      github.com ›
    • RubyGems packages
      loofah: Loofah allowed_uri? treats data:text&sol;html as safe text/plain
      RubyGems · loofah✕security
      Quote
      “Loofah allowed_uri? treats data:text&sol;html as safe text/plain”
      github.com ›
    • RubyGems packages
      loofah: CSS url() sanitization bypass via escaped parentheses in Loofah
      RubyGems · loofah✕security
      Quote
      “CSS url() sanitization bypass via escaped parentheses in Loofah”
      github.com ›
    • RubyGems packages
      loofah: Regular expression denial of service in Loofah's SVG local-reference check
      RubyGems · loofah✕security
      Quote
      “Regular expression denial of service in Loofah's SVG local-reference check”
      github.com ›
    • RubyGems packages
      loofah: Loofah allowed_uri? treats javascript&#x3a alert(1) as safe
      RubyGems · loofah✕security
      Quote
      “Loofah allowed_uri? treats javascript&#x3a alert(1) as safe”
      github.com ›
    • RubyGems packages
      nokogiri: Use-After-Free in Nokogiri when replacing an attribute value
      RubyGems · nokogiri✕security
      Quote
      “Use-After-Free in Nokogiri when replacing an attribute value”
      github.com ›
    • RubyGems packages
      nokogiri: Possible Mutation XSS when serializing `noscript` content in `Nokogiri::HTML5` documents
      RubyGems · nokogiri✕security
      Quote
      “Possible Mutation XSS when serializing noscript content in Nokogiri::HTML5 documents”
      github.com ›
    • RubyGems packages
      nokogiri: Possible SSRF on JRuby when resolving external DTDs or entities with `NONET` set
      RubyGems · nokogiri✕security
      Quote
      “Possible SSRF on JRuby when resolving external DTDs or entities with NONET set”
      github.com ›
    • RubyGems packages
      rails-html-sanitizer: Possible regular expression denial of service with certain configurations of rails-html-sanitizer
      RubyGems · rails-html-sanitizer✕security
      Quote
      “Possible regular expression denial of service with certain configurations of rails-html-sanitizer”
      github.com ›
    • RubyGems packages
      rails-html-sanitizer: Possible XSS via shared scrubber state in concurrent rails-html-sanitizer calls
      RubyGems · rails-html-sanitizer✕security
      Quote
      “Possible XSS via shared scrubber state in concurrent rails-html-sanitizer calls”
      github.com ›
    • RubyGems packages
      rexml: REXML has DoS condition when parsing malformed XML file
      RubyGems · rexml✕security
      Quote
      “REXML has DoS condition when parsing malformed XML file”
      osv.dev ›
    • RubyGems packages
      uri: URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+
      RubyGems · uri✕security
      Quote
      “URI allows for userinfo Leakage in URI#join, URI#merge, and URI#+”
      osv.dev ›
    • RubyGems packages
      uri: URI Credential Leakage Bypass over CVE-2025-27221
      RubyGems · uri✕security
      Quote
      “URI Credential Leakage Bypass over CVE-2025-27221”
      osv.dev ›

    2026-10

    • RubyGems packages
      activesupport: Rails Active Support has a possible DoS vulnerability in its number helpers
      RubyGems · activesupport✕security
      Quote
      “Rails Active Support has a possible DoS vulnerability in its number helpers”
      osv.dev ›
    • RubyGems packages
      activesupport: ActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore
      RubyGems · activesupport✕security
      Quote
      “ActiveSupport potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore”
      osv.dev ›
    • RubyGems packages
      activesupport: Rails Active Support has a possible XSS vulnerability in SafeBuffer#%
      RubyGems · activesupport✕security
      Quote
      “Rails Active Support has a possible XSS vulnerability in SafeBuffer#%”
      osv.dev ›
    • RubyGems packages
      activesupport: Rails Active Support has a possible ReDoS vulnerability in number_to_delimited
      RubyGems · activesupport✕security
      Quote
      “Rails Active Support has a possible ReDoS vulnerability in number_to_delimited”
      osv.dev ›
    • RubyGems packages
      activesupport: Active Support Possibly Discloses Locally Encrypted Files
      RubyGems · activesupport✕security
      Quote
      “Active Support Possibly Discloses Locally Encrypted Files”
      osv.dev ›
    • RubyGems packages
      activesupport: ReDoS based DoS vulnerability in Active Support's underscore
      RubyGems · activesupport✕security
      Quote
      “ReDoS based DoS vulnerability in Active Support's underscore”
      osv.dev ›
    • RubyGems packages
      activesupport: Possible XSS Security Vulnerability in SafeBuffer#bytesplice
      RubyGems · activesupport✕security
      Quote
      “Possible XSS Security Vulnerability in SafeBuffer#bytesplice”
      osv.dev ›
    • RubyGems packages
      concurrent-ruby: Concurrent Ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption
      RubyGems · concurrent-ruby✕security
      Quote
      “Concurrent Ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption”
      osv.dev ›
    • RubyGems packages
      concurrent-ruby: Concurrent Ruby : `AtomicReference#update` livelocks when the stored value is `Float::NAN`
      RubyGems · concurrent-ruby✕security
      Quote
      “Concurrent Ruby : AtomicReference#update livelocks when the stored value is Float::NAN”
      osv.dev ›
    • RubyGems packages
      concurrent-ruby: Concurrent Ruby: `ReentrantReadWriteLock` read-count overflow grants a write lock without exclusivity
      RubyGems · concurrent-ruby✕security
      Quote
      “Concurrent Ruby: ReentrantReadWriteLock read-count overflow grants a write lock without exclusivity”
      osv.dev ›
    • RubyGems packages
      rack: Rack::Request#host_with_port and `#base_url` return an invalid `Host` verbatim, enabling URL and allowlist bypass
      RubyGems · rack✕security
      Quote
      “Rack::Request#host_with_port and #base_url return an invalid Host verbatim, enabling URL and allowlist bypass”
      github.com ›
    • RubyGems packages
      rack: Multipart parser retains parsed data in its scan buffer, allowing denial of service via memory exhaustion.
      RubyGems · rack✕security
      Quote
      “Multipart parser retains parsed data in its scan buffer, allowing denial of service via memory exhaustion.”
      github.com ›
    • RubyGems packages
      rack: Multipart boundary guard skips a leading empty or quoted `boundary` parameter, allowing parser differentials and WAF bypass
      RubyGems · rack✕security
      Quote
      “Multipart boundary guard skips a leading empty or quoted boundary parameter, allowing parser differentials and WAF bypass”
      github.com ›
    • RubyGems packages
      rack: Rack::Static `header_rules` bypass via unnormalized dot segments in the request path
      RubyGems · rack✕security
      Quote
      “Rack::Static header_rules bypass via unnormalized dot segments in the request path”
      github.com ›
    • RubyGems packages
      rake: OS Command Injection in Rake
      RubyGems · rake✕security
      Quote
      “OS Command Injection in Rake”
      osv.dev ›
    • RubyGems packages
      rexml: REXML ReDoS vulnerability
      RubyGems · rexml✕security
      Quote
      “REXML ReDoS vulnerability”
      osv.dev ›
    • RubyGems packages
      rexml: REXML denial of service vulnerability
      RubyGems · rexml✕security
      Quote
      “REXML denial of service vulnerability”
      osv.dev ›
    • RubyGems packages
      rexml: REXML DoS vulnerability
      RubyGems · rexml✕security
      Quote
      “REXML DoS vulnerability”
      osv.dev ›
    • RubyGems packages
      rexml: REXML DoS vulnerability
      RubyGems · rexml✕security
      Quote
      “REXML DoS vulnerability”
      osv.dev ›
    • RubyGems packages
      rexml: REXML contains a denial of service vulnerability
      RubyGems · rexml✕security
      Quote
      “REXML contains a denial of service vulnerability”
      osv.dev ›
    • RubyGems packages
      rexml: REXML denial of service vulnerability
      RubyGems · rexml✕security
      Quote
      “REXML denial of service vulnerability”
      osv.dev ›
    • RubyGems packages
      sqlite3: sqlite3-ruby has Use-After-Free When Redefining SQLite Functions with Different Arity
      RubyGems · sqlite3✕security
      Quote
      “sqlite3-ruby has Use-After-Free When Redefining SQLite Functions with Different Arity”
      osv.dev ›
    • RubyGems packages
      tzinfo: TZInfo relative path traversal vulnerability allows loading of arbitrary files
      RubyGems · tzinfo✕security
      Quote
      “TZInfo relative path traversal vulnerability allows loading of arbitrary files”
      osv.dev ›
    • Apple
      AGL deprecated
      Apple–notice
      Quote
      “AGL is no longer available in the macOS SDK. AGL was previously used to present OpenGL content in Carbon apps, and Carbon no longer exists in the SDK. AGL symbols now do nothing on 64-bit systems, including Intel x86_64 and Apple Silicon Macs. It is safe to remove any AGL usage and stop linking AGL. OpenGL still remains in the SDK. (153913819)”
      developer.apple.com ›
    • Apple
      Algorithms DES, 3DES, SHA1-96 and SHA1-160 as well as Diffie-Hellman groups less than 14 deprecated
      Apple–notice
      Quote
      “Algorithms DES, 3DES, SHA1-96 and SHA1-160 as well as Diffie-Hellman groups less than 14 are no longer supported for IKEv2 VPNs. (148767790)”
      developer.apple.com ›
    • Apple
      NSPersistentStoreRebuildFromUbiquitousContentOption deprecated
      Apple–noticeNSPersistentStoreRebuildFromUbiquitousContentOption → NSPersistentCloudKitContainer or SwiftData
      Quote
      “This release removes support for the following deprecated NSPersistentStore option keys: NSPersistentStoreUbiquitousContentNameKey NSPersistentStoreUbiquitousContentURLKey NSPersistentStoreUbiquitousPeerTokenOption NSPersistentStoreRemoveUbiquitousMetadataOption NSPersistentStoreUbiquitousContainerIdentifierKey NSPersistentStoreRebuildFromUbiquitousContentOption These keys have been deprecated for…”
      developer.apple.com ›
    ‹ Previous15 / 36Next ›
  • AnthropicAnthropicclaude-sonnet-4-5-20250929in 24 days
  • OpenAIOpenAIOpenAI · 3in 25 days
  • 14 more ›