Changes Scan Docs Trust

When upstream breaks, Teire fixes your code.

teire-dev/teire System status

Built on

Product

Scan a repo Changes Install on GitHub Dashboard Demo video

Developers

Docs GitHub CLI and MCP teire.yml schema npm

Trust

How Teire runs Source code

Watching 44 sources · checked 5 h ago

Changes

2158
in the catalog: 1153
new this week: 62
dated ahead

Google Gemini5 h ago · 57
Goon demand · 87
Maven · Gradleon demand · 44
npmon demand · 913
Groq13 h ago · 43
Cargoon demand · 108
PyPIon demand · 243
Twitch13 h ago · 5
Bitbucket14 h ago · 0
GitLab14 h ago · 43
Context714 h ago · 0
RubyGems14 h ago · 83
Tavily14 h ago · 0
GitHub14 h ago · 23
Stripe14 h ago · 167

What's new

npm packages12 h agominimatch 3.1.5 → 11.0.3: changes the arguments of 2 function(s)breaks on upgrade +13
RubyGems packages13 h agoactivesupport: Possible DoS vulnerability in Active Support safe_constantizesecurity +8
RubyGems packages13 h ago

Picked up, last 30 days

one dot per day · bigger is more

npm

Every change

activestorage: Possible arbitrary file read and remote code execution in Active Storage video previews, analysis and image processing

✕security

RubyGems packages13 h agoactionview: Possible XSS vulnerability in Action View highlight helper✕security +3

RubyGems packages13 h agoactionpack: Possible sensitive session information leak in Active Storage proxy mode✕security +6

RubyGems packages13 h agoactionmailbox: Possible signature replay in Action Mailbox Mailgun ingress✕security

PyPI packages13 h agoopenai 0.28.1 → 3.41.0: changes parameters of 5 function(s)●breaks on upgrade +21

Cargo packages13 h agopin-utils: `pin-utils` is unmaintained✕security

GitLab14 h agometrics.prometheus.port deprecated–notice +42

npm packages2 d ago@ruby/prism 1.9.0 → 2.1.0: removes 12 API(s)●breaks on upgrade +5

GitHub2 d agorerank-multilingual-v2.0 shutdown✕already broken +22

npm packages2 d agoopenai 4.104.0 → 7.45.1: removes 38 import path(s)●breaks on upgrade +34

913

: 110 on 2026-10-27, 18 on 2026-10-28, 22 on 2026-10-29, 738 on 2026-10-30, 6 on 2026-10-31, 5 on 2026-11-02, 5 on 2026-11-03, 6 on 2026-11-04, 3 on 2026-11-05

PyPI243: 143 on 2026-10-27, 9 on 2026-10-28, 3 on 2026-10-29, 76 on 2026-10-30, 3 on 2026-10-31, 3 on 2026-11-02, 3 on 2026-11-03, 3 on 2026-11-05

Stripe167: 167 on 2026-10-27

OpenAI145: 145 on 2026-10-27

Cargo108: 20 on 2026-10-27, 56 on 2026-10-28, 31 on 2026-10-30, 1 on 2026-11-05

Go87: 7 on 2026-10-27, 43 on 2026-10-28, 37 on 2026-10-30

RubyGems83: 17 on 2026-10-27, 6 on 2026-10-28, 16 on 2026-10-30, 4 on 2026-10-31, 7 on 2026-11-01, 12 on 2026-11-02, 21 on 2026-11-05

Perplexity59: 35 on 2026-10-27, 3 on 2026-10-30, 21 on 2026-11-03

Google Gemini57: 57 on 2026-10-27

Maven · Gradle44: 28 on 2026-10-27, 3 on 2026-10-29, 4 on 2026-10-30, 9 on 2026-10-31

10-08today

Coming up

Nebius Token Factory · 11in 3 days
Google Gemini · 5in 11 days
api.relay.linkin 18 days

121–180 of 913

2026-11

deepmerge: deepmerge mergeObject() allows prototype poisoning of returned objects
npm · deepmergesecurity
Quote
“deepmerge mergeObject() allows prototype poisoning of returned objects”
osv.dev ›
esbuild: esbuild enables any website to send any requests to the development server and read the response
npm · esbuildsecurity
Quote
“esbuild enables any website to send any requests to the development server and read the response”
osv.dev ›
fast-uri: fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references
npm · fast-urisecurity
Quote
“fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references”
osv.dev ›
fast-uri: fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding
npm · fast-urisecurity
Quote
“fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding”
osv.dev ›
fast-uri: fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization
npm · fast-urisecurity
Quote
“fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization”
osv.dev ›
fast-uri: fast-uri vulnerable to improper path equivalence in relative reference normalization
npm · fast-urisecurity
Quote
“fast-uri vulnerable to improper path equivalence in relative reference normalization”
osv.dev ›
flatted: flatted vulnerable to unbounded recursion DoS in parse() revive phase
npm · flattedsecurity
Quote
“flatted vulnerable to unbounded recursion DoS in parse() revive phase”
osv.dev ›
flatted: Prototype Pollution via parse() in NodeJS flatted
npm · flattedsecurity
Quote
“Prototype Pollution via parse() in NodeJS flatted”
osv.dev ›
form-data: form-data uses unsafe random function in form-data for choosing boundary
npm · form-datasecurity
Quote
“form-data uses unsafe random function in form-data for choosing boundary”
osv.dev ›

2026-10

diff: jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch
npm · diffsecurity
Quote
“jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch”
osv.dev ›
dompurify: DOMPurify's ADD_TAGS function form bypasses FORBID_TAGS due to short-circuit evaluation
npm · dompurifysecurity
Quote
“DOMPurify's ADD_TAGS function form bypasses FORBID_TAGS due to short-circuit evaluation”
osv.dev ›
dompurify: DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS
npm · dompurifysecurity
Quote
“DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS”
osv.dev ›
dompurify: DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes
npm · dompurifysecurity
Quote
“DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup — pure HTML reparse executes”
osv.dev ›
dompurify: DOMPurify: Hook mutation of `data.allowedTags` / `data.allowedAttributes` permanently pollutes `DEFAULT_ALLOWED_TAGS` / `DEFAULT_ALLOWED_ATTR`
npm · dompurifysecurity
Quote
“DOMPurify: Hook mutation of data.allowedTags / data.allowedAttributes permanently pollutes DEFAULT_ALLOWED_TAGS / DEFAULT_ALLOWED_ATTR”
osv.dev ›
dompurify: DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.
npm · dompurifysecurity
Quote
“DOMPurify: CUSTOM_ELEMENT_HANDLING bypasses afterSanitizeElements for allowed custom elements.”
osv.dev ›
dompurify: DOMPurify: SMIL attributeName=href guard is skipped when PARSER_MEDIA_TYPE is application/xhtml+xml
npm · dompurifysecurity
Quote
“DOMPurify: SMIL attributeName=href guard is skipped when PARSER_MEDIA_TYPE is application/xhtml+xml”
osv.dev ›
dompurify: DOMPurify USE_PROFILES prototype pollution allows event handlers
npm · dompurifysecurity
Quote
“DOMPurify USE_PROFILES prototype pollution allows event handlers”
osv.dev ›
dompurify: DOMPurify ADD_ATTR predicate skips URI validation
npm · dompurifysecurity
Quote
“DOMPurify ADD_ATTR predicate skips URI validation”
osv.dev ›
dompurify: DOMPurify: Permanent `ALLOWED_ATTR` pollution via `setConfig()` bypassing the hook clone-guard (incomplete fix of the 3.4.7 hook-pollution patch)
npm · dompurifysecurity
Quote
“DOMPurify: Permanent ALLOWED_ATTR pollution via setConfig() bypassing the hook clone-guard (incomplete fix of the 3.4.7 hook-pollution patch)”
osv.dev ›
dompurify: DOMPurify has a SAFE_FOR_TEMPLATES bypass in RETURN_DOM mode
npm · dompurifysecurity
Quote
“DOMPurify has a SAFE_FOR_TEMPLATES bypass in RETURN_DOM mode”
osv.dev ›
dompurify: DOMPurify: SAFE_FOR_TEMPLATES bypass - template expressions survive sanitization inside <template> content when using DOM output modes
npm · dompurifysecurity
Quote
“DOMPurify: SAFE_FOR_TEMPLATES bypass - template expressions survive sanitization inside <template> content when using DOM output modes”
osv.dev ›
dompurify: DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)
npm · dompurifysecurity
Quote
“DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)”
osv.dev ›
dompurify: DOMPurify is vulnerable to mutation-XSS via Re-Contextualization
npm · dompurifysecurity
Quote
“DOMPurify is vulnerable to mutation-XSS via Re-Contextualization”
osv.dev ›
dompurify: DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checks
npm · dompurifysecurity
Quote
“DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound instanceof checks”
osv.dev ›
dompurify: DOMPurify IN_PLACE: hook that removes a parent or sibling leaves the detached subtree's event handlers armed (incomplete fix for GHSA-p98j-92pf-mc4p)
npm · dompurifysecurity
Quote
“DOMPurify IN_PLACE: hook that removes a parent or sibling leaves the detached subtree's event handlers armed (incomplete fix for GHSA-p98j-92pf-mc4p)”
osv.dev ›
dompurify: DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM
npm · dompurifysecurity
Quote
“DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM”
osv.dev ›
dompurify: DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.content
npm · dompurifysecurity
Quote
“DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.content”
osv.dev ›
dompurify: DOMPurify contains a Cross-site Scripting vulnerability
npm · dompurifysecurity
Quote
“DOMPurify contains a Cross-site Scripting vulnerability”
osv.dev ›
dompurify: DOMPurify contains a Cross-site Scripting vulnerability
npm · dompurifysecurity
Quote
“DOMPurify contains a Cross-site Scripting vulnerability”
osv.dev ›
dompurify: DOMPurify: Prototype Pollution to XSS Bypass via CUSTOM_ELEMENT_HANDLING Fallback
npm · dompurifysecurity
Quote
“DOMPurify: Prototype Pollution to XSS Bypass via CUSTOM_ELEMENT_HANDLING Fallback”
osv.dev ›
dompurify: DOMPurify allows Cross-site Scripting (XSS)
npm · dompurifysecurity
Quote
“DOMPurify allows Cross-site Scripting (XSS)”
osv.dev ›
dompurify: DOMPurify: Trusted Types policy survives `clearConfig()` and can poison later `RETURN_TRUSTED_TYPE` output
npm · dompurifysecurity
Quote
“DOMPurify: Trusted Types policy survives clearConfig() and can poison later RETURN_TRUSTED_TYPE output”
osv.dev ›
dompurify: DOMPurify: `IN_PLACE` mode trusts attacker-controlled `nodeName` on live non-form nodes, allowing script retention and XSS via attacker-supplied DOM objects
npm · dompurifysecurity
Quote
“DOMPurify: IN_PLACE mode trusts attacker-controlled nodeName on live non-form nodes, allowing script retention and XSS via attacker-supplied DOM objects”
osv.dev ›
ejs: ejs lacks certain pollution protection
npm · ejssecurity
Quote
“ejs lacks certain pollution protection”
osv.dev ›
ejs: ejs template injection vulnerability
npm · ejssecurity
Quote
“ejs template injection vulnerability”
osv.dev ›
elliptic: Elliptic's verify function omits uniqueness validation
npm · ellipticsecurity
Quote
“Elliptic's verify function omits uniqueness validation”
osv.dev ›
elliptic: Elliptic allows BER-encoded signatures
npm · ellipticsecurity
Quote
“Elliptic allows BER-encoded signatures”
osv.dev ›
elliptic: Elliptic Uses a Cryptographic Primitive with a Risky Implementation
npm · ellipticsecurity
Quote
“Elliptic Uses a Cryptographic Primitive with a Risky Implementation”
osv.dev ›
elliptic: Elliptic's ECDSA missing check for whether leading bit of r and s is zero
npm · ellipticsecurity
Quote
“Elliptic's ECDSA missing check for whether leading bit of r and s is zero”
osv.dev ›
elliptic: Elliptic's EDDSA missing signature length check
npm · ellipticsecurity
Quote
“Elliptic's EDDSA missing signature length check”
osv.dev ›
elliptic: Valid ECDSA signatures erroneously rejected in Elliptic
npm · ellipticsecurity
Quote
“Valid ECDSA signatures erroneously rejected in Elliptic”
osv.dev ›
elliptic: Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string)
npm · ellipticsecurity
Quote
“Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string)”
osv.dev ›
es5-ext: es5-ext vulnerable to Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`
npm · es5-extsecurity
Quote
“es5-ext vulnerable to Regular Expression Denial of Service in function#copy and function#toStringTokens”
osv.dev ›
esbuild: esbuild allows arbitrary file read when running the development server on Windows
npm · esbuildsecurity
Quote
“esbuild allows arbitrary file read when running the development server on Windows”
osv.dev ›
express: express vulnerable to XSS via response.redirect()
npm · expresssecurity
Quote
“express vulnerable to XSS via response.redirect()”
osv.dev ›
express: Express.js Open Redirect in malformed URLs
npm · expresssecurity
Quote
“Express.js Open Redirect in malformed URLs”
osv.dev ›
fast-uri: fast-uri vulnerable to host confusion via failed IDN canonicalization
npm · fast-urisecurity
Quote
“fast-uri vulnerable to host confusion via failed IDN canonicalization”
osv.dev ›
fast-uri: fast-uri vulnerable to host confusion via backslash authority introducer
npm · fast-urisecurity
Quote
“fast-uri vulnerable to host confusion via backslash authority introducer”
osv.dev ›
fast-uri: fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization
npm · fast-urisecurity
Quote
“fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization”
osv.dev ›
fast-uri: fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets
npm · fast-urisecurity
Quote
“fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets”
osv.dev ›
fast-uri: fast-uri vulnerable to host confusion via percent-encoded scheme normalization
npm · fast-urisecurity
Quote
“fast-uri vulnerable to host confusion via percent-encoded scheme normalization”
osv.dev ›
fast-uri: fast-uri vulnerable to path traversal via percent-encoded dot segments
npm · fast-urisecurity
Quote
“fast-uri vulnerable to path traversal via percent-encoded dot segments”
osv.dev ›
fast-uri: fast-uri vulnerable to authority injection via an unvalidated port in serialize
npm · fast-urisecurity
Quote
“fast-uri vulnerable to authority injection via an unvalidated port in serialize”
osv.dev ›
fast-uri: fast-uri vulnerable to host confusion via literal backslash authority delimiter
npm · fast-urisecurity
Quote
“fast-uri vulnerable to host confusion via literal backslash authority delimiter”
osv.dev ›
fast-uri: fast-uri vulnerable to host confusion via percent-encoded authority delimiters
npm · fast-urisecurity
Quote
“fast-uri vulnerable to host confusion via percent-encoded authority delimiters”
osv.dev ›
follow-redirects: follow-redirects sensitiveHeaders regex escaping can expose credential headers
npm · follow-redirectssecurity
Quote
“follow-redirects sensitiveHeaders regex escaping can expose credential headers”
osv.dev ›
follow-redirects: follow-redirects' Proxy-Authorization header kept across hosts
npm · follow-redirectssecurity
Quote
“follow-redirects' Proxy-Authorization header kept across hosts”
osv.dev ›
follow-redirects: Follow Redirects improperly handles URLs in the url.parse() function
npm · follow-redirectssecurity
Quote
“Follow Redirects improperly handles URLs in the url.parse() function”
osv.dev ›
follow-redirects: follow-redirects array-form headers bypass cross-origin credential stripping
npm · follow-redirectssecurity
Quote
“follow-redirects array-form headers bypass cross-origin credential stripping”
osv.dev ›
follow-redirects: follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets
npm · follow-redirectssecurity
Quote
“follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets”
osv.dev ›

‹ Previous3 / 16Next ›

Anthropic

Anthropic

claude-sonnet-4-5-20250929in 24 days

OpenAI

OpenAI

OpenAI · 3in 25 days