Changes Scan Docs Trust

When upstream breaks, Teire fixes your code.

teire-dev/teire System status

Built on

Product

Scan a repo Changes Install on GitHub Dashboard Demo video

Developers

Docs GitHub CLI and MCP teire.yml schema npm

Trust

How Teire runs Source code

Watching 44 sources · checked 5 h ago

Changes

2158
in the catalog: 1153
new this week: 62
dated ahead

Google Gemini5 h ago · 57
Goon demand · 87
Maven · Gradleon demand · 44
npmon demand · 913
Groq12 h ago · 43
Cargoon demand · 108
PyPIon demand · 243
Twitch13 h ago · 5
Bitbucket13 h ago · 0
GitLab14 h ago · 43
Context714 h ago · 0
RubyGems14 h ago · 83
Tavily14 h ago · 0
GitHub14 h ago · 23
Stripe14 h ago · 167

What's new

npm packages12 h agominimatch 3.1.5 → 11.0.3: changes the arguments of 2 function(s)breaks on upgrade +13
RubyGems packages12 h agoactivesupport: Possible DoS vulnerability in Active Support safe_constantizesecurity +8
RubyGems packages12 h ago

Picked up, last 30 days

one dot per day · bigger is more

npm

Every change

activestorage: Possible arbitrary file read and remote code execution in Active Storage video previews, analysis and image processing

✕security

RubyGems packages12 h agoactionview: Possible XSS vulnerability in Action View highlight helper✕security +3

RubyGems packages12 h agoactionpack: Possible sensitive session information leak in Active Storage proxy mode✕security +6

RubyGems packages12 h agoactionmailbox: Possible signature replay in Action Mailbox Mailgun ingress✕security

PyPI packages12 h agoopenai 0.28.1 → 3.41.0: changes parameters of 5 function(s)●breaks on upgrade +21

Cargo packages13 h agopin-utils: `pin-utils` is unmaintained✕security

GitLab14 h agometrics.prometheus.port deprecated–notice +42

npm packages2 d ago@ruby/prism 1.9.0 → 2.1.0: removes 12 API(s)●breaks on upgrade +5

GitHub2 d agorerank-multilingual-v2.0 shutdown✕already broken +22

npm packages2 d agoopenai 4.104.0 → 7.45.1: removes 38 import path(s)●breaks on upgrade +34

913

: 110 on 2026-10-27, 18 on 2026-10-28, 22 on 2026-10-29, 738 on 2026-10-30, 6 on 2026-10-31, 5 on 2026-11-02, 5 on 2026-11-03, 6 on 2026-11-04, 3 on 2026-11-05

PyPI243: 143 on 2026-10-27, 9 on 2026-10-28, 3 on 2026-10-29, 76 on 2026-10-30, 3 on 2026-10-31, 3 on 2026-11-02, 3 on 2026-11-03, 3 on 2026-11-05

Stripe167: 167 on 2026-10-27

OpenAI145: 145 on 2026-10-27

Cargo108: 20 on 2026-10-27, 56 on 2026-10-28, 31 on 2026-10-30, 1 on 2026-11-05

Go87: 7 on 2026-10-27, 43 on 2026-10-28, 37 on 2026-10-30

RubyGems83: 17 on 2026-10-27, 6 on 2026-10-28, 16 on 2026-10-30, 4 on 2026-10-31, 7 on 2026-11-01, 12 on 2026-11-02, 21 on 2026-11-05

Perplexity59: 35 on 2026-10-27, 3 on 2026-10-30, 21 on 2026-11-03

Google Gemini57: 57 on 2026-10-27

Maven · Gradle44: 28 on 2026-10-27, 3 on 2026-10-29, 4 on 2026-10-30, 9 on 2026-10-31

10-08today

Coming up

Nebius Token Factory · 11in 3 days
Google Gemini · 5in 11 days
api.relay.linkin 18 days

181–240 of 2158

2026-10

golang.org/x/net: Double flow control refund on HTTP/2 server streams in net/http
Go · golang.org/x/netsecurity
Quote
“Double flow control refund on HTTP/2 server streams in net/http”
osv.dev ›
@babel/plugin-transform-modules-systemjs: @babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input
npm · @babel/plugin-transform-modules-systemjssecurity
Quote
“@babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input”
osv.dev ›
@babel/runtime-corejs3: Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups
npm · @babel/runtime-corejs3security
Quote
“Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups”
osv.dev ›
@babel/runtime: Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups
npm · @babel/runtimesecurity
Quote
“Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups”
osv.dev ›
@babel/traverse: Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code
npm · @babel/traversesecurity
Quote
“Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code”
osv.dev ›
@better-auth/drizzle-adapter: @better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL
npm · @better-auth/drizzle-adaptersecurity
Quote
“@better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL”
osv.dev ›
@fastify/busboy: @fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name
npm · @fastify/busboysecurity
Quote
“@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name”
osv.dev ›
@fastify/busboy: @fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header
npm · @fastify/busboysecurity
Quote
“@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header”
osv.dev ›
@grpc/grpc-js: @grpc/grpc-js: A malformed request can cause a server crash
npm · @grpc/grpc-jssecurity
Quote
“@grpc/grpc-js: A malformed request can cause a server crash”
osv.dev ›
@grpc/grpc-js: @grpc/grpc-js: An incoming malformed compressed message can cause a client or server crash
npm · @grpc/grpc-jssecurity
Quote
“@grpc/grpc-js: An incoming malformed compressed message can cause a client or server crash”
osv.dev ›
@grpc/grpc-js: @grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messages
npm · @grpc/grpc-jssecurity
Quote
“@grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messages”
osv.dev ›
@grpc/grpc-js: @grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized
npm · @grpc/grpc-jssecurity
Quote
“@grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized”
osv.dev ›
@humanfs/node: humanfs: Recursive copy follows symlinked files and copies data from outside the source tree
npm · @humanfs/nodesecurity
Quote
“humanfs: Recursive copy follows symlinked files and copies data from outside the source tree”
osv.dev ›
@openzeppelin/contracts-upgradeable: OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning
npm · @openzeppelin/contracts-upgradeablesecurity
Quote
“OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning”
osv.dev ›
@openzeppelin/contracts-upgradeable: GovernorCompatibilityBravo may trim proposal calldata
npm · @openzeppelin/contracts-upgradeablesecurity
Quote
“GovernorCompatibilityBravo may trim proposal calldata”
osv.dev ›
@openzeppelin/contracts-upgradeable: OpenZeppelin Contracts base64 encoding may read from potentially dirty memory
npm · @openzeppelin/contracts-upgradeablesecurity
Quote
“OpenZeppelin Contracts base64 encoding may read from potentially dirty memory”
osv.dev ›
@openzeppelin/contracts-upgradeable: OpenZeppelin Contracts vulnerable to Improper Escaping of Output
npm · @openzeppelin/contracts-upgradeablesecurity
Quote
“OpenZeppelin Contracts vulnerable to Improper Escaping of Output”
osv.dev ›
@openzeppelin/contracts-upgradeable: OpenZeppelin Contracts TransparentUpgradeableProxy clashing selector calls may not be delegated
npm · @openzeppelin/contracts-upgradeablesecurity
Quote
“OpenZeppelin Contracts TransparentUpgradeableProxy clashing selector calls may not be delegated”
osv.dev ›
@openzeppelin/contracts-upgradeable: OpenZeppelin Contracts using MerkleProof multiproofs may allow proving arbitrary leaves for specific trees
npm · @openzeppelin/contracts-upgradeablesecurity
Quote
“OpenZeppelin Contracts using MerkleProof multiproofs may allow proving arbitrary leaves for specific trees”
osv.dev ›
@openzeppelin/contracts: OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers
npm · @openzeppelin/contractssecurity
Quote
“OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers”
osv.dev ›
@openzeppelin/contracts: OpenZeppelin Contracts vulnerable to ECDSA signature malleability
npm · @openzeppelin/contractssecurity
Quote
“OpenZeppelin Contracts vulnerable to ECDSA signature malleability”
osv.dev ›
@openzeppelin/contracts: OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning
npm · @openzeppelin/contractssecurity
Quote
“OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning”
osv.dev ›
@openzeppelin/contracts: OpenZeppelin Contracts ERC165Checker unbounded gas consumption
npm · @openzeppelin/contractssecurity
Quote
“OpenZeppelin Contracts ERC165Checker unbounded gas consumption”
osv.dev ›
@openzeppelin/contracts: OpenZeppelin Contracts contains Incorrect Calculation
npm · @openzeppelin/contractssecurity
Quote
“OpenZeppelin Contracts contains Incorrect Calculation”
osv.dev ›
@openzeppelin/contracts: Improper Initialization in OpenZeppelin
npm · @openzeppelin/contractssecurity
Quote
“Improper Initialization in OpenZeppelin”
osv.dev ›
@openzeppelin/contracts: GovernorCompatibilityBravo may trim proposal calldata
npm · @openzeppelin/contractssecurity
Quote
“GovernorCompatibilityBravo may trim proposal calldata”
osv.dev ›
@openzeppelin/contracts: OpenZeppelin Contracts base64 encoding may read from potentially dirty memory
npm · @openzeppelin/contractssecurity
Quote
“OpenZeppelin Contracts base64 encoding may read from potentially dirty memory”
osv.dev ›
@openzeppelin/contracts: OpenZeppelin Contracts vulnerable to Improper Escaping of Output
npm · @openzeppelin/contractssecurity
Quote
“OpenZeppelin Contracts vulnerable to Improper Escaping of Output”
osv.dev ›
@openzeppelin/contracts: GovernorCompatibilityBravo incorrect ABI encoding may lead to unexpected behavior
npm · @openzeppelin/contractssecurity
Quote
“GovernorCompatibilityBravo incorrect ABI encoding may lead to unexpected behavior”
osv.dev ›
@openzeppelin/contracts: OpenZeppelin Contracts TransparentUpgradeableProxy clashing selector calls may not be delegated
npm · @openzeppelin/contractssecurity
Quote
“OpenZeppelin Contracts TransparentUpgradeableProxy clashing selector calls may not be delegated”
osv.dev ›
@openzeppelin/contracts: OpenZeppelin Contracts's ERC165Checker may revert instead of returning false
npm · @openzeppelin/contractssecurity
Quote
“OpenZeppelin Contracts's ERC165Checker may revert instead of returning false”
osv.dev ›
@openzeppelin/contracts: OpenZeppelin Contracts using MerkleProof multiproofs may allow proving arbitrary leaves for specific trees
npm · @openzeppelin/contractssecurity
Quote
“OpenZeppelin Contracts using MerkleProof multiproofs may allow proving arbitrary leaves for specific trees”
osv.dev ›
@openzeppelin/contracts: OpenZeppelin Contracts's GovernorVotesQuorumFraction updates to quorum may affect past defeated proposals
npm · @openzeppelin/contractssecurity
Quote
“OpenZeppelin Contracts's GovernorVotesQuorumFraction updates to quorum may affect past defeated proposals”
osv.dev ›
@protobufjs/utf8: protobufjs has overlong UTF-8 decoding
npm · @protobufjs/utf8security
Quote
“protobufjs has overlong UTF-8 decoding”
osv.dev ›
@remix-run/router: React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation
npm · @remix-run/routersecurity
Quote
“React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation”
osv.dev ›
@remix-run/router: React Router vulnerable to XSS via Open Redirects
npm · @remix-run/routersecurity
Quote
“React Router vulnerable to XSS via Open Redirects”
osv.dev ›
@solana/web3.js: Handling untrusted input can result in a crash, leading to loss of availability / denial of service
npm · @solana/web3.jssecurity
Quote
“Handling untrusted input can result in a crash, leading to loss of availability / denial of service”
osv.dev ›
@stablelib/ed25519: StableLib Ed25519 Signature Malleability via Missing S < L Check
npm · @stablelib/ed25519security
Quote
“StableLib Ed25519 Signature Malleability via Missing S < L Check”
osv.dev ›

2026-11

golang.org/x/net: HTTP/2 server crash due to HPACK encoder race in net/http
Go · golang.org/x/netsecurity
Quote
“HTTP/2 server crash due to HPACK encoder race in net/http”
osv.dev ›
golang.org/x/net: Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net
Go · golang.org/x/netsecurity
Quote
“Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net”
osv.dev ›
golang.org/x/net: Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net
Go · golang.org/x/netsecurity
Quote
“Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net”
osv.dev ›
golang.org/x/sys: Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows
Go · golang.org/x/syssecurity
Quote
“Invoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows”
osv.dev ›
golang.org/x/text: golang.org/x/text/language Denial of service via crafted Accept-Language header
Go · golang.org/x/textsecurity
Quote
“golang.org/x/text/language Denial of service via crafted Accept-Language header”
osv.dev ›
golang.org/x/text: golang.org/x/text/language Out-of-bounds Read vulnerability
Go · golang.org/x/textsecurity
Quote
“golang.org/x/text/language Out-of-bounds Read vulnerability”
osv.dev ›
golang.org/x/text: Infinite loop on invalid input in golang.org/x/text
Go · golang.org/x/textsecurity
Quote
“Infinite loop on invalid input in golang.org/x/text”
osv.dev ›
golang.org/x/text: Panic parsing crafted input in x/text/secure/precis in golang.org/x/text
Go · golang.org/x/textsecurity
Quote
“Panic parsing crafted input in x/text/secure/precis in golang.org/x/text”
osv.dev ›
google.golang.org/grpc: gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers
Go · google.golang.org/grpcsecurity
Quote
“gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing :authority and Host headers”
osv.dev ›
google.golang.org/grpc: gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities
Go · google.golang.org/grpcsecurity
Quote
“gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities”
osv.dev ›
google.golang.org/grpc: gRPC-Go has an authorization bypass via missing leading slash in :path
Go · google.golang.org/grpcsecurity
Quote
“gRPC-Go has an authorization bypass via missing leading slash in :path”
osv.dev ›
google.golang.org/grpc: gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion
Go · google.golang.org/grpcsecurity
Quote
“gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasion”
osv.dev ›
google.golang.org/grpc: gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation
Go · google.golang.org/grpcsecurity
Quote
“gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation”
osv.dev ›
com.google.guava:guava: Information Disclosure in Guava
Maven · Gradle · com.google.guava:guavasecurity
Quote
“Information Disclosure in Guava”
osv.dev ›
com.google.guava:guava: Guava vulnerable to insecure use of temporary directory
Maven · Gradle · com.google.guava:guavasecurity
Quote
“Guava vulnerable to insecure use of temporary directory”
osv.dev ›
com.google.guava:guava: Denial of Service in Google Guava
Maven · Gradle · com.google.guava:guavasecurity
Quote
“Denial of Service in Google Guava”
osv.dev ›
com.google.guava:guava: Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocation
Maven · Gradle · com.google.guava:guavasecurity
Quote
“Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocation”
osv.dev ›
com.squareup.okhttp3:okhttp: Square OkHttp can accept the wrong certificate
Maven · Gradle · com.squareup.okhttp3:okhttpsecurity
Quote
“Square OkHttp can accept the wrong certificate”
osv.dev ›
com.squareup.okio:okio: Okio Signed to Unsigned Conversion Error vulnerability
Maven · Gradle · com.squareup.okio:okiosecurity
Quote
“Okio Signed to Unsigned Conversion Error vulnerability”
osv.dev ›
org.xerial:sqlite-jdbc: Sqlite-jdbc vulnerable to remote code execution when JDBC url is attacker controlled
Maven · Gradle · org.xerial:sqlite-jdbcsecurity
Quote
“Sqlite-jdbc vulnerable to remote code execution when JDBC url is attacker controlled”
osv.dev ›
@babel/core: @babel/core: Arbitrary File Read via sourceMappingURL Comment
npm · @babel/coresecurity
Quote
“@babel/core: Arbitrary File Read via sourceMappingURL Comment”
osv.dev ›
@babel/helpers: Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups
npm · @babel/helperssecurity
Quote
“Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups”
osv.dev ›

‹ Previous4 / 36Next ›

Anthropic

Anthropic

claude-sonnet-4-5-20250929in 24 days

OpenAI

OpenAI

OpenAI · 3in 25 days