Changes Scan Docs Trust

When upstream breaks, Teire fixes your code.

teire-dev/teire System status

Built on

Product

Scan a repo Changes Install on GitHub Dashboard Demo video

Developers

Docs GitHub CLI and MCP teire.yml schema npm

Trust

How Teire runs Source code

Watching 44 sources · checked 5 h ago

Changes

2158
in the catalog: 1153
new this week: 62
dated ahead

Google Gemini5 h ago · 57
Goon demand · 87
Maven · Gradleon demand · 44
npmon demand · 913
Groq13 h ago · 43
Cargoon demand · 108
PyPIon demand · 243
Twitch13 h ago · 5
Bitbucket14 h ago · 0
GitLab14 h ago · 43
Context714 h ago · 0
RubyGems14 h ago · 83
Tavily14 h ago · 0
GitHub14 h ago · 23
Stripe14 h ago · 167

What's new

npm packages12 h agominimatch 3.1.5 → 11.0.3: changes the arguments of 2 function(s)breaks on upgrade +13
RubyGems packages13 h agoactivesupport: Possible DoS vulnerability in Active Support safe_constantizesecurity +8
RubyGems packages13 h ago

Picked up, last 30 days

one dot per day · bigger is more

npm

Every change

activestorage: Possible arbitrary file read and remote code execution in Active Storage video previews, analysis and image processing

✕security

RubyGems packages13 h agoactionview: Possible XSS vulnerability in Action View highlight helper✕security +3

RubyGems packages13 h agoactionpack: Possible sensitive session information leak in Active Storage proxy mode✕security +6

RubyGems packages13 h agoactionmailbox: Possible signature replay in Action Mailbox Mailgun ingress✕security

PyPI packages13 h agoopenai 0.28.1 → 3.41.0: changes parameters of 5 function(s)●breaks on upgrade +21

Cargo packages13 h agopin-utils: `pin-utils` is unmaintained✕security

GitLab14 h agometrics.prometheus.port deprecated–notice +42

npm packages2 d ago@ruby/prism 1.9.0 → 2.1.0: removes 12 API(s)●breaks on upgrade +5

GitHub2 d agorerank-multilingual-v2.0 shutdown✕already broken +22

npm packages2 d agoopenai 4.104.0 → 7.45.1: removes 38 import path(s)●breaks on upgrade +34

913

: 110 on 2026-10-27, 18 on 2026-10-28, 22 on 2026-10-29, 738 on 2026-10-30, 6 on 2026-10-31, 5 on 2026-11-02, 5 on 2026-11-03, 6 on 2026-11-04, 3 on 2026-11-05

PyPI243: 143 on 2026-10-27, 9 on 2026-10-28, 3 on 2026-10-29, 76 on 2026-10-30, 3 on 2026-10-31, 3 on 2026-11-02, 3 on 2026-11-03, 3 on 2026-11-05

Stripe167: 167 on 2026-10-27

OpenAI145: 145 on 2026-10-27

Cargo108: 20 on 2026-10-27, 56 on 2026-10-28, 31 on 2026-10-30, 1 on 2026-11-05

Go87: 7 on 2026-10-27, 43 on 2026-10-28, 37 on 2026-10-30

RubyGems83: 17 on 2026-10-27, 6 on 2026-10-28, 16 on 2026-10-30, 4 on 2026-10-31, 7 on 2026-11-01, 12 on 2026-11-02, 21 on 2026-11-05

Perplexity59: 35 on 2026-10-27, 3 on 2026-10-30, 21 on 2026-11-03

Google Gemini57: 57 on 2026-10-27

Maven · Gradle44: 28 on 2026-10-27, 3 on 2026-10-29, 4 on 2026-10-30, 9 on 2026-10-31

10-08today

Coming up

Nebius Token Factory · 11in 3 days
Google Gemini · 5in 11 days
api.relay.linkin 18 days

181–240 of 913

2026-11

form-data: form-data: CRLF injection in form-data via unescaped multipart field names and filenames
npm · form-datasecurity
Quote
“form-data: CRLF injection in form-data via unescaped multipart field names and filenames”
osv.dev ›
glob-parent: glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex
npm · glob-parentsecurity
Quote
“glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex”
osv.dev ›
glob: Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal
npm · globsecurity
Quote
“Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal”
osv.dev ›
js-yaml: js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources
npm · js-yamlsecurity
Quote
“js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources”
osv.dev ›
js-yaml: js-yaml: YAML merge-key chains can force quadratic CPU consumption
npm · js-yamlsecurity
Quote
“js-yaml: YAML merge-key chains can force quadratic CPU consumption”
osv.dev ›
js-yaml: JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported
npm · js-yamlsecurity
Quote
“JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) — CVE-2026-59870 fix not backported”
osv.dev ›
js-yaml: JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases
npm · js-yamlsecurity
Quote
“JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases”
osv.dev ›
js-yaml: js-yaml has prototype pollution in merge (<<)
npm · js-yamlsecurity
Quote
“js-yaml has prototype pollution in merge (<<)”
osv.dev ›
json-schema: json-schema is vulnerable to Prototype Pollution
npm · json-schemasecurity
Quote
“json-schema is vulnerable to Prototype Pollution”
osv.dev ›
lodash: Regular Expression Denial of Service (ReDoS) in lodash
npm · lodashsecurity
Quote
“Regular Expression Denial of Service (ReDoS) in lodash”
osv.dev ›
lodash: Command Injection in lodash
npm · lodashsecurity
Quote
“Command Injection in lodash”
osv.dev ›
lodash: lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`
npm · lodashsecurity
Quote
“lodash vulnerable to Prototype Pollution via array path bypass in _.unset and _.omit”
osv.dev ›
lodash: lodash vulnerable to Code Injection via `_.template` imports key names
npm · lodashsecurity
Quote
“lodash vulnerable to Code Injection via _.template imports key names”
osv.dev ›
lodash: Lodash has Prototype Pollution Vulnerability in `_.unset`, `_.omit`, and `_.pullAt` functions
npm · lodashsecurity
Quote
“Lodash has Prototype Pollution Vulnerability in _.unset, _.omit, and _.pullAt functions”
osv.dev ›
minimatch: minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions
npm · minimatchsecurity
Quote
“minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions”
osv.dev ›
minimatch: minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern
npm · minimatchsecurity
Quote
“minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern”
osv.dev ›
minimatch: minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments
npm · minimatchsecurity
Quote
“minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments”
osv.dev ›
minimatch: minimatch has potential denial of service via globparts amplification
npm · minimatchsecurity
Quote
“minimatch has potential denial of service via globparts amplification”
osv.dev ›
minimist: Prototype Pollution in minimist
npm · minimistsecurity
Quote
“Prototype Pollution in minimist”
osv.dev ›

2026-10

fs: Malicious code in fs (npm)
npm · fssecurity
Quote
“Malicious code in fs (npm)”
osv.dev ›
get-func-name: Chaijs/get-func-name vulnerable to ReDoS
npm · get-func-namesecurity
Quote
“Chaijs/get-func-name vulnerable to ReDoS”
osv.dev ›
glob: glob CLI: Command injection via -c/--cmd executes matches with shell:true
npm · globsecurity
Quote
“glob CLI: Command injection via -c/--cmd executes matches with shell:true”
osv.dev ›
got: Got allows a redirect to a UNIX socket
npm · gotsecurity
Quote
“Got allows a redirect to a UNIX socket”
osv.dev ›
handlebars: Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection
npm · handlebarssecurity
Quote
“Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection”
osv.dev ›
handlebars: Handlebars.js has JavaScript Injection via AST Type Confusion
npm · handlebarssecurity
Quote
“Handlebars.js has JavaScript Injection via AST Type Confusion”
osv.dev ›
handlebars: Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block
npm · handlebarssecurity
Quote
“Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block”
osv.dev ›
handlebars: Handlebars.js has a Property Access Validation Bypass in container.lookup
npm · handlebarssecurity
Quote
“Handlebars.js has a Property Access Validation Bypass in container.lookup”
osv.dev ›
handlebars: Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry
npm · handlebarssecurity
Quote
“Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry”
osv.dev ›
handlebars: Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)
npm · handlebarssecurity
Quote
“Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)”
osv.dev ›
handlebars: Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation
npm · handlebarssecurity
Quote
“Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation”
osv.dev ›
handlebars: Handlebars: JavaScript Injection via Own Property Check Bypass
npm · handlebarssecurity
Quote
“Handlebars: JavaScript Injection via Own Property Check Bypass”
osv.dev ›
handlebars: Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial
npm · handlebarssecurity
Quote
“Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial”
osv.dev ›
handlebars: Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options
npm · handlebarssecurity
Quote
“Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options”
osv.dev ›
handlebars: Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates
npm · handlebarssecurity
Quote
“Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates”
osv.dev ›
http-cache-semantics: http-cache-semantics vulnerable to Regular Expression Denial of Service
npm · http-cache-semanticssecurity
Quote
“http-cache-semantics vulnerable to Regular Expression Denial of Service”
osv.dev ›
immutable: Immutable.js `List` 32-bit trie overflow → unrecoverable DoS
npm · immutablesecurity
Quote
“Immutable.js List 32-bit trie overflow → unrecoverable DoS”
osv.dev ›
immutable: Immutable is vulnerable to Prototype Pollution
npm · immutablesecurity
Quote
“Immutable is vulnerable to Prototype Pollution”
osv.dev ›
immutable: Immutable: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set
npm · immutablesecurity
Quote
“Immutable: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set”
osv.dev ›
ip-address: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks
npm · ip-addresssecurity
Quote
“ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks”
osv.dev ›
ip-address: ip-address: no classifier recognizes the NAT64 local-use range 64:ff9b:1::/48, allowing SSRF and trust-boundary bypass
npm · ip-addresssecurity
Quote
“ip-address: no classifier recognizes the NAT64 local-use range 64:ff9b:1::/48, allowing SSRF and trust-boundary bypass”
osv.dev ›
ip-address: ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks
npm · ip-addresssecurity
Quote
“ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks”
osv.dev ›
ip-address: ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process
npm · ip-addresssecurity
Quote
“ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process”
osv.dev ›
ip-address: ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range
npm · ip-addresssecurity
Quote
“ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range”
osv.dev ›
ip-address: ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass
npm · ip-addresssecurity
Quote
“ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass”
osv.dev ›
ip-address: ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts
npm · ip-addresssecurity
Quote
“ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts”
osv.dev ›
ip-address: ip-address: Address6 matches a zone identifier in quadratic time ahead of its length limit, allowing a single long string to stall the process
npm · ip-addresssecurity
Quote
“ip-address: Address6 matches a zone identifier in quadratic time ahead of its length limit, allowing a single long string to stall the process”
osv.dev ›
ip: ip SSRF improper categorization in isPublic
npm · ipsecurity
Quote
“ip SSRF improper categorization in isPublic”
osv.dev ›
ip: NPM IP package incorrectly identifies some private IP addresses as public
npm · ipsecurity
Quote
“NPM IP package incorrectly identifies some private IP addresses as public”
osv.dev ›
json5: Prototype Pollution in JSON5 via Parse Method
npm · json5security
Quote
“Prototype Pollution in JSON5 via Parse Method”
osv.dev ›
linkify-it: LinkifyIt#match scan loop has quadratic algorithmic complexity
npm · linkify-itsecurity
Quote
“LinkifyIt#match scan loop has quadratic algorithmic complexity”
osv.dev ›
linkify-it: linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text
npm · linkify-itsecurity
Quote
“linkify-it: Quadratic-complexity DoS via the mailto: validator scan-loop on attacker text”
osv.dev ›
lodash-es: lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`
npm · lodash-essecurity
Quote
“lodash vulnerable to Prototype Pollution via array path bypass in _.unset and _.omit”
osv.dev ›
lodash-es: lodash vulnerable to Code Injection via `_.template` imports key names
npm · lodash-essecurity
Quote
“lodash vulnerable to Code Injection via _.template imports key names”
osv.dev ›
lodash-es: Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions
npm · lodash-essecurity
Quote
“Lodash has Prototype Pollution Vulnerability in _.unset and _.omit functions”
osv.dev ›
lodash.trim: Regular Expression Denial of Service (ReDoS) in lodash
npm · lodash.trimsecurity
Quote
“Regular Expression Denial of Service (ReDoS) in lodash”
osv.dev ›
lodash.trimend: Regular Expression Denial of Service (ReDoS) in lodash
npm · lodash.trimendsecurity
Quote
“Regular Expression Denial of Service (ReDoS) in lodash”
osv.dev ›
micromatch: Regular Expression Denial of Service (ReDoS) in micromatch
npm · micromatchsecurity
Quote
“Regular Expression Denial of Service (ReDoS) in micromatch”
osv.dev ›
min-document: min-document vulnerable to prototype pollution
npm · min-documentsecurity
Quote
“min-document vulnerable to prototype pollution”
osv.dev ›
minimatch: minimatch ReDoS vulnerability
npm · minimatchsecurity
Quote
“minimatch ReDoS vulnerability”
osv.dev ›
nanoid: nanoid: non-secure generators can loop indefinitely with negative size
npm · nanoidsecurity
Quote
“nanoid: non-secure generators can loop indefinitely with negative size”
osv.dev ›

‹ Previous4 / 16Next ›

Anthropic

Anthropic

claude-sonnet-4-5-20250929in 24 days

OpenAI

OpenAI

OpenAI · 3in 25 days