Changes Scan Docs Trust

When upstream breaks, Teire fixes your code.

teire-dev/teire System status

Built on

Product

Scan a repo Changes Install on GitHub Dashboard Demo video

Developers

Docs GitHub CLI and MCP teire.yml schema npm

Trust

How Teire runs Source code

Watching 44 sources · checked 6 h ago

Changes

2158
in the catalog: 1153
new this week: 62
dated ahead

Google Gemini6 h ago · 57
Goon demand · 87
Maven · Gradleon demand · 44
npmon demand · 913
Groq14 h ago · 43
Cargoon demand · 108
PyPIon demand · 243
Twitch14 h ago · 5
Bitbucket15 h ago · 0
GitLab15 h ago · 43
Context715 h ago · 0
RubyGems15 h ago · 83
Tavily15 h ago · 0
GitHub15 h ago · 23
Stripe15 h ago · 167

What's new

npm packages13 h agominimatch 3.1.5 → 11.0.3: changes the arguments of 2 function(s)breaks on upgrade +13
RubyGems packages14 h agoactivesupport: Possible DoS vulnerability in Active Support safe_constantizesecurity +8
RubyGems packages14 h ago

Picked up, last 30 days

one dot per day · bigger is more

npm

Every change

activestorage: Possible arbitrary file read and remote code execution in Active Storage video previews, analysis and image processing

✕security

RubyGems packages14 h agoactionview: Possible XSS vulnerability in Action View highlight helper✕security +3

RubyGems packages14 h agoactionpack: Possible sensitive session information leak in Active Storage proxy mode✕security +6

RubyGems packages14 h agoactionmailbox: Possible signature replay in Action Mailbox Mailgun ingress✕security

PyPI packages14 h agoopenai 0.28.1 → 3.41.0: changes parameters of 5 function(s)●breaks on upgrade +21

Cargo packages14 h agopin-utils: `pin-utils` is unmaintained✕security

GitLab15 h agometrics.prometheus.port deprecated–notice +42

npm packages2 d ago@ruby/prism 1.9.0 → 2.1.0: removes 12 API(s)●breaks on upgrade +5

GitHub2 d agorerank-multilingual-v2.0 shutdown✕already broken +22

npm packages2 d agoopenai 4.104.0 → 7.45.1: removes 38 import path(s)●breaks on upgrade +34

913

: 110 on 2026-10-27, 18 on 2026-10-28, 22 on 2026-10-29, 738 on 2026-10-30, 6 on 2026-10-31, 5 on 2026-11-02, 5 on 2026-11-03, 6 on 2026-11-04, 3 on 2026-11-05

PyPI243: 143 on 2026-10-27, 9 on 2026-10-28, 3 on 2026-10-29, 76 on 2026-10-30, 3 on 2026-10-31, 3 on 2026-11-02, 3 on 2026-11-03, 3 on 2026-11-05

Stripe167: 167 on 2026-10-27

OpenAI145: 145 on 2026-10-27

Cargo108: 20 on 2026-10-27, 56 on 2026-10-28, 31 on 2026-10-30, 1 on 2026-11-05

Go87: 7 on 2026-10-27, 43 on 2026-10-28, 37 on 2026-10-30

RubyGems83: 17 on 2026-10-27, 6 on 2026-10-28, 16 on 2026-10-30, 4 on 2026-10-31, 7 on 2026-11-01, 12 on 2026-11-02, 21 on 2026-11-05

Perplexity59: 35 on 2026-10-27, 3 on 2026-10-30, 21 on 2026-11-03

Google Gemini57: 57 on 2026-10-27

Maven · Gradle44: 28 on 2026-10-27, 3 on 2026-10-29, 4 on 2026-10-30, 9 on 2026-10-31

10-08today

Coming up

Nebius Token Factory · 11in 3 days
Google Gemini · 5in 11 days
api.relay.linkin 18 days

241–300 of 2158

2026-10

@tootallnate/once: @tootallnate/once vulnerable to Incorrect Control Flow Scoping
npm · @tootallnate/oncesecurity
Quote
“@tootallnate/once vulnerable to Incorrect Control Flow Scoping”
osv.dev ›
@vitest/mocker: Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock
npm · @vitest/mockersecurity
Quote
“Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock”
osv.dev ›
@vitest/mocker: Vitest: Code injection via unauthenticated manual mock registration
npm · @vitest/mockersecurity
Quote
“Vitest: Code injection via unauthenticated manual mock registration”
osv.dev ›
@vitest/mocker: Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix
npm · @vitest/mockersecurity
Quote
“Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix”
osv.dev ›
adm-zip: adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)
npm · adm-zipsecurity
Quote
“adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)”
osv.dev ›
adm-zip: adm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS)
npm · adm-zipsecurity
Quote
“adm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS)”
osv.dev ›
adm-zip: adm-zip: getDataAsync() bypasses the maxOutputLength size guard enforced by the synchronous getData() path
npm · adm-zipsecurity
Quote
“adm-zip: getDataAsync() bypasses the maxOutputLength size guard enforced by the synchronous getData() path”
osv.dev ›
adm-zip: adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation
npm · adm-zipsecurity
Quote
“adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation”
osv.dev ›
adm-zip: adm-zip: Duplicate ZIP entry names: getEntry() and extractAllTo() resolve to different content
npm · adm-zipsecurity
Quote
“adm-zip: Duplicate ZIP entry names: getEntry() and extractAllTo() resolve to different content”
osv.dev ›
adm-zip: adm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 0
npm · adm-zipsecurity
Quote
“adm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 0”
osv.dev ›
adm-zip: adm-zip: Crafted ZIP file triggers 4GB memory allocation
npm · adm-zipsecurity
Quote
“adm-zip: Crafted ZIP file triggers 4GB memory allocation”
osv.dev ›
async: Prototype Pollution in async
npm · asyncsecurity
Quote
“Prototype Pollution in async”
osv.dev ›
axios: axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
npm · axiossecurity
Quote
“axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in config.proxy”
osv.dev ›
axios: axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
npm · axiossecurity
Quote
“axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge”
osv.dev ›
axios: Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF
npm · axiossecurity
Quote
“Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF”
osv.dev ›
axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`
npm · axiossecurity
Quote
“Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in parseReviver”
osv.dev ›
axios: Axios: Excessive recursion in formDataToJSON can cause denial of service
npm · axiossecurity
Quote
“Axios: Excessive recursion in formDataToJSON can cause denial of service”
osv.dev ›
axios: Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig
npm · axiossecurity
Quote
“Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig”
osv.dev ›
axios: Axios: CRLF Injection in multipart/form-data body via unsanitized blob.type in formDataToStream
npm · axiossecurity
Quote
“Axios: CRLF Injection in multipart/form-data body via unsanitized blob.type in formDataToStream”
osv.dev ›
axios: Axios is vulnerable to DoS attack through lack of data size check
npm · axiossecurity
Quote
“Axios is vulnerable to DoS attack through lack of data size check”
osv.dev ›
axios: Axios' HTTP adapter-streamed uploads bypass maxBodyLength when maxRedirects: 0
npm · axiossecurity
Quote
“Axios' HTTP adapter-streamed uploads bypass maxBodyLength when maxRedirects: 0”
osv.dev ›
axios: Axios: unbounded recursion in toFormData causes DoS via deeply nested request data
npm · axiossecurity
Quote
“Axios: unbounded recursion in toFormData causes DoS via deeply nested request data”
osv.dev ›
axios: Axios: Header Injection via Prototype Pollution
npm · axiossecurity
Quote
“Axios: Header Injection via Prototype Pollution”
osv.dev ›
axios: Axios: Nested axios option objects can consume polluted prototype values
npm · axiossecurity
Quote
“Axios: Nested axios option objects can consume polluted prototype values”
osv.dev ›
axios: axios has DoS & Header Injection via Prototype Pollution Read-Side Gadgets in axios merge functions
npm · axiossecurity
Quote
“axios has DoS & Header Injection via Prototype Pollution Read-Side Gadgets in axios merge functions”
osv.dev ›
axios: Server-Side Request Forgery in axios
npm · axiossecurity
Quote
“Server-Side Request Forgery in axios”
osv.dev ›
axios: Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method
npm · axiossecurity
Quote
“Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method”
osv.dev ›
axios: Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain
npm · axiossecurity
Quote
“Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain”
osv.dev ›
axios: Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection
npm · axiossecurity
Quote
“Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection”
osv.dev ›
axios: Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection
npm · axiossecurity
Quote
“Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection”
osv.dev ›
axios: Axios: Header Injection via Inherited headers After Minimal Interceptor
npm · axiossecurity
Quote
“Axios: Header Injection via Inherited headers After Minimal Interceptor”
osv.dev ›
axios: axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL
npm · axiossecurity
Quote
“axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL”
osv.dev ›
axios: Axios: no_proxy bypass via IP alias allows SSRF
npm · axiossecurity
Quote
“Axios: no_proxy bypass via IP alias allows SSRF”
osv.dev ›
axios: Axios: Prototype pollution gadgets can alter axios request construction
npm · axiossecurity
Quote
“Axios: Prototype pollution gadgets can alter axios request construction”
osv.dev ›
axios: Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter
npm · axiossecurity
Quote
“Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter”
osv.dev ›
axios: Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking
npm · axiossecurity
Quote
“Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking”
osv.dev ›
axios: axios's shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)
npm · axiossecurity
Quote
“axios's shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)”
osv.dev ›
axios: Axios: Deep formToJSON Key Recursion Can Cause Denial of Service
npm · axiossecurity
Quote
“Axios: Deep formToJSON Key Recursion Can Cause Denial of Service”
osv.dev ›
axios: Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0
npm · axiossecurity
Quote
“Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0”
osv.dev ›
axios: Axios has prototype pollution read-side gadgets in HTTP adapter that allow credential injection and request hijacking
npm · axiossecurity
Quote
“Axios has prototype pollution read-side gadgets in HTTP adapter that allow credential injection and request hijacking”
osv.dev ›
axios: Axios: HTTP adapter streamed responses bypass maxContentLength
npm · axiossecurity
Quote
“Axios: HTTP adapter streamed responses bypass maxContentLength”
osv.dev ›
axios: Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy
npm · axiossecurity
Quote
“Axios: Authentication Bypass via Prototype Pollution Gadget in validateStatus Merge Strategy”
osv.dev ›
axios: Axios Cross-Site Request Forgery Vulnerability
npm · axiossecurity
Quote
“Axios Cross-Site Request Forgery Vulnerability”
osv.dev ›
axios: Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams
npm · axiossecurity
Quote
“Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams”
osv.dev ›
axios: Axios: XSRF Token Cross-Origin Leakage via Prototype Pollution Gadget in `withXSRFToken` Boolean Coercion
npm · axiossecurity
Quote
“Axios: XSRF Token Cross-Origin Leakage via Prototype Pollution Gadget in withXSRFToken Boolean Coercion”
osv.dev ›
babel-traverse: Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code
npm · babel-traversesecurity
Quote
“Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code”
osv.dev ›
base-x: Homograph attack allows Unicode lookalike characters to bypass validation.
npm · base-xsecurity
Quote
“Homograph attack allows Unicode lookalike characters to bypass validation.”
osv.dev ›
baseline-browser-mapping: baseline-browser-mapping process termination on invalid input causes denial of service
npm · baseline-browser-mappingsecurity
Quote
“baseline-browser-mapping process termination on invalid input causes denial of service”
osv.dev ›
better-auth: @better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL
npm · better-authsecurity
Quote
“@better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL”
osv.dev ›
better-auth: better-auth: OAuth state can be used as a Magic Link to sign in as another user
npm · better-authsecurity
Quote
“better-auth: OAuth state can be used as a Magic Link to sign in as another user”
osv.dev ›
better-auth: better-auth: OAuth Proxy lets an attacker sign in as another user
npm · better-authsecurity
Quote
“better-auth: OAuth Proxy lets an attacker sign in as another user”
osv.dev ›
bigint-buffer: bigint-buffer Vulnerable to Buffer Overflow via toBigIntLE() Function
npm · bigint-buffersecurity
Quote
“bigint-buffer Vulnerable to Buffer Overflow via toBigIntLE() Function”
osv.dev ›
bn.js: bn.js affected by an infinite loop
npm · bn.jssecurity
Quote
“bn.js affected by an infinite loop”
osv.dev ›
body-parser: body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body
npm · body-parsersecurity
Quote
“body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body”
osv.dev ›
body-parser: body-parser vulnerable to denial of service when url encoding is enabled
npm · body-parsersecurity
Quote
“body-parser vulnerable to denial of service when url encoding is enabled”
osv.dev ›
body-parser: body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement
npm · body-parsersecurity
Quote
“body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement”
osv.dev ›

2026-11

ajv: ajv has ReDoS when using `$data` option
npm · ajvsecurity
Quote
“ajv has ReDoS when using $data option”
osv.dev ›
ajv: Prototype Pollution in Ajv
npm · ajvsecurity
Quote
“Prototype Pollution in Ajv”
osv.dev ›
ansi-regex: Inefficient Regular Expression Complexity in chalk/ansi-regex
npm · ansi-regexsecurity
Quote
“Inefficient Regular Expression Complexity in chalk/ansi-regex”
osv.dev ›
brace-expansion: brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups
npm · brace-expansionsecurity
Quote
“brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups”
osv.dev ›

‹ Previous5 / 36Next ›

Anthropic

Anthropic

claude-sonnet-4-5-20250929in 24 days

OpenAI

OpenAI

OpenAI · 3in 25 days