Teire
ChangesScanDocsTrust
Teire

When upstream breaks, Teire fixes your code.

teire-dev/teireSystem status
Built on
  • NVIDIA NemotronNVIDIA Nemotron
  • Nebius Token FactoryNebius Token Factory
  • dependabot-coredependabot-core
  • Cloudflare

Product

Scan a repoChangesInstall on GitHubDashboardDemo video

Developers

DocsGitHubCLI and MCPteire.yml schemanpm

Trust

How Teire runsSource code
Worker running
Watching 44 sources · checked 10 h ago

Changes

2158
in the catalog
595
new this week
62
dated ahead
  • Google Gemini10 h ago · 57
  • Goon demand · 87
  • Maven · Gradleon demand · 44
  • npmon demand · 913
  • Groq17 h ago · 43
  • Cargoon demand · 108
  • PyPIon demand · 243
  • Twitch18 h ago · 5
  • Bitbucket19 h ago · 0
  • GitLab19 h ago · 43
  • Context719 h ago · 0
  • RubyGems19 h ago · 83
  • Tavily19 h ago · 0
  • GitHub19 h ago · 23
  • Stripe19 h ago · 167

What's new

  • npm packages17 h agominimatch 3.1.5 → 11.0.3: changes the arguments of 2 function(s)●breaks on upgrade+13
  • RubyGems packages17 h agoactivesupport: Possible DoS vulnerability in Active Support safe_constantize✕security+8
  • RubyGems packages17 h ago

Picked up, last 30 days

one dot per day · bigger is more
  • npm

Every change

activestorage: Possible arbitrary file read and remote code execution in Active Storage video previews, analysis and image processing
✕security
+6
  • RubyGems packages17 h agoactionview: Possible XSS vulnerability in Action View highlight helper✕security+3
  • RubyGems packages17 h agoactionpack: Possible sensitive session information leak in Active Storage proxy mode✕security+6
  • RubyGems packages17 h agoactionmailbox: Possible signature replay in Action Mailbox Mailgun ingress✕security
  • PyPI packages17 h agoopenai 0.28.1 → 3.41.0: changes parameters of 5 function(s)●breaks on upgrade+21
  • Cargo packages18 h agopin-utils: `pin-utils` is unmaintained✕security
  • GitLab19 h agometrics.prometheus.port deprecated–notice+42
  • npm packages2 d ago@ruby/prism 1.9.0 → 2.1.0: removes 12 API(s)●breaks on upgrade+5
  • GitHub2 d agorerank-multilingual-v2.0 shutdown✕already broken+22
  • npm packages3 d agoopenai 4.104.0 → 7.45.1: removes 38 import path(s)●breaks on upgrade+34
    • 913
    : 110 on 2026-10-27, 18 on 2026-10-28, 22 on 2026-10-29, 738 on 2026-10-30, 6 on 2026-10-31, 5 on 2026-11-02, 5 on 2026-11-03, 6 on 2026-11-04, 3 on 2026-11-05
  • PyPI243: 143 on 2026-10-27, 9 on 2026-10-28, 3 on 2026-10-29, 76 on 2026-10-30, 3 on 2026-10-31, 3 on 2026-11-02, 3 on 2026-11-03, 3 on 2026-11-05
  • Stripe167: 167 on 2026-10-27
  • OpenAI145: 145 on 2026-10-27
  • Cargo108: 20 on 2026-10-27, 56 on 2026-10-28, 31 on 2026-10-30, 1 on 2026-11-05
  • Go87: 7 on 2026-10-27, 43 on 2026-10-28, 37 on 2026-10-30
  • RubyGems83: 17 on 2026-10-27, 6 on 2026-10-28, 16 on 2026-10-30, 4 on 2026-10-31, 7 on 2026-11-01, 12 on 2026-11-02, 21 on 2026-11-05
  • Perplexity59: 35 on 2026-10-27, 3 on 2026-10-30, 21 on 2026-11-03
  • Google Gemini57: 57 on 2026-10-27
  • Maven · Gradle44: 28 on 2026-10-27, 3 on 2026-10-29, 4 on 2026-10-30, 9 on 2026-10-31
    • 10-08today

    Coming up

    1. Nebius Token FactoryNebius Token FactoryNebius Token Factory · 11in 3 days
    2. Google GeminiGoogle Gemini · 5in 11 days
    3. relay-linkapi.relay.linkin 18 days
    301–360 of 913

    2026-10

    • npm packages
      node-forge: node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
      npm · node-forge✕security
      Quote
      “node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization”
      osv.dev ›
    • npm packages
      node-forge: Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input
      npm · node-forge✕security
      Quote
      “Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input”
      osv.dev ›
    • npm packages
      node-forge: node-forge is vulnerable to ASN.1 OID Integer Truncation
      npm · node-forge✕security
      Quote
      “node-forge is vulnerable to ASN.1 OID Integer Truncation”
      osv.dev ›
    • npm packages
      node-forge: node-forge RSA PKCS#1 v1.5 signature verification accepts extra nested DigestAlgorithm elements
      npm · node-forge✕security
      Quote
      “node-forge RSA PKCS#1 v1.5 signature verification accepts extra nested DigestAlgorithm elements”
      osv.dev ›
    • npm packages
      node-forge: Forge has signature forgery in Ed25519 due to missing S > L check
      npm · node-forge✕security
      Quote
      “Forge has signature forgery in Ed25519 due to missing S > L check”
      osv.dev ›
    • npm packages
      nth-check: Inefficient Regular Expression Complexity in nth-check
      npm · nth-check✕security
      Quote
      “Inefficient Regular Expression Complexity in nth-check”
      osv.dev ›
    • npm packages
      parse-duration: parse-duration has a Regex Denial of Service that results in event loop delay and out of memory
      npm · parse-duration✕security
      Quote
      “parse-duration has a Regex Denial of Service that results in event loop delay and out of memory”
      osv.dev ›
    • npm packages
      path-to-regexp: path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters
      npm · path-to-regexp✕security
      Quote
      “path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters”
      osv.dev ›
    • npm packages
      path-to-regexp: path-to-regexp outputs backtracking regular expressions
      npm · path-to-regexp✕security
      Quote
      “path-to-regexp outputs backtracking regular expressions”
      osv.dev ›
    • npm packages
      path-to-regexp: path-to-regexp contains a ReDoS
      npm · path-to-regexp✕security
      Quote
      “path-to-regexp contains a ReDoS”
      osv.dev ›
    • npm packages
      pbkdf2: pbkdf2 rehashes long passwords on every iteration, enabling denial of service
      npm · pbkdf2✕security
      Quote
      “pbkdf2 rehashes long passwords on every iteration, enabling denial of service”
      osv.dev ›
    • npm packages
      pbkdf2: pbkdf2 returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos
      npm · pbkdf2✕security
      Quote
      “pbkdf2 returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos”
      osv.dev ›
    • npm packages
      pbkdf2: pbkdf2 silently disregards Uint8Array input, returning static keys
      npm · pbkdf2✕security
      Quote
      “pbkdf2 silently disregards Uint8Array input, returning static keys”
      osv.dev ›
    • npm packages
      postcss-selector-parser: PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion
      npm · postcss-selector-parser✕security
      Quote
      “PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion”
      osv.dev ›
    • npm packages
      postcss-selector-parser: postcss-selector-parser allows denial of service through uncontrolled AST recursion
      npm · postcss-selector-parser✕security
      Quote
      “postcss-selector-parser allows denial of service through uncontrolled AST recursion”
      osv.dev ›
    • npm packages
      postcss: Regular Expression Denial of Service in postcss
      npm · postcss✕security
      Quote
      “Regular Expression Denial of Service in postcss”
      osv.dev ›
    • npm packages
      postcss: PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments
      npm · postcss✕security
      Quote
      “PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments”
      osv.dev ›
    • npm packages
      postcss: PostCSS line return parsing error
      npm · postcss✕security
      Quote
      “PostCSS line return parsing error”
      osv.dev ›
    • npm packages
      postcss: PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset
      npm · postcss✕security
      Quote
      “PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when from is unset”
      osv.dev ›
    • npm packages
      postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output
      npm · postcss✕security
      Quote
      “PostCSS has XSS via Unescaped </style> in its CSS Stringify Output”
      osv.dev ›
    • npm packages
      postcss: PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure
      npm · postcss✕security
      Quote
      “PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure”
      osv.dev ›
    • npm packages
      protobufjs: protobuf.js: Denial of service from crafted field names in generated code
      npm · protobufjs✕security
      Quote
      “protobuf.js: Denial of service from crafted field names in generated code”
      osv.dev ›
    • npm packages
      protobufjs: protobuf.js: Code injection through bytes field defaults in generated toObject code
      npm · protobufjs✕security
      Quote
      “protobuf.js: Code injection through bytes field defaults in generated toObject code”
      osv.dev ›
    • npm packages
      protobufjs: protobuf.js: Denial of service through unbounded protobuf recursion
      npm · protobufjs✕security
      Quote
      “protobuf.js: Denial of service through unbounded protobuf recursion”
      osv.dev ›
    • npm packages
      protobufjs: protobuf.js: Code generation gadget after prototype pollution
      npm · protobufjs✕security
      Quote
      “protobuf.js: Code generation gadget after prototype pollution”
      osv.dev ›
    • npm packages
      protobufjs: protobufjs : Schema-derived names can shadow runtime-significant properties
      npm · protobufjs✕security
      Quote
      “protobufjs : Schema-derived names can shadow runtime-significant properties”
      osv.dev ›
    • npm packages
      protobufjs: protobuf.js: Prototype injection in generated message constructors
      npm · protobufjs✕security
      Quote
      “protobuf.js: Prototype injection in generated message constructors”
      osv.dev ›
    • npm packages
      protobufjs: protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion
      npm · protobufjs✕security
      Quote
      “protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion”
      osv.dev ›
    • npm packages
      protobufjs: protobuf.js: Process-wide denial of service through unsafe option paths
      npm · protobufjs✕security
      Quote
      “protobuf.js: Process-wide denial of service through unsafe option paths”
      osv.dev ›
    • npm packages
      protobufjs: protobufjs has overlong UTF-8 decoding
      npm · protobufjs✕security
      Quote
      “protobufjs has overlong UTF-8 decoding”
      osv.dev ›
    • npm packages
      protobufjs: protobufjs: Denial of service through unbounded Any expansion during JSON conversion
      npm · protobufjs✕security
      Quote
      “protobufjs: Denial of service through unbounded Any expansion during JSON conversion”
      osv.dev ›
    • npm packages
      protobufjs: Arbitrary code execution in protobufjs
      npm · protobufjs✕security
      Quote
      “Arbitrary code execution in protobufjs”
      osv.dev ›
    • npm packages
      proxy-addr: proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet
      npm · proxy-addr✕security
      Quote
      “proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet”
      osv.dev ›
    • npm packages
      qs: qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)
      npm · qs✕security
      Quote
      “qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)”
      osv.dev ›
    • npm packages
      qs: qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set
      npm · qs✕security
      Quote
      “qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set”
      osv.dev ›
    • npm packages
      qs: qs's arrayLimit bypass in comma parsing allows denial of service
      npm · qs✕security
      Quote
      “qs's arrayLimit bypass in comma parsing allows denial of service”
      osv.dev ›
    • npm packages
      re2js: RE2JS: Quadratic-time denial of service in re2js lookbehind matching
      npm · re2js✕security
      Quote
      “RE2JS: Quadratic-time denial of service in re2js lookbehind matching”
      osv.dev ›
    • npm packages
      react-draft-wysiwyg: React Draft Wysiwyg Cross-Site Scripting (XSS) via the Embedded Button
      npm · react-draft-wysiwyg✕security
      Quote
      “React Draft Wysiwyg Cross-Site Scripting (XSS) via the Embedded Button”
      osv.dev ›
    • npm packages
      react-router: React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation
      npm · react-router✕security
      Quote
      “React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation”
      osv.dev ›
    • npm packages
      react-router: React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration
      npm · react-router✕security
      Quote
      “React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration”
      osv.dev ›
    • npm packages
      react-router: React Router has unexpected external redirect via untrusted paths
      npm · react-router✕security
      Quote
      “React Router has unexpected external redirect via untrusted paths”
      osv.dev ›
    • npm packages
      react-router: React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)
      npm · react-router✕security
      Quote
      “React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)”
      osv.dev ›
    • npm packages
      rollup: DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS
      npm · rollup✕security
      Quote
      “DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS”
      osv.dev ›
    • npm packages
      rollup: Rollup 4 has Arbitrary File Write via Path Traversal
      npm · rollup✕security
      Quote
      “Rollup 4 has Arbitrary File Write via Path Traversal”
      osv.dev ›
    • npm packages
      secp256k1: secp256k1-node allows private key extraction over ECDH
      npm · secp256k1✕security
      Quote
      “secp256k1-node allows private key extraction over ECDH”
      osv.dev ›
    • npm packages
      send: send vulnerable to template injection that can lead to XSS
      npm · send✕security
      Quote
      “send vulnerable to template injection that can lead to XSS”
      osv.dev ›
    • npm packages
      serialize-javascript: Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()
      npm · serialize-javascript✕security
      Quote
      “Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()”
      osv.dev ›
    • npm packages
      serialize-javascript: Cross-site Scripting (XSS) in serialize-javascript
      npm · serialize-javascript✕security
      Quote
      “Cross-site Scripting (XSS) in serialize-javascript”
      osv.dev ›
    • npm packages
      serialize-javascript: Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body
      npm · serialize-javascript✕security
      Quote
      “Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body”
      osv.dev ›
    • npm packages
      serialize-javascript: Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects
      npm · serialize-javascript✕security
      Quote
      “Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects”
      osv.dev ›
    • npm packages
      seroval: Seroval: Script injection through RegExp sources in serialized output
      npm · seroval✕security
      Quote
      “Seroval: Script injection through RegExp sources in serialized output”
      osv.dev ›
    • npm packages
      seroval: Seroval: Code injection through a typed array's own constructor property
      npm · seroval✕security
      Quote
      “Seroval: Code injection through a typed array's own constructor property”
      osv.dev ›
    • npm packages
      serve-static: serve-static vulnerable to template injection that can lead to XSS
      npm · serve-static✕security
      Quote
      “serve-static vulnerable to template injection that can lead to XSS”
      osv.dev ›

    2026-11

    • npm packages
      picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching
      npm · picomatch✕security
      Quote
      “Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching”
      osv.dev ›
    • npm packages
      picomatch: Picomatch has a ReDoS vulnerability via extglob quantifiers
      npm · picomatch✕security
      Quote
      “Picomatch has a ReDoS vulnerability via extglob quantifiers”
      osv.dev ›
    • npm packages
      qs: qs: Denial of Service via Attacker Controlled isBuffer
      npm · qs✕security
      Quote
      “qs: Denial of Service via Attacker Controlled isBuffer”
      osv.dev ›
    • npm packages
      qs: qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion
      npm · qs✕security
      Quote
      “qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion”
      osv.dev ›
    • npm packages
      qs: qs vulnerable to Prototype Pollution
      npm · qs✕security
      Quote
      “qs vulnerable to Prototype Pollution”
      osv.dev ›
    • npm packages
      request: Server-Side Request Forgery in Request
      npm · request✕security
      Quote
      “Server-Side Request Forgery in Request”
      osv.dev ›
    • npm packages
      semver: semver vulnerable to Regular Expression Denial of Service
      npm · semver✕security
      Quote
      “semver vulnerable to Regular Expression Denial of Service”
      osv.dev ›
    ‹ Previous6 / 16Next ›
  • AnthropicAnthropicclaude-sonnet-4-5-20250929in 24 days
  • OpenAIOpenAIOpenAI · 3in 25 days
    • 14 more ›