Teire
ChangesScanDocsTrust
Teire

When upstream breaks, Teire fixes your code.

teire-dev/teireSystem status
Built on
  • NVIDIA NemotronNVIDIA Nemotron
  • Nebius Token FactoryNebius Token Factory
  • dependabot-coredependabot-core
  • Cloudflare

Product

Scan a repoChangesInstall on GitHubDashboardDemo video

Developers

DocsGitHubCLI and MCPteire.yml schemanpm

Trust

How Teire runsSource code
Worker running
Watching 44 sources · checked 9 h ago

Changes

2158
in the catalog
1153
new this week
62
dated ahead
  • Google Gemini9 h ago · 57
  • Goon demand · 87
  • Maven · Gradleon demand · 44
  • npmon demand · 913
  • Groq17 h ago · 43
  • Cargoon demand · 108
  • PyPIon demand · 243
  • Twitch17 h ago · 5
  • Bitbucket18 h ago · 0
  • GitLab18 h ago · 43
  • Context718 h ago · 0
  • RubyGems18 h ago · 83
  • Tavily18 h ago · 0
  • GitHub18 h ago · 23
  • Stripe18 h ago · 167

What's new

  • npm packages16 h agominimatch 3.1.5 → 11.0.3: changes the arguments of 2 function(s)●breaks on upgrade+13
  • RubyGems packages17 h agoactivesupport: Possible DoS vulnerability in Active Support safe_constantize✕security+8
  • RubyGems packages17 h ago

Picked up, last 30 days

one dot per day · bigger is more
  • npm

Every change

activestorage: Possible arbitrary file read and remote code execution in Active Storage video previews, analysis and image processing
✕security
+6
  • RubyGems packages17 h agoactionview: Possible XSS vulnerability in Action View highlight helper✕security+3
  • RubyGems packages17 h agoactionpack: Possible sensitive session information leak in Active Storage proxy mode✕security+6
  • RubyGems packages17 h agoactionmailbox: Possible signature replay in Action Mailbox Mailgun ingress✕security
  • PyPI packages17 h agoopenai 0.28.1 → 3.41.0: changes parameters of 5 function(s)●breaks on upgrade+21
  • Cargo packages17 h agopin-utils: `pin-utils` is unmaintained✕security
  • GitLab18 h agometrics.prometheus.port deprecated–notice+42
  • npm packages2 d ago@ruby/prism 1.9.0 → 2.1.0: removes 12 API(s)●breaks on upgrade+5
  • GitHub2 d agorerank-multilingual-v2.0 shutdown✕already broken+22
  • npm packages3 d agoopenai 4.104.0 → 7.45.1: removes 38 import path(s)●breaks on upgrade+34
    • 913
    : 110 on 2026-10-27, 18 on 2026-10-28, 22 on 2026-10-29, 738 on 2026-10-30, 6 on 2026-10-31, 5 on 2026-11-02, 5 on 2026-11-03, 6 on 2026-11-04, 3 on 2026-11-05
  • PyPI243: 143 on 2026-10-27, 9 on 2026-10-28, 3 on 2026-10-29, 76 on 2026-10-30, 3 on 2026-10-31, 3 on 2026-11-02, 3 on 2026-11-03, 3 on 2026-11-05
  • Stripe167: 167 on 2026-10-27
  • OpenAI145: 145 on 2026-10-27
  • Cargo108: 20 on 2026-10-27, 56 on 2026-10-28, 31 on 2026-10-30, 1 on 2026-11-05
  • Go87: 7 on 2026-10-27, 43 on 2026-10-28, 37 on 2026-10-30
  • RubyGems83: 17 on 2026-10-27, 6 on 2026-10-28, 16 on 2026-10-30, 4 on 2026-10-31, 7 on 2026-11-01, 12 on 2026-11-02, 21 on 2026-11-05
  • Perplexity59: 35 on 2026-10-27, 3 on 2026-10-30, 21 on 2026-11-03
  • Google Gemini57: 57 on 2026-10-27
  • Maven · Gradle44: 28 on 2026-10-27, 3 on 2026-10-29, 4 on 2026-10-30, 9 on 2026-10-31
    • 10-08today

    Coming up

    1. Nebius Token FactoryNebius Token FactoryNebius Token Factory · 11in 3 days
    2. Google GeminiGoogle Gemini · 5in 11 days
    3. relay-linkapi.relay.linkin 18 days
    481–540 of 2158

    2026-10

    • npm packages
      next: Next.js HTTP request deserialization can lead to DoS when using insecure React Server Components
      npm · next✕security
      Quote
      “Next.js HTTP request deserialization can lead to DoS when using insecure React Server Components”
      osv.dev ›
    • npm packages
      next: Next.js: Unbounded postponed resume buffering can lead to DoS
      npm · next✕security
      Quote
      “Next.js: Unbounded postponed resume buffering can lead to DoS”
      osv.dev ›
    • npm packages
      next: Next.js has a Denial of Service in the Image Optimization API
      npm · next✕security
      Quote
      “Next.js has a Denial of Service in the Image Optimization API”
      osv.dev ›
    • npm packages
      next: Next.js: null origin can bypass dev HMR websocket CSRF checks
      npm · next✕security
      Quote
      “Next.js: null origin can bypass dev HMR websocket CSRF checks”
      osv.dev ›
    • npm packages
      next: Next.js: Denial of Service in App Router using Server Actions
      npm · next✕security
      Quote
      “Next.js: Denial of Service in App Router using Server Actions”
      osv.dev ›
    • npm packages
      next: Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service
      npm · next✕security
      Quote
      “Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service”
      osv.dev ›
    • npm packages
      next: Next.js vulnerable to Denial of Service via connection exhaustion in applications using Cache Components
      npm · next✕security
      Quote
      “Next.js vulnerable to Denial of Service via connection exhaustion in applications using Cache Components”
      osv.dev ›
    • npm packages
      next: Next.js: null origin can bypass Server Actions CSRF checks
      npm · next✕security
      Quote
      “Next.js: null origin can bypass Server Actions CSRF checks”
      osv.dev ›
    • npm packages
      next: Next Vulnerable to Denial of Service with Server Components
      npm · next✕security
      Quote
      “Next Vulnerable to Denial of Service with Server Components”
      osv.dev ›
    • npm packages
      next: Next.js: Unauthenticated Remote Code Execution on windows-hosted servers
      npm · next✕security
      Quote
      “Next.js: Unauthenticated Remote Code Execution on windows-hosted servers”
      osv.dev ›
    • npm packages
      next: Next.js: Denial of Service in App Router using Server Actions
      npm · next✕security
      Quote
      “Next.js: Denial of Service in App Router using Server Actions”
      osv.dev ›
    • npm packages
      next: Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname
      npm · next✕security
      Quote
      “Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname”
      osv.dev ›
    • npm packages
      next: Next.js has a Denial of Service with Server Components
      npm · next✕security
      Quote
      “Next.js has a Denial of Service with Server Components”
      osv.dev ›
    • npm packages
      next: Next.js: Denial of Service in the Image Optimization API using SVGs
      npm · next✕security
      Quote
      “Next.js: Denial of Service in the Image Optimization API using SVGs”
      osv.dev ›
    • npm packages
      next: Next.js Race Condition to Cache Poisoning
      npm · next✕security
      Quote
      “Next.js Race Condition to Cache Poisoning”
      osv.dev ›
    • npm packages
      next: Next.js vulnerable to cache poisoning via collisions in React Server Component cache-busting
      npm · next✕security
      Quote
      “Next.js vulnerable to cache poisoning via collisions in React Server Component cache-busting”
      osv.dev ›
    • npm packages
      next: Next.js vulnerable to cache poisoning in React Server Component responses
      npm · next✕security
      Quote
      “Next.js vulnerable to cache poisoning in React Server Component responses”
      osv.dev ›
    • npm packages
      next: Next.js Content Injection Vulnerability for Image Optimization
      npm · next✕security
      Quote
      “Next.js Content Injection Vulnerability for Image Optimization”
      osv.dev ›
    • npm packages
      node-forge: Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)
      npm · node-forge✕security
      Quote
      “Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)”
      osv.dev ›
    • npm packages
      node-forge: node-forge has ASN.1 Unbounded Recursion
      npm · node-forge✕security
      Quote
      “node-forge has ASN.1 Unbounded Recursion”
      osv.dev ›
    • npm packages
      node-forge: node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
      npm · node-forge✕security
      Quote
      “node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization”
      osv.dev ›
    • npm packages
      node-forge: Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input
      npm · node-forge✕security
      Quote
      “Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input”
      osv.dev ›
    • npm packages
      node-forge: node-forge is vulnerable to ASN.1 OID Integer Truncation
      npm · node-forge✕security
      Quote
      “node-forge is vulnerable to ASN.1 OID Integer Truncation”
      osv.dev ›
    • npm packages
      node-forge: node-forge RSA PKCS#1 v1.5 signature verification accepts extra nested DigestAlgorithm elements
      npm · node-forge✕security
      Quote
      “node-forge RSA PKCS#1 v1.5 signature verification accepts extra nested DigestAlgorithm elements”
      osv.dev ›
    • npm packages
      node-forge: Forge has signature forgery in Ed25519 due to missing S > L check
      npm · node-forge✕security
      Quote
      “Forge has signature forgery in Ed25519 due to missing S > L check”
      osv.dev ›
    • npm packages
      nth-check: Inefficient Regular Expression Complexity in nth-check
      npm · nth-check✕security
      Quote
      “Inefficient Regular Expression Complexity in nth-check”
      osv.dev ›
    • npm packages
      parse-duration: parse-duration has a Regex Denial of Service that results in event loop delay and out of memory
      npm · parse-duration✕security
      Quote
      “parse-duration has a Regex Denial of Service that results in event loop delay and out of memory”
      osv.dev ›
    • npm packages
      path-to-regexp: path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters
      npm · path-to-regexp✕security
      Quote
      “path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters”
      osv.dev ›
    • npm packages
      path-to-regexp: path-to-regexp outputs backtracking regular expressions
      npm · path-to-regexp✕security
      Quote
      “path-to-regexp outputs backtracking regular expressions”
      osv.dev ›
    • npm packages
      path-to-regexp: path-to-regexp contains a ReDoS
      npm · path-to-regexp✕security
      Quote
      “path-to-regexp contains a ReDoS”
      osv.dev ›
    • npm packages
      pbkdf2: pbkdf2 rehashes long passwords on every iteration, enabling denial of service
      npm · pbkdf2✕security
      Quote
      “pbkdf2 rehashes long passwords on every iteration, enabling denial of service”
      osv.dev ›
    • npm packages
      pbkdf2: pbkdf2 returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos
      npm · pbkdf2✕security
      Quote
      “pbkdf2 returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos”
      osv.dev ›
    • npm packages
      pbkdf2: pbkdf2 silently disregards Uint8Array input, returning static keys
      npm · pbkdf2✕security
      Quote
      “pbkdf2 silently disregards Uint8Array input, returning static keys”
      osv.dev ›
    • npm packages
      postcss-selector-parser: PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion
      npm · postcss-selector-parser✕security
      Quote
      “PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion”
      osv.dev ›
    • npm packages
      postcss-selector-parser: postcss-selector-parser allows denial of service through uncontrolled AST recursion
      npm · postcss-selector-parser✕security
      Quote
      “postcss-selector-parser allows denial of service through uncontrolled AST recursion”
      osv.dev ›
    • npm packages
      postcss: Regular Expression Denial of Service in postcss
      npm · postcss✕security
      Quote
      “Regular Expression Denial of Service in postcss”
      osv.dev ›
    • npm packages
      postcss: PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments
      npm · postcss✕security
      Quote
      “PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments”
      osv.dev ›
    • npm packages
      postcss: PostCSS line return parsing error
      npm · postcss✕security
      Quote
      “PostCSS line return parsing error”
      osv.dev ›
    • npm packages
      postcss: PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset
      npm · postcss✕security
      Quote
      “PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when from is unset”
      osv.dev ›
    • npm packages
      postcss: PostCSS has XSS via Unescaped </style> in its CSS Stringify Output
      npm · postcss✕security
      Quote
      “PostCSS has XSS via Unescaped </style> in its CSS Stringify Output”
      osv.dev ›
    • npm packages
      postcss: PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure
      npm · postcss✕security
      Quote
      “PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure”
      osv.dev ›
    • npm packages
      protobufjs: protobuf.js: Denial of service from crafted field names in generated code
      npm · protobufjs✕security
      Quote
      “protobuf.js: Denial of service from crafted field names in generated code”
      osv.dev ›
    • npm packages
      protobufjs: protobuf.js: Code injection through bytes field defaults in generated toObject code
      npm · protobufjs✕security
      Quote
      “protobuf.js: Code injection through bytes field defaults in generated toObject code”
      osv.dev ›
    • npm packages
      protobufjs: protobuf.js: Denial of service through unbounded protobuf recursion
      npm · protobufjs✕security
      Quote
      “protobuf.js: Denial of service through unbounded protobuf recursion”
      osv.dev ›
    • npm packages
      protobufjs: protobuf.js: Code generation gadget after prototype pollution
      npm · protobufjs✕security
      Quote
      “protobuf.js: Code generation gadget after prototype pollution”
      osv.dev ›
    • npm packages
      protobufjs: protobufjs : Schema-derived names can shadow runtime-significant properties
      npm · protobufjs✕security
      Quote
      “protobufjs : Schema-derived names can shadow runtime-significant properties”
      osv.dev ›
    • npm packages
      protobufjs: protobuf.js: Prototype injection in generated message constructors
      npm · protobufjs✕security
      Quote
      “protobuf.js: Prototype injection in generated message constructors”
      osv.dev ›
    • npm packages
      protobufjs: protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion
      npm · protobufjs✕security
      Quote
      “protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion”
      osv.dev ›
    • npm packages
      protobufjs: protobuf.js: Process-wide denial of service through unsafe option paths
      npm · protobufjs✕security
      Quote
      “protobuf.js: Process-wide denial of service through unsafe option paths”
      osv.dev ›
    • npm packages
      protobufjs: protobufjs has overlong UTF-8 decoding
      npm · protobufjs✕security
      Quote
      “protobufjs has overlong UTF-8 decoding”
      osv.dev ›
    • npm packages
      protobufjs: protobufjs: Denial of service through unbounded Any expansion during JSON conversion
      npm · protobufjs✕security
      Quote
      “protobufjs: Denial of service through unbounded Any expansion during JSON conversion”
      osv.dev ›
    • npm packages
      protobufjs: Arbitrary code execution in protobufjs
      npm · protobufjs✕security
      Quote
      “Arbitrary code execution in protobufjs”
      osv.dev ›
    • npm packages
      proxy-addr: proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet
      npm · proxy-addr✕security
      Quote
      “proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet”
      osv.dev ›
    • npm packages
      qs: qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)
      npm · qs✕security
      Quote
      “qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)”
      osv.dev ›

    2026-11

    • npm packages
      node-fetch: node-fetch forwards secure headers to untrusted sites
      npm · node-fetch✕security
      Quote
      “node-fetch forwards secure headers to untrusted sites”
      osv.dev ›
    • npm packages
      picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching
      npm · picomatch✕security
      Quote
      “Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching”
      osv.dev ›
    • npm packages
      picomatch: Picomatch has a ReDoS vulnerability via extglob quantifiers
      npm · picomatch✕security
      Quote
      “Picomatch has a ReDoS vulnerability via extglob quantifiers”
      osv.dev ›
    • npm packages
      qs: qs: Denial of Service via Attacker Controlled isBuffer
      npm · qs✕security
      Quote
      “qs: Denial of Service via Attacker Controlled isBuffer”
      osv.dev ›
    • npm packages
      qs: qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion
      npm · qs✕security
      Quote
      “qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion”
      osv.dev ›
    • npm packages
      qs: qs vulnerable to Prototype Pollution
      npm · qs✕security
      Quote
      “qs vulnerable to Prototype Pollution”
      osv.dev ›
    ‹ Previous9 / 36Next ›
  • AnthropicAnthropicclaude-sonnet-4-5-20250929in 24 days
  • OpenAIOpenAIOpenAI · 3in 25 days
    • 14 more ›