Teire
ChangesScanDocsTrust
Teire

When upstream breaks, Teire fixes your code.

teire-dev/teireSystem status
Built on
  • NVIDIA NemotronNVIDIA Nemotron
  • Nebius Token FactoryNebius Token Factory
  • dependabot-coredependabot-core
  • Cloudflare

Product

Scan a repoChangesInstall on GitHubDashboardDemo video

Developers

DocsGitHubCLI and MCPteire.yml schemanpm

Trust

How Teire runsSource code
Worker running
Watching 44 sources · checked 2 h ago

Changes

2158
in the catalog
1153
new this week
62
dated ahead
  • Google Gemini2 h ago · 57
  • Goon demand · 87
  • Maven · Gradleon demand · 44
  • npmon demand · 913
  • Groq10 h ago · 43
  • Cargoon demand · 108
  • PyPIon demand · 243
  • Twitch10 h ago · 5
  • Bitbucket11 h ago · 0
  • GitLab11 h ago · 43
  • Context711 h ago · 0
  • RubyGems11 h ago · 83
  • Tavily11 h ago · 0
  • GitHub11 h ago · 23
  • Stripe11 h ago · 167

What's new

  • npm packages9 h agominimatch 3.1.5 → 11.0.3: changes the arguments of 2 function(s)●breaks on upgrade+13
  • RubyGems packages10 h agoactivesupport: Possible DoS vulnerability in Active Support safe_constantize✕security+8
  • RubyGems packages10 h ago

Picked up, last 30 days

one dot per day · bigger is more
  • npm

Every change

activestorage: Possible arbitrary file read and remote code execution in Active Storage video previews, analysis and image processing
✕security
+6
  • RubyGems packages10 h agoactionview: Possible XSS vulnerability in Action View highlight helper✕security+3
  • RubyGems packages10 h agoactionpack: Possible sensitive session information leak in Active Storage proxy mode✕security+6
  • RubyGems packages10 h agoactionmailbox: Possible signature replay in Action Mailbox Mailgun ingress✕security
  • PyPI packages10 h agoopenai 0.28.1 → 3.41.0: changes parameters of 5 function(s)●breaks on upgrade+21
  • Cargo packages10 h agopin-utils: `pin-utils` is unmaintained✕security
  • GitLab11 h agometrics.prometheus.port deprecated–notice+42
  • npm packages1 d ago@ruby/prism 1.9.0 → 2.1.0: removes 12 API(s)●breaks on upgrade+5
  • GitHub1 d agorerank-multilingual-v2.0 shutdown✕already broken+22
  • npm packages2 d agoopenai 4.104.0 → 7.45.1: removes 38 import path(s)●breaks on upgrade+34
    • 913
    : 110 on 2026-10-27, 18 on 2026-10-28, 22 on 2026-10-29, 738 on 2026-10-30, 6 on 2026-10-31, 5 on 2026-11-02, 5 on 2026-11-03, 6 on 2026-11-04, 3 on 2026-11-05
  • PyPI243: 143 on 2026-10-27, 9 on 2026-10-28, 3 on 2026-10-29, 76 on 2026-10-30, 3 on 2026-10-31, 3 on 2026-11-02, 3 on 2026-11-03, 3 on 2026-11-05
  • Stripe167: 167 on 2026-10-27
  • OpenAI145: 145 on 2026-10-27
  • Cargo108: 20 on 2026-10-27, 56 on 2026-10-28, 31 on 2026-10-30, 1 on 2026-11-05
  • Go87: 7 on 2026-10-27, 43 on 2026-10-28, 37 on 2026-10-30
  • RubyGems83: 17 on 2026-10-27, 6 on 2026-10-28, 16 on 2026-10-30, 4 on 2026-10-31, 7 on 2026-11-01, 12 on 2026-11-02, 21 on 2026-11-05
  • Perplexity59: 35 on 2026-10-27, 3 on 2026-10-30, 21 on 2026-11-03
  • Google Gemini57: 57 on 2026-10-27
  • Maven · Gradle44: 28 on 2026-10-27, 3 on 2026-10-29, 4 on 2026-10-30, 9 on 2026-10-31
    • 10-08today

    Coming up

    1. Nebius Token FactoryNebius Token FactoryNebius Token Factory · 11in 3 days
    2. Google GeminiGoogle Gemini · 5in 11 days
    3. relay-linkapi.relay.linkin 18 days
    1–60 of 87

    2026-10

    • Go packages
      filippo.io/edwards25519: filippo.io/edwards25519 MultiScalarMult produces invalid results or undefined behavior if receiver is not the identity
      Go · filippo.io/edwards25519✕security
      Quote
      “filippo.io/edwards25519 MultiScalarMult produces invalid results or undefined behavior if receiver is not the identity”
      osv.dev ›
    • Go packages
      github.com/go-chi/chi/v5: Chi has an IP spoofing vulnerability in middleware.RealIP in github.com/go-chi/chi
      Go · github.com/go-chi/chi/v5✕security
      Quote
      “Chi has an IP spoofing vulnerability in middleware.RealIP in github.com/go-chi/chi”
      osv.dev ›
    • Go packages
      github.com/go-chi/chi/v5: Chi Middleware vulnerable to IP spoofing via X-Forwarded-For header in github.com/go-chi/chi
      Go · github.com/go-chi/chi/v5✕security
      Quote
      “Chi Middleware vulnerable to IP spoofing via X-Forwarded-For header in github.com/go-chi/chi”
      osv.dev ›
    • Go packages
      github.com/go-chi/chi/v5: chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For
      Go · github.com/go-chi/chi/v5✕security
      Quote
      “chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For”
      osv.dev ›
    • Go packages
      github.com/go-chi/chi/v5: Chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header in github.com/go-chi/chi
      Go · github.com/go-chi/chi/v5✕security
      Quote
      “Chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header in github.com/go-chi/chi”
      osv.dev ›
    • Go packages
      github.com/go-chi/chi/v5: chi Allows Host Header Injection which Leads to Open Redirect in RedirectSlashes
      Go · github.com/go-chi/chi/v5✕security
      Quote
      “chi Allows Host Header Injection which Leads to Open Redirect in RedirectSlashes”
      osv.dev ›
    • Go packages
      github.com/golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing
      Go · github.com/golang-jwt/jwt✕security
      Quote
      “jwt-go allows excessive memory allocation during header parsing”
      osv.dev ›
    • Go packages
      github.com/klauspost/compress: Compress/s2: Integer Overflow or Wraparound and Out-of-bounds Write in compress
      Go · github.com/klauspost/compress✕security
      Quote
      “Compress/s2: Integer Overflow or Wraparound and Out-of-bounds Write in compress”
      osv.dev ›
    • Go packages
      github.com/redis/go-redis/v9: go-redis allows potential out of order responses when `CLIENT SETINFO` times out during connection establishment
      Go · github.com/redis/go-redis/v9✕security
      Quote
      “go-redis allows potential out of order responses when CLIENT SETINFO times out during connection establishment”
      osv.dev ›
    • Go packages
      go.mongodb.org/mongo-driver: mongo-go-driver has Heap Out-of-Bounds Read in GSSAPI Error Handling
      Go · go.mongodb.org/mongo-driver✕security
      Quote
      “mongo-go-driver has Heap Out-of-Bounds Read in GSSAPI Error Handling”
      osv.dev ›
    • Go packages
      golang.org/x/crypto: golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange
      Go · golang.org/x/crypto✕security
      Quote
      “golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange”
      osv.dev ›
    • Go packages
      golang.org/x/crypto: Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh
      Go · golang.org/x/crypto✕security
      Quote
      “Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh”
      osv.dev ›
    • Go packages
      golang.org/x/image: Go Images vulnerable to an out-of-memory error via a crafted TIFF file
      Go · golang.org/x/image✕security
      Quote
      “Go Images vulnerable to an out-of-memory error via a crafted TIFF file”
      osv.dev ›
    • Go packages
      golang.org/x/image: golang.org/x/image/tiff has excessive resource consumption in PackBits decompression
      Go · golang.org/x/image✕security
      Quote
      “golang.org/x/image/tiff has excessive resource consumption in PackBits decompression”
      osv.dev ›
    • Go packages
      golang.org/x/image: Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image
      Go · golang.org/x/image✕security
      Quote
      “Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image”
      osv.dev ›
    • Go packages
      golang.org/x/image: Excessive memory allocation when decoding malicious SFNT in golang.org/x/image
      Go · golang.org/x/image✕security
      Quote
      “Excessive memory allocation when decoding malicious SFNT in golang.org/x/image”
      osv.dev ›
    • Go packages
      golang.org/x/image: Panic when reading out of bound palette index in golang.org/x/image/bmp
      Go · golang.org/x/image✕security
      Quote
      “Panic when reading out of bound palette index in golang.org/x/image/bmp”
      osv.dev ›
    • Go packages
      golang.org/x/image: Panic on VP8 alpha channel size mismatch in x/image/webp in golang.org/x/image
      Go · golang.org/x/image✕security
      Quote
      “Panic on VP8 alpha channel size mismatch in x/image/webp in golang.org/x/image”
      osv.dev ›
    • Go packages
      golang.org/x/image: Lack of limit on tile sizes in x/image/tiff in golang.org/x/image
      Go · golang.org/x/image✕security
      Quote
      “Lack of limit on tile sizes in x/image/tiff in golang.org/x/image”
      osv.dev ›
    • Go packages
      golang.org/x/image: Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image
      Go · golang.org/x/image✕security
      Quote
      “Panic decoding image with out-of-bounds strip offset in x/image/tiff in golang.org/x/image”
      osv.dev ›
    • Go packages
      golang.org/x/image: Excessive memory allocation during VP8L decoding in golang.org/x/image
      Go · golang.org/x/image✕security
      Quote
      “Excessive memory allocation during VP8L decoding in golang.org/x/image”
      osv.dev ›
    • Go packages
      golang.org/x/mod: Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog
      Go · golang.org/x/mod✕security
      Quote
      “Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog”
      osv.dev ›
    • Go packages
      golang.org/x/mod: Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb
      Go · golang.org/x/mod✕security
      Quote
      “Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb”
      osv.dev ›
    • Go packages
      golang.org/x/net: golang.org/x/net vulnerable to Cross-site Scripting
      Go · golang.org/x/net✕security
      Quote
      “golang.org/x/net vulnerable to Cross-site Scripting”
      osv.dev ›
    • Go packages
      golang.org/x/net: Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html
      Go · golang.org/x/net✕security
      Quote
      “Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/html”
      osv.dev ›
    • Go packages
      golang.org/x/net: Excessive CPU consumption from repeated initial window changes in net/http
      Go · golang.org/x/net✕security
      Quote
      “Excessive CPU consumption from repeated initial window changes in net/http”
      osv.dev ›
    • Go packages
      golang.org/x/net: Double flow control refund on HTTP/2 server streams in net/http
      Go · golang.org/x/net✕security
      Quote
      “Double flow control refund on HTTP/2 server streams in net/http”
      osv.dev ›

    2026-11

    • Go packages
      golang.org/x/crypto: golang.org/x/crypto vulnerable to invoking bypass of certificate restrictions
      Go · golang.org/x/crypto✕security
      Quote
      “golang.org/x/crypto vulnerable to invoking bypass of certificate restrictions”
      osv.dev ›
    • Go packages
      golang.org/x/crypto: Potential denial of service in golang.org/x/crypto/ssh/agent
      Go · golang.org/x/crypto✕security
      Quote
      “Potential denial of service in golang.org/x/crypto/ssh/agent”
      osv.dev ›
    • Go packages
      golang.org/x/crypto: golang.org/x/crypto vulnerable to auth bypass via unenforced @revoked status
      Go · golang.org/x/crypto✕security
      Quote
      “golang.org/x/crypto vulnerable to auth bypass via unenforced @revoked status”
      osv.dev ›
    • Go packages
      golang.org/x/crypto: golang.org/x/crypto is vulnerable to invoking server panic during CheckHostKey/Authenticate flow
      Go · golang.org/x/crypto✕security
      Quote
      “golang.org/x/crypto is vulnerable to invoking server panic during CheckHostKey/Authenticate flow”
      osv.dev ›
    • Go packages
      golang.org/x/crypto: golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed
      Go · golang.org/x/crypto✕security
      Quote
      “golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed”
      osv.dev ›
    • Go packages
      golang.org/x/crypto: golang.org/x/crypto: Invoking pathological inputs can lead to client panic
      Go · golang.org/x/crypto✕security
      Quote
      “golang.org/x/crypto: Invoking pathological inputs can lead to client panic”
      osv.dev ›
    • Go packages
      golang.org/x/crypto: golang.org/x/crypto doesn't drop invoking agent constraints when forwarding keys
      Go · golang.org/x/crypto✕security
      Quote
      “golang.org/x/crypto doesn't drop invoking agent constraints when forwarding keys”
      osv.dev ›
    • Go packages
      golang.org/x/crypto: golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read
      Go · golang.org/x/crypto✕security
      Quote
      “golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read”
      osv.dev ›
    • Go packages
      golang.org/x/crypto: golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption
      Go · golang.org/x/crypto✕security
      Quote
      “golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption”
      osv.dev ›
    • Go packages
      golang.org/x/crypto: golang.org/x/crypto doesn't enforce invoking key constraints
      Go · golang.org/x/crypto✕security
      Quote
      “golang.org/x/crypto doesn't enforce invoking key constraints”
      osv.dev ›
    • Go packages
      golang.org/x/crypto: golang.org/x/crypto: Invoking byte arithmetic causes underflow and panic
      Go · golang.org/x/crypto✕security
      Quote
      “golang.org/x/crypto: Invoking byte arithmetic causes underflow and panic”
      osv.dev ›
    • Go packages
      golang.org/x/crypto: golang.org/x/crypto: Invoking memory leak when rejecting channels can lead to DoS
      Go · golang.org/x/crypto✕security
      Quote
      “golang.org/x/crypto: Invoking memory leak when rejecting channels can lead to DoS”
      osv.dev ›
    • Go packages
      golang.org/x/crypto: golang.org/x/crypto vulnerable to infinite loop on large channel writes
      Go · golang.org/x/crypto✕security
      Quote
      “golang.org/x/crypto vulnerable to infinite loop on large channel writes”
      osv.dev ›
    • Go packages
      golang.org/x/crypto: golang.org/x/crypto: Invoking client can cause server deadlock on unexpected responses
      Go · golang.org/x/crypto✕security
      Quote
      “golang.org/x/crypto: Invoking client can cause server deadlock on unexpected responses”
      osv.dev ›
    • Go packages
      golang.org/x/crypto: golang.org/x/crypto: Invoking pathological RSA/DSA parameters may cause DoS
      Go · golang.org/x/crypto✕security
      Quote
      “golang.org/x/crypto: Invoking pathological RSA/DSA parameters may cause DoS”
      osv.dev ›
    • Go packages
      golang.org/x/crypto: golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement
      Go · golang.org/x/crypto✕security
      Quote
      “golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement”
      osv.dev ›
    • Go packages
      golang.org/x/crypto: The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues
      Go · golang.org/x/crypto✕security
      Quote
      “The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues”
      osv.dev ›
    • Go packages
      golang.org/x/crypto: Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh
      Go · golang.org/x/crypto✕security
      Quote
      “Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh”
      osv.dev ›
    • Go packages
      golang.org/x/crypto: Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh
      Go · golang.org/x/crypto✕security
      Quote
      “Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh”
      osv.dev ›
    • Go packages
      golang.org/x/net: Go Net HTML parser is vulnerable to denial of service
      Go · golang.org/x/net✕security
      Quote
      “Go Net HTML parser is vulnerable to denial of service”
      osv.dev ›
    • Go packages
      golang.org/x/net: Quadratic parsing complexity in golang.org/x/net/html
      Go · golang.org/x/net✕security
      Quote
      “Quadratic parsing complexity in golang.org/x/net/html”
      osv.dev ›
    • Go packages
      golang.org/x/net: Infinite parsing loop in golang.org/x/net
      Go · golang.org/x/net✕security
      Quote
      “Infinite parsing loop in golang.org/x/net”
      osv.dev ›
    • Go packages
      golang.org/x/net: Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net
      Go · golang.org/x/net✕security
      Quote
      “Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net”
      osv.dev ›
    • Go packages
      golang.org/x/net: Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html
      Go · golang.org/x/net✕security
      Quote
      “Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html”
      osv.dev ›
    • Go packages
      golang.org/x/net: Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
      Go · golang.org/x/net✕security
      Quote
      “Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna”
      osv.dev ›
    • Go packages
      golang.org/x/net: Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html
      Go · golang.org/x/net✕security
      Quote
      “Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html”
      osv.dev ›
    • Go packages
      golang.org/x/net: Invoking duplicate attributes can cause XSS in golang.org/x/net/html
      Go · golang.org/x/net✕security
      Quote
      “Invoking duplicate attributes can cause XSS in golang.org/x/net/html”
      osv.dev ›
    • Go packages
      golang.org/x/net: Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage
      Go · golang.org/x/net✕security
      Quote
      “Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage”
      osv.dev ›
    • Go packages
      golang.org/x/net: HTTP/2 server memory exhaustion due to Trailer headers in net/http
      Go · golang.org/x/net✕security
      Quote
      “HTTP/2 server memory exhaustion due to Trailer headers in net/http”
      osv.dev ›
    • Go packages
      golang.org/x/net: HTTP/2 transport accepts malformed framing-related headers in net/http
      Go · golang.org/x/net✕security
      Quote
      “HTTP/2 transport accepts malformed framing-related headers in net/http”
      osv.dev ›
    • Go packages
      golang.org/x/net: HTTP/2 server crash due to HPACK encoder race in net/http
      Go · golang.org/x/net✕security
      Quote
      “HTTP/2 server crash due to HPACK encoder race in net/http”
      osv.dev ›
    • Go packages
      golang.org/x/net: Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net
      Go · golang.org/x/net✕security
      Quote
      “Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net”
      osv.dev ›
    • Go packages
      golang.org/x/net: Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net
      Go · golang.org/x/net✕security
      Quote
      “Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net”
      osv.dev ›
    1 / 2Next ›
  • AnthropicAnthropicclaude-sonnet-4-5-20250929in 24 days
  • OpenAIOpenAIOpenAI · 3in 25 days
    • 14 more ›