Vulnerabilities GitHub Repositories (2026) · Open Source Tools

A vulnerability scanner for container images and filesystems

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

⚔️ Community maintained directory, MCP and API of 3,000+ active bug bounty programs and VDPs

scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices

A database of PHP security advisories

The open source taint analysis engine for the AI era. A formal dataflow analysis tool you can customize and self-host, built so AI agents drive your application security analysis without burning tokens on every scan. AI-ready open source alternative to Semgrep Pro and CodeQL.

Scalable fuzzing infrastructure.

Pentest Report Generator

🧵 CLI tool for directly patching container images!

Automatically Collect POC or EXP from GitHub by CVE ID.

Advisories, proof of concept files and exploits that have been made public by @pedrib.

Pentest Report Generator

Anchore container analysis and scan provided as a GitHub Action

FOSSLight Hub : Integrated management web-service for Open Source Compliance Process

Open-Source Vulnerability Intelligence Center - Unified source of vulnerability, exploit and threat Intelligence feeds

Web service for managing information on vulnerabilities in software distributed through Nixpkgs