shoucheng3/fabric8io__kubernetes-client_cve-2021-4178_5-0-2Java client providing fluent DSL access to Kubernetes and OpenShift REST APIs for managing cloud-native infrastructure, pods, services, and…
keycloak/keycloakOpen Source Identity and Access Management For Modern Applications and Services
apache/casbinAuthorization library enforcing ACL, RBAC, ABAC, and custom access-control models with RESTful matching and policy management APIs for applications…
open-policy-agent/opaDeclarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…
openziti/zitiZero-trust networking platform that makes services invisible with cryptographic identity, policy-based access, and end-to-end encryption. Replaces…
george0papasotiriou/cve-2026-3456-oauth2-pkce-race-condition-account-takeover-Python PoC for CVE-2026-3456 demonstrating OAuth2 PKCE race-condition account takeover, with a vulnerable auth server and concurrent code-verifier…
roxanne_ardary/securecivicSecureCivic is a citizen-built, open source identity verification platform designed for SSA adoption. It replaces private data brokers with a secure,…
shoucheng3/keycloak__keycloak_cve-2014-3656_1-0-5-finalOpen-source identity and access management solution providing authentication, user federation, single sign-on, and fine-grained authorization for…
shoucheng3/spring-cloud__spring-cloud-config_cve-2020-5410_2-1-8-releaseCentralized configuration server for distributed systems with HTTP API, Git-backed storage, property encryption/decryption, and integration with…
shoucheng3/asf__nifi_cve-2023-36542_1-22-0Automated data flow platform for processing and distributing data with built-in provenance tracking, secure configuration, and scalable pipeline…
shoucheng3/spring-cloud__spring-cloud-config_cve-2020-5405_2-1-6-releaseCentralized configuration server for distributed systems with HTTP API, encryption/decryption of properties, and support for Git, Vault, JDBC, and…
shoucheng3/apache__nifi_cve-2022-33140_1-16-22Automated data flow processing and distribution system with secure configuration, provenance tracking, and extensible plugin architecture for…
password123456/some-tweak-to-hide-jwt-payload-valuesLightweight Python library for obfuscating JWT payload values using XOR encryption with timestamp-based keys, preventing plaintext decoding of…
tibrn/cve-2025-30144Proof-of-concept for CVE-2025-30144: JWT issuer validation bypass in fast-jwt library allowing attackers to forge tokens with array-based iss claims.
nccgroup/jwt-reauthCaches JWT authentication tokens from an auth URL and attaches them as headers to in-scope requests in Burp Suite for automated session handling.
vhscom/private-landing🔐 Learn authentication by building it right. An extensible, standards-compliant reference implementation for Cloudflare Workers with Hono, Turso,…
teycir/apihunterAsync API security scanner in Rust for CORS, CSP, GraphQL, JWT, OpenAPI, and active API posture checks.
0xbs0d27/cve-2025-56643Public reference for CVE-2025-56643 – Wiki.js 2.5.307 JWT Session Vulnerability
