huhusmang/awesome-llms-for-vulnerability-detectionThe community's most comprehensive, continuously-updated index of research on Large Language Models for software vulnerability detection — papers…
vighnesh91/ipaforgeDependency-free Python CLI to unpack, inspect, edit, and rebuild iOS .ipa archives, converting plists and strings to XML while preserving Mach-O…
owasp/json-sanitizerGiven JSON-like content, The JSON Sanitizer converts it to valid JSON.
radicle-dev/heartwoodPeer-to-peer code collaboration and publishing stack with a secure, decentralized protocol, CLI tool, and network daemon for sovereign code forges.
shoucheng3/owasp__json-sanitizer_cve-2020-13973_1-2-0Java library that converts malformed JSON-like content into standards-compliant, safe JSON, preventing code injection and ensuring embeddability in…
ernos/browser-xpi-malware-scannerA comprehensive browser extension (.xpi) malware scanner which checks for many common malware tricks like:, credential-stealers obfuscation tactics,…
bekwiner/cve-2026-47777Detailed technical analysis of CVE-2026-47777, a high-severity authorization bypass in Mastodon's Featured Collections federation pipeline, including…
epicosy/json-sanitizerJSON sanitizer that converts malformed JSON-like content into valid, safe JSON, preventing code injection and ensuring standards compliance for web…
shoucheng3/esapi__esapi-java-legacy_cve-2022-23457_2-2-3-1Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input validation,…
shoucheng3/jenkinsci__script-security-plugin_cve-2023-24422_1228.vd93135a_2fb_25Jenkins plugin providing script approval workflows and Groovy sandboxing to enforce secure script execution, with ACL-aware permission checks and…
farenhytee/database-sentinelClaude Skill that audits your projects for RLS misconfigurations, exposed keys, auth bypasses, and storage vulnerabilities. 27 anti-patterns sourced…
grails/gssc-cve-2022-41923Workaround guide for CVE-2022-41923 privilege management vulnerability in Grails Spring Security Core plugin, providing patched filter definitions…
pazhanivel07/openssl_1_0_1g_cve-2015-1788General-purpose cryptography library implementing SSL/TLS protocols, symmetric/ asymmetric ciphers, message digests, and X.509 certificate handling…
bk-security/auth-header-trust-rulesSemgrep rules that flag header-trust auth bypass patterns (CVE-2025-29927 class). Companion to bk-security.github.io.
marcstraube/zappzarapp-php-securityPHP 8.4+ security library (mirror)
shoucheng3/asf__cxf_cve-2019-17573_3-2-11Web services framework for building and developing SOAP, RESTful, and CORBA services with support for WS-Security, WS-Trust, and JAX-WS/JAX-RS APIs.
shoucheng3/esapi__esapi-java-legacy_cve-2022-24891_2-2-3-1OWASP Enterprise Security API library providing security controls for Java web applications, including authentication, access control, input…
owasp/secure-agent-playbookOWASP Secure Agent Playbook Project
