
opencode-secure
Security-hardened fork of OpenCode - Fixes CVE-2026-22812 (CVSS 8.8 RCE) that upstream refuses to patch

Security-hardened fork of OpenCode - Fixes CVE-2026-22812 (CVSS 8.8 RCE) that upstream refuses to patch

Analyzes a specific CVE in WeChat OAuth handler, identifying unbounded HTTP response reads leading to denial of service, with remediation guidance.

OpenRewrite recipe that detects and fixes Spring Security header suppression (CVE-2026-22732) by identifying Content-Length header misuse and…

Link sources to sinks in C# applications.


Detect potentially malicious PHP files

Anteater - CI/CD Gate Check Framework

Bleach is an allowed-list-based HTML sanitizing library that escapes or strips markup and attributes

OWASP Foundation Web Respository

A free and open-source .NET obfuscator using dnlib.

Test case to check if the Log4Shell/CVE-2021-44228 hotfix will raise any unexpected exceptions

Plugin to fix security vulnerability CVE-2023-40626 in Joomla 3.10.12


Tool to search secrets in various filetypes.

Open-source, cross-platform, multi-purpose security auditing tool

Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows

Main repo for hosting release binaries

The community's most comprehensive, continuously-updated index of research on Large Language Models for software vulnerability detection — papers…