Topics / #vulnerabilities

Vulnerabilities projects on GitHub

Tools for detecting, scanning, and managing security vulnerabilities in software.

As of , the most-starred Vulnerabilities projects on GitHub are grype (13K stars), oss-fuzz (12.7K stars) and vuls (12.3K stars). GitHub.Locker tracks 5 Vulnerabilities repositories with 60.5K stars combined. The fastest-growing on October 16 was grype, with +8 stars in a day.

5Projects
60.5KStars in total
+19Stars in a day
Browse in the catalog →github.com/topics/vulnerabilities ↗

Hot right now

Most stars gained in a day · Oct 16

+8

grype

anchore/grype · ★ 13K

Grype is a command-line vulnerability scanner that checks container images, filesystems, and SBOMs for known security vulnerabilities.

+7

awesome-hacker-search-engines

edoardottt/awesome-hacker-search-engines · ★ 11.3K

A curated list of search engines useful for penetration testing, vulnerability assessment, red/blue team operations, bug bounty hunting, and general OSINT work.

+2

oss-fuzz

google/oss-fuzz · ★ 12.7K

OSS-Fuzz is Google's free continuous fuzzing service for open source software: it runs guided fuzzing nonstop to surface security vulnerabilities and stability bugs before attackers do.

+2

clair

quay/clair · ★ 11.1K

Clair is an open source tool for static analysis of vulnerabilities in application container images, covering both OCI and Docker image formats.

The all-time top

5 projects · by stars

  1. #1 · anchore/grype

    grype

    Grype is a command-line vulnerability scanner that checks container images, filesystems, and SBOMs for known security vulnerabilities.

    13K
  2. #2 · google/oss-fuzz

    oss-fuzz

    OSS-Fuzz is Google's free continuous fuzzing service for open source software: it runs guided fuzzing nonstop to surface security vulnerabilities and stability bugs before attackers do.

    12.7K
  3. #3 · future-architect/vuls

    vuls

    Vuls is an open-source, agent-less vulnerability scanner written in Go. It automatically detects vulnerabilities affecting your servers and can generate reports on a regular basis, for example via CRON.

    12.3K
  1. 4

    awesome-hacker-search-engines

    11.3Kedoardottt/awesome-hacker-search-engines · Shell

    A curated list of search engines useful for penetration testing, vulnerability assessment, red/blue team operations, bug bounty hunting, and general OSINT work.

  2. 5

    clair

    11.1Kquay/clair · Go

    Clair is an open source tool for static analysis of vulnerabilities in application container images, covering both OCI and Docker image formats.

Often tagged together