Red Team & Offensive Security

No immediate action

Anubis v1.26.1 Breaking risk · 3h

Semicolon logic + backoff + Blob

Open

No immediate action

OWASP/cve-lite-cli v1.28.0 Breaking risk · 13h

Cooldown resolver + maintenance risk

Open

Upgrade now

tumf/mcp-shell-server v1.1.3 Security relevant · 1h

RCE / SSRF

Reject sed/GNU find/AWK exec

Open

No immediate action

microsandbox v0.6.7 Breaking risk · 1d

mintlify, SDK, network, filesystem, snapshot

Open

Config change

Agent Gate v0.6.0 Breaking risk · 1d

Breaking upgrade Auth

Contract missing severity change

Open

Review required

GlobaLeaks v5.0.99 Security relevant · 19h

Auth RBAC

OTP cooldowns + usage alerts

Open

Config change

freema/openclaw-mcp 1.7.0 Security relevant · 21h

Auth RBAC

CORS disabled + task scoping

Open

Config change

Agent Gate v0.5.0 Breaking risk · 1d

Auth Breaking upgrade

Agent detection defaults + Gemini/Qwen rules

Open

Upgrade now

squid-protocol/gitgalaxy](https: v2.4.5 Breaking risk · 2d

Dependencies

Comment separation fixed; dead-key audit resolves 15 bugs; CVE patched

Open

Upgrade now

Prowler 5.36.0 Breaking risk · 2d

Auth RBAC RCE / SSRF +2 more

Jira workflow + Attack Paths cleanup + OCI simplification

Open

Upgrade now

melandlabs/openloomi](https: v0.8.8 Security relevant · 2d

Auth

Missing authorization IDOR

Open

No immediate action

santhsecurity/keyhog v0.5.47 Bug fix · 21h

Manifest format support

Open

No immediate action

getplumber/plumber v0.4.16 New feature · 2d

Control output restructuring

Open

Config change

Agent Gate v0.5.1 Bug fix · 1d

Body marker fix

Open

Review required

santhsecurity/keyhog v0.5.45 Bugfix · 2d

Auth Dependencies

Signed release publication fix

Open

No immediate action

KryptosAI/mcp-observatory v1.35.4 Bug fix · 2d

mcpName case fix

Open

No immediate action

Anubis v1.26.2 Maintenance · 2h

Routine maintenance and dependency updates.

Open

No immediate action

Fleet device management fleet-v4.89.2 Bug fix · 2d

Critical bug fixes

Open

No immediate action

VAST v6.8.1 Bug fix · 2d

Corrupt store file fixes

Open

No immediate action

Ju571nK/sigil](https: v0.7.2 Maintenance · 17h

Routine maintenance and dependency updates.

Open

Config change

voidauth v1.14.5 Mixed · 1d

Auth

Cross-Origin-Opener-Policy fix + dependency updates

Open

No immediate action

defended-net/malwatch v1.5.2 Mixed · 1d

go‑git update + yr scanner optimization

Open

No immediate action

KryptosAI/mcp-observatory v1.35.2 Mixed · 2d

Schema addition, description shortening, KV namespace revert

Open

Upgrade now

msaad00/agent-bom v0.98.0 Maintenance · 2d

Dependencies

runtime, cloud, CI, docs, db, deps, UI

Open

Review required

trufflehog v3.96.0 Mixed · 2d

Dependencies

go-git update + Duo detector

Open

No immediate action

getplumber/plumber v0.4.15 Mixed · 2d

Bug fixes + docs + CI

Open

No immediate action

miracodeai/mira v0.7.0 Mixed · 2d

Forgejo support + overlap detection + UI upgrades

Open

No immediate action

getplumber/plumber v0.4.14 Maintenance · 2d

Routine maintenance and dependency updates.

Open