Security Tools

No immediate action

iris-eval/mcp-server v0.4.4 Breaking risk · 9h

Distribution completion

Open

No immediate action

PasswordPusher v2.7.3 Breaking risk · 17h

Remove apipie-rails + README feature + dependency bumps

Open

Review required

infisical v0.161.0 Breaking risk · 18h

Auth RBAC

GitHub apps, Convex rotation, OAuth 2.0, KMIP CSR, Router

Open

Upgrade now

netmaker v1.6.0 Breaking risk · 1d

Breaking upgrade Auth

Site-to-site ACLs + egress IP restrict

Open

No immediate action

Checkov 3.3.1 Breaking risk · 1d

Serverless var behavior change

Open

No immediate action

OWASP/cve-lite-cli v1.22.0 Breaking risk · 1d

Registry detection support

Open

Review required

One Time Secret v0.25.9 Breaking risk · 1d

Auth Dependencies

CLI commands + heap dumps + SES improvements

Open

Config change

Timesketch 20260611 Breaking risk · 1d

Auth Breaking upgrade Dependencies

Base image upgrade, wildcard search, OTel integration

Open

Config change

infisical v1.0.0 Breaking risk · 1d

Auth

GitHub App host lock + new features

Open

Upgrade now

mkcertWeb v4.1.0 Breaking risk · 1d

Auth

SCEP auth hardening + bug fixes

Open

No immediate action

Due Diligence Agents v1.16.0 Breaking risk · 1d

formula→findings + PDF/HTML parity

Open

Review required

duplicati v2.3.0.3_stable_2026-06-10 Breaking risk · 2d

Breaking upgrade Auth

Filelist optimization + backend deprecations

Open

Config change

Beacon v0.0.54 Breaking risk · 2d

Breaking upgrade

Require cloud run ID

Open

No immediate action

duplicati v2.3.0.2_stable_2026-06-10 Breaking risk · 2d

Deprecates OneDrive/SharePoint

Open

No immediate action

Agent Memory Guard v0.3.0 Breaking risk · 3d

Provenance memory classes + integrations + CI fixes

Open

No immediate action

goklab/guardvibe v3.18.0 Breaking · 3d

BOLA false‑positive fix

Open

No immediate action

VAST v6.1.0 Breaking risk · 3d

Windowing, AI prompt, MSSQL source, Prometheus sink

Open

Upgrade now

oauth2-proxy v7.15.3 Breaking risk · 3d

Dependencies

Golang upgrade + dependency bumps + CVE fixes

Open

No immediate action

ente auth-v4.4.23 Breaking risk · 3d

Icon fixes + new icons

Open

No immediate action

goklab/guardvibe v3.17.0 Breaking risk · 4d

VG126 behavior change

Open

No immediate action

Beacon v0.0.49 Breaking risk · 4d

Double span fix + OTLP port correction + Homebrew install

Open

Review required

goklab/guardvibe v3.16.0 Breaking risk · 4d

Auth RBAC

AST‑aware VG950 suppression

Open

Review required

Agent-browser-shield v2026.6.8.22 Breaking risk · 4d

Auth RBAC

New annotate rules + Dependabot switch

Open

Config change

Beacon v0.0.47 Breaking risk · 4d

Content retention deprecation

Open

Review required

goklab/guardvibe v3.6.0 Breaking risk · 5d

RCE / SSRF

SSRF false‑positive reduction

Open

Upgrade now

portchecker.io v4.1.0 Breaking risk · 6d

Dependencies Breaking upgrade

uvicorn, litestar, Node upgrade

Open

No immediate action

sayanarijit/cottage v0.6.2 Breaking risk · 6d

upstream rename + timestamp fix + plugin doc improvements

Open

No immediate action

AISlop v0.11.0 Breaking risk · 6d

PR-scoped gating + CI updates

Open