Supply Chain Security

SBOM generation, software signing, policy-as-code, and dependency vulnerability scanning.

All Breaking Security Features

Important Recent

← Releases

Review required

goklab/guardvibe v3.1.25 Security relevant 18d

Dependencies Breaking upgrade

Malicious node-ipc detection + CI npm hardening

Open

Upgrade now

qwexvf/aegis-cli v0.17.1 Security relevant 22d

Dependencies

Go 1.26.3 upgrade + retract detection

Open

Review required

goklab/guardvibe v3.1.14 Security relevant 1mo

Auth RCE / SSRF

React CVE-2025-55182

Open

Upgrade now

pentest-ai v0.10.5 Security relevant 1mo

RCE / SSRF

CWE-78 fix + SARIF version

Open

wazuh v4.14.5 Security relevant 1mo

Security fixes

DAPI callable resolution restriction
Buffer overflow in analysisd regex match
Path traversal in authd via agent group name

Upgrade now

goklab/guardvibe v3.0.22 Security relevant 1mo

Auth RCE / SSRF

Security fixes

Open

v3.0.21 (1mo) Security fixes

Monitor

msaad00/agent-bom v0.75.1 Security relevant 2mo

Security hardening

Open

v0.74.1 (2mo) Security hardening

v0.71.3 (2mo) OS CVE patches + attestations

wazuh v4.14.4 Security relevant 2mo

Security fixes

Fixed heap-based null WRITE Buffer Underflows

Review required

msaad00/agent-bom v0.70.5 Security relevant 2mo

Auth Dependencies

Credential security hardening

Open

v0.70.4 (2mo) Vuln DB hardening

v0.66.0 (2mo) Security hardening

v0.59.3 (2mo) Audit & security fixes

v0.59.0 (2mo) Security hardening

v0.58.1 (2mo) ClawHub trust hardening

v0.31.3 (3mo) ClawHub trust hardening

wazuh v4.14.3 Security relevant 3mo

Security fixes

Buffer overflow fixes in SCA decoder
Memory leak fix in CIS-CAT decoder

Notable features

Added hostname and architecture metadata to Windows keep-alive messages

Upgrade now

ErenAri/Aegis-BPF v0.1.1 Security relevant 3mo

Crypto / TLS

TweetNaCl memory exhaustion fix

Open