Cheerio: Widely deployed JavaScript HTTP frameworks, request parsers, authentication helpers and build tooling form common application attack surfaces.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
2 checked entries were not usable (Feed item lacks substantive release notes)
DOMPurify: Widely deployed JavaScript HTTP frameworks, request parsers, authentication helpers and build tooling form common application attack surfaces.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Marked: Widely deployed JavaScript HTTP frameworks, request parsers, authentication helpers and build tooling form common application attack surfaces.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
highlight.js: Widely deployed JavaScript HTTP frameworks, request parsers, authentication helpers and build tooling form common application attack surfaces.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
3 checked entries were not usable (Feed item lacks substantive release notes)
Lodash: Widely deployed JavaScript HTTP frameworks, request parsers, authentication helpers and build tooling form common application attack surfaces.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
8 checked entries were not usable (Feed item lacks substantive release notes)
Underscore: Widely deployed JavaScript HTTP frameworks, request parsers, authentication helpers and build tooling form common application attack surfaces.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
9 checked entries were not usable (Feed item lacks substantive release notes)
Handlebars: Widely deployed JavaScript HTTP frameworks, request parsers, authentication helpers and build tooling form common application attack surfaces.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
7 checked entries were not usable (Feed item lacks substantive release notes)
Pug: Widely deployed JavaScript HTTP frameworks, request parsers, authentication helpers and build tooling form common application attack surfaces.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
3 checked entries were not usable (Feed item lacks substantive release notes)
Eta: Widely deployed JavaScript HTTP frameworks, request parsers, authentication helpers and build tooling form common application attack surfaces.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
3 checked entries were not usable (Feed item lacks substantive release notes)
Ajv: Widely deployed JavaScript HTTP frameworks, request parsers, authentication helpers and build tooling form common application attack surfaces.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
2 checked entries were not usable (Feed item lacks substantive release notes)
Zod: Widely deployed JavaScript HTTP frameworks, request parsers, authentication helpers and build tooling form common application attack surfaces.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
1 checked entries were not usable (Feed item lacks substantive release notes)
jsonwebtoken: Widely deployed JavaScript HTTP frameworks, request parsers, authentication helpers and build tooling form common application attack surfaces.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
8 checked entries were not usable (Feed item lacks substantive release notes)
jose: Widely deployed JavaScript HTTP frameworks, request parsers, authentication helpers and build tooling form common application attack surfaces.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
1 checked entries were not usable (Feed item lacks substantive release notes)
bcrypt: Widely deployed JavaScript HTTP frameworks, request parsers, authentication helpers and build tooling form common application attack surfaces.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
6 checked entries were not usable (Feed item lacks substantive release notes); Latest dated entry is older than one year; monitor for source stagnation
node-saml: Widely deployed JavaScript HTTP frameworks, request parsers, authentication helpers and build tooling form common application attack surfaces.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
1 checked entries were not usable (Feed item lacks substantive release notes); Latest dated entry is older than one year; monitor for source stagnation
Flask: Python request handling, templating, serialization and authentication libraries commonly process attacker-controlled data.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
6 checked entries were not usable (Feed item lacks substantive release notes)
Werkzeug: Python request handling, templating, serialization and authentication libraries commonly process attacker-controlled data.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Jinja: Python request handling, templating, serialization and authentication libraries commonly process attacker-controlled data.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
3 checked entries were not usable (Feed item lacks substantive release notes); Latest dated entry is older than one year; monitor for source stagnation
MarkupSafe: Python request handling, templating, serialization and authentication libraries commonly process attacker-controlled data.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
3 checked entries were not usable (Feed item lacks substantive release notes)
ItsDangerous: Python request handling, templating, serialization and authentication libraries commonly process attacker-controlled data.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
4 checked entries were not usable (Feed item lacks substantive release notes); Latest dated entry is older than one year; monitor for source stagnation
Starlette: Python request handling, templating, serialization and authentication libraries commonly process attacker-controlled data.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
FastAPI: Python request handling, templating, serialization and authentication libraries commonly process attacker-controlled data.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
3 checked entries were not usable (Feed item lacks substantive release notes)
Uvicorn: Python request handling, templating, serialization and authentication libraries commonly process attacker-controlled data.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
HTTPX: Python request handling, templating, serialization and authentication libraries commonly process attacker-controlled data.
Release notes are not a dedicated advisory channel. Only security information present in the notes can be extracted; external changelogs and repository security advisories are not automatically followed.
Latest dated entry is older than one year; monitor for source stagnation
Structured advisory databases are configured by default; vendor feeds are opt-in. Catalog entries do not establish live uptime or complete coverage. Vendor checks verify retrieval and parsing, not extraction accuracy.
