Popular repositories Loading

1. fastjson-check fastjson-check Public

   fastjson vulnerability scanner - detect fastjson in JARs and Spring Boot fat-JARs, check exposure to CVE-2026-16723, and verify whether you already run the official patch 1.2.84. Zero-dependency of…

   Java

2. local-gestures local-gestures Public

   Mouse gestures for Chrome and Edge with zero network requests. Manifest V3. Stroke, rocker, wheel, super drag, popup wheel, touch. English / 简体中文 / 繁體中文.

   Python

3. pac4j-check pac4j-check Public

   Offline scanner for CVE-2026-29000 (CVSS 10.0) in org.pac4j:pac4j-jwt. Inspects jars/fat-jars directly, so it works where mvn dependency:tree cannot. Single jar, zero dependencies, Java 8+.

   Java

4. bc-check bc-check Public

   Offline scanner telling you which of the 2026 Bouncy Castle CVEs actually apply to you - across BC, BC-LTS and BC-FJA (FIPS), which do not share a version scheme. CVE-2026-58062 / CVE-2026-8763 / C…

   Java

5. scc-check scc-check Public

   Offline checker for Spring Cloud Config CVE-2026-40982 — tells you whether your version line has an OSS fix at all (3.1.x/4.1.x/4.2.x: it does not)

   Java

6. tomcat-check tomcat-check Public

   查出 Spring Boot 内嵌 Tomcat 的真实版本(pom 里没有),并对每条 2026 年 CVE 同时给出 ASF 官方评级与 GitHub 评级、触发条件、以及这条会不会进 Dependabot 告警 CVE-2026-41293

   Java