[ { "system_id": "wordpress", "display_name": "WordPress", "total": 140, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 140, "browser_required": 0, "browser_present": 0, "latest_update": "2025-04-09T00:30:58.490", "category": "cms", "tier": "history-full", "output_dir": "07-framework-security/cms/wordpress", "families": [ { "family": "xss", "total": 140, "verified_real": 0, "manual": 140 } ], "entity_summary": { "system_id": "wordpress", "display_name": "WordPress", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 1, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "apache-tomcat", "display_name": "Apache Tomcat", "total": 136, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 136, "browser_required": 0, "browser_present": 0, "latest_update": "2025-04-22", "category": "servers", "tier": "history-full", "output_dir": "07-framework-security/servers/apache-tomcat", "families": [ { "family": "authz-bypass", "total": 108, "verified_real": 0, "manual": 108 }, { "family": "file-upload", "total": 2, "verified_real": 0, "manual": 2 }, { "family": "path-traversal", "total": 3, "verified_real": 0, "manual": 3 }, { "family": "plugin-extension", "total": 5, "verified_real": 0, "manual": 5 }, { "family": "proxy-boundary", "total": 1, "verified_real": 0, "manual": 1 }, { "family": "session-token", "total": 4, "verified_real": 0, "manual": 4 }, { "family": "xss", "total": 13, "verified_real": 0, "manual": 13 } ], "entity_summary": { "system_id": "apache-tomcat", "display_name": "Apache Tomcat", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 1, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "apache-httpd", "display_name": "Apache HTTP Server", "total": 135, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 135, "browser_required": 0, "browser_present": 0, "latest_update": "2025-05-22", "category": "servers", "tier": "history-full", "output_dir": "07-framework-security/servers/apache-httpd", "families": [ { "family": "authz-bypass", "total": 1, "verified_real": 0, "manual": 1 }, { "family": "file-upload", "total": 1, "verified_real": 0, "manual": 1 }, { "family": "proxy-boundary", "total": 128, "verified_real": 0, "manual": 128 }, { "family": "ssrf", "total": 1, "verified_real": 0, "manual": 1 }, { "family": "xss", "total": 4, "verified_real": 0, "manual": 4 } ], "entity_summary": { "system_id": "apache-httpd", "display_name": "Apache HTTP Server", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 1, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "prestashop", "display_name": "PrestaShop", "total": 112, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 112, "browser_required": 0, "browser_present": 0, "latest_update": "2025-04-12T10:46:40.837", "category": "ecommerce", "tier": "history-full", "output_dir": "07-framework-security/ecommerce/prestashop", "families": [ { "family": "file-upload", "total": 1, "verified_real": 0, "manual": 1 }, { "family": "plugin-extension", "total": 91, "verified_real": 0, "manual": 91 }, { "family": "sqli", "total": 4, "verified_real": 0, "manual": 4 }, { "family": "xss", "total": 16, "verified_real": 0, "manual": 16 } ], "entity_summary": { "system_id": "prestashop", "display_name": "PrestaShop", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 1, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 1, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [ { "candidate_id": "prestashop--repo-candidate--https-github-com-prestashop-prestashop", "display_name": "PrestaShop / PrestaShop", "entity_type": "repo", "risk": "medium" } ] }, "top_entities": [], "backlog_preview": [ { "candidate_id": "prestashop--repo-candidate--https-github-com-prestashop-prestashop", "display_name": "PrestaShop / PrestaShop", "entity_type": "repo", "risk": "medium" } ], "entity_total": 1, "entity_backlog": 1, "entity_type_counts": { "system": 1 } }, { "system_id": "woocommerce", "display_name": "WooCommerce", "total": 111, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 111, "browser_required": 0, "browser_present": 0, "latest_update": "2025-04-20T01:37:25.860", "category": "ecommerce", "tier": "history-full", "output_dir": "07-framework-security/ecommerce/woocommerce", "families": [ { "family": "xss", "total": 111, "verified_real": 0, "manual": 111 } ], "entity_summary": { "system_id": "woocommerce", "display_name": "WooCommerce", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 1, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 1, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [ { "candidate_id": "woocommerce--repo-candidate--https-github-com-woocommerce-woocommerce", "display_name": "woocommerce / woocommerce", "entity_type": "repo", "risk": "medium" } ] }, "top_entities": [], "backlog_preview": [ { "candidate_id": "woocommerce--repo-candidate--https-github-com-woocommerce-woocommerce", "display_name": "woocommerce / woocommerce", "entity_type": "repo", "risk": "medium" } ], "entity_total": 1, "entity_backlog": 1, "entity_type_counts": { "system": 1 } }, { "system_id": "nginx", "display_name": "Nginx", "total": 110, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 110, "browser_required": 0, "browser_present": 0, "latest_update": "2025-08-12T17:24:44.367", "category": "servers", "tier": "history-full", "output_dir": "07-framework-security/servers/nginx", "families": [ { "family": "authz-bypass", "total": 2, "verified_real": 0, "manual": 2 }, { "family": "proxy-boundary", "total": 107, "verified_real": 0, "manual": 107 }, { "family": "sqli", "total": 1, "verified_real": 0, "manual": 1 } ], "entity_summary": { "system_id": "nginx", "display_name": "Nginx", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 1, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "joomla", "display_name": "Joomla", "total": 100, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 100, "browser_required": 0, "browser_present": 0, "latest_update": "2025-04-03T01:03:51.193", "category": "cms", "tier": "history-full", "output_dir": "07-framework-security/cms/joomla", "families": [ { "family": "xss", "total": 100, "verified_real": 0, "manual": 100 } ], "entity_summary": { "system_id": "joomla", "display_name": "Joomla", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 1, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "opencart", "display_name": "OpenCart", "total": 100, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 100, "browser_required": 0, "browser_present": 0, "latest_update": "2025-05-15T19:15:54.980", "category": "ecommerce", "tier": "history-full", "output_dir": "07-framework-security/ecommerce/opencart", "families": [ { "family": "deserialization", "total": 3, "verified_real": 0, "manual": 3 }, { "family": "plugin-extension", "total": 69, "verified_real": 0, "manual": 69 }, { "family": "sqli", "total": 12, "verified_real": 0, "manual": 12 }, { "family": "ssrf", "total": 1, "verified_real": 0, "manual": 1 }, { "family": "template-injection", "total": 1, "verified_real": 0, "manual": 1 }, { "family": "xss", "total": 14, "verified_real": 0, "manual": 14 } ], "entity_summary": { "system_id": "opencart", "display_name": "OpenCart", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 1, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 1, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [ { "candidate_id": "opencart--repo-candidate--https-github-com-opencart-opencart", "display_name": "opencart / opencart", "entity_type": "repo", "risk": "medium" } ] }, "top_entities": [], "backlog_preview": [ { "candidate_id": "opencart--repo-candidate--https-github-com-opencart-opencart", "display_name": "opencart / opencart", "entity_type": "repo", "risk": "medium" } ], "entity_total": 1, "entity_backlog": 1, "entity_type_counts": { "system": 1 } }, { "system_id": "magento-open-source", "display_name": "Magento Open Source", "total": 89, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 89, "browser_required": 0, "browser_present": 0, "latest_update": "2025-04-20T01:37:25.860", "category": "ecommerce", "tier": "history-full", "output_dir": "07-framework-security/ecommerce/magento-open-source", "families": [ { "family": "authz-bypass", "total": 1, "verified_real": 0, "manual": 1 }, { "family": "file-upload", "total": 3, "verified_real": 0, "manual": 3 }, { "family": "plugin-extension", "total": 67, "verified_real": 0, "manual": 67 }, { "family": "sqli", "total": 1, "verified_real": 0, "manual": 1 }, { "family": "xss", "total": 17, "verified_real": 0, "manual": 17 } ], "entity_summary": { "system_id": "magento-open-source", "display_name": "Magento Open Source", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 1, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 1, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [ { "candidate_id": "magento-open-source--repo-candidate--https-github-com-magento-magento2", "display_name": "magento / magento2", "entity_type": "repo", "risk": "medium" } ] }, "top_entities": [], "backlog_preview": [ { "candidate_id": "magento-open-source--repo-candidate--https-github-com-magento-magento2", "display_name": "magento / magento2", "entity_type": "repo", "risk": "medium" } ], "entity_total": 1, "entity_backlog": 1, "entity_type_counts": { "system": 1 } }, { "system_id": "django", "display_name": "Django", "total": 82, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 82, "browser_required": 0, "browser_present": 0, "latest_update": "2026-03-13T21:56:20.301637Z", "category": "frameworks", "tier": "rolling-24m", "output_dir": "07-framework-security/frameworks/django", "families": [ { "family": "xss", "total": 82, "verified_real": 0, "manual": 82 } ], "entity_summary": { "system_id": "django", "display_name": "Django", "cataloged_entity_total": 2, "child_entity_total": 1, "candidate_entity_total": 0, "workflow_complete_count": 2, "version_mapped_count": 1, "official_source_covered_count": 2, "history_full_complete_count": 1, "latest_green_count": 2, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1, "project": 1 }, "top_entities": [ { "entity_id": "django--project--django", "entity_type": "project", "display_name": "django", "advisory_count": 5, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [] }, "top_entities": [ { "entity_id": "django--project--django", "entity_type": "project", "display_name": "django", "advisory_count": 5, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [], "entity_total": 2, "entity_backlog": 0, "entity_type_counts": { "system": 1, "project": 1 } }, { "system_id": "adobe-commerce", "display_name": "Adobe Commerce", "total": 81, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 81, "browser_required": 0, "browser_present": 0, "latest_update": "2025-10-23T14:51:16.013", "category": "ecommerce", "tier": "history-full", "output_dir": "07-framework-security/ecommerce/adobe-commerce", "families": [ { "family": "xss", "total": 81, "verified_real": 0, "manual": 81 } ], "entity_summary": { "system_id": "adobe-commerce", "display_name": "Adobe Commerce", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 1, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "shopware", "display_name": "Shopware", "total": 71, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 71, "browser_required": 0, "browser_present": 0, "latest_update": "2025-04-20T01:37:25.860", "category": "ecommerce", "tier": "history-full", "output_dir": "07-framework-security/ecommerce/shopware", "families": [ { "family": "authz-bypass", "total": 2, "verified_real": 0, "manual": 2 }, { "family": "deserialization", "total": 1, "verified_real": 0, "manual": 1 }, { "family": "plugin-extension", "total": 55, "verified_real": 0, "manual": 55 }, { "family": "sqli", "total": 2, "verified_real": 0, "manual": 2 }, { "family": "ssrf", "total": 1, "verified_real": 0, "manual": 1 }, { "family": "xss", "total": 10, "verified_real": 0, "manual": 10 } ], "entity_summary": { "system_id": "shopware", "display_name": "Shopware", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 1, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 1, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [ { "candidate_id": "shopware--repo-candidate--https-github-com-shopware-shopware", "display_name": "shopware / shopware", "entity_type": "repo", "risk": "medium" } ] }, "top_entities": [], "backlog_preview": [ { "candidate_id": "shopware--repo-candidate--https-github-com-shopware-shopware", "display_name": "shopware / shopware", "entity_type": "repo", "risk": "medium" } ], "entity_total": 1, "entity_backlog": 1, "entity_type_counts": { "system": 1 } }, { "system_id": "drupal", "display_name": "Drupal", "total": 70, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 70, "browser_required": 0, "browser_present": 0, "latest_update": "Wed, 20 Sep 2023 16:23:05 +0000", "category": "cms", "tier": "history-full", "output_dir": "07-framework-security/cms/drupal", "families": [ { "family": "xss", "total": 70, "verified_real": 0, "manual": 70 } ], "entity_summary": { "system_id": "drupal", "display_name": "Drupal", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 1, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "mediawiki", "display_name": "MediaWiki", "total": 70, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 70, "browser_required": 0, "browser_present": 0, "latest_update": "Wed, 22 Oct 2025 21:44:43 +0000", "category": "cms", "tier": "rolling-24m", "output_dir": "07-framework-security/cms/mediawiki", "families": [ { "family": "xss", "total": 70, "verified_real": 0, "manual": 70 } ], "entity_summary": { "system_id": "mediawiki", "display_name": "MediaWiki", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "nextjs", "display_name": "Next.js", "total": 66, "verified_real": 26, "verified_synthetic": 0, "blocked": 0, "manual": 40, "browser_required": 0, "browser_present": 21, "latest_update": "2026-03-19T18:48:06.587119Z", "category": "frameworks", "tier": "history-full", "output_dir": "07-framework-security/frameworks/nextjs", "families": [ { "family": "authz-bypass", "total": 2, "verified_real": 2, "manual": 0 }, { "family": "deserialization", "total": 1, "verified_real": 1, "manual": 0 }, { "family": "proxy-boundary", "total": 55, "verified_real": 19, "manual": 36 }, { "family": "request-smuggling", "total": 3, "verified_real": 0, "manual": 3 }, { "family": "ssrf", "total": 2, "verified_real": 2, "manual": 0 }, { "family": "xss", "total": 3, "verified_real": 2, "manual": 1 } ], "entity_summary": { "system_id": "nextjs", "display_name": "Next.js", "cataloged_entity_total": 2, "child_entity_total": 1, "candidate_entity_total": 1, "workflow_complete_count": 2, "version_mapped_count": 1, "official_source_covered_count": 2, "history_full_complete_count": 2, "latest_green_count": 2, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1, "project": 1 }, "top_entities": [ { "entity_id": "nextjs--project--next", "entity_type": "project", "display_name": "next", "advisory_count": 41, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [ { "candidate_id": "nextjs--repo-candidate--https-github-com-vercel-next-js", "display_name": "vercel / next.js", "entity_type": "repo", "risk": "medium" } ] }, "top_entities": [ { "entity_id": "nextjs--project--next", "entity_type": "project", "display_name": "next", "advisory_count": 41, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [ { "candidate_id": "nextjs--repo-candidate--https-github-com-vercel-next-js", "display_name": "vercel / next.js", "entity_type": "repo", "risk": "medium" } ], "entity_total": 2, "entity_backlog": 1, "entity_type_counts": { "system": 1, "project": 1 } }, { "system_id": "grafana", "display_name": "Grafana", "total": 60, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 60, "browser_required": 0, "browser_present": 0, "latest_update": "", "category": "platforms", "tier": "rolling-24m", "output_dir": "07-framework-security/platforms/grafana", "families": [ { "family": "xss", "total": 60, "verified_real": 0, "manual": 60 } ], "entity_summary": { "system_id": "grafana", "display_name": "Grafana", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "jenkins", "display_name": "Jenkins", "total": 60, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 60, "browser_required": 0, "browser_present": 0, "latest_update": "", "category": "platforms", "tier": "rolling-24m", "output_dir": "07-framework-security/platforms/jenkins", "families": [ { "family": "deserialization", "total": 60, "verified_real": 0, "manual": 60 } ], "entity_summary": { "system_id": "jenkins", "display_name": "Jenkins", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "gitlab-ce", "display_name": "GitLab CE", "total": 55, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 55, "browser_required": 0, "browser_present": 0, "latest_update": "", "category": "platforms", "tier": "rolling-24m", "output_dir": "07-framework-security/platforms/gitlab-ce", "families": [ { "family": "deserialization", "total": 55, "verified_real": 0, "manual": 55 } ], "entity_summary": { "system_id": "gitlab-ce", "display_name": "GitLab CE", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "gitea", "display_name": "Gitea", "total": 50, "verified_real": 37, "verified_synthetic": 0, "blocked": 0, "manual": 13, "browser_required": 33, "browser_present": 33, "latest_update": "2026-03-18T03:55:13+00:00", "category": "platforms", "tier": "rolling-24m", "output_dir": "07-framework-security/platforms/gitea", "families": [ { "family": "authz-bypass", "total": 3, "verified_real": 3, "manual": 0 }, { "family": "file-upload", "total": 2, "verified_real": 2, "manual": 0 }, { "family": "proxy-boundary", "total": 39, "verified_real": 26, "manual": 13 }, { "family": "ssrf", "total": 1, "verified_real": 1, "manual": 0 }, { "family": "xss", "total": 5, "verified_real": 5, "manual": 0 } ], "entity_summary": { "system_id": "gitea", "display_name": "Gitea", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 1, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [ { "candidate_id": "gitea--repo-candidate--https-github-com-go-gitea-gitea", "display_name": "go-gitea / gitea", "entity_type": "repo", "risk": "medium" } ] }, "top_entities": [], "backlog_preview": [ { "candidate_id": "gitea--repo-candidate--https-github-com-go-gitea-gitea", "display_name": "go-gitea / gitea", "entity_type": "repo", "risk": "medium" } ], "entity_total": 1, "entity_backlog": 1, "entity_type_counts": { "system": 1 } }, { "system_id": "phpmyadmin", "display_name": "phpMyAdmin", "total": 50, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 50, "browser_required": 0, "browser_present": 0, "latest_update": "", "category": "platforms", "tier": "rolling-24m", "output_dir": "07-framework-security/platforms/phpmyadmin", "families": [ { "family": "xss", "total": 50, "verified_real": 0, "manual": 50 } ], "entity_summary": { "system_id": "phpmyadmin", "display_name": "phpMyAdmin", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "redmine", "display_name": "Redmine", "total": 50, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 50, "browser_required": 0, "browser_present": 0, "latest_update": "", "category": "platforms", "tier": "rolling-24m", "output_dir": "07-framework-security/platforms/redmine", "families": [ { "family": "xss", "total": 50, "verified_real": 0, "manual": 50 } ], "entity_summary": { "system_id": "redmine", "display_name": "Redmine", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "kibana", "display_name": "Kibana", "total": 47, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 47, "browser_required": 0, "browser_present": 0, "latest_update": "Thu, 19 Mar 2026 16:59:58 +0000", "category": "platforms", "tier": "rolling-24m", "output_dir": "07-framework-security/platforms/kibana", "families": [ { "family": "xss", "total": 47, "verified_real": 0, "manual": 47 } ], "entity_summary": { "system_id": "kibana", "display_name": "Kibana", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "traefik", "display_name": "Traefik", "total": 43, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 43, "browser_required": 0, "browser_present": 0, "latest_update": "2026-03-18T13:59:10.423590Z", "category": "servers", "tier": "rolling-24m", "output_dir": "07-framework-security/servers/traefik", "families": [ { "family": "authz-bypass", "total": 3, "verified_real": 0, "manual": 3 }, { "family": "file-upload", "total": 2, "verified_real": 0, "manual": 2 }, { "family": "proxy-boundary", "total": 37, "verified_real": 0, "manual": 37 }, { "family": "request-smuggling", "total": 1, "verified_real": 0, "manual": 1 } ], "entity_summary": { "system_id": "traefik", "display_name": "Traefik", "cataloged_entity_total": 2, "child_entity_total": 1, "candidate_entity_total": 0, "workflow_complete_count": 2, "version_mapped_count": 1, "official_source_covered_count": 2, "history_full_complete_count": 1, "latest_green_count": 2, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1, "repo": 1 }, "top_entities": [ { "entity_id": "traefik--repo--github-com-traefik-traefik-v3", "entity_type": "repo", "display_name": "traefik / traefik / v3", "advisory_count": 16, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [] }, "top_entities": [ { "entity_id": "traefik--repo--github-com-traefik-traefik-v3", "entity_type": "repo", "display_name": "traefik / traefik / v3", "advisory_count": 16, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [], "entity_total": 2, "entity_backlog": 0, "entity_type_counts": { "system": 1, "repo": 1 } }, { "system_id": "rails", "display_name": "Ruby on Rails", "total": 42, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 42, "browser_required": 0, "browser_present": 0, "latest_update": "2025-05-01T18:49:06.777708Z", "category": "frameworks", "tier": "rolling-24m", "output_dir": "07-framework-security/frameworks/rails", "families": [ { "family": "xss", "total": 42, "verified_real": 0, "manual": 42 } ], "entity_summary": { "system_id": "rails", "display_name": "Ruby on Rails", "cataloged_entity_total": 2, "child_entity_total": 1, "candidate_entity_total": 0, "workflow_complete_count": 2, "version_mapped_count": 1, "official_source_covered_count": 2, "history_full_complete_count": 1, "latest_green_count": 2, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1, "project": 1 }, "top_entities": [ { "entity_id": "rails--project--rails", "entity_type": "project", "display_name": "rails", "advisory_count": 10, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [] }, "top_entities": [ { "entity_id": "rails--project--rails", "entity_type": "project", "display_name": "rails", "advisory_count": 10, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [], "entity_total": 2, "entity_backlog": 0, "entity_type_counts": { "system": 1, "project": 1 } }, { "system_id": "vite", "display_name": "Vite", "total": 42, "verified_real": 12, "verified_synthetic": 0, "blocked": 0, "manual": 30, "browser_required": 0, "browser_present": 12, "latest_update": "2026-02-04T04:37:24.129476Z", "category": "frameworks", "tier": "history-full", "output_dir": "07-framework-security/frameworks/vite", "families": [ { "family": "proxy-boundary", "total": 39, "verified_real": 11, "manual": 28 }, { "family": "xss", "total": 3, "verified_real": 1, "manual": 2 } ], "entity_summary": { "system_id": "vite", "display_name": "Vite", "cataloged_entity_total": 5, "child_entity_total": 4, "candidate_entity_total": 1, "workflow_complete_count": 5, "version_mapped_count": 4, "official_source_covered_count": 5, "history_full_complete_count": 3, "latest_green_count": 5, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 3, "entity_type_counts": { "system": 1, "project": 1, "plugin": 1, "module": 1, "extension": 1 }, "top_entities": [ { "entity_id": "vite--project--vite", "entity_type": "project", "display_name": "vite", "advisory_count": 11, "history_backfill_status": "complete", "latest_sync_status": "green" }, { "entity_id": "vite--plugin--vite", "entity_type": "plugin", "display_name": "vite", "advisory_count": 3, "history_backfill_status": "complete", "latest_sync_status": "green" }, { "entity_id": "vite--extension--vite", "entity_type": "extension", "display_name": "vite", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" }, { "entity_id": "vite--module--vite", "entity_type": "module", "display_name": "vite", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [ { "candidate_id": "vite--repo-candidate--https-github-com-vitejs-vite", "display_name": "vitejs / vite", "entity_type": "repo", "risk": "medium" } ] }, "top_entities": [ { "entity_id": "vite--project--vite", "entity_type": "project", "display_name": "vite", "advisory_count": 11, "history_backfill_status": "complete", "latest_sync_status": "green" }, { "entity_id": "vite--plugin--vite", "entity_type": "plugin", "display_name": "vite", "advisory_count": 3, "history_backfill_status": "complete", "latest_sync_status": "green" }, { "entity_id": "vite--extension--vite", "entity_type": "extension", "display_name": "vite", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" }, { "entity_id": "vite--module--vite", "entity_type": "module", "display_name": "vite", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [ { "candidate_id": "vite--repo-candidate--https-github-com-vitejs-vite", "display_name": "vitejs / vite", "entity_type": "repo", "risk": "medium" } ], "entity_total": 5, "entity_backlog": 1, "entity_type_counts": { "system": 1, "project": 1, "plugin": 1, "module": 1, "extension": 1 } }, { "system_id": "moodle", "display_name": "Moodle", "total": 40, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 40, "browser_required": 0, "browser_present": 0, "latest_update": "2025-04-09T00:30:58.490", "category": "cms", "tier": "rolling-24m", "output_dir": "07-framework-security/cms/moodle", "families": [ { "family": "xss", "total": 40, "verified_real": 0, "manual": 40 } ], "entity_summary": { "system_id": "moodle", "display_name": "Moodle", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "discourse", "display_name": "Discourse", "total": 30, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 30, "browser_required": 0, "browser_present": 0, "latest_update": "Wed, 28 May 2025 05:22:52 +0000", "category": "cms", "tier": "rolling-24m", "output_dir": "07-framework-security/cms/discourse", "families": [ { "family": "xss", "total": 30, "verified_real": 0, "manual": 30 } ], "entity_summary": { "system_id": "discourse", "display_name": "Discourse", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "directus", "display_name": "Directus", "total": 29, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 29, "browser_required": 0, "browser_present": 0, "latest_update": "", "category": "cms", "tier": "rolling-24m", "output_dir": "07-framework-security/cms/directus", "families": [ { "family": "authz-bypass", "total": 3, "verified_real": 0, "manual": 3 }, { "family": "file-upload", "total": 1, "verified_real": 0, "manual": 1 }, { "family": "session-token", "total": 24, "verified_real": 0, "manual": 24 }, { "family": "xss", "total": 1, "verified_real": 0, "manual": 1 } ], "entity_summary": { "system_id": "directus", "display_name": "Directus", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 1, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [ { "candidate_id": "directus--repo-candidate--https-github-com-directus-directus", "display_name": "directus / directus", "entity_type": "repo", "risk": "medium" } ] }, "top_entities": [], "backlog_preview": [ { "candidate_id": "directus--repo-candidate--https-github-com-directus-directus", "display_name": "directus / directus", "entity_type": "repo", "risk": "medium" } ], "entity_total": 1, "entity_backlog": 1, "entity_type_counts": { "system": 1 } }, { "system_id": "nuxt", "display_name": "Nuxt", "total": 28, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 28, "browser_required": 0, "browser_present": 0, "latest_update": "2025-09-18T13:04:21Z", "category": "frameworks", "tier": "history-full", "output_dir": "07-framework-security/frameworks/nuxt", "families": [ { "family": "proxy-boundary", "total": 26, "verified_real": 0, "manual": 26 }, { "family": "xss", "total": 2, "verified_real": 0, "manual": 2 } ], "entity_summary": { "system_id": "nuxt", "display_name": "Nuxt", "cataloged_entity_total": 2, "child_entity_total": 1, "candidate_entity_total": 1, "workflow_complete_count": 2, "version_mapped_count": 1, "official_source_covered_count": 2, "history_full_complete_count": 2, "latest_green_count": 2, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1, "project": 1 }, "top_entities": [ { "entity_id": "nuxt--project--nuxt", "entity_type": "project", "display_name": "nuxt", "advisory_count": 5, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [ { "candidate_id": "nuxt--repo-candidate--https-github-com-nuxt-nuxt", "display_name": "nuxt / nuxt", "entity_type": "repo", "risk": "medium" } ] }, "top_entities": [ { "entity_id": "nuxt--project--nuxt", "entity_type": "project", "display_name": "nuxt", "advisory_count": 5, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [ { "candidate_id": "nuxt--repo-candidate--https-github-com-nuxt-nuxt", "display_name": "nuxt / nuxt", "entity_type": "repo", "risk": "medium" } ], "entity_total": 2, "entity_backlog": 1, "entity_type_counts": { "system": 1, "project": 1 } }, { "system_id": "caddy", "display_name": "Caddy", "total": 27, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 27, "browser_required": 0, "browser_present": 0, "latest_update": "2026-02-27T19:55:10Z", "category": "servers", "tier": "rolling-24m", "output_dir": "07-framework-security/servers/caddy", "families": [ { "family": "authz-bypass", "total": 5, "verified_real": 0, "manual": 5 }, { "family": "file-upload", "total": 1, "verified_real": 0, "manual": 1 }, { "family": "proxy-boundary", "total": 21, "verified_real": 0, "manual": 21 } ], "entity_summary": { "system_id": "caddy", "display_name": "Caddy", "cataloged_entity_total": 3, "child_entity_total": 2, "candidate_entity_total": 0, "workflow_complete_count": 3, "version_mapped_count": 2, "official_source_covered_count": 3, "history_full_complete_count": 1, "latest_green_count": 3, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 1, "entity_type_counts": { "system": 1, "repo": 1, "extension": 1 }, "top_entities": [ { "entity_id": "caddy--repo--github-com-caddyserver-caddy-v2", "entity_type": "repo", "display_name": "caddyserver / caddy / v2", "advisory_count": 5, "history_backfill_status": "complete", "latest_sync_status": "green" }, { "entity_id": "caddy--extension--github-com-caddyserver-caddy-v2", "entity_type": "extension", "display_name": "caddyserver / caddy / v2", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [] }, "top_entities": [ { "entity_id": "caddy--repo--github-com-caddyserver-caddy-v2", "entity_type": "repo", "display_name": "caddyserver / caddy / v2", "advisory_count": 5, "history_backfill_status": "complete", "latest_sync_status": "green" }, { "entity_id": "caddy--extension--github-com-caddyserver-caddy-v2", "entity_type": "extension", "display_name": "caddyserver / caddy / v2", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [], "entity_total": 3, "entity_backlog": 0, "entity_type_counts": { "system": 1, "repo": 1, "extension": 1 } }, { "system_id": "openmage", "display_name": "OpenMage / Mage-OS", "total": 27, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 27, "browser_required": 0, "browser_present": 0, "latest_update": "", "category": "ecommerce", "tier": "rolling-24m", "output_dir": "07-framework-security/ecommerce/openmage", "families": [ { "family": "plugin-extension", "total": 22, "verified_real": 0, "manual": 22 }, { "family": "xss", "total": 5, "verified_real": 0, "manual": 5 } ], "entity_summary": { "system_id": "openmage", "display_name": "OpenMage / Mage-OS", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 1, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [ { "candidate_id": "openmage--repo-candidate--https-github-com-openmage-magento-lts", "display_name": "OpenMage / magento-lts", "entity_type": "repo", "risk": "medium" } ] }, "top_entities": [], "backlog_preview": [ { "candidate_id": "openmage--repo-candidate--https-github-com-openmage-magento-lts", "display_name": "OpenMage / magento-lts", "entity_type": "repo", "risk": "medium" } ], "entity_total": 1, "entity_backlog": 1, "entity_type_counts": { "system": 1 } }, { "system_id": "strapi", "display_name": "Strapi", "total": 26, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 26, "browser_required": 0, "browser_present": 0, "latest_update": "", "category": "cms", "tier": "rolling-24m", "output_dir": "07-framework-security/cms/strapi", "families": [ { "family": "authz-bypass", "total": 1, "verified_real": 0, "manual": 1 }, { "family": "session-token", "total": 25, "verified_real": 0, "manual": 25 } ], "entity_summary": { "system_id": "strapi", "display_name": "Strapi", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 1, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [ { "candidate_id": "strapi--repo-candidate--https-github-com-strapi-strapi", "display_name": "strapi / strapi", "entity_type": "repo", "risk": "medium" } ] }, "top_entities": [], "backlog_preview": [ { "candidate_id": "strapi--repo-candidate--https-github-com-strapi-strapi", "display_name": "strapi / strapi", "entity_type": "repo", "risk": "medium" } ], "entity_total": 1, "entity_backlog": 1, "entity_type_counts": { "system": 1 } }, { "system_id": "saleor", "display_name": "Saleor", "total": 24, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 24, "browser_required": 0, "browser_present": 0, "latest_update": "", "category": "ecommerce", "tier": "rolling-24m", "output_dir": "07-framework-security/ecommerce/saleor", "families": [ { "family": "plugin-extension", "total": 1, "verified_real": 0, "manual": 1 }, { "family": "session-token", "total": 22, "verified_real": 0, "manual": 22 }, { "family": "xss", "total": 1, "verified_real": 0, "manual": 1 } ], "entity_summary": { "system_id": "saleor", "display_name": "Saleor", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 1, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [ { "candidate_id": "saleor--repo-candidate--https-github-com-saleor-saleor", "display_name": "saleor / saleor", "entity_type": "repo", "risk": "medium" } ] }, "top_entities": [], "backlog_preview": [ { "candidate_id": "saleor--repo-candidate--https-github-com-saleor-saleor", "display_name": "saleor / saleor", "entity_type": "repo", "risk": "medium" } ], "entity_total": 1, "entity_backlog": 1, "entity_type_counts": { "system": 1 } }, { "system_id": "ghost", "display_name": "Ghost", "total": 23, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 23, "browser_required": 0, "browser_present": 0, "latest_update": "", "category": "cms", "tier": "history-full", "output_dir": "07-framework-security/cms/ghost", "families": [ { "family": "xss", "total": 23, "verified_real": 0, "manual": 23 } ], "entity_summary": { "system_id": "ghost", "display_name": "Ghost", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 1, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 1, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [ { "candidate_id": "ghost--repo-candidate--https-github-com-tryghost-ghost", "display_name": "TryGhost / Ghost", "entity_type": "repo", "risk": "medium" } ] }, "top_entities": [], "backlog_preview": [ { "candidate_id": "ghost--repo-candidate--https-github-com-tryghost-ghost", "display_name": "TryGhost / Ghost", "entity_type": "repo", "risk": "medium" } ], "entity_total": 1, "entity_backlog": 1, "entity_type_counts": { "system": 1 } }, { "system_id": "undici", "display_name": "Undici", "total": 23, "verified_real": 14, "verified_synthetic": 0, "blocked": 0, "manual": 9, "browser_required": 0, "browser_present": 0, "latest_update": "2026-03-18T23:58:57.714731Z", "category": "frameworks", "tier": "rolling-24m", "output_dir": "07-framework-security/frameworks/undici", "families": [ { "family": "authz-bypass", "total": 1, "verified_real": 0, "manual": 1 }, { "family": "ssrf", "total": 22, "verified_real": 14, "manual": 8 } ], "entity_summary": { "system_id": "undici", "display_name": "Undici", "cataloged_entity_total": 3, "child_entity_total": 2, "candidate_entity_total": 0, "workflow_complete_count": 3, "version_mapped_count": 2, "official_source_covered_count": 3, "history_full_complete_count": 3, "latest_green_count": 3, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 1, "entity_type_counts": { "system": 1, "project": 1, "extension": 1 }, "top_entities": [ { "entity_id": "undici--project--undici", "entity_type": "project", "display_name": "undici", "advisory_count": 13, "history_backfill_status": "complete", "latest_sync_status": "green" }, { "entity_id": "undici--extension--undici", "entity_type": "extension", "display_name": "undici", "advisory_count": 2, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [] }, "top_entities": [ { "entity_id": "undici--project--undici", "entity_type": "project", "display_name": "undici", "advisory_count": 13, "history_backfill_status": "complete", "latest_sync_status": "green" }, { "entity_id": "undici--extension--undici", "entity_type": "extension", "display_name": "undici", "advisory_count": 2, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [], "entity_total": 3, "entity_backlog": 0, "entity_type_counts": { "system": 1, "project": 1, "extension": 1 } }, { "system_id": "mattermost", "display_name": "Mattermost", "total": 21, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 21, "browser_required": 0, "browser_present": 0, "latest_update": "Fix Release Date", "category": "platforms", "tier": "rolling-24m", "output_dir": "07-framework-security/platforms/mattermost", "families": [ { "family": "xss", "total": 21, "verified_real": 0, "manual": 21 } ], "entity_summary": { "system_id": "mattermost", "display_name": "Mattermost", "cataloged_entity_total": 5, "child_entity_total": 4, "candidate_entity_total": 0, "workflow_complete_count": 5, "version_mapped_count": 5, "official_source_covered_count": 5, "history_full_complete_count": 3, "latest_green_count": 5, "version_gap_entity_count": 0, "workflow_gap_entity_count": 0, "plugin_total": 1, "entity_type_counts": { "system": 1, "repo": 1, "project": 2, "plugin": 1 }, "top_entities": [ { "entity_id": "mattermost--project--mattermost-server", "entity_type": "project", "display_name": "Mattermost Server", "advisory_count": 14, "history_backfill_status": "complete", "latest_sync_status": "green" }, { "entity_id": "mattermost--plugin--mattermost-plugins", "entity_type": "plugin", "display_name": "Mattermost Plugins", "advisory_count": 5, "history_backfill_status": "complete", "latest_sync_status": "green" }, { "entity_id": "mattermost--project--issue-platform", "entity_type": "project", "display_name": "Issue Platform", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" }, { "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "entity_type": "repo", "display_name": "mattermost / mattermost-server", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [] }, "top_entities": [ { "entity_id": "mattermost--project--mattermost-server", "entity_type": "project", "display_name": "Mattermost Server", "advisory_count": 14, "history_backfill_status": "complete", "latest_sync_status": "green" }, { "entity_id": "mattermost--plugin--mattermost-plugins", "entity_type": "plugin", "display_name": "Mattermost Plugins", "advisory_count": 5, "history_backfill_status": "complete", "latest_sync_status": "green" }, { "entity_id": "mattermost--project--issue-platform", "entity_type": "project", "display_name": "Issue Platform", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" }, { "entity_id": "mattermost--repo--github-com-mattermost-mattermost-server", "entity_type": "repo", "display_name": "mattermost / mattermost-server", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [], "entity_total": 5, "entity_backlog": 0, "entity_type_counts": { "system": 1, "repo": 1, "project": 2, "plugin": 1 } }, { "system_id": "react", "display_name": "React", "total": 21, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 21, "browser_required": 0, "browser_present": 0, "latest_update": "2023-11-08T04:00:21.209483Z", "category": "frameworks", "tier": "history-full", "output_dir": "07-framework-security/frameworks/react", "families": [ { "family": "xss", "total": 21, "verified_real": 0, "manual": 21 } ], "entity_summary": { "system_id": "react", "display_name": "React", "cataloged_entity_total": 3, "child_entity_total": 2, "candidate_entity_total": 1, "workflow_complete_count": 3, "version_mapped_count": 2, "official_source_covered_count": 3, "history_full_complete_count": 2, "latest_green_count": 3, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1, "project": 2 }, "top_entities": [ { "entity_id": "react--project--react", "entity_type": "project", "display_name": "react", "advisory_count": 2, "history_backfill_status": "complete", "latest_sync_status": "green" }, { "entity_id": "react--project--react-dom", "entity_type": "project", "display_name": "react-dom", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [ { "candidate_id": "react--repo-candidate--https-github-com-facebook-react", "display_name": "facebook / react", "entity_type": "repo", "risk": "medium" } ] }, "top_entities": [ { "entity_id": "react--project--react", "entity_type": "project", "display_name": "react", "advisory_count": 2, "history_backfill_status": "complete", "latest_sync_status": "green" }, { "entity_id": "react--project--react-dom", "entity_type": "project", "display_name": "react-dom", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [ { "candidate_id": "react--repo-candidate--https-github-com-facebook-react", "display_name": "facebook / react", "entity_type": "repo", "risk": "medium" } ], "entity_total": 3, "entity_backlog": 1, "entity_type_counts": { "system": 1, "project": 2 } }, { "system_id": "medusa", "display_name": "Medusa", "total": 15, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 15, "browser_required": 0, "browser_present": 0, "latest_update": "", "category": "ecommerce", "tier": "rolling-24m", "output_dir": "07-framework-security/ecommerce/medusa", "families": [ { "family": "session-token", "total": 15, "verified_real": 0, "manual": 15 } ], "entity_summary": { "system_id": "medusa", "display_name": "Medusa", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 1, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [ { "candidate_id": "medusa--repo-candidate--https-github-com-medusajs-medusa", "display_name": "medusajs / medusa", "entity_type": "repo", "risk": "medium" } ] }, "top_entities": [], "backlog_preview": [ { "candidate_id": "medusa--repo-candidate--https-github-com-medusajs-medusa", "display_name": "medusajs / medusa", "entity_type": "repo", "risk": "medium" } ], "entity_total": 1, "entity_backlog": 1, "entity_type_counts": { "system": 1 } }, { "system_id": "vue", "display_name": "Vue", "total": 15, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 15, "browser_required": 0, "browser_present": 0, "latest_update": "2024-10-24T19:12:14.925352Z", "category": "frameworks", "tier": "history-full", "output_dir": "07-framework-security/frameworks/vue", "families": [ { "family": "xss", "total": 15, "verified_real": 0, "manual": 15 } ], "entity_summary": { "system_id": "vue", "display_name": "Vue", "cataloged_entity_total": 2, "child_entity_total": 1, "candidate_entity_total": 1, "workflow_complete_count": 2, "version_mapped_count": 1, "official_source_covered_count": 2, "history_full_complete_count": 1, "latest_green_count": 2, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1, "project": 1 }, "top_entities": [ { "entity_id": "vue--project--vue", "entity_type": "project", "display_name": "vue", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [ { "candidate_id": "vue--repo-candidate--https-github-com-vuejs-core", "display_name": "vuejs / core", "entity_type": "repo", "risk": "medium" } ] }, "top_entities": [ { "entity_id": "vue--project--vue", "entity_type": "project", "display_name": "vue", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [ { "candidate_id": "vue--repo-candidate--https-github-com-vuejs-core", "display_name": "vuejs / core", "entity_type": "repo", "risk": "medium" } ], "entity_total": 2, "entity_backlog": 1, "entity_type_counts": { "system": 1, "project": 1 } }, { "system_id": "astro", "display_name": "Astro", "total": 14, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 14, "browser_required": 0, "browser_present": 0, "latest_update": "2026-02-04T03:01:27.986221Z", "category": "frameworks", "tier": "rolling-24m", "output_dir": "07-framework-security/frameworks/astro", "families": [ { "family": "authz-bypass", "total": 1, "verified_real": 0, "manual": 1 }, { "family": "file-upload", "total": 2, "verified_real": 0, "manual": 2 }, { "family": "path-traversal", "total": 1, "verified_real": 0, "manual": 1 }, { "family": "proxy-boundary", "total": 3, "verified_real": 0, "manual": 3 }, { "family": "xss", "total": 7, "verified_real": 0, "manual": 7 } ], "entity_summary": { "system_id": "astro", "display_name": "Astro", "cataloged_entity_total": 3, "child_entity_total": 2, "candidate_entity_total": 0, "workflow_complete_count": 3, "version_mapped_count": 3, "official_source_covered_count": 3, "history_full_complete_count": 3, "latest_green_count": 3, "version_gap_entity_count": 0, "workflow_gap_entity_count": 0, "plugin_total": 1, "entity_type_counts": { "system": 1, "module": 1, "project": 1 }, "top_entities": [ { "entity_id": "astro--project--astro", "entity_type": "project", "display_name": "astro", "advisory_count": 12, "history_backfill_status": "complete", "latest_sync_status": "green" }, { "entity_id": "astro--module--astro", "entity_type": "module", "display_name": "astro", "advisory_count": 2, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [] }, "top_entities": [ { "entity_id": "astro--project--astro", "entity_type": "project", "display_name": "astro", "advisory_count": 12, "history_backfill_status": "complete", "latest_sync_status": "green" }, { "entity_id": "astro--module--astro", "entity_type": "module", "display_name": "astro", "advisory_count": 2, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [], "entity_total": 3, "entity_backlog": 0, "entity_type_counts": { "system": 1, "module": 1, "project": 1 } }, { "system_id": "spring-framework", "display_name": "Spring Framework", "total": 11, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 11, "browser_required": 0, "browser_present": 0, "latest_update": "", "category": "frameworks", "tier": "rolling-24m", "output_dir": "07-framework-security/frameworks/spring-framework", "families": [ { "family": "authz-bypass", "total": 1, "verified_real": 0, "manual": 1 }, { "family": "deserialization", "total": 9, "verified_real": 0, "manual": 9 }, { "family": "sqli", "total": 1, "verified_real": 0, "manual": 1 } ], "entity_summary": { "system_id": "spring-framework", "display_name": "Spring Framework", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "symfony", "display_name": "Symfony", "total": 9, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 9, "browser_required": 0, "browser_present": 0, "latest_update": "2026-03-13T22:16:14.858636Z", "category": "frameworks", "tier": "rolling-24m", "output_dir": "07-framework-security/frameworks/symfony", "families": [ { "family": "xss", "total": 9, "verified_real": 0, "manual": 9 } ], "entity_summary": { "system_id": "symfony", "display_name": "Symfony", "cataloged_entity_total": 2, "child_entity_total": 1, "candidate_entity_total": 0, "workflow_complete_count": 2, "version_mapped_count": 2, "official_source_covered_count": 2, "history_full_complete_count": 2, "latest_green_count": 2, "version_gap_entity_count": 0, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1, "package": 1 }, "top_entities": [ { "entity_id": "symfony--package--symfony-symfony", "entity_type": "package", "display_name": "symfony / symfony", "advisory_count": 9, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [] }, "top_entities": [ { "entity_id": "symfony--package--symfony-symfony", "entity_type": "package", "display_name": "symfony / symfony", "advisory_count": 9, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [], "entity_total": 2, "entity_backlog": 0, "entity_type_counts": { "system": 1, "package": 1 } }, { "system_id": "nodejs", "display_name": "Node.js", "total": 8, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 8, "browser_required": 0, "browser_present": 0, "latest_update": "2025-01-21", "category": "frameworks", "tier": "history-full", "output_dir": "07-framework-security/frameworks/nodejs", "families": [ { "family": "ssrf", "total": 8, "verified_real": 0, "manual": 8 } ], "entity_summary": { "system_id": "nodejs", "display_name": "Node.js", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 1, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "haproxy", "display_name": "HAProxy", "total": 6, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 6, "browser_required": 0, "browser_present": 0, "latest_update": "Wed, 25 Feb 2026 14:00:00 +0000", "category": "servers", "tier": "rolling-24m", "output_dir": "07-framework-security/servers/haproxy", "families": [ { "family": "proxy-boundary", "total": 6, "verified_real": 0, "manual": 6 } ], "entity_summary": { "system_id": "haproxy", "display_name": "HAProxy", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "aspnet-core", "display_name": "ASP.NET Core", "total": 3, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 3, "browser_required": 0, "browser_present": 0, "latest_update": "2026-03-11T13:53:20.707", "category": "frameworks", "tier": "rolling-24m", "output_dir": "07-framework-security/frameworks/aspnet-core", "families": [ { "family": "xss", "total": 3, "verified_real": 0, "manual": 3 } ], "entity_summary": { "system_id": "aspnet-core", "display_name": "ASP.NET Core", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "spring-security", "display_name": "Spring Security", "total": 3, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 3, "browser_required": 0, "browser_present": 0, "latest_update": "", "category": "frameworks", "tier": "rolling-24m", "output_dir": "07-framework-security/frameworks/spring-security", "families": [ { "family": "authz-bypass", "total": 1, "verified_real": 0, "manual": 1 }, { "family": "proxy-boundary", "total": 2, "verified_real": 0, "manual": 2 } ], "entity_summary": { "system_id": "spring-security", "display_name": "Spring Security", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "sveltekit", "display_name": "SvelteKit", "total": 3, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 3, "browser_required": 0, "browser_present": 0, "latest_update": "2026-02-28T06:27:26.115188Z", "category": "frameworks", "tier": "rolling-24m", "output_dir": "07-framework-security/frameworks/sveltekit", "families": [ { "family": "deserialization", "total": 3, "verified_real": 0, "manual": 3 } ], "entity_summary": { "system_id": "sveltekit", "display_name": "SvelteKit", "cataloged_entity_total": 2, "child_entity_total": 1, "candidate_entity_total": 0, "workflow_complete_count": 2, "version_mapped_count": 2, "official_source_covered_count": 2, "history_full_complete_count": 2, "latest_green_count": 2, "version_gap_entity_count": 0, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1, "package": 1 }, "top_entities": [ { "entity_id": "sveltekit--package--sveltejs-kit", "entity_type": "package", "display_name": "sveltejs / kit", "advisory_count": 3, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [] }, "top_entities": [ { "entity_id": "sveltekit--package--sveltejs-kit", "entity_type": "package", "display_name": "sveltejs / kit", "advisory_count": 3, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [], "entity_total": 2, "entity_backlog": 0, "entity_type_counts": { "system": 1, "package": 1 } }, { "system_id": "adminer", "display_name": "Adminer", "total": 2, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 2, "browser_required": 0, "browser_present": 0, "latest_update": "2026-02-28T00:18:44.953", "category": "platforms", "tier": "rolling-24m", "output_dir": "07-framework-security/platforms/adminer", "families": [ { "family": "xss", "total": 2, "verified_real": 0, "manual": 2 } ], "entity_summary": { "system_id": "adminer", "display_name": "Adminer", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "angular", "display_name": "Angular", "total": 2, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 2, "browser_required": 0, "browser_present": 0, "latest_update": "2026-03-17T01:31:35.828211Z", "category": "frameworks", "tier": "rolling-24m", "output_dir": "07-framework-security/frameworks/angular", "families": [ { "family": "xss", "total": 2, "verified_real": 0, "manual": 2 } ], "entity_summary": { "system_id": "angular", "display_name": "Angular", "cataloged_entity_total": 2, "child_entity_total": 1, "candidate_entity_total": 0, "workflow_complete_count": 2, "version_mapped_count": 2, "official_source_covered_count": 2, "history_full_complete_count": 2, "latest_green_count": 2, "version_gap_entity_count": 0, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1, "package": 1 }, "top_entities": [ { "entity_id": "angular--package--angular-core", "entity_type": "package", "display_name": "angular / core", "advisory_count": 2, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [] }, "top_entities": [ { "entity_id": "angular--package--angular-core", "entity_type": "package", "display_name": "angular / core", "advisory_count": 2, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [], "entity_total": 2, "entity_backlog": 0, "entity_type_counts": { "system": 1, "package": 1 } }, { "system_id": "echo", "display_name": "Echo", "total": 2, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 2, "browser_required": 0, "browser_present": 0, "latest_update": "2024-05-20T16:03:47Z", "category": "frameworks", "tier": "rolling-24m", "output_dir": "07-framework-security/frameworks/echo", "families": [ { "family": "authz-bypass", "total": 1, "verified_real": 0, "manual": 1 }, { "family": "ssrf", "total": 1, "verified_real": 0, "manual": 1 } ], "entity_summary": { "system_id": "echo", "display_name": "Echo", "cataloged_entity_total": 2, "child_entity_total": 1, "candidate_entity_total": 0, "workflow_complete_count": 2, "version_mapped_count": 2, "official_source_covered_count": 2, "history_full_complete_count": 2, "latest_green_count": 2, "version_gap_entity_count": 0, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1, "repo": 1 }, "top_entities": [ { "entity_id": "echo--repo--github-com-labstack-echo-v4", "entity_type": "repo", "display_name": "labstack / echo / v4", "advisory_count": 2, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [] }, "top_entities": [ { "entity_id": "echo--repo--github-com-labstack-echo-v4", "entity_type": "repo", "display_name": "labstack / echo / v4", "advisory_count": 2, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [], "entity_total": 2, "entity_backlog": 0, "entity_type_counts": { "system": 1, "repo": 1 } }, { "system_id": "laravel", "display_name": "Laravel", "total": 2, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 2, "browser_required": 0, "browser_present": 0, "latest_update": "2026-03-13T22:15:34.333730Z", "category": "frameworks", "tier": "rolling-24m", "output_dir": "07-framework-security/frameworks/laravel", "families": [ { "family": "xss", "total": 2, "verified_real": 0, "manual": 2 } ], "entity_summary": { "system_id": "laravel", "display_name": "Laravel", "cataloged_entity_total": 2, "child_entity_total": 1, "candidate_entity_total": 0, "workflow_complete_count": 2, "version_mapped_count": 2, "official_source_covered_count": 2, "history_full_complete_count": 2, "latest_green_count": 2, "version_gap_entity_count": 0, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1, "package": 1 }, "top_entities": [ { "entity_id": "laravel--package--laravel-framework", "entity_type": "package", "display_name": "laravel / framework", "advisory_count": 2, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [] }, "top_entities": [ { "entity_id": "laravel--package--laravel-framework", "entity_type": "package", "display_name": "laravel / framework", "advisory_count": 2, "history_backfill_status": "complete", "latest_sync_status": "green" } ], "backlog_preview": [], "entity_total": 2, "entity_backlog": 0, "entity_type_counts": { "system": 1, "package": 1 } }, { "system_id": "nestjs", "display_name": "NestJS", "total": 2, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 2, "browser_required": 0, "browser_present": 0, "latest_update": "2026-03-02T20:30:10.923", "category": "frameworks", "tier": "rolling-24m", "output_dir": "07-framework-security/frameworks/nestjs", "families": [ { "family": "ssrf", "total": 2, "verified_real": 0, "manual": 2 } ], "entity_summary": { "system_id": "nestjs", "display_name": "NestJS", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "spring-boot", "display_name": "Spring Boot", "total": 2, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 2, "browser_required": 0, "browser_present": 0, "latest_update": "2026-03-13T21:59:19.426456Z", "category": "frameworks", "tier": "rolling-24m", "output_dir": "07-framework-security/frameworks/spring-boot", "families": [ { "family": "authz-bypass", "total": 1, "verified_real": 0, "manual": 1 }, { "family": "proxy-boundary", "total": 1, "verified_real": 0, "manual": 1 } ], "entity_summary": { "system_id": "spring-boot", "display_name": "Spring Boot", "cataloged_entity_total": 2, "child_entity_total": 1, "candidate_entity_total": 0, "workflow_complete_count": 2, "version_mapped_count": 1, "official_source_covered_count": 2, "history_full_complete_count": 1, "latest_green_count": 2, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1, "project": 1 }, "top_entities": [ { "entity_id": "spring-boot--project--org-springframework-boot-spring-boot", "entity_type": "project", "display_name": "org.springframework.boot:spring-boot", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [] }, "top_entities": [ { "entity_id": "spring-boot--project--org-springframework-boot-spring-boot", "entity_type": "project", "display_name": "org.springframework.boot:spring-boot", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [], "entity_total": 2, "entity_backlog": 0, "entity_type_counts": { "system": 1, "project": 1 } }, { "system_id": "esbuild", "display_name": "esbuild", "total": 1, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 1, "browser_required": 0, "browser_present": 0, "latest_update": "2026-02-04T02:50:58.022803Z", "category": "frameworks", "tier": "rolling-24m", "output_dir": "07-framework-security/frameworks/esbuild", "families": [ { "family": "file-upload", "total": 1, "verified_real": 0, "manual": 1 } ], "entity_summary": { "system_id": "esbuild", "display_name": "esbuild", "cataloged_entity_total": 2, "child_entity_total": 1, "candidate_entity_total": 0, "workflow_complete_count": 2, "version_mapped_count": 2, "official_source_covered_count": 2, "history_full_complete_count": 0, "latest_green_count": 2, "version_gap_entity_count": 0, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1, "project": 1 }, "top_entities": [ { "entity_id": "esbuild--project--esbuild", "entity_type": "project", "display_name": "esbuild", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [] }, "top_entities": [ { "entity_id": "esbuild--project--esbuild", "entity_type": "project", "display_name": "esbuild", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [], "entity_total": 2, "entity_backlog": 0, "entity_type_counts": { "system": 1, "project": 1 } }, { "system_id": "express", "display_name": "Express", "total": 1, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 1, "browser_required": 0, "browser_present": 0, "latest_update": "2026-03-17T19:40:55.690", "category": "frameworks", "tier": "rolling-24m", "output_dir": "07-framework-security/frameworks/express", "families": [ { "family": "xss", "total": 1, "verified_real": 0, "manual": 1 } ], "entity_summary": { "system_id": "express", "display_name": "Express", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "fastify", "display_name": "Fastify", "total": 1, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 1, "browser_required": 0, "browser_present": 0, "latest_update": "2026-03-16T03:05:26.332715Z", "category": "frameworks", "tier": "rolling-24m", "output_dir": "07-framework-security/frameworks/fastify", "families": [ { "family": "xss", "total": 1, "verified_real": 0, "manual": 1 } ], "entity_summary": { "system_id": "fastify", "display_name": "Fastify", "cataloged_entity_total": 2, "child_entity_total": 1, "candidate_entity_total": 0, "workflow_complete_count": 2, "version_mapped_count": 2, "official_source_covered_count": 2, "history_full_complete_count": 0, "latest_green_count": 2, "version_gap_entity_count": 0, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1, "project": 1 }, "top_entities": [ { "entity_id": "fastify--project--fastify", "entity_type": "project", "display_name": "fastify", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [] }, "top_entities": [ { "entity_id": "fastify--project--fastify", "entity_type": "project", "display_name": "fastify", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [], "entity_total": 2, "entity_backlog": 0, "entity_type_counts": { "system": 1, "project": 1 } }, { "system_id": "flask", "display_name": "Flask", "total": 1, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 1, "browser_required": 0, "browser_present": 0, "latest_update": "2026-02-23T23:43:45.778179Z", "category": "frameworks", "tier": "rolling-24m", "output_dir": "07-framework-security/frameworks/flask", "families": [ { "family": "xss", "total": 1, "verified_real": 0, "manual": 1 } ], "entity_summary": { "system_id": "flask", "display_name": "Flask", "cataloged_entity_total": 2, "child_entity_total": 1, "candidate_entity_total": 0, "workflow_complete_count": 2, "version_mapped_count": 2, "official_source_covered_count": 2, "history_full_complete_count": 0, "latest_green_count": 2, "version_gap_entity_count": 0, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1, "project": 1 }, "top_entities": [ { "entity_id": "flask--project--flask", "entity_type": "project", "display_name": "flask", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [] }, "top_entities": [ { "entity_id": "flask--project--flask", "entity_type": "project", "display_name": "flask", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [], "entity_total": 2, "entity_backlog": 0, "entity_type_counts": { "system": 1, "project": 1 } }, { "system_id": "gin", "display_name": "Gin", "total": 1, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 1, "browser_required": 0, "browser_present": 0, "latest_update": "2026-03-14T10:41:18.820930Z", "category": "frameworks", "tier": "rolling-24m", "output_dir": "07-framework-security/frameworks/gin", "families": [ { "family": "xss", "total": 1, "verified_real": 0, "manual": 1 } ], "entity_summary": { "system_id": "gin", "display_name": "Gin", "cataloged_entity_total": 2, "child_entity_total": 1, "candidate_entity_total": 0, "workflow_complete_count": 2, "version_mapped_count": 2, "official_source_covered_count": 2, "history_full_complete_count": 0, "latest_green_count": 2, "version_gap_entity_count": 0, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1, "repo": 1 }, "top_entities": [ { "entity_id": "gin--repo--github-com-gin-gonic-gin", "entity_type": "repo", "display_name": "gin-gonic / gin", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [] }, "top_entities": [ { "entity_id": "gin--repo--github-com-gin-gonic-gin", "entity_type": "repo", "display_name": "gin-gonic / gin", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [], "entity_total": 2, "entity_backlog": 0, "entity_type_counts": { "system": 1, "repo": 1 } }, { "system_id": "hapi", "display_name": "Hapi", "total": 1, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 1, "browser_required": 0, "browser_present": 0, "latest_update": "2020-08-31T19:00:56Z", "category": "frameworks", "tier": "history-full", "output_dir": "07-framework-security/frameworks/hapi", "families": [ { "family": "proxy-boundary", "total": 1, "verified_real": 0, "manual": 1 } ], "entity_summary": { "system_id": "hapi", "display_name": "Hapi", "cataloged_entity_total": 2, "child_entity_total": 1, "candidate_entity_total": 0, "workflow_complete_count": 2, "version_mapped_count": 2, "official_source_covered_count": 2, "history_full_complete_count": 1, "latest_green_count": 2, "version_gap_entity_count": 0, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1, "package": 1 }, "top_entities": [ { "entity_id": "hapi--package--hapi-hapi", "entity_type": "package", "display_name": "hapi / hapi", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [] }, "top_entities": [ { "entity_id": "hapi--package--hapi-hapi", "entity_type": "package", "display_name": "hapi / hapi", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [], "entity_total": 2, "entity_backlog": 0, "entity_type_counts": { "system": 1, "package": 1 } }, { "system_id": "koa", "display_name": "Koa", "total": 1, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 1, "browser_required": 0, "browser_present": 0, "latest_update": "2026-02-26T23:36:36.294040Z", "category": "frameworks", "tier": "rolling-24m", "output_dir": "07-framework-security/frameworks/koa", "families": [ { "family": "xss", "total": 1, "verified_real": 0, "manual": 1 } ], "entity_summary": { "system_id": "koa", "display_name": "Koa", "cataloged_entity_total": 2, "child_entity_total": 1, "candidate_entity_total": 0, "workflow_complete_count": 2, "version_mapped_count": 2, "official_source_covered_count": 2, "history_full_complete_count": 0, "latest_green_count": 2, "version_gap_entity_count": 0, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1, "project": 1 }, "top_entities": [ { "entity_id": "koa--project--koa", "entity_type": "project", "display_name": "koa", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [] }, "top_entities": [ { "entity_id": "koa--project--koa", "entity_type": "project", "display_name": "koa", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [], "entity_total": 2, "entity_backlog": 0, "entity_type_counts": { "system": 1, "project": 1 } }, { "system_id": "webpack", "display_name": "webpack", "total": 1, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 1, "browser_required": 0, "browser_present": 0, "latest_update": "2026-02-27T17:21:22.370", "category": "frameworks", "tier": "rolling-24m", "output_dir": "07-framework-security/frameworks/webpack", "families": [ { "family": "file-upload", "total": 1, "verified_real": 0, "manual": 1 } ], "entity_summary": { "system_id": "webpack", "display_name": "webpack", "cataloged_entity_total": 1, "child_entity_total": 0, "candidate_entity_total": 0, "workflow_complete_count": 1, "version_mapped_count": 0, "official_source_covered_count": 1, "history_full_complete_count": 0, "latest_green_count": 1, "version_gap_entity_count": 1, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1 }, "top_entities": [], "backlog_preview": [] }, "top_entities": [], "backlog_preview": [], "entity_total": 1, "entity_backlog": 0, "entity_type_counts": { "system": 1 } }, { "system_id": "werkzeug", "display_name": "Werkzeug", "total": 1, "verified_real": 0, "verified_synthetic": 0, "blocked": 0, "manual": 1, "browser_required": 0, "browser_present": 0, "latest_update": "2026-02-23T23:43:27.690386Z", "category": "frameworks", "tier": "rolling-24m", "output_dir": "07-framework-security/frameworks/werkzeug", "families": [ { "family": "proxy-boundary", "total": 1, "verified_real": 0, "manual": 1 } ], "entity_summary": { "system_id": "werkzeug", "display_name": "Werkzeug", "cataloged_entity_total": 2, "child_entity_total": 1, "candidate_entity_total": 0, "workflow_complete_count": 2, "version_mapped_count": 2, "official_source_covered_count": 2, "history_full_complete_count": 0, "latest_green_count": 2, "version_gap_entity_count": 0, "workflow_gap_entity_count": 0, "plugin_total": 0, "entity_type_counts": { "system": 1, "project": 1 }, "top_entities": [ { "entity_id": "werkzeug--project--werkzeug", "entity_type": "project", "display_name": "werkzeug", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [] }, "top_entities": [ { "entity_id": "werkzeug--project--werkzeug", "entity_type": "project", "display_name": "werkzeug", "advisory_count": 1, "history_backfill_status": "seeded", "latest_sync_status": "green" } ], "backlog_preview": [], "entity_total": 2, "entity_backlog": 0, "entity_type_counts": { "system": 1, "project": 1 } } ]