LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App:https://github.com/marketplace/lunatrace-by-lunasec/

Intentionally vulnerable apps that are used to test LunaTrace.

An intentionally vulnerable Javascript app containing notable vulnerabilities in its dependencies.

Damn Vulnerable Java (EE) Application

A vulnerability scanner for container images and filesystems

A Common Weakness Enumeration (CWE) Node.js SDK compliant with MITRE / CAPEC

Dockerized POC for CVE-2022-42889 Text4Shell (with LunaSec research notes)

Generate a Snyk dependency tree from package-lock.json or yarn.lock file

This is a dockerized application that is vulnerable to the Spring4Shell vulnerability (CVE-2022-22965).

CLI tool and library for generating a Software Bill of Materials from container images and filesystems