Security Advisories & Flag Wall

Continuous supply-chain vulnerability alerts tracked via automated OSV (Open Source Vulnerability) and GHSA (GitHub Security Advisory) feeds. We monitor upstream codebases to flag dormant maintenance, commercial bait-and-switch governance shifts, and active CVE disclosures in real time.

DEFENSIVE ADVISORY FEED

The Flag Wall

Security bulletins highlighting supply-chain dormancy, commercial governance pivots, and unpatched CVE exposure. We watch these repos so you don't get burned.

ACTIVE ALERTS: 4

BULLETIN #SEC-2026-091 • 14:22:04 UTC • SEP 18

Huginnhuginn/huginn

42/100Risky

ARCHIVED / DORMANT 180D+

Repository commit cadence ceased over 6 months ago. 14 critical-severity Ruby gem CVE advisories remain unresolved in main branch CI pipelines.

Safer Drop-in Alternative:n8n(89/100)

BULLETIN #SEC-2026-088 • 09:15:22 UTC • SEP 17

Statping-ngstatping-ng/statping-ng

56/100Caution

2 CONTRIBUTORS — BUS FACTOR

Community rescue fork exhibits single-maintainer dependency risk. Pull request triage has stalled with unreviewed database schema migrations.

Safer Drop-in Alternative:Uptime Kuma(93/100)

BULLETIN #SEC-2026-084 • 18:40:11 UTC • SEP 16

PhotoPrismphotoprism/photoprism

72/100Caution

COMMERCIAL GATING TENSION

Essential multi-user permission controls and high-resolution map tiles gated behind commercial sponsor subscription tiers.

Safer Drop-in Alternative:Immich(95/100)

BULLETIN #SEC-2026-079 • 11:04:55 UTC • SEP 15

ownCloud Classicowncloud/core

63/100Caution

LEGACY CORE / SUPERSEDED BY OCIS

PHP 10.x core is in maintenance-only status. Historical CVE-2023-49103 requires immediate configuration verification on active host nodes.

Safer Drop-in Alternative:Nextcloud Hub(92/100)