/stackalarm

Sources

stackalarm reads 181 sources first-hand. This list is built from the sources/ folder of the repository, so it always matches the CLI of the same version.

Tags

Pass them with --tag. An unknown tag is searched as a keyword in the general sources.

The 32 sources tagged general (CERTs, CVE databases, exploit feeds, press) are read on every run, and only their entries that mention one of your tags or keywords are kept.

All sources

SourceStageTags
.NET runtime security advisories (GitHub)
dotnet-runtime-advisories		 advisory dotnet
Actix Web security advisories (GitHub)
actix-web-advisories		 advisory actix
aiohttp security advisories (GitHub)
aiohttp-advisories		 advisory aiohttp
Angular security advisories (GitHub)
angular-advisories		 advisory angular
Argo CD security advisories (GitHub)
argo-cd-advisories		 advisory argocd
ASP.NET Core security advisories (GitHub)
aspnetcore-advisories		 advisory aspnetcore dotnet
Astro security advisories (GitHub)
astro-advisories		 advisory astro
Axios security advisories (GitHub)
axios-advisories		 advisory axios
Better Auth security advisories (GitHub)
better-auth-advisories		 advisory better-auth
BleepingComputer
bleepingcomputer		 news general
Bun security advisories (GitHub)
bun-advisories		 advisory bun
Caddy security advisories (GitHub)
caddy-advisories		 advisory caddy
CakePHP security advisories (GitHub)
cakephp-advisories		 advisory cakephp
Canadian Centre for Cyber Security alerts and advisories
cccs-canada		 alert general
CERT Polska (Poland)
cert-pl		 news general
CERT-Bund / BSI security advisories (Germany)
cert-bund		 advisory general
CERT-EU security advisories
cert-eu		 alert general
CERT-FR advisories
cert-fr-advisories		 advisory general
CERT-FR alerts (critical, rare)
cert-fr-alerts		 alert general
CERT-FR news
cert-fr-news		 news general
CERT-FR threat reports (CTI)
cert-fr-cti		 news general
CERT/CC vulnerability notes (US, Carnegie Mellon)
certcc-vulnotes		 advisory general
Chrome releases, security fixes
chrome-releases		 release chrome
CISA cybersecurity advisories and alerts (US)
cisa-advisories		 alert general
CISA industrial control systems advisories (US)
cisa-ics-advisories		 advisory ics
CISA Known Exploited Vulnerabilities
cisa-kev		 alert general
Cisco security advisories
cisco-psirt		 advisory cisco
CodeIgniter 4 security advisories (GitHub)
codeigniter-advisories		 advisory codeigniter
Composer security advisories (GitHub)
composer-advisories		 advisory php composer
containerd security advisories (GitHub)
containerd-advisories		 advisory containerd
Craft CMS security advisories (GitHub)
craftcms-advisories		 advisory craftcms
Debian Security Advisories
debian-dsa		 advisory debian
Deno security advisories (GitHub)
deno-advisories		 advisory deno
Devise security advisories (GitHub)
devise-advisories		 advisory devise
Directus security advisories (GitHub)
directus-advisories		 advisory directus
Discourse security advisories (GitHub)
discourse-advisories		 advisory discourse
Django weblog, security releases
django-weblog		 release django
Docker blog, security posts
docker-blog		 advisory docker
DOMPurify security advisories (GitHub)
dompurify-advisories		 advisory dompurify
Drupal security advisories
drupal-security		 advisory drupal
Echo (Go) security advisories (GitHub)
echo-advisories		 advisory echo
Electron security advisories (GitHub)
electron-advisories		 advisory electron
ENISA EU Vulnerability Database, latest critical vulnerabilities
euvd-critical		 advisory general
ENISA EU Vulnerability Database, searched by word, CVSS 7+ or not yet scored
euvd-search		 advisory general
ENISA EU Vulnerability Database, vulnerabilities exploited in the wild
euvd-exploited		 alert general
Envoy security advisories (GitHub)
envoy-advisories		 advisory envoy
Exploit Database, public exploits
exploit-db		 alert general
Express security advisories (GitHub)
express-advisories		 advisory express
Fastify security advisories (GitHub)
fastify-advisories		 advisory fastify
Fiber (Go) security advisories (GitHub)
fiber-advisories		 advisory gofiber
Filament security advisories (GitHub)
filament-advisories		 advisory filament
Flask security advisories (GitHub)
flask-advisories		 advisory flask
Fortinet PSIRT advisories
fortiguard-psirt		 advisory fortinet
Full Disclosure mailing list
full-disclosure		 heads-up general
Ghost security advisories (GitHub)
ghost-advisories		 advisory ghost
Gitea security advisories (GitHub)
gitea-advisories		 advisory gitea
GitHub Advisory Database, reviewed actions advisories
ghsa-actions		 advisory github-actions
GitHub Advisory Database, reviewed composer advisories
ghsa-composer		 advisory php composer
GitHub Advisory Database, reviewed erlang advisories
ghsa-erlang		 advisory erlang elixir
GitHub Advisory Database, reviewed go advisories
ghsa-go		 advisory go
GitHub Advisory Database, reviewed maven advisories
ghsa-maven		 advisory java maven
GitHub Advisory Database, reviewed npm advisories
ghsa-npm		 advisory node npm
GitHub Advisory Database, reviewed nuget advisories
ghsa-nuget		 advisory dotnet nuget
GitHub Advisory Database, reviewed pip advisories
ghsa-pip		 advisory python pip
GitHub Advisory Database, reviewed pub advisories
ghsa-pub		 advisory dart flutter
GitHub Advisory Database, reviewed rubygems advisories
ghsa-rubygems		 advisory ruby
GitHub Advisory Database, reviewed rust advisories
ghsa-rust		 advisory rust cargo
GitHub Advisory Database, reviewed swift advisories
ghsa-swift		 advisory swift
GitHub changelog, security and Actions changes
github-changelog		 release github-actions github
GitLab patch and critical security releases
gitlab-security-releases		 release gitlab
Go releases (tags of the release branches; minor releases carry the security fixes)
go-releases		 release go
Google Project Zero
project-zero		 news general
Gradio security advisories (GitHub)
gradio-advisories		 advisory gradio
Grafana security advisories
grafana-advisories		 advisory grafana
gRPC-Go security advisories (GitHub)
grpc-go-advisories		 advisory grpc-go
Guzzle security advisories (GitHub)
guzzle-advisories		 advisory guzzle
Helm security advisories (GitHub)
helm-advisories		 advisory helm
Home Assistant security advisories (GitHub)
home-assistant-advisories		 advisory home-assistant
Hono security advisories (GitHub)
hono-advisories		 advisory hono
Istio security advisories (GitHub)
istio-advisories		 advisory istio
Jackson databind security advisories (GitHub)
jackson-databind-advisories		 advisory jackson
Japan Vulnerability Notes (JVN)
jvn		 advisory general
Jenkins security advisories
jenkins-advisories		 advisory jenkins
JPCERT/CC (Japan)
jpcert		 alert general
Keycloak security advisories (GitHub)
keycloak-advisories		 advisory keycloak
Kirby CMS security advisories (GitHub)
kirby-advisories		 advisory kirby
Krebs on Security
krebs-on-security		 news general
Kubernetes blog, security posts
kubernetes-blog		 advisory kubernetes
LangChain security advisories (GitHub)
langchain-advisories		 advisory langchain
LangChain.js security advisories (GitHub)
langchainjs-advisories		 advisory langchain
Laravel blog, security posts
laravel-blog		 advisory laravel
Laravel framework security advisories (GitHub)
laravel-advisories		 advisory laravel
Livewire security advisories (GitHub)
livewire-advisories		 advisory livewire
Mastodon security advisories (GitHub)
mastodon-advisories		 advisory mastodon
MCP Python SDK security advisories (GitHub)
mcp-python-sdk-advisories		 advisory mcp
MCP TypeScript SDK security advisories (GitHub)
mcp-typescript-sdk-advisories		 advisory mcp
Mermaid security advisories (GitHub)
mermaid-advisories		 advisory mermaid
Micronaut security advisories (GitHub)
micronaut-advisories		 advisory micronaut
Microsoft Security Response Center, security update guide
msrc		 advisory microsoft windows dotnet
MinIO security advisories (GitHub)
minio-advisories		 advisory minio
MLflow security advisories (GitHub)
mlflow-advisories		 advisory mlflow
Moby (Docker Engine) security advisories (GitHub)
moby-advisories		 advisory docker
n8n security advisories (GitHub)
n8n-advisories		 advisory n8n
NCSC UK news, alerts and reports
ncsc-uk		 alert general
NCSC-NL security advisories (Netherlands)
ncsc-nl		 advisory general
NestJS security advisories (GitHub)
nestjs-advisories		 advisory nestjs
Netlify changelog, security and build image changes
netlify-changelog		 release netlify
Netty security advisories (GitHub)
netty-advisories		 advisory netty
Next.js security advisories (GitHub)
nextjs-advisories		 advisory nextjs
NextAuth.js / Auth.js security advisories (GitHub)
nextauth-advisories		 advisory next-auth authjs
nginx news, security releases
nginx-news		 release nginx
NIST National Vulnerability Database (US), searched by word, CVSS 7+ or not yet scored
nvd		 advisory general
Node.js vulnerability reports (announced about a week ahead, then released)
nodejs-vulnerabilities		 heads-up node
Nokogiri security advisories (GitHub)
nokogiri-advisories		 advisory nokogiri
Nuxt security advisories (GitHub)
nuxt-advisories		 advisory nuxt
Open WebUI security advisories (GitHub)
open-webui-advisories		 advisory open-webui
openSUSE security announcements
opensuse-security		 advisory opensuse linux
oss-security mailing list (often the first public heads-up)
oss-security		 heads-up general
Palo Alto Networks security advisories
paloalto-psirt		 advisory paloalto
Payload CMS security advisories (GitHub)
payload-advisories		 advisory payloadcms
Phoenix security advisories (GitHub)
phoenix-advisories		 advisory phoenix
PHP internals announcements (PHP Foundation Discourse)
php-internals		 heads-up php
PHP news and security advisories (php.net)
php-news		 advisory php
PHP releases (php.net)
php-releases		 release php
php-src security advisories (GitHub)
php-src-advisories		 advisory php
Pillow security advisories (GitHub)
pillow-advisories		 advisory pillow
PocketBase security advisories (GitHub)
pocketbase-advisories		 advisory pocketbase
PostgreSQL news, security releases
postgresql-news		 release postgresql
PrestaShop security advisories (GitHub)
prestashop-advisories		 advisory prestashop
Prometheus security advisories (GitHub)
prometheus-advisories		 advisory prometheus
Puma security advisories (GitHub)
puma-advisories		 advisory puma
Python Insider (release announcements)
python-insider		 release python
Python security-announce mailing list
python-security-announce		 advisory python
Quarkus security advisories (GitHub)
quarkus-advisories		 advisory quarkus
Rack security advisories (GitHub)
rack-advisories		 advisory rack
Rapid7 blog (emergent threat responses)
rapid7-blog		 news general
React Router (and Remix) security advisories (GitHub)
react-router-advisories		 advisory react-router remix
React security advisories (GitHub)
react-advisories		 advisory react
Red Hat security advisories
redhat-rhsa		 advisory redhat linux
Redis security advisories (GitHub)
redis-advisories		 advisory redis
Ruby news (ruby-lang.org)
ruby-news		 advisory ruby
Ruby on Rails security advisories (GitHub)
rails-advisories		 advisory rails
RubySec advisory database
rubysec		 advisory ruby
runc security advisories (GitHub)
runc-advisories		 advisory runc docker
Rust blog, security advisories and point releases
rust-blog		 release rust
SANS Internet Storm Center diaries
sans-isc		 news general
SecurityWeek
securityweek		 news general
sharp security advisories (GitHub)
sharp-advisories		 advisory sharp
Shopware security advisories (GitHub)
shopware-advisories		 advisory shopware
Spring security advisories (Framework, Boot, Security, Cloud…)
spring-security-advisories		 advisory spring
Starlette (the toolkit under FastAPI) security advisories (GitHub)
starlette-advisories		 advisory starlette fastapi
Strapi security advisories (GitHub)
strapi-advisories		 advisory strapi
Streamlit security advisories (GitHub)
streamlit-advisories		 advisory streamlit
Svelte security advisories (GitHub)
svelte-advisories		 advisory svelte
SvelteKit security advisories (GitHub)
sveltekit-advisories		 advisory sveltekit
Sylius security advisories (GitHub)
sylius-advisories		 advisory sylius
Symfony blog, security posts
symfony-blog		 advisory symfony
Symfony security advisories (GitHub)
symfony-advisories		 advisory symfony
Tauri security advisories (GitHub)
tauri-advisories		 advisory tauri
Tenable blog (vulnerability FAQs)
tenable-blog		 news general
The Hacker News
the-hacker-news		 news general
Tokio security advisories (GitHub)
tokio-advisories		 advisory tokio
Traefik security advisories (GitHub)
traefik-advisories		 advisory traefik
Twig security advisories (GitHub)
twig-advisories		 advisory twig
Ubuntu Security Notices
ubuntu-usn		 advisory ubuntu
Umbraco CMS security advisories (GitHub)
umbraco-advisories		 advisory umbraco
undici (the HTTP client of Node.js) security advisories (GitHub)
undici-advisories		 advisory undici
urllib3 security advisories (GitHub)
urllib3-advisories		 advisory urllib3
Valkey security advisories (GitHub)
valkey-advisories		 advisory valkey
Vercel AI SDK security advisories (GitHub)
vercel-ai-advisories		 advisory ai-sdk
Vite security advisories (GitHub)
vite-advisories		 advisory vite
Vitest security advisories (GitHub)
vitest-advisories		 advisory vitest
vLLM security advisories (GitHub)
vllm-advisories		 advisory vllm
Vue.js security advisories (GitHub)
vue-advisories		 advisory vue
Wagtail security advisories (GitHub)
wagtail-advisories		 advisory wagtail
watchTowr Labs research
watchtowr-labs		 news general
webpack security advisories (GitHub)
webpack-advisories		 advisory webpack
Werkzeug (the toolkit under Flask) security advisories (GitHub)
werkzeug-advisories		 advisory werkzeug flask
WordPress security releases
wordpress-security		 release wordpress
WPScan WordPress vulnerability news
wpscan		 advisory wordpress
Zero Day Initiative published advisories
zdi-published		 advisory general

Counts by stage: heads-up 4, release 12, advisory 144, alert 9, news 12.

Propose a source

The most useful contribution. Open a New source issue with the feed URL: it needs to answer and its entries to carry dates.

Next: Privacy and security