This project aims to provide a central repository for many useful Tsunami Security Scanner plugins.
active 2023-08-15 → 2026-08-04 (UTC)
Activity over time
Daily event counts in the loaded window
Line chart, 1086 days from 2023-08-15 to 2026-08-04. Pushes: 304 total, peak 9 in a day. Pull requests: 231 total, peak 7 in a day. Issues: 459 total, peak 85 in a day. Comments: 1,723 total, peak 22 in a day. Stars: 124 total, peak 5 in a day.
- Pushes
- Pull requests
- Issues
- Comments
- Stars
Stars, PRs, issues and forks are under-captured in the later part of this window. GH Archive progressively stopped capturing non-push events during 2026 — −95% or worse by the end of the window. Every series here except Pushes fades for that reason, so a decline above reflects the archive, not this repository. Pushes stay reliable throughout, so read them, and the contributor counts derived from them, as the real signal. Data health has the measurements.
Top contributors
Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity
| Contributor | Contributions | Pushes | PRs | Comments |
|---|---|---|---|---|
| tooryx | 822 | 6 | 18 | 487 |
| copybara-service[bot] | 416 | 293 | 81 | 0 |
| maoning | 258 | 0 | 5 | 191 |
| lokiuox | 241 | 0 | 10 | 156 |
| leonardo-doyensec | 202 | 0 | 20 | 114 |
| hh-hunter | 122 | 0 | 2 | 87 |
| giacomo-doyensec | 111 | 0 | 11 | 58 |
| github-actions[bot] | 95 | 0 | 0 | 94 |
| YuriyPobezhymov | 84 | 0 | 6 | 52 |
| JamesFoxxx | 52 | 0 | 6 | 36 |
| vishwaraj101 | 50 | 0 | 2 | 35 |
| hayageek | 50 | 0 | 2 | 38 |
| frkngksl | 38 | 0 | 2 | 28 |
| crackatoa | 38 | 0 | 3 | 21 |
| LeonardoE95 | 35 | 0 | 3 | 15 |
| lanced00m | 33 | 0 | 3 | 25 |
| dawidg-doyen | 31 | 0 | 5 | 14 |
| inkz | 30 | 0 | 2 | 20 |
| timoles | 29 | 0 | 3 | 20 |
| alessandro-Doyensec | 28 | 0 | 3 | 20 |
Recent activity
Latest issues, pull requests and releases
- Issue comment#742mdjr1877-droid2026-08-04 16:19PRP: Redis CVE-2025-49844 (RediShell) RCE
- Pull request#828dependabot[bot]2026-05-06 19:38
- Pull request#806copybara-service[bot]2026-04-27 15:52
- Issue comment#819gm0105866-lab2026-04-26 12:08Tsunami PRP program indefinitely paused
- Pull request#807copybara-service[bot]2026-04-09 15:20
- Issue comment#626tooryx2026-04-09 12:09PRP: Tomcat Session Deserialization Remote Code Execution (CVE-2025-24813)
- Issue#530tooryx2026-04-09 12:05PRP: CVE-2024-27348 - RCE in Apache HugeGraph Server
- Issue#672tooryx2026-04-09 12:05PRP: Spring H2 Database Web Console weak credential tester
- Issue#562tooryx2026-04-09 12:05AI PRP: Weak credential tester for man-group/dtale
- Issue#667tooryx2026-04-09 12:05PRP: Ingress-NGINX (Kubernetes) CVE-2025-1974 Unauthenticated Remote Code Execution ("IngressNightmare")
- Issue#780tooryx2026-04-09 12:05PRP: Detector for Oracle E-Business Suite CVE-2025-61882 RCE
- Issue#785tooryx2026-04-09 12:05PRP: Cisco Unified Communications Products CVE-2026-20045 RCE
- Issue#747tooryx2026-04-09 12:05PRP: Figma-Context-MCP CVE-2025-53967 RCE
- Issue#786tooryx2026-04-09 12:05PRP: Langflow CVE-2025-34291 CORS Misconfiguration to RCE
- Issue#793tooryx2026-04-09 12:05PRP: LightLLM CVE-2026-26220 Unauthenticated RCE
- Issue comment#797rootvector22026-04-08 16:42PRP: Jenkins CVE-2024-23904 Arbitrary File Read
- Issue#818github-actions[bot]2026-04-08 09:07PRP: FlowiseAI CVE-2025-59528 RCE
- Issue comment#815Amsamms2026-04-05 20:08AI PRP: ComfyUI-Manager CVE-2025-67303 Unauthenticated RCE
- Issue#816Amsamms2026-04-05 20:07PRP: vLLM CVE-2026-22778 RCE
- Issue#815Amsamms2026-04-05 05:16AI PRP: ComfyUI-Manager CVE-2025-67303 Unauthenticated RCE
- Issue#814Amsamms2026-04-05 05:15AI PRP: vLLM CVE-2026-22778 Unauthenticated RCE via Video Processing
- Issue#810basicScandal2026-04-03 12:21Starlog published a deep-dive on google/tsunami-security-scanner-plugins
- Issue comment#808github-actions[bot]2026-03-24 05:31PRP: Nginx-UI CVE-2026-27944 Unauthenticated Backup Download with Encryption Key Disclosure
- Issue#808wannabemrrobot2026-03-24 05:31PRP: Nginx-UI CVE-2026-27944 Unauthenticated Backup Download with Encryption Key Disclosure
- Issue comment#807google-cla[bot]2026-03-22 04:47Security Fix: Prevent Automatic Insecure Deserialization in RagFlow P…
Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 124 stars here means stars gained during the window, not the repo's star count.