Vulnerabilities GitHub

Refreshed 2026-10-16 12:52 Paris · 2026-10-16T10:52:22Z · GET-only snapshot · GitHub mirrors 126 (MSTR included as its own team, KPIF included) · 127 campaign MRs
Source = GitLab MR merged_at · Scanner = GitHub alert state after a re-scan (fixed_at) · Runtime = UNVERIFIED. Only lifecycle "active" repositories are actionable; archived, unknown or missing repositories are kept as inventory and never credited as fixed.
Actionable Critical
20
active repos, known counts · 6 repos with UNKNOWN endpoints · dependency 7 · code 13
Actionable High
269
dependency 54 · code 215
Actionable Medium
396
dependency 108 · code 288
Actionable Low
183
dependency 19 · code 164
Not actionable, known C/H/M
5/30/27
archived, unknown lifecycle, scheduled or deleted · unreadable endpoints stay UNKNOWN · not a fix
New alerts, 30 days
293
scanner · last 7 days 6
Alerts fixed, 30 days
335
scanner state fixed · dismissed 2
Campaign MRs merged, 30 days
105
source · merged all-time 114
Campaign MRs awaiting
8
source · 7 Draft, 1 open
Runtime closure
UNVERIFIED
no deployment is verified by this dashboard

30-day timeline three separate lanes, real event dates

Source: campaign MRs mergedpeak 44 / day2026-09-23: merged 552026-09-25: merged 662026-09-30: merged 332026-10-05: merged 44442026-10-06: merged 442026-10-10: merged 112026-10-12: merged 662026-10-13: merged 442026-10-14: merged 15152026-10-15: merged 16162026-10-16: merged 11Scanner: alerts fixedpeak 71 / day2026-09-16: medium 442026-09-23: critical 2, high 40, medium 22, low 72026-09-23: critical 2, high 40, medium 22, low 72026-09-23: critical 2, high 40, medium 22, low 72026-09-23: critical 2, high 40, medium 22, low 7712026-09-25: critical 1, high 1, medium 3, low 12026-09-25: critical 1, high 1, medium 3, low 12026-09-25: critical 1, high 1, medium 3, low 12026-09-25: critical 1, high 1, medium 3, low 162026-09-28: medium 112026-09-30: critical 4, high 20, medium 122026-09-30: critical 4, high 20, medium 122026-09-30: critical 4, high 20, medium 12362026-10-01: critical 1, high 13, medium 122026-10-01: critical 1, high 13, medium 122026-10-01: critical 1, high 13, medium 12262026-10-05: medium 222026-10-06: critical 2, high 17, medium 13, low 72026-10-06: critical 2, high 17, medium 13, low 72026-10-06: critical 2, high 17, medium 13, low 72026-10-06: critical 2, high 17, medium 13, low 7392026-10-10: critical 1, high 7, medium 92026-10-10: critical 1, high 7, medium 92026-10-10: critical 1, high 7, medium 9172026-10-12: critical 1, high 10, medium 132026-10-12: critical 1, high 10, medium 132026-10-12: critical 1, high 10, medium 13242026-10-13: high 12, medium 62026-10-13: high 12, medium 6182026-10-14: critical 3, high 16, medium 102026-10-14: critical 3, high 16, medium 102026-10-14: critical 3, high 16, medium 10292026-10-15: critical 3, high 34, medium 24, low 12026-10-15: critical 3, high 34, medium 24, low 12026-10-15: critical 3, high 34, medium 24, low 12026-10-15: critical 3, high 34, medium 24, low 162Scanner: new alertspeak 154 / day2026-09-16: high 6, medium 12026-09-16: high 6, medium 172026-09-18: critical 1, medium 12026-09-18: critical 1, medium 122026-09-22: medium 222026-09-23: high 112026-09-24: high 2, medium 12026-09-24: high 2, medium 132026-09-29: medium 882026-09-30: critical 6, high 85, medium 62, low 12026-09-30: critical 6, high 85, medium 62, low 12026-09-30: critical 6, high 85, medium 62, low 12026-09-30: critical 6, high 85, medium 62, low 11542026-10-01: high 9, medium 102026-10-01: high 9, medium 10192026-10-02: high 112026-10-05: critical 5, high 22, medium 35, low 52026-10-05: critical 5, high 22, medium 35, low 52026-10-05: critical 5, high 22, medium 35, low 52026-10-05: critical 5, high 22, medium 35, low 5672026-10-06: critical 5, medium 182026-10-06: critical 5, medium 18232026-10-14: high 442026-10-15: high 2209-1609-1909-2209-2509-2810-0110-0410-0710-1010-1310-16UTC days 2026-09-16 to 2026-10-16. Real event dates only (MR merged_at, alert created_at / fixed_at). No daily open baseline.

Actionable open alerts active repositories

CriticalDependency alerts open: 7Code scanning alerts open: 1320 = 7 dependency + 13 codeHighDependency alerts open: 54Code scanning alerts open: 215269 = 54 dependency + 215 codeMediumDependency alerts open: 108Code scanning alerts open: 288396 = 108 dependency + 288 codeLowDependency alerts open: 19Code scanning alerts open: 164183 = 19 dependency + 164 codeDependency alertsCode scanning alertsKnown counts only; 6 active repositories have an unreadable endpoint (UNKNOWN, not zero).

Open alerts per team active repositories, by scanner; click a team to filter the repositories table

DependabotDATAFLOWDATAFLOW Dependabot critical: 3 (first snapshot 6)DATAFLOW Dependabot high: 21 (first snapshot 55)DATAFLOW Dependabot medium: 35 (first snapshot 60)DATAFLOW Dependabot low: 15 (first snapshot 15)First snapshot total 13674 (was 136)DatavizDataviz Dependabot critical: 1 (first snapshot 2)Dataviz Dependabot high: 10 (first snapshot 14)Dataviz Dependabot medium: 26 (first snapshot 34)Dataviz Dependabot low: 2 (first snapshot 3)First snapshot total 5339 (was 53)KPIFKPIF Dependabot critical: 2 (first snapshot 2)KPIF Dependabot high: 4 (first snapshot 4)KPIF Dependabot medium: 26 (first snapshot 26)KPIF Dependabot low: 2 (first snapshot 2)First snapshot total 3434 (was 34)DevOpsDevOps Dependabot critical: 1 (first snapshot 1)DevOps Dependabot high: 16 (first snapshot 16)DevOps Dependabot medium: 16 (first snapshot 16)First snapshot total 3333 (was 33)MSTRMSTR Dependabot high: 3 (first snapshot 3)MSTR Dependabot medium: 5 (first snapshot 5)First snapshot total 88 (was 8)CodeQL (code scanning)DATAFLOWDATAFLOW CodeQL (code scanning) high: 18 (first snapshot 18)DATAFLOW CodeQL (code scanning) medium: 4 (first snapshot 4)First snapshot total 2222 (was 22)Dataviz0 (was 0)KPIFKPIF CodeQL (code scanning) medium: 3 (first snapshot 3)First snapshot total 33 (was 3)DevOpsDevOps CodeQL (code scanning) medium: 2 (first snapshot 2)First snapshot total 52 (was 5)MSTR0 (was 0)Scan deep (AI)DATAFLOWDATAFLOW Scan deep (AI) critical: 11 (first snapshot 11)DATAFLOW Scan deep (AI) high: 127 (first snapshot 127)DATAFLOW Scan deep (AI) medium: 171 (first snapshot 171)DATAFLOW Scan deep (AI) low: 116 (first snapshot 116)First snapshot total 425425 (was 425)DatavizDataviz Scan deep (AI) critical: 2 (first snapshot 2)Dataviz Scan deep (AI) high: 32 (first snapshot 32)Dataviz Scan deep (AI) medium: 60 (first snapshot 60)Dataviz Scan deep (AI) low: 19 (first snapshot 19)First snapshot total 113113 (was 113)KPIFKPIF Scan deep (AI) high: 11 (first snapshot 11)KPIF Scan deep (AI) medium: 16 (first snapshot 16)KPIF Scan deep (AI) low: 8 (first snapshot 8)First snapshot total 3535 (was 35)DevOpsDevOps Scan deep (AI) high: 21 (first snapshot 21)DevOps Scan deep (AI) medium: 21 (first snapshot 21)DevOps Scan deep (AI) low: 15 (first snapshot 15)First snapshot total 5757 (was 57)MSTRMSTR Scan deep (AI) high: 6 (first snapshot 6)MSTR Scan deep (AI) medium: 11 (first snapshot 11)MSTR Scan deep (AI) low: 6 (first snapshot 6)First snapshot total 2323 (was 23)Secret scanningDATAFLOW0open now (first snapshot: 0)Dataviz0open now (first snapshot: 0)KPIF0open now (first snapshot: 0)DevOps0open now (first snapshot: 0)MSTR0open now (first snapshot: 0)CriticalHighMediumLowmarker = first snapshot 2026-10-14 07:00ZActive repositories only, known counts. Team split from team_map.json. UNKNOWN endpoints are not zero: 6 active repositories have an unreadable code or dependency endpoint.
TeamDependabotCodeQL (code scanning)Scan deep (AI)Secret scanning
Datahub (all teams)
112 active repos · 6 with UNKNOWN endpoints · 2 first seen in this snapshot (before = now)
Critical 11 → 7
High 92 → 54
Medium 141 → 108
Low 20 → 19
Critical 0 → 0
High 21 → 18
Medium 9 → 9
Low 0 → 0
Critical 13 → 13
High 197 → 197
Medium 279 → 279
Low 164 → 164
0 → 0
DATAFLOW
70 active repos
Critical 6 → 3
High 55 → 21
Medium 60 → 35
Low 15 → 15
Critical 0 → 0
High 18 → 18
Medium 4 → 4
Low 0 → 0
Critical 11 → 11
High 127 → 127
Medium 171 → 171
Low 116 → 116
0 → 0
Dataviz
24 active repos · 4 with UNKNOWN endpoints
Critical 2 → 1
High 14 → 10
Medium 34 → 26
Low 3 → 2
Critical 0 → 0
High 0 → 0
Medium 0 → 0
Low 0 → 0
Critical 2 → 2
High 32 → 32
Medium 60 → 60
Low 19 → 19
0 → 0
KPIF
4 active repos · 1 with UNKNOWN endpoints
Critical 2 → 2
High 4 → 4
Medium 26 → 26
Low 2 → 2
Critical 0 → 0
High 0 → 0
Medium 3 → 3
Low 0 → 0
Critical 0 → 0
High 11 → 11
Medium 16 → 16
Low 8 → 8
0 → 0
DevOps
12 active repos · 1 with UNKNOWN endpoints
Critical 1 → 1
High 16 → 16
Medium 16 → 16
Low 0 → 0
Critical 0 → 0
High 3 → 0
Medium 2 → 2
Low 0 → 0
Critical 0 → 0
High 21 → 21
Medium 21 → 21
Low 15 → 15
0 → 0
MSTR
2 active repos · 2 first seen in this snapshot (before = now)
Critical 0 → 0
High 3 → 3
Medium 5 → 5
Low 0 → 0
Critical 0 → 0
High 0 → 0
Medium 0 → 0
Low 0 → 0
Critical 0 → 0
High 6 → 6
Medium 11 → 11
Low 6 → 6
0 → 0
Before = first snapshot kept by this dashboard (2026-10-14 07:00Z). Now = this refresh. Scan deep is the AI deep scan: it only changes after a scanner re-run, never from a merged MR alone. Secret scanning counts open alerts. Coverage gap: Datahub GitLab projects with no GitHub mirror have no data here (MSTR: 5; DevOps: 8; checked 2026-10-16), so they are unknown, not zero.

Open alerts share per team pie, choose a severity; click a slice to filter the repositories table

Open alerts per team: all openDATAFLOW: 521 open (60.0%)Dataviz: 152 open (17.5%)KPIF: 72 open (8.3%)DevOps: 92 open (10.6%)MSTR: 31 open (3.6%)868open alertsDATAFLOW521 · 60.0%Dataviz152 · 17.5%KPIF72 · 8.3%DevOps92 · 10.6%MSTR31 · 3.6%Active repositories, known counts. 4 severity levels selected.

Repository lifecycle click to filter

activeactive: 112 repositories112known open C 20 · H 269 · M 396 · L 183 | UNKNOWN on 6 of 112 reposarchivedarchived: 10 repositories10known open C 0 · H 0 · M 0 · L 0 | UNKNOWN on 10 of 10 reposdeletion-scheduleddeletion-scheduled: 0 repositories0known open C 0 · H 0 · M 0 · L 0deleted-confirmeddeleted-confirmed: 0 repositories0known open C 0 · H 0 · M 0 · L 0unknownunknown: 4 repositories4known open C 5 · H 30 · M 27 · L 2 | UNKNOWN on 2 of 4 reposOnly "active" is actionable. Archived or missing repositories are inventory, never a fix.

Repositories

Merge requests

New alerts, last 30 days newest 400