This project aims to provide a central repository for many useful Tsunami Security Scanner plugins.
To learn more about Tsunami, visit our documentation.
Read how to contribute to Tsunami.
- Pytorch Serve Expose API Detector
- Ray CVE-2023-48022 Detector
- Ray CVE-2023-6019 Detector
- H2O CVE-2023-6018 Detector
- MLflow CVE-2023-6977 & CVE-2023-1177 & CVE-2023-2780 Detector
- MLflow CVE-2023-6014 Detector
- MLflow Weak Credential Detector
- Argo Workflow Exposed API Detector
- MinIO Sensitive Info Disclosure Detector
- Gradio CVE-2023-51449 Detector
- Apache Spark CVE-2022-33891 Detector
- Apache Spark Expose UI Detector
- Apache Spark Exposed API Detector
- Apache Airflow CVE-2020-17526 Auth Bypass RCE
- Triton Inference Server RCE
- Intel Neural Compressor CVE-2024-22476 RCE Detector
- ZenML Weak Credential Detector
- Argo CD Exposed UI
- Airflow Exposed UI
Every file containing source code must include copyright and license information. This includes any JS/CSS files that you might be serving out to browsers. (This is to help well-intentioned people avoid accidental copying that doesn't comply with the license.)
Apache header:
Copyright 2020 Google LLC
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
https://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
Tsunami Security Scanner and its plugins are not officially supported Google products.