Provally CuratedVerified

Provally CVE/1-day Rules

Curated SAST rules generated from CVE and 1-day vulnerability analysis artifacts.

Fetch pack

greprules pack fetch greprules-cve-1day --engine opengrep

curl https://api.greprules.io/api/packs/greprules-cve-1day.tar.gz -o greprules-cve-1day.tar.gz

Owner: Provally
Total rules: 4313
Downloads: 2316
Last updated: 2026-09-02
Languages: BashCClojureC++C#dartElixirGenericGoHTMLJavaJS/TSjsonKotlinluaOCamlPHPPythonRubyRustScalaSwiftxmlYAML

Included rules

CVE-2026-84195: K8s Default Serviceaccount Token Readcve-2026-84195-k8s-default-serviceaccount-token-readCVE-2026-84190: Php Config Command Injectioncve-2026-84190-php-config-command-injectionCVE-2026-84187: Avideo Unauthorized Schedule Status Updatecve-2026-84187-avideo-unauthorized-schedule-status-updateCVE-2026-83743: Laravel Unauthorized Route Model Updatecve-2026-83743-laravel-unauthorized-route-model-updateCVE-2026-83595: Avideo Csrf Bypass Same Domain Checkcve-2026-83595-avideo-csrf-bypass-same-domain-checkCVE-2026-83497: Java Objectinputstream Missing Filtercve-2026-83497-java-objectinputstream-missing-filterCVE-2026-82927: Cmse Nonsecure Entry Unvalidated Pointercve-2026-82927-cmse-nonsecure-entry-unvalidated-pointerCVE-2026-82926: Tee Ta Session Invoke Null Derefcve-2026-82926-tee-ta-session-invoke-null-derefCVE-2026-82880: Images Svgparser Java Cwe 000 Cve 2026 82880cve-2026-82880-images-svgparser-java-cwe-000-cve-2026-82880CVE-2026-82878: Dataease Missing Object Authorizationcve-2026-82878-dataease-missing-object-authorizationCVE-2026-82871: Tooljet Db Missing Organization Validate Guardcve-2026-82871-tooljet-db-missing-organization-validate-guardCVE-2026-82867: Xss Innerhtml Option Template Interpolationcve-2026-82867-xss-innerhtml-option-template-interpolationCVE-2026-82866: Ssrf Unvalidated Http Prefix Fetchcve-2026-82866-ssrf-unvalidated-http-prefix-fetchCVE-2026-82864: Unbounded Stream Buffer Allocationcve-2026-82864-unbounded-stream-buffer-allocationCVE-2026-82862: Model Skill Md Cwe 000 Cve 2026 82862cve-2026-82862-model-skill-md-cwe-000-cve-2026-82862CVE-2026-82861: Pulumi Urn Substring Parent Checkcve-2026-82861-pulumi-urn-substring-parent-checkCVE-2026-82860: Pulumi Iam Policy Guardrail Missing Inline Typescve-2026-82860-pulumi-iam-policy-guardrail-missing-inline-typesCVE-2026-82858: Untrusted Plan Actions Fallbackcve-2026-82858-untrusted-plan-actions-fallbackCVE-2026-82856: Aws Iam Condition Operator Direct Indexingcve-2026-82856-aws-iam-condition-operator-direct-indexingCVE-2026-82855: Pulumi Policy Unanchored Urn Sibling Checkcve-2026-82855-pulumi-policy-unanchored-urn-sibling-checkCVE-2026-82854: Nodemailer Smtp Size Command Injectioncve-2026-82854-nodemailer-smtp-size-command-injectionCVE-2026-82746: Ash Update Many Missing Atomic Authorizationcve-2026-82746-ash-update-many-missing-atomic-authorizationCVE-2026-82743: Elixir Task Yield Zero Timeout Busy Spincve-2026-82743-elixir-task-yield-zero-timeout-busy-spinCVE-2026-82740: Ash Nested Array Missing Outer Constraintscve-2026-82740-ash-nested-array-missing-outer-constraints

24 of 4,313 loaded