Developer-first SAST tool for finding security & privacy vulns in code.
by Bearer · bearer.com · source ↗
ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 1.6.1 of passport-bridge, cross-host or cross-locale session migration places a single-use beare…
A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, RestHandler.parseRequestBody in `transport/rest/src/main/java/org/a2aproject/sdk/transport/rest/handler/…
Bearer is a developer‑first static application security testing tool that identifies security and privacy vulnerabilities, including PII and PHI, directly in code. It provides actionable context within CI/CD pipelines via integrations with GitHub, GitLab, and BitBucket, enabling earlier risk detection and remediation. The open‑source Bearer CLI is free to use and can be adopted by development teams seeking to embed security and privacy by design into their software delivery process.
Free & open SAST Actionable context right in your CI/CD Detect and classify PII, PHI, and other sensitive data types Integrates seamlessly with your platforms & workflows Trusted by security teams, loved by developers Unique approach of providing privacy insights
Free tier available
No datasheets, whitepapers, case studies, videos, or demos linked yet.
In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec and log routes do not verify the bearer JWT. The payload is decoded and its groups or roles are used a…
