PHP Not identified
The reviewed repository tree and source searches did not reveal a PHP application. Hosting is built around static GitHub Pages and Vite, not a PHP runtime.
Vulnerability intelligence / public sources
Security Radar.
Track published software security advisories and vulnerabilities known to be exploited. Public intelligence is not proof that your portfolio is affected: verify installed versions and reachable attack surfaces before taking action.
Fetched advisories—
Critical + high advisories—
Newly added exploited CVEs—
Selected feedGitHub
Vulnerability feed
GitHub global advisories or CISA KEV · each source has its own coverage and timestamps.
| Advisory / CVE | Severity | Package / product | Published / added | Reference |
|---|---|---|---|---|
| Loading… | ||||
GitHub feed lists the latest 100 reviewed advisories returned by its API, not all known vulnerabilities. The CISA view shows up to 100 most recently added KEV entries; its severity values are not supplied by CISA and therefore display as “Not rated.” Search and filters operate on the fetched subset. Public APIs may be rate-limited or unavailable. GitHub API documentation ↗ · CISA catalog ↗
MNXTR portfolio posture
Repository inspection notes, not a live vulnerability scanner or attestation of safety.
JavaScript dependencies Review required
Node/Vite, Three.js and Supabase packages are present. Run npm ci && npm audit and audit the separate Tanvora app before asserting package safety.
Contact & third parties Verify configuration
Contact submissions go to FormSubmit. Review spam protection and its data handling. Check Supabase row-level security and never ship privileged server keys in browser assets.