Publish VMWare Photon Advisories in OSV format, automatically synced. Unofficial - not affiliated with VMWare

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

Debian ELTS Security Advisories in OSV Format. Unofficial - not affiliated with Freexian.

Multi-ecosystem SBOM scanner with interactive HTML report, dependency tree, and CVE scanning. Supports npm, PyPI, Dart, Maven/Gradle, Rust/Cargo.

🛡️ 오픈소스 취약점 분석 (NVD/OSV/GitHub Advisory)

A CLI tool to scan dependencies for vulnerabilities and flags potentially compromised dependencies (supply chain security).

CVE reachability analysis for Python. Stop fixing vulnerabilities that don't affect you. Static + dynamic analysis to cut SCA noise from Snyk, Dependabot, Trivy, and others.

VulnScanner is a local-first, open-source vulnerability intelligence toolkit that syncs NVD, KEV, and EPSS data, scans npm and Python lockfiles, and enforces CI policy gates with offline cache mode, baseline diffing, and JSON/CSV/Markdown/SARIF reports.

Find and merge CVEs for any package from OSV, GHSA, and NVD.

Parse and compare package versions and ranges. From debian, npm, pypi, ruby and more. Process all the version range specs and expressions. This project is sponsored by an NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and others generous sponsors!

Skill to detect Vulnerability in your project

Lightweight python-based OSV vulnerability checker

Simple Vulnerability Scanner: scan CycloneDX/SPDX SBOMs against OSV with JSON/HTML/SARIF reports

Multi-purpose security scanner for source code, container images. Supports OSV.dev + EPSS scoring.

🛡 Scan GitHub repositories for dependency vulnerabilities using OSV database. Supports npm, PyPI, RubyGems, Go, and PHP.

FastHTML app to audit GitHub users/orgs for vulnerable dependencies using OSV data.

A Python tool that fetches, filters, and displays recent CVEs by vendor from OSV.

Elevating Signature Verification through Detail-Semantic Integration