VulnerableCode Home

About

VulnerableCode is a free and open database of software package vulnerabilities.

Live chat at https://gitter.im/aboutcode-org/vulnerablecode
Source code and support at https://github.com/nexB/vulnerablecode
Docs at https://vulnerablecode.readthedocs.org/
Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/

v32.0.0rc4

Search for packages

Search for vulnerable packages by Package URL (aka. purl) such as pkg:maven/org.apache.logging.log4j/log4j@2.0 or purl prefix fragment such as pkg:alpine or by package name.

Search for vulnerabilities

Search for package vulnerabilities by vulnerability id such as "VCID-12453" or by vulnerability alias such as "CVE-2009-3898" or "GHSA-2qrg-x229-3v8q".

VulnerableCode is free software by nexB Inc. and others | Source code license: Apache-2.0 | Data license: CC-BY-SA-4.0 | Terms of Service