Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Search for vulnerabilities

VulnerableCode aggregates software vulnerabilities from multiple public advisory sources and presents their details along with their affected packages and fixed-by packages identified by Package URLs (PURLs).

What's new in this Release: Check out latest updates here!

ATTENTION: We will be deprecating V1 and V2 API by 30th June 2026. V3 endpoint is live now. Please migrate to V3 API before the deprecation date. For more details, please refer to this blog.