VulnerableCode Package Search

Staging Environment: Content and features may be unstable or change without notice.

VulnerableCode.io

Packages Vulnerabilities Documentation

Pipeline Dashboard API

About

VulnerableCode is a free and open database of software package vulnerabilities.

Live chat at https://gitter.im/aboutcode-org/vulnerablecode
Source code and support at https://github.com/nexB/vulnerablecode
Docs at https://vulnerablecode.readthedocs.org/
Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/

v37.0.0

Search for packages

Search for vulnerable packages by Package URL (aka. purl) such as pkg:maven/org.apache.logging.log4j/log4j@2.0 or purl prefix fragment such as pkg:alpine or by package name.

VulnerableCode is free software by nexB Inc. and others | Source code license: Apache-2.0 | Data license: CC-BY-SA-4.0 | Terms of Service