cve.bz

Check your stack

Upload a lockfile or an SBOM and see which of its packages the OSV advisories in this database affect.

Accepted: package-lock.json, poetry.lock, Cargo.lock, go.sum, Gemfile.lock, or a CycloneDX or SPDX JSON SBOM (.cdx.json, .spdx.json); at most 2 MiB and 20000 packages.

Nothing is stored; the file is matched in memory and discarded. The result covers the advisories this database holds, not every advisory published.

Run this continuously on your repositories, with verified closure