vulnerability-db
vulnerability-db copied to clipboard
AppThreat
Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.0, purl, and vers.
Related to https://github.com/owasp-dep-scan/dep-scan/issues/320 [bom.json](https://github.com/user-attachments/files/16117269/bom.json) We're currently reporting CVEs for version-less generic packages. Perhaps we can expose some options to configure the lookup. ``` python vdb/cli.py --bom /mnt/work/sandbox/opencv/bom.json ___ /\ ._...
To prevent errors like this f-string bug, we need some cli tests with a range of python versions. https://github.com/AppThreat/vulnerability-db/pull/149
Now that ghsa supports cvss 4, we need to find a way to retain the values.