OSV

OSV provides an open vulnerability database and API for querying vulnerabilities by package, version, commit, or vulnerability identifier.

5 actionsNo account needed

Connect OSV

What your bot can do in OSV

Looks up

  • Determine VersionExperimentally rank probable versions of an OSS-Fuzz C/C++ library from relative source-file paths and base64-encoded MD5 hashes.
  • Get Import FindingsExperimentally list OSV records from one exact import source that failed import-time quality checks.
  • Get VulnerabilityReturn the complete OSV record for one case-sensitive vulnerability ID, including affected versions, ranges, severity, references, and…
  • Query VulnerabilitiesFind full OSV vulnerability records affecting one package, package version, package URL, or commit.
  • Query Vulnerabilities BatchCheck up to 1,000 packages, package versions, package URLs, or commits in one request and return position-matched compact vulnerability IDs.

More developer apps