OSV.dev

Vulnerability Intelligence

Automated checks passed
Checked 8/27/2026

OSV is a distributed vulnerability database focused on open-source ecosystems. It aggregates sources that use the OpenSSF OSV format and supports lookup by vulnerability ID, package version, and commit hash, making it especially useful for dependency and software-supply-chain research.

Open Tool GitHub Docs Report incorrect information

Features

✓Package-version mapping
✓Commit-hash lookup
✓Multi-ecosystem coverage
✓Public API

Limitations

✗Focused on open-source ecosystems
✗Coverage depends on upstream advisory sources

Related Tools

🔧

NIST National Vulnerability Database

Vulnerability Intelligence

Search CVE records enriched by NIST with CVSS, CWE, CPE applicability, references, and vulnerability status.

✓ FreeWEB●Beginner

Open Tool Details →

🔧

CISA Known Exploited Vulnerabilities

Vulnerability Intelligence

Check whether a CVE is in CISA’s evidence-based catalogue of vulnerabilities exploited in the wild.

✓ FreeWEB●Beginner

Open Tool Details →

🔧

CVE Program

Vulnerability Intelligence

Search the canonical CVE List maintained by the CVE Program and its CVE Numbering Authorities.

✓ FreeWEB●Beginner

Open Tool Details →

Tool Details

Interface WEB

Pricing Free

Skill Level Intermediate

Open Source Yes ✓

Maintenance Reported active

Reported Update 2026-08

Platforms

🌐 web

Accepts Input Types

cvesha1

OSV.dev

Features

Limitations

Related Tools

NIST National Vulnerability Database

CISA Known Exploited Vulnerabilities

CVE Program

Tool Details

Platforms

Accepts Input Types

Tags