Vulnerabilities Python Packages

univers

Parse and compare package versions and ranges. From debian, npm, pypi, ruby and more. Process all the version range specs and expressions. This project is sponsored by an NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and others generous sponsors!

lib4vex

Library to ingest and generate VEX documents

csaf-tool

CSAF generator and validator

cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

jake

Check your Python environments for vulnerable Open Source packages with OSS Index or Sonatype Nexus Lifecycle.

ossindex-lib

Python library for querying OSS Index

wordfence

Wordfence malware and vulnerability scanner command line utility.

skjold

Security audit Python project dependencies against security advisory databases.

kube-hunter

Hunt for security weaknesses in Kubernetes clusters

aboutcode-pipeline

ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and others generous sponsors!

ochrona

A command line tool for detecting vulnerabilities in Python dependencies and doing safe package installs

clusterfuzz

Scalable fuzzing infrastructure.

pyscan-rs

python dependency vulnerability scanner, written in Rust.

scancodeio

ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and others generous sponsors!

aboutcode-api-auth

Automate open source license compliance and ensure software supply chain integrity

fpvs

Fast Python Vulnerability Scanner

certcc-ssvc

Stakeholder-Specific Vulnerability Categorization

pyraider

Using PyRaider You can scan installed dependencies known security vulnerabilities. It uses publicly known exploits, vulnerabilities database.

metlo

Metlo is an open-source API security platform.

opencve

Vulnerability Intelligence Platform

bogrod

Manage SBOM and VEX like source code

pipguard

Block the attack before it lands.

cvequery

A powerful command-line tool to search and analyze CVE (Common Vulnerabilities and Exposures) data using Shodan's public CVE database API.

dejacode

Automate open source license compliance and ensure software supply chain integrity