Vulnerabilities Python Packages

lib4vex

Library to ingest and generate VEX documents

csaf-tool

CSAF generator and validator

univers

Parse and compare package versions and ranges. From debian, npm, pypi, ruby and more. Process all the version range specs and expressions. This project is sponsored by an NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and others generous sponsors!

cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

jake

Check your Python environments for vulnerable Open Source packages with OSS Index or Sonatype Nexus Lifecycle.

ochrona

A command line tool for detecting vulnerabilities in Python dependencies and doing safe package installs

ossindex-lib

Python library for querying OSS Index

kube-hunter

Hunt for security weaknesses in Kubernetes clusters

pyscan-rs

python dependency vulnerability scanner, written in Rust.

aboutcode-pipeline

ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and others generous sponsors!

skjold

Security audit Python project dependencies against security advisory databases.

clusterfuzz

Scalable fuzzing infrastructure.

wordfence

Wordfence malware and vulnerability scanner command line utility.

scancodeio

ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and others generous sponsors!

fpvs

Fast Python Vulnerability Scanner

aboutcode-api-auth

Automate open source license compliance and ensure software supply chain integrity

opencve

Vulnerability Intelligence Platform

metlo

Metlo is an open-source API security platform.

pyraider

Using PyRaider You can scan installed dependencies known security vulnerabilities. It uses publicly known exploits, vulnerabilities database.

cvequery

Query CVE details using Shodan's public CVE database API.

pipguard

Scan Python packages for supply chain attacks before installing them

bogrod

Manage SBOM, VEX records and release notes in a single tool

vulnix

Vulnerability (CVE) scanner for Nix/NixOS [maintainer=@henrirosten]

dorkeye

Advanced Google Dorking with Google Dorks Generator, SQLi analysis, WAF detection and extract metadata.