Vulnerabilities Python Packages

lib4vex

Library to ingest and generate VEX documents

csaf-tool

CSAF generator and validator

cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

univers

Parse and compare package versions and ranges. From debian, npm, pypi, ruby and more. Process all the version range specs and expressions. This project is sponsored by an NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and others generous sponsors!

jake

Check your Python environments for vulnerable Open Source packages with OSS Index or Sonatype Nexus Lifecycle.

ochrona

A command line tool for detecting vulnerabilities in Python dependencies and doing safe package installs

ossindex-lib

Python library for querying OSS Index

kube-hunter

Hunt for security weaknesses in Kubernetes clusters

aboutcode-pipeline

ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and others generous sponsors!

wordfence

Wordfence malware and vulnerability scanner command line utility.

skjold

Security audit Python project dependencies against security advisory databases.

clusterfuzz

Scalable fuzzing infrastructure.

pyscan-rs

python dependency vulnerability scanner, written in Rust.

aboutcode-api-auth

Automate open source license compliance and ensure software supply chain integrity

fpvs

Fast Python Vulnerability Scanner

scancodeio

ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and others generous sponsors!

certcc-ssvc

Stakeholder-Specific Vulnerability Categorization

opencve

Vulnerability Intelligence Platform

metlo

The Python Agent for Metlo

cvequery

CVE research CLI — query Shodan's CVE database with advanced filtering and export.

pyraider

Using PyRaider You can scan installed dependencies known security vulnerabilities. It uses publicly known exploits, vulnerabilities database.

vulnerabilities

Python framework to manipulate vulnerabilities.

bogrod

Manage SBOM and VEX like source code

pipguard

Block the attack before it lands.