Vulnerability Detection Python Packages

safety

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

flake8-bandit

Automated security testing using bandit and flake8.

vulners

Official Python SDK for the Vulners vulnerability-intelligence API — search CVEs, exploits and advisories (CVSS/EPSS/KEV), audit software, Linux/Windows hosts and SBOMs, and stream the whole graph. Typed sync + async clients, 100% v3-compatible, with a built-in MCP server for AI agents.

python-gvm

Greenbone Vulnerability Management Python Library

appthreat-vulnerability-db

Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.2, purl, and vers.

dependency-check

:closed_lock_with_key: Shim to easily install OWASP dependency-check-cli into Python projects

skjold

Security audit Python project dependencies against security advisory databases.

agent-audit

Static security scanner for LLM agents — prompt injection, MCP config auditing, taint analysis. 51 rules mapped to OWASP Agentic Top 10 (2026). Works with LangChain, CrewAI, AutoGen.

phi-complexity

Audit de code par les invariants du nombre d'or (phi).

aboutcode-hashid

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

vulnerablecode

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

fpvs

Fast Python Vulnerability Scanner

rcekit

Test a URL or captured HTTP request for RCE—and know what the evidence actually proves. RCEKit checks command injection, SSTI and blind paths, separates confirmed execution from uncertain signals and untested runs, and generates targeted payloads for Burp, ffuf and Nuclei. One Python file; no third-party dependencies.

immunipy

A Python SCA tool that acts as a watchdog, keeping an eye out for security vulnerabilities and reporting them promptly, written in Rust.

vulnparse-pin

A Vulnerability Intelligence and Decision Support Engine — Making Vulnerability Triage Faster and Remediation Decisions Explainable

miesc

Multi-layer Intelligent Evaluation for Smart Contracts — 50 security tools across 35 analysis modules, 9 defense layers, one command. Pre-audit triage for Ethereum (EVM); multi-chain on the roadmap.

pyraider

Using PyRaider You can scan installed dependencies known security vulnerabilities. It uses publicly known exploits, vulnerabilities database.

metlo

Metlo is an open-source API security platform.

jaegis-raverse-mcp-server

RAVERSE: AI Multi-Agent Binary Patching System with MCP Server (35 tools, npm/pip/docker)

reasonhound

AI-assisted security scanner that reasons like a senior researcher: it reads your web/API code, forms and tests vulnerability hypotheses, and writes a Markdown report. Bring your own model (Claude/OpenAI/Gemini/Ollama). Cross-platform, terminal-only, no deploy.

code-review-agent-mcp

AI code review agent MCP server. Reviews code like a kernel maintainer: blunt, technical, no sugarcoating. Detects bugs + OWASP Top 10 security vulnerabilities. 4 harshness levels. Anti-RLHF.

appthreat-vulndb

Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.2, purl, and vers.

open-source-insights-api

Library to consume project Open Source Insights Project from Google

kitsec

Pentesting, made easy.