Vulnerability Python Packages

nvdlib

A simple wrapper for the National Vulnerability CVE/CPE API

aig-skill-scan

A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

vulncheck-sdk

A generated Python SDK from VulnCheck's OpenAPI specification

oasislmf

Loss modelling framework.

secator

secator - the pentester's swiss knife

yardstick

Compare vulnerability scanners results (to make them better!)

patchradar

Monitor CVEs for your installed software and get alerted in realtime

gvm-tools

Remote control your Greenbone Community Edition or Greenbone Enterprise Appliance

vunnel

Tool for collecting vulnerability data from various sources (used to build the grype database)

pyscan-rs

python dependency vulnerability scanner, written in Rust.

malwoverview

Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

faradaysec

Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.

search-vulns

A modular tool to search for known vulnerabilities, exploits and more across various data sources

aboutcode-hashid

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

fedivuln

A client to gather vulnerability-related information from the Fediverse.

epss-api

EPSS(Exploit Prediction Scoring System) API client

arango-cve-processor

A small python script that enriches Vulnerability STIX Objects with other intel

djura

Performance-based earthquake engineering in Python: record selection, hazard consistency, vulnerability, and loss modelling

vulnerablecode

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

puncia

Panthera(P.)uncia - Official CLI utility for Subdomain Center & Exploit Observer.

fpvs

Fast Python Vulnerability Scanner

vulntrain

A tool to generate datasets and models based on vulnerabilities descriptions from @Vulnerability-Lookup.

attestd

Official Python SDK for the Attestd supply chain and CVE risk API. One call returns risk_state, supply_chain.compromised, and typosquat signals.