github/advisory-database resource

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

2441 stars · 726 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A free, open-source database of security vulnerabilities, including CVEs and GitHub-originated security advisories, stored as individual files in OSV format. It aggregates advisories from multiple ecosystem databases and accepts community contributions via pull requests.

Use cases

• check if a dependency has a known CVE
• build a vulnerability scanner for open source packages
• query security advisories in OSV format
• contribute corrections to a security advisory
• aggregate advisories from npm, Go, Python, Ruby, and Rust ecosystems
• audit a codebase for known vulnerabilities

When to choose

• you need machine-readable vulnerability data in OSV format
• you want a free, community-curated advisory database
• you are building dependency auditing or scanning tools
• you want to contribute to or improve advisory data

When to avoid

• you need a scanning tool rather than raw advisory data
• you require real-time proprietary threat intelligence
• you need advisories for closed-source or private software

Facets

dataset · maturity active

security vulnerability-scanning dependency-audit security developer-tools cross-platform osv cve security-advisories vulnerability-database open-source-security open-source

Member repositories

For agents

markdown · JSON · MCP: product_card(name="github/advisory-database")