ossf/cve-bin-tool
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions. observed · 2026-08-28
Health v2 · maintenance only
67/100
- Activity 99
- Release rhythm 8
- Longevity 100
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 2791
- days_rel: 715
- days_push: 7
- n_releases_24m: 1
Adoption not part of the score
1753 stars · 645 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
A Python CLI tool that scans binaries and systems for known CVEs in over 350 common open-source components like openssl, libpng, and expat. It can also check vulnerabilities for components listed in an SBOM or a component/version list.
Use cases
- scan a linux system for binaries with known cves
- check if my firmware bundles vulnerable openssl versions
- find cves from an sbom file
- audit third-party libraries in a docker image for vulnerabilities
- generate a vulnerability report for a list of components and versions
- integrate cve scanning into ci pipeline
When to choose
- you need to detect known CVEs in compiled binaries or extracted filesystems without source access
- you want an SBOM-based vulnerability check or triage of vulnerable components
- you want a free, scriptable, offline-capable scanner for CI/CD or devsecops workflows
When to avoid
- you need dynamic or runtime exploit detection rather than known-CVE matching
- you need full SCA for interpreted-language dependency trees (use a package-level SCA tool)
- you require commercial support or guaranteed SLAs
Facets
cli-tool · maturity active
security vulnerability-scanning cli developer-tools security developer-tools windows python cli cross-platform cve sbom binary-analysis devsecops vulnerability-database supply-chain-security devops linux macos
1 source
- readme: https://github.com/ossf/cve-bin-tool · fetched 2026-08-28 · a0842ea73f3a
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| ossf/cve-bin-tool | main | 67 |
For agents
markdown · JSON · MCP: product_card(name="ossf/cve-bin-tool")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem