Ross ROSS = Recommend OSS · open-source software intelligence for agents

cve-search/cve-search

cve-search - a tool to perform local searches for known vulnerabilities observed · 2026-08-28

github.com/cve-search/cve-search · homepage · Python · AGPL-3.0 (copyleft) observed · 2026-08-28

Health v2 · maintenance only

84/100

  • Activity 95
  • Release rhythm 60
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: 237.0
  • age_days: 5232
  • days_rel: 59
  • days_push: 33
  • n_releases_24m: 3

Full methodology

Adoption not part of the score

2642 stars · 621 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

cve-search is a tool-set that imports CVE and CPE data into a local MongoDB to enable fast, private searching of known software vulnerabilities. It includes a web interface, CLI query tools, and a web API, avoiding direct public lookups to NVD.

Use cases

  • search for known vulnerabilities in a product locally
  • query CVEs by vendor and product without hitting public NVD
  • run a private CVE database with a web API
  • check if a software version is affected by CVEs
  • import and index NVD vulnerability data into MongoDB
  • look up CPE names and vulnerability details offline

When to choose

  • you need fast, private CVE lookups without leaking sensitive queries to public databases
  • you want a self-hosted vulnerability database with API and web UI
  • you process or correlate CVE data programmatically at scale

When to avoid

  • you only need occasional CVE lookups and can use a public API directly
  • you don't want to operate MongoDB and an import pipeline
  • you need a full vulnerability management or scanning platform rather than a lookup tool

Facets

application · maturity active

search-engine database security vulnerability-scanning api-framework cli security databases developer-tools self-hosted python self-hosted cli cve cpe mongodb vulnerability-database nvd web-api threat-intelligence linux docker web-server

3 sources

Member repositories

RepositoryRoleHealth v2
cve-search/cve-searchmain84

For agents

markdown · JSON · MCP: product_card(name="cve-search/cve-search")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem