opencve/opencve

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

2810 stars · 336 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

OpenCVE is a self-hostable Vulnerability Intelligence Platform that aggregates CVE data from sources like MITRE, NVD, CISA KEV, Vulnrichment, and RedHat. It lets security teams search, filter, tag, and organize vulnerabilities, subscribe to vendors and products, track remediation with assignments and statuses, and receive alerts via email, webhook, or Slack.

Use cases

• monitor new CVEs affecting my vendors and products
• filter vulnerabilities by CVSS, EPSS, KEV, or CWE
• receive alerts when a CVE is added or updated
• track remediation status of vulnerabilities across a team
• generate daily CVE reports for my projects
• self-host a CVE vulnerability management platform
• integrate CVE alerts into my own tools via webhook or REST API

When to choose

• you need a self-hosted platform to centralize and triage CVE monitoring for your organization
• you want vendor/product subscriptions with change tracking and multi-channel notifications
• you need team collaboration features like CVE assignment, statuses, tags, and projects

When to avoid

• you only need a one-off CVE lookup or raw NVD data feed without a full platform
• you want a lightweight CLI scanner rather than a web application with database infrastructure
• you require AI-powered CVE analysis and remediation insights, which are only in the hosted Cloud edition

Facets

application · maturity active

security monitoring alerting search-engine web-framework api-framework workflow-automation webhook security self-hosted developer-tools python self-hosted cve vulnerability-management vulnerability-intelligence nvd mitre cybersecurity infosec django triage cvss epss kev automation web-server docker linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="opencve/opencve")