aboutcode-org/vulnerablecode

View on GitHub

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

Stars: 702
Forks: 328
Open beginner issues: 0
Indexed issues: 707
Avg merge: 3d 8h
Merged PRs (30d): 3

Dominant language: Python
License: Apache-2.0
Last GitHub push: Sep 9, 2026
Latest indexed: Sep 13, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: good first issue

Open All

707 open issues indexed

OSV importer not present Open

aboutcode-org/vulnerablecode#1700 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Improve getting started Open

aboutcode-org/vulnerablecode#1702 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
severity vectors bug: Do not list ALL duplicated severity vectors in the UI. Also display the score Open

bug ui

aboutcode-org/vulnerablecode#1729 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Improve display of the Severity table of the Essentials screen Open

data-quality design-needed Priority: high ui

aboutcode-org/vulnerablecode#1732 · 7 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
For exploits, also include the upstream URL to exploitdb and metasploit Open

aboutcode-org/vulnerablecode#1741 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Improve Severity System data - For Canonical/Ubuntu we report Ubuntu Priority as Severity Open

design-needed

aboutcode-org/vulnerablecode#1742 · 1 comment · 0 reactions · 2 assignees · Indexed Sep 13, 2026
Fix incorrect URLs when possible Open

aboutcode-org/vulnerablecode#1748 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Collect data from https://jpn.nec.com/security-info/secinfo/nv24-001_en.html Open

aboutcode-org/vulnerablecode#1749 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Collect from https://consumer.huawei.com/en/support/bulletin/2024/9/ Open

aboutcode-org/vulnerablecode#1750 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add Yubico advisories Open

aboutcode-org/vulnerablecode#1751 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Do not leak codefix IDs in API Open

aboutcode-org/vulnerablecode#1752 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
In UI and API, sort packages and vulnerabilities from newest to oldest. Open

codeday difficulty: intermediate ui

aboutcode-org/vulnerablecode#1754 · 10 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add option to filter only vulnerable or non vulnerable packages Open

aboutcode-org/vulnerablecode#1759 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Enable Hot Reloading in Docker Container Open

aboutcode-org/vulnerablecode#1771 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Pipeline to detect Reserved/Non-Existent CVEs Open

aboutcode-org/vulnerablecode#1778 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Pin requirements Open

aboutcode-org/vulnerablecode#1779 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Python version 3.12 and 3.13 do not support "ImpImporter" Open

aboutcode-org/vulnerablecode#1782 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Make `date_imported` in Advisory mandatory Open

aboutcode-org/vulnerablecode#1788 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Advisory versioning to avoid duplication and track changes Open

aboutcode-org/vulnerablecode#1793 · 2 comments · 2 reactions · 0 assignees · Indexed Sep 13, 2026
Get rid of the custom `paginated()` and use the built-in `iterator()` Open

Priority: high

aboutcode-org/vulnerablecode#1798 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Incorrect PYSEC-0000-000 alias Open

aboutcode-org/vulnerablecode#1810 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Incorrect vulnerability data for https://public.vulnerablecode.io/vulnerabilities/VCID-brza-eagp-aaah/packages Open

aboutcode-org/vulnerablecode#1811 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Duplicated references Open

aboutcode-org/vulnerablecode#1814 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Import facebook advisories Open

aboutcode-org/vulnerablecode#1826 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add bottlerocket advisories Open

aboutcode-org/vulnerablecode#1828 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Invalid data in VCIO Open

bug

aboutcode-org/vulnerablecode#1830 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Performance Improvement: Optimize Scanning for Large Codebases Open

aboutcode-org/vulnerablecode#1834 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Schneider Electric advisories Open

Data collection

aboutcode-org/vulnerablecode#1836 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
ICSA advisories Open

aboutcode-org/vulnerablecode#1837 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Yokagawa security advisories Open

aboutcode-org/vulnerablecode#1838 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
ZyXEL security advisories Open

Data collection

aboutcode-org/vulnerablecode#1839 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Design pipelines to run asynchronously Open

aboutcode-org/vulnerablecode#1840 · 0 comments · 0 reactions · 3 assignees · Indexed Sep 13, 2026
Incorrect package reference data for CVE-2025-22223 Open

aboutcode-org/vulnerablecode#1841 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Incorrect package reference data for CVE-2025-22228 Open

aboutcode-org/vulnerablecode#1842 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Collect Spring vulnerabilities upstream directly Open

aboutcode-org/vulnerablecode#1844 · 0 comments · 2 reactions · 0 assignees · Indexed Sep 13, 2026
Address multiple errors in import log Open

aboutcode-org/vulnerablecode#1846 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Adopt altcha Open

aboutcode-org/vulnerablecode#1848 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Error in running github_osv importer Open

bug Priority: high

aboutcode-org/vulnerablecode#1851 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Address the issue of Advisories that does not have aliases Open

aboutcode-org/vulnerablecode#1852 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Review all importers and improvers are working fine Open

aboutcode-org/vulnerablecode#1855 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Fix memory issues in Postgresql Open

aboutcode-org/vulnerablecode#1858 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add support for trixie and bookworm in Debian importer Open

aboutcode-org/vulnerablecode#1860 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Change starting year of NVD importer advisories Open

aboutcode-org/vulnerablecode#1862 · 1 comment · 0 reactions · 4 assignees · Indexed Sep 13, 2026
Store raw advisories in database Open

aboutcode-org/vulnerablecode#1865 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Address version issues in importers Open

bug

aboutcode-org/vulnerablecode#1867 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Incorrect PURL found while running export management command Open

bug

aboutcode-org/vulnerablecode#1869 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Create cron job to export https://github.com/aboutcode-data/vulnerablecode-data daily Open

aboutcode-org/vulnerablecode#1870 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Collect EUVD data Open

aboutcode-org/vulnerablecode#1873 · 10 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Drop GSD Open

aboutcode-org/vulnerablecode#1874 · 3 comments · 2 reactions · 0 assignees · Indexed Sep 13, 2026
Ingest MAL advisories Open

aboutcode-org/vulnerablecode#1876 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026

aboutcode-org/vulnerablecode

Get new issues in your inbox