aboutcode-org/vulnerablecode

View on GitHub

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

Stars: 702
Forks: 328
Open beginner issues: 0
Indexed issues: 707
Avg merge: 3d 8h
Merged PRs (30d): 3

Dominant language: Python
License: Apache-2.0
Last GitHub push: Sep 9, 2026
Latest indexed: Sep 13, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: good first issue

Open All

707 issues indexed so far

Ensure all pipelines/importers/improvers have proper docstring Open

aboutcode-org/vulnerablecode#1889 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add https://advisories.ncsc.nl/csaf/v2/2025/ CSAF Open

aboutcode-org/vulnerablecode#1890 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add data and consider standard from security-patches-dataset and also process this convention Open

aboutcode-org/vulnerablecode#1891 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Conflicting advisories Open

aboutcode-org/vulnerablecode#1892 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Collect neo4j advisories Open

aboutcode-org/vulnerablecode#1893 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Inconsistent package and version ranges Open

aboutcode-org/vulnerablecode#1894 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Collect data from https://www.libreoffice.org/about-us/security/advisories/ Open

aboutcode-org/vulnerablecode#1898 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Ensure we track vulnerabilities from Collabora online Open

Data collection

aboutcode-org/vulnerablecode#1899 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add a new API endpoint to support package-first mode Open

aboutcode-org/vulnerablecode#1902 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Modify the GitLab importer to support package-first mode Open

aboutcode-org/vulnerablecode#1903 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Modify the GitHub importer to support package-first mode Open

aboutcode-org/vulnerablecode#1904 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Consider displaying version ranges in UI and in the API Open

aboutcode-org/vulnerablecode#1906 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Remove duplicated entry for fixed by Open

bug

aboutcode-org/vulnerablecode#1907 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Devise a way to merge advisories when displayed on UI Open

Priority: low

aboutcode-org/vulnerablecode#1908 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Modify the Rust importer to support package-first mode Open

aboutcode-org/vulnerablecode#1911 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Modify the Ruby importer to support package-first mode Open

aboutcode-org/vulnerablecode#1912 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Review pipelines/importers to make sure the right things are logged Open

aboutcode-org/vulnerablecode#1915 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Modify the nginx importer to support package-first mode Open

aboutcode-org/vulnerablecode#1916 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Modify the curl importer to support package-first mode Open

aboutcode-org/vulnerablecode#1918 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
GentooImporter failing with InvalidVersion error Open

bug

aboutcode-org/vulnerablecode#1921 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Modify the Apache Kafka importer to support package-first mode Open

aboutcode-org/vulnerablecode#1922 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Run PURL validation for GHSA advisories Open

aboutcode-org/vulnerablecode#1932 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Modify the Elixir Security importer to support package-first mode Open

aboutcode-org/vulnerablecode#1933 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Modify the NPM importer to support package-first mode Open

aboutcode-org/vulnerablecode#1936 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Collect KDE security advisories Open

aboutcode-org/vulnerablecode#1939 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Navigate graph of relationships to improve advisories Open

aboutcode-org/vulnerablecode#1940 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
3 different advisories for same GHSA from Github GraphQL API importer Open

aboutcode-org/vulnerablecode#1947 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Different Postgres advisory pages gives different information Open

aboutcode-org/vulnerablecode#1948 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
What shall be the Advisory ID and aliases for Mozilla Advisories ? Open

aboutcode-org/vulnerablecode#1949 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Modify the PyPA importer to support package-first mode Open

aboutcode-org/vulnerablecode#1953 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Import RedHat CSAF VEX https://access.redhat.com/security/data Open

aboutcode-org/vulnerablecode#1955 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Import RedHat SPDX SBOM https://security.access.redhat.com/data/sbom/beta/spdx/ Open

aboutcode-org/vulnerablecode#1956 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Import RedHat OSV data https://security.access.redhat.com/data/osv/all.json Open

aboutcode-org/vulnerablecode#1957 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
cravex2-reachability: Vulnerable code "reachability" determination Open

aboutcode-org/vulnerablecode#1964 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Invalid data from GitLab Open

aboutcode-org/vulnerablecode#1973 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
The EPSS tab shows old data Open

bug

aboutcode-org/vulnerablecode#1975 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Support patchstack feeds Open

aboutcode-org/vulnerablecode#1978 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add the Postgres live importer Open

aboutcode-org/vulnerablecode#1980 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add PySec live importer Open

aboutcode-org/vulnerablecode#1981 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Add VulnTotal local VCIO datasource with Live Evaluation option Open

aboutcode-org/vulnerablecode#1984 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Collect Julia advisories Open

aboutcode-org/vulnerablecode#1986 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 13, 2026
Design: Foreign Key Relationship for CVE Data Flow Open

aboutcode-org/vulnerablecode#1990 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Incomplete reference collection in Metasploit ( missing affected/fixed commits ) Open

aboutcode-org/vulnerablecode#1991 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Enable query by VERS and version range Open

aboutcode-org/vulnerablecode#1994 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Submit VCIO and SCIO to https://github.com/rustsec/advisory-db Open

aboutcode-org/vulnerablecode#1999 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Import data from Tuxcare Open

aboutcode-org/vulnerablecode#2004 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Show status of workers in pipeline dashboard Open

feature

aboutcode-org/vulnerablecode#2009 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Istio importer fails Open

bug

aboutcode-org/vulnerablecode#2016 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Collect OSV Malicious packages Open

aboutcode-org/vulnerablecode#2019 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 13, 2026
Create Reference document to explain Risk in detail Open

difficulty: intermediate documentation Priority: high

aboutcode-org/vulnerablecode#2020 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 13, 2026

aboutcode-org/vulnerablecode

Get new issues in your inbox