Home/Packages
Package Vulnerabilities

Package vulnerability lookup

Search OSV / GHSA advisories by package name across language ecosystems
The reverse of a CVE page: start from a dependency (npm, PyPI, Maven, Go, crates.io, RubyGems, NuGet, Packagist…) and see what’s known vulnerable about it, with the version that fixes each issue and the CVE alias where one exists.
▤

Ecosystems

12
Distinct vulnerable packages indexed per ecosystem. Pick one to scope a search, or just search by name above.
npm 215,804PyPI 12,728Maven 3,078crates.io 1,481Go 1,439RubyGems 1,391NuGet 1,370Packagist 782GitHub Actions 35Hex 31SwiftURL 25Pub 7
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin