RedHatProductSecurity / cvelib
A Python library and command line interface for CVE Services.
☆58Updated 3 weeks ago
Related projects ⓘ
Alternatives and complementary repositories for cvelib
- VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordin…☆59Updated 3 weeks ago
- Vulnogram is a tool for creating and editing CVE information in CVE JSON format☆161Updated 3 weeks ago
- A community collection of security reviews of open source software components.☆92Updated 8 months ago
- Collect, curate, and communicate relevant security metrics for open source projects.☆63Updated 8 months ago
- Open Source Vulnerability schema.☆185Updated this week
- The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by h…☆180Updated last week
- This repo contains the source for the CVE Services API.☆153Updated last week
- Global Security Database Tools☆41Updated 11 months ago
- OASIS TC Open Repository: A GitHub repository for management of non-normative information about the work of the CSAF Technical Committee,…☆19Updated this week
- The new CVE website☆69Updated this week
- ☆46Updated this week
- Improve Software Bill of Materials (SBOM) tooling and training to encourage adoption☆72Updated last month
- Examples and proof-of-concept for Software Bill of Materials (SBOM) code & data☆57Updated 7 months ago
- Stakeholder-Specific Vulnerability Categorization☆129Updated this week
- A place to systematically store software bill of materials (SBOM) documents.☆44Updated last year
- CVSS2/3/4 library with interactive calculator for Python 2 and Python 3☆87Updated 2 weeks ago
- OASIS CSAF TC: Supporting version control for Work Product artifacts developed by members of TC, including prose specifications and secon…☆150Updated this week
- ☆80Updated this week
- Secvisogram is a web tool for creating and editing security advisories in the CSAF 2.0 format☆33Updated last week
- CVE Automation Working Group☆160Updated this week
- Low-effort reachability analysis for third-party code vulnerabilities.☆19Updated last year
- Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.0, purl, and vers…☆98Updated this week
- Exploit Prediction Scoring System (EPSS)☆23Updated 2 years ago
- The model for the information captured in SPDX version 3 standard.☆71Updated this week
- Report missing advisories and corrections on OSS Index☆17Updated last year
- Documentation of Semgrep: a fast, open-source, static analysis tool.☆37Updated this week
- CVSS v4.0 calculator☆25Updated 3 months ago
- Python implementation of the package url spec. This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase…☆71Updated 3 weeks ago
- Software Component Verification Standard (SCVS)☆135Updated 7 months ago
- Tools to download or provide CSAF (Common Security Advisory Framework) documents.☆40Updated this week