Importer Name Data Source Ecosystems Covered archlinux https://security.archlinux.org/json arch packages apache_kafka https://kafka.apache.org/community/cve-list apache-kafka nvd https://nvd.nist.gov/vuln/data-feeds#JSON_FEED none elixir_security https://github.com/dependabot/elixir-security-advisories hex packages npm https://github.com/nodejs/security-wg.git npm packages vulnrichment https://github.com/cisagov/vulnrichment.git all apache_httpd https://httpd.apache.org/security/json apache-httpd pypa https://github.com/pypa/advisory-database.git python packages gitlab https://gitlab.com/gitlab-org/advisories-community.git all pysec https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip python packages xen https://xenbits.xen.org/xsa/xsa.json xen packages curl https://curl.se/docs/vuln.json curl packages oss_fuzz https://github.com/google/oss-fuzz-vulns.git OSS-Fuzz target packages istio https://github.com/istio/istio.io/tree/master/content/en/news/security istio packages postgresql https://www.postgresql.org/support/security/ postgresql mozilla https://github.com/mozilla/foundation-security-advisories mozilla github_osv https://github.com/github/advisory-database.git all redhat https://access.redhat.com/hydra/rest/securitydata/cve.json rpm packages aosp_dataset https://github.com/pypa/advisory-database.git android packages project_kb_statements https://github.com/SAP/project-kb.git maven, python packages project_kb_msr2019 https://github.com/SAP/project-kb/blob/main/MSR2019/dataset/vulas_db_msr2019_release.csv maven, python packages ruby https://github.com/rubysec/ruby-advisory-db.git ruby gems epss https://epss.cyentia.com/epss_scores-current.csv.gz exploit prediction scoring system gentoo https://anongit.gentoo.org/git/data/glsa.git gentoo packages nginx http://nginx.org/en/security_advisories.html nginx debian https://security-tracker.debian.org/tracker/data/json debian packages mattermost https://mattermost.com/security-updates/ mattermost server, desktop and mobile apps glibc https://sourceware.org/git/glibc.git GNU C packages apache_tomcat https://tomcat.apache.org/security apache_tomcat packages suse_scores http://ftp.suse.com/pub/projects/security/yaml/ vulnerability severity scores by SUSE retiredotnet https://github.com/RetireNet/Packages.git .NET packages ubuntu_osv https://github.com/canonical/ubuntu-security-notices.git ubuntu packages alpine_linux https://github.com/aboutcode-org/aboutcode-mirror-alpine-secdb alpine packages linux_kernel https://github.com/nluedtke/linux_kernel_cves linux kernel packages openssl https://www.openssl.org/news/vulnerabilities.xml openssl fireeye https://github.com/mandiant/Vulnerability-Disclosures none fix_commits https://github.com/torvalds/linux https://github.com/mirror/busybox https://github.com/nginx/nginx https://github.com/apache/tomcat https://github.com/mysql/mysql-server https://github.com/postgres/postgres https://github.com/mongodb/mongo https://github.com/redis/redis https://github.com/sqlite/sqlite https://github.com/php/php-src https://github.com/python/cpython https://github.com/ruby/ruby https://github.com/golang/go https://github.com/nodejs/node https://github.com/rust-lang/rust https://github.com/openjdk/jdk https://github.com/swiftlang/swift https://github.com/django/django https://github.com/rails/rails https://github.com/laravel/framework https://github.com/spring-projects/spring-framework https://github.com/facebook/react https://github.com/angular/angular https://github.com/WordPress/WordPress https://github.com/moby/moby https://github.com/kubernetes/kubernetes https://gitlab.com/qemu-project/qemu https://github.com/xen-project/xen https://github.com/mirror/vbox https://github.com/containerd/containerd https://github.com/ansible/ansible https://github.com/hashicorp/terraform https://gitlab.com/wireshark/wireshark https://github.com/the-tcpdump-group/tcpdump https://github.com/git/git https://github.com/jenkinsci/jenkins https://gitlab.com/gitlab-org/gitlab-foss