Vulnerabilities Python Packages

lib4vex

Library to ingest and generate VEX documents

csaf-tool

CSAF generator and validator

univers

Parse and compare package versions and ranges. From debian, npm, pypi, ruby and more. Process all the version range specs and expressions. This project is sponsored by an NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and others generous sponsors!

jake

Check your Python environments for vulnerable Open Source packages with OSS Index or Sonatype Nexus Lifecycle.

ochrona

A command line tool for detecting vulnerabilities in Python dependencies and doing safe package installs

cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

ossindex-lib

Python library for querying OSS Index

kube-hunter

Hunt for security weaknesses in Kubernetes clusters

pyscan-rs

python dependency vulnerability scanner, written in Rust.

clusterfuzz

Scalable fuzzing infrastructure.

aboutcode-pipeline

ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and others generous sponsors!

skjold

Security audit Python project dependencies against security advisory databases.

wordfence

Wordfence malware and vulnerability scanner command line utility.

scancodeio

ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and others generous sponsors!

fpvs

Fast Python Vulnerability Scanner

aboutcode-api-auth

No description available

pipguard

Scan Python packages for supply chain attacks before installing them

pyraider

Using PyRaider You can scan installed dependencies known security vulnerabilities. It uses publicly known exploits, vulnerabilities database.

opencve

CVE Alerting Platform

metlo

Metlo is an open-source API security platform.

bogrod

Manage SBOM and VEX like source code

vulnix

Scans a Nix store for derivations that are affected by vulnerabilities.

dorkeye

Automated Google Dorking Tool. Generates and runs advanced search queries for exposed files. It also test Vulns, Analyzes and extracts metadata

vulnerabilities

Python framework to manipulate vulnerabilities.