Vulnerability database
Search 537,001 open source vulnerabilities
The Vulert Vulnerability Database is a continuously updated record of open source vulnerabilities, searchable by CVE, package or ecosystem. Every vulnerability includes the severity, affected ranges, references, the workaround and the fix for the version you actually run.
Vulnerabilities 537,001 Ecosystems 30 Last update 22/Oct/2026
Jump straight in
01 Browse by ecosystem
Start from the platform you ship
02 Recently published
Latest high severity vulnerabilities
-
8.7 CVSSNo fix published monitor for a patch
-
8.2 CVSSNo fix published monitor for a patch
-
8.7 CVSSNo fix published monitor for a patch
-
7.8 CVSS0:1.0.1-1.el10_2.2 fixed version
-
7.5 CVSS0:0.12.20-69.el10_2 fixed version
-
5.3 CVSS0:6.4.38-3.el10_2.1 fixed version
What is Vulert?
Browsing this database is free. Vulert is the monitoring service behind it: upload a manifest or SBOM and Vulert tracks your dependencies against these vulnerabilities, then alerts you when something new affects a version you actually run.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.
Questions
About this database
What is the Vulert Vulnerability Database?
A free, continuously updated index of open source vulnerabilities. Each entry gives the severity, affected versions, workaround and the fix for the affected range, and the same data powers the Vulert dependency-monitoring product.
How often is the database updated?
Vulnerabilities are published as they are disclosed. The database ledger on this page shows the live vulnerability count and the date of the last update.
Do I need an account to browse it?
No. Searching, filtering and reading every vulnerability is free and needs no account. Only the monitoring of your own applications uses a Vulert account.