Vulnerability Database · Ecosystem
OSS-Fuzz vulnerabilities
OSS-Fuzz is covered by 4,264 vulnerabilities in the Vulert Vulnerability Database, each with the severity, affected versions, workaround and the fix for the version you actually run.
Search all 4,264 vulnerabilities Malicious packages in OSS-Fuzz Critical vulnerabilities only
- Vulnerabilities recorded
- 4,264
- Critical
- 0
- High
- 1,136
- Medium / Low
- 2,371 / 288
- Unrated
- 0
- Last database update
- 22/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Severity in OSS-Fuzz
How the vulnerabilities split
Totals add up to the 4,264 vulnerabilities Vulert records for OSS-Fuzz, including entries with no severity published yet.
Other ways into the data
02 Most recent critical
Newest critical OSS-Fuzz vulnerabilities
03 Related ecosystems
Other platforms in this database
Questions
OSS-Fuzz and the database
How many OSS-Fuzz vulnerabilities does Vulert track?
OSS-Fuzz is covered by 4,264 vulnerabilities, each with the severity, affected versions, workaround and fix where one exists.
How do I fix a vulnerability in OSS-Fuzz?
Open the vulnerability for the package and version you run. It lists the vulnerable range, the fixed version to move to, and a workaround when no fix has been published yet.
Does Vulert monitor OSS-Fuzz dependencies continuously?
Yes. Upload the manifest or SBOM for your application and Vulert keeps tracking those packages, alerting you when a new vulnerability affects a version you actually use.