Vulnerability Database · Ecosystem

OSS-Fuzz vulnerabilities

OSS-Fuzz is covered by 4,264 vulnerabilities in the Vulert Vulnerability Database, each with the severity, affected versions, workaround and the fix for the version you actually run.

OSS-Fuzz at a glancelive
Vulnerabilities recorded
4,264
Critical
0
High
1,136
Medium / Low
2,371 / 288
Unrated
0
Last database update
22/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Severity in OSS-Fuzz

How the vulnerabilities split

  • Critical 0
  • High 1,136
  • Medium 2,371
  • Low 288
  • Unrated 0

Totals add up to the 4,264 vulnerabilities Vulert records for OSS-Fuzz, including entries with no severity published yet.

02 Most recent critical

Newest critical OSS-Fuzz vulnerabilities

See all critical OSS-Fuzz vulnerabilities →
Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

OSS-Fuzz and the database

How many OSS-Fuzz vulnerabilities does Vulert track?

OSS-Fuzz is covered by 4,264 vulnerabilities, each with the severity, affected versions, workaround and fix where one exists.

How do I fix a vulnerability in OSS-Fuzz?

Open the vulnerability for the package and version you run. It lists the vulnerable range, the fixed version to move to, and a workaround when no fix has been published yet.

Does Vulert monitor OSS-Fuzz dependencies continuously?

Yes. Upload the manifest or SBOM for your application and Vulert keeps tracking those packages, alerting you when a new vulnerability affects a version you actually use.