Importers

Importer Name	Data Source	Ecosystems Covered
archlinux	https://security.archlinux.org/json	arch packages
apache_kafka	https://kafka.apache.org/community/cve-list	apache-kafka
nvd	https://nvd.nist.gov/vuln/data-feeds#JSON_FEED	none
elixir_security	https://github.com/dependabot/elixir-security-advisories	hex packages
npm	https://github.com/nodejs/security-wg.git	npm packages
vulnrichment	https://github.com/cisagov/vulnrichment.git	all
apache_httpd	https://httpd.apache.org/security/json	apache-httpd
pypa	https://github.com/pypa/advisory-database.git	python packages
gitlab	https://gitlab.com/gitlab-org/advisories-community.git	all
pysec	https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip	python packages
xen	https://xenbits.xen.org/xsa/xsa.json	xen packages
curl	https://curl.se/docs/vuln.json	curl packages
oss_fuzz	https://github.com/google/oss-fuzz-vulns.git	OSS-Fuzz target packages
istio	https://github.com/istio/istio.io/tree/master/content/en/news/security	istio packages
postgresql	https://www.postgresql.org/support/security/	postgresql
mozilla	https://github.com/mozilla/foundation-security-advisories	mozilla
github_osv	https://github.com/github/advisory-database.git	all
redhat	https://access.redhat.com/hydra/rest/securitydata/cve.json	rpm packages
aosp_dataset	https://github.com/pypa/advisory-database.git	android packages
project_kb_statements	https://github.com/SAP/project-kb.git	maven, python packages
project_kb_msr2019	https://github.com/SAP/project-kb/blob/main/MSR2019/dataset/vulas_db_msr2019_release.csv	maven, python packages
ruby	https://github.com/rubysec/ruby-advisory-db.git	ruby gems
epss	https://epss.cyentia.com/epss_scores-current.csv.gz	exploit prediction scoring system
gentoo	https://anongit.gentoo.org/git/data/glsa.git	gentoo packages
nginx	http://nginx.org/en/security_advisories.html	nginx
debian	https://security-tracker.debian.org/tracker/data/json	debian packages
mattermost	https://mattermost.com/security-updates/	mattermost server, desktop and mobile apps
glibc	https://sourceware.org/git/glibc.git	GNU C packages
apache_tomcat	https://tomcat.apache.org/security	apache_tomcat packages
suse_scores	http://ftp.suse.com/pub/projects/security/yaml/	vulnerability severity scores by SUSE
retiredotnet	https://github.com/RetireNet/Packages.git	.NET packages
ubuntu_osv	https://github.com/canonical/ubuntu-security-notices.git	ubuntu packages
alpine_linux	https://github.com/aboutcode-org/aboutcode-mirror-alpine-secdb	alpine packages
linux_kernel	https://github.com/nluedtke/linux_kernel_cves	linux kernel packages
openssl	https://www.openssl.org/news/vulnerabilities.xml	openssl
fireeye	https://github.com/mandiant/Vulnerability-Disclosures	none
fix_commits	https://github.com/torvalds/linux https://github.com/mirror/busybox https://github.com/nginx/nginx https://github.com/apache/tomcat https://github.com/mysql/mysql-server https://github.com/postgres/postgres https://github.com/mongodb/mongo https://github.com/redis/redis https://github.com/sqlite/sqlite https://github.com/php/php-src https://github.com/python/cpython https://github.com/ruby/ruby https://github.com/golang/go https://github.com/nodejs/node https://github.com/rust-lang/rust https://github.com/openjdk/jdk https://github.com/swiftlang/swift https://github.com/django/django https://github.com/rails/rails https://github.com/laravel/framework https://github.com/spring-projects/spring-framework https://github.com/facebook/react https://github.com/angular/angular https://github.com/WordPress/WordPress https://github.com/moby/moby https://github.com/kubernetes/kubernetes https://gitlab.com/qemu-project/qemu https://github.com/xen-project/xen https://github.com/mirror/vbox https://github.com/containerd/containerd https://github.com/ansible/ansible https://github.com/hashicorp/terraform https://gitlab.com/wireshark/wireshark https://github.com/the-tcpdump-group/tcpdump https://github.com/git/git https://github.com/jenkinsci/jenkins https://gitlab.com/gitlab-org/gitlab-foss