Search

Tips

• An exact id jumps straight to its entry, aliases included: a GHSA id finds the CVE it was merged into.
• Words match ids, titles, descriptions, vendors, products and package names; the last word matches as a prefix.
• Filters narrow the result; every result says why it matched.
• The same search is available as JSON at /api/v1/search and to agents through the MCP server.

Examples

• log4j
• Known exploited Fortinet bugs
• Critical npm advisories, last 30 days
• Django, 2024
• Anything with a public exploit in nginx
• CVE-2021-44228