Many npm and PyPI compromises never get a CVE — the package is yanked and an OSV advisory is shipped instead. Library Audit takes raw PURLs from any ecosystem to flag CVE-tracked vulnerabilities and registry-yanked compromises before `pip install`, not the morning after.
NIST moved the NVD to risk-based enrichment on April 15 — a quarter of recent CVEs now arrive Not Scheduled. Vulners has been filling the CPE gap since February 2024. Here is the four-source configuration layer and how to use it.
You have an SBOM. Now what? Vulners SBOM Analyzer turns a standard SPDX or CycloneDX file into a vulnerability report enriched with CVSS, EPSS, AI Score, exploit references, and fix versions — in the browser or via a single API call.
Vulnerability data is only useful when it’s connected. A CVE ID by itself doesn’t help much until you can see its scoring, what products and versions it affects, whether it’s exploited in the wild, and whether exploit code is floating around.
With the release of the new version of Vulners API, we are pleased to introduce several new features and enhancements that aim to improve the accuracy and reliability of our vulnerability detection capabilities.
Almost 32,800 CVE published in 2024 highlight the need for automated vulnerability searches. Vulners new search API offers precise, fast results with data from NVD, Vulnrichment, and CNA for better vulnerability management.
Discover how Vulners is improving CVE data management with new collections and a robust architecture. Learn about changes, backward compatibility, and upcoming features.