Grype Vulnerability Matcher

Trivy Security Scanner

ayeeyee/trivy-security-scanner

Scan a container image or git repository for CVEs, exposed secrets, and misconfigurations using Trivy, the open-source scanner trusted across the container security ecosystem. Severity-scored findings, Critical to Negligible. $0.99 per completed scan; failed scans are never charged.

Scan dependencies against the OSV.dev database. Supply packages as ecosystem:name@version (npm, PyPI, Go, Maven, crates.io and more); get one row per known vulnerability with OSV/GHSA id, CVE aliases, severity, affected range, and the fix version. Dedupe mode gives a new-vulnerability feed.

OSV-Scanner Vulnerability Checker

ayeeyee/osv-scanner-vulnerability-checker

Scan a git repository dependency manifests, package-lock.json, requirements.txt, go.sum, and more, against Google OSV.dev vulnerability database using OSV-Scanner. Get cross-ecosystem CVE matching across npm, PyPI, Go, Maven, and other package registries. $0.49 per completed scan.

Searches the National Vulnerability Database (NVD) API 2.0 for CVEs. Supports keyword search, CVE ID lookup, date range, and CVSS severity filtering. Returns structured vulnerability data with scores, weaknesses, and references. No API key required.

OSV vulnerability monitor for public open-source package advisory changes, severity filters, and fix-aware alerts.

CVE Monitor — New Vulnerability Feed with Alerts

mukedlii/nvd-cve-monitor

Monitor the NIST National Vulnerability Database (NVD) for new and updated CVEs. Filter by vendor, product, CVSS score, or severity level. Get instant Telegram alerts when critical vulnerabilities affect your stack.

One-line: "Monitor NVD, CISA KEV for critical CVEs by keyword and severity"

DepGuard - Dependency Vulnerability Scanner

george.the.developer/depguard-dependency-vulnerability-scanner

Scan your dependencies for known vulnerabilities over OSV.dev and flag the ones CISA lists as actively exploited, so you patch the dangerous bugs first. Packages or a lockfile in, normalized vulnerability rows out. No API key, standby ready.

NVD CVE Vulnerability Search

ryanclinton/nvd-cve-vulnerability-search

NVD CVE Vulnerability Search queries the NIST National Vulnerability Database (NVD) REST API v2.0 to retrieve detailed information about Common Vulnerabilities and Exposures (CVEs). The NVD is the U.S.

Scrapes CVE vulnerability data from the NIST National Vulnerability Database (NVD) API.