Pricing

from $1.00 / 1,000 vulnerabilities

Try for free

Go to Apify Store

Open Source Vulnerability Scanner: CVEs for npm, PyPI, Maven

Try for free

Find known vulnerabilities (CVE, GHSA) for packages and versions in npm, PyPI, Maven, Go, crates.io, RubyGems, NuGet, Packagist and more, via OSV.dev, with CVSS scores, fixed versions and CISA known-exploited flags.

Pricing

from $1.00 / 1,000 vulnerabilities

Rating

0.0

(0)

Developer

Pankaj Bhatia

Actor stats

Bookmarked

Total users

Monthly active users

5 days ago

Last modified

Categories

Developer tools

Automation

You can access the Open Source Vulnerability Scanner: CVEs for npm, PyPI, Maven programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1import { ApifyClient } from 'apify-client';
2
3// Initialize the ApifyClient with your Apify API token
4// Replace the '<YOUR_API_TOKEN>' with your token
5const client = new ApifyClient({
6    token: '<YOUR_API_TOKEN>',
7});
8
9// Prepare Actor input
10const input = {
11    "packages": [
12        "npm:lodash@4.17.15",
13        "PyPI:django@3.2.0"
14    ],
15    "vulnerabilityIds": [],
16    "kevAddedLastDays": 0,
17    "maxResults": 500
18};
19
20// Run the Actor and wait for it to finish
21const run = await client.actor("pankajbhatia/open-source-vulnerability-scanner").call(input);
22
23// Fetch and print Actor results from the run's dataset (if any)
24console.log('Results from dataset');
25console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
26const { items } = await client.dataset(run.defaultDatasetId).listItems();
27items.forEach((item) => {
28    console.dir(item);
29});
30
31// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

Open Source Vulnerability Scanner: CVE Lookup API in JavaScript

The Apify API client for JavaScript is the official library that allows you to use Open Source Vulnerability Scanner: CVEs for npm, PyPI, Maven API in JavaScript or TypeScript, providing convenience functions and automatic retries on errors.

Install the apify-client

$npm install apify-client

Other API clients include:

Open Source Vulnerability Scanner: CVEs for npm, PyPI, Maven API in Python

Open Source Vulnerability Scanner: CVEs for npm, PyPI, Maven API through CLI

Open Source Vulnerability Scanner: CVEs for npm, PyPI, Maven OpenAPI definition

Open Source Vulnerability Scanner: CVEs for npm, PyPI, Maven API

NVD CVE Vulnerability Search

ryanclinton/nvd-cve-vulnerability-search

NVD CVE Vulnerability Search queries the NIST National Vulnerability Database (NVD) REST API v2.0 to retrieve detailed information about Common Vulnerabilities and Exposures (CVEs). The NVD is the U.S.

Ryan Clinton

CISA Known Exploited Vulnerabilities Search

ryanclinton/cisa-kev-search

Search and filter the official CISA Known Exploited Vulnerabilities (KEV) catalog -- the authoritative U.S. government list of vulnerabilities actively exploited in the wild.

Ryan Clinton

NVD CVE Vulnerability Search - Vendor Risk Diligence API

pink_comic/nvd-cve-vulnerability-database

Search NIST NVD CVEs by keyword, severity, vendor, or date for vendor-risk diligence and patch workflows. CVSS, affected products, and source-linked vulnerability evidence — not proof a deployment is exploitable. Related: CISA KEV catalog, SSL certificate checker.

Ava Torres

Security Vulnerability Tracker (CVE)

scrapemint/cve-vulnerability-tracker

Track software security vulnerabilities from the US government NVD: search CVEs by keyword, vendor, product and severity, each row with CVSS score, CISA known-exploited flag and EPSS exploit probability. Monitor mode for new CVEs. No API key.

Ken M

5.0

(1)

Open Source Vulnerability Scraper (OSV.dev)

chrisp1211/vulnerability-scraper-max

Look up open-source security vulnerabilities from OSV.dev for any package across npm, PyPI, Go, Maven, crates and more. Returns CVE IDs, severity, summary and references. No API key. Pay per vulnerability; empty runs free.

Christian Pichichero

CVE Vulnerability Monitor (NVD)

agentictools/cve-vulnerability-monitor

Search and monitor CVE vulnerabilities from the NVD by keyword, product, severity, or date, with CVSS scores and references.

Ken Agland

OSV Scraper | Open-Source Package Vulnerabilities (CVE)

muzafferkadir/osv-vulnerabilities-scraper

Look up known security vulnerabilities (CVE/GHSA) for open-source packages — npm, PyPI, Go, Maven & more — via the official OSV.dev API: severity, references, dates. No API key.

Muzaffer Kadir YILMAZ

OSV-Scanner Vulnerability Checker

ayeeyee/osv-scanner-vulnerability-checker

Scan a git repository dependency manifests, package-lock.json, requirements.txt, go.sum, and more, against Google OSV.dev vulnerability database using OSV-Scanner. Get cross-ecosystem CVE matching across npm, PyPI, Go, Maven, and other package registries. $0.49 per completed scan.

Virtual Footprint LLC

OSV Package Vulnerability Scanner

technicaldost/osv-package-vulnerability-scanner

Returns known vulnerabilities from the OSV database for packages in npm, PyPI, Maven, Go, NuGet, RubyGems and crates.io: vulnerability ID, aliases (CVE), severity, summary and fixed versions. Input: package names and versions.

Technical Dost Solutions

OSV Vulnerability Scraper - Package Security Advisories

thirdwatch/osv-vulnerability-scraper

Find known vulnerabilities for npm, PyPI, Maven, Go, NuGet, Cargo, RubyGems, and other packages. Export advisory IDs, affected versions, fixes, severity, references, and source links.