{"id":13557274,"url":"https://github.com/opencve/opencve","last_synced_at":"2026-10-19T07:24:37.285Z","repository":{"id":37857541,"uuid":"298383750","full_name":"opencve/opencve","owner":"opencve","description":"Vulnerability Intelligence Platform","archived":false,"fork":false,"pushed_at":"2026-10-14T09:31:10.000Z","size":15773,"stargazers_count":2860,"open_issues_count":105,"forks_count":340,"subscribers_count":40,"default_branch":"master","last_synced_at":"2026-10-14T13:58:17.567Z","etag":null,"topics":["cve","cybersecurity","django","infosec","mitre","nvd","python","security-tools","vulnerabilities","vulnerability-management"],"latest_commit_sha":null,"homepage":"https://www.opencve.io","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/opencve.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":".github/SECURITY.md","accessibility":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-09-24T20:07:03.000Z","updated_at":"2026-10-14T11:42:17.000Z","dependencies_parsed_at":"2026-10-14T11:35:00.821Z","dependency_job_id":null,"html_url":"https://github.com/opencve/opencve","commit_stats":{"total_commits":124,"total_committers":18,"mean_commits":6.888888888888889,"dds":0.25,"last_synced_commit":"911a6b366696b2a3fb16047f2ca1bb2033bb0b38"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"purl":"pkg:github/opencve/opencve","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/opencve%2Fopencve","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/opencve%2Fopencve/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/opencve%2Fopencve/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/opencve%2Fopencve/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/opencve","download_url":"https://codeload.github.com/opencve/opencve/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/opencve%2Fopencve/sbom","scorecard":{"id":40741,"data":{"date":"2025-08-04","repo":{"name":"github.com/opencve/opencve","commit":"85d8654ebed18c7fc79b82a3c50c91d3cfd36fb6"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":6.4,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/tests.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/opencve/opencve/tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/opencve/opencve/tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/opencve/opencve/tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/opencve/opencve/tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/opencve/opencve/tests.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/opencve/opencve/tests.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/opencve/opencve/tests.yml/master?enable=pin","Warn: containerImage not pinned by hash: scheduler/Dockerfile:5","Warn: containerImage not pinned by hash: web/Dockerfile:1","Warn: containerImage not pinned by hash: web/Dockerfile:4","Warn: containerImage not pinned by hash: web/Dockerfile:26","Warn: pipCommand not pinned by hash: scheduler/Dockerfile:21","Warn: pipCommand not pinned by hash: scheduler/Dockerfile:22","Warn: pipCommand not pinned by hash: web/Dockerfile:21","Warn: pipCommand not pinned by hash: web/Dockerfile:23","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:49","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:50","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:104","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:105","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:116","Warn: pipCommand not pinned by hash: .github/workflows/tests.yml:117","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   4 containerImage dependencies pinned","Info:   0 out of  11 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":9,"reason":"1 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: PYSEC-2025-47 / GHSA-7xr5-9hcq-chf9"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-14T21:26:53.845Z","repository_id":37857541,"created_at":"2025-08-14T21:26:53.846Z","updated_at":"2025-08-14T21:26:53.846Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":344872684,"owners_count":38351205,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-19T02:00:06.414Z","response_time":53,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cve","cybersecurity","django","infosec","mitre","nvd","python","security-tools","vulnerabilities","vulnerability-management"],"created_at":"2024-08-01T12:04:15.207Z","updated_at":"2026-10-19T07:24:37.258Z","avatar_url":"https://github.com/opencve.png","language":"Python","funding_links":[],"categories":["cybersecurity","Python","security","security-tools"],"sub_categories":[],"readme":"\u003cp align=\"center\"\u003e\n  \u003cimg alt=\"OpenCVE\" src=\"https://raw.githubusercontent.com/opencve/opencve/v2/logo.png\" width=\"400px;\"\u003e\n\u003c/p\u003e\n\n\u003cp align=\"center\"\u003e\n  \u003ca href=\"https://github.com/opencve/opencve/actions?query=workflow%3ATests\"\u003e\n    \u003cimg alt=\"Tests\" src=\"https://github.com/opencve/opencve/actions/workflows/tests.yml/badge.svg?branch=master\"\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://www.python.org/\"\u003e\n    \u003cimg alt=\"Python versions\" src=\"https://img.shields.io/badge/python-3.10%2B-blue.svg\"\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://github.com/python/black\"\u003e\n    \u003cimg alt=\"Code style: black\" src=\"https://img.shields.io/badge/code%20style-black-000000.svg\"\u003e\n  \u003c/a\u003e\n\u003c/p\u003e\n\n## What is OpenCVE?\n\nOpenCVE is a Vulnerability Intelligence Platform that helps you monitor and manage CVEs efficiently.\n\nIt aggregates vulnerabilities from multiple sources (MITRE, NVD, RedHat, Vulnrichment...) and lets you filter, track, and organize them by vendor, product, severity, and more.\n\nYou can subscribe to products, receive alerts, analyze changes, and collaborate with your team — all through a simple and powerful interface. Assign members to CVEs to track progress (e.g. under analysis, risk accepted) and keep everyone aligned.\n\n\u003cp align=\"center\"\u003e\n   \u003cimg src=\"https://raw.githubusercontent.com/opencve/opencve/master/opencve3.png\" width=\"800\" alt=\"OpenCVE Dashboards\"\u003e\n\u003c/p\u003e\n\n## Key Features\n\n### 📚 Explore, Filter and Organize\n- Filter CVEs by vendor, product, CVSS, KEV, EPSS, CWE, publication date, and more.\n- Subscribe to vendors and products, and organize your monitoring with projects and organizations.\n- Save complex filters as reusable Views.\n\n### 🔖 Tag, Prioritize and Get Notified\n- Classify CVEs with custom tags (e.g. unread, critical, assigned-to-dev).\n- Assign users and statuses to CVEs to track progress (under analysis, risk accepted, etc.).\n- Receive alerts instantly via email or webhook (Slack and Teams coming soon).\n\n### 🔁 Track Changes and Generate Reports\n- Access the complete change history of CVEs: scores, descriptions, references, etc.\n- Generate daily reports by project to stay ahead.\n- Get AI-powered report summaries to see priorities and immediate actions at a glance.\n\n### 📊 Customize Your Dashboard\n- Create multiple dashboards to organize your work the way you want.\n- Build your own dashboard with widgets like \"CVEs per project\" or \"Recent Reports\".\n- Drag, resize, and save layouts per organization.\n\n### ✨ OpenCVE Enrichment\n- Automatically associate CVEs with vendors, products, and affected versions.\n- Advanced AI-powered analysis, including impact assessment and remediation insights, is available in OpenCVE Cloud.\n\n## OpenCVE Community vs OpenCVE Cloud\n\nOpenCVE is available as both a self-hosted Community edition and a hosted Cloud platform.\n\nThe Community edition allows you to track CVEs, organize your monitoring, and build your own workflows.\n\nFor teams that need more advanced capabilities, OpenCVE Cloud provides additional features such as:\n\n- AI-powered CVE analysis and remediation insights\n- Enterprise-grade security (SAML SSO, MFA enforcement)\n- Managed, scalable infrastructure\n- Advanced audit, SIEM \u0026 threat intelligence (coming soon)\n\n👉 Learn more: [https://www.opencve.io/pricing](https://www.opencve.io/pricing)\n\n## How to Use OpenCVE\n\n### ✅ SaaS (Recommended)\nUse the hosted version at [https://www.opencve.io](https://www.opencve.io) — no setup required, with access to advanced features and enterprise capabilities.\n\n### 🐳 Self-Hosted\nRun OpenCVE on your own infrastructure using Docker. See the [installation guide](https://docs.opencve.io/deployment/) for more details.\n\n## Screenshots\n\n\u003cp align=\"center\"\u003e\n  \u003cimg src=\"https://raw.githubusercontent.com/opencve/opencve/master/opencve1.png\" width=\"350\" height=\"215\"\u003e\n  \u003cimg src=\"https://raw.githubusercontent.com/opencve/opencve/master/opencve2.png\" width=\"350\" height=\"215\"\u003e\n  \u003cimg src=\"https://raw.githubusercontent.com/opencve/opencve/master/opencve3.png\" width=\"350\" height=\"215\"\u003e\n  \u003cimg src=\"https://raw.githubusercontent.com/opencve/opencve/master/opencve4.png\" width=\"350\" height=\"215\"\u003e\n\u003c/p\u003e\n\n## Stay Updated\n\nOpenCVE is actively developed and regularly improved.\n\n⭐ Star this repository and 🔔 watch releases to be notified of future updates.\n\n\u003cp align=\"center\"\u003e\n   \u003cimg src=\"https://raw.githubusercontent.com/opencve/opencve/master/github-star-watch.gif\" width=\"600\" alt=\"How to Star and Watch the repository\"\u003e\n\u003c/p\u003e\n\n## License\n\nOpenCVE Community is released under a Business Source License (BSL), allowing free usage with some limitations for commercial use.\n\nSee the [LICENSE](LICENSE) file for more details.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fopencve%2Fopencve","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fopencve%2Fopencve","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fopencve%2Fopencve/lists"}