OSV vulnerability database API: coverage and access

What it covers

Geography and granularity

Geography: Global open-source ecosystems

Granularity: Package ecosystem, name, version or commit; vulnerability record

Source type: Vulnerability database / API

Potential use

Third-party dependency risk, vulnerability monitoring and remediation

Access and cost

REST API and downloadable data

No account stated; query package/version or commit

Cost: Free; not stated; verify provider

Update cadence: Updated as records are contributed; exact cadence not stated

• Provider page ↗
• Documentation and access details ↗Check the provider's current terms and instructions before use

Interpret carefully

Limits that affect the decision

Open-source vulnerability coverage varies by ecosystem and advisory source

Updated as records are contributed; exact cadence not stated

This record summarizes source documentation; Jon Bishop did not conduct an independent audit of the underlying dataset.