Look up an exact package version.
Search OSV for vulnerability records affecting a package in a supported ecosystem. This is a lookup, not a scan of your computer.
Loading…
Package Security Lookup
No matching entries.
About this data
Only the ecosystem, package name, and version you submit are sent to OSV. No personal system inventory is collected. Missing records do not prove that a package is secure. For Debian and Ubuntu, use the source package name (for example openssl rather than libssl3), with the exact distribution version suffix. Results reflect OSV’s version-matching rules.
Source: OSV ↗. Cached pages display the last successful snapshot and its check time.