An open API service providing security vulnerability metadata for many open source software ecosystems.

Essential vulnerability data for your ecosystem

Advisories is a comprehensive open API service that provides professional-quality security vulnerability metadata for numerous open source software ecosystems for free

Comprehensive vulnerability database

Access unified vulnerability data from multiple sources including package registries, software repositories, and vulnerability databases, giving you a comprehensive view of security threats across your entire open source stack.

38,353 Advisories
97,284 Packages

Latest vulnerabilities

View all
High
about 15 hours ago

Microsoft Security Advisory CVE-2026-70035 - .NET and Visual Studio Remote Code Execution Vulnerability GSA_kwCzR0hTQS00ajl2LWg3cHAtNzI1aM4AB8tf

nuget Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-arm64
High
about 15 hours ago

Microsoft Security Advisory CVE-2026-70186 - ASP.NET Core Denial of Service Vulnerability GSA_kwCzR0hTQS1tZjR4LXc0Z2gtNDY1Ns4AB8te

nuget Microsoft.AspNetCore.App.Runtime.win-x86, Microsoft.AspNetCore.App.Runtime.win-x64, Microsoft.AspNetCore.App.Runtime.win-arm64, Microsoft.AspNetCore.App.Runtime.osx-x64, Microsoft.AspNetCore.App.Runtime.osx-arm64, Microsoft.AspNetCore.App.Runtime.linux-x64, Microsoft.AspNetCore.App.Runtime.linux-musl-x64, Microsoft.AspNetCore.App.Runtime.linux-musl-arm64, Microsoft.AspNetCore.App.Runtime.linux-musl-arm, Microsoft.AspNetCore.App.Runtime.linux-arm64, Microsoft.AspNetCore.App.Runtime.linux-arm
High
about 15 hours ago

Microsoft Security Advisory CVE-2026-70007 - .NET and Visual Studio Remote Code Execution Vulnerability GSA_kwCzR0hTQS1wZndqLTJmOTMtcmY0Ms4AB8td

nuget Microsoft.WindowsDesktop.App.Runtime.win-x86, Microsoft.WindowsDesktop.App.Runtime.win-x64, Microsoft.WindowsDesktop.App.Runtime.win-arm64

Get complete security visibility

Access unified vulnerability data from multiple sources including package registries, software repositories, and vulnerability databases, giving you a comprehensive view of security threats across your entire open source stack.

Stay ahead of security risks

Identify which packages and projects in your dependencies are affected by security advisories, empowering you to make informed decisions and address vulnerabilities before they become critical threats to your systems.

Integrate seamlessly into your workflow

Enjoy 5,000 requests per hour rate limits and comprehensive REST API documentation, allowing you to easily incorporate security intelligence into your development and security management processes.

Free and open

We provide this essential service at no cost as part of the broader ecosyste.ms initiative to support and secure critical digital infrastructure.

Find out more

Get started

Find a project and see it in our dashboard, with statistics on responsiveness, productivity, finance and more available to compare over time.

Read the API docsBrowse vulnerabilities