Version check
Is my version vulnerable?
Pick an ecosystem (or a Linux distribution and its release), type a package and the exact version you run. We check it against every known vulnerability, distribution advisory and malicious-package report.
Examples
- npm · lodash 4.17.20
- Maven · org.apache.logging.log4j:log4j-core 2.14.1
- PyPI · django 3.2.0
- Go · golang.org/x/net v0.17.0
- Debian 12 · openssl 3.0.11-1~deb12u2
- Ubuntu 22.04 LTS · openssh 1:8.9p1-3ubuntu0.6
- Red Hat RHEL 9 · openssl 1:3.0.7-24.el9
- SUSE SLES 15 SP6 · openssl-3 3.1.4-150600.5.7.1
- Alpine v3.19 · curl 8.5.0-r0
Use it from CI
Same check as JSON — vulnerable is true when any known vulnerability or malware report matches.
curl -s https://www.openadvisories.org/api/check/npm/lodash/4.17.20 | jq .vulnerable