Terms of use

1. Information only, no warranty

All content is aggregated automatically from third-party sources and provided "as is", for information. We do our best to keep it accurate and current, but give no warranty that it is complete, correct or up to date. A result of "no known vulnerabilities" does not mean a version is secure. Always verify with the vendor's advisory before making security decisions.

2. Liability

We are liable without limitation for intent and gross negligence and under the German Product Liability Act. For slight negligence we are liable only for breach of an essential obligation and limited to foreseeable, typical damage. Otherwise, liability for damage resulting from the use of the information on this site is excluded to the extent permitted by law.

3. Fair use of feeds and API

• Feeds and API endpoints may be used by people, scripts and CI pipelines free of charge.
• Keep automated requests reasonable: the API and lockfile scan allow about 60 requests per minute per IP address (short bursts are fine); beyond that the server answers HTTP 429. Cache results where you can — data changes at most hourly.
• Do not use the service to overload it, to scrape the full database in bulk (use the original sources instead), or to resell access.
• We may change, limit or discontinue endpoints, and block abusive clients.

4. Third-party data

Records remain subject to the terms of their original publishers (CVE Terms of Use, CC-BY 4.0 for OSV, FIRST for EPSS, and others — see data sources). If you republish data, credit the original source.

5. Applicable law

German law applies, excluding the UN Convention on Contracts for the International Sale of Goods; mandatory consumer protection rules of your country of residence remain unaffected.

Last updated: 6 November 2026