ossf/cve-bin-tool

cve-bin-tool

✅ Recently maintained

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

1,807Stars
702Forks
+97-day stars

Python · GPL-3.0 · Last push 2026-11-02

Official repository & installation ↗

GitValue · Value evidence

Unscored · Evidence coverage 0%

Provisional rubric; documentation and runtime testing are separate. Missing evidence does not imply low value.

Star history

2025-09-292026-11-03
View historical data
DateStars
2026-10-051,765
2026-10-061,767
2026-10-071,769
2026-10-081,773
2026-10-091,774
2026-10-101,774
2026-10-111,777
2026-10-121,778
2026-10-131,779
2026-10-141,785
2026-10-151,787
2026-10-161,788
2026-10-171,789
2026-10-181,789
2026-10-191,791
2026-10-201,792
2026-10-211,794
2026-10-221,795
2026-10-231,797
2026-10-241,798
2026-10-251,798
2026-10-261,798
2026-10-271,799
2026-10-281,802
2026-10-291,802
2026-10-301,805
2026-10-311,805
2026-11-011,805
2026-11-021,806
2026-11-031,807

Get the project

git clone https://github.com/ossf/cve-bin-tool.git

Cloning downloads the source. For dependencies and installation, follow the project README.

Related projects & alternative candidates

Related domains do not imply feature parity. Review official documentation and licenses.