Is there a comprehensive free and open source database of aggregated and correlated software vulnerabilities available anywhere?

  • @Issy I requested the migration Mar 15, 2017 at 2:11
  • 1
    Did you check with OD if they'd welcome it? I'm not active over there, so I'm not 100% sure.
    – Izzy
    Mar 15, 2017 at 7:34
  • 1
    What kind of aggregation do you want? What kind of correlations do you want? Please give real-world examples of what the data should include.
    – Nicolas Raoul
    Mar 15, 2017 at 8:28
  • Please read this and improve your question accordingly
    – user4293
    Mar 15, 2017 at 11:59
  • @JanDoggen I will improve Mar 15, 2017 at 15:48

1 Answer 1


Given that there was nothing, I started a project https://github.com/nexb/vulnerablecode that is supported by NLnet.nl https://nlnet.nl/project/vulnerabilitydatabase/ and that will eventually deliver a free and open database of aggregated and correlated software package vulnerabilities, built in Python and delivered as public domain data.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.