CVE & Dependency Security API
Independent API for vulnerability and dependency security: CVE details, package checks, batch queries, risk assessments, dependency trees, project health, repository Scorecard, and lockfile auditing from OSV, CISA KEV, FIRST EPSS, NVD, Google deps.dev, and OpenSSF Scorecard.
Retrieve details for a CVE or vulnerability ID from OSV, CISA KEV, FIRST EPSS, and NVD.
Check one package and version for vulnerabilities using OSV, enriched with CISA KEV, EPSS, and NVD data.
Check multiple packages and versions for vulnerabilities using OSV batch query, enriched with CISA KEV, EPSS, and NVD data.
Produce a consolidated vulnerability risk assessment for multiple packages, combining OSV, CISA KEV, EPSS, and NVD data.
Return direct and transitive dependencies, dependency versions and available dependency metadata using Google deps.dev API.
Return project activity indicators, repository associations, package metadata and available security information using Google deps.dev API.
Retrieve the official OpenSSF Scorecard result for a GitHub, GitLab or other supported repository.
Parse supported package lockfiles, identify dependencies and versions, then combine deps.dev and existing OSV/CISA/EPSS/NVD findings.