exploitwatch

Check dependencies against CISA's real Known Exploited Vulnerabilities feed.

Community: Submitted by a user or imported; check the owner before granting accessOnlineNo sign-inGlobalFreeRead-only

What it can do

    What data it sees

    Do you need an account

    No: the server works without sign-in

    Check dependencies against CISA's real Known Exploited Vulnerabilities feed.

    Server tool list (1)

    Raw names from tools/list. Only developers need these.

    check_kevCheck a comma-separated list of software dependency/product names (e.g. 'lodash, openssl, apache struts') against CISA's real, public Known Exploited Vulnerabilities (KEV) catalog. Returns any current matches with the CVE ID, description, date added, and known ransomware use -- grounded in CISA's live feed, not a guess. Useful for triaging whether a project's dependencies include anything under active exploitation right now.