exploitwatch

Check a dependency list against CISA's live Known Exploited Vulnerabilities catalog.

Community: Submitted by a user or imported; check the owner before granting accessDegradedNo sign-inGlobalFreeRead-only

What it can do

    What data it sees

    Do you need an account

    No: the server works without sign-in

    Check a dependency list against CISA's live Known Exploited Vulnerabilities catalog.

    Server tool list (1)

    Raw names from tools/list. Only developers need these.

    check_dependencies_against_kevCheck a comma-separated list of software dependency/product names against CISA's live Known Exploited Vulnerabilities (KEV) catalog. Returns any matches with the CVE, vulnerability name, and why it matched. Call this before shipping or during a dependency/security review to catch actively-exploited components, or when working out whether an EU Cyber Resilience Act Article 14 reporting obligation (the 24h early warning / 72h notification / 14-day final report clock) has been triggered. Matching is by name and deliberately errs towards over-matching, so review each hit before acting on it. The free check returns every raw match; the triaged Article 14 exposure report with the notification clock computed and ENISA fields pre-filled is a separate $299 product at https://www.edgethirteen.com/tools/exploit-watch.