395423 CVEs, each with its patch status for the distro releases and package ecosystems that OSV.dev covers. Follow a product in an RSS reader or in Slack with /feed subscribe <feed URL>.

Feed: exploited and unpatched CVEs (JSON)

Chart: median days from disclosure to fix, by vendor

My watchlist

It lives in this browser only.

Show only events of my watchlist · Export the feeds as OPML

Common products

• Linux Kernel 18058
• Google Chrome 5779
• Apple macOS 3513
• Firefox 2053
• Android OS 1590
• Apple watchOS 1389
• Apple tvOS 1310
• GitLab 1112
• Microsoft Windows Server 759
• Microsoft Windows 753
• Apple visionOS 700
• Apple iOS 507
• Mattermost 473
• Discourse 289
• BIG-IP 259
• IBM AIX 213
• Magento 210
• Palo Alto Networks PAN-OS 197
• Kibana 192
• Wireshark 185
• FortiOS 179
• FreeBSD 168
• Apple iPadOS 166
• Apache Airflow 152
• VirtualBox 144
• Apache Tomcat 141
• OpenSSL 141
• Apache HTTP Server 139
• Concrete CMS 139
• Jenkins 137
• Node.js 129
• Microsoft Office 125
• YouTrack 125
• Adobe ColdFusion 111
• PHP 103
• Envoy 98
• MongoDB Server 96
• Checkmk 93
• Apache Camel 89
• BIND 9 87
• Elasticsearch 87
• Zabbix 85
• Fedora Linux 83
• Rancher 80
• FFmpeg 77
• Traefik 76
• Electron 69
• GStreamer 62
• Unity 62
• TYPO3 61
• Grafana 59
• Next.js 57
• Django 56
• Google Pixel 55
• MediaWiki 55
• Artifactory 54
• Symfony 54
• Moodle 53
• Jira Software 52
• Kubernetes 52
• Oracle Database 51
• Argo CD 50
• Kirby 49
• Redis 49
• Apache NiFi 47
• LibreOffice 47
• Internet Explorer 46
• Spring Framework 45
• authentik 45
• Mastodon 44
• Oracle Solaris 44
• Hashicorp Vault 43
• OpenBao 43
• Deno 39
• Shopware 39
• Umbraco CMS 39
• BigBlueButton 38
• Cilium 36
• Mautic 36
• Apache ActiveMQ Classic 35
• Coder 35
• Microsoft SharePoint 35
• Angular 34
• Apache APISIX 34
• Apache Struts 33
• OpenVPN 33
• Contao 32
• Kyverno 31
• pnpm 31
• Apache Pulsar 30
• Metabase 30
• Nuxt 30
• Qt 30
• Ansible 29
• Spring Security 29
• VMware ESXi 29
• VMware Cloud Foundation 28
• Centreon 26
• RouterOS 26
• Strapi 26
• Sylius 26
• Wagtail 26
• containerd 26
• Notepad++ 25
• Renovate CLI 25
• Twig 25
• Apache Solr 24
• Azure DevOps Server 24
• Eclipse Jetty 23
• Hashicorp Consul 23
• Microsoft Visual Studio 23
• Omnissa Horizon 23
• Blender 22
• ClamAV 22
• Exim 22
• Keycloak 22
• Rocket.Chat 22
• Nomad 21
• nix 20
• Squid 19
• WordPress 19
• Apache Hadoop 18
• OpenWrt 18
• Argo Workflows 17
• OpenBSD 17
• Apache CouchDB 16
• Apache Spark 16
• Caddy 16
• Composer 16
• Nexus Repository 16
• Ubuntu 16
• Apache Artemis 15
• Bamboo 15
• Samba 15
• Spring Boot 15
• Apache ZooKeeper 14
• Gradle 14
• Guzzle 14
• Plesk 14
• Ruby on Rails 14
• Bitcoin Core 13
• Istio 13
• MariaDB 13
• etcd 13
• Express 12
• LDAP Account Manager 12
• Apache Kafka 11
• HAProxy 11
• OPNsense 11
• PostgreSQL 11
• Salt 11
• Apache Cassandra 10
• Azure Kubernetes Service 10
• Looker 10
• Microsoft .NET Framework 10
• Oracle Linux 10
• Quasar 10
• Splunk 10
• Svelte 10
• Logstash 9
• Sourcegraph 9
• Valkey 9
• Apache Subversion 8
• Calico 8
• ClickHouse 8
• Joomla! 8
• PrivateBin 8
• Red Hat JBoss Enterprise Application Platform 8
• Vitess 8
• Yocto Project 8
• Ceph 7
• Elastic Beats 7
• Go 7
• Memcached 7
• Red Hat OpenShift 7
• SQLite 7
• Silverstripe CMS 7
• AngularJS 6
• Backdrop 6
• CakePHP 6
• Confluence 6
• Craft CMS 6
• Flux 6
• Gerrit 6
• GitLab Runner 6
• ISC DHCP 6
• Jira Service Management 6
• ProFTPD 6
• Puppet 6
• Thumbor 6
• nginx 6
• phpBB 6
• Contour 5
• Docker Engine 5
• Fluent Bit 5
• Foreman 5
• Forgejo 5
• Gleam 5
• Prometheus 5
• Ruby 5
• Amazon OpenSearch 4
• Cachet 4
• Control-M 4
• Couchbase Server 4
• Dapr 4
• Dependency-Track 4
• Drupal 4
• Harbor 4
• Hashicorp Boundary 4
• Kuma 4
• Nutanix Prism Central 4
• Proxmox Datacenter Manager 4
• Quarkus 4
• Rust 4
• SonarQube Community Build 4
• VMware vCenter Server 4
• dbt Core 4
• jQuery UI 4
• nvm 4
• Apache Ant 3
• Apache Flink 3
• Apache Log4j 3
• Bitbucket 3
• Dovecot 3
• GoAccess 3
• GraalVM Community Edition 3
• Greenlight 3
• KEDA 3
• Matomo 3
• Microsoft SQL Server 3
• NetBSD 3
• OpenSearch 3
• OpenTofu 3
• Oracle APEX 3
• Oracle GraalVM 3
• Perl 3
• Phoenix Framework 3
• Podman 3
• ROS 2 3
• RabbitMQ 3
• SUSE Linux Enterprise Server 3
• WeeChat 3
• cert-manager 3
• phpMyAdmin 3
• Alpine Linux 2
• Apache HBase 2
• Apache Maven 2
• ArangoDB 2
• Bootstrap 2
• Commvault 2
• DuckDB 2
• Elixir 2
• Google Pixel Watch 2
• Grafana Loki 2
• Laravel 2
• Longhorn 2
• OpenZFS 2
• Python 2
• Red Hat Satellite 2
• Roundcube Webmail 2
• Vue 2
• Yarn 2
• jQuery 2
• oVirt 2
• openSUSE 2
• pgAdmin 2
• AlmaLinux OS 1
• Apache Groovy 1
• Apache Lucene 1
• Apple iPhone 1
• Azul Zulu 1
• Bazel 1
• Bun 1
• CKEditor 1
• CentOS 1
• Chef InSpec 1
• Citrix Virtual Apps and Desktops 1
• Dropwizard 1
• Erlang 1
• Google Chromecast 1
• Hashicorp Packer 1
• Hashicorp Terraform 1
• IBM Db2 1
• InfluxDB 1
• JHipster 1
• Kiali 1
• Kong Gateway 1
• Kotlin 1
• LineageOS 1
• Linux Mint 1
• Microsoft PowerShell 1
• MySQL 1
• Neo4j 1
• Nextcloud 1
• Nokia Mobile 1
• Palo Alto Networks Cortex XDR agent 1
• Postfix 1
• ROS 1
• React 1
• React Native 1

Latest events