Open source cve projects
Every project in the registry tagged cve, ranked by real GitHub adoption.
SafeLine is a self-hosted WAF(Web Application Firewall) / reverse proxy to protect your web apps from attacks and exploits.
Gather and update all available and newest CVEs with their PoC.
Open Source Vulnerability Management Platform
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
SSH-MITM - ssh audits made simple
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. B
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output,
Related tags
Frequently asked questions
How many open source cve projects are there?
This registry tracks 7 projects tagged cve, with 47,444 GitHub stars between them. The most-adopted is SafeLine at 23,143 stars.
Are these cve projects free to use?
Yes — 7 of the 7 carry an explicit open-source licence across 3 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.
Which cve project should I choose?
The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.
Are these cve projects still maintained?
7 of the 7 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.