google osv.dev · Discussions · GitHub

Sitelet https://github.com/google/osv.dev/discussions

Discussions

You must be logged in to vote

Is comparing an Ubuntu report to a Debian report an apples-to-apples comparison?

gordonmessmer started Sep 26, 2026 in General

1
You must be logged in to vote

Can OSV sources issue advisories that only affect their ecosystem tooling/infrastructure?

mbauman started Jun 25, 2026 in General

2
You must be logged in to vote

Find patched vulnerabilities where fix commit is not change in a version file

NikolausReichsoellner asked Apr 10, 2026 in Q&A · Answered

2
You must be logged in to vote

notepad++ is open source, why not listed in the db?

mymirai-nikki asked Feb 14, 2026 in Q&A · Closed · Answered

2
You must be logged in to vote

Triggering a re-import for echo OSV advisories

orizerah started Feb 20, 2026 in General · Closed

1
You must be logged in to vote

REST API source: polling frequency and withdrawn field for closing stale entries

itaywol asked Feb 11, 2026 in Q&A · Answered

2
You must be logged in to vote

Is mixed use of affected.ranges with introduced=0 **and** affected.versions a data quality issue?

nscuro asked Feb 3, 2026 in Q&A · Answered

2
You must be logged in to vote

What is the SHA-256 hash associated with malicious Python packages

kmbyr23 asked Dec 18, 2025 in Q&A · Unanswered

2
You must be logged in to vote

Best practice: when to use multiple ranges vs. events?

mbauman started Dec 2, 2025 in General

2
You must be logged in to vote

Curious how to consider purl <-> Vulnerability associations with arch=source qualifiers

alistair-mclean asked Oct 30, 2025 in Q&A · Answered

2
You must be logged in to vote

Best practice for retrospective advisory identifier assignment & dating

mbauman asked Sep 16, 2025 in Q&A · Answered

1
You must be logged in to vote

Output multiple formats

tbinna started Jun 26, 2025 in General · Closed

1
You must be logged in to vote

API support for querying an ecosystem and change log support

zhenghao104 started Apr 23, 2025 in General

0
You must be logged in to vote

API Verbose Output - Identify Components not scanned or those scanned without any findings

colinkmorgan started Apr 10, 2025 in General

0
You must be logged in to vote

support for GIT ecosystem via rest API
bug Something isn't working
phil-hayes started Mar 11, 2024 in General

7
You must be logged in to vote

Getting a vuln's source URL

nchelluri asked Jan 8, 2025 in Q&A · Answered

3
You must be logged in to vote

Are advisories from different data sources (e.g. GitHub Advisory DB & NVD) merged / combined?

Marcono1234 asked Jan 11, 2025 in Q&A · Closed · Answered

1
You must be logged in to vote

How to get an integer severity score from osv Rest API

amaranthjinn started Sep 20, 2024 in General

2
You must be logged in to vote

Querying Vulnerabilities for Particular Version Ranges

giftcup started Dec 1, 2023 in General

4
You must be logged in to vote

Is it possible to get both the fixed and open vulnerabilities of a project for a given time range?

CsatariGergely started Jun 6, 2024 in General

4
You must be logged in to vote

Query vulnerabilities newer than certain datetime

ptelang asked Mar 18, 2024 in Q&A · Answered

4
You must be logged in to vote

Github Reusable Workflow - being able to fail to job by a minimum severity

fingeromer started Dec 18, 2023 in General · Closed

1
You must be logged in to vote

Fuzzy match question.

youngcm2 asked Sep 27, 2023 in Q&A · Closed · Unanswered

1
You must be logged in to vote

Does the OSV Tool save or cache our query results?
documentation Improvements or additions to documentation
bruT3-Squ4D asked Mar 15, 2023 in Q&A · Answered

3
You must be logged in to vote

Granularity of go libraries

taoxinyi asked Jun 21, 2022 in Q&A · Answered

1