Workflow · v1.0.0

Find vulnerable packages

Check every installed package against OSV.dev and file the vulnerable ones in a tracked table, so a newly disclosed vulnerability is a change an alert rule can watch.

Customers: sign in to download Request a demo

Use cases

Start it with the variable inventory set to a data object of installed packages with the columns host, name, version and ecosystem (e.g. /inventory/packages; shows how to gather one).
Needs a data source with the key osv.
Reads up to 5000 rows a run.

vulnerablepackages