CVE Watch

CVE Watch keeps an eye on the open-source frameworks and packages you depend on, and tells you when a new security advisory affects them. SEE WHAT'S HIT RIGHT NOW Home ranks popular frameworks such as React, Next.js, Django, FastAPI, LangChain and PyTorch by their critical, high and medium advisories over the last 7 or 30 days. FOLLOW YOUR STACK Pick the frameworks you use, or search any PyPI or npm package. Choose per framework how much you hear: Major only, Everything, or Quiet. KNOW IF YOU'RE AFFECTED Add the version you run and CVE Watch checks it against each advisory's affected ranges, and shows the first fixed version when there is one. Unknown is never shown as safe. CATCH MALICIOUS PACKAGES A separate list shows packages reported as malicious, so you can spot typosquats and compromised releases. READ THE ADVISORY Severity, affected versions, fix status and links to OSV, GitHub and NVD. PRIVATE BY DESIGN No account and no tracking. Your follow list is stored on your iPhone. Data comes from OSV.dev, which gathers advisories from the GitHub Advisory Database, PyPA and others. Our server checks for changes every few minutes. Framework names and logos are trademarks of their owners. CVE Watch is not affiliated with them.