Package Manager Support

VulnCheck Exploit & Vulnerability Intelligence tracks package dependencies across a wide range of programming language package managers and Operating System package managers.

For tracked packages, VulnCheck includes vulnerability, license, research attributes, and fix information when possible.

Supported Programming Language Package Managers

Below is a list of currently supported Programming Language package managers:

Supported Operating System Package Managers

Below is a list of currently supported Operating System package managers:

Query by Package URL

To query for vulnerabilities by Package URL (purl), simply call /v3/purl?purl=:purl as follows:

curl --request GET \
    --url https://api.vulncheck.com/v3/purl?purl=pkg:pypi/aioxmpp@0.6.0 \
    --header 'Accept: application/json' \
    --header 'Authorization: Bearer insert_token_here'

The above example requests a list of vulnerabilities in version 0.6.0 of the aioxmpp package from pypi.

Download Offline Backup

To request a specific offline backup, simply call /v3/backup/:index as follows:

curl --request GET \
    --url https://api.vulncheck.com/v3/backup/gem \
    --header 'Accept: application/json' \
    --header 'Authorization: Bearer insert_token_here'

The above example requests an offline backup for the gem index, which is the index tracking Ruby Gems. Note: downloading an offline backup requires a paid subscription license to VulnCheck.