Image Vulnerability Lookup

The OSV.dev database indexes known vulnerabilities (CVEs) for open source packages, including Linux distribution packages used in container base images. The Image Vulnerability Lookup builds an OSV API query for an image and shows the known vulnerabilities.

It maps common base images to their OSV ecosystem, queries by name + tag/version, and parses the response into a readable list of IDs, aliases (CVE numbers), severity and references. The request building and response parsing are pure functions that are unit-tested. Network failures are handled gracefully in the UI.

Nothing about your image is uploaded except its name and version to the public OSV API.

• OSV.dev - free, no API key.
• Request builder - pure, tested function.
• Response parser - pure, tested function.
• Ecosystem map - alpine/debian/ubuntu/centos/rocky/amazonlinux/photon.
• Error handling - network/HTTP errors caught.
• Copy / Download / Print - take results anywhere.

1. Enter an image like alpine:3.18.0.
2. Generate to preview the OSV request, or Lookup to query the API.
3. Review the vulnerability list.

Example 1 - alpine. alpine:3.18.0 -> ecosystem Alpine.

Example 2 - debian. debian:12 -> ecosystem Debian.

• Free - uses OSV, no key.
• Testable - request + parse covered.
• Resilient - network errors handled.
• Private - only name/version sent.
• Copy, download or print - take it anywhere.