HN Showcase
Back to browse
Free API of 248M aggregated VEX statements: 45% of CVEs not affected

Free API of 248M aggregated VEX statements: 45% of CVEs not affected

by simoneree·Jul 13, 2026·2 points·0 comments
Visit ProjectView on HN

AI Analysis

●●●BangerSolve My ProblemBig Brain

Finally kills false positives by merging vendor verdicts directly into your SBOM.

Strengths
  • •Wire-protocol parsing means zero code changes to existing apps.
  • •Handles 247M statements from 9 major vendors like Red Hat and Oracle.
  • •Open source Apache 2.0 license with a free public API tier.
Weaknesses
  • •Relies on vendors actually publishing accurate VEX data, which is still spotty.
  • •No Windows support mentioned for the CLI tooling.
Category
Security
Target Audience

DevSecOps engineers, SREs, Security teams

Similar To

OpenVEX · Chainguard Images · Snyk

Similar Projects