Skip to content
Vulnio

Free scan

Check an SBOM or lock file for exploited vulnerabilities

Upload one file. Vulnio reads the components, asks OSV.dev for known vulnerabilities and marks those that CISA KEV or ENISA EUVD list as actively exploited.

Up to 5 MB and 5,000 components.

The file is read in memory and discarded. Vulnio keeps only component names, versions and package URLs, and sends them to OSV.dev to look up vulnerabilities. The scan is deleted after 30 days.