Search results

osv-scanner scan image reports no CVEs for alpine:3.19 musl, but Alpine's own tracker lists it as vulnerable

Status: Open.

#5311 In google/osv.dev;

· mcho421 opened on May 7, 2026

OSV.dev API doesn't respect .nuspec package id case-insensitivity

Status: Open.

#5292 In google/osv.dev;

· Franck-Boost opened on Apr 30, 2026

Create Allowlist for datasource ecosystems (and aliases?)

data qualityIssues with data qualityIssues with data quality

needs-gcp-infra-accessTo be able to adequately work on this issue will require access to GCP infrastructureTo be able to adequately work on this issue will require access to GCP infrastructure

workerWorker-related infrastructureWorker-related infrastructure

Status: Open.

#5285 In google/osv.dev;

· michaelkedar opened on Apr 28, 2026

CORS headers not present on API requests that 404 and maybe 5xx

bugSomething isn't workingSomething isn't working

Status: Open.

Bug

#5262 In google/osv.dev;

· G-Rath opened on Apr 21, 2026

Data quality issue with CVE-2024-3094

data qualityIssues with data qualityIssues with data quality

Status: Open.

#5199 In google/osv.dev;

· katzj opened on Apr 7, 2026

Gitter Mega Issue

Status: Open.

Feature

#5193 In google/osv.dev;

· Ly-Joey opened on Apr 7, 2026

Some Swift packages use invalid PURLs in GHSA records

data qualityIssues with data qualityIssues with data quality

Status: Open.

#5191 In google/osv.dev;

· mikehepple opened on Apr 6, 2026

multiple GHSA go packages with invalid semver events

data qualityIssues with data qualityIssues with data quality

Status: Open.

#5173 In google/osv.dev;

· hdonnay opened on Apr 1, 2026

Importer reconciler linency duration does not work for missing records

Status: Open.

#5127 In google/osv.dev;

· another-rex opened on Mar 25, 2026

Keep docs of sources in sync with source.yaml

Status: Open.

#5051 In google/osv.dev;

· jess-lowe opened on Mar 15, 2026

/v1/query does not return CVE-2025-10256 for FFmpeg 6.1.2 although advisory marks versions < 8.0 as affected

Status: Open.

#5049 In google/osv.dev;

· KindDragon opened on Mar 15, 2026

add a linter check before uploading records in combine-to-osv

staleThe issue or PR is stale and pending automated closureThe issue or PR is stale and pending automated closure

Status: Open.

#5032 In google/osv.dev;

· jess-lowe opened on Mar 12, 2026