Software & language version CVE checker

Check software CVEs by version

Enter a product name and version for an exact-version lookup. You can check up to five entries at once, separated by commas or new lines, for example PHP 8.2.34, nginx 1.24.0, OpenSSL 3.0.2.

Supported software and languages

PHP, Python, Ruby, Node.js, nginx, Apache HTTP Server, OpenSSL, WordPress, Drupal, jQuery, Bootstrap, OpenSSH, MySQL, MariaDB, PostgreSQL, Apache Tomcat, Redis, Elasticsearch, Grafana, Kubernetes, Docker and curl.

Understand the CVE results

Results are matched through NVD CPE product records for the version you entered. Each finding can include a CVE ID, severity, description and affected-version boundary. When NVD provides one clear boundary, it is shown as guidance; otherwise, follow the linked advisory for vendor remediation.

A missing match does not prove a version is secure. Vulnerability databases may have incomplete product mappings, and Linux distributions or hosting providers can backport security patches without changing the upstream version number. Check the vendor or distribution advisory before upgrading.

Need a different kind of check?

To review a public website for software versions it discloses, use the web application CVE checker. To check package manifests and lockfiles, use the dependency vulnerability checker.