NVD
The U.S. National Vulnerability Database, linked to the CVE numbering system, provides technical details on vulnerabilities such as proof-of-concept code, affected version ranges, and CVSS severity scores. It is an important reference data source for security research.
Timeline (last 90 days)
npm's package-lock.json locks the exact hash of every dependency, and npm audit interfaces with the NVD to automatically cross-reference known CVEs.
Every CVE identified by the tool has been cross-validated against the NVD or the GitHub Security Advisory database.
NVD (National Vulnerability Database) is the U.S. national vulnerability database, where more detailed technical information and affected software versions can be queried.
All Facts (3)
npm's package-lock.json locks the exact hash of every dependency, and npm audit interfaces with the NVD to automatically cross-reference known CVEs.
50%UnverifiedEvery CVE identified by the tool has been cross-validated against the NVD or the GitHub Security Advisory database.
50%UnverifiedNVD (National Vulnerability Database) is the U.S. national vulnerability database, where more detailed technical information and affected software versions can be queried.
50%