Total CVEs—
Critical—click to filter ↓
High —click to filter ↓
Medium — click to filter ↓
Low — click to filter ↓
Packages—
How is Risk Score calculated?
Risk Score
Focuses on recent activity (last 24 months) weighted by severity:
- Critical CVE = 4 points
- High CVE = 2 points
- Medium CVE = 1 point
- Low CVE = 0 points
A component with 300 old CVEs that have all been patched scores 0. One actively receiving critical CVEs scores high.
Trend
Compares CVE activity in the last 12 months vs the prior 12 months:
- ↑ Increasing — more CVEs recently, worsening
- ↓ Decreasing — fewer CVEs recently, improving
- → Stable — no change
Min Safe Version
The highest fixed version referenced across all CVEs for that package. ⚠ No fix means OSV records no fixed version for one or more CVEs.