OSV.dev / Advisory by ID

One OSV vulnerability record by its own OSV id (GHSA-..., PYSEC-..., RUSTSEC-..., GO-..., OSV-..., MAL-..., or a CVE-... id only when OSV stores a record under that exact id), direct from OSV.dev's GET /v1/vulns/{id}. Ids are case-sensitive. This is NOT a CVE lookup: for a CVE id OSV holds only under an alias, it answers 404 "Bug not found, but the following aliases were: GHSA-..." (google/osv.dev issue #1016, maintainer reply 2026-07-06); use vuln.cve.get for CVE ids. Data credit: records keep their source's license, mostly CC-BY 4.0 or CC0; see https://google.github.io/osv.dev/data/. Chainguard and Wolfi records (CC-BY-NC-ND 4.0) are not served: their licence forbids commercial use.