Definition
What is OSV?
Google's open, purl-indexed database and API aggregating vulnerability advisories across open-source ecosystems.
A distributed vulnerability database for open source with a precise, machine-readable schema (OSV schema) and a public API that accepts package URLs and versions. It aggregates ecosystem advisories including the GitHub Advisory Database, PyPA, RustSec, Go and Linux distributions, and returns affected version ranges rather than free-text descriptions, which makes automated SBOM matching reliable.
Reference: osv.dev
Updated 2026-09-12 · Paraphrase for orientation, not legal advice.