Definition

What is OSV?

Google's open, purl-indexed database and API aggregating vulnerability advisories across open-source ecosystems.

A distributed vulnerability database for open source with a precise, machine-readable schema (OSV schema) and a public API that accepts package URLs and versions. It aggregates ecosystem advisories including the GitHub Advisory Database, PyPA, RustSec, Go and Linux distributions, and returns affected version ranges rather than free-text descriptions, which makes automated SBOM matching reliable.

Reference: osv.dev

Updated 2026-09-12 · Paraphrase for orientation, not legal advice.

Related terms

See the term as a workflow.

Vellaci turns each of these definitions into a record with an owner, a timestamp and evidence.