The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
⚡ Executive Summary & Quick Facts
Authoritative Sourcecve-bin-tool is cve-bin-tool is an open-source project written in Python: The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions..
“According to real-time open source telemetry recorded on GitHubRepo.cloud (as of November 2026), ossf/cve-bin-tool has accumulated 1,805 GitHub stars and 701 forks. It is written in Python, licensed under GPL-3.0, and ranks #5,991 globally. It is actively maintained with the latest commit recorded on Nov 1, 2026.”
| Repository | ossf/cve-bin-tool ↗ |
|---|---|
| Primary Category | cve |
| Language & Stack | Python |
| Software License | GPL-3.0 |
| Community Traction | ★ 1.8K stars · ⑂ 701 forks · #5,991 globally |
| Maintenance | ● Active (Last commit: Nov 1, 2026) · 248 open issues |
| Target Audience | Developers and engineering teams building with Python, seeking reliable, tested, and actively maintained tooling for production workloads. |
🛡️ Repository Maintenance & Health Audit (2026)
Health Score: 97/100 · Grade A+Yes, cve-bin-tool is actively maintained. Continuous telemetry recorded the last code commit on Nov 1, 2026 (11 days ago). Supported by 1,805 stars and 701 community forks, this repository holds a calculated health index of 97/100, reflecting very active (commits within last 14 days) and healthy issue cadence.
Star History
Add Live Star History & Verified Badges to README.md
Keep your repository README looking professional and dynamic. As our continuous crawler records new stars, these official SVG badges update in real time with zero maintenance.
Renders your high-resolution star trajectory chart right inside your GitHub README or project docs.
[](https://githubrepo.cloud/repo/ossf/cve-bin-tool?utm_source=readme_chart)Compact badges for your README header. Real-time stars, velocity, health audit, and rank.
[](https://githubrepo.cloud/repo/ossf/cve-bin-tool?utm_source=readme_badge) [](https://githubrepo.cloud/repo/ossf/cve-bin-tool?utm_source=readme_badge) [](https://githubrepo.cloud/repo/ossf/cve-bin-tool?utm_source=readme_badge) [](https://githubrepo.cloud/repo/ossf/cve-bin-tool?utm_source=readme_badge) [](https://githubrepo.cloud/repo/ossf/cve-bin-tool?utm_source=readme_badge)Momentum
+37
STARS · LAST 30 DAYS
1
PER DAY
#860
MOST-STARRED Python
| Window | 7 days | 30 days | 90 days |
|---|---|---|---|
| Stars gained | +0 | +37 | +90 |
| Per day | 1 | 1 | 1 |
| Forks gained | +0 | +47 | +35 |
cve-bin-tool gained 37 stars in the last 30 days, about 1 a day, and now has 1.8K. It is about 8 years old and has averaged roughly 226 stars a year. It ranks #860 among Python repositories and #5,991 across all languages on GitHubRepo.
Trending Record
41
DAYS ON TRENDING
#1774
BEST RANK
Sep 28, 2026
FIRST APPEARANCE
Active
STATUS TODAY
cve-bin-tool has maintained a continuous presence across global trending indexes, peaking at #1774. Below is the 30-day activity profile:
💡 Overview
cve-bin-tool is an open-source project written in Python: The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
Engineered for speed, consistency, and developer ease, it solves common hurdles in cve, cvss, devsecops. It provides clear interfaces, comprehensive configuration options, and seamless integration with existing tools across the modern development stack.
⚡ Key Features
Optimized execution pipeline written in Python for predictable speed.
Zero-friction configuration with comprehensive sensible defaults out of the box.
Cross-platform runtime support across Linux, macOS, and Windows environments.
Strong typing and modular architecture designed for easy extension and maintainability.
Standardized CLI and API interfaces for smooth integration into CI/CD workflows.
Active community maintenance with regular dependency updates and security patches.
📥 Installation
$ pip install cve-bin-tool⚙ System Requirements
Platforms
- • macOS
- • Linux
- • Windows
Runtime & Dependencies
Python >= 3.9, pip, virtualenv
Architecture
x86_64, ARM64 (Apple Silicon & Graviton)
🧠 How It Works
cve-bin-tool coordinates its core functionality through a modular Python pipeline. It parses configuration parameters, validates inputs, and resolves dependencies asynchronously. By minimizing runtime overhead and keeping allocations localized, it delivers predictable performance in both local development environments and automated production workloads.
🎯 Production Use Cases
Command-Line Automation
Execute automated build, deployment, and maintenance tasks directly from the terminal.
CI/CD Workflow Integration
Run non-interactive validation checks in GitHub Actions, GitLab CI, or local pre-commit hooks.
Developer Environment Setup
Standardize local engineering workstations with single-binary utility commands.
Scripting & Pipeline Orchestration
Chain complex multi-stage scripts with reliable error reporting and exits.
🚀 Getting Started
Install cve-bin-tool using your package manager: `pip install cve-bin-tool`
Initialize your project workspace or configuration file for cve-bin-tool.
Import cve-bin-tool into your codebase or invoke it directly from your terminal.
Execute your test suite or run `cve-bin-tool --help` to verify successful setup.
👍 Strengths
⚠️ Considerations
⇄ Alternatives & Direct Competitors
👥 Who Should Use This
Developers and engineering teams building with Python, seeking reliable, tested, and actively maintained tooling for production workloads.
🏆 Nearby in the Rankings
ossf/cve-bin-tool is currently ranked #5,991 by stars across every repository tracked on GitHubRepo. These are adjacent projects:
| Rank | Repository | Language | Stars | Action |
|---|---|---|---|---|
| #5,986 | datafaker-net/datafaker | Java | ★ 1.8K | Compare ↗ |
| #5,986 | Planetable/Planet | Swift | ★ 1.8K | Compare ↗ |
| #5,986 | relaticle/relaticle | PHP | ★ 1.8K | Compare ↗ |
| #5,989 | sublimelsp/LSP | Python | ★ 1.8K | Compare ↗ |
| #5,989 | herdrdev/herdr-app | Rust | ★ 1.8K | Compare ↗ |
| #5,991 | ossf/cve-bin-tool This Project | Python | ★ 1.8K | |
| #5,991 | acaudwell/Logstalgia | C++ | ★ 1.8K | Compare ↗ |
| #5,993 | ExpediaGroup/graphql-kotlin | Kotlin | ★ 1.8K | Compare ↗ |
| #5,993 | bytecodealliance/wasm-tools | Rust | ★ 1.8K | Compare ↗ |
| #5,993 | AnalyseDeCircuit/oxideterm | Rust | ★ 1.8K | Compare ↗ |
| #5,996 | exercism/rust | Rust | ★ 1.8K | Compare ↗ |
Frequently Asked Questions
What does cve-bin-tool do? +
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
Is cve-bin-tool actively maintained in 2026? +
Yes, cve-bin-tool is actively maintained. The latest code push was recorded on Nov 1, 2026 (11 days ago). It holds a calculated Maintenance Health Score of 97/100 (A+ rating) with 1,805 stars and 248 open issues.
What language is cve-bin-tool written in? +
The primary language is Python. Topics include: cve, cvss, devsecops, hacktoberfest, python.
How many stars does cve-bin-tool have? +
cve-bin-tool has 1,805 stars and 701 forks on GitHub.
How does cve-bin-tool rank among GitHub repositories? +
With 1,805 stars, ossf/cve-bin-tool is ranked #5,991 globally across all repositories tracked on GitHubRepo and #860 among Python projects.
What license is cve-bin-tool distributed under? +
The repository reports a GPL-3.0 license. Always verify the repository LICENSE file for legal terms.
