Skip to content

Tags: google/osv.dev

Tags

v2026.01.13

Toggle v2026.01.13's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
feat: split off oss-fuzz importer and worker onto their own (#4512)

silo-ing off the oss-fuzz processing so that the special logic it does
can continue working while we make bigger changes to the importer and
worker.
I've given them their own cluster to run in, so we can monitor them
separately (and to make an eventual moving off of the oss-vdb google
cloud project easier).

This is only being deployed to production, since the clusterfuzz pub/sub
only publishes there. We need to be very careful not to impact other
things when we're doing this.

v2026.01.06

Toggle v2026.01.06's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
docs: Update REST API docs to clarify HEAD request (#4565)

v2025.12.10

Toggle v2025.12.10's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
fix: remove `index-url` from poetry requirements.txt (#4481)

We don't want this to talk to artifact registry
(I'm not 100% sure if this will work as-is)

v2025.12.04

Toggle v2025.12.04's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
test: update apitester snapshots (#4457)

The snapshots have changed, probably due to OSV advisories being
changed.
Please review the differences to make sure that they're expected!

v2025.11.25

Toggle v2025.11.25's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
fix: add vscode ecosystem and kubernetes (#4393)

v2025.11.19

Toggle v2025.11.19's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
test: update vulnerability IDs in integration test (#4357)

v2025.11.11

Toggle v2025.11.11's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
chore: use `storage.googlepis.com/[bucket]` URLs everywhere (#4321)

instead of `[bucket].storage.googleapis.com`, per
https://docs.cloud.google.com/storage/docs/access-public-data#api-link

v2025.11.04

Toggle v2025.11.04's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
fix: limit number of search indices added to Bugs (#4285)

[openSUSE-SU-2024:12948-1](https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1)
has so many upstream vulns that it made >6500 search_indices, which
(combined with the other fields) was too many indexed properties for
datastore to handle.
Put a limit on the number of search indices populated from
alias/upstreams to avoid this problem.

v2025.10.28

Toggle v2025.10.28's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Add EEF CNA to Test Sources (#4192)

See #4191

v2025.10.21

Toggle v2025.10.21's commit message

Partially verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
We cannot verify signatures from co-authors, and some of the co-authors attributed to this commit require their commits to be signed.
docs(blog): fix broken external link (#4133)

This replaces the yuzu link in [Introducing broad C/C++ vulnerability
management
support](https://osv.dev/blog/posts/introducing-broad-c-c++-support/)
with an archived version, since the original repository is no longer
available. The example steps have also been updated to reflect the
current flow verified locally.

This should fix a `404` reported by the markdown-link-check action.  
There's still `429`/`403` issues but those can be fixed in a separate
PR.

---------

Co-authored-by: Rex P <[email protected]>
Co-authored-by: Xueqin Cui <[email protected]>