Issues

• fix: cveb.in mirror not updating

  bug
  ossf/cve-bin-tool#5906 · Filter by author c-mehring opened on Sep 8, 2026
  2

• bug: Java parser ignores groupId, so an internal artifact named core is reported as Drupal core, MobileIron Core and ONLYOFFICE core

  ossf/cve-bin-tool#5904 · Filter by author Eljees opened on Sep 7, 2026

• perf: checker performance idea by removing redundant regex

  enhancement
  ossf/cve-bin-tool#5902 · Filter by author EternalDreamer01 opened on Sep 5, 2026

• Typo in CVE Binary Tool Documentation link on Wiki

  ossf/cve-bin-tool#5881 · Filter by author adityap-codes07 opened on Aug 16, 2026

• fix: generated VEX outputs contain invalid CSAF fields and unresolved CycloneDX references

  bug
  ossf/cve-bin-tool#5846 · Filter by author AenganZ opened on Jul 20, 2026
  2

• libraries not fully handled

  bug
  ossf/cve-bin-tool#5840 · Filter by author EternalDreamer01 opened on Jul 16, 2026
  2

• fix: CycloneDX SBOM with externalReferences that are not related to CPEs, generate new

  bug
  ossf/cve-bin-tool#5827 · Filter by author QSchulz opened on Jul 9, 2026

• fix: [bug description]AttributeError: can't set attributeAttributeError: can't set attribute" in cve-bin-tool/cve_bin_tool/output_engine /console.py

  bug
  ossf/cve-bin-tool#5792 · Filter by author jni2000 opened on Jun 19, 2026
  1

• fix: CVE Downloading stop at 60%

  awaiting submitterbug
  ossf/cve-bin-tool#5779 · Filter by author Thierry4135 opened on Jun 11, 2026
  5

• fix: OSV database update consumes excessive resources and process is terminated; GitLab Advisory sync intermittently fails

  bug
  ossf/cve-bin-tool#5771 · Filter by author ZBushell opened on Jun 6, 2026
  5

• fix: generated VEX outputs lose CycloneDX BOM component identity

  bug
  ossf/cve-bin-tool#5723 · Filter by author AenganZ opened on Apr 22, 2026
  2

• fix: all tests in test_nvd_api.py are skipped

  bugCItests
  ossf/cve-bin-tool#5710 · Filter by author alex-ter opened on Apr 18, 2026
  8

• fix: No CVEs from Redhat source in output

  bug
  ossf/cve-bin-tool#5707 · Filter by author marcelkauf opened on Apr 17, 2026
  1

• Cve output different result depending on cve-bin-tool version?

  bug
  ossf/cve-bin-tool#5694 · Filter by author hdxtreeem opened on Apr 13, 2026
  2

• fix: test_json.py is not being run

  bugCItests
  ossf/cve-bin-tool#5689 · Filter by author alex-ter opened on Apr 12, 2026
  3

  

• discussion: CVE-bin-tool monthly meeting interest check

  discussion
  ossf/cve-bin-tool#5687 · Filter by author terriko opened on Apr 12, 2026
  5

• feat(doc): move to PEP621 after drop of python 3.10

  blockedenhancementpython
  ossf/cve-bin-tool#5605 · Filter by author ffontaine opened on Mar 9, 2026
  1

• feat: optimizations for OSV data fetching

  enhancement
  ossf/cve-bin-tool#5569 · Filter by author alex-ter opened on Feb 28, 2026

• fix: Missing CVEs owing to inconsistency between cve db data model and sql query specifying exact versions

  bug
  ossf/cve-bin-tool#5517 · Filter by author tomdottom opened on Jan 30, 2026
  1

• Offline vex report from spdx input using NVD json mirror?

  ossf/cve-bin-tool#5502 · Filter by author tom--pollard opened on Jan 16, 2026

• fix:Duplicated EPSS data in database

  buggood first issue
  ossf/cve-bin-tool#5490 · Filter by author anthonyharrison opened on Jan 8, 2026
  5

• fix: some URLs updated from "intel" to "ossf" are now broken

  bug
  ossf/cve-bin-tool#5478 · Filter by author alex-ter opened on Jan 4, 2026
  6

• fix: android libraries not supported

  bug
  ossf/cve-bin-tool#5441 · Filter by author EternalDreamer01 opened on Dec 10, 2025
  6

• bug: inconsistent CVE findings when using SBOM generated for the same software as input file

  bug
  ossf/cve-bin-tool#5419 · Filter by author jni2000 opened on Nov 15, 2025
  1

• ImportError: sys.meta_path is None, Python is likely shutting down

  ossf/cve-bin-tool#5403 · Filter by author mbiebl opened on Oct 24, 2025
  6