Vulnerability statistics

Live from the Stateward advisory database. Updated continuously.

Headline

Advisories tracked
18,492
Indexed pages
16,570
Exploited in the wild (CISA KEV)
401 (2.2%)
Tied to ransomware
0
With EPSS score
13,187
High exploit probability (EPSS ≥ 50%)
267
Curated deep-dives
284

By ecosystem

npm
2,505
Packagist
2,500
crates.io
2,497
Go
2,496
Maven
2,496
NuGet
2,495
PyPI
2,465
RubyGems
792
Web3 · Ethereum
42
Web app
13
Web3 · CEX
11
API
7

Most common weakness types (CWE)

Most-vulnerable packages

Highest exploit probability right now (EPSS)

These numbers come from the same engine that reviews your code.

Scan my repo

Summarize with AI

ChatGPTClaudePerplexity

Sources: CISA KEV (public domain), OSV.dev & GitHub Advisory Database (CC-BY-4.0), FIRST EPSS, NVD/CWE (public domain). Served live from the Stateward advisory database.