VAREXIS-INDEX · External source collection
What does the advisory actually say?
Look up an advisory or package, inspect its source conditions and save the version you used. These are attributed upstream assertions, not VAREXIS security findings.
303,175 affected-package records from 277,563 advisory IDs, captured 2026-10-08. Includes 1,978 withdrawn records for historical context; 12 quarantined records are excluded. Aliases may refer to the same vulnerability; separate rows can describe different affected objects within one advisory.
This is a frozen snapshot. Later corrections are not automatically fetched. No match does not mean safe. Version ranges and deployment applicability are not evaluated.
Find a source record
Free source data; optional saved delivery.
The full source projection and its hash are free. The underlying advisories are also available from OSV and their publishers. You can save the free response yourself. An optional £5 purchase saves one selected record on the server; £19 also provides an unsigned payment and delivery receipt. Prices exclude applicable VAT. Subscriptions use the existing retrieval allowances. Payment adds no security assessment or private evidence.
Pricing · Lookup contract · Sources and licences · Connect through MCP
The reviewed evidence catalogue has its own counts and questions. Bulk assertions are counted separately and do not increase its experiment or question totals.
