# OS

| OS             | Source                                                                              |
| ---------------| ---------------------------------------- |
| Arch Linux     | [Vulnerable Issues][arch]                |
| Alpine Linux   | [secdb][alpine]                          |
| Amazon Linux 1 | [Amazon Linux Security Center][amazon1]  |
| Amazon Linux 2 | [Amazon Linux Security Center][amazon2]  |
| Debian         | [Security Bug Tracker][debian-tracker]   |
|                | [OVAL][debian-oval]                      |
| Ubuntu         | [Ubuntu CVE Tracker][ubuntu]             |
| RHEL/CentOS    | [OVAL][rhel-oval]                        |
|                | [Security Data][rhel-api]                |
| AlmaLinux      | [AlmaLinux Product Errata][alma]         |
| Rocky Linux    | [Rocky Linux UpdateInfo][rocky]          |
| Oracle Linux   | [OVAL][oracle]                           |
| CBL-Mariner    | [OVAL][mariner]                          |
| OpenSUSE/SLES	 | [CVRF][suse]                             |
| Photon OS      | [Photon Security Advisory][photon]       |

# Programming Language

| Language                     | Source                                              | Commercial Use  | Delay[^1]|
| ---------------------------- | ----------------------------------------------------|:---------------:|:--------:|
| PHP                          | [PHP Security Advisories Database][php]             | ✅              | -        |
|                              | [GitHub Advisory Database (Composer)][php-ghsa]     | ✅              | -        |
| Python                       | [GitHub Advisory Database (pip)][python-ghsa]       | ✅              | -        |
|                              | [Open Source Vulnerabilities (PyPI)][python-osv]    | ✅              | -        |
| Ruby                         | [Ruby Advisory Database][ruby]                      | ✅              | -        |
|                              | [GitHub Advisory Database (RubyGems)][ruby-ghsa]    | ✅              | -        |
| Node.js                      | [Ecosystem Security Working Group][nodejs]          | ✅              | -        |
|                              | [GitHub Advisory Database (npm)][nodejs-ghsa]       | ✅              | -        |
| Java                         | [GitLab Advisories Community][gitlab]               | ✅              | 1 month  |
|                              | [GitHub Advisory Database (Maven)][java-ghsa]       | ✅              | -        |
| Go                           | [GitLab Advisories Community][gitlab]               | ✅              | 1 month  |
|                              | [The Go Vulnerability Database][go]                 | ✅              | -        |
| Rust                         | [Open Source Vulnerabilities (crates.io)][rust-osv] | ✅              | -        |
| .NET                         | [GitHub Advisory Database (NuGet)][dotnet-ghsa]     | ✅              | -        |

[^1]: Intentional delay between vulnerability disclosure and registration in the DB

# Others

| Name                            | Source     |  
| --------------------------------|------------|
| National Vulnerability Database | [NVD][nvd] | 

[arch]: https://security.archlinux.org/
[alpine]: https://secdb.alpinelinux.org/
[amazon1]: https://alas.aws.amazon.com/
[amazon2]: https://alas.aws.amazon.com/alas2.html
[debian-tracker]: https://security-tracker.debian.org/tracker/
[debian-oval]: https://www.debian.org/security/oval/
[ubuntu]: https://ubuntu.com/security/cve
[rhel-oval]: https://www.redhat.com/security/data/oval/v2/
[rhel-api]: https://www.redhat.com/security/data/metrics/
[alma]: https://errata.almalinux.org/
[rocky]: https://download.rockylinux.org/pub/rocky/
[oracle]: https://linux.oracle.com/security/oval/
[suse]: http://ftp.suse.com/pub/projects/security/cvrf/
[photon]: https://packages.vmware.com/photon/photon_cve_metadata/
[mariner]: https://github.com/microsoft/CBL-MarinerVulnerabilityData/

[php-ghsa]: https://github.com/advisories?query=ecosystem%3Acomposer
[python-ghsa]: https://github.com/advisories?query=ecosystem%3Apip
[ruby-ghsa]: https://github.com/advisories?query=ecosystem%3Arubygems
[nodejs-ghsa]: https://github.com/advisories?query=ecosystem%3Anpm
[java-ghsa]: https://github.com/advisories?query=ecosystem%3Amaven
[dotnet-ghsa]: https://github.com/advisories?query=ecosystem%3Anuget

[php]: https://github.com/FriendsOfPHP/security-advisories
[ruby]: https://github.com/rubysec/ruby-advisory-db
[nodejs]: https://github.com/nodejs/security-wg
[gitlab]: https://gitlab.com/gitlab-org/advisories-community
[go]: https://github.com/golang/vulndb

[python-osv]: https://osv.dev/list?q=&ecosystem=PyPI
[rust-osv]: https://osv.dev/list?q=&ecosystem=crates.io

[nvd]: https://nvd.nist.gov/
