SBOM vulnerability scanner powered by the National Vulnerability Database

This project scans your SBOM for vulnerabilities.

It translates the component purls into CPEs via PURL2CPE

It then queries the NVD for vulnerabilities and then displays as a pretty tabular report.