Security · security identity · OpenSSF

OSV Schema

The OSV Schema is an OpenSSF JSON format for describing open-source vulnerabilities, with precise affected-version ranges expressed against package ecosystems. It gives vulnerability data a machine-readable shape that can be matched against a dependency list without heuristics.

ossf.github.io/osv-schema/The standard

OpenSSFGoverning body · Linux Foundation

2021First published

StableCurrent version

Yes — JSON SchemaMachine-readable schema · open

0providers in the catalog

Also known as Open Source Vulnerability format, OSV.

Providers that carry OSV Schema 0

No provider in the catalog carries this standard as a tag yet. That is a statement about the catalog's tagging, not about adoption: a provider that implements OSV Schema and says so in its APIs.json profile appears here on the next build. Add or correct a listing.

Read from the API Evangelist standards directory, facts verified 2026-08-17. Provider links come from the catalog's own identity tags and are rebuilt nightly. If this page is wrong about a standard or a provider, say so.