◑Open Security Research ArchiveOSRA

Search disclosures11k+ bug-bounty & audit reports OSS vulnerabilitiesOSV.dev + GitHub-reviewed advisories SourcesEvery dataset behind the archive

Knowledge baseSecurity passages & payloads CWECommon Weakness Enumeration CAPECCommon Attack Pattern Enumeration

APIFree JSON endpoints MCP serverModel Context Protocol access Source codeThis project on GitHub

Browse

Search disclosures11k+ bug-bounty & audit reports OSS vulnerabilitiesOSV.dev + GitHub-reviewed advisories SourcesEvery dataset behind the archive

Reference

Knowledge baseSecurity passages & payloads CWECommon Weakness Enumeration CAPECCommon Attack Pattern Enumeration

InsightsThe archive in numbers

Developers

APIFree JSON endpoints MCP serverModel Context Protocol access Source codeThis project on GitHub

← Back to search

CWE — Common Weakness Enumeration

Loading…

MITRE CWE — used under MITRE’s terms of use (non-exclusive, royalty-free, attribution required). © The MITRE Corporation.

Disclosure records are factual metadata + short excerpts linking to the canonical source. Knowledge passages retain their upstream license (OWASP CC BY-SA, PayloadsAllTheThings MIT, …). See NOTICE. Not affiliated with any bug bounty platform.