Metacrafter Registry

Datatypes

OSV vulnerability ID

ID osv_id

DatatypeNot PIIidentifierDraft

This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).

Identifier of an entry in the Open Source Vulnerability (OSV) format that OSV.dev aggregates: the prefix of the entry's home database, a hyphen and an id in that database's own format, for example PYSEC-2021-63, RUSTSEC-2021-0003, GO-2022-0969 or GHSA-... Local databases that OSV.dev does not aggregate use the prefix x_. Ids contain only ASCII letters, digits and the characters : _ . -. The regexp lists the database prefixes that the OSV JSON schema defined in November 2026; new databases are added over time. CVE and GHSA identifiers are also OSV ids.

Categories
Software development
Countries
Global (not tied to a country)
Languages
Common to most languages
Quality
75/100 · missing: mapping (Wikidata, Schema.org, ...), translation, detector coverage
Metacrafter rules
no detection rule yet
Supported by tools
no tool record lists this type yet

Regular expression

^(?:x_|(?:ASB-A|PUB-A|ALPINE|ALSA|ALBA|ALEA|AZL|BELL|BIT|BREW|CGA|CLEANSTART|CLSA|CURL|CVE|DEBIAN|DHI|DRUPAL|DSA|DLA|ELA|DTSA|ECHO|EEF|FreeBSD|GHSA|GO|GSD|HSEC|JLSEC|KUBE|LBSEC|LSN|MAL|MINI|MGASA|OESA|OSEC|OSV|openSUSE-SU|PHSA|PSF|PYSEC|RHBA|RHEA|RHLW|RHSA|RLSA|RXSA|RPI|RSEC|ROOT|RUSTSEC|SUSE-[SRFO]U|UBUNTU|USN|V8|VCPKG)-)[A-Za-z0-9:_.-]+$

Python re syntax.

Examples

ValueDescription
OSV-2020-111Example in the OSV schema documentation
PYSEC-2021-63Entry for the cryptography package on PyPI
RUSTSEC-2021-0003RustSec entry for smallvec
GO-2022-0969Go vulnerability database entry for net/http
x_CUSTOM-0001Local database, example in the OSV schema documentation
FOO-2021-0001 invalidFOO is not a defined database prefix

Sources

Use this record