Which CVEs affect your software version?

Look up the CVEs affecting a specific version of a product. Results separate what the advisories positively assert from what could not be evaluated — an empty list is never presented as an all-clear.

Pick a product, then narrow by the version you run. Every result says why it is listed: the advisory names your version verbatim, or your version falls inside a range parsed from it.

Version data upstream is uneven. Around a sixth of the version strings in this corpus are commit hashes, hardware SKUs or prose that cannot be ordered against a range, so those CVEs are reported separately as unevaluated rather than being silently dropped or silently included. Neither bucket is a claim of safety on its own.