> ## Documentation Index
> Fetch the complete documentation index at: https://docs.plerion.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Vulnerabilities

> Plerion's CWPP scanner will report on vulnerabilities from the following software components.

#### OS security updates

* Linux kernel and kernel package vulnerabilities.
* Microsoft Windows vulnerabilities related to out-of-date versions, missing security updates or security patches.

#### OS packages

Workload scanner will report on packages provided by vendors (e.g. Ubuntu, RedHat) and OS package managers (e.g. `yum`, `apk`, `dpkg`, etc.).

<Note>
  Workload scanner does not report on self-compiled packages or binaries.
</Note>

| OS | Security Advisory |
| - | - |
| AlmaLinux | [AlmaLinux Product Errata](https://errata.almalinux.org/) |
| Alpine Linux | [Alpine Security Database](https://secdb.alpinelinux.org/) |
| Amazon Linux | [Amazon Linux Security Center](https://alas.aws.amazon.com/) |
| Arch Linux | [Vulnerable issues - Arch Linux](https://security.archlinux.org/) |
| Azure Linux | [Azure Linux Vulnerability Data](https://github.com/microsoft/AzureLinuxVulnerabilityData/) |
| Chainguard/Wolfi Linux | [Chainguard Security Advisories](https://images.chainguard.dev/security/) |
| Debian | [Debian Security Bug Tracker](https://security-tracker.debian.org/tracker/) |
| Microsoft Windows | [Microsoft Security Update Guide](https://msrc.microsoft.com/update-guide/vulnerability) |
| OpenSUSE | [OpenSUSE Security CVRF](https://www.suse.com/support/security/cvrf/) |
| Oracle Linux | [Oracle Linux Security](https://linux.oracle.com/security/) |
| Photon OS | [Photon Security Advisories](https://github.com/vmware/photon/wiki/Security-Advisories) |
| RHEL/CentOS | [Red Hat Security Data](https://access.redhat.com/security/data) |
| Rocky Linux | [Rocky Enterprise Software Foundation Product Errata](https://errata.rockylinux.org/) |
| Ubuntu | [Ubuntu Security CVE Reports](https://ubuntu.com/security/cves) |

#### Programming language specific packages

Workload scanner will report on packages managed by language specific package managers (e.g. `npm`, `yarn`, `pip`, `gem`, etc.) and the related manifest files and post-build artifacts (e.g. `package.json`, `package-lock.json`, `yarn.lock`, `Pipfile.lock`, `requirements.txt`, `Gemfile.lock`, `gemspec`, etc.).

| Language | Security Advisory |
| - | - |
| C/C++ | [GitLab Advisory Database Open Source Edition](https://gitlab.com/gitlab-org/advisories-community) |
| Dart | [GitHub Advisory Database (Pub)](https://github.com/advisories?query=ecosystem%3Apub) |
| Elixir | [GitHub Advisory Database (Erlang)](https://github.com/advisories?query=ecosystem%3Aerlang) |
| Go | [Go Vulnerability Database](https://pkg.go.dev/vuln/) |
| Java | [GitHub Advisory Database (Maven)](https://github.com/advisories?query=ecosystem%3Amaven) |
| JuliaLang | [GitHub Advisory Database (JuliaLang)](https://github.com/advisories?query=julialang) |
| .NET | [GitHub Advisory Database (NuGet)](https://github.com/advisories?query=ecosystem%3Anuget) |
| Node.js | [Node.js Ecosystem Security Working Group](https://github.com/nodejs/security-wg) |
| PHP | [PHP Security Advisories Database](https://github.com/FriendsOfPHP/security-advisories) |
| Python | [Python Software Foundation Advisory Database](https://github.com/psf/advisory-database) |
| Ruby | [Ruby Security Advisory Database](https://images.chainguard.dev/security/) |
| Rust | [Rust Security Advisory Database](https://rustsec.org/) |
| Swift | [GitHub Advisory Database](https://github.com/advisories?query=ecosystem%3Aswift) |

#### Exploit prediction scores

Plerion adds the Exploit Prediction Scoring System (EPSS) score published by FIRST to each vulnerability it reports. See [EPSS scores](/guides/platform/vulnerabilities#epss-scores).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.