> ## Documentation Index
> Fetch the complete documentation index at: https://docs.plerion.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Vulnerabilities

> Plerion's CWPP scanner will report on vulnerabilities from the following software components.

#### OS security updates

* Linux kernel and kernel package vulnerabilities.
* Microsoft Windows vulnerabilities related to out-of-date versions, missing security updates or security patches.

#### OS packages

Workload scanner will report on packages provided by vendors (e.g. Ubuntu, RedHat) and OS package managers (e.g. `yum`, `apk`, `dpkg`, etc.).

<Note>
  Workload scanner does not report on self-compiled packages or binaries.
</Note>

| OS                     | Security Advisory                                                                           |
| ---------------------- | ------------------------------------------------------------------------------------------- |
| AlmaLinux              | [AlmaLinux Product Errata](https://errata.almalinux.org/)                                   |
| Alpine Linux           | [Alpine Security Database](https://secdb.alpinelinux.org/)                                  |
| Amazon Linux           | [Amazon Linux Security Center](https://alas.aws.amazon.com/)                                |
| Arch Linux             | [Vulnerable issues - Arch Linux](https://security.archlinux.org/)                           |
| Azure Linux            | [Azure Linux Vulnerability Data](https://github.com/microsoft/AzureLinuxVulnerabilityData/) |
| Chainguard/Wolfi Linux | [Chainguard Security Advisories](https://images.chainguard.dev/security/)                   |
| Debian                 | [Debian Security Bug Tracker](https://security-tracker.debian.org/tracker/)                 |
| Microsoft Windows      | [Microsoft Security Update Guide](https://msrc.microsoft.com/update-guide/vulnerability)    |
| OpenSUSE               | [OpenSUSE Security CVRF](https://www.suse.com/support/security/cvrf/)                       |
| Oracle Linux           | [Oracle Linux Security](https://linux.oracle.com/security/)                                 |
| Photon OS              | [Photon Security Advisories](https://github.com/vmware/photon/wiki/Security-Advisories)     |
| RHEL/CentOS            | [Red Hat Security Data](https://access.redhat.com/security/data)                            |
| Rocky Linux            | [Rocky Enterprise Software Foundation Product Errata](https://errata.rockylinux.org/)       |
| Ubuntu                 | [Ubuntu Security CVE Reports](https://ubuntu.com/security/cves)                             |

#### Programming language specific packages

Workload scanner will report on packages managed by language specific package managers (e.g. `npm`, `yarn`, `pip`, `gem`, etc.) and the related manifest files and post-build artifacts (e.g. `package.json`, `package-lock.json`, `yarn.lock`, `Pipfile.lock`, `requirements.txt`, `Gemfile.lock`, `gemspec`, etc.).

| Language  | Security Advisory                                                                                  |
| --------- | -------------------------------------------------------------------------------------------------- |
| C/C++     | [GitLab Advisory Database Open Source Edition](https://gitlab.com/gitlab-org/advisories-community) |
| Dart      | [GitHub Advisory Database (Pub)](https://github.com/advisories?query=ecosystem%3Apub)              |
| Elixir    | [GitHub Advisory Database (Erlang)](https://github.com/advisories?query=ecosystem%3Aerlang)        |
| Go        | [Go Vulnerability Database](https://pkg.go.dev/vuln/)                                              |
| Java      | [GitHub Advisory Database (Maven)](https://github.com/advisories?query=ecosystem%3Amaven)          |
| JuliaLang | [GitHub Advisory Database (JuliaLang)](https://github.com/advisories?query=julialang)              |
| .NET      | [GitHub Advisory Database (NuGet)](https://github.com/advisories?query=ecosystem%3Anuget)          |
| Node.js   | [Node.js Ecosystem Security Working Group](https://github.com/nodejs/security-wg)                  |
| PHP       | [PHP Security Advisories Database](https://github.com/FriendsOfPHP/security-advisories)            |
| Python    | [Python Software Foundation Advisory Database](https://github.com/psf/advisory-database)           |
| Ruby      | [Ruby Security Advisory Database](https://images.chainguard.dev/security/)                         |
| Rust      | [Rust Security Advisory Database](https://rustsec.org/)                                            |
| Swift     | [GitHub Advisory Database](https://github.com/advisories?query=ecosystem%3Aswift)                  |