https://www.cvedetails.com/  

Retire.js has these parts: A command line scanner A grunt plugin A Chrome extension A Firefox extension Burp and ZAP plugin https://retirejs.github.io/retire.js/

https://github.com/aquasecurity/trivy Trivy (pronunciation) is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues.

https://github.com/anchore/grype A vulnerability scanner for container images and filesystems. Easily install the binary to try it out. Works with Syft, the powerful SBOM (software bill of materials) tool for container images and filesystems.

https://dependencytrack.org/ Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track takes a unique and highly beneficial approach by leveraging the capabilities of Software Bill of Materials (SBOM). This approach provides capabilities that traditional Software Composition Analysis (SCA) solutions cannot achieve.