cyberstars / tools / cve-bin-tool
CVE Binary Tool
—Scan binaries and SBOMs for known vulnerable components
Tool from the OpenSSF that scans binaries and filesystems for over 350 known-vulnerable components such as OpenSSL, libpng and expat, and can also check an SBOM or component list against vulnerability databases. It reports associated CVEs to support supply-chain and release security.