CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

security/vuls 0.42.0_1

Agentless vulnerability scanner

0
unaddressed
0
VuXML only
0
fixed
0
open problem reports

Port info

Maintainer
girgen@FreeBSD.org
Packages
latest: 0.42.0_1
Upstream
up to date
Last update
to 0.42.0_1 · d81b7ba3c3
Quarterly
2026Q4: 0.41.0_2 · last MFH 60647eff54
WWW
https://vuls.io
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install vuls
installs 0.42.0_1 from latest; from quarterly (2026Q4) 0.41.0_2
Port
# cd /usr/ports/security/vuls && make install clean
Size
20 MiB download · 89 MiB installed
Depends on
nothing
License
GPLv3+
Creates
user vuls, group vuls
pkg-message
Shown after installing
Congratulations, you have installed vuls!

To use vuls, install vuls on all your machines and activate the daily
periodic script using

sysrc -f /etc/periodic.conf daily_vuls_enable="YES"

and perhaps also add some config parameters; check the information header of
/usr/local/etc/periodic/daily/vuls.

Configure vuls by editing /usr/local/etc/vuls/config.toml.

Vuls uses the port security/go-cve-dictionary to look up information about
packages' CVEs. Install that port separately somewhere in your infrastructure,
start the service and point vuls to it for CVE queries by editing vuls'
configuration in /usr/local/etc/vuls/config.toml and setting the cveDict url properly.

If you want to use vuls to collect reports from several nodes, set up the vuls
service somewhere in your infrastructure. Set it up by enabling it and start it
using service:

sysrc vuls_enable="YES"
service vuls start

Also consider installing security/vulsrepo to present the resports in a
friendly human-readable web gui.

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 160.42.0_10.41.0_1–
FreeBSD 150.42.0_10.42.0–
FreeBSD 140.42.0_1✗✗

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 150.41.0_20.41.0_1–
FreeBSD 140.41.0_20.41.0_1✗

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 0.42.0_1.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (106)

Dag-Erling Smørgrav (des) · 0.42.0_1 MFH 2026Q4 ✓
various: Bump Go ports for Go 1.26.10 / 1.27.3
d81b7ba3c3
Palle Girgensohn (girgen) · 0.42.0
security/vuls: Update to 0.42.0

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.42.0
79b82bd9e0
Yuri Victorovich (yuri) · 0.41.0_1
security/vuls: Unbreak by pinning to go-1.26

Build fails with 1.27

Reported by:	fallout
Approved by:	portmgr (unbeak; blanket)
219e1e9112
Dag-Erling Smørgrav (des) · 0.41.0
various: Drop Go 1.26+ version pin

This is a nop since 1.26 is the oldest supported version.
2c73fa4d6e
Palle Girgensohn (girgen) · 0.41.0
security/vuls: Update to 0.41.0

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.41.0
056158d2fb
Adam Weinberger (adamw) · 0.40.1_3
many: Bump go ports for 1.26.8 and 1.27.1
dd0905142a
Dag-Erling Smørgrav (des) · 0.40.1_2 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.14 / 1.26.7
4867821cd6
Dag-Erling Smørgrav (des) · 0.40.1_1 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.13 / 1.26.6
6d39dcf04e
Palle Girgensohn (girgen) · 0.40.1
security/vuls: Update to 0.40.1

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.40.1
2f64dabfa3
Dag-Erling Smørgrav (des) · 0.39.3_1 MFH 2026Q3 ✓
various: Bump go ports for go-1.25.12 / 1.26.5
4ea3547132
Palle Girgensohn (girgen) · 0.39.3
security/vuls: update to 0.39.3

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.39.3
2214f492b4
Dag-Erling Smørgrav (des) · 0.39.2_1
various: Bump go ports for go-1.25.11 / go-1.26.4
dd8dc2a59d
Palle Girgensohn (girgen) · 0.39.2
security/vuls: Update to 0.39.2

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.39.2
53c104ec13
Palle Girgensohn (girgen) · 0.39.1
security/vuls: Update to 0.39.1

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.39.1
10b1ea3d33
Palle Girgensohn (girgen) · 0.39.0
security/vuls: Update to 0.39.0

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.39.0
cdcad885d7
Adam Weinberger (adamw) · 0.38.6_2
various: Bump ports for Go 1.26.3
5f9824aeed
Dag-Erling Smørgrav (des) · 0.38.6_1
various: Bump go ports for go-1.25.9 / 1.26.2
7507e72a84
Robert Clausecker (fuz) · 0.38.6
*/*: Go ports that use modernc.org/sqlite are for aarch64, amd64 only

The module modernc.org/sqlite (and dependencies such as modernc.org/libc)
are only available on aarch64 and amd64 FreeBSD.  Other platforms are
not supported on FreeBSD right now.

Consistently mark ports using these with ONLY_FOR_ARCHS.

Approved by:	portmgr (build fix blanket)
MFH:		2026Q1
b1e7e12428
Palle Girgensohn (girgen) · 0.38.6
security/vuls: Update to 0.38.6

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.38.6
ee6baefec6
Adam Weinberger (adamw) · 0.38.5_1
various: Bump ports for Go 1.26.1
5cf3f384ca
Palle Girgensohn (girgen) · 0.38.5
security/vuls: Update to 0.38.5

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.38.5
877fbddd08
Palle Girgensohn (girgen) · 0.38.4
security/vuls: Update to 0.38.4

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.38.4
9e33fc2a27
Palle Girgensohn (girgen) · 0.38.2
security/vuls: Update to 0.38.2

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.38.2
8abe739377
Palle Girgensohn (girgen) · 0.38.0
security/vuls: Update to 0.38.0

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.38.0
bd850fbf41
Adam Weinberger (adamw) · 0.37.0_2
various: Bump Go ports for 1.25.7
5a5747a5a0
Adam Weinberger (adamw) · 0.37.0_1
various: Bump Go ports for 1.25.6
9f4bc8d0b7
Dag-Erling Smørgrav (des) · 0.37.0
many: Unpin Go ports

* Ports that were pinned to a deprecated version of Go (1.23 or older)
  have been unpinned.

* Ports that were pinned to a still-supported version of Go (1.24 or
  newer) have been converted to requesting that as their minimum Go
  version.

* Ports that had been forcibly deprecated for pinning an expired Go
  version have been undeprecated.
75d873b56a
Palle Girgensohn (girgen) · 0.37.0
security/vuls: Update to 0.37.0

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.37.0
fcda9515cb
Adam Weinberger (adamw) · 0.36.3_1
various: Bump Go ports for 1.25.5
ec872485e4
Palle Girgensohn (girgen) · 0.36.3
security/vuls: Update to 0.36.3

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.36.3
fb934eacec
Adam Weinberger (adamw) · 0.36.2_1
various: Bump Go ports for 1.24.10
0dfced16fb
Palle Girgensohn (girgen) · 0.36.2
security/vuls: Update to 0.36.2

Release notes:	 https://github.com/future-architect/vuls/releases/tag/v0.36.2
33f08e2a4b
Palle Girgensohn (girgen) · 0.35.1
security/vuls: Update to 0.35.1

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.35.1
ed903cfd29
Adam Weinberger (adamw) · 0.35.0_2
various: Bump go ports for go-1.24.9
90f976619b
Adam Weinberger (adamw) · 0.35.0_1
many: Bump dependent ports after go124 update
2e7587aaf8
Palle Girgensohn (girgen) · 0.35.0
security/vuls: Update to 0.35.0

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.35.0
fda87d0681
Palle Girgensohn (girgen) · 0.34.0
security/vuls: Update to 0.34.0

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.34.0
e380faf820
Adam Weinberger (adamw) · 0.33.4_1
many: Bump go ports for go-1.24.7
31a5a229a7
Palle Girgensohn (girgen) · 0.33.4
security/vuls: Update to 0.33.4

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.33.4
2c48d4ea89
Palle Girgensohn (girgen) · 0.33.3
security/vuls: Update to 0.33.3

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.33.3
b9ebe5dbc8
Adam Weinberger (adamw) · 0.33.2_2
go ports: Bump for 1.24.6
53610681ea
Adam Weinberger (adamw) · 0.33.2_1
many: Bump PORTREVISION for go-1.24.5 update
275975297b
Palle Girgensohn (girgen) · 0.33.2
security/vuls: Update to 0.33.2

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.33.2
b499806ba4
Palle Girgensohn (girgen) · 0.33.1
security/vuls: Update to 0.33.1

This version does not build on 32 bit systems due to a problem in
modernc/libc: https://gitlab.com/cznic/libc/-/issues/45

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.33.1
658ce8b7b1
Adam Weinberger (adamw) · 0.32.0_2
various: Bump PORTREVISION after go124-1.24.4 update
94be418de3
Palle Girgensohn (girgen) · 0.32.0_1
security/vuls: Fix build problem on i386

Fix fetched from upstreams module:
https://github.com/go-gorm/gorm/commit/8c4e8e2d2a63ef019048bd988a2016948605920b

The change does not modify 64-bit built binaries, so no point in bumping
the portrevision.
72c51c9bb8
Adam Weinberger (adamw) · 0.32.0_1
go: Bump go124-dependent ports

Earlier I bumped the default Go to 1.24. Ports that specify a lower
version will still build with those lower version (for now), so they
don't need a bumping. Instead I'm bumping anything that (now) has go124
as a dependency.
0bdd2ad334
Palle Girgensohn (girgen) · 0.32.0
security/vuls: Update to 0.32.0

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.32.0
175ab94f4c
Palle Girgensohn (girgen) · 0.31.1
security/vuls: Update to 0.31.1

Release notes:	https://github.com/future-architect/vuls/releases/tag/v0.31.1
50fb48006c
page 1 of 3older →oldest »