Low Severity
Published: Oct 25, 2026
Retrieve CVEs and index them inside your codebase. Offline CVE + exploit intelligence: one SQLite index, one CLI, one MCP server.
<!-- mcp-name: io.github.kushvinth/crowbar -->
<div align="center">
# crowbar
### Retrieve CVEs and index them inside your codebase.
**Point it at a product and version. It pulls the CVEs that apply and indexes them locally, so any tool in your repo can query the answer.**
[](https://www.npmjs.com/package/crowbar-cli)
[](https://pypi.org/project/crowbar-cli/)
[](https://github.com/kushvinth/crowbar/actions/workflows/ci.yml)
[](#other-agents-cursor-codex-gemini-opencode)
[](#prefer-a-plain-cli)
[](https://skills.sh/kushvinth/crowbar/crowbar)
[](LICENSE)
**[Website](https://crowbar.kushvinth.com/) · [Guides](https://crowbar.kushvinth.com/guides/) · [Showcases](https://crowbar.kushvinth.com/showcase/)**
[Quick start](#quick-start) · [How crowbar works](#how-crowbar-works) · [What you can answer](#what-you-can-answer) · [Showcases](#showcases) · [FAQ](#faq) · [Documentation](#documentation)
<code>npx crowbar-cli setup</code>
</div>
> [!IMPORTANT]
> Get crowbar from [kushvinth/crowbar](https://github.com/kushvinth/crowbar),
> [crowbar.kushvinth.com](https://crowbar.kushvinth.com), or the
> [crowbar-cli](https://pypi.org/project/crowbar-cli/) package. A similar
> repository name or copied README does not make a download official.
<p align="center">
<img src="docs/assets/demo.gif" alt="crowbar triaging CVE-2021-442