Start hereIs this CVE in our system, and how does it get there?
Blastradius follows the dependency and call graph in FalkorDB from an advisory to the services it reaches, then out to the internet. It names the owners, remembers what you decided last time, and treats “no path” as an answer.
Try one
Analyse a public repository
This hosted demo is limited: public repositories only, up to 15 dependency manifests, one analysis at a time. It has no deployment topology for your repo, so exposure is unknown and every service is assumed reachable. For real use, clone the repository and run Blastradius yourself; that is the better way, with no limits.
How to read the graph
- A double ring marks a service reachable from the internet.
- Red is the path an attacker would travel, drawn hop by hop.
- A filled red box is the vulnerable package itself.