All terms are AND-ed — every token must appear in the advisory text.
| You type | What is searched |
|---|---|
firefox-ios |
advisories containing both firefox AND ios — delimiters (- _ . space , / #) split tokens and are not themselves searched |
firefox_iosfirefox iosfirefox#ios |
same as above — all equivalent |
firefox23-ios |
same — inline numbers on tokens are stripped, so firefox23 → firefox |
firefox-ios "23" |
firefox AND ios AND the literal string 23 (quoted strings are kept verbatim, including spaces) |
firefox-ios "re/2../" |
firefox AND ios AND any text matching the regex 2.. (matches 231, 2ab, etc.) — use "re/PATTERN/" for Postgres case-insensitive regex |
"CVE-2024-12345" |
exact literal match for CVE-2024-12345 |
wordpress -plugin |
wordpress must be present AND plugin must NOT be present — prefix any unquoted token with - (separated by a space) to exclude it |
wordpress -"wp-admin" |
wordpress must be present AND the literal wp-admin must NOT appear — prefix a quoted string with - to negate it |
wordpress -"re/plugin/" |
wordpress must be present AND text must NOT match the regex plugin |
"wordpress \"" |
literal search for wordpress " — use \" inside double quotes to include a literal double-quote character |
Tokens shorter than 3 characters (after stripping digits) are ignored. To match short strings or version numbers exactly, wrap them in double quotes. Spaces inside double quotes are preserved exactly.