Ask HN: Open-source vulnerability monitoring tool
I run my own server with most of the stuff I need, such as email, hosting, etc. and I am always worried in the back of my mind that some software that I use might be severely out of date or there's a new exploit I should be aware of.
So far I've set up a few applets on IFTTT to monitor the cvedetails.com RSS feed for my specific software (nginx, wordpress, mariadb, roundcube, postfix, dovecot, etc), but it seems that setup is not as solid as I believed it to be because some CVEs are not published in the feed although they are pretty important. For example, CVE-2020-15562 - XSS via HTML messages in Roundcube (https://nvd.nist.gov/vuln/detail/CVE-2020-15562) does not show up in the list of exploits: https://www.cvedetails.com/vulnerability-list/vendor_id-8905/Roundcube.html
Is there such a tool that would automatically monitor for vulnerabilities for a given list of software? Ideally the tool would be open source.
Thanks!