---
name: "flawz"
section: "1"
platform: "linux"
package: "flawz"
version: "0.4.1-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/flawz"
---

# flawz(1)

A Terminal UI for browsing CVEs

## NAME

flawz - A Terminal UI for browsing CVEs

## SYNOPSIS

**flawz** \[**-f**\|**--feeds**\] \[**-d**\|**--db**\] \[**-k**\|**--api-key**\] \[**-u**\|**--force-update**\] \[**-o**\|**--offline**\] \[**-q**\|**--query**\] \[**-t**\|**--theme**\] \[**-h**\|**--help**\] \[**-V**\|**--version**\]

## DESCRIPTION

A Terminal UI for browsing CVEs

## OPTIONS

- **-f**, **--feeds** \[*\<FEEDS\>...*\] \[default: 2002:2026,recent,modified\]

  Feeds to sync. Accepts a year (\`2026\`), a year range (\`2002:2026\`), \`recent\` (last 8 days of new publications) or \`modified\` (last 8 days of modifications). Multiple feeds can be given

- **-d**, **--db** *\<DB\>*

  Path to the SQLite database used to store the synced CVE data

- **-k**, **--api-key** *\<API\_KEY\>*

  NVD API key. With a key the rate limit is 50 requests / 30s (instead of 5 / 30s), making sync roughly 10× faster. Get one at \<https://nvd.nist.gov/developers/request-an-api-key\>

- **-u**, **--force-update**

  Re-sync feeds that are already present in the cache

- **-o**, **--offline**

  Do not fetch feeds — read only what is already cached

- **-q**, **--query** *\<QUERY\>*

  Start with a search query

- **-t**, **--theme** *\<THEME\>* \[default: dracula\]

  Set the theme\

  *Possible values:*

  - •

    dracula: Dracula

  - •

    nord: Nord

  - •

    one-dark: One Dark

  - •

    solarized-dark: Solarized Dark

  - •

    gruvbox-light: Gruvbox Light

  - •

    gruvbox-material-dark-hard: Gruvbox Material Dark Hard

  - •

    catppuccin: Catppuccin

- **-h**, **--help**

  Print help (see a summary with '-h')

- **-V**, **--version**

  Print version

## VERSION

v0.4.1

## AUTHORS

Orhun Parmaksız \<orhunparmaksiz@gmail.com\>
