> For the complete documentation index, see [llms.txt](https://docs.sealsecurity.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.sealsecurity.io/discovering/protection-page/vulnerable-packages-tab.md).

# The Vulnerable packages tab

Every package Seal has discovered with at least one open vulnerability appears in this tab. It is the day-to-day triage view.

<figure><img src="/files/P4fbtBd77wCU0dYKYYw0" alt="The Vulnerable packages tab with rows showing varied state badges and severity chips"><figcaption><p>The Vulnerable packages tab is the day-to-day triage view.</p></figcaption></figure>

## Columns

| Column              | Contents                                                                                  |
| ------------------- | ----------------------------------------------------------------------------------------- |
| **Package**         | The package name (for example, `ejs`, `commons-text`, `requests`).                        |
| **Version**         | The specific package version Seal has discovered (for example, `2.7.4`).                  |
| **Ecosystem**       | The package's ecosystem (for example, npm, Maven, PyPi).                                  |
| **Project**         | The Seal Project this row belongs to.                                                     |
| **Vulnerabilities** | The vulnerabilities affecting this package, with severity.                                |
| **Last seen**       | The most recent time Seal saw this package, whichever discovery mode produced the signal. |

Each row also has a state badge (Sealed, Pending deploy, Ready to seal, Version in progress, Generate available, or Unfixable) and an actions menu. The state badge values are documented in [Package states](/discovering/package-states.md).

The default sort is by **severity, descending** (most severe rows at the top). All columns marked above are sortable.

## Filters

<figure><img src="/files/aMiQcYHjzvjI08KwpT3K" alt="The Vulnerable packages tab filter bar with the Availability filter open"><figcaption><p>The filter bar with the Availability dropdown open.</p></figcaption></figure>

| Filter                | What it narrows                                                                                                                          |
| --------------------- | ---------------------------------------------------------------------------------------------------------------------------------------- |
| **Search**            | Free-text search across package names and CVE identifiers.                                                                               |
| **Ecosystem**         | Show only one ecosystem at a time.                                                                                                       |
| **Project**           | Show only rows from one Seal Project.                                                                                                    |
| **Availability**      | Show rows in a specific package state (Sealed, Pending deploy, Ready to seal, Generate available, and so on).                            |
| **Visibility**        | Show all rows, only visible rows, or only hidden rows.                                                                                   |
| **Development token** | Filter rows by the type of [token](/getting-started/tokens.md) that authenticated the activity. Default: production-token activity only. |
| **Dev dependency**    | Include or exclude [development dependencies](/introduction/glossary.md#dev-dependency). Default: excluded.                              |

The two filters narrow the default view in different ways and are independent: a row excluded by one is not necessarily excluded by the other.

## Per-row actions

<figure><img src="/files/LG1fXcoqcfVSrHXnYfsb" alt="A row with the per-row action menu open"><figcaption><p>The per-row action menu, with "Seal in all projects" among the entries.</p></figcaption></figure>

The actions available depend on your role.

| Action                                                                                                                             | Roles                       |
| ---------------------------------------------------------------------------------------------------------------------------------- | --------------------------- |
| **Seal** (the primary button on a row that has a sealed version available; creates a Sealing Rule using the safest sealed version) | Admin, Sealer               |
| **Seal in all projects** (apply the rule across every project where this package and version appear)                               | Admin, Sealer               |
| **Generate fix** (the action behind the **Generate available** state)                                                              | Admin, Sealer, Collaborator |
| **Hide** / **Restore** (toggle the row's visibility; hidden rows are excluded from the Dashboard and from reports by default)      | Admin, Sealer, Collaborator |

A **Download report** action above the table exports the current filtered set as a Vulnerable Packages report. See [Reports Manager](/using-platform/reports-manager.md).

## Related

* [Package states](/discovering/package-states.md): the meaning of each state badge and the transitions between them.
* [Triggering Generate fix](/discovering/generate-fix.md): the action behind the Generate available state.
* [Sealing Rules](/using-platform/sealing-rules.md): what the **Seal** button creates.