← Feed

Posts

• View post

  @aristot73 Maybe you want to add this one https://arxiv.org/abs/2606.00856 if you think it's valuable. @trailofbits @jamesberthoty @jackhcable @cigitalgem

• View post

  If you are curious in the WiP and we we do (and if you would like to contribute): https://discourse.ossbase.org/c/gcve/14 Everything is on discourse instance. #gcve #cve #openstandard #cybersecurity

• View post

  We don't sleep at @gcve and we updated the BCP-07 to support NKEV in addition to KEV. Version 3.0 additionally defines a No Known Exploitable Vulnerability (NKEV) assessment format. An NKEV assessment is a product-level, time-bounded technical assessment stating whether known exploitable vulnerabilities were identified for a specific product or product version... 🔗 https://gcve.eu/bcp/gcve-bcp-07/ #kev #nkev #cybersecurity #cti #gcve #cve #vulnerabilitymanagement

• View post

  CPE Editor · An open source community catalog - Find a platform. Improve the record. A collaborative catalog of vendors, products, and platform identifiers. Explore CPE records and package URL (PURL) mappings, connect related products, and help improve the data through reviewed proposals. A new version has been released including graph view, improved UI and interface and many bugs fixed. 🔗 https://cpe.gcve.eu/ #cpe #cve #vulnerabilitymanagement #vulnerability #cybersecurity #opensource

• View post

  Vulnerability-Lookup 5.0 Released: Making Coordinated Vulnerability Disclosure Easier for GCVE GNAs. Vulnerability-Lookup 5.0 introduces a new CNA-interoperable API for managing vulnerabilities maintained by a local source. #cve #gcve #vulnerabilitymanagement #cybersecurity #gna #vulnerability 🔗 https://gcve.eu/2026/05/29/vulnerability-lookup-5.0-released-making-coordinated-vulnerability-disclosure-easier-for-gcve-gnas/

• View post

  GCVE released cpe.gcve.eu - a collaborative CPE editing platform for transparent vulnerability data. The service is still in beta and feedback is more than welcome. 🔗 https://cpe.gcve.eu/ #cpe #cve #vulnerabilitymanagement #vulnerability #gcve

• View post

  Introducing CPE.GCVE.EU: A collaborative catalog for vendors, products, CPEs and PURLs #cve #cpe #gcve #opendata #opensource #cybersecurity #vulnerabilitymanagement https://gcve.eu/2026/06/02/introducing-cpe.gcve.eu-a-collaborative-catalog-for-vendors-products-cpes-and-purls/

• View post

  We are today at @passthesaltcon and @adulau will do a presentation about the GCVE initiative and explain what are the next crazy projects we are working on. 🔗 https://gcve.eu/ #gcve #cpe #cve #cybersecurity #opensource #opendata

• View post

  GCVE-BCP-07 - Known Exploited Vulnerability - KEV Assertion Format - updated to version 2.1 🔗 BCP-07 https://gcve.eu/bcp/gcve-bcp-07/ 🔗 Contribution https://discourse.ossbase.org/t/kev-known-exploited-vulnerabilities-potential-format-bcp-07/744/46 #gcve #cve #vulnerabilitymanagement #cybersecurity

• View post

  GCVE-BCP-10: Improved Common Platform Enumeration for GCVE This document specifies an improved platform enumeration model for GCVE aligned with the current implementation of cpe-editor. #cpe #cve #gcve #infosec #vulnerabilitymanagement 🔗 https://gcve.eu/bcp/gcve-bcp-10/

• View post

  GCVE-BCP-09: Scope of a GCVE Record This document clarifies what is actually recorded in GCVE. A GCVE record is not limited to the traditional concept of a vulnerability description. In the GCVE model, records are assigned independently by a GCVE Numbering Authority (GNA) and may represent a broader set of vulnerability-related information. #cve #gcve #vulnerabilitymanagement #vulnerability #opensource #standard 🔗 https://gcve.eu/bcp/gcve-bcp-09/

• View post

  We are happy to announce a new extension mechanism in the GCVE vulnerability format, starting with a very practical and timely one: AI-assisted vulnerability information annotations. The first extension, GCVE BCP-05-X-01, defines how GCVE records can describe when AI or automated processing was used to create, enrich, summarize, classify, or analyze vulnerability information. #ai #ia #gcve #vulnerabilitymanagement #vulnerability #opensource #openstandard 🔗 https://gcve.eu/bcp/extension/gcve-...

• View post

  We just published a new GCVE repository: gcve-enriched-dumps. This repository demonstrates a practical and reproducible enrichment pipeline for vulnerability records. The current workflow uses VLAI, a RoBERTa-based model from Vulnerability-Lookup, to estimate vulnerability severity directly from vulnerability descriptions. For more details: https://gcve.eu/2026/05/21/gcve-enriched-dumps/ @circl #cve #gcve #vulnerabilitymanagement #cybersecurity #opensource #opendata #ai

• View post

  During the last three months, from 25 February to 25 May 2026, GCVE has continued moving beyond an identifier-allocation concept into a practical ecosystem for publishing, correlating, enriching and consuming vulnerability information. What have we accomplished over the past three months? Quite a lot. To learn more about our latest public developments and ongoing work, read our latest status update on the blog: 🔗 https://gcve.eu/2026/05/25/gcve-recent-activities-building-a-decentralised-and-o...

• View post

  GCVE is not only designed for distributed vulnerability publication and correlation across multiple sources. It already provides automatic vulnerability classification capabilities through the broader Vulnerability-Lookup ecosystem. In particular, GCVE can rely on VL-AI to automatically estimate vulnerability severity from historical data, giving defenders an immediate first-pass assessment even when no manually curated score is yet available. #gcve #cve #nist 🔗 https://gcve.eu/2026/04/17/aut...

• View post

  Luxembourg, 2026/01/07 - The GCVE initiative is proud to announce the public launch of db.gcve.eu , a new open and freely accessible vulnerability advisory database. The platform aggregates and correlates vulnerability information from more than 25 public sources, including GCVE GNA (Numbering Authority) sources and other established vulnerability databases. 🔗 For more details - https://gcve.eu/2026/01/07/gcve-db-announce/ 🔗 https://db.gcve.eu/ #cve #gcve #cybersecurity #vulnerabilitymanagemen...

• View post

  @westonsteimel The dumps will be available on db.gcve.eu but currently it's on the CIRCL dumps. @circl

• View post

  @jbm Yes, it's to facilitate the use of the data from GCVE and other vulnerability sources. So it's a dedicated vulnerability-lookup instance running independently. @circl instance will remain and running on its own. We also recommend others to operate their own instance and especially GNA to facilitate the distributed publication. We added your question in the FAQ https://gcve.eu/faq/#q16-what-is Everyone like ENISA is welcome to use and contribute to vulnerability-looku...

• View post

  @tsdgeos You can ask a GNA such as @circl or even become a GNA yourself. https://gcve.eu/about/#eligibility-and-process-to-obtain-a-gna-id

• View post

  GCVE-BCP-01 through GCVE-BCP-05 have now all reached the published state. These published documents remain open to review and updates. The BCPs have been implemented in multiple implementations, including vulnerability-lookup. 🔗 https://gcve.eu/bcp/ #cve #gcve #vulnerabilitymanagement

• View post

  Many updates to the GCVE BCP and two new BCPs are in preparation: 🔗 Current BCPs https://gcve.eu/bcp/ 🔗 Discussions https://discourse.ossbase.org/c/gcve/14 #gcve #cve #vulnerabilitymanagement #vulnerability #cybersecurity @circl

• View post

  We now have a page dedicated to all the software developed in the scope of GCVE or implementing the GCVE BCP standards. https://gcve.eu/software/ #gcve #cve #openstandard #opensource #cybersecurity

• View post

  The past six weeks have been an important milestone for the GCVE.eu initiative. What started as an experiment in decentralized vulnerability identification and coordination continues to evolve into a mature ecosystem supported by standards, implementations, and a rapidly growing community. BCP-07 published and already implemented. BCP-06 published. Many ongoing activities for GCVE. 🔗 https://gcve.eu/2026/02/15/what-s-new-2026-02-15/ #gcve #cve #vulnerabilitymanagement #vulnerability #cyberse...

• View post

  db.gcve.eu updated with Vulnerability-Lookup 4.0: Enabling Federated Vulnerability Intelligence The GCVE project is pleased to announce a major update of the platform. The service is now running the latest version of Vulnerability-Lookup (4.0), introducing federated synchronisation capabilities that significantly expand how vulnerability intelligence can be shared, enriched, and consumed across organisations. 🔗 https://gcve.eu/2026/02/17/db-gcve-eu-updates-2026/ #gcve #cve #cvd #opensource

• View post

  Publishing Vulnerability Information with GCVE With GCVE, publishing vulnerability information can be done in three straightforward steps. #gcve #vulnerabilitymanagement #vulnerability #cybersecurity 🔗 https://gcve.eu/publishing-vulnerability-information/

• View post

  The GCVE project team will be at the Hackathon in Luxembourg on April 14–15, 2026, to present the project and collaborate on its future. We’d be delighted to welcome anyone interested in joining us and contributing to the future of GCVE. https://hackathon.lu/projects/#gcve #gcve #cve #hackathon #cybersecurity @circl