GCVE January 2026 - News and Updates

The last days have been a bit wild for the GCVE.eu initiative.

What started as steady work suddenly picked up real momentum:

• The public GCVE.eu database instance - https://db.gcve.eu/ - caught the attention of the media, sparking discussions well beyond our usual circles
• We published updates to the GCVE KEV Assertion Standard Format (BCP-07), refining how known-exploited information can be asserted and shared
• GCVE-BCP-02 - Practical Guide to Vulnerability Handling and Disclosure has been updated to improve the recommendations on vendor feed generation
• Vulnerability-Lookup 2.21.0 was released, bringing improvements aligned with the GCVE ecosystem
• We received a lot of valuable feedback especially on the specs, the tooling, and the overall direction
• New GNAs joined the GCVE directory, and new contributors stepped in to help shape both the specifications and the software

Seeing this level of engagement, critique, and contribution in such a short time is incredibly motivating. It reinforces why an open, decentralized, and collaborative approach to vulnerability identification and sharing matters.

Huge thanks to everyone who tested, commented, challenged assumptions, wrote code, improved text, or simply helped spread the word. This is very much a community effort and it’s only getting started. 💙

Don’t hesitate to follow us at GCVE-EU.

Contact

For questions, feedback, or collaboration inquiries, please contact: info@gcve.eu or gna@gcve.eu if you want to become a GNA.