Glossary

This glossary provides definitions and key concepts related to the Global CVE (GCVE) Allocation System — a decentralized framework for assigning vulnerability identifiers. Unlike traditional centralized models, GCVE empowers autonomous entities, known as GCVE Numbering Authorities (GNAs), to allocate and manage identifiers independently.

GCVE - Global CVE Allocation System

The Global CVE (GCVE) allocation system is a new, decentralized approach to vulnerability identification and numbering, designed to improve flexibility, scalability, and autonomy for participating entities.

While remaining compatible with the traditional CVE system, GCVE introduces GCVE Numbering Authorities (GNAs). GNAs are independent entities that can allocate identifiers without relying on a centralised block distribution system or rigid policy enforcement.

GNA - GCVE Numbering Authority

A GCVE Numbering Authority (GNA) is an approved entity that is authorised to allocate GCVE identifiers.

Each GNA is assigned a unique numeric identifier, which is part of the GCVE ID format.

GNAs have the autonomy to:

• Allocate identifiers at their own pace.
• Define their own internal policies for vulnerability identification.
• Operate independently of a centralized block allocation authority.

How can I apply to become a GNA?