CRA
GCVE BCP-02 v1.9: Making Coordinated Vulnerability Disclosure Open, Accessible, and Practical for Everyone
GCVE BCP-02 version 1.9 published - Practical Guide to Vulnerability Handling and Disclosure, introducing significant improvements to help software vendors, manufacturers, open-source maintainers, and security researchers establish effective Coordinated Vulnerability Disclosure (CVD) processes.
October 16, 2026
GCVE BCP-07 v3.0: From KEV to NKEV - No Known Exploitable Vulnerability (NKEV) assessments
We are pleased to announce the publication of GCVE BCP-07 version 3.0, extending the Known Exploited Vulnerability (KEV) Assertion Format with support for No Known Exploitable Vulnerability (NKEV) assessments.
October 5, 2026
GCVE BCP-05-X-03: Bringing Vulnerability Handling Timelines into Vulnerability Records
The extension provides a structured and machine-readable way to represent the lifecycle of a vulnerability from discovery and reporting through acknowledgement, validation, remediation and public disclosure.
October 1, 2026