GCVE
GCVE recent activities: standards, software and a growing GNA community
#GCVE#GNA#vulnerability-intelligence#open-source#KEV#CPE#sightings
A review of GCVE activities from 26 May to 13 August 2026, including work on BCP-07, draft BCP-11 and BCP-12, Luxembourg–Québec cooperation, the GCVE Lab proposal, Vulnerability-Lookup 5.0, CPE.GCVE.EU and seven new GNAs.
August 13, 2026
GCVE BCP-12: A Standard Sighting Format for Vulnerabilities
#GCVE#Sighting#CTI#vulnerability-management#open-source
a standard format for recording and exchanging vulnerability sightings
August 1, 2026
Introducing CPE.GCVE.EU: A collaborative catalog for vendors, products, CPEs and PURLs
#GCVE#CPE#PURL#vulnerability-management#open-source
CPE.GCVE.EU provides a browsable, searchable and collaborative catalog of vendors, products, CPEs and their relationships with GCVE and PURL data.
June 2, 2026
Vulnerability-Lookup 5.0 Released: Making Coordinated Vulnerability Disclosure Easier for GCVE GNAs
#announce#GCVE#GNA#vulnerability-lookup#CVD
The GCVE initiative is pleased to welcome the release of Vulnerability-Lookup 5.0.0, a major new version of the open-source software that powers db.gcve.eu. This release is especially important for the GCVE ecosystem: it introduces new capabilities that make it easier for GCVE Numbering Authorities (GNAs) to manage their vulnerability publication workflows and support a practical Coordinated Vulnerability Disclosure (CVD) process using open, interoperable tooling. Vulnerability-Lookup already plays a central role in the GCVE ecosystem. It provides the foundation for collecting, correlating, publishing, and synchronising vulnerability information across independent sources. With version 5.0, the project takes an important additional step: supporting GNAs not only as publishers of vulnerability records, but also throughout the operational process of reserving identifiers, preparing advisories, managing their state, and publishing structured information.
May 29, 2026
GCVE recent activities: building a decentralised and operational vulnerability ecosystem
#GCVE#vulnerability-intelligence#open-source#KEV#CPE#AI
A review of GCVE activities and achievements from 25 February to 25 May 2026, including new and revised Best Current Practices, based on public GitHub work and official GCVE publications.
May 25, 2026