VULNARCHIVE

VULNARCHIVE

Public mailing-list archive and GCVE publication feed for GNA 1988.

GCVE and Best Current Practices

GCVE is a decentralized vulnerability enumeration system. Its community-driven Best Current Practices (BCPs) document recommended procedures, configurations, and operational principles so GCVE Numbering Authorities (GNAs), users, automation, and data consumers can interoperate reliably.

BCPs are descriptive rather than prescriptive, consensus-based, focused on interoperability and trust, and evolve as tools and practices improve. Topics include directory integrity, GNA and identifier naming, secure publication and synchronization, APIs, and distributed publication. Adoption is not mandatory, but is strongly recommended for safe and compatible participation in the GCVE network.

Vulnerability-Lookup

Vulnerability-Lookup enables rapid correlation of vulnerabilities across multiple sources, independent of vulnerability identifiers. The public service is available at vulnerability.circl.lu.

Its built-in Vulnogram integration streamlines Coordinated Vulnerability Disclosure (CVD), supports both CVE 5.2 and GCVE-BCP-05, and lets CNAs and GNAs publish advisories and synchronize with other instances regardless of identifier format.

VULNARCHIVE

Following Vulnerability-Lookup, VULNARCHIVE is the second reference implementation of the GCVE BCPs.