Re:CVE program faces swift end after DHS fails to renew cont...
by rickdeckard on Wednesday April 16, 2025 @07:36AM
(#43704065)
To quote the article
"Fourth, national vulnerability databases like China’s and Russia’s, among others, will largely dry up (Russia more than China)."
"Fourth [sic], hundreds, if not thousands, of National / Regional CERTs around the world, no longer have that source of free vulnerability intelligence."
"Fifth [sic], every company in the world that relied on CVE/NVD for vulnerability intelligence is going to experience swift and sharp pains to their vulnerability management program."
They already did it. Great!
Maybe we can ask them how to contribute to their software, as it seems to be proprietary at the moment?
edit: lol, their manifest.json is still the React boilerplate: https://euvd.enisa.europa.eu/manifest.json
Their database seems to also only contain fairly recent CVEs (up until 2019? some CVEs are missing...) and not before that