Vulnerability-Lookup 2.8.0 released

Vulnerability-Lookup 2.8.0 released

April 10, 2025

 #release

We’re pleased to announce the immediate availability of Vulnerability-Lookup version 2.8.0.

User profile with the new badge for vulnerability disclosure

What’s New

Simplified Vulnerability Reporting (aligned with NIS 2 requirements)

Members of a Vulnerability-Lookup instance can now easily report vulnerabilities as preliminary advisories in the context of NIS 2. Operators can review these notifications and, if deemed relevant, generate a security advisory directly from Vulnerability-Lookup. The advisory will then be made publicly accessible, similar to those from other sources. #114

Administration - List of vulnerability disclosures

Creation of a vulnerability disclosure - 1

Creation of a vulnerability disclosure - 1

Commenting on vulnerability disclosures

Vulnerability disclosure release date

CodeClarity as a new Sighting source

During the Hack.lu hackathon, Cédric Herzog worked on the new version of CodeClarity, which now supports pushing analysis results as Sightings into Vulnerability-Lookup.

Dockerized version of Vulnerability-Lookup

Thanks to Dawid Czarnecki, Vulnerability-Lookup now has a fully dockerized setup. Kvrocks, Valkey, and PostgreSQL are each configured as separate containers. #116

Graphical improvements

We also refined several areas of the user interface to enhance usability and provide a smoother experience. Thank you to David Cruciani !

Changelog

📂 To see the full rundown of the changes, users can visit the changelog on GitHub: https://github.com/vulnerability-lookup/vulnerability-lookup/releases/tag/v2.8.0

🙏 Thank you very much to all the contributors. Especially to Dawid Czarnecki and Cédric Herzog

Security advisory based on a vulnerability disclosure

Feedback and Support

If you encounter issues or have suggestions, please feel free to open a ticket on our GitHub repository. Your feedback is invaluable to us!
https://github.com/vulnerability-lookup/vulnerability-lookup/issues/

Follow us on Fediverse/Mastodon

You can follow us on Mastodon and get real time informationa about security advisories:
https://social.circl.lu/@vulnerability_lookup/