From 123b2d424e815473c8be3be03199213d55eade77 Mon Sep 17 00:00:00 2001 From: Roy Lane Date: Thu, 19 Mar 2026 09:47:35 -0400 Subject: [PATCH 1/4] cveListSearch: temporarily point to development search site --- src/stores/cveListSearch.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/stores/cveListSearch.js b/src/stores/cveListSearch.js index bb0c9d40..6c707a36 100644 --- a/src/stores/cveListSearch.js +++ b/src/stores/cveListSearch.js @@ -219,7 +219,7 @@ export const useCveListSearchStore = defineStore('cveListSearch ', { }, async getSearchResults() { this.isQueryingSearchService = true; - const searchUrl = `${import.meta.env.VITE_API_BASE_URL}${import.meta.env.VITE_LIST_SEARCH_PATH}`; + const searchUrl = 'https://dev.search.cve.org/webSearch'; this.resetResults(); From 0f371500d391eb1dd5a9afd049060edfd89d110d Mon Sep 17 00:00:00 2001 From: Robert Roberge Date: Wed, 20 May 2026 18:11:13 -0400 Subject: [PATCH 2/4] Update SECURITY.md Update CVE website Security Policy --- SECURITY.md | 28 +++++++++++----------------- 1 file changed, 11 insertions(+), 17 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index f16eaf92..3baef96a 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,22 +1,16 @@ # Security Policy ## Reporting a Vulnerability -Please use the CVE Program web forms to report security vulnerabilities for the -CVE website. Please include vulnerability details, steps to reproduce (e.g., proof-of-concept code, -screenshots) and an assessment of the impact in your report. We appreciate concise and high-quality reports. - -## Web Form Submissions - -* In the “Select a request type” drop down menu, please select “Other” -* Enter your email address in the space provided -* You may enter a PGP key if you prefer to encrypt your correspondence -* In the “Type of comment” drop down menu, please select “Issue” -* In the textbox labeled “Please provide your question, issue, comment, etc.” please start the message with the following information: - - First Line: “CVE Website Security Anomaly Report” - - Second Line: “Distribution: CVE Website Development Team” - - Third Line: "Description: [Free Text description of the anomaly]” -* Enter the Security code -* Click “Submit Request” +Please use the CVE Program Web Forms (choose “General Support”) to report security vulnerabilities for the +CVE website. + +Please include: + +* Vulnerability details +* Steps to reproduce (e.g., proof-of-concept code, screenshots) +* An assessment of the impact + +We appreciate concise and high-quality reports. ## Scope @@ -28,4 +22,4 @@ We will release fixes for verified security vulnerabilities. We expect to publis security advisories. ## Coordination -We appreciate the opportunity to investigate and develop fixes before public disclosure, following coordinated vulnerability disclosure practices. \ No newline at end of file +We appreciate the opportunity to investigate and develop fixes before public disclosure, following coordinated vulnerability disclosure practices. From a00088d3b02427ba86b8c39429a46cc4652f0e0d Mon Sep 17 00:00:00 2001 From: amanion-cisa <168015703+amanion-cisa@users.noreply.github.com> Date: Fri, 7 Aug 2026 13:20:31 -0400 Subject: [PATCH 3/4] SSVC accessed/assessed --- src/components/AdpVulnerabilityEnrichment.vue | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/components/AdpVulnerabilityEnrichment.vue b/src/components/AdpVulnerabilityEnrichment.vue index 13e3b323..2a7ba9f8 100644 --- a/src/components/AdpVulnerabilityEnrichment.vue +++ b/src/components/AdpVulnerabilityEnrichment.vue @@ -54,7 +54,7 @@ Automatable Technical Impact Version - Date Accessed + Date Assessed From d85413e12b188d218db2fb5af3d90c9a2e3e1386 Mon Sep 17 00:00:00 2001 From: amanion-cisa <168015703+amanion-cisa@users.noreply.github.com> Date: Fri, 7 Aug 2026 14:30:19 -0400 Subject: [PATCH 4/4] forgot a 2nd instance --- src/components/AdpVulnerabilityEnrichment.vue | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/components/AdpVulnerabilityEnrichment.vue b/src/components/AdpVulnerabilityEnrichment.vue index 2a7ba9f8..344760b2 100644 --- a/src/components/AdpVulnerabilityEnrichment.vue +++ b/src/components/AdpVulnerabilityEnrichment.vue @@ -68,7 +68,7 @@ {{ ssvc.automatable }} {{ ssvc['technical impact'] }} {{ ssvc.version }} - {{ ssvc.timestamp }} + {{ ssvc.timestamp }}