GCVE initiative - Global CVE Allocation System
Decentralized vulnerability identifiers
Global CVE Allocation
GCVE is a fresh, open approach to vulnerability identification and numbering: compatible with CVE, designed for distributed publication, and built around autonomous GCVE Numbering Authorities.
The Global CVE (GCVE) allocation system is a new, decentralized approach to vulnerability identification and numbering, designed to improve flexibility, scalability, and autonomy for participating entities.
While remaining compatible with the traditional CVE system, GCVE introduces GCVE Numbering Authorities (GNAs). GNAs are independent entities that can allocate identifiers without relying on a centralised block distribution system or rigid policy enforcement.
From the community
Recent news
GCVE BCP-02 v1.9: Making Coordinated Vulnerability Disclosure Open, Accessible, and Practical for Everyone
GCVE BCP-02 version 1.9 published - Practical Guide to Vulnerability Handling and Disclosure, introducing significant improvements to help software …
GCVE BCP-07 v3.0: From KEV to NKEV - No Known Exploitable Vulnerability (NKEV) assessments
We are pleased to announce the publication of GCVE BCP-07 version 3.0, extending the Known Exploited Vulnerability (KEV) Assertion Format with support for …
GCVE BCP-05-X-03: Bringing Vulnerability Handling Timelines into Vulnerability Records
The extension provides a structured and machine-readable way to represent the lifecycle of a vulnerability from discovery and reporting through …
Explore GCVE
Start with the core concepts, follow the latest updates, or jump directly to the machine-readable data and vulnerability intelligence services.