Skip to content

Commit af2a239

Browse files
rrobergerlxdev
andauthored
4/7/26 release branch (#3898)
* #3896 News article and Board Archive page for 3/4/26 minutes summary * #3894 Update VulnCon 2026 item on Events page * #3893 CNA Enrichment Recognition List for 4/6/26 * #3895 Update 2 CNA's info * #3897 Update 1 Board member's status * #3895 Update 1 additional CNA's info * _#3887 Add Blog @ VulnCon 2026 registration closing date * PublishedRecord: use isEmptyObject() * Vite upgrade v7 -> v8; 4/3/26 package updates * npm update on 4/7/26 --------- Co-authored-by: Roy Lane <rlane@mitre.org>
1 parent ec35ffc commit af2a239

10 files changed

Lines changed: 887 additions & 615 deletions

File tree

package-lock.json

Lines changed: 781 additions & 566 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,6 @@
2525
"axios": "^1.13.2",
2626
"buefy": "^3.0.3",
2727
"bulma": "^1.0.4",
28-
"bulma-timeline": "^3.0.5",
2928
"leaflet": "^1.9.4",
3029
"lodash": "^4.17.21",
3130
"pinia": "^3.0.4",
@@ -44,13 +43,14 @@
4443
"@vue/eslint-config-prettier": "^10.2.0",
4544
"@vue/eslint-config-typescript": "^14.6.0",
4645
"@vue/tsconfig": "^0.8.1",
46+
"esbuild": "^0.27.0",
4747
"eslint": "^9.39.1",
4848
"eslint-plugin-vue": "^10.5.1",
4949
"npm-run-all2": "^6.2.6",
5050
"prettier": "^3.6.2",
5151
"sass-embedded": "^1.93.3",
5252
"typescript": "^5.9",
53-
"vite": "^7.3.1",
53+
"vite": "^8.0.0",
5454
"vue-tsc": "^3.2"
5555
}
5656
}

src/assets/data/CNAsList.json

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2343,7 +2343,7 @@
23432343
},
23442344
{
23452345
"label": "Security Advisories",
2346-
"url": "https://www.esri.com/arcgis-blog/?s=#&amp;products=trust-arcgis"
2346+
"url": "https://www.esri.com/arcgis-blog/tag/cve"
23472347
}
23482348
]
23492349
},
@@ -28662,7 +28662,7 @@
2866228662
{
2866328663
"label": "Policy",
2866428664
"language": "",
28665-
"url": "https://github.com/HDFGroup/hdf5/blob/develop/SECURITY.md"
28665+
"url": " https://github.com/HDFGroup/hdf5/security/policy"
2866628666
}
2866728667
],
2866828668
"securityAdvisories": {
@@ -28830,7 +28830,7 @@
2883028830
{
2883128831
"label": "Policy",
2883228832
"language": "",
28833-
"url": "https://www.canva.com/security/bug-bounty/"
28833+
"url": "https://www.canva.com/security/vulnerability-disclosure/"
2883428834
}
2883528835
],
2883628836
"securityAdvisories": {

src/assets/data/boardMeetings.json

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,9 @@
11
{
22
"2026": [
3+
{
4+
"name": "March 4, 2026 - teleconference",
5+
"path": "msg00321.html"
6+
},
37
{
48
"name": "February 4, 2026 - teleconference",
59
"path": "msg00317.html"

src/assets/data/currentBoardMembersList.json

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -152,9 +152,9 @@
152152
"role": "Board"
153153
},
154154
{
155-
"familyName": "Turner",
156-
"firstName": "Chris",
157-
"imageURL": "ChrisTurner.jpg",
155+
"familyName": "",
156+
"firstName": "",
157+
"imageURL": "",
158158
"organization": "National Institute of Standards and Technology (NIST)",
159159
"organizationURL": "https://www.nist.gov/",
160160
"role": "NIST CVE Board Liaison"

src/assets/data/events.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -63,7 +63,7 @@
6363
"displayOnHomepageOrder": 1,
6464
"title": "CVE/FIRST VulnCon 2026",
6565
"location": "Scottsdale, Arizona, USA & Virtual",
66-
"description": "<i>Registration closes on April 6, 2026, at 19:00 UTC.</i><br/><br/>VulnCon is co-hosted by the <a href='/'>CVE Program</a> and <a href='https://www.first.org/conference/vulncon26/' target='_blank'>FIRST</a> and is open to the public.<br/><br/><strong>Agenda</strong>:<br/>Available on the <a href='https://www.first.org/conference/vulncon26/program' target='_blank'>conference web page</a> or view the schedule by day:<br/><br/><strong>Monday, April 13</strong> &mdash; <a href='https://www.first.org/conference/vulncon26/program#d20260413' target='_blank'>View day 1 schedule</a><br/><strong>Tuesday, April 14</strong> &mdash; <a href='https://www.first.org/conference/vulncon26/program#d20260414' target='_blank'>View day 2 schedule</a><br/><strong>Wednesday, April 15</strong> &mdash; <a href='https://www.first.org/conference/vulncon26/program#d20260415' target='_blank'>View day 3 schedule</a><br/><strong>Thursday, April 16</strong> &mdash; <a href='https://www.first.org/conference/vulncon26/program#d20260416' target='_blank'>View day 4 schedule</a><br/><br/>An Offsite Social Event will be held at the Western Spirit Museum on Wednesday, April 15. Learn more <a href='https://www.first.org/conference/vulncon26/registration#Registration-Information' target='_blank'>here</a>.<br/><br/><strong>Registration</strong>:<br/>Both virtual and in-person registration are open now on the VulnCon 2026 <a href='https://www.first.org/conference/vulncon26/registration#Registration-Information' target='_blank'>conference registration page</a> hosted on the FIRST website. <ul><li>Standard Admission (by March 14, 2026): US $525.00</li><li>Late Rate Admission (after March 14, 2026): US $600.00</li><li>Virtual Admission: US $100.00</li></ul>Registration fees include full admission to conference activities Monday through Thursday; continental breakfast, lunch, and two coffee breaks Tuesday through Thursday; entry to the Monday welcome reception; entry to the Tuesday networking reception; entry to the vendor hall; all applicable conference materials;, and access to live streams and applicable apps.<br/><br/><i>NOTE: Registration closes on April 6, 2026, at 19:00 UTC. Registration is based on availability and may close before the indicated date. Learn more <a href='https://www.first.org/conference/vulncon26/registration#Registration-Information' target='_blank'>here</a>.</i><br/><br/><strong>Purpose:</strong><br/>The purpose of VulnCon is to collaborate with various vulnerability management and cybersecurity professionals to develop forward leaning ideas that can be taken back to individual programs for action to benefit the vulnerability management ecosystem.<br/><br/>A key goal of the conference is to understand what important stakeholders and programs are doing within the vulnerability management ecosystem and best determine how to benefit the ecosystem broadly.<br/><br/><strong>Call for Speakers (CFS)</strong>:<br/>Closed on December 22, 2025. The <a href='https://www.first.org/conference/vulncon26/cfs' target='_blank'>CFS</a> requirements and submission process are available <a href='https://www.first.org/conference/vulncon26/cfs' target='_blank'>here</a>.",
66+
"description": "VulnCon is co-hosted by the <a href='/'>CVE Program</a> and <a href='https://www.first.org/conference/vulncon26/' target='_blank'>FIRST</a> and is open to the public.<br/><br/><strong>Agenda</strong>:<br/>Available on the <a href='https://www.first.org/conference/vulncon26/program' target='_blank'>conference web page</a> or view the schedule by day:<br/><br/><strong>Monday, April 13</strong> &mdash; <a href='https://www.first.org/conference/vulncon26/program#d20260413' target='_blank'>View day 1 schedule</a><br/><strong>Tuesday, April 14</strong> &mdash; <a href='https://www.first.org/conference/vulncon26/program#d20260414' target='_blank'>View day 2 schedule</a><br/><strong>Wednesday, April 15</strong> &mdash; <a href='https://www.first.org/conference/vulncon26/program#d20260415' target='_blank'>View day 3 schedule</a><br/><strong>Thursday, April 16</strong> &mdash; <a href='https://www.first.org/conference/vulncon26/program#d20260416' target='_blank'>View day 4 schedule</a><br/><br/>An Offsite Social Event will be held at the Western Spirit Museum on Wednesday, April 15. Learn more <a href='https://www.first.org/conference/vulncon26/registration#Registration-Information' target='_blank'>here</a>.<br/><br/><strong>Registration</strong>:<br/>Closed on April 6, 2026, at 19:00 UTC. Learn more <a href='https://www.first.org/conference/vulncon26/registration#Registration-Information' target='_blank'>here</a>. <ul><li>Standard Admission (by March 14, 2026): US $525.00</li><li>Late Rate Admission (after March 14, 2026): US $600.00</li><li>Virtual Admission: US $100.00</li></ul>Registration fees include full admission to conference activities Monday through Thursday; continental breakfast, lunch, and two coffee breaks Tuesday through Thursday; entry to the Monday welcome reception; entry to the Tuesday networking reception; entry to the vendor hall; all applicable conference materials;, and access to live streams and applicable apps.<br/><br/><strong>Purpose:</strong><br/>The purpose of VulnCon is to collaborate with various vulnerability management and cybersecurity professionals to develop forward leaning ideas that can be taken back to individual programs for action to benefit the vulnerability management ecosystem.<br/><br/>A key goal of the conference is to understand what important stakeholders and programs are doing within the vulnerability management ecosystem and best determine how to benefit the ecosystem broadly.<br/><br/><strong>Call for Speakers (CFS)</strong>:<br/>Closed on December 22, 2025. The <a href='https://www.first.org/conference/vulncon26/cfs' target='_blank'>CFS</a> requirements and submission process are available <a href='https://www.first.org/conference/vulncon26/cfs' target='_blank'>here</a>.",
6767
"permission": "public",
6868
"url": "https://www.first.org/conference/vulncon26/",
6969
"date": {

src/assets/data/news.json

Lines changed: 63 additions & 6 deletions
Large diffs are not rendered by default.

src/views/About/Metrics.vue

Lines changed: 22 additions & 23 deletions
Original file line numberDiff line numberDiff line change
@@ -334,10 +334,11 @@
334334
</p>
335335
</div>
336336
<h3 class="title">CNA Enrichment Recognition List</h3>
337-
<p class="cve-help-text"><span class="has-text-weight-bold">Last Updated: </span><time>March 2, 2026</time><br/>
338-
<span class="has-text-weight-bold">Total CNAs: </span>259</p>
337+
<p class="cve-help-text"><span class="has-text-weight-bold">Last Updated: </span><time>April 6, 2026</time><br/>
338+
<span class="has-text-weight-bold">Total CNAs: </span>258</p>
339339
<div>
340340
<ul>
341+
<li>2N Telekomunikace a.s.</li>
341342
<li>Acronis International GmbH</li>
342343
<li>Adobe Systems Incorporated</li>
343344
<li>Advanced Micro Devices Inc.</li>
@@ -350,7 +351,6 @@
350351
<li>AMI</li>
351352
<li>ARC Informatique</li>
352353
<li>Arista Networks, Inc.</li>
353-
<li>Armis, Inc.</li>
354354
<li>Asea Brown Boveri Ltd.</li>
355355
<li>ASR Microelectronics Co., Ltd.</li>
356356
<li>ASUSTeK Computer Incorporation</li>
@@ -360,7 +360,6 @@
360360
<li>Autodesk</li>
361361
<li>Automotive Security Research Group (ASRG)</li>
362362
<li>Axis Communications AB</li>
363-
<li>AxxonSoft Limited</li>
364363
<li>Azure Access Technology</li>
365364
<li>BeyondTrust Inc.</li>
366365
<li>Bitdefender</li>
@@ -375,25 +374,25 @@
375374
<li>Canon Inc.</li>
376375
<li>Canonical Ltd.</li>
377376
<li>Carrier Global Corporation</li>
377+
<li>Cato Networks</li>
378378
<li>CERT.PL</li>
379379
<li>CERT@VDE</li>
380380
<li>Check Point Software Technologies Ltd.</li>
381381
<li>Checkmarx</li>
382382
<li>Checkmk GmbH</li>
383383
<li>Cisco Systems, Inc.</li>
384384
<li>Citrix Systems, Inc.</li>
385+
<li>CODRA</li>
385386
<li>Commvault Systems Inc</li>
387+
<li>Concrete CMS</li>
386388
<li>ConnectWise LLC</li>
387389
<li>Crafter CMS</li>
388-
<li>Crestron Electronics, Inc.</li>
389390
<li>CrowdStrike Holdings, Inc.</li>
390-
<li>CyberDanube</li>
391391
<li>Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government</li>
392392
<li>Dahua Technologies</li>
393393
<li>Dassault Systèmes</li>
394394
<li>Delinea, Inc.</li>
395395
<li>Dell EMC</li>
396-
<li>Delta Electronics, Inc.</li>
397396
<li>Digi International Inc.</li>
398397
<li>Docker Inc.</li>
399398
<li>dotCMS LLC</li>
@@ -406,18 +405,23 @@
406405
<li>Ericsson</li>
407406
<li>Erlang Ecosystem Foundation</li>
408407
<li>ESET, spol. s r.o.</li>
408+
<li>EU Agency for Cybersecurity (ENISA)</li>
409409
<li>Extreme Networks, Inc.</li>
410410
<li>F5 Networks</li>
411+
<li>Fedora Project (Infrastructure Software)</li>
411412
<li>Fermax Technologies SLU</li>
412413
<li>Financial Security Institute (FSI)</li>
413414
<li>Flexera Software LLC</li>
414415
<li>floragunn GmbH</li>
415416
<li>Fluid Attacks</li>
417+
<li>Forcepoint</li>
416418
<li>Fortinet, Inc.</li>
417419
<li>Fortra, LLC</li>
418420
<li>Foxit Software Incorporated</li>
419421
<li>Gallagher Group Ltd</li>
422+
<li>Gen Digital Inc.</li>
420423
<li>Genetec Inc.</li>
424+
<li>GeoVision Inc.</li>
421425
<li>GitHub (maintainer security advisories)</li>
422426
<li>GitHub Inc, (Products Only)</li>
423427
<li>GitLab Inc.</li>
@@ -431,6 +435,7 @@
431435
<li>Hanwha Vision Co., Ltd.</li>
432436
<li>Harborist</li>
433437
<li>HashiCorp Inc.</li>
438+
<li>HCL Software</li>
434439
<li>HeroDevs</li>
435440
<li>HiddenLayer, Inc.</li>
436441
<li>Hillstone Networks Inc.</li>
@@ -439,10 +444,8 @@
439444
<li>Hitachi, Ltd.</li>
440445
<li>Honeywell International Inc.</li>
441446
<li>Honor Device Co., Ltd.</li>
442-
<li>HP Inc.</li>
443447
<li>Huawei Technologies</li>
444448
<li>HYPR Corp</li>
445-
<li>IBM Corporation</li>
446449
<li>ICS-CERT</li>
447450
<li>Indian Computer Emergency Response Team (CERT-In)</li>
448451
<li>Insyde Software</li>
@@ -452,7 +455,6 @@
452455
<li>Israel National Cyber Directorate</li>
453456
<li>Ivanti</li>
454457
<li>Jamf</li>
455-
<li>Jaspersoft</li>
456458
<li>JetBrains s.r.o.</li>
457459
<li>JFROG</li>
458460
<li>Johnson Controls</li>
@@ -467,40 +469,38 @@
467469
<li>Legion of the Bouncy Castle Inc.</li>
468470
<li>Lenovo Group Ltd.</li>
469471
<li>Lexmark International Inc.</li>
470-
<li>LG Electronics</li>
471472
<li>Liferay, Inc.</li>
472473
<li>M-Files Corporation</li>
473474
<li>Maritime Hacking Village</li>
474475
<li>Mattermost, Inc</li>
475476
<li>Mautic</li>
476477
<li>Medtronic</li>
477478
<li>Microchip Technology</li>
478-
<li>Microsoft Corporation</li>
479479
<li>Milestone Systems A/S</li>
480480
<li>Mitsubishi Electric Corporation</li>
481481
<li>Monash University - Cyber Security Incident Response Team</li>
482+
<li>MongoDB</li>
482483
<li>Moxa Inc.</li>
483484
<li>N-able</li>
484485
<li>National Cyber Security Centre Finland</li>
486+
<li>National Cyber Security Centre SK-CERT</li>
485487
<li>National Instruments</li>
486488
<li>NEC Corporation</li>
487489
<li>Neo4j</li>
488490
<li>NETGEAR</li>
489491
<li>Netskope</li>
490492
<li>NLnet Labs</li>
491-
<li>NortonLifeLock Inc</li>
492493
<li>Nozomi Networks Inc.</li>
493494
<li>Nvidia Corporation</li>
494495
<li>Omnissa, LLC</li>
495-
<li>OMRON Corporation</li>
496-
<li>ONEKEY GmbH</li>
497496
<li>Open Design Alliance</li>
497+
<li>OpenHarmony</li>
498498
<li>OpenJS Foundation</li>
499499
<li>OpenText (formerly Micro Focus)</li>
500500
<li>OpenVPN Inc.</li>
501501
<li>OPPO</li>
502502
<li>Palantir Technologies</li>
503-
<li>Panasonic Holdings Corporation</li>
503+
<li>Palo Alto Networks</li>
504504
<li>PaperCut Software Pty Ltd</li>
505505
<li>Payara</li>
506506
<li>Pegasystems</li>
@@ -512,6 +512,7 @@
512512
<li>Project Black</li>
513513
<li>Proofpoint Inc.</li>
514514
<li>Protect AI</li>
515+
<li>PTC Inc.</li>
515516
<li>Pure Storage, Inc.</li>
516517
<li>QNAP Systems, Inc.</li>
517518
<li>Qualcomm, Inc.</li>
@@ -521,16 +522,16 @@
521522
<li>Rapid7, Inc.</li>
522523
<li>Real-Time Innovations, Inc.</li>
523524
<li>Red Hat CNA-LR</li>
524-
<li>Red Hat, Inc.</li>
525525
<li>Ribose Limited</li>
526526
<li>Robert Bosch GmbH</li>
527527
<li>Rockwell Automation</li>
528528
<li>S21sec Cyber Solutions by Thales</li>
529529
<li>SailPoint Technologies</li>
530530
<li>Samsung TV & Appliance</li>
531531
<li>SAP SE</li>
532+
<li>SBA Research gGmbH</li>
532533
<li>Schneider Electric SE</li>
533-
<li>Seagate Technology</li>
534+
<li>Secomea</li>
534535
<li>Security Risk Advisors</li>
535536
<li>ServiceNow</li>
536537
<li>SICK AG</li>
@@ -542,7 +543,6 @@
542543
<li>SolarWinds</li>
543544
<li>Solidigm</li>
544545
<li>Sonatype Inc.</li>
545-
<li>Sophos</li>
546546
<li>Spanish National Cybersecurity Institute, S.A.</li>
547547
<li>Spartans Security</li>
548548
<li>Suse</li>
@@ -555,32 +555,31 @@
555555
<li>TCS-CERT </li>
556556
<li>TeamViewer Germany GmbH</li>
557557
<li>Temporal Technologies Inc.</li>
558-
<li>Tenable Network Security, Inc.</li>
559558
<li>Teradyne Robotics</li>
560559
<li>Thales Group</li>
561560
<li>The Browser Company of New York</li>
562561
<li>The Document Foundation</li>
563562
<li>The Joomla! Project</li>
564563
<li>The Missing Link Australia (TML)</li>
565564
<li>The Qt Company</li>
566-
<li>The Rust Project</li>
567565
<li>The Tcpdump Group</li>
568566
<li>TianoCore.org</li>
569-
<li>TIBCO Software Inc.</li>
570567
<li>Toreon</li>
571568
<li>TP-Link Systems Inc.</li>
572569
<li>TR-CERT (Computer Emergency Response Team of the Republic of Turkey)</li>
573570
<li>Trellix</li>
574571
<li>Trend Micro, Inc.</li>
572+
<li>Turan Security</li>
575573
<li>TWCERT/CC</li>
576574
<li>TYPO3 Association</li>
577575
<li>upKeeper Solutions</li>
578576
<li>Vaadin Ltd.</li>
579577
<li>Vivo Mobile Communication Technology Co., LTD.</li>
580578
<li>VulDB</li>
579+
<li>VulnCheck</li>
580+
<li>VULSec Labs</li>
581581
<li>WatchGuard Technologies, Inc.</li>
582582
<li>Western Digital</li>
583-
<li>Wind River Systems Inc.</li>
584583
<li>Wiz, Inc.</li>
585584
<li>wolfSSL Inc.</li>
586585
<li>Wordfence</li>

0 commit comments

Comments
 (0)