OpenCVE — The Cyber Toolchain

OpenCVE v3.1.0

Fri, 14 Aug 2026 09:25:05 GMT

OpenCVE v3.1.0 ships REST API v2 with OpenAPI docs and scoped tokens, plus project-level access control and extended audit logs. • Adds REST API v2 with OpenAPI documentation and scoped tokens for integrations. • Adds access mode and fine-grained scopes to organization API tokens, enabling tighter permission control on existing org-level tokens. • Adds project-level access control with membership roles and enforced ACLs across CVE views and dashboard widgets. • Adds project members management UI for administering per-project roles. • Extends organization audit logs to cover automations, CVE comments, and project membership changes. • Improves organization API token management UI. • Adds API Docs link in the header, visible to all users. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/opencve

OpenCVE v3.0.0

Wed, 24 Jun 2026 12:46:49 GMT

OpenCVE 3.0.0 ships Automations — trigger-driven alert and report workflows with conditions, actions, and webhooks. • New Automations engine lets teams define CVE workflows with triggers, conditions, and actions (notifications, assignments, status changes, webhooks). • Alert automations react to matching CVEs and execute configurable actions including notifications, assignments, status changes, or webhooks. • Report automations deliver daily or weekly CVE digests with configurable conditions and timezone support. • Default report and alert automations are created automatically during project onboarding. • Reports now include CVE and CVSS summaries plus weekly AI-generated summarization. • Enhanced reports dashboard widget for at-a-glance digest tracking. • Filters added to notifications and reports listings. • Test notification action and notification type picker modal for verifying delivery channels. • Redesigned organization pages with tabs, member role management, and audit logs. • Comments now supported in CVE tracking. • OpenCVE Enrichment versioning added to CVE details. • Project vulnerabilities can be filtered by multiple statuses simultaneously, or by vulnerabilities without any status. • NVD CPE configurations now exposed in the CVE API response. • New `ENABLE_REGISTER` setting allows administrators to disable new user signups. • Administrators can now reset user MFA. • CVSS version selection added to the onboarding flow. • MITRE weaknesses synced with improved browsing and search. • Vendors load incrementally without a full page reload. • SSRF blocked in webhook and Slack notification channels. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/opencve

OpenCVE v2.3.0

Tue, 13 Jan 2026 20:33:21 GMT

OpenCVE v2.3.0 adds CVE tracking with assignee/status, AI report summaries via LLM, and Slack notifications. • Add CVE tracking with assignee and status management • Add two-factor authentication (2FA) option for users • Add Slack notifications support • Add AI-powered report summarization using user-provided LLM Full history on Cyber Toolchain: https://cybertoolchain.io/tools/opencve

OpenCVE v1.5.0

Sun, 10 Dec 2023 23:20:56 GMT

OpenCVE v1.5.0 switches to NVD 2.0 API and CVE 5.0 format • Uses the NVD 2.0 API instead of legacy data feeds • Adopts the CVE 5.0 format for all stored data • Changes `raw_nvd_data` field content to return CVE 5.0 payloads Breaking changes: • The `GET /cve/` endpoint's `raw_nvd_data` field now returns CVE 5.0 payloads instead of the previous format. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/opencve

OpenCVE v1.4.0

Sun, 06 Nov 2022 09:26:35 GMT

OpenCVE v1.4.0 adds Celery locking, new config keys, admin filters, and report cleanup. • Adds `celery_lock_url`, `include_analytics`, `reports_cleanup_days`, and `smtp_use_ssl` settings to `opencve.cfg` for Redis-based task locking, analytics inclusion, automated report retention, and SMTP SSL control • Adds `column_filters` to admin views so administrators can filter vendor and product subscriptions • Adds a periodic task (driven by `reports_cleanup_days`) that automatically removes old reports • Increases performance by adding database indexes on the reports and alerts tables (requires running `upgrade-db`) Breaking changes: • Drops support for Python 3.6 • Requires a Redis instance to store the Celery lock Full history on Cyber Toolchain: https://cybertoolchain.io/tools/opencve