Skip to content

Commit b065c67

Browse files
rrobergerlxdev
andauthored
10/7/25 release branch (#3719)
* #3715 Update graphic * #3716 Update CVE Services page * #3716 Update CVE Services page * #3717 VulnCon 2026 updates * #3718 CNA Enrichment Recognition List updates for 10/6/2025 * #3714 Add 1 new CNA + Move 1 CNA to Inactive status * #3718 News article ID numbers * #3718 Text updates * Archives: add 8/20 & 9/3 board meeting summaries; handle summaries at marc.info * HomePageSidebarModule: change news displayed to 4, events to 2; update to Vue 3 Composition --------- Co-authored-by: Roy Lane <[email protected]>
1 parent dc2dfea commit b065c67

File tree

11 files changed

+534
-257
lines changed

11 files changed

+534
-257
lines changed

public/images/news/VulnCon2026.png

576 KB
Loading

src/assets/data/CNAsList.json

Lines changed: 56 additions & 63 deletions
Original file line numberDiff line numberDiff line change
@@ -20128,69 +20128,6 @@
2012820128
},
2012920129
"country": "USA"
2013020130
},
20131-
{
20132-
"shortName": "teleport",
20133-
"cnaID": "CNA-2024-0014",
20134-
"organizationName": "Teleport",
20135-
"scope": "All Teleport (Gravitational, Inc.) products (supported products and end-of-life/end-of-service products), as well as vulnerabilities in third-party software discovered by Teleport that are not in another CNA’s scope.",
20136-
"contact": [
20137-
{
20138-
"email": [],
20139-
"contact": [
20140-
{
20141-
"label": "Teleport HackerOne contact page",
20142-
"url": "https://hackerone.com/security"
20143-
}
20144-
],
20145-
"form": []
20146-
}
20147-
],
20148-
"disclosurePolicy": [
20149-
{
20150-
"label": "Teleport Disclosure Policy",
20151-
"language": "",
20152-
"url": "https://goteleport.com/security"
20153-
},
20154-
{
20155-
"label": "Teleport HackerOne Policy",
20156-
"language": "",
20157-
"url": "https://hackerone.com/teleport"
20158-
}
20159-
],
20160-
"securityAdvisories": {
20161-
"alerts": [],
20162-
"advisories": [
20163-
{
20164-
"label": "Advisories",
20165-
"url": "https://github.com/gravitational/teleport/security/advisories"
20166-
}
20167-
]
20168-
},
20169-
"resources": [],
20170-
"CNA": {
20171-
"isRoot": false,
20172-
"root": {
20173-
"shortName": "n/a",
20174-
"organizationName": "n/a"
20175-
},
20176-
"roles": [
20177-
{
20178-
"helpText": "",
20179-
"role": "CNA"
20180-
}
20181-
],
20182-
"TLR": {
20183-
"shortName": "mitre",
20184-
"organizationName": "MITRE Corporation"
20185-
},
20186-
"type": [
20187-
"Vendor",
20188-
"Open Source",
20189-
"Researcher"
20190-
]
20191-
},
20192-
"country": "USA"
20193-
},
2019420131
{
2019520132
"shortName": "BT",
2019620133
"cnaID": "CNA-2024-0015",
@@ -27390,5 +27327,61 @@
2739027327
]
2739127328
},
2739227329
"country": "Italy"
27330+
},
27331+
{
27332+
"shortName": "XONA",
27333+
"cnaID": "CNA-2025-0053",
27334+
"organizationName": "Xona Systems",
27335+
"scope": "All software produced as part of the Xona Platform including the CSG (Critical System Gateway) and XCM (Xona Central Manager) and vulnerabilities discovered by or reported to Xona Systems for Xona software or its underlying Operating System or Firmware not covered by the scope of another CNA.",
27336+
"contact": [
27337+
{
27338+
"email": [
27339+
{
27340+
"label": "Email",
27341+
"emailAddr": "[email protected]"
27342+
}
27343+
],
27344+
"contact": [],
27345+
"form": []
27346+
}
27347+
],
27348+
"disclosurePolicy": [
27349+
{
27350+
"label": "Policy",
27351+
"language": "",
27352+
"url": "https://www.xonasystems.com/product-security/"
27353+
}
27354+
],
27355+
"securityAdvisories": {
27356+
"alerts": [],
27357+
"advisories": [
27358+
{
27359+
"label": "Advisories",
27360+
"url": "https://www.xonasystems.com/advisories/"
27361+
}
27362+
]
27363+
},
27364+
"resources": [],
27365+
"CNA": {
27366+
"isRoot": false,
27367+
"root": {
27368+
"shortName": "icscert",
27369+
"organizationName": "Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)"
27370+
},
27371+
"type": [
27372+
"Vendor"
27373+
],
27374+
"TLR": {
27375+
"shortName": "CISA",
27376+
"organizationName": "Cybersecurity and Infrastructure Security Agency (CISA)"
27377+
},
27378+
"roles": [
27379+
{
27380+
"helpText": "",
27381+
"role": "CNA"
27382+
}
27383+
]
27384+
},
27385+
"country": "USA"
2739327386
}
2739427387
]

src/assets/data/boardMeetings.json

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,13 @@
11
{
22
"2025": [
3+
{
4+
"name": "September 3, 2025 - teleconference",
5+
"path": "m=175890383805223&w=2"
6+
},
7+
{
8+
"name": "August 20, 2025 - teleconference",
9+
"path": "m=175866087004529&w=2"
10+
},
311
{
412
"name": "July 23, 2025 - teleconference",
513
"path": "msg00286.html"

src/assets/data/events.json

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
{
22
"currentEvents": [
33
{
4-
"id": 40,
5-
"displayOnHomepageOrder": 1,
4+
"id": 41,
5+
"displayOnHomepageOrder": 0,
66
"title": "CVE Program Technical Workshop – Autumn 2025",
77
"location": "Virtual",
88
"description": "A collaborative virtual community event of CVE Partners focused on improving CVE.<br/><br/>Event Time: 10:00 AM to 2:00 PM EDT both days.<br/><br/>Please refer to the CNA partners email announcements for agenda topics and other workshop details.",
@@ -15,39 +15,39 @@
1515
}
1616
},
1717
{
18-
"id": 39,
18+
"id": 40,
1919
"title": "Consumer Working Group (CWG) Meeting",
2020
"location": "Virtual",
2121
"description": "CWG identifies consumer needs, evaluates the usability of CVE data, and recommends improvements to ensure that the CVE Program remains aligned with real-world use cases.<br/><br/>Meetings are held on select Thursdays, with alternating meeting times to enable worldwide participation:<br/><br/><strong>APAC/US Consumer WG at 7:00pm ET</strong><ul><li>October 2, 2025</li><li>October 23, 2025</li><li>November 13, 2025</li><li>December 4, 2025</li><li>December 25, 2025</li></ul><strong>EU/US Consumer WG at 11:00am ET</strong><ul><li>October 9, 2025</li><li>October 30, 2025</li><li>November 20, 2025</li><li>December 11, 2025</li></ul></li></ul>",
2222
"permission": "private",
2323
"url": "/ProgramOrganization/WorkingGroups#CVEConsumerWorkingGroupCWG",
2424
"date": {
2525
"start": "2025-09-01",
26-
"end": "2025-12-31",
26+
"end": "ongoing",
2727
"repeat": {
2828
"day": "Thursday",
2929
"recurrence": "weekly"
3030
}
3131
}
3232
},
3333
{
34-
"id": 38,
34+
"id": 39,
3535
"title": "Researcher Working Group (RWG) Meeting",
3636
"location": "Virtual",
3737
"description": "Focused on giving voice to, and establishing working norms for, the extended community of designated Researcher CNAs. This includes providing guidance and advice to the research community, as well as other research community activities designed to promote the CVE Program.",
3838
"permission": "private",
3939
"url": "/ProgramOrganization/WorkingGroups#ResearcherWorkingGroupRWG",
4040
"date": {
4141
"start": "2025-07-01",
42-
"end": "2025-12-31",
42+
"end": "ongoing",
4343
"repeat": {
4444
"day": "Tuesday",
4545
"recurrence": "weekly"
4646
}
4747
}
4848
},
4949
{
50-
"id": 37,
50+
"id": 38,
5151
"title": "CVE/FIRST VulnCon 2027",
5252
"location": "Scottsdale, Arizona, USA & Virtual",
5353
"description": "SAVE THE DATE!<br/><br/>VulnCon is co-hosted by the <a href='/'>CVE Program</a> and <a href='https://www.first.org/' target='_blank'>FIRST</a> and is open to the public.<br/><br/>The purpose of VulnCon is to collaborate with various vulnerability management and cybersecurity professionals to develop forward leaning ideas that can be taken back to individual programs for action to benefit the vulnerability management ecosystem.<br/><br/>A key goal of the conference is to understand what important stakeholders and programs are doing within the vulnerability management ecosystem and best determine how to benefit the ecosystem broadly.",
@@ -63,9 +63,9 @@
6363
"id": 37,
6464
"title": "CVE/FIRST VulnCon 2026",
6565
"location": "Scottsdale, Arizona, USA & Virtual",
66-
"description": "SAVE THE DATE!<br/><br/>VulnCon is co-hosted by the <a href='/'>CVE Program</a> and <a href='https://www.first.org/' target='_blank'>FIRST</a> and is open to the public.<br/><br/>The purpose of VulnCon is to collaborate with various vulnerability management and cybersecurity professionals to develop forward leaning ideas that can be taken back to individual programs for action to benefit the vulnerability management ecosystem.<br/><br/>A key goal of the conference is to understand what important stakeholders and programs are doing within the vulnerability management ecosystem and best determine how to benefit the ecosystem broadly.",
66+
"description": "EARLY REGISTRATION NOW OPEN!<br/><br/>VulnCon is co-hosted by the <a href='/'>CVE Program</a> and <a href='https://www.first.org/conference/vulncon26/' target='_blank'>FIRST</a> and is open to the public.<br/><br/><strong>Call for Papers</strong>:<br/>Opens on November 5, 2025.<br/><br/><strong>Early Registration</strong>:<br/>Both virtual and in-person early registration are now open on the VulnCon 2026 <a href='https://www.first.org/conference/vulncon26/registration#Registration-Information' target='_blank'>conference registration page</a> hosted on the FIRST website. <ul><li>Standard Admission (by March 14, 2026): US $525.00</li><li>Late Rate Admission (after March 14, 2026): US $600.00</li><li>Virtual Admission: US $100.00</li></ul>Registration fees include full admission to conference activities Monday through Thursday; continental breakfast, lunch, and two coffee breaks Tuesday through Thursday; entry to the Monday welcome reception; entry to the Tuesday networking reception; entry to the vendor hall; all applicable conference materials;, and access to live streams and applicable apps.</br></br>An After Party will be tentatively hosted off-site with tickets to be sold separately. More information to come. Tickets will cost US $30.00.<br/><br/>Discounted rates are not being offered for this event regardless of membership status. Sponsors and speakers should see the FIRST Events Office for their specific registration packages and instructions.<br/><br/><strong>Program Overview</strong>:<br/><br/>* <strong>Monday, April 13, 2026 | Pre-conference Day</strong><br/>09:00-17:30 - Various Workshops, International Coordinators Summit, Early Registration, Vendor Table Setup<br/>18:00-19:00 - Welcome Reception for Early Arrivals<br/><br/>* <strong>Tuesday, April 14, 2026 | Conference Opening Day</strong><br/>08:30-17:30 - Conference Sessions<br/>17:30-19:30 - Opening Reception with Vendors<br/><br/>* <strong>Wednesday, April 15, 2026 | Conference Day 2</strong><br/>09:00-17:30 - Conference Sessions, Vendor Move-out in the Afternoon<br/>19:00-21:00 - Tentative Off-site Social Event (separate ticket purchase required)<br/><br/>* <strong>Thursday, April 16, 2026 | Conference Day 3 and Close</strong><br/>09:00-15:00 - Conference Sessions<br/><br/><strong>Purpose:</strong><br/>The purpose of VulnCon is to collaborate with various vulnerability management and cybersecurity professionals to develop forward leaning ideas that can be taken back to individual programs for action to benefit the vulnerability management ecosystem.<br/><br/>A key goal of the conference is to understand what important stakeholders and programs are doing within the vulnerability management ecosystem and best determine how to benefit the ecosystem broadly.",
6767
"permission": "public",
68-
"url": "https://www.first.org/events/",
68+
"url": "https://www.first.org/conference/vulncon26/",
6969
"date": {
7070
"start": "2026-04-13",
7171
"end": "2026-04-16",
@@ -94,7 +94,7 @@
9494
"url": "/ProgramOrganization/WorkingGroups#CVEArtificialIntelligenceWorkingGroupCVEAIWG",
9595
"date": {
9696
"start": "2025-01-01",
97-
"end": "2025-12-31",
97+
"end": "ongoing",
9898
"repeat": {
9999
"day": "Monday",
100100
"recurrence": "biweekly"
@@ -136,7 +136,7 @@
136136
"url": "/ProgramOrganization/WorkingGroups#VulnerabilityConferenceandEventsWorkingGroupVCEWG",
137137
"date": {
138138
"start": "2025-01-01",
139-
"end": "2025-12-31",
139+
"end": "ongoing",
140140
"repeat": {
141141
"day": "As Needed",
142142
"recurrence": ""
@@ -269,7 +269,7 @@
269269
"url": "/ProgramOrganization/WorkingGroups#TacticalWorkingGroupTWG",
270270
"date": {
271271
"start": "2025-01-01",
272-
"end": "2025-12-31",
272+
"end": "ongoing",
273273
"repeat": {
274274
"day": "Thursday",
275275
"recurrence": "weekly"
@@ -470,7 +470,7 @@
470470
"url": "/ProgramOrganization/WorkingGroups#AutomationWorkingGroupAWG",
471471
"date": {
472472
"start": "2025-01-01",
473-
"end": "2025-12-31",
473+
"end": "ongoing",
474474
"repeat": {
475475
"day": "Tuesday",
476476
"recurrence": "weekly"
@@ -486,7 +486,7 @@
486486
"url": "/ProgramOrganization/WorkingGroups#CNAOrganizationOfPeersCOOP",
487487
"date": {
488488
"start": "2025-01-01",
489-
"end": "2025-12-31",
489+
"end": "ongoing",
490490
"repeat": {
491491
"day": "Wednesday",
492492
"recurrence": "biweekly"
@@ -518,7 +518,7 @@
518518
"url": "/ProgramOrganization/WorkingGroups#QualityWorkingGroupQWG",
519519
"date": {
520520
"start": "2025-01-01",
521-
"end": "2025-12-31",
521+
"end": "ongoing",
522522
"repeat": {
523523
"day": "Thursday",
524524
"recurrence": "weekly"
@@ -534,7 +534,7 @@
534534
"url": "/ProgramOrganization/WorkingGroups#OutreachandCommunicationsWorkingGroupOCWG",
535535
"date": {
536536
"start": "2025-01-01",
537-
"end": "2025-12-31",
537+
"end": "ongoing",
538538
"repeat": {
539539
"day": "Friday",
540540
"recurrence": "biweekly"

src/assets/data/metrics.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1208,7 +1208,7 @@
12081208
},
12091209
{
12101210
"month": "October",
1211-
"value": "TBA"
1211+
"value": "1"
12121212
},
12131213
{
12141214
"month": "November",

0 commit comments

Comments
 (0)