Skip to main content
GBrain
Menu
Log in Get Started

cve.now

A free vulnerability feed for CVEs, advisories and package versions.

Install It is public, so there is nothing to sign in to.

What GBrain can do with cve.now

cve.now, run by Sazabi, merges public vulnerability feeds (the CVE List, OSV, GitHub Advisories, NVD and more) into one free catalog that updates every few minutes. Connected to a workspace, GBrain can answer “is anything in this lockfile affected by a known vulnerability?”, summarize a new CVE in plain words, or list this week’s critical issues for a team’s stack.

No sign-in is needed, and the connection only reads.

  • Look up a vulnerability by CVE, GHSA or OSV id
  • Check exact package versions or a lockfile for known vulnerabilities
  • List the newest critical, KEV or per-ecosystem entries
  • Search vulnerabilities and rank the worst of the week

From the command line

GBrain gives cve.now a command line too. From a terminal, a script or Claude Code, gbrainio tool help cve-now lists its commands once it is connected.

cve.now from the command line

More in Reference

Install cve.now in a workspace

It is public, so there is nothing to sign in to. Then add it to a workspace, and anyone on the team can ask about it in plain words.

Install cve.now Every application