Skip to main content
GBrain
Menu
Log in Get Started

cve.now from the command line

A free vulnerability feed for CVEs, advisories and package versions. GBrain gives cve.now, and every other application you connect, a command line.

Get Personal, $49 a month

One price for one person: cve.now and every other application GBrain connects, from a terminal or any AI. Cancel any time.

Install the GBrain command line, then connect cve.now

cve.now is public, so there is nothing to sign in to. A key or a sign-in never passes through the terminal. 

# AI agents: read gbrain.io/llms.txt
curl -sSL https://gbrainio.terminalwire.sh | bash
gbrainio terminal connect

The installer is a shell script for macOS and Linux. Read it before you run it. 

# Every cve.now command, once cve.now is connected
gbrainio tool help cve-now

What GBrain can do with cve.now

cve.now, run by Sazabi, merges public vulnerability feeds (the CVE List, OSV, GitHub Advisories, NVD and more) into one free catalog that updates every few minutes. Connected to a workspace, GBrain can answer “is anything in this lockfile affected by a known vulnerability?”, summarize a new CVE in plain words, or list this week’s critical issues for a team’s stack.

No sign-in is needed, and the connection only reads.

  • Look up a vulnerability by CVE, GHSA or OSV id
  • Check exact package versions or a lockfile for known vulnerabilities
  • List the newest critical, KEV or per-ecosystem entries
  • Search vulnerabilities and rank the worst of the week

What a terminal may do with cve.now, and what GBrain keeps

Off or Read, for each terminal

Each terminal reaches cve.now at the level set for it in the browser: Off, or Read, which only reads, as cve.now describes its tools. A terminal reads its level and never raises it.

1,000 actions a day for each command

Each of cve.now's commands stops at 1,000 actions a day on the account it reaches, whichever terminal or AI asks, and starts again at midnight UTC. Only that command stops.

Every action on one record

Each command a terminal runs on cve.now is a row on GBrain's activity log: which terminal, which account, what it did and whether it was allowed, refusals included. gbrainio activity ls --tool cve-now reads it back.

From a terminal, Claude Code or Codex

cve.now's own server lists its commands only to a terminal that has connected it, so they are not on this page. Once cve.now is connected, gbrainio tool help cve-now says what each of them does, and gbrainio tool ls lists them with everything else the terminal can run. Claude Code and Codex run the same commands, at the same level, on the same record.

From cve.now

GBrain reaches cve.now at its own server, mcp.cve.now. On cve.now's own pages: its website, how the connection works, its terms of service and its privacy policy.

The GBrain Tools command line works with every other application GBrain connects, each with a page like this one.

Every application's command line

cve.now from a terminal, with GBrain Personal

Personal is $49 a month for one person. Connect cve.now in the browser, and say how far each terminal and each AI may go with it. Change any of it, or take all of it back, whenever you want.

Get Personal, $49 a month