Legal notice
Software and data
Vigie Vuln — Vigie Vuln (Apache-2.0). Data from the sources listed on each page, under their own licences.
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use — Copyright © 1999–2026, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation. Terms of use |
| CISA KEV | CC0 1.0. No endorsement by CISA is implied. |
| EPSS (FIRST.org) | FIRST — attribution requested. |
| ENISA EUVD | Reproduction authorised, source acknowledged (ENISA legal notice). |
| NVD (NIST) | Public domain. This product uses data from the NVD API but is not endorsed or certified by the NVD. Mirrored through fkie-cad/nvd-json-data-feeds. |
| OSV.dev | Each record under its database's licence, shown on its page: GitHub Advisory Database, PyPA, Go (CC-BY 4.0), OpenSSF Malicious Packages (Apache-2.0), RustSec (CC0)… |
| GCVE | Identifiers from the GCVE allocation rules (GNA 0 = CVE). |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 — source and date of last update shown on each advisory; linked, never framed. |