The Common Vulnerabilities and Exposures Database - CVE Program at risk

I’ve been reporting security issues for many years, especially in apps and frontends on the Hive blockchain. One key tool I always rely on is the CVE program – the Common Vulnerabilities and Exposures database.

CVE is like a public list of known security bugs. When someone finds a new vulnerability, it’s important to register it as a CVE. That way, others can understand the risk, fix it, and track it. It’s essential not just for me, but for everyone who takes software security seriously.

Recently, I read that the future of the CVE program was unclear. Funding was at risk, and people in the security world were worried. Without stable support, the whole system could be in danger. And for independent researchers like me, that would be a big loss.

Update (April 16, 2025):
Good news – the CVE program will continue. A new organization called the CVE Foundation has been created to take over. According to a press release, the CVE Board had already been planning for this case. Kent Landfield from the CVE Foundation said it clearly: “**CVE is too important as a cornerstone of the global cybersecurity ecosystem to become vulnerable itself.**”

The goal of the CVE Foundation is to fix this weak spot in the system and keep CVE a trusted, global initiative. That’s a huge relief. It means people like me can keep finding and reporting bugs in a way that really matters.

I’m glad to see CVE continue – the security community needs it, and so do I.