CVEHub

CVEHub automatically imports current security vulnerabilities (CVEs) from NVD, Ubuntu and GitHub, compares them against the software packages in your projects (SBOM), and notifies you by email as soon as a relevant vulnerability is found.

• Automatic CVE import from NVD, Ubuntu Security and GitHub
• Automatic comparison against your software bill of materials (SBOM)
• Email notification for new relevant vulnerabilities
• Clear overview of multiple projects and customers
• Scheduled, automatic comparisons via cron job

Under the EU Cyber Resilience Act (CRA) (Regulation 2024/2847), reporting vulnerabilities will become mandatory for manufacturers as of 11 September 2026.