https://github.com/jegly/globalcve
🌐 Centralized platform for aggregating and visualizing global CVE data — including feeds from NVD, MITRE, CNNVD, JVN, CERT-FR, and more. Built to unify vulnerability intelligence across borders.
https://github.com/jegly/globalcve
cve cve-search cve-searchsploit cybersecurity exploit-database infosec open-source security-tools threat-intelligence vulnerability vulnerability-intelligence
Last synced: 3 days ago
JSON representation
🌐 Centralized platform for aggregating and visualizing global CVE data — including feeds from NVD, MITRE, CNNVD, JVN, CERT-FR, and more. Built to unify vulnerability intelligence across borders.
- Host: GitHub
- URL: https://github.com/jegly/globalcve
- Owner: jegly
- License: other
- Created: 2025-10-21T04:27:45.000Z (3 months ago)
- Default Branch: main
- Last Pushed: 2025-12-12T10:13:15.000Z (about 2 months ago)
- Last Synced: 2025-12-13T22:47:29.038Z (about 1 month ago)
- Topics: cve, cve-search, cve-searchsploit, cybersecurity, exploit-database, infosec, open-source, security-tools, threat-intelligence, vulnerability, vulnerability-intelligence
- Language: TypeScript
- Homepage: https://globalcve.xyz
- Size: 3.84 MB
- Stars: 51
- Watchers: 1
- Forks: 6
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Contributing: docs/contributing.md
- License: LICENSE
Awesome Lists containing this project
README
**_Global threats. Unified insights._**
## ☕ Support the Project
If you find GlobalCVE useful, consider [buying me a coffee](https://www.buymeacoffee.com/globalcve) to support ongoing development.
## 🏷️ What Sets Us Apart
GlobalCVE isn’t just another vulnerability feed. We’re building a transparent, unified, and open-source backbone for global CVE intelligence.
- **Multi-source aggregation**
We pull from public feeds across continents — NVD, CIRCL, JVN, ExploitDB, and more — with full attribution and fallback logic.
- **Open by design**
No paywalls, no vendor lock-in. Our code is public, our API is free, and our roadmap is community-driven.
- **Minimalist and scalable**
Built with serverless architecture and clean UI logic, GlobalCVE is fast, forkable, and easy to integrate.
- **Security-first ethos**
We prioritize clarity, provenance, and responsible data use.
- **Built by builders**
This isn’t a product. It’s infrastructure. And it’s yours to use, improve, and extend.
---
🌐 Visit the live site → globalcve.xyz
# 🌐 GlobalCVE
An open-source vulnerability intelligence platform that aggregates CVEs from multiple national and vendor sources — cleanly, transparently, and developer-friendly.
---
## 🏷️ What Sets Us Apart
- **Unified CVE view** — no duplicates, no noise
- **Custom badges** for source attribution
- **Minimalist UI** with dark mode and loading states
- **Serverless architecture** — scalable and fast
- **Open-source and free forever**
---
## 🌍 Sources We Support
- 🇺🇸 NVD (US National Vulnerability Database)
- 🇯🇵 JVN (Japan Vulnerability Notes)
- 🇨🇭 CIRCL (Luxembourg CERT feed)
- 🧨 ExploitDB (Public exploit repository)
- 🇨🇳 CNNVD — *in testing repo*
- 🤖 Android Security Bulletins (ASB) — *in testing repo*
- 🇫🇷 CERT-FR — *in testing repo*
- Testing Repo contains many many many sources.
---
## ⚙️ Tech Stack
- **Frontend**: Next.js (App Router), Tailwind CSS
- **Backend**: Node.js, Express-style API routes
- **Data**: CSV + JSON parsing, serverless fetch logic
- **Deployment**: Vercel (coming soon), custom domain support
- **Optional DBs**: SQLite, Supabase, or flat file cache
---
## Screenshots
Here’s a preview of GlobalCVE’s UI:
### Homepage
### Homepage
## 📦 Getting Started
### Prerequisites
- Node.js 18+
- **NVD API Key** (optional, but required for NVD source)
### Getting an NVD API Key
1. Visit [https://nvd.nist.gov/developers/request-an-api-key](https://nvd.nist.gov/developers/request-an-api-key)
2. Request a free API key
3. You'll receive it via email
**Note:** If you don't want to use the NVD source, you can skip this step. Other sources like **CISA KEV** cover most critical CVEs and don't require an API key.
### Installation
1. Clone the repository:
```bash
git clone https://github.com/jegly/globalcve.git
cd globalcve
```
2. Install dependencies:
```bash
npm install
```
3. Create a `.env.local` file in the root directory:
```bash
NVD_API_KEY=your_api_key_here
```
4. Run the development server:
```bash
npm run dev
```
Then visit [http://localhost:3000](http://localhost:3000) to view the site.
---
## 🧪 Testing Branch (Beta)
Our **[testing repository](https://github.com/jegly/globalcve-testing)** is now **live and running**! with many new features! 🎉
**New features in testing:**
- 📊 **Advanced visualization charts** for CVE trends and statistics
- 🔍 **Enhanced search functions** with complex query support
- 🌐 **40+ additional sources** including vendor-specific advisories (Cisco, VMware, Oracle, Red Hat, Ubuntu, Debian, SAP, and more)
- 🎨 Improved UI/UX with better filtering and sorting
**⚠️ Status:** Still in beta — expect occasional bugs and breaking changes. We're actively merging stable features into the main branch.
**Want to test cutting-edge features?** Check out [globalcve/testing](https://github.com/jegly/globalcve-testing) and report any issues you find!
---
## 🛠️ Contributing - Dont be Shy ! :)
We welcome PRs, parser improvements, and new source integrations. Whether you're fixing bugs, adding new CVE feeders, or improving the UI — we’d love your help.
Send me a email if you want to get onboard !
---
> Built with clarity, minimalism, and a deep respect for reproducibility.