GIVE YOUR AGENT THE EVIDENCE

Set up in your agent.

One prompt to get started. Paste it into your coding agent to connect cve.new through MCP and bring vulnerability context into your workflow.

Your agent needs remote MCP support and access to https://cve.new/mcp.

Read the setup guide

cve.new
OPEN SOURCE. SHARED CREDIT.

Built on great work.

Great tools have great foundations. Meet the maintainers, researchers, and projects that make this feed possible.

The foundations

The building blocks behind the experience.

Vue & Nuxt

Our application framework, reactive interface, routing, and server-rendered pages.

Vue

Nitro & H3

Server rendering and HTTP endpoints, built for the Cloudflare Workers runtime.

H3

Cloudflare

Workers, D1, R2, Queues, and Workflows power the application, storage, and background processing.

Motion for Vue

Our entrance animations, scroll reveals, and interactive motion.

Markdown-it

Turns advisory Markdown into readable headings, lists, tables, and code blocks.

Security intelligence

The researchers and databases behind the evidence you and your agent use.

npm registry

Publisher-declared package metadata and release history for npm package pages.

Design, icons & type

The details that give cve.new its character.

Lucide

The SVG interface icons used throughout the site.

Spline Sans

Our main interface typeface, served locally through Fontsource.

JetBrains Mono

Our typeface for code, identifiers, and technical details, served locally through Fontsource.

Fontsource

Self-hosted font packages for consistent typography without external font requests.

Software acknowledgements

From parsing lockfiles to testing the interface, these are our direct application and development dependencies. Versions and license labels reflect the installed packages. Visit each project for its full license and notices.

@cloudflare/vitest-plugin1.4.8 · DevelopmentMIT @fontsource/jetbrains-mono5.3.0 · ApplicationOFL-1.1 @fontsource/spline-sans5.3.0 · ApplicationOFL-1.1 @lucide/vue1.62.0 · ApplicationISC @modelcontextprotocol/server2.3.1 · ApplicationApache-2.0 @pandatix/js-cvss0.4.4 · ApplicationMIT @playwright/test1.64.1 · DevelopmentApache-2.0 @streamparser/json0.0.26 · ApplicationMIT @types/markdown-it14.2.0 · DevelopmentMIT @types/node26.6.5 · DevelopmentMIT @types/yarnpkg__lockfile1.1.9 · DevelopmentMIT @yarnpkg/lockfile1.1.0 · ApplicationBSD-2-Clause @yarnpkg/parsers3.1.0 · ApplicationBSD-2-Clause agents0.31.0 · ApplicationMIT h31.15.11 · ApplicationMIT jsonc-parser3.3.1 · DevelopmentMIT markdown-it15.0.3 · ApplicationMIT motion-v2.8.0 · ApplicationMIT nitropack2.13.5 · ApplicationMIT nuxt4.6.3 · ApplicationMIT prettier3.9.10 · DevelopmentMIT smol-toml1.9.1 · ApplicationBSD-3-Clause tsx4.23.15 · DevelopmentMIT typescript6.0.3 · DevelopmentApache-2.0 unhead3.4.3 · ApplicationMIT vitest5.0.5 · DevelopmentMIT vue3.5.44 · ApplicationMIT vue-tsc3.3.13 · DevelopmentMIT wrangler4.153.0 · DevelopmentMIT OR Apache-2.0 yaml2.9.1 · ApplicationISC zod4.6.7 · ApplicationMIT

Individual projects and data sources retain their own licenses. Brand names and logos belong to their respective owners. Inclusion here acknowledges their work and does not imply endorsement. See Privacy & sources for data provenance and usage information.