# GCVE BCP-03 Review and update required

**URL:** <https://discourse.ossbase.org/t/gcve-bcp-03-review-and-update-required/1033>\
**Category:** GCVE\
**Created:** [March 17, 2026, 5:44am UTC](https://discourse.ossbase.org/t/gcve-bcp-03-review-and-update-required/1033 "2026-03-17T05:44:41Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![adulau](https://discourse.ossbase.org/user_avatar/discourse.ossbase.org/adulau/32/6_2.png) [@adulau](https://discourse.ossbase.org/u/adulau)\
**Post date:** [March 17, 2026, 5:44am UTC](https://discourse.ossbase.org/t/gcve-bcp-03-review-and-update-required/1033/1 "2026-03-17T05:44:41Z")

</div>

Following some design changes, we need to review if the urls are still applicable on the reference implementation. To be reviewed with @cedric

---

<div class="post-metadata">

**Author:** ![adulau](https://discourse.ossbase.org/user_avatar/discourse.ossbase.org/adulau/32/6_2.png) [@adulau](https://discourse.ossbase.org/u/adulau)\
**Post date:** [March 25, 2026, 2:16pm UTC](https://discourse.ossbase.org/t/gcve-bcp-03-review-and-update-required/1033/2 "2026-03-25T14:16:22Z")

</div>

Updated version following the recent meeting to simplify the endpoints into a single one:

> **[GCVE-BCP-03 - Decentralized Publication Standard](https://gcve.eu/bcp/gcve-bcp-03/)**
>
> Decentralized Publication Standard
> 
> Version: 1.4
> Status: Published (for Public Review)
> Date: 2026-03-10
> Authors: GCVE Working Group
> BCP ID: BCP-03
> 
> This guide is distributed under CC-BY-4.0.
> Copyright (C) 2025-2026 GCVE Initiative.
> Introduction
> ...

Feedback welcome

---

<div class="post-metadata">

**Author:** ![cedric](https://discourse.ossbase.org/user_avatar/discourse.ossbase.org/cedric/32/112_2.png) [@cedric](https://discourse.ossbase.org/u/cedric)\
**Post date:** [March 26, 2026, 10:01am UTC](https://discourse.ossbase.org/t/gcve-bcp-03-review-and-update-required/1033/3 "2026-03-26T10:01:19Z")

</div>

the GCVE endpoint of the API has bee updated: [Vulnerability-Lookup API](https://vulnerability.circl.lu/api/)

And the GCVE feeder [updated accordingly](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/96aaed66eadeeaa65df573a556a50d48fe4d923b) with fallback to the previous endpoints.

---

<div class="post-metadata">

**Author:** ![adulau](https://discourse.ossbase.org/user_avatar/discourse.ossbase.org/adulau/32/6_2.png) [@adulau](https://discourse.ossbase.org/u/adulau)\
**Post date:** [March 26, 2026, 1:26pm UTC](https://discourse.ossbase.org/t/gcve-bcp-03-review-and-update-required/1033/4 "2026-03-26T13:26:10Z")

</div>

Thank you.

We did some more update of BCP-03

> **[GCVE-BCP-03 - Decentralized Publication Standard](https://gcve.eu/bcp/gcve-bcp-03/)**
>
> Decentralized Publication Standard
> 
> Version: 1.5
> Status: Published (for public review)
> Date: 2026-03-10
> Authors: GCVE Working Group
> BCP ID: BCP-03
> 
> This guide is distributed under CC-BY-4.0.
> Copyright (C) 2025-2026 GCVE Initiative.
> Introduction
> ...

Can you review it?
