# Vulnerability-Lookup 2.18.0 released

**URL:** <https://discourse.ossbase.org/t/vulnerability-lookup-2-18-0-released/727>\
**Category:** Vulnerability-Lookup\
**Tags:** release, rulezet, vulnerability-lookup\
**Created:** [November 14, 2025, 1:12pm UTC](https://discourse.ossbase.org/t/vulnerability-lookup-2-18-0-released/727 "2025-11-14T13:12:30Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![cedric](https://discourse.ossbase.org/user_avatar/discourse.ossbase.org/cedric/32/112_2.png) [@cedric](https://discourse.ossbase.org/u/cedric)\
**Post date:** [November 14, 2025, 1:12pm UTC](https://discourse.ossbase.org/t/vulnerability-lookup-2-18-0-released/727/1 "2025-11-14T13:12:30Z")

</div>

We’re delighted to announce the release of **Vulnerability-Lookup 2.18.0** — packed with exciting new features!

## What’s New

#### Integration with Rulezet

[Rulezet](https://github.com/ngsoti/rulezet-core) is an open-source platform for sharing, evaluating, improving, and managing **cybersecurity detection rules** (YARA, Sigma, Suricata, etc.).  
Its goal is to foster collaboration among professionals and enthusiasts to enhance the quality and reliability of detection rules.

Vulnerability-Lookup can now be configured to interface with the API of any Rulezet instance, providing insights into existing detection rules related to security vulnerabilities.  
The default Rulezet instance enabled in Vulnerability-Lookup is hosted at [https://rulezet.org/](https://rulezet.org/) and currently offers more than 122,000 security rules.

Detection rules related to vulnerabilities are displayed on the vulnerability details page (in a dedicated tab) and on bundle details pages.

 ![rulezet-1](https://discourse.ossbase.org/uploads/default/original/1X/59e6081532ff9a1a38e8dccb668b803a1d5236db.jpeg)

 ![rulezet-2](https://discourse.ossbase.org/uploads/default/original/1X/4d32cc1fd67ee448d4e3eacf6578d6d78c8e9a88.jpeg)

You can even query the remote Rulezet instance via the Vulnerability-Lookup API:

```bash
$ curl --silent 'https://vulnerability.circl.lu/api/rulezet/search_rules_by_vulnerabilities/CVE-2020-27130?page=1&per_page=50' | jq
{
  "metadata": {
    "count": 3,
    "page": 1,
    "per_page": 50
  },
  "data": [
    {
      "id": 122599,
      "uuid": "84846673-015e-450b-8a73-2ba481b5a6ce",
      "vulnerability_id": "CVE-2020-27130",
      "format": "suricata",
      "title": "Exploit CVE-2020-27130 on Cisco Security Manager - Upload webshell",
      "description": "Rule for security (detection rule in many format)",
      "raw": "alert http any any -> any any (msg:\"Exploit CVE-2020-27130 on Cisco Security Manager - Upload webshell\"; flow:to_server,established; content:\"POST\"; http_method; content:\"/cwhp/XmpFileUploadServlet\"; startswith; http_uri; pcre:\"/filename=\\\".*\\.\\.\\/.+\\\"\\r\\n/P\"; reference:cve,CVE-2020-27130; classtype:web-application-attack; sid:2020271303; rev:1;)",
      "detail_url": "https://rulezet.org/rule/detail_rule/122599",
      "creation_date": "2025-11-06 13:03",
      "updated_date": "2025-11-13 09:33"
    },
    {
      "id": 122598,
      "uuid": "538dafc1-d49c-4fd6-bdb5-57b997346fe6",
      "vulnerability_id": "CVE-2020-27130",
      "format": "suricata",
      "title": "Exploit CVE-2020-27130 on Cisco Security Manager - Download arbitrary directory as a zip file",
      "description": "Rule for security (detection rule in many format)",
      "raw": "alert http any any -> any any (msg:\"Exploit CVE-2020-27130 on Cisco Security Manager - Download arbitrary directory as a zip file\"; flow:to_server,established; content:\"GET\"; http_method; pcre:\"/^\\/cwhp\\/(Xmp|Sample)FileDownloadServlet/U\"; content:\"../\"; distance:0; http_uri; reference:cve,CVE-2020-27130; classtype:web-application-attack; sid:2020271302; rev:1;)",
      "detail_url": "https://rulezet.org/rule/detail_rule/122598",
      "creation_date": "2025-11-06 13:03",
      "updated_date": "2025-11-06 13:03"
    },
    {
      "id": 122597,
      "uuid": "2cd8fb2a-e97b-4390-8dca-d416b2858c66",
      "vulnerability_id": "CVE-2020-27130",
      "format": "suricata",
      "title": "Exploit CVE-2020-27130 on Cisco Security Manager - Download arbitrary file",
      "description": "Rule for security (detection rule in many format)",
      "raw": "alert http any any -> any any (msg:\"Exploit CVE-2020-27130 on Cisco Security Manager - Download arbitrary file\"; flow:to_server,established; content:\"GET\"; http_method; pcre:\"/^\\/athena\\/(xdmProxy\\/(xdmConfig|xdmResources)|itf\\/resultsFrame\\.jsp)/U\"; content:\"../\"; distance:0; http_uri; reference:cve,CVE-2020-27130; classtype:web-application-attack; sid:2020271301; rev:1;)",
      "detail_url": "https://rulezet.org/rule/detail_rule/122597",
      "creation_date": "2025-11-06 13:03",
      "updated_date": "2025-11-06 13:03"
    }
  ]
}

```

Thanks to [Théo Geffe](https://github.com/ecrou-exact) for making this integration possible.

#### Indexing Information Related to Assigners (CNA)

Information about security advisory assigners is now indexed. CNAs from the official CVE Program source (cvelistv5) are indexed in Kvrocks, with GNAs planned for the future.  
The API exposes this data via a new **assigners** endpoint. From an API perspective, both CNAs and GNAs are treated as assigners, though they will be stored in dedicated indexes.

Updates include:

- Enhanced search capabilities related to assigners.
- Improved [/stats](https://vulnerability.circl.lu/stats/) page.
- Updated vulnerability details page: display the assigner name with a link.
- A [new page listing assigners](https://vulnerability.circl.lu/assigners/), similar to the existing CWE list.

Implemented in [PR #283](https://github.com/vulnerability-lookup/vulnerability-lookup/pull/283).

 ![search-with-assigner](https://discourse.ossbase.org/uploads/default/original/1X/ccfa6220b2135918be4f5d48b9188e964a3f0782.jpeg)

 ![stats-page](https://discourse.ossbase.org/uploads/default/original/1X/f296fa5e31fb8c367bae726c80d8f491900b8cc5.jpeg)

#### Website

- new: [website] Add PROTECT\_USER\_PAGES option to restrict user profile pages to authenticated users. Closes ([#277](https://github.com/vulnerability-lookup/vulnerability-lookup/issues/277))

#### Vulnerability Sources

- Added [ABB CSAF feed](https://vulnerability.circl.lu/recent#csaf_abb) ([0d984a8](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/0d984a82771348adb70140b578541a9564f71d4c)) by [@neutrinoguy](https://github.com//neutrinoguy)
- It now possible to enable a list of enabled feeders via the config/modules.cfg file. ([e4a1acb](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/e4a1acbff8fd5b40f972e982dc22cbc8f8b861a4))

### Changes

- chg: [website] Account creation via the API is now rate-limited to 3 registrations per hour per IP. ([3a12de2](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/3a12de293039bef5f77c33b1e61f843a698c60be))
- Additional validation checks have been added to reject email addresses that are disposable (MISP list), from blocked domains, or with invalid MX records. ([3a12de2](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/3a12de293039bef5f77c33b1e61f843a698c60be))
- chg: [website] Improved email address check in both the API endpoint and in the form controller. ([bb090fc](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/bb090fcd64011bd99354d15f4008feff20dbf126))
- chg: [website] user.last\_seen is now updated after successful login. ([fb5796e](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/fb5796e774aaada70cc65ab775b0884d066abf5b))
- chg: [API] Improved date parsing for sightings ([d7bc9fd](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/d7bc9fde169f9d2c17ded8f35cd103dd32be6dcc))
- chg: [website] Harmonization of the templates for the details views of bundles and comments. ([c7f90aa](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/c7f90aa4b1fad866e941e6c2cf78b419544b38bb))
- chg: [feeders] Improved use of the kvrocks counters for vendors and cwe rankings. ([1205670](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/120567051da0e68bdec449ef3b908859d6a16967))
- chg: [notifications] add random jitter to reschedule execution times ([d974315](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/d974315229678aff3880e264f966bd68ff5b6651))
- various minor improvements to the backend, user interface and documentation.

#### Refreshed views

 ![search](https://discourse.ossbase.org/uploads/default/original/1X/51419a379ca028aec315a3f1652c05dc0fbb3304.jpeg)

 ![comment](https://discourse.ossbase.org/uploads/default/original/1X/dae950a8e6a742fefd16f5f0c845c1ac4e824f52.jpeg)

 ![list-comments](https://discourse.ossbase.org/uploads/default/original/1X/f9c761b84ce62c76161a75f59d1ad90ebf42fec9.jpeg)

 ![list-bundles](https://discourse.ossbase.org/uploads/default/original/1X/b39fb63ecd4fabca3bf61d5aaa8241fff660c85f.jpeg)

### Fixes

- fix: [website] Redirect the user to the user\_bp.watchlist view if notifications are found ([4f6e0bc](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/4f6e0bcdeab737f668ef9b0898330f6240128c6d))
- fix: [API] Delete notifications of the user to delete. ([2371962](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/23719629c8507f13ee5c5b35c08bc39d707e8373))
- Rename flatpickr to flatpickr.js and update template reference ([8dcc804](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/8dcc8049c3a842563c92a869d21a9eb449db06b1)) by [@DocArmoryTech](https://github.com/DocArmoryTech)

## Changelog

📂 For the full list of changes, check the GitHub release:

> **[Release Release 2.18.0 · vulnerability-lookup/vulnerability-lookup](https://github.com/vulnerability-lookup/vulnerability-lookup/releases/tag/v2.18.0)**
>
> What's New
> Integration with Rulezet
> Rulezet is an open-source platform for sharing, evaluating, improving, and managing cybersecurity detection rules (YARA, Sigma, Suricata, etc.).
> Its goal is to f...

Thank you to all contributors and testers!

## Feedback and Support

If you find any issues or have suggestions, please open a ticket on our GitHub repository:

> **[vulnerability-lookup/vulnerability-lookup](https://github.com/vulnerability-lookup/vulnerability-lookup/issues/)**
>
> Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streamlines the management of Coordinated Vulnerability Disclosure ...

We appreciate your feedback!

## Follow Us on Fediverse/Mastodon

Stay updated on security advisories in real-time by following us on Mastodon:

> **[Vulnerability-Lookup (@vulnerability\_lookup@social.circl.lu)](https://social.circl.lu/@vulnerability_lookup/)**
>
> 21.4K Posts, 14 Following, 90 Followers · This account shares a variety of activities, including comments and bundles, related to events on the vulnerability.circl.lu community.