# Vulnerability-lookup 2.20.0 released

**URL:** <https://discourse.ossbase.org/t/vulnerability-lookup-2-20-0-released/740>\
**Category:** Vulnerability-Lookup\
**Created:** [December 20, 2025, 7:01am UTC](https://discourse.ossbase.org/t/vulnerability-lookup-2-20-0-released/740 "2025-12-20T07:01:14Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![adulau](https://discourse.ossbase.org/user_avatar/discourse.ossbase.org/adulau/32/6_2.png) [@adulau](https://discourse.ossbase.org/u/adulau)\
**Post date:** [December 20, 2025, 7:01am UTC](https://discourse.ossbase.org/t/vulnerability-lookup-2-20-0-released/740/1 "2025-12-20T07:01:15Z")

</div>

### What’s New

- new: [gcve] Updated Vulnogram in order to define relationships ([GCVE-BCP-05 - GCVE Vulnerability Format (Updated CVE Record Format) – GCVE - Global CVE Allocation System](https://gcve.eu/bcp/gcve-bcp-05/#relationships-field)) in the x\_gcve field. [2f39bf8](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/2f39bf8659aeda081780db65d0c6f9e769427110)

 ![relationships-view](https://discourse.ossbase.org/uploads/default/original/1X/ced8eab9713509b28876a8c194bf0f0a263e7286.png)  
 ![relationships-edit](https://discourse.ossbase.org/uploads/default/original/1X/e04295989ef1f43ccf2e2bdd8b30b5d5b3d7f525.png)

- new: [sightings] Added a new heat map to visualize the sightings with a filtering option (on dates and type of sightings). [56a66e0](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/56a66e0ef045e299e8fcd41fa85afa16068e1d56)

 ![heat-map-1](https://discourse.ossbase.org/uploads/default/original/1X/75018272dab63acf7235ce1b0c9d7c2169f70756.png)  
 ![heat-map-2](https://discourse.ossbase.org/uploads/default/original/1X/08125889d35c966552f40914cc0c6b93e9d7b122.png)

### Changes

- chg: [CVE template] CVE Tags are now displayed below the vulnerability ID. [e59bd52](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/e59bd52d2797626234efed37cfcd7785d8b93508)
- chg: [CVE template] The title is now displayed just before the description (summary). [22695e8](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/22695e8d5f3de8bee273eea5701413fc99d7bf37)
- chg: [vulnerability disclosure] A message is now displayed to unauthenticated users when submitting a new disclosure. [90787db](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/90787db278f7a856f3d3fb18193d39b9c73ed87f)
- chg: [product] product.find\_vulnerabilities now returns more result. [a31f6c3](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/a31f6c3689f1c53d0e2678f761ae01734a1ad858)
- allow triggering password recovery based on case insensitive username [#290](https://github.com/vulnerability-lookup/vulnerability-lookup/issues/290)

 ![CVE-tags](https://discourse.ossbase.org/uploads/default/original/1X/0842ce93d6d0d0a329fdacd06ea664c5b8e4fa32.png)

### Fixes

- fix: Ignore temp files in ossf/malicious-packages [6bc93b1](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/6bc93b1608606b274bf25f7ef341f4a57627630b)
- fix: [website] Fixed the route used to delete a vulnerability disclosure. [e2ecb2a](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/e2ecb2a33952b034a5bbbeac3d9eed8568ad3958)
- fix: [website] Vulnerability ID of a disclosure is optional. [5bd5353](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/5bd5353462afbd4164e7d825976964c03d1dc49a)
