# Vulnerability-Lookup 4.2.0

**URL:** <https://discourse.ossbase.org/t/vulnerability-lookup-4-2-0/1037>\
**Category:** Vulnerability-Lookup\
**Tags:** release, vulnerability-lookup\
**Created:** [March 20, 2026, 9:14am UTC](https://discourse.ossbase.org/t/vulnerability-lookup-4-2-0/1037 "2026-03-20T09:14:41Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![cedric](https://discourse.ossbase.org/user_avatar/discourse.ossbase.org/cedric/32/112_2.png) [@cedric](https://discourse.ossbase.org/u/cedric)\
**Post date:** [March 20, 2026, 9:14am UTC](https://discourse.ossbase.org/t/vulnerability-lookup-4-2-0/1037/1 "2026-03-20T09:14:41Z")

</div>

It is our honour to announce the release of **Vulnerability-Lookup 4.2.0**!  
This version brings a large number of new CSAF-based vulnerability advisory sources, improvements to the web interface, and several bug fixes.

## What’s New

### New CSAF-based sources

 ![new-sources-menu-1](https://discourse.ossbase.org/uploads/default/original/1X/fe5c395e3d4448198e8b8933fe6c03d30a0eeb7b.jpeg)

 ![new-sources-menu-2](https://discourse.ossbase.org/uploads/default/original/1X/c407ee6c92be1c8a03ec62b805dd5bf4f26930ce.jpeg)

As the number of GNA keeps growing and the interest around the [GCVE-EU initiative](https://gcve.eu) increases, these UI improvements and filtering  
capabilities are becoming essential to efficiently explore the various available sources.

Below is the list of CSAF-based sources available by default. You can enable or disable each feeder via the  
`config/modules.cfg` configuration file. The display in the web interface is also configurable through the  
`config/website.py` configuration file.

- [ABB](https://global.abb/group/en/technology/cyber-security/alerts-and-notifications)
- [ads-tec Industrial IT GmbH](https://www.ads-tec-iit.com)
- [AUMA Riester GmbH & Co. KG](https://auma.com)
- [Beckhoff Automation GmbH & Co. KG](https://www.beckhoff.com)
- [Bender GmbH & Co. KG](https://www.bender.de)
- [Carlo Gavazzi Automation](https://www.gavazziautomation.com)
- [CERT-Bund](https://wid.cert-bund.de/portal/wid/start)
- [CERT@VDE](https://certvde.com)
- [CISA](https://www.cisa.gov/known-exploited-vulnerabilities-catalog)
- [Cisco](https://www.cisco.com)
- [CODESYS GmbH](https://www.codesys.com)
- [Endress+Hauser AG](https://www.endress.com)
- [Festo SE & Co. KG](https://www.festo.com)
- [Frauscher Sensortechnik GmbH](https://www.frauscher.com)
- [Helmholz GmbH & Co. KG](https://www.helmholz.de)
- [HIMA Paul Hildebrandt GmbH](https://www.hima.com)
- [ifm electronic GmbH](https://www.ifm.com)
- [Janitza electronics GmbH](https://www.janitza.com)
- [Lenze SE](https://www.lenze.com)
- [MB connect line GmbH](https://mbconnectline.com)
- [Mettler-Toledo GmbH](https://www.mt.com)
- [Microsoft](https://msrc.microsoft.com)
- [Miele & Cie KG](https://www.miele.com)
- [Murrelektronik GmbH](https://murrelektronik.com)
- [NCSC-NL](https://advisories.ncsc.nl)
- [Nozomi Networks](https://security.nozominetworks.com)
- [Open-Xchange](https://www.open-xchange.com)
- [OpenSuse](https://www.suse.com/support/security/)
- [Pepperl+Fuchs SE](https://www.pepperl-fuchs.com)
- [Phoenix Contact GmbH & Co. KG](https://phoenixcontact.com/psirt)
- [Pilz GmbH & Co. KG](https://www.pilz.com)
- [Red Hat](https://access.redhat.com/security/)
- [Sauter AG](https://www.sauter-controls.com)
- [Schneider Electric](https://www.se.com/ww/en/work/support/cybersecurity/vulnerability-policy/)
- [Sick](https://www.sick.com/psirt)
- [Siemens](https://www.siemens.com/global/en/products/services/cert.html)
- [SMA Solar Technology AG](https://sma.de)
- [Suse](https://www.suse.com/support/security/)
- [SWARCO TRAFFIC SYSTEMS GmbH](https://swarco.de)
- [Trumpf SE + Co. KG](https://www.trumpf.com)
- [VARTA Storage GmbH](https://varta-storage.com)
- [WAGO GmbH & Co. KG](https://www.wago.com/psirt)
- [Weidmueller Interface GmbH & Co. KG](https://www.weidmueller.com)
- [Welotec GmbH](https://welotec.com)
- [Wiesemann & Theis GmbH](https://www.wut.de)

## Improvements

 ![improved-csaf-view](https://discourse.ossbase.org/uploads/default/original/1X/2a007fde11e7dfb08f52b23411e2c1cd3b19149b.jpeg)

- **Enriched CSAF view**  
The generic CSAF view now includes severity, vulnerabilities, references, and acknowledgments.  
[d528da8](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/d528da8)

- **Enriched OSV view**  
Added severity and references to the generic OSV view.  
[65de73e](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/65de73e)

- **Date published in CVE records**  
If known, the `datePublic` field of CVE records is now displayed.  
[861a082](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/861a082)

- **Boost recent sightings enabled by default**  
The boost recent sightings switch is now checked by default.  
[4eed4c4](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/4eed4c4)

- **New source argument for the full-text indexer**  
Added a `source` argument to the indexer for more targeted indexing.  
[d4e6e1f](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/d4e6e1f)

- **Less verbose indexing**  
Reduced the verbosity of the full-text search indexing process.  
[a563dff](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/a563dff)

- **Configuration improvements**  
Reorganized the default `SOURCES_TO_SHOW` config variable and updated the sample `website.py` configuration with examples for the new configuration options.  
[f699400](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/f699400), [6e8fb6c](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/6e8fb6c)

- **Documentation updates**  
Various improvements to the documentation, including GCVE publication as a GNA and Known Exploited Vulnerabilities Catalogs.  
[58a4d83](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/58a4d83), [143f5f5](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/143f5f5), [1f6d6d3](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/1f6d6d3), [52c774f](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/52c774f)

- **Updated Python dependencies**  
[6e30dc2](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/6e30dc2)

## Fixes

- Fixed incorrect vulnerability ID passed in various Jinja macros.  
[cf1b209](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/cf1b209)
- Fixed the default product option so the form correctly re-submits its value when changing sort/order controls.  
[7373f8f](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/7373f8f)
- Suppressed spurious config warnings for disabled features.  
[c82e911](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/c82e911)
- Fixed a variable shadowing issue in `parse_vuln_payload()` where the local `source` variable was overriding the function parameter.  
[cb03721](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/cb03721)

## Changelog

📂 For the full list of changes, check the GitHub release:

> **[Release Release 4.2.0 · vulnerability-lookup/vulnerability-lookup](https://github.com/vulnerability-lookup/vulnerability-lookup/releases/tag/v4.2.0)**
>
> What's New
> 
> 
> 
> new: Automatic parser for CSAF aggregator + CERT VDE sources
> bad0469
> new: \[templates\] Replace nav-pills tab list with searchable Choices.js dropdown on /recent page
> fa43a7f
> new: \[temp...

🙏 Thank you to all contributors and testers!

Special thanks to [Raphaël Vinot](https://github.com/Rafiot/) for adding the new sources.

## Feedback and Support

If you encounter any issues or have suggestions, feel free to open a ticket on our GitHub repository:

> **[vulnerability-lookup/vulnerability-lookup](https://github.com/vulnerability-lookup/vulnerability-lookup/issues/)**
>
> Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streamlines the management of Coordinated Vulnerability Disclosure ...

Your feedback is always appreciated!

## Follow Us on Fediverse/Mastodon

You can follow us on Mastodon and get real-time information about security advisories:

> **[Vulnerability-Lookup (@vulnerability\_lookup@social.circl.lu)](https://social.circl.lu/@vulnerability_lookup/)**
>
> 37K Posts, 14 Following, 109 Followers · This account shares a variety of activities, including comments and bundles, related to events on the vulnerability.circl.lu community.