# Vulnerability-Lookup 4.3.0

**URL:** <https://discourse.ossbase.org/t/vulnerability-lookup-4-3-0/1040>\
**Category:** Vulnerability-Lookup\
**Tags:** release, vulnerability-lookup\
**Created:** [March 27, 2026, 9:39am UTC](https://discourse.ossbase.org/t/vulnerability-lookup-4-3-0/1040 "2026-03-27T09:39:24Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![cedric](https://discourse.ossbase.org/user_avatar/discourse.ossbase.org/cedric/32/112_2.png) [@cedric](https://discourse.ossbase.org/u/cedric)\
**Post date:** [March 27, 2026, 9:39am UTC](https://discourse.ossbase.org/t/vulnerability-lookup-4-3-0/1040/1 "2026-03-27T09:39:24Z")

</div>

We are pleased to announce the release of **Vulnerability-Lookup 4.3.0**!

This release brings compliance with the updated [GCVE BCP-03](https://gcve.eu/bcp/gcve-bcp-03/) specification ([discussion](https://discourse.ossbase.org/t/gcve-bcp-03-review-and-update-required/1033/2)), introducing a dedicated API endpoint for exposing GCVEs published by a local Vulnerability-Lookup instance.  
It also includes improvements to the GCVE feeder, email notification reliability fixes, and updated dependencies.

## What’s New

### GCVE Publication Endpoint

A new `/api/gcve/publication` endpoint lets external consumers discover all GCVEs published by the local instance.  
This is the standard mechanism defined in the updated GCVE BCP-03 for federated vulnerability sharing between Vulnerability-Lookup deployments and GCVE-compatible tools. [c931b95](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/c931b95)

**GCVE new endpoint**

 ![gcve-new-endpoint](https://discourse.ossbase.org/uploads/default/original/1X/6307e584554e74337559f15afbec94e69d289968.jpeg)

**GCVE publications on db.gcve.eu**

 ![db-gcve-eu-publications](https://discourse.ossbase.org/uploads/default/original/1X/f740e30fcc4323754c3f83badaeaf20451bd0673.png)

**GNA-1 publications**

 ![gna-1-publications](https://discourse.ossbase.org/uploads/default/original/1X/3d239d37d956d96d4b2860e469eb967c79db860e.jpeg)

## Changes

- chg: [feeder] GCVE feeder now uses /api/gcve/publication with two fallbacks for retro-compatibility. [96aaed6](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/96aaed6)
- chg: [bin] Also dump KEV entries. [5523cb7](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/5523cb7)
- chg: [bin] Updated footer of the dump page. [3260682](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/3260682)
- chg: [templates] Added a link to the list of sources from the /recent page. [89723f2](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/89723f2)
- chg: [dependencies] Updated Python and JavaScript dependencies. [a135d86](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/a135d86), [1fcc515](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/1fcc515), [d163c5f](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/d163c5f)

## Fixes

- fix: [notifications] Remove jitter from last\_execution\_time to prevent missed notifications. When multiple users subscribed to the same product, the random jitter on last\_execution\_time created different blind windows, causing some users to miss vulnerability notifications. [a02a9fe](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/a02a9fe)
- fix: [typing] Fixed a typing issue in the aggregator parameter of the CSAFAggregatorHelper class. [860ead7](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/860ead7)

## Changelog

📂 For the full list of changes, check the GitHub release:

> **[Release Release 4.3.0 · vulnerability-lookup/vulnerability-lookup](https://github.com/vulnerability-lookup/vulnerability-lookup/releases/tag/v4.3.0)**
>
> What's New
> 
> new: \[api\] Added /api/gcve/publication endpoint to list GCVE published by the local instance. c931b95
> 
> Changes
> 
> chg: \[feeder\] GCVE feeder now uses /api/gcve/publication with two fallbac...

🙏 Thank you to all contributors and testers!

## Feedback and Support

If you encounter any issues or have suggestions, feel free to open a ticket on our GitHub repository:

> **[vulnerability-lookup/vulnerability-lookup](https://github.com/vulnerability-lookup/vulnerability-lookup/issues/)**
>
> Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streamlines the management of Coordinated Vulnerability Disclosure ...

Your feedback is always appreciated!

## Follow Us on Fediverse/Mastodon

You can follow us on Mastodon and get real-time information about security advisories:

> **[Vulnerability-Lookup (@vulnerability\_lookup@social.circl.lu)](https://social.circl.lu/@vulnerability_lookup/)**
>
> 38.6K Posts, 14 Following, 111 Followers · This account shares a variety of activities, including comments and bundles, related to events on the vulnerability.circl.lu community.