# Vulnerability-Lookup 4.4.0

**URL:** <https://discourse.ossbase.org/t/vulnerability-lookup-4-4-0/1046>\
**Category:** Vulnerability-Lookup\
**Tags:** release, vulnerability-lookup\
**Created:** [April 9, 2026, 11:12am UTC](https://discourse.ossbase.org/t/vulnerability-lookup-4-4-0/1046 "2026-04-09T11:12:16Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![cedric](https://discourse.ossbase.org/user_avatar/discourse.ossbase.org/cedric/32/112_2.png) [@cedric](https://discourse.ossbase.org/u/cedric)\
**Post date:** [April 9, 2026, 11:12am UTC](https://discourse.ossbase.org/t/vulnerability-lookup-4-4-0/1046/1 "2026-04-09T11:12:16Z")

</div>

We are pleased to announce the release of **Vulnerability-Lookup 4.4.0**!

This release introduces [public disclosure list views](https://vulnerability.circl.lu/disclosures/),  
enhanced sightings with automatic creation and heatmap navigation controls, toggleable chart events, and configurable CVD policy alerts.  
It also includes numerous fixes for database stability and performance, notification reliability, and Meilisearch error handling.

The [technical documentation](https://www.vulnerability-lookup.org/documentation/) has been revamped for greater clarity and expanded with deployment guidance for high-traffic environments, validated in our production setup handling 15,000–20,000 queries per second (public API + Web pages).

## What’s New

- new: [views] Add public disclosures list view and improve disclosure detail template.  
[ac97550](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/ac97550)
- new: [heatmap] Add navigation and zoom controls to sightings heatmap.  
[57c1fb8](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/57c1fb8)
- new: [sightings] Add toggleable extra events (published, reserved, KEV) to sightings charts.  
[1ae5cdf](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/1ae5cdf)
- new: [sightings] Add backfill\_sightings script to create sightings from existing data.  
[3c036b3](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/3c036b3)
- new: [sightings] Automatically create sightings when bundles, comments, or KEV entries are created.  
[5676730](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/5676730), [eb20f85](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/eb20f85), [351d538](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/351d538)

**Disclosed Vulnerabilities (CVD process)**

Disclosures part of the CVD process are now listed on a dedicated page once they are disclosed (the CVD feature can be disabled in Vulnerability-Lookup).  
Previously, they were publicly accessible but not listed in a single view.

 ![disclosed-vulnerabilities](https://discourse.ossbase.org/uploads/default/original/1X/b0d282e4bb92e4f97ebc4f1cc4abf7c08f711d33.jpeg)

**Comments as a sighting**

Creating a comment on a vulnerability now automatically generates a sighting.

 ![comment-sighting](https://discourse.ossbase.org/uploads/default/original/1X/31936641e46e925e78726788554fc4cf707f4685.jpeg)

**Displaying reserved and published dates in the sightings visualisations**

 ![display-reserved-published-with-sightings](https://discourse.ossbase.org/uploads/default/original/1X/1aef23d340a4baeb2f31e2462fa58befb62f689b.jpeg)

[CVE-2026-23456](https://vulnerability.circl.lu/vuln/CVE-2026-23456#sightings) was mentioned in the list of Ghost CVEs in our [February Vulnerability Report](https://www.vulnerability-lookup.org/2026/03/02/vulnerability-report-february-2026/#ghost-cve-report). The CVE record is now available, and the visualisations show our sightings predating the publication date.

**KEV entry as exploited sightings**

Creating a KEV entry — whether directly, via synchronisation from another Vulnerability-Lookup instance, or by pulling from the CISA or ENISA catalogs — now automatically generates a sighting.

 ![kev-exploited-sighting](https://discourse.ossbase.org/uploads/default/original/1X/5041e47d98720a7245cf5bbd20f346c94dbc6db1.jpeg)

 ![kev-sighting](https://discourse.ossbase.org/uploads/default/original/1X/ac409185ea30292eb737d6b67b50a284ea9baf3f.jpeg)

**Zoom feature for the sightings visualisations**

 ![sightings-zoom](https://discourse.ossbase.org/uploads/default/original/1X/d159aba1cad6c0628ba560c73e9d1c18db14075e.jpeg)

## Changes

- chg: [config] Make CVD policy alert messages configurable (CVD\_POLICY\_TITLE, CVD\_POLICY\_URL, CVD\_POLICY\_LOGIN\_MESSAGE).  
[38a9fc8](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/38a9fc8)
- chg: [views] Set disclosed\_timestamp when admin transitions disclosure state to disclosed.  
[b1265ca](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/b1265ca)
- chg: [templates] Link vulnerability ID, affected products, and CWEs in disclosure detail page.  
[0b57f62](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/0b57f62), [c7f750e](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/c7f750e), [24512cf](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/24512cf), [7dde7dc](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/7dde7dc)
- chg: [templates] GCVE vulnerabilities show a parenthesized link to the associated CVE ID.  
[2944a32](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/2944a32)
- chg: [templates] Vulnerabilities from FSTEC use the severity classification model.  
[9896c18](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/9896c18)
- chg: [documentation] Convert documentation to Markdown and improvements.  
[af2de56](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/af2de56), [ba70b69](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/ba70b69), [54d004b](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/54d004b), [497c45a](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/497c45a)
- chg: [dependencies] Updated Python and JavaScript dependencies.  
[81ea0d7](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/81ea0d7), [af81a41](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/af81a41), [ab94807](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/ab94807), [7706a5c](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/7706a5c), [b7cfab2](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/b7cfab2)

## Fixes

- fix: [views] Skip timestamp check for disclosed state in disclosures query.  
[88f8fe9](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/88f8fe9)
- fix: [models] Handle None values in Product and Organization field validators.  
[3f56d34](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/3f56d34), [078eb1d](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/078eb1d)
- fix: [fulltext] Auto-purge Meilisearch tasks on no\_space\_left\_on\_device error.  
[e7ffbfa](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/e7ffbfa)
- fix: [database] Fix DetachedInstanceError and idle-in-transaction timeouts.  
[801eefd](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/801eefd), [9b89ce3](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/9b89ce3), [028da84](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/028da84)
- fix: [notifications] Release DB transaction before slow email rendering/sending.  
[1c1a552](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/1c1a552), [913ecc1](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/913ecc1)
- fix: [tags] Sync comment tags with upstream MISP vulnerability taxonomy.  
[5b3d08f](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/5b3d08f)
- fix: [forms] Align SignupForm login max length with database constraint.  
[210594a](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/210594a)
- fix: [bundle] Use JSONB contains operator for bundle vuln\_id filter.  
[80c7295](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/80c7295)
- fix: [sightings] Use KEV asserted\_at date for backfilled sighting timestamp.  
[8c7d455](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/8c7d455)

## Changelog

📂 For the full list of changes, check the GitHub release:

> **[Release Release 4.4.0 · vulnerability-lookup/vulnerability-lookup](https://github.com/vulnerability-lookup/vulnerability-lookup/releases/tag/v4.4.0)**
>
> Official blog post: https://www.vulnerability-lookup.org/2026/04/09/vulnerability-lookup-4-4-0/
> What's New
> 
> new: \[views\] Add public disclosures list view and improve disclosure detail template. ac9...

🙏 Thank you to all contributors and testers!

## Feedback and Support

If you encounter any issues or have suggestions, feel free to open a ticket on our GitHub repository:

> **[Issues · vulnerability-lookup/vulnerability-lookup](https://github.com/vulnerability-lookup/vulnerability-lookup/issues/)**
>
> Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streamlines the management of Coordinated Vulnerability Disclosure ...

Your feedback is always appreciated!

## Follow Us on Fediverse/Mastodon

You can follow us on Mastodon and get real-time information about security advisories:

> **[Vulnerability-Lookup (@vulnerability\_lookup@social.circl.lu)](https://social.circl.lu/@vulnerability_lookup/)**
>
> 40.6K Posts, 14 Following, 111 Followers · This account shares a variety of activities, including comments and bundles, related to events on the vulnerability.circl.lu community.