CVE Announce
CVE Announce reads the critical feed on cve.now every 15 minutes and posts the CVEs that match the ecosystems and tools I run to my Slack. A CVE in CISA's Known Exploited Vulnerabilities catalog gets its own message right away, the rest share one digest per run, and a CVE comes back only when it moves into KEV. It runs as a Cloudflare Worker on a cron trigger with its state in KV, so it costs no GitHub Actions minutes.
- Client .......
- Internal
- Year .........
- Categories ...
- DevOpsInfrastructure
- Link .........
- https://cve-announce.pungrumpy.workers.dev
- Human ........
- /projects/cve-announce
Media
- [image: The word Critical. on a frosted glass card where two white axes cross, over a red gradient drawn with hairline ellipses and small white diamonds.] — Field
- [image: Five discs stacked on off-white paper, the top one solid red and the four below it fading out, with a red Posted to Slack pill in the top right corner.] — Stack
- [image: The cve-announce board on a laptop against light grey, with the headline Critical. above a list where one KEV row, CVE-2024-3094, links to a Slack message.] — Laptop
- [image: Figures down the right reading 15 min between checks, 0 GitHub Actions minutes, 1 message for each KEV CVE and 1 digest for the rest, beside a red sphere in its orbit and the headline Critical CVEs, posted to Slack.] — Numbers
# full archive: /ai/projects