Skip to content

CVE Announce

CVE Announce reads the critical feed on cve.now every 15 minutes and posts the CVEs that match the ecosystems and tools I run to my Slack. A CVE in CISA's Known Exploited Vulnerabilities catalog gets its own message right away, the rest share one digest per run, and a CVE comes back only when it moves into KEV. It runs as a Cloudflare Worker on a cron trigger with its state in KV, so it costs no GitHub Actions minutes.

Year
2026
Client
Internal
Categories
DevOps, Infrastructure
Link
cve-announce.pungrumpy.workers.dev (opens in a new tab)
The word Critical. on a frosted glass card where two white axes cross, over a red gradient drawn with hairline ellipses and small white diamonds.
Field
Five discs stacked on off-white paper, the top one solid red and the four below it fading out, with a red Posted to Slack pill in the top right corner.
Stack
The cve-announce board on a laptop against light grey, with the headline Critical. above a list where one KEV row, CVE-2024-3094, links to a Slack message.
Laptop
Figures down the right reading 15 min between checks, 0 GitHub Actions minutes, 1 message for each KEV CVE and 1 digest for the rest, beside a red sphere in its orbit and the headline Critical CVEs, posted to Slack.
Numbers