PatchTheCEVLearn
How PatchTheCEV works, and how to act on what it shows you.
How PatchTheCEV works
1CollectNew and changed CVEs from NVD and the CVE Program, plus CISA's exploited list, every 20 minutes.
2ScoreEPSS, CISA SSVC, exploit code and reach turn each CVE into a 0 to 100 priority.
3Find the fixDistro, Microsoft, GitHub and OSV advisories give the fixed version, or a safe downgrade.
4PublishA page per CVE, product, vendor and patch, plus the blog, goes live automatically.
The whole cycle runs by itself, so a new CVE is on the site within about 20 minutes of the first public record.
Guides
- How to check an installed version and patch a vulnerable package (Linux, Windows, pip, npm)
- CVSS, EPSS and KEV explained: how to decide which vulnerability to patch first
- Upgrade or downgrade? What to do when a CVE has no fix yet
- Why your Linux package version does not match the advisory (backports explained)
- How to find the Windows KB update for a CVE and check it is installed