Observed arrival · 2026-10-24
cve.now puts vulnerability feeds in an agent’s reach
A free vulnerability feed that offers CVE updates in several feed formats, lockfile checks, and an MCP connection for coding agents.
- For
- Developers checking project dependencies for known vulnerabilities
- Worth noticing
- The page lists support for nine lockfile formats, from package-lock.json and bun.lock to flake.lock.
Field notes
The displayed feed includes vulnerability identifiers, affected projects, severity ratings, and, on some entries, a fix-available label. Its source list spans vulnerability databases, an exploited-vulnerability catalog, and an exploit database. The upload section names nine lockfile formats, while the agent setup supplies an MCP URL and example configuration instructions; the page describes these capabilities but the extracted evidence does not independently verify their operation.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue