WPVulnerability
database · primaryVulnerability data aggregated by WPVulnerability (CVE, EUVD, JVN, Patchstack, WPScan, Wordfence).
Methodology
One briefing, traceable to its source material
PatchBriefing fetches advisories and release information from the sources listed below. Records are normalized, related reports are grouped, and AI prepares source-linked English and Dutch coverage. Validation gates can stop publication when required facts or critical conflict resolution are missing.
01
Fetch
Each enabled API or feed is checked on its configured schedule.
02
Normalize & match
Identifiers, products and versions are normalized so reports about the same issue can be grouped.
03
Draft & validate
AI prepares the coverage; schemas and claim checks validate the result before it can be published.
04
Link sources
The source material remains attached to each report so you can verify important details.
Sources we monitor
CISA Known Exploited Vulnerabilities
government · enrichmentData: CISA Known Exploited Vulnerabilities Catalog (CC0).
WordPress.org pluginmap
registry · primaryPlugin repository status via de officiële WordPress.org API.
Microsoft Security Update Guide
vendor · primarySource: Microsoft Security Response Center Security Update Guide.
CVE.org
database · primaryCVE Records © MITRE / the CVE Program (cve.org/Legal/TermsOfUse).
NVD (NIST)
database · enrichmentThis product uses data from the NVD API but is not endorsed or certified by the NVD.
OSV.dev
database · primaryData from OSV.dev; individual records carry their originating database's license (mostly CC-BY 4.0).
GitHub Advisory Database
database · primaryContains information from the GitHub Advisory Database (CC-BY 4.0).
NCSC-NL advisories
cert · enrichmentAdvisory: NCSC-NL (advisories.ncsc.nl).
Node.js security releases
vendor · primarySource: Node.js blog security releases.
Packagist Security Advisories
registry · primarySecurity advisories via Packagist (PKSA); GHSA-sourced records: GitHub Advisory Database (CC-BY 4.0).
Chrome Releases (Stable)
vendor · primarySource: Chrome Releases blog.
PHP Security Releases
vendor · discoverySource: PHP.net releases feed.
Laravel Security
vendor · discoverySource: Laravel official blog.
WordPress.org core versions
registry · metadataVersion data from WordPress.org.
React Security
vendor · discoverySource: React official blog (docs CC-BY 4.0).
CERT/CC Vulnerability Notes
cert · discoveryVulnerability Note, CERT/CC (kb.cert.org).
CERT-EU Security Advisories
cert · discoverySecurity Advisory, CERT-EU.
CISA Vulnrichment
government · enrichmentADP enrichment data: CISA Vulnrichment (public domain).
WordPress.org security news
vendor · discoveryWordPress.org News.
ENISA EUVD
government · enrichmentEU Vulnerability Database (EUVD), ENISA.
FIRST EPSS
database · enrichmentExploit Prediction Scoring System (EPSS), FIRST.org.
Follow the stacks that matter to you
Matching advisories and releases, grouped into one scheduled briefing at 07:00 CEST.