Changelog - SecurePulse

v1.1.0

14. April 2026

🛡️ Vendor Advisories & MITRE integration

Vendor Security Advisories (CSAF 2.0): structured advisories directly from vendors like Red Hat and SICK – with product tree, CVSS, remediations and CVE cross-references
Advisories browser at /advisories with vendor and severity filters
Watchers now match both CVEs and vendor advisories – the same vendor/product filters apply to both sources
MITRE CVE integration: second data source alongside NVD, pulls delta releases hourly directly from the official cvelistV5 repo – often available hours to days earlier than NVD
New CVE fields cve_state (RESERVED/PUBLISHED/REJECTED) and source_origin (nvd/mitre) for transparent origin tracking

Navigation entry "Advisories" next to CVE Browser
Delta sync via CSAF changes.csv and MITRE hourly releases keeps bandwidth and DB load low

Architecture bug: CVEs that get a vendor/product assigned via hourly AI CPE enrichment now also trigger a CPE-added notification for default watchers (without include_guessed) – previously only after up to 7 days via the weekly cleanup job

v1.0.2

14. January 2026

Smart CVE change tracking – distinction between new and modified CVEs
Granular notification settings for CVE changes
Detection of 8 change types: severity, KEV, exploit, EPSS, CPE, description, references, CWE
Delete notifications individually

Notification page shows new/modified CVEs with emojis (✨/🔄)
Change reason in notifications (🚨 KEV, 💥 exploit, ⬆️ severity, etc.)
Watcher form with clearer notification configuration
CVEs without official CPE data are automatically assigned vendor/product via CPE Guesser API and AI (Claude)

v1.0.1

13. January 2026

v1.0

v1.0.0

13. January 2026

🚀 First public release