For the complete documentation index, see llms.txt. This page is also available as Markdown.
Vulnerabilities
Track open vulnerabilities through the remediation pipeline. Filter by severity or fix state. View full details without leaving CVEF.
Vulnerabilities displays findings across code, OSS dependencies, and containers. It groups findings into OSS Vulnerabilities (CVEs) and Novel Vulnerabilities (LVEs). Each group includes severity and exploitability counts.
Use the filter chips above the table to narrow the list. Available filters are All, Critical, High, Novel (LVEs), In Fix, and Eliminated.
Column
Description
CVE / ID / LVE
Vulnerability identifier, such as CVE-2021-23440 or LVE-6232-667720499
Component
Package name and version, such as npm:owasp-nodejs-goat:1.3.0
Source
Package ecosystem tag: npm, maven, pypi, go, Container, or OSS Dep
Severity
Critical, High, or Medium severity badge
Exploitable
Yes or no chip indicating whether the vulnerability is exploited in the wild
Verification Status
How the finding was confirmed, such as static_analysis, execution_verified, or identified_unverified
Viewing Vulnerability Details
1
Open a vulnerability
Select any vulnerability row. A side panel opens.
2
Review OSS vulnerability details
For an OSS vulnerability, review the CVE detail card. It includes the description, severity scores, affected versions, and exploitability.
3
Review novel vulnerability details
For a novel vulnerability, use the Overview, Find Details, and Fix Details tabs.
Overview includes:
LVE number, title, and severity
Exploitability, reachability, and verification status
CWE bug class, file location, and line number
Source model, discovery date, repository URL, and branch
