Advisory/VEX Connector Snapshot - 2026-06-03
This snapshot captures the local setup state after the advisory/VEX enable and sync pass on 2026-06-03.
Count basis:
downloaded itemsmeans completed raw download units that are clean enough for setup seed export.- Advisory and distro rows count
concelier.source_documentsrows withstatus='mapped'. - VEX rows count
vex.vex_raw_documentsrows. - This is not the projected vulnerability, claim, or affected-product count.
- At capture time, active advisory jobs returned 0 rows. Raw seed exclusions were still visible as 135 failed and 22 pending-parse advisory source documents.
- Parent-covered aliases are folded into parent UI rows. Internal implementation or fixture rows such as
distro-arch,distro-gentoo-glsa, ands051-synthetic-reachability-fixtureare not represented as setup rows.
| Group (type) | Source | Covers additionally | Downloaded items | Has connector functioning | Enabled | State | Error | Comment |
|---|---|---|---|---|---|---|---|---|
| vex | excititor:cisco | - | 193 | yes | yes | fully synced | - | Cisco CSAF/OpenVEX provider. |
| vex | excititor:msrc | - | 792 | yes | yes | fully synced | - | Microsoft CSAF provider. |
| vex | excititor:oci-openvex | - | 1 | yes | yes | fully synced | - | OCI OpenVEX attestation provider. |
| vex | excititor:oracle | - | 3 | yes | yes | fully synced | - | Oracle CSAF provider. |
| vex | excititor:redhat | - | 2035 | yes | yes | fully synced | - | Red Hat CSAF provider. |
| vex | excititor:suse-rancher | - | 2 | yes | yes | fully synced | - | SUSE Rancher VEX Hub provider. |
| vex | excititor:ubuntu | - | 20788 | yes | yes | fully synced | - | Ubuntu CSAF provider. |
| distro | alpine | - | 16 | yes | yes | fully synced | - | Alpine distro advisory connector. |
| distro | amazon | - | 252 | yes | yes | fully synced | - | Amazon Linux ALAS connector. |
| distro | arch | - | 0 | yes | yes | fully synced | - | Latest job succeeded; no clean raw item in the current local dataset. |
| distro | astra | - | 2 | yes | yes | fully synced | - | Astra Linux connector. |
| distro | centos | - | 0 | no | no | not started | - | Unsupported/deprecated; no current runnable connector. |
| distro | debian | - | 58 | yes | yes | fully synced | - | Debian distro advisory connector. |
| distro | fedora | - | 4 | yes | yes | fully synced | - | Fedora Bodhi security update connector. |
| distro | gentoo | - | 0 | yes | yes | fully synced | - | Latest job succeeded; no clean raw item in the current local dataset. |
| distro | redhat | rhel | 916 | yes | yes | fully synced | - | Parent Red Hat row also covers the rhel alias. |
| distro | suse | - | 166 | yes | yes | fully synced | - | SUSE distro advisory connector. |
| distro | ubuntu | - | 116 | yes | yes | fully synced | - | Ubuntu distro advisory connector. |
| vulnerabilities | adobe | - | 0 | yes | yes | fully synced | - | Latest job succeeded; no clean raw item in the current local dataset. |
| vulnerabilities | amd | - | 11 | yes | yes | fully synced | - | AMD vendor advisory connector. |
| vulnerabilities | apple | - | 30 | yes | yes | fully synced | - | Apple vendor advisory connector. |
| vulnerabilities | auscert | - | 0 | yes | yes | fully synced | - | Latest job succeeded; 2 failed raw rows remain excluded from the clean seed. |
| vulnerabilities | aws | - | 1 | yes | yes | fully synced | - | AWS security bulletin connector. |
| vulnerabilities | cccs | - | 5043 | yes | yes | fully synced | - | CCCS/Canadian Centre advisory connector; 105 failed raw rows remain excluded from the clean seed. |
| vulnerabilities | cert-at | - | 0 | yes | yes | fully synced | - | Latest job succeeded; no clean raw item in the current local dataset. |
| vulnerabilities | cert-be | - | 10 | yes | yes | fully synced | - | Belgian CCB/CERT advisory connector. |
| vulnerabilities | cert-cc | - | 364 | yes | yes | fully synced | - | CERT/CC advisory connector. |
| vulnerabilities | cert-ch | - | 0 | no | no | not started | - | Catalog-visible unsupported row; no approved official machine-readable advisory feed/API yet. |
| vulnerabilities | cert-de | - | 610 | yes | yes | fully synced | - | CERT-Bund/CERT-DE connector. |
| vulnerabilities | cert-eu | - | 0 | yes | yes | fully synced | - | Latest job succeeded; no clean raw item in the current local dataset. |
| vulnerabilities | cert-fr | - | 92 | yes | yes | fully synced | - | CERT-FR connector; active job queue was empty at capture time. |
| vulnerabilities | cert-in | - | 0 | yes | yes | fully synced | - | Latest job succeeded; no clean raw item in the current local dataset. |
| vulnerabilities | cert-pl | - | 100 | yes | yes | fully synced | - | CERT Polska connector. |
| vulnerabilities | cert-ua | - | 9 | yes | yes | fully synced | - | CERT-UA connector. |
| vulnerabilities | chromium | - | 15 | yes | yes | fully synced | - | Chromium advisory connector; 2 failed raw rows remain excluded from the clean seed. |
| vulnerabilities | cisco | - | 2 | yes | yes | fully synced | - | Cisco vendor advisory connector. |
| vulnerabilities | cve | - | 37970 | yes | yes | fully synced | - | CVE.org connector; 14 failed raw rows remain excluded from the clean seed. |
| vulnerabilities | epss | - | 0 | yes | yes | fully synced | - | EPSS metadata/scoring feed; latest job succeeded without clean raw advisory documents. |
| vulnerabilities | exploitdb | - | 1 | yes | yes | fully synced | - | Metadata-only exploit intelligence connector. |
| vulnerabilities | fortinet | - | 1 | yes | yes | fully synced | - | Fortinet PSIRT connector. |
| vulnerabilities | fstec-bdu | - | 1 | yes | yes | fully synced | - | Russian FSTEC BDU connector; opt-in source. |
| vulnerabilities | gcp | - | 1 | yes | yes | fully synced | - | Google Cloud security connector. |
| vulnerabilities | ghsa | nuget | 11 | yes | yes | fully synced | - | Parent GHSA row also covers the nuget alias. |
| vulnerabilities | - | 0 | no | no | not started | - | Generic Google row remains unsupported; use scoped gcp and chromium rows or add a future Android/Pixel-specific connector. | |
| vulnerabilities | intel | - | 252 | yes | yes | fully synced | - | Intel vendor advisory connector. |
| vulnerabilities | jpcert | - | 10 | yes | yes | fully synced | - | JPCERT connector; 1 failed raw row remains excluded from the clean seed. |
| vulnerabilities | juniper | - | 0 | no | no | not started | - | Catalog-visible unsupported row until a stable official all-Juniper JSA feed/API exists. |
| vulnerabilities | kaspersky-ics | - | 0 | yes | yes | fully synced | - | Latest job succeeded; no clean raw item in the current local dataset. |
| vulnerabilities | kev | - | 1 | yes | yes | fully synced | - | CISA KEV connector. |
| vulnerabilities | krcert | - | 15 | yes | yes | fully synced | - | Korean KRCERT/KISA connector. |
| vulnerabilities | metasploit | - | 1 | yes | yes | fully synced | - | Metadata-only exploit intelligence connector. |
| vulnerabilities | microsoft | azure | 1 | yes | yes | fully synced | - | Parent MSRC row also covers the azure alias. |
| vulnerabilities | nkcki | - | 197 | yes | yes | fully synced | - | Russian NKCKI connector; opt-in source. |
| vulnerabilities | nvd | - | 60 | yes | yes | fully synced | - | NVD connector. |
| vulnerabilities | oracle | - | 58 | yes | yes | fully synced | - | Oracle vendor advisory connector. |
| vulnerabilities | osv | npm, pypi, go, rubygems, maven, crates, packagist, hex, rustsec, pypa, govuln, bundler-audit, chainguard, wolfi | 1696 | yes | yes | fully synced | - | Parent OSV row also covers ecosystem aliases; 13 pending-parse raw rows remain excluded from the clean seed. |
| vulnerabilities | paloalto | - | 1 | yes | yes | fully synced | - | Palo Alto PSIRT connector. |
| vulnerabilities | siemens | - | 27 | yes | yes | fully synced | - | Siemens vendor advisory connector; opt-in source. |
| vulnerabilities | stella-mirror | - | 1 | yes | yes | fully synced | - | Local Stella Ops mirror connector; 1 pending-parse raw row remains excluded from the clean seed. |
| vulnerabilities | us-cert | - | 2 | yes | yes | fully synced | - | ICS-CISA/US-CERT connector. |
| vulnerabilities | vmware | - | 3 | yes | yes | fully synced | - | VMware vendor advisory connector. |
Totals
| Dataset | Downloaded items |
|---|---|
| Advisory/distro mapped source documents | 48127 |
| VEX raw documents | 23814 |
| Combined downloaded items | 71941 |