How to contribute?

This website reflects the current state of data stored in our GitHub repository. To contribute information about missing cloud vulnerabilities and security issues, you can either use our contribution form or create a pull request and our maintainers will review your suggestion within a few days (but usually sooner). Please make sure that your contributions match our criteria for inclusion.

When creating a pull request, please adhere to the following guidelines:

  1. Use the CVDB YAML format.
  2. Include public references (as URLs).
  3. Provide a clear and detailed description of the issue.
  4. Give the issue a descriptive and non-generic title.
  5. Assign the issue an estimated severity and/or rate it using the Piercing Index.
  6. Give proper credit to the researchers involved in the discovery.
  7. Use respectful language (avoid disparaging CSPs, vendors or researchers).

Please note that this database only includes information about publicly known issues and is not an appropriate venue for initial disclosure. Therefore, please refrain from using this platform to publish non-public information, and reach out to the relevant CSP or vendor instead.

Feel free to join the discussion about cloud vulnerability enumeration on Slack.