Hacker News Reader

So who will maintain it then? Either the EU or China I suppose. They can easily fund it.

Maybe the Dutch should go ahead.

ENISA in Europe has the mandate of building a EU vulnerability database for the NIS 2 directive anyway and it's coming soon...

And CIRCL in Luxembourg are providing vulnerability-lookup which can also assign IDs but in a more decentralized way: https://www.vulnerability-lookup.org/documentation/

So, parts of this are already in place and I assume this will be a big boost towards a new vulnerability ecosystem.

This sounds like good news, thanks!

Do we already have an ETA for the ENISA vulnerability database?

Us Dutch have https://advisories.ncsc.nl/advisories although a lot of that is just analysing CVEs and their impact on society.

An EU solution would probably be much better. Would suck for Americans, though, they'd need to get up early to meet European office hours.