The Global CVE (GCVE) allocation system is a new, decentralized approach to vulnerability identification and numbering, designed to improve flexibility, scalability, and autonomy for participating entities. While remaining compatible with the traditional CVE system, GCVE introduces GCVE Numbering Authorities (GNAs). GNAs are independent entities that can allocate identifiers without relying on a centralised block distribution system or rigid policy enforcement.

The GCVE identifier typically follows a traditional four-part format:

GCVE-<GNA-ID>-<YEAR>-<UNIQUE-ID>

However, a GNA has the flexibility to use an alternative format, provided that the prefix always follows the structure:

GCVE-<GNA-ID>-<GNA-VALUE>

GCVE publishes a FAQ about their project at https://gcve.eu/faq/.

The full list of GNAs can be found at https://gcve.eu/dist/gcve.json.

The vulnerability-lookup project provides a platform to consume the GCVEs and act on them.