new: [release] New post for the 2.10.0 release.

Author: cedricbonhomme

content/news/2025-05-22-vulnerability-lookup-2.10.0.md

@@ -0,0 +1,127 @@
+---
+title: "Vulnerability-Lookup 2.10.0 released"
+slug: vulnerability-lookup-2-10-0
+layout: news
+date: 2025-05-22
+tags:
+    - release
+excludeSearch: true
+---
+
+
+We’re delighted to announce the release of Vulnerability-Lookup 2.10.0,
+and it’s packed with exciting features!
+
+
+## What's New
+
+### AI-Powered Enrichment using our in-house AI models
+
+Vulnerability-Lookup now enhances vulnerability advisories using our in-house AI models.
+
+We recently worked on a new project, [ML-Gateway](https://github.com/vulnerability-lookup/ML-Gateway),
+a FastAPI service for serving NLP models. It loads one or more pre-trained NLP models during startup
+and expose them through a clean, RESTful API for inference.
+For example, it leverages the transformers library to load the
+[CIRCL/vulnerability-severity-classification-distilbert-base-uncased](https://huggingface.co/CIRCL/vulnerability-severity-classification-distilbert-base-uncased)
+model, which specializes in classifying vulnerability descriptions according to their severity level.
+The server initializes this model once at startup, ensuring minimal latency during inference requests.
+
+The ultimate goal is to enrich vulnerability data descriptions through the application of a suite of NLP models, providing direct benefits to Vulnerability-Lookup and supporting other related projects
+such as [AIL](https://ail-project.org).
+
+It serves as a gateway to model-serving services, enabling us to integrate various AI models in the future without introducing new dependencies or added complexity to Vulnerability-Lookup.
+
+This release marks a significant milestone in our AI strategy.
+We now have the full loop in place: from data gathering and vulnerability correlation to AI dataset generation,
+model training with our own AI trainers, and finally, our new bridge that connects these models directly to Vulnerability-Lookup.
+
+**Example**
+
+Concretely, for the user, the result of the severity classification model appears on the vulnerability description page in Vulnerability-Lookup, just after the CVSS information.
+The goal is to provide a comparison point—and to offer a severity indicator when CVSS data is missing.
+This result is composed of the level of the severity (from Low to Critical) and the confidence level (between 0 and 1).
+
+[![ML-Gateway](/images/news/2025/05/example-ivanti.png)](/images/news/2025/05/example-ivanti.png)
+
+https://vulnerability.circl.lu/vuln/CVE-2025-4427
+
+**Conceptual architecture of the ML-Gateway**
+
+[![ML-Gateway](/images/news/2025/05/ml-gateway.png)](/images/news/2025/05/ml-gateway.png)
+
+
+**Models generation workflow**
+
+[![Models generation workflow](/images/news/2025/05/models-generation.png)](/images/news/2025/05/models-generation.png)
+
+
+More information about [AI datasets and models](https://www.vulnerability-lookup.org/user-manual/ai/).
+
+
+### Monitor Your Local GCVE Registry with Vulnerability-Lookup
+
+Thanks to the integration of the [GCVE client](https://github.com/gcve-eu/gcve), administrators of a Vulnerability-Lookup
+instance can now manage and monitor a local GCVE registry.
+
+GNAs are retrieved from [gcve.eu](https://gcve.eu), and the integrity of the data is
+automatically verified. In a future release, this will allow administrators of a
+Vulnerability-Lookup instance to choose which GNA feeds to pull.
+
+[![GCVE network](/images/news/2025/05/gcve-eu-network.png)](/images/news/2025/05/gcve-eu-network.png)
+
+[![Dashboard GCVE registry](/images/news/2025/05/vl-dashboard-gcve.png)](/images/news/2025/05/vl-dashboard-gcve.png)
+
+
+## Changes
+
+- Send notifications to admins and users when new comments are added to a disclosure.
+  ([58b6b60](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/58b6b60ccd45008448fee22358b40d79f82a17ab))
+- Improved admin notification system for published comments.
+  ([2d2b917](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/2d2b9174f218f6bdcecb11a9f6021e8199195250))
+- Added a new API endpoint to verify the integrity of the local GCVE registry.
+  ([a4416c6](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/a4416c6fcf1b3b5fbcda4e8f777e3e32925610bc),
+  [27cdb50](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/27cd27cdb503271a0f4b48ee7d93a66b74b322da9217b50),
+  [92c3c1b](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/92c3c1b83be7f617f6904cc4d546f654c7554a02))
+- Introduced a new Flask/Click command to update the local GCVE registry in the background
+  using data from gcve.eu. This can also be triggered from the HML dashboard.
+  ([0a35027](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/0a35027062f962ec705d33bc19cda03b3441fee3))
+- Queries the backend to retrieve the vendor/product information for hovered vulnerability
+  IDs in the charts and the table of the main public dashboard.
+  Related to [#136](https://github.com/vulnerability-lookup/vulnerability-lookup/issues/136)
+  ([9f138a7](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/9f138a7a656bd430512c8ee4db96c75c2cf95181))
+- Enhanced the vulnerability sightings correlation graph.
+  Related to [#136](https://github.com/vulnerability-lookup/vulnerability-lookup/issues/136)  
+  ([ac17667](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/ac17667364603a5c25e770000dd8d663ddf45910))
+- Various graphical improvements to the admin dashboard.
+  ([7c4e549](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/7c4e54929f85a65f1534cff0ee4a8699d1b703f1))
+
+
+## Fixes
+
+- Allowed `gna_id` to be null for organizations.
+  ([569bfa2](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/569bfa245f2e6d9b6f05376c5273c2ca921e102f))
+- Fixed typos in HTML templates.
+  ([e301a7f](https://github.com/vulnerability-lookup/vulnerability-lookup/commit/e301a7f14d6ad3497e742aa02c8e625be6b32279))
+
+
+## Changelog
+
+📂 To see the full rundown of the changes, users can visit the changelog on GitHub:
+https://github.com/vulnerability-lookup/vulnerability-lookup/releases/tag/v2.10.0
+
+
+🙏 A big thank you to all our contributors — with a special welcome to [Léa](https://www.linkedin.com/in/léa-ulusan-379a3a239/), our newest contributor!
+
+
+
+## Feedback and Support
+
+If you encounter issues or have suggestions, please feel free to open a ticket on our GitHub repository. Your feedback is invaluable to us!  
+https://github.com/vulnerability-lookup/vulnerability-lookup/issues/
+
+
+## Follow us on Fediverse/Mastodon
+
+You can follow us on Mastodon and get real time informationa about security advisories:  
+https://social.circl.lu/@vulnerability_lookup/