Chainguard Named a CVE Numbering Authority, Advancing Open Source Vulnerability Disclosure

{
  "signal_id": "6e8f0688-eeb5-3349-a53c-d0903c38e617",
  "signal_type": "news",
  "signal_subtype": "recognized_as",
  "detected_at": "2026-09-22T21:22:00+00:00",
  "company": {
    "name": "Chainguard",
    "domain": "chainguard.dev"
  },
  "data": {
    "url": "https://www.prnewswire.com/news-releases/chainguard-named-a-cve-numbering-authority-advancing-open-source-vulnerability-disclosure-302886770.html",
    "title": "Chainguard Named a CVE Numbering Authority, Advancing Open Source Vulnerability Disclosure",
    "excerpt": "Authorization enables Chainguard to assign CVEs for qualifying open source vulnerabilities processed through Athena, helping protect open source software from AI attacks NEW YORK , Sept. 22, 2026 /PRNewswire/ -- Chainguard , the trusted source for open source, today announced that it has been authorized by the Common Vulnerabilities and Exposures (CVE ®) Program as a CVE Numbering Authority (CNA) . The mission of the CVE Program is to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities. As a CNA, Chainguard can assign CVE identifiers and publish CVE Records for qualifying vulnerabilities. The authorization is scoped to include open source vulnerabilities processed through the Athena coalition, when upstream maintainers have already fixed the flaw without an identifier, no maintainer remains to assign one, or no more specific CNA covers the project. This milestone underscores Chainguard's deep commitment to transparent, coordinated vulnerability disclosure and protecting open source software from AI attacks. Frontier AI models are surfacing latent vulnerabilities in widely used open source software that traditional security tools and years of expert review failed to detect. As AI compresses the time between discovery and exploitation, vulnerabilities without CVE identifiers may remain invisible to the scanners, databases, and compliance systems...",
    "summary": "Chainguard has been authorized by the Common Vulnerabilities and Exposures (CVE) Program as a CVE Numbering Authority (CNA), allowing it to assign CVE identifiers for certain open source vulnerabilities.",
    "location": "NEW YORK",
    "planning": false,
    "image_url": "https://mmx.prnewswire.com/media/MS684620/Chainguard-Logo.jpg?id=OA2965138&p=facebook",
    "confidence": 0.95,
    "recognition": "CVE Numbering Authority (CNA)",
    "published_at": "2026-09-22T21:22:00Z",
    "location_data": [
      {
        "city": "New York",
        "state": "New York",
        "region": "Northern America",
        "country": "United States",
        "continent": "Americas",
        "fuzzy_match": false
      }
    ],
    "effective_date": "2026-09-22",
    "article_sentence": "Chainguard , the trusted source for open source, today announced that it has been authorized by the Common Vulnerabilities and Exposures (CVE ®) Program as a CVE Numbering Authority (CNA) ."
  }
}

curl https://signals.autobound.ai/v1/signals/6e8f0688-eeb5-3349-a53c-d0903c38e617 \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"chainguard.dev","limit":20}'