A page for every CVE, and for every exploited vendor

The latest CVEs feed now links each entry to a page of its own, and each vendor in CISA's catalog to its full list.

• One page per CVE. Open any CVE ID at /cves/CVE-…: NVD's description, the CVSS score and its vector read out in words (attack vector, privileges, user interaction, impact), the weakness, whether CISA lists it as exploited with its due date and required action, the EPSS odds, and the affected packages with their fixed versions from the GitHub advisories OSV.dev links to. A short answer at the top says whether it is exploited and what to do.
• One page per vendor. Exploited vulnerabilities by vendor ranks every vendor in the Known Exploited Vulnerabilities catalog, with how many fed ransomware. Each vendor page lists every entry, newest first, by product, with the vendor's new Critical and High CVEs this week.
• Kept out of search when there is nothing to say. A Low, unexploited CVE with no EPSS signal, and a vendor with fewer than three entries, are marked noindex. The rest are listed in a second sitemap at /cves/sitemap.xml.

To know which of these are in your own dependencies, turn on vulnerability watch for a repository.