{"id":19884,"date":"2026-06-11T22:43:00","date_gmt":"2026-06-11T20:43:00","guid":{"rendered":"http:\/\/stocks-future.com\/?guid=334d834b00152948352e10630c8d88f0"},"modified":"2026-06-11T22:43:00","modified_gmt":"2026-06-11T20:43:00","slug":"liquibase-launches-free-cve-library-for-community-users","status":"publish","type":"post","link":"https:\/\/stocks-future.com\/?p=19884","title":{"rendered":"Liquibase Launches Free CVE Library for Community Users"},"content":{"rendered":"

\nNew public resource gives Liquibase Community users release-by-release security visibility into known vulnerabilities across releases, Docker images, binaries, and dependencies.<\/p><\/a><\/a><\/a><\/a>

AUSTIN, Texas--(BUSINESS WIRE)--#Binary<\/a>--Today, Liquibase is proud to release the open source Liquibase CVE Library<\/b> (Common Vulnerabilities and Exposures Library) to foster security and transparency across the Liquibase Community. The free, publicly available library helps users of older versions of Liquibase Community identify existing vulnerabilities and get a clearer sense of their security posture. By tying vulnerability data directly to Liquibase releases, the CVE Library helps teams see their risk exposure, compare versions, and take informed action to secure the software they run.<\/p>

\nAttackers need only to find a single exploit to breach a network and IT infrastructure, making comprehensive CVE libraries increasingly invaluable to security teams seeking to stay ahead of Mythos-class threat capabilities by patching all known weaknesses before they can be targeted.<\/p>

\nTo date, the Liquibase Community project has been downloaded over 100 million times.<\/p>

\nHow does the Liquibase CVE Library work?<\/b><\/p>

\nEvery time Liquibase ships a new release, automated security scanning tools analyze both the Docker image and the Liquibase binary for known vulnerabilities. Scanning also runs against previously published images, maintaining an up-to-date view of the evolving threat landscape and catching anything that surfaces post-release. The site organizes everything by image and version. You can see a high-level security grade and CVE counts for the latest release, drill into any specific version for the full vulnerability list, or use the comparison tool to see exactly which CVEs were resolved, or introduced, between two releases.<\/p>

\nWhich environments are supported?<\/b><\/p>

\nThe CVE Library currently covers two areas:<\/p>