cvss-rs 0.5.0 is released with an online CVSS Verifier

Thu, 10 Sep 2026 00:00:00 +0000

We have just released cvss-rs 0.5.0, a new version of our Rust library for parsing and scoring CVSS vectors—compact strings that describe a vulnerability’s exploitability and impact. We primarily develop cvss-rs for use in Trustify, an open-source platform for software supply chain security.

Alongside fixes and API improvements, this release includes its most visible new feature: an online CVSS verifier. Paste a CVSS vector into it and the verifier detects the version, parses its metrics, calculates the score, and gives you a URL you can share. It supports CVSS 2.0, 3.0, 3.1, and 4.0. Kudos to Jens Reimann for developing it!

When Gemini Blocks Your Security Prompts

Mon, 24 Aug 2026 00:00:00 +0000

I recently tested new Gemini 3.7 Flash model against some code review prompts and it was the first time I’d seen these tasks blocked by Gemini safety filters.

The reviewing agent sends code diffs along with a security review prompt that asks the model to identify vulnerabilities like SQL injection, command injection, path traversal, SSRF, and insecure deserialization. The diffs used in evals contain, of course, real vulnerability patterns, as that’s the whole point of evaluating how this agent performs.

Security on Dejan Bosanac

cvss-rs 0.5.0 is released with an online CVSS Verifier

When Gemini Blocks Your Security Prompts