Report a correction

What is wrong? Wrong product categoryWrong vendor, or missing vendorWrong discovery attributionA CVE is missingSomething else

CVE ID optional

What should it say instead?

The more specific the better — what the site says now, and what it should say.

Link to evidence optional

A vendor advisory or datasheet makes a correction quick to act on.

Your email optional

Only used to follow up on this report. Never shown on the site, never published to an issue, never mailed anything else — see privacy.

Leave this empty

Send correction

No account needed. Reports go to a private queue, not a public tracker.

What happens next

1. Your report lands in a private triage queue and alerts the maintainer.
2. Accepted corrections become a public issue tracking the fix — your report's text, never your email address.
3. Most data corrections are a change to the taxonomy in /data, which is version-controlled and reviewable.

Found a security issue in the site itself rather than in the data? See security.txt.