How do I generate a CSAF advisory?
Open a resolved submission and use the Public Advisory panel to draft the advisory, then select Download CSAF 2.0. CSAF is the machine-readable Common Security Advisory Framework format. An Article 14(8) user advisory as CSAF VEX is available from the same panel.
Key takeaways
- The advisory tools appear on a resolved submission.
- Download CSAF 2.0 produces the machine-readable advisory.
- A separate Article 14(8) user advisory (CSAF VEX) is available.
- Researcher credit appears on the advisory only when the reporter gave permission.
Steps
- Open Submissions and select a resolved report.
- Scroll to the Public Advisory panel.
- Select Draft public advisory to prepare the content.
- Select Download CSAF 2.0 for the machine-readable file.
- Use Art.14(8) User Advisory (CSAF VEX) when you need the user-facing advisory.
Related
- Full procedure: SOP-05, Triaging a Vulnerability Report
- Reference: CSAF export
Last updated 17 September 2026.