Skip to main content

How do I generate a CSAF advisory?

Open the submission and use the Public Advisory panel to draft the advisory, then select Download CSAF 2.0. CSAF is the machine-readable Common Security Advisory Framework format. An Article 14(8) user advisory as CSAF VEX is available from the same panel.

Key takeaways​

  • The Public Advisory panel is on every submission page. Draft the advisory when the fix is ready.
  • The two downloads need the Reporting plan or higher.
  • Download CSAF 2.0 produces the machine-readable advisory.
  • A separate Article 14(8) user advisory (CSAF VEX) is available.
  • Researcher credit appears on the advisory only when the reporter gave permission.
Silent walkthrough. Follow the numbered steps below for the full text.

Steps​

  1. Open Submissions and select a report whose Fix stage is done, or a resolved report.
  2. Scroll to the Public Advisory panel.
  3. Select Draft public advisory to prepare the content. The summary is a copy of the report text. Remove reproduction steps and private details before you publish.
  4. Select Download CSAF 2.0 for the machine-readable file.
  5. Use Art.14(8) User Advisory (CSAF VEX) when you need the user-facing advisory.

Last updated 17 September 2026.