wtf is ave?

AVE is a public security vulnerability knowledge base built for security operations teams. It pulls in vulnerability information from multiple public sources, such as NVD, CVE, and GitHub Advisory, gives each one its own unified AVE tracking number, and stores the details as structured TOML files organized by year. The project also collects and checks known proof of concept and exploit references tied to each vulnerability, so a security team can quickly see whether public exploit code exists for a given issue and how severe it is. The README is clear that the actual code and logic used to crawl and process vulnerabilities from their original sources has not been made public. What this repository shares instead is the resulting data, plus a static website built on top of it and hosted through GitHub Pages. The website lets a visitor browse the vulnerability list with paging, search by keyword or vulnerability ID, and filter by severity level from critical down to unknown. Columns can be sorted by ID, title, severity, date, or score. A sidebar shows how many vulnerabilities, proof of concepts, and exploits exist per year, along with a bar showing the overall severity breakdown. Search terms, filters, and the current page are saved into the page's URL so a specific view can be shared or bookmarked. A detail page for each vulnerability shows its full description, severity score, related CVE aliases, remediation advice, and any linked proof of concept or exploit files found in the repository. Under the hood, the site searches the repository's TOML files directly through GitHub's Code Search and Tree APIs rather than using a separate database, and it automatically rebuilds and redeploys through GitHub Actions whenever new data is pushed to the main branch. The README does not state a license for this project.