A CVE page is wrong
Send the CVE id, what the page says, and the source that says otherwise: the vendor's advisory, the release notes or the commit of the fix. The versions on a CVE page come from NVD, the CVE record and GitHub's reviewed advisories (see the methodology); when one of them is wrong, the page names the source it follows instead.
A vulnerability we do not track
A CVE missing from a component we track, or a self-hosted AI tool we should add: the same address. Link the advisory.
Pro, the scanner and billing
A Pro subscription is managed from your dashboard, which opens Stripe's customer portal (invoices, card, cancellation). For a scan pack that was not credited or anything else about a payment, write to the address above with the email of your account.
Your data
Access, correction or deletion of your account or your newsletter subscription: the same address. What we collect and why is in the privacy policy.
A security issue on pocketclaw.dev
If you find a vulnerability in this site itself, email it to the address above with “security” in the subject, and give us time to fix it before publishing.
Elsewhere
On X: @Pocket_claw. Newsletter readers can also reply to any issue.
Publisher
PocketClaw is published by Go To Agency SAS, 9 rue Jean-Jacques Rousseau, 21000 Dijon, France (RCS Dijon 944 980 762), phone +33 7 56 96 20 95, email [email protected]. The full details are in the legal notice.