Vulnerabilities in hardware and software are a constant reality. Once systems reach a certain level of complexity, errors can no longer be avoided – and many of these errors can become security vulnerabilities that attackers exploit. Such security vulnerabilities are like open wounds in a company's digital infrastructure: they must be identified, understood, and addressed or at least treated as quickly as possible to prevent greater damage.

A central solution to this challenge is CSAF (Common Security Advisory Framework) – an open, standardized format for publishing and automatically exchanging machine-readable security advisories and vulnerability information. Developed as an open-source initiative, CSAF significantly simplifies and accelerates communication about security vulnerabilities and corresponding countermeasures.

By using CSAF, the manual effort in searching and evaluating security information can be significantly reduced. The framework enables manufacturers, system operators, administrators, and users to automatically collect and analyze information on known vulnerabilities - and determine if their products are affected. Even the confirmation of not being affected can be efficiently communicated through the Vulnerability Exploitability eXchange (VEX) profile within CSAF.

In an increasingly interconnected and complex digital world, the number of security-related vulnerabilities will continue to increase. Therefore, a modern vulnerability management based on CSAF documents will be indispensable in the future.

Join OASIS Open and qSkills™ for an intensive CSAF Week combining technical training with community exchange, designed to accelerate your organization's journey toward automated vulnerability management. Master the standard in three days of practical CSAF Workshops (Monday–Wednesday). Then join industry leaders at the CSAF Community Days (Thursday–Friday) to share insights, discover implementations, discuss the future of automated vulnerability management and connect with the global CSAF community.

CSAF Community Days | 13.-14.11.2025

Get informed and register now!

On 13th and 14th November 2025, the CSAF Community Days will take place at the Südwestpark – Forum in Nuremberg. This onsite event is aimed at developers, practitioners, manufacturers, users, and anyone involved with the Common Security Advisory Framework (CSAF). Discussions will focus on best practices, tools, success stories, and innovations related to CSAF.

Location:
Südwestpark – Forum
Südwestpark 37–41
90449 Nuremberg
Germany

What's Included

in your CSAF Community Days Experience

Your registration grants you full access to an exceptional two-day program designed to maximize learning, networking, and collaboration:

• Comprehensive Conference Program - Engage with cutting-edge presentations, panel discussions, and technical sessions led by CSAF practitioners, implementers, and industry experts. Stay tuned – detailed conference program will be published shortly.

• Full Catering Throughout Both Days - Stay energized with complimentary coffee, tea, and refreshments during breaks, plus delicious lunch served each day to fuel your networking and learning.

• Exclusive Evening Reception & Dinner - Join fellow attendees at the Südwestpark Hotel for an evening of networking and exchange. Enjoy a welcoming reception, dinner buffet, and beverages in a relaxed atmosphere - the perfect opportunity to connect with the CSAF community and forge lasting professional relationships.