diff --git a/pkgs/by-name/cv/cvemap/package.nix b/pkgs/by-name/cv/cvemap/package.nix
deleted file mode 100644
index 1a2e6cd835c8..000000000000
--- a/pkgs/by-name/cv/cvemap/package.nix
+++ /dev/null
@@ -1,37 +0,0 @@
-{
-  lib,
-  buildGoModule,
-  fetchFromGitHub,
-}:
-
-buildGoModule (finalAttrs: {
-  pname = "cvemap";
-  version = "1.0.0";
-
-  src = fetchFromGitHub {
-    owner = "projectdiscovery";
-    repo = "cvemap";
-    tag = "v${finalAttrs.version}";
-    hash = "sha256-pzCLzSsAaoiRrTBENnmyqaSyDnHQdDAcTNyaxpc7mt4=";
-  };
-
-  vendorHash = "sha256-4GW1mgwOXbdiDmQoN1yxVOJC8mXpqkKliabWZzvOff4=";
-
-  subPackages = [
-    "cmd/cvemap/"
-  ];
-
-  ldflags = [
-    "-s"
-    "-w"
-  ];
-
-  meta = {
-    description = "Tool to work with CVEs";
-    homepage = "https://github.com/projectdiscovery/cvemap";
-    changelog = "https://github.com/projectdiscovery/cvemap/releases/tag/v${finalAttrs.version}";
-    license = lib.licenses.mit;
-    maintainers = with lib.maintainers; [ fab ];
-    mainProgram = "cvemap";
-  };
-})
diff --git a/pkgs/by-name/vu/vulnx/package.nix b/pkgs/by-name/vu/vulnx/package.nix
new file mode 100644
index 000000000000..d2d44c2c582c
--- /dev/null
+++ b/pkgs/by-name/vu/vulnx/package.nix
@@ -0,0 +1,42 @@
+{
+  lib,
+  buildGoModule,
+  fetchFromGitHub,
+  versionCheckHook,
+}:
+
+buildGoModule (finalAttrs: {
+  pname = "vulnx";
+  version = "2.0.1";
+
+  src = fetchFromGitHub {
+    owner = "projectdiscovery";
+    repo = "vulnx";
+    tag = "v${finalAttrs.version}";
+    hash = "sha256-HejAK/KXpQ9HouA3JpX7MoMzMUoMmKX7eEKwMGfgSx4=";
+  };
+
+  vendorHash = "sha256-WVskArdIieEof/GDlzEZbY4QDYfAQyP0+Le24q+Kfu0=";
+
+  subPackages = [ "cmd/vulnx/" ];
+
+  ldflags = [ "-s" ];
+
+  __structuredAttrs = true;
+
+  strictDeps = true;
+
+  # Issue with updater and version check
+  # nativeInstallCheckInputs = [ versionCheckHook ];
+  # doInstallCheck = true;
+  # versionCheckProgramArg = [ "version" ];
+
+  meta = {
+    description = "Tool to work with CVEs";
+    homepage = "https://github.com/projectdiscovery/vulnx";
+    changelog = "https://github.com/projectdiscovery/vulnx/releases/tag/${finalAttrs.src.tag}";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ fab ];
+    mainProgram = "vulnx";
+  };
+})
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index dd1cbe95997e..fcb47874b3ba 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -575,6 +575,7 @@ mapAliases {
   curl-impersonate-chrome = warnAlias "curl-impersonate-chrome has been renamed to curl-impersonate" curl-impersonate; # Added 2025-11-02
   curl-impersonate-ff = throw "curl-impersonate-ff has been removed because it is unmaintained upstream and has vulnerable dependencies. Use curl-impersonate instead."; # Added 2025-11-02
   curlHTTP3 = warnAlias "'curlHTTP3' has been removed, as 'curl' now has HTTP/3 support enabled by default" curl; # Added 2025-08-22
+  cvemap = vulnx; # Added 2026-04-19
   cwe-client-cli = throw "cwe-client-cli has been removed because it is archived and has unclear licensing"; # Added 2026-01-10
   cyber = throw "cyber has been removed, as it does not build with supported Zig versions"; # Added 2025-08-09
   dale = throw "dale has been removed, as it does not build with supported LLVM versions"; # Added 2025-08-10