# English (en) UI strings — the source-of-truth table. Format: key<TAB>text; missing keys fall back to English.
nav.dashboard Dashboard
nav.csaf CSAF
nav.import Import
nav.export Export
nav.settings Settings
nav.info Info
nav.language Language
nav.theme_light Light
nav.theme_dark Dark
nav.theme_toggle Toggle theme
nav.skip_main Skip to main content
nav.brand_label ndaal CSAF home
nav.logo_alt ndaal — information security & compliance
nav.info_about About
nav.info_license License
nav.info_system System Info
nav.info_privacy Privacy
nav.info_security Security
nav.info_changelog Changelog
nav.info_readme README
nav.info_administrator Administrator Guide
nav.info_user User Guide
home.stat_documents Total Documents
home.stat_advisories Security Advisories
home.stat_vex VEX Documents
home.stat_informational Informational
home.config_title Configuration
home.config_csaf_mode CSAF Mode
home.config_theme Theme
home.config_naming Naming
home.activity_title Recent Activity
home.col_timestamp Timestamp
home.col_action Action
home.col_tracking_id Tracking ID
home.col_details Details
home.no_activity No activity recorded yet.
home.action_create create
home.action_update update
home.action_delete delete
home.action_import import
home.action_export export
csaf.list_heading CSAF Documents
csaf.list_new_document New Document
csaf.list_empty No documents found.
csaf.list_create_one Create one
csaf.list_col_tracking_id Tracking ID
csaf.list_col_title Title
csaf.list_col_category Category
csaf.list_col_status Status
csaf.list_col_cvss_v3 CVSS v3
csaf.list_col_cvss_v4 CVSS v4
csaf.list_col_release_date Release Date
csaf.list_pagination_next Next
csaf.list_pagination_showing Showing
csaf.list_pagination_of of
csaf.list_documents_plural document(s)
csaf.form_new_title New CSAF Document
csaf.form_edit_title Edit CSAF Document
csaf.form_submit_create Create Document
csaf.form_submit_save Save Changes
csaf.form_cancel Cancel
csaf.form_section_document_metadata Document Metadata
csaf.form_section_affected_product Affected Product
csaf.form_section_vulnerability Vulnerability
csaf.form_vulnerability_hint Required for Security Advisories, optional for Informational / VEX.
csaf.form_section_cvss_v3 CVSS v3.1
csaf.form_section_cvss_v4 CVSS v4.0
csaf.field_tracking_id Tracking ID *
csaf.field_title Title *
csaf.field_category Category *
csaf.field_status Status *
csaf.field_doc_version Document Version *
csaf.field_tlp TLP 2.0 *
csaf.field_initial_release_date Initial Release Date *
csaf.field_current_release_date Current Release Date *
csaf.field_summary Summary *
csaf.field_publisher_name Name *
csaf.field_publisher_namespace Namespace *
csaf.field_publisher_contact Contact details
csaf.field_vendor Vendor *
csaf.field_product_name Product Name *
csaf.field_product_id Product ID *
csaf.field_product_status Product Status *
csaf.field_cve CVE ID
csaf.field_vuln_title Vulnerability Title
csaf.field_vuln_description Vulnerability Description
csaf.field_cwe_id CWE ID
csaf.field_cwe_name CWE Name
csaf.field_cvss_base_score Base Score (0.0 – 10.0)
csaf.field_cvss_severity Severity
csaf.field_cvss_v3_vector CVSS v3.1 Vector
csaf.field_cvss_v4_vector CVSS v4.0 Vector
csaf.field_verschlusssache Verschlusssache
csaf.field_nato NATO
csaf.opt_category_security_advisory Security Advisory
csaf.opt_category_vex VEX
csaf.opt_category_informational_advisory Informational Advisory
csaf.opt_status_draft draft
csaf.opt_status_interim interim
csaf.opt_status_final final
csaf.opt_product_status_known_affected known_affected
csaf.opt_product_status_known_not_affected known_not_affected
csaf.opt_product_status_fixed fixed
csaf.opt_product_status_under_investigation under_investigation
csaf.opt_publisher_category_vendor vendor
csaf.opt_publisher_category_discoverer discoverer
csaf.opt_publisher_category_coordinator coordinator
csaf.opt_publisher_category_translator translator
csaf.opt_publisher_category_other other
csaf.view_edit_button Edit
csaf.view_json_button JSON
csaf.view_delete_button Delete
csaf.view_delete_confirm Delete this document?
csaf.view_section_metadata Metadata
csaf.view_section_vulnerabilities Vulnerabilities
csaf.view_section_raw_json Raw JSON
csaf.view_no_vulnerabilities No vulnerabilities.
csaf.view_row_csaf_version CSAF Version
csaf.view_row_version Version
csaf.view_row_tlp TLP
csaf.view_row_initial_release Initial Release
csaf.view_row_current_release Current Release
csaf.view_vuln_col_cve CVE
csaf.err_back Back
csaf.err_title_create_failed Create Failed
csaf.err_title_not_found Not Found
csaf.err_title_error Error
csaf.err_title_duplicate Duplicate Document
csaf.err_title_storage_error Storage Error
csaf.err_title_update_failed Update Failed
csaf.err_title_tracking_id_mismatch Tracking ID Mismatch
csaf.err_title_validation_failed Validation Failed
csaf.err_title_delete_error Delete Error
csaf.err_form_error_prefix Form error:
csaf.err_document_exists A document with tracking ID <strong>{tid}</strong> already exists.
csaf.err_document_not_found Document <strong>{tid}</strong> does not exist.
csaf.err_tracking_id_mismatch URL tracking ID <strong>{url_id}</strong> does not match document tracking ID <strong>{doc_id}</strong>.
csaf.err_validation_prefix Validation errors:
csaf.err_missing_document_id Missing document ID
admin.results_label Results:
admin.errors_label Errors:
admin.error_label Error:
admin.view_documents_link View Documents
admin.back_link Back
admin.back_to_export_link Back to Export
admin.enabled_label enabled
admin.disabled_label disabled
admin.export_directory_label Export directory:
admin.sha256_sidecars_label SHA-256 sidecars:
admin.sha512_sidecars_label SHA-512 sidecars:
admin.sha3_512_sidecars_label SHA3-512 sidecars:
admin.blake3_512_sidecars_label BLAKE3-512 sidecars:
admin.shake256_512_sidecars_label SHAKE256-512 sidecars:
admin.bytes_label bytes
admin.import_heading Import CSAF Documents
admin.import_intro ,
admin.import_directory_label Import directory:
admin.import_place_hint ,
admin.importing_button Importing...
admin.start_import_button Start Import
admin.import_complete_title Import Complete
admin.import_result_line {imported} document(s) imported, {skipped} skipped.
admin.import_again_link Import Again
admin.import_failed_title Import Failed
admin.export_heading Export CSAF Documents
admin.export_intro ,
admin.csaf_mode_label CSAF mode (written into files):
admin.documents_to_export_label Documents to export:
admin.exporting_button Exporting...
admin.start_export_button Start Export
admin.export_complete_title Export Complete
admin.export_result_line {exported} document(s) exported (CSAF {mode}) to <code>{export_dir}</code>.
admin.export_again_link Export Again
admin.dump_heading Dump Database
admin.dump_intro ,
admin.dump_directory_label Dump directory:
admin.dumping_button Dumping...
admin.start_dump_button Start Dump
admin.dump_complete_title Dump Complete
admin.dump_result_line database snapshot written to <code>{dump_dir}</code> with timestamp <code>{ts}</code>.
admin.sidecar_files_heading Sidecar files
admin.dump_failed_title Dump Failed
admin.audit_export_heading Export Audit Log
admin.audit_export_intro ,
admin.exporting_audit_button Exporting audit log...
admin.format_markdown_label Markdown (<code>.md</code>)
admin.format_csv_label CSV (<code>.csv</code>)
admin.format_json_label JSON (<code>.json</code>)
admin.format_sarif_label SARIF 2.1 (<code>.sarif</code>)
admin.audit_export_title Audit Log Export
admin.audit_export_no_format_selected ,
admin.audit_export_complete_title Audit Log Export Complete
admin.audit_export_result_line ,
admin.payloads_heading Payloads
admin.sidecars_heading Sidecars
admin.audit_export_failed_title Audit Log Export Failed
info.subnav_about About
info.subnav_license License
info.subnav_system System Info
info.subnav_privacy Privacy
info.subnav_security Security
info.subnav_changelog Changelog
info.subnav_readme README
info.subnav_administrator Administrator Guide
info.subnav_user User Guide
info.about_heading About
info.about_intro <strong>CSAF</strong> is a web-based management tool for creating, reading, updating, and deleting Common Security Advisory Framework (CSAF) documents conforming to OASIS CSAF versions 2.0 and 2.1.
info.about_version_label Version
info.about_features_heading Features
info.about_features_list <li>Full CRUD operations for CSAF security advisories, VEX, and informational advisories</li> <li>Built-in validation against CSAF 2.0/2.1 schema rules</li> <li>CVSS v3.1 and v4.0 scoring display</li> <li>SHA-256 and SHA3-512 sidecar hash file generation</li> <li>Bulk import/export with filesystem directory scanning</li> <li>Audit trail for all document operations</li> <li>HATEOAS-compliant REST API</li> <li>Embedded storage (redb + SQLite) — no external database required</li> <li>TLS 1.3 with automatic certificate generation</li>
info.about_source_heading Source code
info.about_source_intro CSAF CRUD is free software under the Apache License 2.0. The complete source, issue tracker and release archives — including the five checksum sidecars published with every binary — live in the project repository. The workspace is also published to crates.io, so it can be built or installed from source with <code>cargo install csaf-crud</code>, or fetched pre-built with <code>cargo binstall csaf-crud</code>.
info.about_repository_label Repository:
info.about_releases_label Releases:
info.about_cratesio_label crates.io:
info.about_sha_note The <code>SHA256SUMS</code> manifest in each release is what this binary's own <code>--self-update</code> verifies a download against. That proves <em>integrity</em>, not authenticity — the artifacts are not signed, so whoever can rewrite a release archive at source can rewrite the manifest beside it.
info.about_contact_heading Contact
info.about_contact_text Developed by <strong>ndaal Gesellschaft für Sicherheit in der Informationstechnik mbH & Co KG</strong>, Cologne, Germany.
info.license_heading License
info.license_intro CSAF is licensed under the <strong>Apache License, Version 2.0</strong>.
info.license_spdx_label SPDX-License-Identifier:
info.license_summary_heading Apache License 2.0 Summary
info.license_summary_list <li>You may use, modify, and distribute this software freely.</li> <li>You must include the copyright notice and license in any distribution.</li> <li>The software is provided "AS IS", without warranties.</li> <li>Contributors grant a patent license for their contributions.</li>
info.license_full_text_label Full license text:
info.system_heading System Info
info.system_host_heading Host
info.system_hostname_label Hostname
info.system_os_label OS
info.system_kernel_label Kernel
info.system_cpus_label CPUs
info.system_memory_label Memory
info.system_application_heading Application
info.system_version_label Version
info.system_rust_version_label Rust Version
info.system_listen_address_label Listen Address
info.system_data_directory_label Data Directory
info.system_storage_status_label Storage Status
info.system_documents_stored_label Documents Stored
info.system_csaf_mode_label CSAF Mode
info.system_status_healthy Healthy
info.system_status_degraded Degraded
info.privacy_heading Privacy
info.privacy_data_processing_heading Data Processing
info.privacy_data_processing_text CSAF is designed as a self-hosted application. All data is stored locally on the server where the application is deployed.
info.privacy_data_collected_heading Data Collected
info.privacy_data_collected_list <li><strong>CSAF documents</strong> — stored in the embedded redb database</li> <li><strong>User accounts</strong> — login credentials (hashed) stored in SQLite</li> <li><strong>Audit logs</strong> — timestamps and actions for document operations</li> <li><strong>Session data</strong> — temporary session tokens for authentication</li>
info.privacy_no_external_heading No External Communication
info.privacy_no_external_text The application does not send data to external services, analytics platforms, or third-party APIs. All processing occurs locally.
info.privacy_retention_heading Data Retention
info.privacy_retention_text Data is retained until explicitly deleted by the user or administrator. Audit logs are stored indefinitely for compliance purposes.
info.privacy_gdpr_heading GDPR Compliance
info.privacy_gdpr_text As a self-hosted tool, GDPR compliance responsibility lies with the deploying organisation. The application supports data export and deletion to facilitate compliance.
info.security_heading Security
info.security_transport_heading Transport Security
info.security_transport_list <li>TLS 1.3 enforced via Rustls (no OpenSSL dependency)</li> <li>RSA ciphers excluded; only elliptic-curve cryptography (ECC) used</li> <li>Automatic self-signed certificate generation (45-day validity)</li> <li>HTTP/1.1 + HTTP/2 auto-negotiated via ALPN over TCP</li> <li>HTTP/3 served over QUIC/UDP</li>
info.security_auth_heading Authentication
info.security_auth_list <li>Password hashing using Argon2id (RFC 9106)</li> <li>API key authentication for programmatic access</li> <li>Session-based authentication for the web UI</li>
info.security_integrity_heading Data Integrity
info.security_integrity_list <li>SHA-256 and SHA3-512 sidecar hash files for exported documents</li> <li>CSAF document validation on every create, update, import, and export</li> <li>Audit trail for all document lifecycle operations</li>
info.security_input_heading Input Validation
info.security_input_list <li>All CSAF documents validated against structural and semantic rules</li> <li>CVSS score range validation (0.0 to 10.0)</li> <li>Product ID cross-reference validation</li> <li>HTML output is escaped to prevent XSS</li> <li>RFC 9457 Problem Details for all API errors</li>
info.security_reporting_heading Reporting Vulnerabilities
info.security_reporting_text If you discover a security vulnerability in CSAF, please report it responsibly by contacting the development team at ndaal in Cologne.
info.changelog_heading Changelog
info.readme_heading README
info.administrator_heading Administrator Guide
info.user_heading User Guide
settings.section_general General
settings.csaf_mode_label CSAF Mode *
settings.csaf_mode_help Determines validation rules and the <code>csaf_version</code> written into exported files.
settings.theme_label Theme
settings.theme_help You can also use the toggle in the top navigation bar.
settings.import_directory_label Import Directory
settings.import_directory_help Filesystem path scanned for CSAF JSON files during import.
settings.export_directory_label Export Directory
settings.export_directory_help Filesystem path where exported CSAF files and sidecars are written.
settings.dump_directory_label Dump Directory
settings.dump_directory_help Filesystem path where the database dump files and sidecars are written.
settings.log_directory_label Log Directory
settings.log_directory_help Filesystem path where the application log files and sidecars are written.
settings.naming_convention_label Naming Convention Prefix
settings.naming_convention_help Prefix used for tracking IDs (e.g. <code>ndaal-sa-</code>).
settings.sidecar_hash_files_label Sidecar Hash Files
settings.sidecar_sha256_label Generate SHA-256 hashes sidecars (extension <code>.sha-256</code>)
settings.sidecar_sha512_label Generate SHA-512 hashes sidecars (extension <code>.sha-512</code>)
settings.sidecar_sha3_512_label Generate SHA3-512 hashes sidecars (extension <code>.sha3-512</code>)
settings.sidecar_blake3_512_label Generate BLAKE3-512 hashes sidecars (extension <code>.blake3-512</code>)
settings.sidecar_shake256_512_label Generate SHAKE256-512 hashes sidecars (extension <code>.shake256-512</code>)
settings.section_classification Classification
settings.classification_intro Defaults for the colored TLP 2.0 selector, the German Verschlusssache field, and the NATO classification field. These values prefill the CSAF create form; per-document overrides are still possible.
settings.tlp_default_label TLP 2.0 default *
settings.tlp_default_help Colour-coding per <a href="https://www.first.org/tlp/" target="_blank" rel="noopener">FIRST TLP 2.0</a>.
settings.storage_mode_label Storage mode *
settings.storage_mode_help Where to write Verschlusssache / NATO values in the exported CSAF JSON. <code>both</code> writes to <code>document.distribution.text</code> AND <code>document.notes[]</code> so any consumer can find them.
settings.storage_mode_option_distribution_text Only document.distribution.text
settings.storage_mode_option_notes Only document.notes[]
settings.storage_mode_option_both Both (distribution.text AND notes[])
settings.verschlusssache_enable_label Enable Verschlusssache
settings.verschlusssache_default_label Verschlusssache default
settings.verschlusssache_default_help German national classification per <a href="https://de.wikipedia.org/wiki/Verschlusssache#Einstufung" target="_blank" rel="noopener">§ Verschlusssache</a>.
settings.nato_enable_label Enable NATO
settings.nato_default_label NATO default
settings.nato_default_help NATO classification per <a href="https://de.wikipedia.org/wiki/Geheimhaltungsgrad#NATO" target="_blank" rel="noopener">§ Geheimhaltungsgrad</a>.
settings.section_publisher Publisher Defaults
settings.publisher_intro These values are prefilled into the CSAF create form and inherited by every new document. You can still override them per document at creation time.
settings.publisher_name_label Name *
settings.publisher_namespace_label Namespace *
settings.publisher_category_label Category *
settings.publisher_category_help OASIS CSAF publisher category.
settings.publisher_contact_label Contact details
settings.publisher_contact_help Usually an email address or security contact URL.
settings.save_button Save Settings
settings.reset_button Reset to default settings
settings.reset_help Restores every field on this page to the application defaults.
settings.reset_confirm Reset ALL settings to their default values? This cannot be undone.
settings.err_csaf_mode CSAF mode must be '2.0' or '2.1'.
settings.err_theme Theme must be 'light' or 'dark'.
settings.err_import_directory Import Directory contains invalid or unsafe path characters.
settings.err_export_directory Export Directory contains invalid or unsafe path characters.
settings.err_dump_directory Dump Directory contains invalid or unsafe path characters.
settings.err_log_directory Log Directory contains invalid or unsafe path characters.
settings.err_publisher_name Publisher name must not be empty.
settings.err_publisher_namespace Publisher namespace must not be empty.
settings.err_publisher_category Publisher category must be one of: vendor, discoverer, coordinator, user, translator, other.
settings.err_tlp_default TLP 2.0 default must be one of: CLEAR, GREEN, AMBER, AMBER+STRICT, RED.
settings.err_verschlusssache_default Verschlusssache default must be one of the four official German classification labels.
settings.err_nato_default NATO default must be one of: NR (NATO RESTRICTED), NC (NATO CONFIDENTIAL), NS (NATO SECRET), CTS (COSMIC TOP SECRET).
settings.err_classification_storage_mode Classification storage mode must be 'distribution_text', 'notes', or 'both'.