[Request] Vulnerability Information
Can you please provide information on what CVEs are fixed by a security patch and which CVEs are being actively exploited by threat actors. This should be possible with the following APIs and JSON links:
This API shows which CVE are affecting a specific package and version https://osv.dev:
curl -d '{
"package": {
"name": "ghostscript",
"ecosystem": "Debian"
},
"version": "10.05.1~dfsg-1"
}' "https://api.osv.dev/v1/query"
This is a JSON link by Debian showing all patched and unpatched CVE:
https://www.debian.org/security/ - There are more feeds at the bottom of the page
https://security-tracker.debian.org/tracker/data/json
CISA Known exploited vulnerability catalog:
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
General CVE information:
curl "https://cveawg.mitre.org/api/cve/CVE-2021-34527"
debsecan --suite bookworm
debcvescan scan
4 Comments
First of all, I want to congratulate you on the excellent work!
I was going to suggest something exactly related to that to display the CVE in the vulnerability presentation.
We were even discussing this with our colleague Thaynara. | @thaynarasoares
<img width="1600" height="419" alt="Image" src="https://github.com/user-attachments/assets/307daee3-3b47-4db5-be79-4db618d8d00b" />
Just an update on this, I have been doing research and have some progress on it, however it's just getting shelved right now until we nail down some bugs - then I will be very exited to get back on to it.
So i'm just putting it back to "planned" as opposed to in progress
Hi,
This is a feature we have wanted to implement and I thank you for the links - I will see what api endpoints are available and how we can cross reference this into the database to view properly.
I've added this into 1.2.9 release, as personally i'd like to do this as well.
+1