🚀 Big News: Socket Acquires Coana to Bring Reachability Analysis to Every Appsec Team.Learn more
Socket
Book a DemoInstallSign in
Socket

cveutils

Package Overview
Dependencies
Maintainers
1
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

cveutils

This library provides functionality for fetching and parsing information about Common Vulnerabilities and Exposures (CVE) using the NIST National Vulnerability Database (NVD) RESTful API.

0.6
PyPI
Maintainers
1

cveutils

logo

PyPI MIT License

This library provides functionality for fetching and parsing information about Common Vulnerabilities and Exposures (CVE) using the NIST National Vulnerability Database (NVD) RESTful API.

Instalation

pip install cveutils

Usage

To use this library, simply import the CVE class and initialize an instance with a CVE ID as a string.


from cveutils import CVE

cve = CVE('CVE-2021-12345')

CVE Object

The CVE object has the following attributes:

  • ID: The CVE ID
  • info: The full JSON response from the NVD API for the given CVE ID
  • description: The description of the CVE
  • cvss_v2: A dictionary containing the CVSSv2 score and related metrics (if available)
  • cvss_v3: A dictionary containing the CVSSv3 score and related metrics (if available)
  • published_date: The published date of the CVE in ISO format (YYYY-MM-DD)
  • last_modified_date: The last modified date of the CVE in ISO format (YYYY-MM-DD)
  • assigner: The organization that assigned the CVE ID
  • references: A list of references related to the CVE

The cvss_v2 and cvss_v3 attributes are instances of the CVSSDictionary class, which allows access to the dictionary keys as attributes.

Example Usage


from cveutils import CVE

cve = CVE('CVE-2021-12345')

print(cve.ID)
print(cve.description)
print(cve.cvss_v3.baseScore)
print(cve.published_date)
print(cve.last_modified_date)
print(cve.assigner)
print(cve.references)

Output:


CVE-2021-12345
Description of the vulnerability
7.8
2021-01-01
2021-02-01
MITRE
['https://example.com/reference1', 'https://example.com/reference2']

FAQs

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts