AppThreat's vulnerability database and package search library with a built-in file based storage. OSV, CVE, GitHub, npm are the primary sources of vulnerabilities.
Project description
Introduction
This repo is a vulnerability database and package search for sources such as OSV, NVD, GitHub, and NPM. Vulnerability data are downloaded from the sources and stored in a custom file based storage with indexes to allow offline access and quick searches.
Installation
pip install appthreat-vulnerability-db
Usage
This package is ideal as a library for managing vulnerabilities. This is used by dep-scan, a free open-source dependency audit tool. However, there is a limited cli capability available with few features to test this tool directly.
Cache vulnerability data
Cache from all sources
vdb --cache
Cache from just OSV
vdb --cache --only-osv
It is possible to customise the cache behaviour by increasing the historic data period to cache by setting the following environment variables.
- NVD_START_YEAR - Default: 2016. Supports upto 2002
- GITHUB_PAGE_COUNT - Default: 5. Supports upto 20
Periodic sync
To periodically sync the latest vulnerabilities and update the database cache.
vdb --sync
Basic search
It is possible to perform simple search using the cli.
vdb --search android:8.0
vdb --search google:android:8.0
vdb --search android:8.0,simplesamlphp:1.14.11
Syntax is package:version,package:version or vendor : package : version (Without space)
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for appthreat-vulnerability-db-2.1.0.tar.gz
Algorithm | Hash digest | |
---|---|---|
SHA256 | 8d34ee0c7eb7349bd65a2a70e59ee4fff10a230bd4766c7dc272c43737cdd3f4 |
|
MD5 | b99e47d8c3828b63dc2ceefb94f52c70 |
|
BLAKE2b-256 | fc01f63a7ef189f04b58439dbd750c3c000e4cccfd074b84a5bc6c6a710627e9 |
Hashes for appthreat_vulnerability_db-2.1.0-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | b9ebd979ce07afce6d8eae9700cb0deeaa16031c2aed12fcdb1854c477797ef1 |
|
MD5 | 5e671600a9853b70b51812e98a7926d5 |
|
BLAKE2b-256 | 207c9579d51b2c12d56ad046388b310d1c6c5175e2d6d1cb7744b7a87c1e32a4 |