CVEHunter - Async python wrapper for CVE/CPE data

CVEHunter is a Python asynchronous library designed to simplify the retrieval of CVE (Common Vulnerabilities and Exposures) and CPE (Common Platform Enumeration) information using the NVD API. It streamlines the process of searching for and accessing valuable security data for vulnerability assessment and management.

Installation

pip3 install cvehunter

Example

Code:

import asyncio
from cvehunter import CveHunter

async def test() -> None:
    ch = CveHunter()
    
    cve = await ch.search_by_cve("CVE-2023-41991")
    
    print(cve.cve_id)
    print(cve.cwe_id)
    print(cve.description)
    print(cve.cvss_v3)
    print(cve.references)
    
asyncio.run(test())

Output:

CVE-2023-41991
CWE-295
A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app [...]
{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N', 'severity': 'MEDIUM', 'version': 3.1, 'exploitability': 1.8, 'impact': 3.6}
['http://seclists.org/fulldisclosure/2023/Oct/5', 'https://support.apple.com/en-us/HT213927', 'https://support.apple.com/en-us/HT213931']

Documentation

The documentation is hosted on readthedocs, check it here

TODO

• Change history
• Better filters

Contributing

Contributions are welcome! If you'd like to contribute to CVEHunter, please follow the guidelines outlined in the Contributing Guide.

License

This project is licensed under the MIT License.