cvelib

A library and command line interface for the CVE Project services.

Installation

pip install --user cvelib

Python version 3.6 or greater is required.

CLI Setup and Configuration

Currently, the only supported CVE Project service is the CVE ID Reservation (IDR) service. Each command executed against IDR requires the user to authenticate. You can provide the authentication details with the command (using options -u/--username, -o/--org, and -a/--api-key) or set them in the following environment variables:

export CVE_USER=margo
export CVE_ORG=acme
export CVE_API_KEY=<api_key>

Additionial options that have an accompanying environment variable include:

-e/--environment or CVE_ENVIRONMENT: allows you to configure the deployment environment (that is, the URL at which the service is available) to interface with. Allowed values: prod, dev.
--idr-url or CVE_IDR_URL: allows you to override the URL for the IDR service that would otherwise be determined by the deployment environment you selected. This is useful for local testing to point to an IDR instance running on localhost.
-i/--interactive or CVE_INTERACTIVE: every create/update action against the IDR service will require confirmation before a request is sent.

CLI Usage

Available options and commands can be displayed by running cve --help. The following are examples of some commonly used operations.

Reserve one CVE ID in the current year (you will be prompted to confirm your action):

cve --interactive reserve

Reserve three non-sequential CVE IDs for a specific year:

cve reserve 3 --year 2021 --random

List all rejected CVEs for year 2018:

cve list --year 2018 --state reject

CVE is a trademark of The MITRE Corporation.

Release files for cvelib 0.1.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for cvelib 0.1.0
File	Size	Uploaded
cvelib-0.1.0.tar.gz	6.4 kB	Dec 23, 2020	Details

Built distribution (wheel)

Table of built distributions (wheels) for cvelib 0.1.0
File	Interpreter	ABI	Platform	Reset
cvelib-0.1.0-py3-none-any.whl 7.5 kB Dec 23, 2020	Python 3	none	any	Details

Total release size: 13.9 kB

Release files / cvelib-0.1.0.tar.gz

Download URL	cvelib-0.1.0.tar.gz
Size	6.4 kB
Tags	Source
SHA-256 checksum How to use checksums	`d41b51523e1d3abf28c006c6b1d3f3d0e51dd4684db2aaaa254e88bc217e9c65`
BLAKE2b-256 checksum How to use checksums	`168fdc98575a70171249afd8f2aa7c96d934e83d9c3bc7b848834efc61811547`
Upload date	Dec 23, 2020
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/3.2.0 pkginfo/1.6.1 requests/2.25.1 setuptools/41.6.0 requests-toolbelt/0.9.1 tqdm/4.54.1 CPython/3.9.0`

Release files / cvelib-0.1.0-py3-none-any.whl

Download URL	cvelib-0.1.0-py3-none-any.whl
Size	7.5 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`be03ff98ee481715355ae11002c1206d8e192fa829955dd3a9fc16933168c16f`
BLAKE2b-256 checksum How to use checksums	`0af55f2a5ed8e2a1833b9f36c51c9daebfb8656735bdf171f992567bb288c508`
Upload date	Dec 23, 2020
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/3.2.0 pkginfo/1.6.1 requests/2.25.1 setuptools/41.6.0 requests-toolbelt/0.9.1 tqdm/4.54.1 CPython/3.9.0`