vulnsig-py

Render CVSS vulnerability vectors as expressive SVG glyphs. Each glyph encodes all base metrics visually with shape, color, rings, and texture, so vulnerabilities are recognizable at a glance.

Supports CVSS 4.0, 3.1, 3.0, and 2.0.

Visit vulnsig.io to interactively explore CVSS glyph configurations and recent or well-known CVE vector glyphs.

Install

pip install vulnsig

Usage

from vulnsig import render_glyph

svg = render_glyph("CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H")

# override the score (e.g. if you already have it)
svg = render_glyph("CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", score=10.0)

# control rendered size in pixels (default 120)
svg = render_glyph("CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", size=64)

render_glyph returns an SVG string ready to embed in HTML or write to a file.

Examples

CVSS 4.0

Glyph	Name	Vector	Score
	Log4Shell	AV:N AC:L AT:N PR:N UI:N VC:H VI:H VA:H SC:H SI:H SA:H	10.0
	EternalBlue	AV:N AC:L AT:N PR:N UI:N VC:H VI:H VA:H SC:N SI:N SA:N	9.3
	Heartbleed	AV:N AC:L AT:N PR:N UI:N VC:H VI:N VA:N SC:L SI:N SA:N	8.7
	Spectre	AV:L AC:H AT:P PR:L UI:N VC:H VI:N VA:N SC:H SI:N SA:N	5.6
	XSS Stored	AV:N AC:L AT:N PR:L UI:P VC:L VI:L VA:N SC:N SI:N SA:N	5.1
	USB Drop	AV:P AC:L AT:N PR:N UI:N VC:H VI:H VA:H SC:N SI:N SA:N	7.3

CVSS 3.x

Glyph	Name	Vector	Score
	Log4Shell	AV:N AC:L PR:N UI:N S:C C:H I:H A:H	10.0
	XSS Reflected	AV:N AC:L PR:N UI:R S:C C:L I:L A:N	6.1

Visual encoding

Each metric maps to a distinct visual channel:

Requirements

Python 3.10+

What Is New in VulnSig

2.0.0

Support for CVSS 2.0.

1.3.0

Added rendering of Exploit Maturity.

Improved rendering of PR.

1.2.0

Improved glyph rendering over diverse backgrounds.

Extension to the public interface.