mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-06-21 17:41:05 +00:00
244 lines
11 KiB
Markdown
244 lines
11 KiB
Markdown
# nvd-json-data-feeds
|
|
|
|
[](https://github.com/fkie-cad/nvd-json-data-feeds/actions/workflows/monitor_release.yml)
|
|
[](https://github.com/fkie-cad/nvd-json-data-feeds/actions/workflows/monitor_sync.yml)
|
|
[](https://github.com/fkie-cad/nvd-json-data-feeds/actions/workflows/validate_schema.yml)
|
|
|
|
Community reconstruction of the deprecated JSON NVD Data Feeds.
|
|
[Releases](https://github.com/fkie-cad/nvd-json-data-feeds/releases/latest) each day at 00:00 AM UTC.
|
|
Repository synchronizes with the NVD every 2 hours.
|
|
|
|
## Repository at a Glance
|
|
|
|
### Last Repository Update
|
|
|
|
```plain
|
|
2025-04-24T18:00:20.793452+00:00
|
|
```
|
|
|
|
### Most recent CVE Modification Timestamp synchronized with NVD
|
|
|
|
```plain
|
|
2025-04-24T17:39:27.623000+00:00
|
|
```
|
|
|
|
### Last Data Feed Release
|
|
|
|
Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/releases/latest)
|
|
|
|
```plain
|
|
2025-04-24T00:00:10.093071+00:00
|
|
```
|
|
|
|
### Total Number of included CVEs
|
|
|
|
```plain
|
|
291368
|
|
```
|
|
|
|
### CVEs added in the last Commit
|
|
|
|
Recently added CVEs: `110`
|
|
|
|
- [CVE-2025-46511](CVE-2025/CVE-2025-465xx/CVE-2025-46511.json) (`2025-04-24T16:15:42.250`)
|
|
- [CVE-2025-46512](CVE-2025/CVE-2025-465xx/CVE-2025-46512.json) (`2025-04-24T16:15:42.410`)
|
|
- [CVE-2025-46513](CVE-2025/CVE-2025-465xx/CVE-2025-46513.json) (`2025-04-24T16:15:42.543`)
|
|
- [CVE-2025-46514](CVE-2025/CVE-2025-465xx/CVE-2025-46514.json) (`2025-04-24T16:15:42.683`)
|
|
- [CVE-2025-46516](CVE-2025/CVE-2025-465xx/CVE-2025-46516.json) (`2025-04-24T16:15:42.817`)
|
|
- [CVE-2025-46517](CVE-2025/CVE-2025-465xx/CVE-2025-46517.json) (`2025-04-24T16:15:42.953`)
|
|
- [CVE-2025-46519](CVE-2025/CVE-2025-465xx/CVE-2025-46519.json) (`2025-04-24T16:15:43.093`)
|
|
- [CVE-2025-46520](CVE-2025/CVE-2025-465xx/CVE-2025-46520.json) (`2025-04-24T16:15:43.230`)
|
|
- [CVE-2025-46521](CVE-2025/CVE-2025-465xx/CVE-2025-46521.json) (`2025-04-24T16:15:43.363`)
|
|
- [CVE-2025-46522](CVE-2025/CVE-2025-465xx/CVE-2025-46522.json) (`2025-04-24T16:15:43.493`)
|
|
- [CVE-2025-46523](CVE-2025/CVE-2025-465xx/CVE-2025-46523.json) (`2025-04-24T16:15:43.620`)
|
|
- [CVE-2025-46524](CVE-2025/CVE-2025-465xx/CVE-2025-46524.json) (`2025-04-24T16:15:43.750`)
|
|
- [CVE-2025-46525](CVE-2025/CVE-2025-465xx/CVE-2025-46525.json) (`2025-04-24T16:15:43.883`)
|
|
- [CVE-2025-46528](CVE-2025/CVE-2025-465xx/CVE-2025-46528.json) (`2025-04-24T16:15:44.013`)
|
|
- [CVE-2025-46529](CVE-2025/CVE-2025-465xx/CVE-2025-46529.json) (`2025-04-24T16:15:44.153`)
|
|
- [CVE-2025-46530](CVE-2025/CVE-2025-465xx/CVE-2025-46530.json) (`2025-04-24T16:15:44.287`)
|
|
- [CVE-2025-46531](CVE-2025/CVE-2025-465xx/CVE-2025-46531.json) (`2025-04-24T16:15:44.420`)
|
|
- [CVE-2025-46532](CVE-2025/CVE-2025-465xx/CVE-2025-46532.json) (`2025-04-24T16:15:44.557`)
|
|
- [CVE-2025-46533](CVE-2025/CVE-2025-465xx/CVE-2025-46533.json) (`2025-04-24T16:15:44.687`)
|
|
- [CVE-2025-46534](CVE-2025/CVE-2025-465xx/CVE-2025-46534.json) (`2025-04-24T16:15:44.820`)
|
|
- [CVE-2025-46536](CVE-2025/CVE-2025-465xx/CVE-2025-46536.json) (`2025-04-24T16:15:44.957`)
|
|
- [CVE-2025-46538](CVE-2025/CVE-2025-465xx/CVE-2025-46538.json) (`2025-04-24T16:15:45.097`)
|
|
- [CVE-2025-46540](CVE-2025/CVE-2025-465xx/CVE-2025-46540.json) (`2025-04-24T16:15:45.237`)
|
|
- [CVE-2025-46541](CVE-2025/CVE-2025-465xx/CVE-2025-46541.json) (`2025-04-24T16:15:45.370`)
|
|
- [CVE-2025-46542](CVE-2025/CVE-2025-465xx/CVE-2025-46542.json) (`2025-04-24T16:15:45.513`)
|
|
|
|
|
|
### CVEs modified in the last Commit
|
|
|
|
Recently modified CVEs: `63`
|
|
|
|
- [CVE-2024-42455](CVE-2024/CVE-2024-424xx/CVE-2024-42455.json) (`2025-04-24T17:10:10.817`)
|
|
- [CVE-2024-42456](CVE-2024/CVE-2024-424xx/CVE-2024-42456.json) (`2025-04-24T17:09:48.047`)
|
|
- [CVE-2024-42457](CVE-2024/CVE-2024-424xx/CVE-2024-42457.json) (`2025-04-24T17:08:34.490`)
|
|
- [CVE-2024-42699](CVE-2024/CVE-2024-426xx/CVE-2024-42699.json) (`2025-04-24T16:42:20.540`)
|
|
- [CVE-2024-45204](CVE-2024/CVE-2024-452xx/CVE-2024-45204.json) (`2025-04-24T16:59:33.837`)
|
|
- [CVE-2024-54927](CVE-2024/CVE-2024-549xx/CVE-2024-54927.json) (`2025-04-24T16:55:04.363`)
|
|
- [CVE-2024-54928](CVE-2024/CVE-2024-549xx/CVE-2024-54928.json) (`2025-04-24T16:51:52.880`)
|
|
- [CVE-2025-28017](CVE-2025/CVE-2025-280xx/CVE-2025-28017.json) (`2025-04-24T16:15:29.093`)
|
|
- [CVE-2025-28018](CVE-2025/CVE-2025-280xx/CVE-2025-28018.json) (`2025-04-24T16:15:29.253`)
|
|
- [CVE-2025-28019](CVE-2025/CVE-2025-280xx/CVE-2025-28019.json) (`2025-04-24T16:15:29.410`)
|
|
- [CVE-2025-28020](CVE-2025/CVE-2025-280xx/CVE-2025-28020.json) (`2025-04-24T16:15:29.563`)
|
|
- [CVE-2025-28021](CVE-2025/CVE-2025-280xx/CVE-2025-28021.json) (`2025-04-24T16:15:29.720`)
|
|
- [CVE-2025-28022](CVE-2025/CVE-2025-280xx/CVE-2025-28022.json) (`2025-04-24T16:15:29.873`)
|
|
- [CVE-2025-28025](CVE-2025/CVE-2025-280xx/CVE-2025-28025.json) (`2025-04-24T16:15:30.027`)
|
|
- [CVE-2025-28028](CVE-2025/CVE-2025-280xx/CVE-2025-28028.json) (`2025-04-24T16:15:30.197`)
|
|
- [CVE-2025-28121](CVE-2025/CVE-2025-281xx/CVE-2025-28121.json) (`2025-04-24T16:41:54.597`)
|
|
- [CVE-2025-29287](CVE-2025/CVE-2025-292xx/CVE-2025-29287.json) (`2025-04-24T16:37:54.607`)
|
|
- [CVE-2025-29568](CVE-2025/CVE-2025-295xx/CVE-2025-29568.json) (`2025-04-24T16:15:30.347`)
|
|
- [CVE-2025-30289](CVE-2025/CVE-2025-302xx/CVE-2025-30289.json) (`2025-04-24T17:23:25.580`)
|
|
- [CVE-2025-43919](CVE-2025/CVE-2025-439xx/CVE-2025-43919.json) (`2025-04-24T16:22:37.117`)
|
|
- [CVE-2025-43920](CVE-2025/CVE-2025-439xx/CVE-2025-43920.json) (`2025-04-24T16:20:36.953`)
|
|
- [CVE-2025-43921](CVE-2025/CVE-2025-439xx/CVE-2025-43921.json) (`2025-04-24T16:16:59.597`)
|
|
- [CVE-2025-43928](CVE-2025/CVE-2025-439xx/CVE-2025-43928.json) (`2025-04-24T16:00:50.257`)
|
|
- [CVE-2025-44134](CVE-2025/CVE-2025-441xx/CVE-2025-44134.json) (`2025-04-24T16:15:33.490`)
|
|
- [CVE-2025-44135](CVE-2025/CVE-2025-441xx/CVE-2025-44135.json) (`2025-04-24T16:15:33.633`)
|
|
|
|
|
|
## Download and Usage
|
|
|
|
There are several ways you can work with the data in this repository:
|
|
|
|
### 1) Release Data Feed Packages
|
|
|
|
The most straightforward approach is to obtain the latest Data Feed release packages [here](https://github.com/fkie-cad/nvd-json-data-feeds/releases/latest).
|
|
|
|
Each day at 00:00 AM UTC we package and upload JSON files that aim to reconstruct the legacy NVD CVE Data Feeds.
|
|
Those are aggregated by the `year` part of the CVE identifier:
|
|
|
|
```
|
|
# CVE-<YEAR>.json
|
|
CVE-1999.json
|
|
CVE-2001.json
|
|
CVE-2002.json
|
|
CVE-2003.json
|
|
[...]
|
|
CVE-2023.json
|
|
CVE-2024.json
|
|
```
|
|
|
|
We also upload the well-known `Recent` and `Modified` feeds.
|
|
Furthermore, we provide the `All` feed, which contains a recent snapshot of all NVD records.
|
|
Once your local copy is synchronized and the last synchronization is no older than 8 days, you can rely on these to stay up to date:
|
|
|
|
```plain
|
|
CVE-Recent.json # CVEs that were added in the previous eight days
|
|
CVE-Modified.json # CVEs that were modified or added in the previous eight days
|
|
```
|
|
|
|
Note that all feeds are distributed in `xz`-compressed format to save storage and bandwidth.
|
|
For decompression execute:
|
|
|
|
```sh
|
|
xz -d -k <feed>.json.xz
|
|
```
|
|
|
|
#### Automation using Release Data Feed Packages
|
|
|
|
You can fetch the latest releases for each package with the following static link layout:
|
|
|
|
```sh
|
|
https://github.com/fkie-cad/nvd-json-data-feeds/releases/latest/download/CVE-<YEAR>.json.xz
|
|
```
|
|
|
|
Example:
|
|
|
|
```sh
|
|
wget https://github.com/fkie-cad/nvd-json-data-feeds/releases/latest/download/CVE-2024.json.xz
|
|
xz -d -k CVE-2024.json.xz
|
|
```
|
|
|
|
### 2) Clone the Repository (with Git History)
|
|
|
|
As you can see by browsing this repository, there is a slight difference between the release packages format and the repository folder structure.
|
|
This is because we want to maintain explorability of the dataset.
|
|
|
|
Each CVE gets its own JSON file, e.g., `CVE-1999-0001.json`.
|
|
Here, each file is put into a folder layout that first sorts by CVE `year` identifier part and then by `number` part.
|
|
We mask (`xx`) the last two digits to create easily navigable folders that hold a maximum of 100 CVE JSON files:
|
|
|
|
```plain
|
|
.
|
|
├── CVE-1999
|
|
│ ├── CVE-1999-00xx
|
|
│ │ ├── CVE-1999-0001.json
|
|
│ │ ├── CVE-1999-0002.json
|
|
│ │ └── [...]
|
|
│ ├── CVE-1999-01xx
|
|
│ │ ├── CVE-1999-0101.json
|
|
│ │ └── [...]
|
|
│ └── [...]
|
|
├── CVE-2000
|
|
│ ├── CVE-2000-00xx
|
|
│ ├── CVE-2000-01xx
|
|
│ └── [...]
|
|
└── [...]
|
|
```
|
|
|
|
A byproduct of managing and continuously updating this dataset via Git is that we can track changes over time through the Git history.
|
|
|
|
If you are interested in having the NVD data as organized above, including the historical data of changes, just clone this repository (large!):
|
|
|
|
```sh
|
|
git clone https://github.com/fkie-cad/nvd-json-data-feeds.git
|
|
```
|
|
|
|
#### (Optional) Meta Files
|
|
|
|
Similar to the old official feeds, we provide meta files with each release. They can be fetched for each feed via:
|
|
|
|
```sh
|
|
https://github.com/fkie-cad/nvd-json-data-feeds/releases/latest/download/CVE-<YEAR>.meta
|
|
```
|
|
|
|
The structure is as follows:
|
|
|
|
```plain
|
|
lastModifiedDate:1970-01-01T00:00:00.000+00:00 # ISO 8601 timestamp of last CVE modification
|
|
size:1000 # size of uncompressed feed (bytes)
|
|
xzSize:100 # size of lzma-compressed feed (bytes)
|
|
sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 # sha256 hexdigest of uncompressed feed
|
|
```
|
|
|
|
### 3) Clone the Repository (without Git History)
|
|
|
|
Don't need the history? Then create a shallow copy:
|
|
|
|
```sh
|
|
git clone --depth 1 -b main https://github.com/fkie-cad/nvd-json-data-feeds.git
|
|
```
|
|
|
|
|
|
## Update Timetable
|
|
|
|
* NVD Synchronization: `Bi-Hourly`, starting with `00:00:00Z`
|
|
* Release Packages: `Daily`, at `00:00:00Z`
|
|
* NVD Rebuilds: `Weekly`, at `Sun, 02:30:00Z`
|
|
|
|
|
|
## Motivation
|
|
|
|
On 2023-12-15, the NIST deprecated all [JSON-based NVD Data Feeds](https://nvd.nist.gov/vuln/data-feeds#divRetirementBanner-1).
|
|
The new [NVD CVE API 2.0](https://nvd.nist.gov/developers/vulnerabilities) is, without a doubt, a great way to obtain CVE information.
|
|
However, we from [Fraunhofer FKIE - Cyber Analysis and Defense](https://www.fkie.fraunhofer.de/en/departments/cad.html) believe that the API does not cover a variety of use cases.
|
|
|
|
The legacy NVD Data Feeds provided a convenient way to quickly obtain a complete, file-based offline database snapshot; just download the `CVE-<YEAR>.tar.gz`, decompress it, and use it as you please, e.g.:
|
|
|
|
- Put the JSON feed into a document-based database and quickly leverage upon that data in your software project, ...
|
|
- Parse and analyze it using your favorite programming language, ...
|
|
- Put it on a USB stick and transfer it to a system without internet access, or ...
|
|
- Query the file using `jq`!
|
|
|
|
Unfortunately, the new NVD API 2.0 adds complexity to this process.
|
|
We want to preserve ease of use by reconstructing these data sources.
|
|
|
|
## Non-Endorsement Clause
|
|
|
|
This project uses and redistributes data from the NVD API but is not endorsed or certified by the NVD.
|
|
|
|
## Bot Source Code
|
|
|
|
The bot's source code is available at [fkie-cad/nvd\_json\_bot](https://github.com/fkie-cad/nvd_json_bot). |