Cvelib

Latest version: v1.3.0

Safety actively analyzes 622940 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 2

1.3.0

Changes:
* Fixed displaying timestamps for older records (66).
* Added auto-completion of sub-commands (73).
* Added support for ADP containers (70):
* A new `publish-adp` command is added that allows publishing of ADP containers into an existing CVE record (this is
only possible if a CVE is in the published state).
* The `show` subcommand now allows displaying a CNA container or all/subset of existing ADP containers (identified by
the org's name that created it).
* ADP containers can only be published and updated, so there is no functionality to remove them.
* CVE state constants were updated to match the case used by CVE Services, e.g. `rejected` -> `REJECTED` (75).
* Fixed displaying CVE ID reservations for records that are missing the `user` attribute (76).
---
Update your existing `cvelib` package with:
bash
pip install --user --upgrade cvelib

or update your container image with:
bash
podman pull quay.io/prodsecdev/cvelib
OR
docker pull quay.io/prodsecdev/cvelib

1.2.1

Changes:
* Improved `CveRecordValidationError` exception error message.
---
Update your existing `cvelib` package with:
bash
pip install --user --upgrade cvelib

or update your container image with:
bash
podman pull quay.io/prodsecdev/cvelib
OR
docker pull quay.io/prodsecdev/cvelib

1.2.0

Changes:
* The `list` and `users` commands have a new `-N/--no-header` option that skips printing a header in the table output. (55).
* The bundled CNA Published JSON schema is used by default when calling `CveRecord.validate()` (57).
* The `jsonschema` required dependency was relaxed to an older version (54).
---
Update your existing `cvelib` package with:
bash
pip install --user --upgrade cvelib

or update your container image with:
bash
podman pull quay.io/prodsecdev/cvelib
OR
docker pull quay.io/prodsecdev/cvelib

1.1.0

Changes:
* The `publish` and `reject` subcommands have a new `-f/--cve-json-file` option that allows submitting CVE records from
a file (18).
* Added CVE v5 JSON schema (5.0.0) validation when publishing a CVE record (39).
* Full CVE v5 records can now be used when publishing a CVE; the CNA container is parsed from the CVE record
automatically (42).
* Automatically add `providerMetadata` from the org used when authenticating against CVE Services if it is missing in
the supplied CVE record (19).
* Added CVE v5 JSON 5.0.0 schemas under `cvelib/schemas` along with a script that extracts container-level sub-schemas.
* `cve show --show-record --raw` now outputs a valid CVE record only (44).
* Dropped support for Python 3.6.
---
Update your existing `cvelib` package with:
bash
pip install --user --upgrade cvelib

or update your container image with:
bash
podman pull quay.io/prodsecdev/cvelib
OR
docker pull quay.io/prodsecdev/cvelib

1.0.0

Changes:
* Added support for CVE Services 2.1:
* New subcommands: `publish`, `reject`, `undo-reject`.
* The `show` subcommand now indluced a `--show-record` option to view a CVE's record.
* Added several new methods in the `CveApi` interface to reflect new CVE Services API endpoints.
* Fixed sorting by the reserved timestamp when using the `list` subcommand.
---
Update your existing `cvelib` package with:
bash
pip install --user --upgrade cvelib

or update your container image with:
bash
podman pull quay.io/prodsecdev/cvelib
OR
docker pull quay.io/prodsecdev/cvelib

0.7.0

* Reverted commit c1f5edeb2cb1a39dfbab1813a3bc68ae4c04661d, which is (for now) incompatible with the currently available version of CVE Services.

Page 1 of 2

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.