Skip to content
This repository has been archived by the owner on Jun 22, 2022. It is now read-only.

Hardcoded Commit of cve-search no longer works. NVD XML retirement. #73

Open
andreaslarfors opened this issue Feb 3, 2020 · 0 comments
Open

Hardcoded Commit of cve-search no longer works. NVD XML retirement. #73

andreaslarfors opened this issue Feb 3, 2020 · 0 comments

Comments

@andreaslarfors
Copy link
Contributor

cve-search-server/Dockerfile contains a hardcoded commit hash for the cve-search project:
ENV BRANCH=4c165eff1af0e4c7bdf103c341203717ae677f64

The population of the cve database fails because NVD have retired the XML feed of CVE records.
https://nvd.nist.gov/General/News/XML-Vulnerability-Feed-Retirement-Phase-3

Version 2.3 of cve-search (Sep 18, 2019) https://github.com/cve-search/cve-search/releases/tag/v2.3 adds support for the new JSON format from NVD.
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@andreaslarfors