nvd_feed_api 0.7.0 → 0.8.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b16e00391a32655e8df46eb568db1ff9994501f8d7ed939b41ce723ec2d7af0a
-  data.tar.gz: f77cca5f20c3063212622afa8edeff7b624ab6e33e15b507b9e8902a6fdad92a
+  metadata.gz: 0b2135d36e474c39e03f1124211c464e57d7251aea33c3de29610ab2ceb781e1
+  data.tar.gz: d5a520e831cdb7104ac57f0fe676a55bcac2c3eaee3d9f072070fe0405dae992
 SHA512:
-  metadata.gz: 201d74997dd1cf03b1edc8e02b6a8611f1cbcb1354dbe1d69521360a37e983c59030097934e4b8da192cf99f5ec5bd250bf7e592289a2a892731bc1b419a5f68
-  data.tar.gz: 1e8100bc1db0ead32ec36fa3e246a58c3223e8d2ec47fdbe9fe54dff298d0a102ada88e46a0301fe9a34d4815df118353168f9d2f3e47c314416624a417e1e04
+  metadata.gz: cc5673883c2ffcd84e21e88a6ca84d2f518c390bb8622da6408e91051bee01822a37d2e60a9060e6f8289750cef4d165ea9d85d24be238f83ea2ebf87209bace
+  data.tar.gz: b22d6e16a3ec4d6e98b64e91b1eca26ad7f167475edc9a5f9619b3d1782b6a0cfebc0bc9295d1d389f9e7875af68290c71c5f75b58bc0414946099ac4ae659c1

data/.gitlab-ci.yml

@@ -12,9 +12,11 @@ before_script:
   - gem install bundler --no-document # Bundler is not installed with the image
   # install nproc (coreutils) for bundle -j
   # install git for building the gemspec
-  # install make, gcc for building gem native extension (commonmarker)
-  # libc-dev for musl-dev dependency (stdlib.h) needed by gcc
-  - apk --no-cache add coreutils git make gcc libc-dev
+  # install make, gcc (build-base) for building gem native extension (commonmarker)
+  # libc-dev for musl-dev dependency (stdlib.h) needed by gcc (build-base)
+  # yaml-dev to build psych ruby native extension
+  # add gcompat is GNU compatibility for MUSL libc
+  - apk --no-cache add coreutils git build-base yaml-dev
   - bundle config set path 'vendor' # Set dependencies install dir to ./vendor/ruby
   - bundle install -j $(nproc) # Install dependencies into ./vendor/ruby
   - bundle exec rake install # install the gem

data/.rubocop.yml

@@ -1,5 +1,5 @@
 AllCops:
-  TargetRubyVersion: 3.2
+  TargetRubyVersion: 3.3
   NewCops: enable
   SuggestExtensions: false
 

data/.tool-versions

@@ -1 +1 @@
-ruby 4.0.0
+ruby 4.0.9

data/Gemfile

@@ -4,8 +4,8 @@ source 'https://rubygems.org'
 
 gemspec
 
-group :runtime, :cli do
-  gem 'archive-zip', '0.13.0.pre1'
+group :runtime do
+  gem 'archive-zip', '0.13.1'
   gem 'nokogiri', '~> 1.11'
   gem 'oj', '>= 3.7.8', '<4'
 end
@@ -25,12 +25,7 @@ group :development, :lint do
 end
 
 group :development, :docs do
-  # commonmarker 2.6.0 currently not supporting on ruby 4.0
-  # https://github.com/gjtorikian/commonmarker/issues/427
-  gem 'commonmarker', '~> 2.0' # for markdown support in YARD
-  gem 'logger', '< 2.0'
-  # gem 'yard', ['>= 0.9.27', '< 0.10']
-  # yard not supporting recent commonmarker version yet https://github.com/lsegal/yard/issues/1528
-  # yard 0.9.38 not supporting ruby 4.0 yet https://github.com/lsegal/yard/issues/1636
-  gem 'yard', github: 'ParadoxV5/yard', ref: '9e869c940859570b07b81c5eadd6070e76f6291e', branch: 'commonmarker-1.0'
+  gem 'commonmarker', '~> 2.8'
+  gem 'irb' # to supress warning because using @overload from yard https://github.com/lsegal/yard/pull/1643#issuecomment-4322721189
+  gem 'yard', ['>= 0.9.43', '< 0.10']
 end

data/Gemfile.lock

@@ -1,15 +1,7 @@
-GIT
-  remote: https://github.com/ParadoxV5/yard.git
-  revision: 9e869c940859570b07b81c5eadd6070e76f6291e
-  ref: 9e869c940859570b07b81c5eadd6070e76f6291e
-  branch: commonmarker-1.0
-  specs:
-    yard (0.9.36)
-
 PATH
   remote: .
   specs:
-    nvd_feed_api (0.7.0)
+    nvd_feed_api (0.8.0)
       archive-zip (~> 0.11)
       nokogiri (~> 1.11)
       oj (>= 3.7.8, < 4)
@@ -17,73 +9,101 @@ PATH
 GEM
   remote: https://rubygems.org/
   specs:
-    archive-zip (0.13.0.pre1)
-      io-like (~> 0.4.0.pre1)
+    archive-zip (0.13.1)
+      io-like (~> 0.4.0)
     ast (2.4.3)
-    bigdecimal (4.0.1)
-    commonmarker (2.6.0)
-      rb_sys (~> 0.9)
+    bigdecimal (4.1.3)
+    commonmarker (2.10.1-aarch64-linux)
+    commonmarker (2.10.1-aarch64-linux-musl)
+    commonmarker (2.10.1-arm-linux-gnu)
+    commonmarker (2.10.1-arm-linux-musl)
+    commonmarker (2.10.1-arm64-darwin)
+    commonmarker (2.10.1-x86_64-darwin)
+    commonmarker (2.10.1-x86_64-linux)
+    commonmarker (2.10.1-x86_64-linux-musl)
+    drb (2.2.3)
+    erb (6.0.7)
+    io-console (0.9.5)
     io-like (0.4.0)
-    json (2.18.0)
-    language_server-protocol (3.17.0.5)
+    irb (1.18.0)
+      pp (>= 0.6.0)
+      prism (>= 1.3.0)
+      rdoc (>= 4.0.0)
+      reline (>= 0.4.2)
+    json (3.1.0)
+    language_server-protocol (3.17.0.6)
     lint_roller (1.1.0)
     logger (1.7.0)
-    minitest (6.0.1)
+    minitest (6.0.6)
+      drb (~> 2.0)
       prism (~> 1.5)
-    nokogiri (1.19.0-aarch64-linux-gnu)
+    nokogiri (1.19.4-aarch64-linux-gnu)
       racc (~> 1.4)
-    nokogiri (1.19.0-aarch64-linux-musl)
+    nokogiri (1.19.4-aarch64-linux-musl)
       racc (~> 1.4)
-    nokogiri (1.19.0-arm-linux-gnu)
+    nokogiri (1.19.4-arm-linux-gnu)
       racc (~> 1.4)
-    nokogiri (1.19.0-arm-linux-musl)
+    nokogiri (1.19.4-arm-linux-musl)
       racc (~> 1.4)
-    nokogiri (1.19.0-arm64-darwin)
+    nokogiri (1.19.4-arm64-darwin)
       racc (~> 1.4)
-    nokogiri (1.19.0-x86_64-darwin)
+    nokogiri (1.19.4-x86_64-darwin)
       racc (~> 1.4)
-    nokogiri (1.19.0-x86_64-linux-gnu)
+    nokogiri (1.19.4-x86_64-linux-gnu)
       racc (~> 1.4)
-    nokogiri (1.19.0-x86_64-linux-musl)
+    nokogiri (1.19.4-x86_64-linux-musl)
       racc (~> 1.4)
-    oj (3.16.13)
+    oj (3.17.7)
       bigdecimal (>= 3.0)
       ostruct (>= 0.2)
     ostruct (0.6.3)
-    parallel (1.27.0)
-    parser (3.3.10.0)
+    parallel (2.3.0)
+    parser (3.3.13.0)
       ast (~> 2.4.1)
       racc
-    prism (1.7.0)
+    pp (0.6.4)
+      prettyprint
+    prettyprint (0.2.1)
+    prism (1.9.0)
     racc (1.8.1)
     rainbow (3.1.1)
-    rake (13.3.1)
-    rake-compiler-dock (1.10.0)
-    rb_sys (0.9.123)
-      rake-compiler-dock (= 1.10.0)
-    regexp_parser (2.11.3)
-    rubocop (1.82.1)
-      json (~> 2.3)
+    rake (13.4.2)
+    rbs (4.2.0)
+      logger
+      prism (>= 1.6.0)
+      tsort
+    rdoc (8.1.0)
+      erb
+      prism (>= 1.6.0)
+      rbs (>= 4.0.0)
+      tsort
+    regexp_parser (2.13.1)
+    reline (0.7.0)
+      io-console (~> 0.5)
+    rubocop (1.92.2)
+      json (>= 2.3)
       language_server-protocol (~> 3.17.0.2)
       lint_roller (~> 1.1.0)
-      parallel (~> 1.10)
+      parallel (>= 1.10)
       parser (>= 3.3.0.2)
       rainbow (>= 2.2.2, < 4.0)
-      regexp_parser (>= 2.9.3, < 3.0)
-      rubocop-ast (>= 1.48.0, < 2.0)
+      regexp_parser (>= 2.11.3, < 3.0)
+      rubocop-ast (>= 1.49.0, < 2.0)
       ruby-progressbar (~> 1.7)
       unicode-display_width (>= 2.4.0, < 4.0)
-    rubocop-ast (1.49.0)
+    rubocop-ast (1.50.0)
       parser (>= 3.3.7.2)
       prism (~> 1.7)
-    rubocop-minitest (0.38.2)
+    rubocop-minitest (0.41.0)
       lint_roller (~> 1.1)
-      rubocop (>= 1.75.0, < 2.0)
+      rubocop (>= 1.89.0, < 2.0)
       rubocop-ast (>= 1.38.0, < 2.0)
     ruby-progressbar (1.13.0)
-    unicode-display_width (3.2.0)
-      unicode-emoji (~> 4.1)
-    unicode-emoji (4.2.0)
+    tsort (0.2.0)
+    unicode-display_width (3.3.0)
+      unicode-emoji (~> 4.3)
+    unicode-emoji (4.3.0)
+    yard (0.9.45)
 
 PLATFORMS
   aarch64-linux-gnu
@@ -96,10 +116,10 @@ PLATFORMS
   x86_64-linux-musl
 
 DEPENDENCIES
-  archive-zip (= 0.13.0.pre1)
+  archive-zip (= 0.13.1)
   bundler (~> 4.0)
-  commonmarker (~> 2.0)
-  logger (< 2.0)
+  commonmarker (~> 2.8)
+  irb
   minitest (~> 6.0)
   nokogiri (~> 1.11)
   nvd_feed_api!
@@ -107,7 +127,7 @@ DEPENDENCIES
   rake (~> 13.2)
   rubocop (~> 1.71)
   rubocop-minitest (~> 0.36)
-  yard!
+  yard (>= 0.9.43, < 0.10)
 
 BUNDLED WITH
-  4.0.3
+  4.0.23

data/lib/nvd_feed_api/feed.rb

@@ -28,6 +28,7 @@ class NVDFeedScraper
     attr_reader :name
 
     # @return [String] the last update date of the feed information on the NVD website.
+    # @deprecated Is broken since {NVDFeedScraper#scrap} was replaced with {NVDFeedScraper#populate}.
     # @example
     #   '10/19/2017 3:27:02 AM -04:00'
     attr_reader :updated
@@ -53,7 +54,7 @@ class NVDFeedScraper
     #   Note that {#json_pull} also calls {#meta_pull}.
     # @example
     #   s = NVDFeedScraper.new
-    #   s.scrap
+    #   s.populate
     #   f = s.feeds("CVE-2014")
     #   f.meta # => nil
     #   f.meta_pull
@@ -64,7 +65,7 @@ class NVDFeedScraper
     # @note Return nil if not previously loaded by {#json_pull}.
     # @example
     #   s = NVDFeedScraper.new
-    #   s.scrap
+    #   s.populate
     #   f = s.feeds("CVE-2014")
     #   f.json_file # => nil
     #   f.json_pull
@@ -218,7 +219,7 @@ class NVDFeedScraper
     # @see https://csrc.nist.gov/schema/nvd/api/2.0/cve_api_json_2.0.schema
     # @example
     #   s = NVDFeedScraper.new
-    #   s.scrap
+    #   s.populate
     #   f = s.feeds("CVE-2014")
     #   f.json_pull
     #   f.cve("CVE-2014-0002", "cve-2014-0001")
@@ -248,7 +249,7 @@ class NVDFeedScraper
           # Sorting CVE can allow us to parse quicker
           # Upcase to be sure include? works
           cves_to_find = arg_cve[0].map(&:upcase).sort
-          raise 'one of the provided arguments is not a String' unless cves_to_find.all? { |x| x.is_a?(String) }
+          raise 'one of the provided arguments is not a String' unless cves_to_find.all?(String)
           raise 'bad CVE name' unless cves_to_find.all? { |x| /^CVE-[0-9]{4}-[0-9]{4,}$/i.match?(x) }
 
           doc = Oj::Doc.open(File.read(@json_file))

data/lib/nvd_feed_api/meta.rb

@@ -10,7 +10,7 @@ class NVDFeedScraper
   #
   # @example
   #   s = NVDFeedScraper.new
-  #   s.scrap
+  #   s.populate
   #   metaUrl = s.feeds("CVE-2014").meta_url
   #   m = NVDFeedScraper::Meta.new
   #   m.url = metaUrl

data/lib/nvd_feed_api/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module NvdFeedApi
-  VERSION = '0.7.0'
+  VERSION = '0.8.0'
 end

data/lib/nvd_feed_api.rb

@@ -3,7 +3,7 @@
 # @author Alexandre ZANNI <alexandre.zanni@engineer.com>
 
 # Ruby internal
-require 'net/https'
+# require 'net/https'
 # External
 require 'nokogiri'
 # Project internal
@@ -13,7 +13,7 @@ require 'nvd_feed_api/feed'
 # The class that parse NVD website to get information.
 # @example Initialize a NVDFeedScraper object, get the feeds and see them:
 #   scraper = NVDFeedScraper.new
-#   scraper.scrap
+#   # scraper.populate
 #   scraper.available_feeds
 #   scraper.feeds
 #   scraper.feeds("CVE-2007")
@@ -28,26 +28,56 @@ class NVDFeedScraper
   # Initialize the scraper
   def initialize
     @url = URL
-    @feeds = nil
+    @feeds = populate
+  end
+
+  # Populate feeds deterministically without scraping the NVD website.
+  # Replaces {scrap}.
+  # @return [Integer] Number of populated feeds.
+  def populate
+    @feeds = []
+    current_year = Time.now.year
+    names = ['CVE-Modified', 'CVE-Recent'] + (2002..current_year).to_a.reverse.map { |year| "CVE-#{year}" }
+    names.each do |name|
+      file_part = case name
+                  when 'CVE-Modified' then 'modified'
+                  when 'CVE-Recent' then 'recent'
+                  else name.split('-').last
+                  end
+      base_path = "#{BASE}/feeds/json/cve/2.0/nvdcve-2.0-#{file_part}"
+      @feeds.push(Feed.new(name,
+                           nil,
+                           "#{base_path}.meta",
+                           "#{base_path}.json.gz",
+                           "#{base_path}.json.zip"))
+    end
+    return @feeds.size
   end
 
   # Scrap / parse the website to get the feeds and fill the {#feeds} attribute.
   # @note {#scrap} need to be called only once but can be called again to update if the NVD feed page changed.
+  # @deprecated Since upstream use a JS SPA, an headless browser is required which is slow and unreliable. Replaced by {populate}.
   # @return [Integer] Number of scrapped feeds.
   def scrap
-    uri = URI(@url)
-    html = Net::HTTP.get(uri)
+    require 'lightpanda'
+    begin
+      browser = Lightpanda::Browser.new(timeout: 60)
+      browser.go_to(@url, wait: true)
+      html = browser.body
+    ensure
+      browser.quit
+    end
 
     doc = Nokogiri::HTML(html)
     @feeds = []
     tmp_feeds = {}
     doc.css('div[data-testid=nvd-json-2-feed-table] table.xml-feed-table tr[data-testid]').each do |tr|
-      num, type = tr.attr('data-testid')[13..].split('-')
+      num, type = tr.attr('data-testid').split('-')[1..2]
       case type
       when 'meta'
         tmp_feeds[num] = {}
-        tmp_feeds[num][:name] = tr.css('td')[0].text
-        tmp_feeds[num][:updated] = tr.css('td')[1].text
+        tmp_feeds[num][:name] = tr.css('td')[0].text.strip
+        tmp_feeds[num][:updated] = tr.css('td')[1].text.strip
         tmp_feeds[num][:meta] = BASE + tr.css('td')[2].css('> a').attr('href').value
       when 'gz'
         tmp_feeds[num][:gz] = BASE + tr.css('td > a').attr('href').value
@@ -63,7 +93,7 @@ class NVDFeedScraper
     return @feeds.size
   end
 
-  # Return feeds. Can only be called after {#scrap}.
+  # Return feeds. Can only be called after {#populate}.
   # @overload feeds
   #   All the feeds.
   #   @return [Array<Feed>] Attributes of all feeds. It's an array of {Feed} object.
@@ -86,7 +116,7 @@ class NVDFeedScraper
   #   scraper.feeds("CVE-2005", "CVE-2002") # => return CVE-2005 and CVE-2002 feeds
   # @see https://nvd.nist.gov/vuln/data-feeds
   def feeds(*arg_feeds)
-    raise 'call scrap method before using feeds method' if @feeds.nil?
+    raise 'call populate method before using feeds method' if @feeds.nil?
 
     return_value = nil
     if arg_feeds.empty?
@@ -99,7 +129,7 @@ class NVDFeedScraper
         end
         # if nothing found return nil
       when Array
-        raise 'one of the provided arguments is not a String' unless arg_feeds[0].all? { |x| x.is_a?(String) }
+        raise 'one of the provided arguments is not a String' unless arg_feeds[0].all?(String)
 
         # Sorting CVE can allow us to parse quicker
         # Upcase to be sure include? works
@@ -126,12 +156,12 @@ class NVDFeedScraper
     return return_value
   end
 
-  # Return a list with the name of all available feeds. Returned feed names can be use as argument for {#feeds} method. Can only be called after {#scrap}.
+  # Return a list with the name of all available feeds. Returned feed names can be use as argument for {#feeds} method. Can only be called after {#populate}.
   # @return [Array<String>] List with the name of all available feeds.
   # @example
   #   scraper.available_feeds => ["CVE-Modified", "CVE-Recent", "CVE-2025", "[…]", "CVE-2002"]
   def available_feeds
-    raise 'call scrap method before using available_feeds method' if @feeds.nil?
+    raise 'call populate method before using available_feeds method' if @feeds.nil?
 
     @feeds.map(&:name)
   end
@@ -155,7 +185,7 @@ class NVDFeedScraper
   # @see https://csrc.nist.gov/schema/nvd/api/2.0/cve_api_json_2.0.schema
   # @example
   #   s = NVDFeedScraper.new
-  #   s.scrap
+  #   s.populate
   #   s.cve("CVE-2014-0002", "cve-2014-0001")
   def cve(*arg_cve)
     return_value = nil
@@ -185,7 +215,7 @@ class NVDFeedScraper
         f.json_pull
         return_value = f.cve(arg_cve[0])
       when Array
-        raise 'one of the provided arguments is not a String' unless arg_cve[0].all? { |x| x.is_a?(String) }
+        raise 'one of the provided arguments is not a String' unless arg_cve[0].all?(String)
         raise 'bad CVE name' unless arg_cve[0].all? { |x| /^CVE-[0-9]{4}-[0-9]{4,}$/i.match?(x) }
 
         return_value = []
@@ -250,14 +280,14 @@ class NVDFeedScraper
   #   @return [Array<Boolean>] `true` if the feed was updated, `false` if it wasn't.
   # @example
   #   s = NVDFeedScraper.new
-  #   s.scrap
+  #   s.populate
   #   f2015, f2017 = s.feeds("CVE-2015", "CVE-2017")
   #   s.update_feeds(f2015, f2017) # => [false, false]
   def update_feeds(*arg_feed)
     return_value = false
     raise 'no argument provided, 1 or more expected' if arg_feed.empty?
 
-    scrap
+    populate
     if arg_feed.length == 1
       case arg_feed[0]
       when Feed

data/nvd_feed_api.gemspec

@@ -29,7 +29,7 @@ Gem::Specification.new do |s|
     'rubygems_mfa_required' => 'true'
   }
 
-  s.required_ruby_version = ['>= 3.2.0', '< 5.0']
+  s.required_ruby_version = ['>= 3.3.0', '< 5.0']
 
   s.add_dependency('archive-zip', '~> 0.11')
   s.add_dependency('nokogiri', '~> 1.11')

data/pages/CHANGELOG.md

@@ -1,3 +1,17 @@
+# Change log / Release notes
+
+## unreleased
+
+# [0.8.0] - 01 November 2026
+
+- **Breaking change**:
+  - Drop support for Ruby 3.2
+    - Ruby 3.2 is ([EOL](https://www.ruby-lang.org/en/downloads/branches/))
+    - parallel-2.1.0 requires ruby version >= 3.3
+  - Deprecate `NVDFeedScraper.scrap` and replacted it with `NVDFeedScraper.populate` that populate feeds deterministically without scraping the NVD website. It's faster, more reliabled, but we can't have the last update date as a trade off.
+    - `NVDFeedScraper.scrap` because NVD changed from plain HTML page to a JavaScript SPA that need JavaScript evaluation for the HTML DOM to be generated. So now a headless broswer is required, which is slow and very unreliable.
+    - `updated` attribute of `Feed` doesn't work anymore as a result as it was a data scraped from HTML table
+
 # [0.7.0] - 01 January 2026
 
 - Breaking changes:

data/pages/EXAMPLES.md

@@ -7,8 +7,6 @@ For all examples don't forget to add `require 'nvd_feed_api'`.
 ```ruby
 # Initialize the scraper.
 s = NVDFeedScraper.new
-# Scrap the NVD website to get the feeds attributes.
-s.scrap
 # Change the default feed storage location beacause default value is '/tmp/'.
 # '/tmp/' is mounted as tmpFS and is cleaned at every start.
 # This will considerably speed up your performance is you have to reboot.

data/test/test_nvd_feed_api.rb

@@ -7,11 +7,11 @@ require 'date'
 class NVDAPITest < Minitest::Test
   def setup
     @s = NVDFeedScraper.new
-    @s.scrap # needed for feeds method
+    @s.populate # needed for feeds method
   end
 
   def test_scraper_scrap
-    assert_operator(0, :<, @s.scrap, 'scrap method returns nothing')
+    assert_operator(0, :<, @s.populate, 'populate method returns nothing')
   end
 
   def test_scraper_feeds_noarg
@@ -120,9 +120,8 @@ class NVDAPITest < Minitest::Test
     assert_instance_of(String, f.name, "name doesn't return a string")
     refute_empty(f.name, 'name is empty')
     assert_equal(name, f.name, 'The name of the feed was modified')
-    # Test updated
-    assert_instance_of(String, f.updated, "updated doesn't return a string")
-    refute_empty(f.updated, 'updated is empty')
+    # Test updated (before json_pull)
+    assert_nil(f.updated)
     # Test gz_url
     assert_instance_of(String, f.gz_url, "gz_url doesn't return a string")
     refute_empty(f.gz_url, 'gz_url is empty')
@@ -237,7 +236,7 @@ class NVDAPITest < Minitest::Test
 
   def test_feed_update!
     f = @s.feeds('CVE-2006')
-    @s.scrap
+    @s.populate
     f_new = @s.feeds('CVE-2006')
     # Right arg
     # can't use assert_instance_of because there is no boolean class

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: nvd_feed_api
 version: !ruby/object:Gem::Version
-  version: 0.7.0
+  version: 0.8.0
 platform: ruby
 authors:
 - Alexandre ZANNI
@@ -115,7 +115,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 3.2.0
+      version: 3.3.0
   - - "<"
     - !ruby/object:Gem::Version
       version: '5.0'
@@ -125,7 +125,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.3
+rubygems_version: 4.0.20
 specification_version: 4
 summary: API for NVD CVE feeds
 test_files: []