@blamejs/exceptd-skills 0.18.16 → 0.18.18

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (35) hide show
  1. package/ARCHITECTURE.md +1 -1
  2. package/CHANGELOG.md +32 -0
  3. package/data/_indexes/_meta.json +10 -10
  4. package/data/_indexes/activity-feed.json +3 -3
  5. package/data/_indexes/catalog-summaries.json +3 -3
  6. package/data/_indexes/chains.json +11378 -0
  7. package/data/_indexes/frequency.json +3 -0
  8. package/data/attack-techniques.json +48 -4
  9. package/data/cve-catalog.json +2117 -2
  10. package/data/cwe-catalog.json +105 -1
  11. package/data/framework-control-gaps.json +120 -4
  12. package/data/global-frameworks.json +1 -0
  13. package/data/zeroday-lessons.json +1101 -1
  14. package/lib/auto-discovery.js +10 -3
  15. package/lib/collectors/ai-api.js +10 -0
  16. package/lib/collectors/citation-hygiene.js +46 -4
  17. package/lib/collectors/cred-stores.js +10 -1
  18. package/lib/collectors/mcp.js +7 -1
  19. package/lib/collectors/runtime.js +11 -0
  20. package/lib/collectors/secrets.js +13 -2
  21. package/lib/cross-ref-api.js +56 -2
  22. package/lib/framework-gap.js +22 -1
  23. package/lib/playbook-runner.js +38 -3
  24. package/lib/prefetch.js +61 -15
  25. package/lib/refresh-external.js +16 -2
  26. package/lib/scoring.js +22 -3
  27. package/lib/source-ghsa.js +12 -4
  28. package/lib/source-osv.js +11 -4
  29. package/manifest.json +53 -53
  30. package/package.json +2 -2
  31. package/sbom.cdx.json +65 -65
  32. package/scripts/check-codebase-patterns.js +11 -0
  33. package/scripts/check-test-subjects.js +16 -1
  34. package/scripts/check-version-bump.js +35 -5
  35. package/sources/validators/cve-validator.js +5 -1
package/data/framework-control-gaps.json CHANGED
@@ -340,7 +340,28 @@
340
340
  "real_requirement": "Patch operating systems with KEV-anchored SLA (≤48h for critical with public PoC, live-patching mandatory on hosts that can't accept a reboot within window); kernel patching pipeline distinct from userspace patch pipeline; third-party kernel module patches tracked alongside vendor patches; SLA metric is 'time from KEV listing to deployed', not 'time from advisory publication'.",
341
341
  "status": "open",
342
342
  "opened_date": "2026-05-13",
343
- "evidence_cves": [],
343
+ "evidence_cves": [
344
+ "CVE-2023-44221",
345
+ "CVE-2024-38475",
346
+ "CVE-2024-58136",
347
+ "CVE-2025-1976",
348
+ "CVE-2025-24054",
349
+ "CVE-2025-31200",
350
+ "CVE-2025-31201",
351
+ "CVE-2025-34028",
352
+ "CVE-2025-3928",
353
+ "CVE-2025-42599",
354
+ "CVE-2025-67038",
355
+ "CVE-2026-12569",
356
+ "CVE-2026-20230",
357
+ "CVE-2026-20253",
358
+ "CVE-2026-20262",
359
+ "CVE-2026-34908",
360
+ "CVE-2026-34909",
361
+ "CVE-2026-34910",
362
+ "CVE-2026-48907",
363
+ "CVE-2026-54420"
364
+ ],
344
365
  "atlas_refs": [],
345
366
  "attack_refs": [
346
367
  "T1068"
@@ -1199,7 +1220,9 @@
1199
1220
  "real_requirement": "62443-3-3 must add AI-in-OT requirements: SL2+ environments must prohibit or strictly gate LLM HMI overlays; FR1 must distinguish 'human operator action' from 'AI-mediated action initiated by operator' as separate identity claims; conduits-and-zones diagrams must enumerate AI-API egress as a named conduit subject to FR5 (Restricted Data Flow) and monitored under FR6.",
1200
1221
  "status": "open",
1201
1222
  "opened_date": "2026-05-11",
1202
- "evidence_cves": [],
1223
+ "evidence_cves": [
1224
+ "CVE-2025-67038"
1225
+ ],
1203
1226
  "atlas_refs": [
1204
1227
  "AML.T0051",
1205
1228
  "AML.T0054",
@@ -1483,6 +1506,7 @@
1483
1506
  "CVE-2023-41974",
1484
1507
  "CVE-2023-43000",
1485
1508
  "CVE-2023-43654",
1509
+ "CVE-2023-44221",
1486
1510
  "CVE-2023-44467",
1487
1511
  "CVE-2023-44487",
1488
1512
  "CVE-2023-50224",
@@ -1515,6 +1539,7 @@
1515
1539
  "CVE-2024-27443",
1516
1540
  "CVE-2024-37032",
1517
1541
  "CVE-2024-37079",
1542
+ "CVE-2024-38475",
1518
1543
  "CVE-2024-39722",
1519
1544
  "CVE-2024-42009",
1520
1545
  "CVE-2024-42478",
@@ -1526,6 +1551,7 @@
1526
1551
  "CVE-2024-56145",
1527
1552
  "CVE-2024-57726",
1528
1553
  "CVE-2024-57728",
1554
+ "CVE-2024-58136",
1529
1555
  "CVE-2024-6047",
1530
1556
  "CVE-2024-6587",
1531
1557
  "CVE-2024-7399",
@@ -1545,6 +1571,7 @@
1545
1571
  "CVE-2025-1550",
1546
1572
  "CVE-2025-15556",
1547
1573
  "CVE-2025-1753",
1574
+ "CVE-2025-1976",
1548
1575
  "CVE-2025-20281",
1549
1576
  "CVE-2025-20333",
1550
1577
  "CVE-2025-20337",
@@ -1558,6 +1585,7 @@
1558
1585
  "CVE-2025-22457",
1559
1586
  "CVE-2025-23254",
1560
1587
  "CVE-2025-24016",
1588
+ "CVE-2025-24054",
1561
1589
  "CVE-2025-24201",
1562
1590
  "CVE-2025-24893",
1563
1591
  "CVE-2025-24990",
@@ -1579,6 +1607,8 @@
1579
1607
  "CVE-2025-30400",
1580
1608
  "CVE-2025-31125",
1581
1609
  "CVE-2025-31161",
1610
+ "CVE-2025-31200",
1611
+ "CVE-2025-31201",
1582
1612
  "CVE-2025-31277",
1583
1613
  "CVE-2025-31324",
1584
1614
  "CVE-2025-32432",
@@ -1595,16 +1625,19 @@
1595
1625
  "CVE-2025-33073",
1596
1626
  "CVE-2025-33236",
1597
1627
  "CVE-2025-34026",
1628
+ "CVE-2025-34028",
1598
1629
  "CVE-2025-34291",
1599
1630
  "CVE-2025-35939",
1600
1631
  "CVE-2025-37164",
1601
1632
  "CVE-2025-38352",
1633
+ "CVE-2025-3928",
1602
1634
  "CVE-2025-3935",
1603
1635
  "CVE-2025-4008",
1604
1636
  "CVE-2025-40536",
1605
1637
  "CVE-2025-40551",
1606
1638
  "CVE-2025-40602",
1607
1639
  "CVE-2025-41244",
1640
+ "CVE-2025-42599",
1608
1641
  "CVE-2025-42999",
1609
1642
  "CVE-2025-43200",
1610
1643
  "CVE-2025-43300",
@@ -1675,6 +1708,7 @@
1675
1708
  "CVE-2025-6558",
1676
1709
  "CVE-2025-66376",
1677
1710
  "CVE-2025-66644",
1711
+ "CVE-2025-67038",
1678
1712
  "CVE-2025-67818",
1679
1713
  "CVE-2025-68461",
1680
1714
  "CVE-2025-68613",
@@ -1691,6 +1725,7 @@
1691
1725
  "CVE-2026-0300",
1692
1726
  "CVE-2026-0766",
1693
1727
  "CVE-2026-11645",
1728
+ "CVE-2026-12569",
1694
1729
  "CVE-2026-1281",
1695
1730
  "CVE-2026-1340",
1696
1731
  "CVE-2026-1603",
@@ -1701,6 +1736,9 @@
1701
1736
  "CVE-2026-20128",
1702
1737
  "CVE-2026-20131",
1703
1738
  "CVE-2026-20133",
1739
+ "CVE-2026-20230",
1740
+ "CVE-2026-20253",
1741
+ "CVE-2026-20262",
1704
1742
  "CVE-2026-20700",
1705
1743
  "CVE-2026-20805",
1706
1744
  "CVE-2026-20963",
@@ -1744,6 +1782,9 @@
1744
1782
  "CVE-2026-34159",
1745
1783
  "CVE-2026-34197",
1746
1784
  "CVE-2026-34621",
1785
+ "CVE-2026-34908",
1786
+ "CVE-2026-34909",
1787
+ "CVE-2026-34910",
1747
1788
  "CVE-2026-34926",
1748
1789
  "CVE-2026-3502",
1749
1790
  "CVE-2026-35273",
@@ -1761,8 +1802,10 @@
1761
1802
  "CVE-2026-46333",
1762
1803
  "CVE-2026-48027",
1763
1804
  "CVE-2026-48172",
1805
+ "CVE-2026-48907",
1764
1806
  "CVE-2026-50751",
1765
1807
  "CVE-2026-5281",
1808
+ "CVE-2026-54420",
1766
1809
  "CVE-2026-9082"
1767
1810
  ],
1768
1811
  "atlas_refs": [],
@@ -2377,6 +2420,7 @@
2377
2420
  "opened_date": "2026-05-01",
2378
2421
  "evidence_cves": [
2379
2422
  "CVE-2022-36551",
2423
+ "CVE-2023-44221",
2380
2424
  "CVE-2023-48022",
2381
2425
  "CVE-2023-51449",
2382
2426
  "CVE-2023-6038",
@@ -2391,6 +2435,7 @@
2391
2435
  "CVE-2024-42478",
2392
2436
  "CVE-2024-42479",
2393
2437
  "CVE-2024-6047",
2438
+ "CVE-2025-1976",
2394
2439
  "CVE-2025-23266",
2395
2440
  "CVE-2025-25297",
2396
2441
  "CVE-2025-30202",
@@ -2399,10 +2444,15 @@
2399
2444
  "CVE-2025-56520",
2400
2445
  "CVE-2026-0257",
2401
2446
  "CVE-2026-10520",
2447
+ "CVE-2026-20230",
2448
+ "CVE-2026-20262",
2402
2449
  "CVE-2026-22219",
2403
2450
  "CVE-2026-3059",
2404
2451
  "CVE-2026-3060",
2405
2452
  "CVE-2026-34159",
2453
+ "CVE-2026-34908",
2454
+ "CVE-2026-34909",
2455
+ "CVE-2026-34910",
2406
2456
  "CVE-2026-42897",
2407
2457
  "CVE-2026-50751",
2408
2458
  "CVE-2026-5760",
@@ -2675,6 +2725,7 @@
2675
2725
  "CVE-2023-41974",
2676
2726
  "CVE-2023-43000",
2677
2727
  "CVE-2023-43654",
2728
+ "CVE-2023-44221",
2678
2729
  "CVE-2023-44467",
2679
2730
  "CVE-2023-44487",
2680
2731
  "CVE-2023-50224",
@@ -2711,6 +2762,7 @@
2711
2762
  "CVE-2024-37052",
2712
2763
  "CVE-2024-37060",
2713
2764
  "CVE-2024-37079",
2765
+ "CVE-2024-38475",
2714
2766
  "CVE-2024-39722",
2715
2767
  "CVE-2024-42009",
2716
2768
  "CVE-2024-42478",
@@ -2722,6 +2774,7 @@
2722
2774
  "CVE-2024-56145",
2723
2775
  "CVE-2024-57726",
2724
2776
  "CVE-2024-57728",
2777
+ "CVE-2024-58136",
2725
2778
  "CVE-2024-6047",
2726
2779
  "CVE-2024-6587",
2727
2780
  "CVE-2024-7399",
@@ -2743,6 +2796,7 @@
2743
2796
  "CVE-2025-1550",
2744
2797
  "CVE-2025-15556",
2745
2798
  "CVE-2025-1753",
2799
+ "CVE-2025-1976",
2746
2800
  "CVE-2025-20281",
2747
2801
  "CVE-2025-20333",
2748
2802
  "CVE-2025-20337",
@@ -2757,6 +2811,7 @@
2757
2811
  "CVE-2025-23254",
2758
2812
  "CVE-2025-23266",
2759
2813
  "CVE-2025-24016",
2814
+ "CVE-2025-24054",
2760
2815
  "CVE-2025-24201",
2761
2816
  "CVE-2025-24893",
2762
2817
  "CVE-2025-24990",
@@ -2778,6 +2833,8 @@
2778
2833
  "CVE-2025-30400",
2779
2834
  "CVE-2025-31125",
2780
2835
  "CVE-2025-31161",
2836
+ "CVE-2025-31200",
2837
+ "CVE-2025-31201",
2781
2838
  "CVE-2025-31277",
2782
2839
  "CVE-2025-31324",
2783
2840
  "CVE-2025-32432",
@@ -2794,16 +2851,19 @@
2794
2851
  "CVE-2025-33073",
2795
2852
  "CVE-2025-33236",
2796
2853
  "CVE-2025-34026",
2854
+ "CVE-2025-34028",
2797
2855
  "CVE-2025-34291",
2798
2856
  "CVE-2025-35939",
2799
2857
  "CVE-2025-37164",
2800
2858
  "CVE-2025-38352",
2859
+ "CVE-2025-3928",
2801
2860
  "CVE-2025-3935",
2802
2861
  "CVE-2025-4008",
2803
2862
  "CVE-2025-40536",
2804
2863
  "CVE-2025-40551",
2805
2864
  "CVE-2025-40602",
2806
2865
  "CVE-2025-41244",
2866
+ "CVE-2025-42599",
2807
2867
  "CVE-2025-42999",
2808
2868
  "CVE-2025-43200",
2809
2869
  "CVE-2025-43300",
@@ -2878,6 +2938,7 @@
2878
2938
  "CVE-2025-6558",
2879
2939
  "CVE-2025-66376",
2880
2940
  "CVE-2025-66644",
2941
+ "CVE-2025-67038",
2881
2942
  "CVE-2025-67818",
2882
2943
  "CVE-2025-68461",
2883
2944
  "CVE-2025-68613",
@@ -2894,6 +2955,7 @@
2894
2955
  "CVE-2026-0300",
2895
2956
  "CVE-2026-0766",
2896
2957
  "CVE-2026-11645",
2958
+ "CVE-2026-12569",
2897
2959
  "CVE-2026-1281",
2898
2960
  "CVE-2026-1340",
2899
2961
  "CVE-2026-1603",
@@ -2904,6 +2966,9 @@
2904
2966
  "CVE-2026-20128",
2905
2967
  "CVE-2026-20131",
2906
2968
  "CVE-2026-20133",
2969
+ "CVE-2026-20230",
2970
+ "CVE-2026-20253",
2971
+ "CVE-2026-20262",
2907
2972
  "CVE-2026-20700",
2908
2973
  "CVE-2026-20805",
2909
2974
  "CVE-2026-20963",
@@ -2953,6 +3018,9 @@
2953
3018
  "CVE-2026-34159",
2954
3019
  "CVE-2026-34197",
2955
3020
  "CVE-2026-34621",
3021
+ "CVE-2026-34908",
3022
+ "CVE-2026-34909",
3023
+ "CVE-2026-34910",
2956
3024
  "CVE-2026-34926",
2957
3025
  "CVE-2026-3502",
2958
3026
  "CVE-2026-35273",
@@ -2971,8 +3039,10 @@
2971
3039
  "CVE-2026-45829",
2972
3040
  "CVE-2026-46300",
2973
3041
  "CVE-2026-46333",
3042
+ "CVE-2026-48907",
2974
3043
  "CVE-2026-50751",
2975
3044
  "CVE-2026-5281",
3045
+ "CVE-2026-54420",
2976
3046
  "CVE-2026-6973",
2977
3047
  "CVE-2026-7473",
2978
3048
  "CVE-2026-9082"
@@ -3142,7 +3212,9 @@
3142
3212
  "real_requirement": "800-82r3 must add an AI-in-OT control class: (1) explicit prohibition or strict gating of LLM operator assistants in safety-critical zones, (2) prompt-injection threat-model entries for any natural-language operator interface, (3) treat AI-API egress from OT as a conduit requiring named approval and monitoring (NIS2 essential-entity reportable), (4) cross-walk to IEC 62443-3-3 SR 5.1 (network segmentation) for AI-API traffic.",
3143
3213
  "status": "open",
3144
3214
  "opened_date": "2026-05-11",
3145
- "evidence_cves": [],
3215
+ "evidence_cves": [
3216
+ "CVE-2025-67038"
3217
+ ],
3146
3218
  "atlas_refs": [
3147
3219
  "AML.T0051",
3148
3220
  "AML.T0054",
@@ -5239,13 +5311,25 @@
5239
5311
  "CVE-2023-6571",
5240
5312
  "CVE-2024-12366",
5241
5313
  "CVE-2024-2912",
5314
+ "CVE-2024-38475",
5242
5315
  "CVE-2024-5565",
5316
+ "CVE-2024-58136",
5243
5317
  "CVE-2024-9526",
5318
+ "CVE-2025-24054",
5244
5319
  "CVE-2025-27520",
5320
+ "CVE-2025-31200",
5321
+ "CVE-2025-31201",
5322
+ "CVE-2025-34028",
5245
5323
  "CVE-2025-3466",
5324
+ "CVE-2025-3928",
5325
+ "CVE-2025-42599",
5246
5326
  "CVE-2025-47729",
5247
5327
  "CVE-2026-0300",
5248
- "CVE-2026-42945"
5328
+ "CVE-2026-12569",
5329
+ "CVE-2026-20253",
5330
+ "CVE-2026-42945",
5331
+ "CVE-2026-48907",
5332
+ "CVE-2026-54420"
5249
5333
  ],
5250
5334
  "atlas_refs": [],
5251
5335
  "attack_refs": [
@@ -5710,6 +5794,7 @@
5710
5794
  "CVE-2026-20131",
5711
5795
  "CVE-2026-20133",
5712
5796
  "CVE-2026-20245",
5797
+ "CVE-2026-20253",
5713
5798
  "CVE-2026-20700",
5714
5799
  "CVE-2026-20963",
5715
5800
  "CVE-2026-21509",
@@ -5732,6 +5817,7 @@
5732
5817
  "CVE-2026-33825",
5733
5818
  "CVE-2026-34197",
5734
5819
  "CVE-2026-34621",
5820
+ "CVE-2026-34908",
5735
5821
  "CVE-2026-3502",
5736
5822
  "CVE-2026-35616",
5737
5823
  "CVE-2026-3909",
@@ -5741,6 +5827,8 @@
5741
5827
  "CVE-2026-41950",
5742
5828
  "CVE-2026-42271",
5743
5829
  "CVE-2026-48172",
5830
+ "CVE-2026-48907",
5831
+ "CVE-2026-54420",
5744
5832
  "CVE-2026-6973"
5745
5833
  ],
5746
5834
  "atlas_refs": [],
@@ -5955,6 +6043,7 @@
5955
6043
  "CVE-2022-23812",
5956
6044
  "CVE-2022-36551",
5957
6045
  "CVE-2023-43791",
6046
+ "CVE-2023-44221",
5958
6047
  "CVE-2023-44467",
5959
6048
  "CVE-2023-47117",
5960
6049
  "CVE-2023-51449",
@@ -5984,20 +6073,24 @@
5984
6073
  "CVE-2024-37032",
5985
6074
  "CVE-2024-37052",
5986
6075
  "CVE-2024-37060",
6076
+ "CVE-2024-38475",
5987
6077
  "CVE-2024-39722",
5988
6078
  "CVE-2024-42478",
5989
6079
  "CVE-2024-42479",
5990
6080
  "CVE-2024-50050",
5991
6081
  "CVE-2024-5565",
6082
+ "CVE-2024-58136",
5992
6083
  "CVE-2024-6047",
5993
6084
  "CVE-2024-9526",
5994
6085
  "CVE-2025-0282",
5995
6086
  "CVE-2025-10164",
5996
6087
  "CVE-2025-1550",
5997
6088
  "CVE-2025-1753",
6089
+ "CVE-2025-1976",
5998
6090
  "CVE-2025-22457",
5999
6091
  "CVE-2025-23254",
6000
6092
  "CVE-2025-23266",
6093
+ "CVE-2025-24054",
6001
6094
  "CVE-2025-25297",
6002
6095
  "CVE-2025-27363",
6003
6096
  "CVE-2025-27520",
@@ -6005,13 +6098,18 @@
6005
6098
  "CVE-2025-30202",
6006
6099
  "CVE-2025-30400",
6007
6100
  "CVE-2025-31161",
6101
+ "CVE-2025-31200",
6102
+ "CVE-2025-31201",
6008
6103
  "CVE-2025-31324",
6009
6104
  "CVE-2025-32434",
6010
6105
  "CVE-2025-32444",
6011
6106
  "CVE-2025-3248",
6012
6107
  "CVE-2025-33236",
6108
+ "CVE-2025-34028",
6013
6109
  "CVE-2025-34291",
6014
6110
  "CVE-2025-3466",
6111
+ "CVE-2025-3928",
6112
+ "CVE-2025-42599",
6015
6113
  "CVE-2025-47729",
6016
6114
  "CVE-2025-48595",
6017
6115
  "CVE-2025-49596",
@@ -6020,12 +6118,17 @@
6020
6118
  "CVE-2025-56520",
6021
6119
  "CVE-2025-60455",
6022
6120
  "CVE-2025-64496",
6121
+ "CVE-2025-67038",
6023
6122
  "CVE-2025-67818",
6024
6123
  "CVE-2025-68668",
6025
6124
  "CVE-2025-8747",
6026
6125
  "CVE-2026-0766",
6027
6126
  "CVE-2026-10520",
6028
6127
  "CVE-2026-11645",
6128
+ "CVE-2026-12569",
6129
+ "CVE-2026-20230",
6130
+ "CVE-2026-20253",
6131
+ "CVE-2026-20262",
6029
6132
  "CVE-2026-21858",
6030
6133
  "CVE-2026-21877",
6031
6134
  "CVE-2026-22218",
@@ -6048,6 +6151,9 @@
6048
6151
  "CVE-2026-31230",
6049
6152
  "CVE-2026-33017",
6050
6153
  "CVE-2026-34159",
6154
+ "CVE-2026-34908",
6155
+ "CVE-2026-34909",
6156
+ "CVE-2026-34910",
6051
6157
  "CVE-2026-34926",
6052
6158
  "CVE-2026-35273",
6053
6159
  "CVE-2026-40933",
@@ -6059,6 +6165,8 @@
6059
6165
  "CVE-2026-46300",
6060
6166
  "CVE-2026-46333",
6061
6167
  "CVE-2026-48172",
6168
+ "CVE-2026-48907",
6169
+ "CVE-2026-54420",
6062
6170
  "CVE-2026-5760",
6063
6171
  "CVE-2026-7473",
6064
6172
  "CVE-2026-8398",
@@ -6657,6 +6765,7 @@
6657
6765
  "opened_date": "2026-05-18",
6658
6766
  "evidence_cves": [
6659
6767
  "CVE-2022-36551",
6768
+ "CVE-2023-44221",
6660
6769
  "CVE-2023-44487",
6661
6770
  "CVE-2023-50387",
6662
6771
  "CVE-2023-50868",
@@ -6668,21 +6777,28 @@
6668
6777
  "CVE-2024-31462",
6669
6778
  "CVE-2025-0282",
6670
6779
  "CVE-2025-10164",
6780
+ "CVE-2025-1976",
6671
6781
  "CVE-2025-22457",
6672
6782
  "CVE-2025-25297",
6673
6783
  "CVE-2025-31161",
6674
6784
  "CVE-2025-31324",
6675
6785
  "CVE-2025-51480",
6676
6786
  "CVE-2025-56520",
6787
+ "CVE-2025-67038",
6677
6788
  "CVE-2025-68668",
6678
6789
  "CVE-2026-0257",
6679
6790
  "CVE-2026-20182",
6791
+ "CVE-2026-20230",
6792
+ "CVE-2026-20262",
6680
6793
  "CVE-2026-21858",
6681
6794
  "CVE-2026-21877",
6682
6795
  "CVE-2026-22218",
6683
6796
  "CVE-2026-22219",
6684
6797
  "CVE-2026-3059",
6685
6798
  "CVE-2026-3060",
6799
+ "CVE-2026-34908",
6800
+ "CVE-2026-34909",
6801
+ "CVE-2026-34910",
6686
6802
  "CVE-2026-50751",
6687
6803
  "CVE-2026-5760",
6688
6804
  "CVE-2026-7473"
package/data/global-frameworks.json CHANGED
@@ -256,6 +256,7 @@
256
256
  "frameworks": {
257
257
  "ASD_ISM": {
258
258
  "full_name": "Australian Signals Directorate Information Security Manual",
259
+ "catalog_aliases": ["au-ism", "AU ISM", "ACSC ISM", "Australian Government Information Security Manual"],
259
260
  "authority": "Australian Signals Directorate (ASD)",
260
261
  "source": "https://www.cyber.gov.au/resources-business-and-government/essential-cyber-security/ism",
261
262
  "effective_date": "Monthly updates",