@blamejs/exceptd-skills 0.19.29 → 0.19.31

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (16) hide show
  1. package/CHANGELOG.md +24 -0
  2. package/data/_indexes/_meta.json +8 -8
  3. package/data/_indexes/activity-feed.json +14 -14
  4. package/data/_indexes/catalog-summaries.json +12 -12
  5. package/data/_indexes/chains.json +67236 -16
  6. package/data/attack-techniques.json +298 -11
  7. package/data/cve-catalog.json +11109 -96
  8. package/data/cwe-catalog.json +117 -3
  9. package/data/framework-control-gaps.json +639 -3
  10. package/data/zeroday-lessons.json +9015 -2
  11. package/lib/collectors/citation-hygiene.js +7 -1
  12. package/lib/cve-batch.js +38 -0
  13. package/lib/validate-package.js +5 -2
  14. package/manifest.json +53 -53
  15. package/package.json +2 -2
  16. package/sbom.cdx.json +31 -31
package/data/cwe-catalog.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "_meta": {
3
3
  "schema_version": "1.0.0",
4
- "last_updated": "2026-08-17",
4
+ "last_updated": "2026-08-19",
5
5
  "cwe_version": "4.20",
6
6
  "cwe_version_release_date": "2026-04-30",
7
7
  "source": "https://cwe.mitre.org",
@@ -48,16 +48,25 @@
48
48
  "fuzz-testing-strategy"
49
49
  ],
50
50
  "evidence_cves": [
51
+ "CVE-2009-0927",
52
+ "CVE-2009-2055",
51
53
  "CVE-2010-2568",
54
+ "CVE-2010-3035",
55
+ "CVE-2011-2005",
52
56
  "CVE-2012-0151",
53
57
  "CVE-2013-3896",
54
58
  "CVE-2013-6282",
55
59
  "CVE-2015-2291",
56
60
  "CVE-2016-0034",
57
61
  "CVE-2016-3714",
62
+ "CVE-2017-0146",
58
63
  "CVE-2017-0148",
59
64
  "CVE-2017-15944",
65
+ "CVE-2017-3881",
66
+ "CVE-2018-0125",
67
+ "CVE-2018-0147",
60
68
  "CVE-2018-19949",
69
+ "CVE-2018-8414",
61
70
  "CVE-2019-11708",
62
71
  "CVE-2019-7193",
63
72
  "CVE-2021-25489",
@@ -126,9 +135,15 @@
126
135
  "webapp-security"
127
136
  ],
128
137
  "evidence_cves": [
138
+ "CVE-2010-2861",
129
139
  "CVE-2013-3993",
140
+ "CVE-2014-0130",
130
141
  "CVE-2014-0780",
131
142
  "CVE-2015-0016",
143
+ "CVE-2015-0666",
144
+ "CVE-2015-3035",
145
+ "CVE-2015-4068",
146
+ "CVE-2016-0752",
132
147
  "CVE-2017-12637",
133
148
  "CVE-2018-18809",
134
149
  "CVE-2018-5430",
@@ -136,13 +151,17 @@
136
151
  "CVE-2019-5418",
137
152
  "CVE-2019-7194",
138
153
  "CVE-2019-7195",
154
+ "CVE-2019-7483",
155
+ "CVE-2020-1631",
139
156
  "CVE-2020-36193",
157
+ "CVE-2020-5410",
140
158
  "CVE-2021-20123",
141
159
  "CVE-2021-20124",
142
160
  "CVE-2021-26086",
143
161
  "CVE-2021-38163",
144
162
  "CVE-2021-41277",
145
163
  "CVE-2021-43798",
164
+ "CVE-2022-21999",
146
165
  "CVE-2022-26352",
147
166
  "CVE-2022-26500",
148
167
  "CVE-2022-27925",
@@ -229,10 +248,14 @@
229
248
  "webapp-security"
230
249
  ],
231
250
  "evidence_cves": [
251
+ "CVE-2005-2773",
232
252
  "CVE-2007-3010",
253
+ "CVE-2010-5330",
233
254
  "CVE-2011-0411",
255
+ "CVE-2012-1823",
234
256
  "CVE-2014-8361",
235
257
  "CVE-2016-10033",
258
+ "CVE-2016-1555",
236
259
  "CVE-2016-20017",
237
260
  "CVE-2016-6367",
238
261
  "CVE-2018-19949",
@@ -304,24 +327,38 @@
304
327
  ],
305
328
  "evidence_cves": [
306
329
  "CVE-2014-6278",
330
+ "CVE-2016-11021",
307
331
  "CVE-2017-18368",
308
332
  "CVE-2017-3506",
333
+ "CVE-2017-6316",
334
+ "CVE-2017-6334",
309
335
  "CVE-2017-6884",
310
336
  "CVE-2018-10562",
337
+ "CVE-2018-11138",
338
+ "CVE-2018-14839",
311
339
  "CVE-2018-14933",
312
340
  "CVE-2018-19949",
313
341
  "CVE-2018-20753",
314
342
  "CVE-2018-6530",
343
+ "CVE-2018-6961",
315
344
  "CVE-2018-9276",
316
345
  "CVE-2019-11001",
346
+ "CVE-2019-12991",
347
+ "CVE-2019-15107",
317
348
  "CVE-2019-16057",
349
+ "CVE-2019-16920",
318
350
  "CVE-2019-17621",
319
351
  "CVE-2019-20500",
320
352
  "CVE-2019-3929",
321
353
  "CVE-2019-7256",
322
354
  "CVE-2020-12641",
323
355
  "CVE-2020-15415",
356
+ "CVE-2020-1956",
324
357
  "CVE-2020-2509",
358
+ "CVE-2020-25223",
359
+ "CVE-2020-7247",
360
+ "CVE-2020-9054",
361
+ "CVE-2020-9377",
325
362
  "CVE-2021-20035",
326
363
  "CVE-2021-36380",
327
364
  "CVE-2021-40407",
@@ -427,6 +464,7 @@
427
464
  ],
428
465
  "evidence_cves": [
429
466
  "CVE-2012-0767",
467
+ "CVE-2013-5223",
430
468
  "CVE-2014-2120",
431
469
  "CVE-2018-19943",
432
470
  "CVE-2018-19953",
@@ -526,7 +564,9 @@
526
564
  "CVE-2016-2386",
527
565
  "CVE-2017-18362",
528
566
  "CVE-2018-7841",
567
+ "CVE-2019-12989",
529
568
  "CVE-2020-29574",
569
+ "CVE-2021-20028",
530
570
  "CVE-2021-44026",
531
571
  "CVE-2023-34362",
532
572
  "CVE-2023-46748",
@@ -582,13 +622,18 @@
582
622
  "CVE-2009-0238",
583
623
  "CVE-2009-0556",
584
624
  "CVE-2009-0557",
625
+ "CVE-2009-1151",
585
626
  "CVE-2010-3765",
586
627
  "CVE-2010-3962",
587
628
  "CVE-2011-3402",
588
629
  "CVE-2013-3918",
630
+ "CVE-2013-4810",
589
631
  "CVE-2014-4148",
632
+ "CVE-2014-6287",
633
+ "CVE-2015-1427",
590
634
  "CVE-2017-1000353",
591
635
  "CVE-2017-7494",
636
+ "CVE-2018-1273",
592
637
  "CVE-2018-14667",
593
638
  "CVE-2018-7602",
594
639
  "CVE-2021-3129",
@@ -643,6 +688,7 @@
643
688
  "CVE-2025-55182",
644
689
  "CVE-2025-61882",
645
690
  "CVE-2025-6204",
691
+ "CVE-2025-62593",
646
692
  "CVE-2025-62848",
647
693
  "CVE-2025-67038",
648
694
  "CVE-2025-8875",
@@ -730,6 +776,7 @@
730
776
  "CVE-2017-5030",
731
777
  "CVE-2021-25487",
732
778
  "CVE-2021-4034",
779
+ "CVE-2022-22674",
733
780
  "CVE-2023-28204",
734
781
  "CVE-2023-36424",
735
782
  "CVE-2023-42916",
@@ -839,6 +886,7 @@
839
886
  ],
840
887
  "skills_referencing": [],
841
888
  "evidence_cves": [
889
+ "CVE-2010-4345",
842
890
  "CVE-2024-38813",
843
891
  "CVE-2025-40602"
844
892
  ],
@@ -913,8 +961,12 @@
913
961
  "CVE-2014-2817",
914
962
  "CVE-2014-3153",
915
963
  "CVE-2014-4123",
964
+ "CVE-2016-0151",
916
965
  "CVE-2016-0165",
966
+ "CVE-2018-8440",
967
+ "CVE-2019-1322",
917
968
  "CVE-2019-1388",
969
+ "CVE-2019-1405",
918
970
  "CVE-2019-3010",
919
971
  "CVE-2021-25337",
920
972
  "CVE-2021-34484",
@@ -969,9 +1021,13 @@
969
1021
  "idp-incident-response"
970
1022
  ],
971
1023
  "evidence_cves": [
1024
+ "CVE-2012-5076",
972
1025
  "CVE-2013-0422",
973
1026
  "CVE-2013-2423",
1027
+ "CVE-2014-3120",
974
1028
  "CVE-2016-3427",
1029
+ "CVE-2020-2506",
1030
+ "CVE-2021-22941",
975
1031
  "CVE-2021-27876",
976
1032
  "CVE-2023-23752",
977
1033
  "CVE-2023-24489",
@@ -1034,6 +1090,7 @@
1034
1090
  "webapp-security"
1035
1091
  ],
1036
1092
  "evidence_cves": [
1093
+ "CVE-2015-1187",
1037
1094
  "CVE-2015-7755",
1038
1095
  "CVE-2016-7836",
1039
1096
  "CVE-2017-7921",
@@ -1112,6 +1169,7 @@
1112
1169
  "CVE-2022-21587",
1113
1170
  "CVE-2022-23227",
1114
1171
  "CVE-2022-24990",
1172
+ "CVE-2022-26143",
1115
1173
  "CVE-2022-26501",
1116
1174
  "CVE-2022-26925",
1117
1175
  "CVE-2023-21839",
@@ -1485,7 +1543,8 @@
1485
1543
  "CVE-2014-100005",
1486
1544
  "CVE-2023-2533",
1487
1545
  "CVE-2025-34291",
1488
- "CVE-2025-49596"
1546
+ "CVE-2025-49596",
1547
+ "CVE-2025-62593"
1489
1548
  ],
1490
1549
  "framework_controls_partially_addressing": [
1491
1550
  "NIST-800-53-SC-23",
@@ -1597,6 +1656,7 @@
1597
1656
  "CVE-2010-0806",
1598
1657
  "CVE-2012-4792",
1599
1658
  "CVE-2012-4969",
1659
+ "CVE-2013-2551",
1600
1660
  "CVE-2014-0322",
1601
1661
  "CVE-2014-8439",
1602
1662
  "CVE-2015-0311",
@@ -1605,7 +1665,9 @@
1605
1665
  "CVE-2015-5122",
1606
1666
  "CVE-2015-5123",
1607
1667
  "CVE-2016-0984",
1668
+ "CVE-2016-7892",
1608
1669
  "CVE-2016-9079",
1670
+ "CVE-2017-0059",
1609
1671
  "CVE-2019-13720",
1610
1672
  "CVE-2019-5786",
1611
1673
  "CVE-2019-8526",
@@ -1724,6 +1786,8 @@
1724
1786
  ],
1725
1787
  "evidence_cves": [
1726
1788
  "CVE-2017-11357",
1789
+ "CVE-2017-12615",
1790
+ "CVE-2017-12617",
1727
1791
  "CVE-2018-4063",
1728
1792
  "CVE-2021-26828",
1729
1793
  "CVE-2024-39717",
@@ -1808,11 +1872,14 @@
1808
1872
  "evidence_cves": [
1809
1873
  "CVE-2016-8735",
1810
1874
  "CVE-2017-3066",
1875
+ "CVE-2018-0147",
1811
1876
  "CVE-2018-0824",
1812
1877
  "CVE-2018-15133",
1813
1878
  "CVE-2018-2628",
1814
1879
  "CVE-2019-0344",
1880
+ "CVE-2019-10068",
1815
1881
  "CVE-2019-15271",
1882
+ "CVE-2019-6340",
1816
1883
  "CVE-2019-9874",
1817
1884
  "CVE-2019-9875",
1818
1885
  "CVE-2020-0618",
@@ -1824,6 +1891,7 @@
1824
1891
  "CVE-2021-31010",
1825
1892
  "CVE-2021-31196",
1826
1893
  "CVE-2021-39144",
1894
+ "CVE-2021-42237",
1827
1895
  "CVE-2022-1471",
1828
1896
  "CVE-2022-21445",
1829
1897
  "CVE-2022-31199",
@@ -2166,21 +2234,28 @@
2166
2234
  "CVE-2009-3953",
2167
2235
  "CVE-2010-1297",
2168
2236
  "CVE-2010-2883",
2237
+ "CVE-2010-4344",
2238
+ "CVE-2010-4398",
2169
2239
  "CVE-2011-2462",
2170
2240
  "CVE-2012-0754",
2171
2241
  "CVE-2012-1889",
2242
+ "CVE-2012-2539",
2172
2243
  "CVE-2013-0648",
2173
2244
  "CVE-2013-3163",
2245
+ "CVE-2015-2419",
2174
2246
  "CVE-2015-2425",
2175
2247
  "CVE-2015-2502",
2176
2248
  "CVE-2015-3113",
2249
+ "CVE-2016-0189",
2177
2250
  "CVE-2016-3393",
2178
2251
  "CVE-2016-4656",
2179
2252
  "CVE-2016-4657",
2180
2253
  "CVE-2016-5198",
2254
+ "CVE-2016-7200",
2181
2255
  "CVE-2017-0149",
2182
2256
  "CVE-2018-17480",
2183
2257
  "CVE-2018-5002",
2258
+ "CVE-2019-11043",
2184
2259
  "CVE-2019-3568",
2185
2260
  "CVE-2019-5825",
2186
2261
  "CVE-2019-7286",
@@ -2198,6 +2273,7 @@
2198
2273
  "CVE-2022-22675",
2199
2274
  "CVE-2022-2294",
2200
2275
  "CVE-2022-24521",
2276
+ "CVE-2022-26318",
2201
2277
  "CVE-2022-32893",
2202
2278
  "CVE-2022-32894",
2203
2279
  "CVE-2022-32917",
@@ -2841,10 +2917,13 @@
2841
2917
  "evidence_cves": [
2842
2918
  "BUG-2026-NIGHTMARE-ECLIPSE-UNDEFEND",
2843
2919
  "CVE-2013-0431",
2920
+ "CVE-2013-2465",
2844
2921
  "CVE-2014-0546",
2845
2922
  "CVE-2014-4077",
2846
2923
  "CVE-2015-0071",
2924
+ "CVE-2015-1427",
2847
2925
  "CVE-2019-1003029",
2926
+ "CVE-2019-1003030",
2848
2927
  "CVE-2020-9934",
2849
2928
  "CVE-2023-32049",
2850
2929
  "CVE-2023-36025",
@@ -2878,6 +2957,7 @@
2878
2957
  ],
2879
2958
  "related_weaknesses": [],
2880
2959
  "evidence_cves": [
2960
+ "CVE-2020-5410",
2881
2961
  "CVE-2024-27199",
2882
2962
  "CVE-2025-64446",
2883
2963
  "CVE-2026-34926"
@@ -2918,11 +2998,16 @@
2918
2998
  ],
2919
2999
  "related_weaknesses": [],
2920
3000
  "evidence_cves": [
3001
+ "CVE-2018-8440",
2921
3002
  "CVE-2019-1130",
3003
+ "CVE-2019-1253",
3004
+ "CVE-2019-1315",
2922
3005
  "CVE-2019-1385",
2923
3006
  "CVE-2020-0638",
2924
3007
  "CVE-2020-36193",
2925
3008
  "CVE-2021-34484",
3009
+ "CVE-2022-21919",
3010
+ "CVE-2022-21999",
2926
3011
  "CVE-2022-30333",
2927
3012
  "CVE-2023-36874",
2928
3013
  "CVE-2025-21391",
@@ -2990,12 +3075,18 @@
2990
3075
  "related_weaknesses": [],
2991
3076
  "evidence_cves": [
2992
3077
  "CVE-2008-4250",
3078
+ "CVE-2012-2034",
2993
3079
  "CVE-2013-0648",
3080
+ "CVE-2013-1690",
3081
+ "CVE-2013-3660",
2994
3082
  "CVE-2014-3931",
3083
+ "CVE-2014-6332",
2995
3084
  "CVE-2014-8439",
2996
3085
  "CVE-2015-1671",
2997
3086
  "CVE-2015-2360",
3087
+ "CVE-2015-2426",
2998
3088
  "CVE-2015-6175",
3089
+ "CVE-2016-4171",
2999
3090
  "CVE-2016-7256",
3000
3091
  "CVE-2017-0022",
3001
3092
  "CVE-2017-1000253",
@@ -3003,6 +3094,7 @@
3003
3094
  "CVE-2017-6742",
3004
3095
  "CVE-2018-4344",
3005
3096
  "CVE-2018-7445",
3097
+ "CVE-2019-0903",
3006
3098
  "CVE-2019-8720",
3007
3099
  "CVE-2022-22706",
3008
3100
  "CVE-2023-33106",
@@ -3040,10 +3132,14 @@
3040
3132
  "CVE-2007-5659",
3041
3133
  "CVE-2010-2572",
3042
3134
  "CVE-2013-1331",
3135
+ "CVE-2016-10174",
3043
3136
  "CVE-2016-6366",
3044
3137
  "CVE-2017-6862",
3138
+ "CVE-2019-11043",
3045
3139
  "CVE-2020-15069",
3140
+ "CVE-2020-5135",
3046
3141
  "CVE-2021-30983",
3142
+ "CVE-2022-26318",
3047
3143
  "CVE-2022-37055",
3048
3144
  "CVE-2023-33009",
3049
3145
  "CVE-2023-33010",
@@ -3068,6 +3164,7 @@
3068
3164
  ],
3069
3165
  "related_weaknesses": [],
3070
3166
  "evidence_cves": [
3167
+ "CVE-2009-0927",
3071
3168
  "CVE-2013-2597",
3072
3169
  "CVE-2014-9163",
3073
3170
  "CVE-2018-5002",
@@ -3098,6 +3195,7 @@
3098
3195
  "CVE-2011-1823",
3099
3196
  "CVE-2012-5054",
3100
3197
  "CVE-2013-2596",
3198
+ "CVE-2013-2729",
3101
3199
  "CVE-2015-8651",
3102
3200
  "CVE-2016-1010",
3103
3201
  "CVE-2016-3393",
@@ -3268,6 +3366,8 @@
3268
3366
  ],
3269
3367
  "related_weaknesses": [],
3270
3368
  "evidence_cves": [
3369
+ "CVE-2014-6324",
3370
+ "CVE-2020-2021",
3271
3371
  "CVE-2025-59718",
3272
3372
  "CVE-2026-48558"
3273
3373
  ],
@@ -3334,6 +3434,7 @@
3334
3434
  ],
3335
3435
  "related_weaknesses": [],
3336
3436
  "evidence_cves": [
3437
+ "CVE-2019-2616",
3337
3438
  "CVE-2023-45727",
3338
3439
  "CVE-2024-34102",
3339
3440
  "CVE-2025-2775",
@@ -3448,6 +3549,9 @@
3448
3549
  ],
3449
3550
  "related_weaknesses": [],
3450
3551
  "evidence_cves": [
3552
+ "CVE-2016-7201",
3553
+ "CVE-2017-0037",
3554
+ "CVE-2017-0213",
3451
3555
  "CVE-2017-5070",
3452
3556
  "CVE-2017-8291",
3453
3557
  "CVE-2018-17463",
@@ -3572,6 +3676,7 @@
3572
3676
  "related_weaknesses": [],
3573
3677
  "evidence_cves": [
3574
3678
  "CVE-2012-1710",
3679
+ "CVE-2020-1631",
3575
3680
  "CVE-2024-43451",
3576
3681
  "CVE-2025-0111",
3577
3682
  "CVE-2025-24054",
@@ -3594,6 +3699,7 @@
3594
3699
  ],
3595
3700
  "related_weaknesses": [],
3596
3701
  "evidence_cves": [
3702
+ "CVE-2013-2251",
3597
3703
  "CVE-2020-28949",
3598
3704
  "CVE-2021-38371",
3599
3705
  "CVE-2022-27924",
@@ -3657,6 +3763,7 @@
3657
3763
  ],
3658
3764
  "related_weaknesses": [],
3659
3765
  "evidence_cves": [
3766
+ "CVE-2015-2426",
3660
3767
  "CVE-2025-32756"
3661
3768
  ],
3662
3769
  "last_verified": "2026-05-18",
@@ -4300,7 +4407,9 @@
4300
4407
  "CWE-2000"
4301
4408
  ],
4302
4409
  "related_weaknesses": [],
4303
- "evidence_cves": [],
4410
+ "evidence_cves": [
4411
+ "CVE-2012-0518"
4412
+ ],
4304
4413
  "last_verified": "2026-05-19",
4305
4414
  "notes": "Bulk-imported v0.13.18 from the canonical MITRE Top 25 + commonly-referenced-class expansion.",
4306
4415
  "_auto_imported": true,
@@ -4553,6 +4662,7 @@
4553
4662
  ],
4554
4663
  "related_weaknesses": [],
4555
4664
  "evidence_cves": [
4665
+ "CVE-2020-7247",
4556
4666
  "CVE-2022-44698",
4557
4667
  "CVE-2024-29748"
4558
4668
  ],
@@ -4730,6 +4840,7 @@
4730
4840
  "related_weaknesses": [],
4731
4841
  "evidence_cves": [
4732
4842
  "CVE-2011-0609",
4843
+ "CVE-2016-0040",
4733
4844
  "CVE-2024-29745",
4734
4845
  "CVE-2024-50302"
4735
4846
  ],
@@ -5788,6 +5899,8 @@
5788
5899
  "related_attack_patterns_capec": [],
5789
5900
  "skills_referencing": [],
5790
5901
  "evidence_cves": [
5902
+ "CVE-2018-8405",
5903
+ "CVE-2018-8406",
5791
5904
  "CVE-2018-8611",
5792
5905
  "CVE-2018-8639"
5793
5906
  ]
@@ -6774,6 +6887,7 @@
6774
6887
  ],
6775
6888
  "related_attack_patterns_capec": [],
6776
6889
  "evidence_cves": [
6890
+ "CVE-2015-1770",
6777
6891
  "CVE-2022-21971"
6778
6892
  ],
6779
6893
  "framework_controls_partially_addressing": [