@blamejs/exceptd-skills 0.19.30 → 0.19.31

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (15) hide show
  1. package/CHANGELOG.md +12 -0
  2. package/data/_indexes/_meta.json +8 -8
  3. package/data/_indexes/activity-feed.json +7 -7
  4. package/data/_indexes/catalog-summaries.json +12 -12
  5. package/data/_indexes/chains.json +65405 -16
  6. package/data/attack-techniques.json +289 -10
  7. package/data/cve-catalog.json +10757 -96
  8. package/data/cwe-catalog.json +114 -3
  9. package/data/framework-control-gaps.json +622 -3
  10. package/data/zeroday-lessons.json +8752 -2
  11. package/lib/collectors/citation-hygiene.js +7 -1
  12. package/lib/validate-package.js +5 -2
  13. package/manifest.json +53 -53
  14. package/package.json +2 -2
  15. package/sbom.cdx.json +29 -29
package/data/cwe-catalog.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "_meta": {
3
3
  "schema_version": "1.0.0",
4
- "last_updated": "2026-08-18",
4
+ "last_updated": "2026-08-19",
5
5
  "cwe_version": "4.20",
6
6
  "cwe_version_release_date": "2026-04-30",
7
7
  "source": "https://cwe.mitre.org",
@@ -48,16 +48,25 @@
48
48
  "fuzz-testing-strategy"
49
49
  ],
50
50
  "evidence_cves": [
51
+ "CVE-2009-0927",
52
+ "CVE-2009-2055",
51
53
  "CVE-2010-2568",
54
+ "CVE-2010-3035",
55
+ "CVE-2011-2005",
52
56
  "CVE-2012-0151",
53
57
  "CVE-2013-3896",
54
58
  "CVE-2013-6282",
55
59
  "CVE-2015-2291",
56
60
  "CVE-2016-0034",
57
61
  "CVE-2016-3714",
62
+ "CVE-2017-0146",
58
63
  "CVE-2017-0148",
59
64
  "CVE-2017-15944",
65
+ "CVE-2017-3881",
66
+ "CVE-2018-0125",
67
+ "CVE-2018-0147",
60
68
  "CVE-2018-19949",
69
+ "CVE-2018-8414",
61
70
  "CVE-2019-11708",
62
71
  "CVE-2019-7193",
63
72
  "CVE-2021-25489",
@@ -126,9 +135,15 @@
126
135
  "webapp-security"
127
136
  ],
128
137
  "evidence_cves": [
138
+ "CVE-2010-2861",
129
139
  "CVE-2013-3993",
140
+ "CVE-2014-0130",
130
141
  "CVE-2014-0780",
131
142
  "CVE-2015-0016",
143
+ "CVE-2015-0666",
144
+ "CVE-2015-3035",
145
+ "CVE-2015-4068",
146
+ "CVE-2016-0752",
132
147
  "CVE-2017-12637",
133
148
  "CVE-2018-18809",
134
149
  "CVE-2018-5430",
@@ -136,13 +151,17 @@
136
151
  "CVE-2019-5418",
137
152
  "CVE-2019-7194",
138
153
  "CVE-2019-7195",
154
+ "CVE-2019-7483",
155
+ "CVE-2020-1631",
139
156
  "CVE-2020-36193",
157
+ "CVE-2020-5410",
140
158
  "CVE-2021-20123",
141
159
  "CVE-2021-20124",
142
160
  "CVE-2021-26086",
143
161
  "CVE-2021-38163",
144
162
  "CVE-2021-41277",
145
163
  "CVE-2021-43798",
164
+ "CVE-2022-21999",
146
165
  "CVE-2022-26352",
147
166
  "CVE-2022-26500",
148
167
  "CVE-2022-27925",
@@ -229,11 +248,14 @@
229
248
  "webapp-security"
230
249
  ],
231
250
  "evidence_cves": [
251
+ "CVE-2005-2773",
232
252
  "CVE-2007-3010",
233
253
  "CVE-2010-5330",
234
254
  "CVE-2011-0411",
255
+ "CVE-2012-1823",
235
256
  "CVE-2014-8361",
236
257
  "CVE-2016-10033",
258
+ "CVE-2016-1555",
237
259
  "CVE-2016-20017",
238
260
  "CVE-2016-6367",
239
261
  "CVE-2018-19949",
@@ -305,24 +327,38 @@
305
327
  ],
306
328
  "evidence_cves": [
307
329
  "CVE-2014-6278",
330
+ "CVE-2016-11021",
308
331
  "CVE-2017-18368",
309
332
  "CVE-2017-3506",
333
+ "CVE-2017-6316",
334
+ "CVE-2017-6334",
310
335
  "CVE-2017-6884",
311
336
  "CVE-2018-10562",
337
+ "CVE-2018-11138",
338
+ "CVE-2018-14839",
312
339
  "CVE-2018-14933",
313
340
  "CVE-2018-19949",
314
341
  "CVE-2018-20753",
315
342
  "CVE-2018-6530",
343
+ "CVE-2018-6961",
316
344
  "CVE-2018-9276",
317
345
  "CVE-2019-11001",
346
+ "CVE-2019-12991",
347
+ "CVE-2019-15107",
318
348
  "CVE-2019-16057",
349
+ "CVE-2019-16920",
319
350
  "CVE-2019-17621",
320
351
  "CVE-2019-20500",
321
352
  "CVE-2019-3929",
322
353
  "CVE-2019-7256",
323
354
  "CVE-2020-12641",
324
355
  "CVE-2020-15415",
356
+ "CVE-2020-1956",
325
357
  "CVE-2020-2509",
358
+ "CVE-2020-25223",
359
+ "CVE-2020-7247",
360
+ "CVE-2020-9054",
361
+ "CVE-2020-9377",
326
362
  "CVE-2021-20035",
327
363
  "CVE-2021-36380",
328
364
  "CVE-2021-40407",
@@ -428,6 +464,7 @@
428
464
  ],
429
465
  "evidence_cves": [
430
466
  "CVE-2012-0767",
467
+ "CVE-2013-5223",
431
468
  "CVE-2014-2120",
432
469
  "CVE-2018-19943",
433
470
  "CVE-2018-19953",
@@ -527,7 +564,9 @@
527
564
  "CVE-2016-2386",
528
565
  "CVE-2017-18362",
529
566
  "CVE-2018-7841",
567
+ "CVE-2019-12989",
530
568
  "CVE-2020-29574",
569
+ "CVE-2021-20028",
531
570
  "CVE-2021-44026",
532
571
  "CVE-2023-34362",
533
572
  "CVE-2023-46748",
@@ -583,13 +622,18 @@
583
622
  "CVE-2009-0238",
584
623
  "CVE-2009-0556",
585
624
  "CVE-2009-0557",
625
+ "CVE-2009-1151",
586
626
  "CVE-2010-3765",
587
627
  "CVE-2010-3962",
588
628
  "CVE-2011-3402",
589
629
  "CVE-2013-3918",
630
+ "CVE-2013-4810",
590
631
  "CVE-2014-4148",
632
+ "CVE-2014-6287",
633
+ "CVE-2015-1427",
591
634
  "CVE-2017-1000353",
592
635
  "CVE-2017-7494",
636
+ "CVE-2018-1273",
593
637
  "CVE-2018-14667",
594
638
  "CVE-2018-7602",
595
639
  "CVE-2021-3129",
@@ -644,6 +688,7 @@
644
688
  "CVE-2025-55182",
645
689
  "CVE-2025-61882",
646
690
  "CVE-2025-6204",
691
+ "CVE-2025-62593",
647
692
  "CVE-2025-62848",
648
693
  "CVE-2025-67038",
649
694
  "CVE-2025-8875",
@@ -841,6 +886,7 @@
841
886
  ],
842
887
  "skills_referencing": [],
843
888
  "evidence_cves": [
889
+ "CVE-2010-4345",
844
890
  "CVE-2024-38813",
845
891
  "CVE-2025-40602"
846
892
  ],
@@ -915,8 +961,12 @@
915
961
  "CVE-2014-2817",
916
962
  "CVE-2014-3153",
917
963
  "CVE-2014-4123",
964
+ "CVE-2016-0151",
918
965
  "CVE-2016-0165",
966
+ "CVE-2018-8440",
967
+ "CVE-2019-1322",
919
968
  "CVE-2019-1388",
969
+ "CVE-2019-1405",
920
970
  "CVE-2019-3010",
921
971
  "CVE-2021-25337",
922
972
  "CVE-2021-34484",
@@ -971,9 +1021,13 @@
971
1021
  "idp-incident-response"
972
1022
  ],
973
1023
  "evidence_cves": [
1024
+ "CVE-2012-5076",
974
1025
  "CVE-2013-0422",
975
1026
  "CVE-2013-2423",
1027
+ "CVE-2014-3120",
976
1028
  "CVE-2016-3427",
1029
+ "CVE-2020-2506",
1030
+ "CVE-2021-22941",
977
1031
  "CVE-2021-27876",
978
1032
  "CVE-2023-23752",
979
1033
  "CVE-2023-24489",
@@ -1036,6 +1090,7 @@
1036
1090
  "webapp-security"
1037
1091
  ],
1038
1092
  "evidence_cves": [
1093
+ "CVE-2015-1187",
1039
1094
  "CVE-2015-7755",
1040
1095
  "CVE-2016-7836",
1041
1096
  "CVE-2017-7921",
@@ -1114,6 +1169,7 @@
1114
1169
  "CVE-2022-21587",
1115
1170
  "CVE-2022-23227",
1116
1171
  "CVE-2022-24990",
1172
+ "CVE-2022-26143",
1117
1173
  "CVE-2022-26501",
1118
1174
  "CVE-2022-26925",
1119
1175
  "CVE-2023-21839",
@@ -1487,7 +1543,8 @@
1487
1543
  "CVE-2014-100005",
1488
1544
  "CVE-2023-2533",
1489
1545
  "CVE-2025-34291",
1490
- "CVE-2025-49596"
1546
+ "CVE-2025-49596",
1547
+ "CVE-2025-62593"
1491
1548
  ],
1492
1549
  "framework_controls_partially_addressing": [
1493
1550
  "NIST-800-53-SC-23",
@@ -1599,6 +1656,7 @@
1599
1656
  "CVE-2010-0806",
1600
1657
  "CVE-2012-4792",
1601
1658
  "CVE-2012-4969",
1659
+ "CVE-2013-2551",
1602
1660
  "CVE-2014-0322",
1603
1661
  "CVE-2014-8439",
1604
1662
  "CVE-2015-0311",
@@ -1607,7 +1665,9 @@
1607
1665
  "CVE-2015-5122",
1608
1666
  "CVE-2015-5123",
1609
1667
  "CVE-2016-0984",
1668
+ "CVE-2016-7892",
1610
1669
  "CVE-2016-9079",
1670
+ "CVE-2017-0059",
1611
1671
  "CVE-2019-13720",
1612
1672
  "CVE-2019-5786",
1613
1673
  "CVE-2019-8526",
@@ -1726,6 +1786,8 @@
1726
1786
  ],
1727
1787
  "evidence_cves": [
1728
1788
  "CVE-2017-11357",
1789
+ "CVE-2017-12615",
1790
+ "CVE-2017-12617",
1729
1791
  "CVE-2018-4063",
1730
1792
  "CVE-2021-26828",
1731
1793
  "CVE-2024-39717",
@@ -1810,11 +1872,14 @@
1810
1872
  "evidence_cves": [
1811
1873
  "CVE-2016-8735",
1812
1874
  "CVE-2017-3066",
1875
+ "CVE-2018-0147",
1813
1876
  "CVE-2018-0824",
1814
1877
  "CVE-2018-15133",
1815
1878
  "CVE-2018-2628",
1816
1879
  "CVE-2019-0344",
1880
+ "CVE-2019-10068",
1817
1881
  "CVE-2019-15271",
1882
+ "CVE-2019-6340",
1818
1883
  "CVE-2019-9874",
1819
1884
  "CVE-2019-9875",
1820
1885
  "CVE-2020-0618",
@@ -1826,6 +1891,7 @@
1826
1891
  "CVE-2021-31010",
1827
1892
  "CVE-2021-31196",
1828
1893
  "CVE-2021-39144",
1894
+ "CVE-2021-42237",
1829
1895
  "CVE-2022-1471",
1830
1896
  "CVE-2022-21445",
1831
1897
  "CVE-2022-31199",
@@ -2168,21 +2234,28 @@
2168
2234
  "CVE-2009-3953",
2169
2235
  "CVE-2010-1297",
2170
2236
  "CVE-2010-2883",
2237
+ "CVE-2010-4344",
2238
+ "CVE-2010-4398",
2171
2239
  "CVE-2011-2462",
2172
2240
  "CVE-2012-0754",
2173
2241
  "CVE-2012-1889",
2242
+ "CVE-2012-2539",
2174
2243
  "CVE-2013-0648",
2175
2244
  "CVE-2013-3163",
2245
+ "CVE-2015-2419",
2176
2246
  "CVE-2015-2425",
2177
2247
  "CVE-2015-2502",
2178
2248
  "CVE-2015-3113",
2249
+ "CVE-2016-0189",
2179
2250
  "CVE-2016-3393",
2180
2251
  "CVE-2016-4656",
2181
2252
  "CVE-2016-4657",
2182
2253
  "CVE-2016-5198",
2254
+ "CVE-2016-7200",
2183
2255
  "CVE-2017-0149",
2184
2256
  "CVE-2018-17480",
2185
2257
  "CVE-2018-5002",
2258
+ "CVE-2019-11043",
2186
2259
  "CVE-2019-3568",
2187
2260
  "CVE-2019-5825",
2188
2261
  "CVE-2019-7286",
@@ -2200,6 +2273,7 @@
2200
2273
  "CVE-2022-22675",
2201
2274
  "CVE-2022-2294",
2202
2275
  "CVE-2022-24521",
2276
+ "CVE-2022-26318",
2203
2277
  "CVE-2022-32893",
2204
2278
  "CVE-2022-32894",
2205
2279
  "CVE-2022-32917",
@@ -2843,10 +2917,13 @@
2843
2917
  "evidence_cves": [
2844
2918
  "BUG-2026-NIGHTMARE-ECLIPSE-UNDEFEND",
2845
2919
  "CVE-2013-0431",
2920
+ "CVE-2013-2465",
2846
2921
  "CVE-2014-0546",
2847
2922
  "CVE-2014-4077",
2848
2923
  "CVE-2015-0071",
2924
+ "CVE-2015-1427",
2849
2925
  "CVE-2019-1003029",
2926
+ "CVE-2019-1003030",
2850
2927
  "CVE-2020-9934",
2851
2928
  "CVE-2023-32049",
2852
2929
  "CVE-2023-36025",
@@ -2880,6 +2957,7 @@
2880
2957
  ],
2881
2958
  "related_weaknesses": [],
2882
2959
  "evidence_cves": [
2960
+ "CVE-2020-5410",
2883
2961
  "CVE-2024-27199",
2884
2962
  "CVE-2025-64446",
2885
2963
  "CVE-2026-34926"
@@ -2920,12 +2998,16 @@
2920
2998
  ],
2921
2999
  "related_weaknesses": [],
2922
3000
  "evidence_cves": [
3001
+ "CVE-2018-8440",
2923
3002
  "CVE-2019-1130",
3003
+ "CVE-2019-1253",
3004
+ "CVE-2019-1315",
2924
3005
  "CVE-2019-1385",
2925
3006
  "CVE-2020-0638",
2926
3007
  "CVE-2020-36193",
2927
3008
  "CVE-2021-34484",
2928
3009
  "CVE-2022-21919",
3010
+ "CVE-2022-21999",
2929
3011
  "CVE-2022-30333",
2930
3012
  "CVE-2023-36874",
2931
3013
  "CVE-2025-21391",
@@ -2993,12 +3075,18 @@
2993
3075
  "related_weaknesses": [],
2994
3076
  "evidence_cves": [
2995
3077
  "CVE-2008-4250",
3078
+ "CVE-2012-2034",
2996
3079
  "CVE-2013-0648",
3080
+ "CVE-2013-1690",
3081
+ "CVE-2013-3660",
2997
3082
  "CVE-2014-3931",
3083
+ "CVE-2014-6332",
2998
3084
  "CVE-2014-8439",
2999
3085
  "CVE-2015-1671",
3000
3086
  "CVE-2015-2360",
3087
+ "CVE-2015-2426",
3001
3088
  "CVE-2015-6175",
3089
+ "CVE-2016-4171",
3002
3090
  "CVE-2016-7256",
3003
3091
  "CVE-2017-0022",
3004
3092
  "CVE-2017-1000253",
@@ -3006,6 +3094,7 @@
3006
3094
  "CVE-2017-6742",
3007
3095
  "CVE-2018-4344",
3008
3096
  "CVE-2018-7445",
3097
+ "CVE-2019-0903",
3009
3098
  "CVE-2019-8720",
3010
3099
  "CVE-2022-22706",
3011
3100
  "CVE-2023-33106",
@@ -3043,10 +3132,14 @@
3043
3132
  "CVE-2007-5659",
3044
3133
  "CVE-2010-2572",
3045
3134
  "CVE-2013-1331",
3135
+ "CVE-2016-10174",
3046
3136
  "CVE-2016-6366",
3047
3137
  "CVE-2017-6862",
3138
+ "CVE-2019-11043",
3048
3139
  "CVE-2020-15069",
3140
+ "CVE-2020-5135",
3049
3141
  "CVE-2021-30983",
3142
+ "CVE-2022-26318",
3050
3143
  "CVE-2022-37055",
3051
3144
  "CVE-2023-33009",
3052
3145
  "CVE-2023-33010",
@@ -3071,6 +3164,7 @@
3071
3164
  ],
3072
3165
  "related_weaknesses": [],
3073
3166
  "evidence_cves": [
3167
+ "CVE-2009-0927",
3074
3168
  "CVE-2013-2597",
3075
3169
  "CVE-2014-9163",
3076
3170
  "CVE-2018-5002",
@@ -3101,6 +3195,7 @@
3101
3195
  "CVE-2011-1823",
3102
3196
  "CVE-2012-5054",
3103
3197
  "CVE-2013-2596",
3198
+ "CVE-2013-2729",
3104
3199
  "CVE-2015-8651",
3105
3200
  "CVE-2016-1010",
3106
3201
  "CVE-2016-3393",
@@ -3271,6 +3366,8 @@
3271
3366
  ],
3272
3367
  "related_weaknesses": [],
3273
3368
  "evidence_cves": [
3369
+ "CVE-2014-6324",
3370
+ "CVE-2020-2021",
3274
3371
  "CVE-2025-59718",
3275
3372
  "CVE-2026-48558"
3276
3373
  ],
@@ -3337,6 +3434,7 @@
3337
3434
  ],
3338
3435
  "related_weaknesses": [],
3339
3436
  "evidence_cves": [
3437
+ "CVE-2019-2616",
3340
3438
  "CVE-2023-45727",
3341
3439
  "CVE-2024-34102",
3342
3440
  "CVE-2025-2775",
@@ -3451,6 +3549,9 @@
3451
3549
  ],
3452
3550
  "related_weaknesses": [],
3453
3551
  "evidence_cves": [
3552
+ "CVE-2016-7201",
3553
+ "CVE-2017-0037",
3554
+ "CVE-2017-0213",
3454
3555
  "CVE-2017-5070",
3455
3556
  "CVE-2017-8291",
3456
3557
  "CVE-2018-17463",
@@ -3575,6 +3676,7 @@
3575
3676
  "related_weaknesses": [],
3576
3677
  "evidence_cves": [
3577
3678
  "CVE-2012-1710",
3679
+ "CVE-2020-1631",
3578
3680
  "CVE-2024-43451",
3579
3681
  "CVE-2025-0111",
3580
3682
  "CVE-2025-24054",
@@ -3597,6 +3699,7 @@
3597
3699
  ],
3598
3700
  "related_weaknesses": [],
3599
3701
  "evidence_cves": [
3702
+ "CVE-2013-2251",
3600
3703
  "CVE-2020-28949",
3601
3704
  "CVE-2021-38371",
3602
3705
  "CVE-2022-27924",
@@ -3660,6 +3763,7 @@
3660
3763
  ],
3661
3764
  "related_weaknesses": [],
3662
3765
  "evidence_cves": [
3766
+ "CVE-2015-2426",
3663
3767
  "CVE-2025-32756"
3664
3768
  ],
3665
3769
  "last_verified": "2026-05-18",
@@ -4303,7 +4407,9 @@
4303
4407
  "CWE-2000"
4304
4408
  ],
4305
4409
  "related_weaknesses": [],
4306
- "evidence_cves": [],
4410
+ "evidence_cves": [
4411
+ "CVE-2012-0518"
4412
+ ],
4307
4413
  "last_verified": "2026-05-19",
4308
4414
  "notes": "Bulk-imported v0.13.18 from the canonical MITRE Top 25 + commonly-referenced-class expansion.",
4309
4415
  "_auto_imported": true,
@@ -4556,6 +4662,7 @@
4556
4662
  ],
4557
4663
  "related_weaknesses": [],
4558
4664
  "evidence_cves": [
4665
+ "CVE-2020-7247",
4559
4666
  "CVE-2022-44698",
4560
4667
  "CVE-2024-29748"
4561
4668
  ],
@@ -4733,6 +4840,7 @@
4733
4840
  "related_weaknesses": [],
4734
4841
  "evidence_cves": [
4735
4842
  "CVE-2011-0609",
4843
+ "CVE-2016-0040",
4736
4844
  "CVE-2024-29745",
4737
4845
  "CVE-2024-50302"
4738
4846
  ],
@@ -5791,6 +5899,8 @@
5791
5899
  "related_attack_patterns_capec": [],
5792
5900
  "skills_referencing": [],
5793
5901
  "evidence_cves": [
5902
+ "CVE-2018-8405",
5903
+ "CVE-2018-8406",
5794
5904
  "CVE-2018-8611",
5795
5905
  "CVE-2018-8639"
5796
5906
  ]
@@ -6777,6 +6887,7 @@
6777
6887
  ],
6778
6888
  "related_attack_patterns_capec": [],
6779
6889
  "evidence_cves": [
6890
+ "CVE-2015-1770",
6780
6891
  "CVE-2022-21971"
6781
6892
  ],
6782
6893
  "framework_controls_partially_addressing": [