@blamejs/exceptd-skills 0.19.31 → 0.19.33

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (24) hide show
  1. package/ARCHITECTURE.md +32 -23
  2. package/CHANGELOG.md +28 -0
  3. package/CONTEXT.md +19 -11
  4. package/README.md +99 -18
  5. package/SECURITY.md +65 -45
  6. package/data/_indexes/_meta.json +9 -9
  7. package/data/_indexes/activity-feed.json +8 -8
  8. package/data/_indexes/catalog-summaries.json +8 -8
  9. package/data/_indexes/chains.json +60118 -0
  10. package/data/attack-techniques.json +267 -7
  11. package/data/cve-catalog.json +11117 -446
  12. package/data/cwe-catalog.json +109 -2
  13. package/data/framework-control-gaps.json +578 -3
  14. package/data/zeroday-lessons.json +8331 -2
  15. package/lib/cve-batch.js +27 -57
  16. package/lib/cve-curation.js +26 -1
  17. package/lib/cve-enrich.js +18 -43
  18. package/lib/refresh-external.js +100 -1
  19. package/lib/scoring.js +158 -372
  20. package/lib/validate-cve-catalog.js +11 -0
  21. package/manifest.json +53 -53
  22. package/package.json +2 -2
  23. package/sbom.cdx.json +47 -47
  24. package/sources/validators/cve-validator.js +40 -15
package/data/cwe-catalog.json CHANGED
@@ -55,19 +55,38 @@
55
55
  "CVE-2011-2005",
56
56
  "CVE-2012-0151",
57
57
  "CVE-2013-3896",
58
+ "CVE-2013-5065",
58
59
  "CVE-2013-6282",
60
+ "CVE-2014-4114",
59
61
  "CVE-2015-2291",
62
+ "CVE-2015-2545",
60
63
  "CVE-2016-0034",
61
64
  "CVE-2016-3714",
65
+ "CVE-2016-7262",
66
+ "CVE-2016-8562",
62
67
  "CVE-2017-0146",
63
68
  "CVE-2017-0148",
69
+ "CVE-2017-12231",
70
+ "CVE-2017-12232",
71
+ "CVE-2017-12233",
72
+ "CVE-2017-12234",
73
+ "CVE-2017-12235",
74
+ "CVE-2017-12240",
75
+ "CVE-2017-12319",
64
76
  "CVE-2017-15944",
65
77
  "CVE-2017-3881",
66
78
  "CVE-2018-0125",
67
79
  "CVE-2018-0147",
80
+ "CVE-2018-0156",
81
+ "CVE-2018-0158",
82
+ "CVE-2018-0159",
83
+ "CVE-2018-0172",
84
+ "CVE-2018-0173",
85
+ "CVE-2018-0174",
68
86
  "CVE-2018-19949",
69
87
  "CVE-2018-8414",
70
88
  "CVE-2019-11708",
89
+ "CVE-2019-1652",
71
90
  "CVE-2019-7193",
72
91
  "CVE-2021-25489",
73
92
  "CVE-2021-38646",
@@ -136,6 +155,7 @@
136
155
  ],
137
156
  "evidence_cves": [
138
157
  "CVE-2010-2861",
158
+ "CVE-2013-0629",
139
159
  "CVE-2013-3993",
140
160
  "CVE-2014-0130",
141
161
  "CVE-2014-0780",
@@ -330,6 +350,7 @@
330
350
  "CVE-2016-11021",
331
351
  "CVE-2017-18368",
332
352
  "CVE-2017-3506",
353
+ "CVE-2017-6077",
333
354
  "CVE-2017-6316",
334
355
  "CVE-2017-6334",
335
356
  "CVE-2017-6884",
@@ -346,6 +367,7 @@
346
367
  "CVE-2019-12991",
347
368
  "CVE-2019-15107",
348
369
  "CVE-2019-16057",
370
+ "CVE-2019-1652",
349
371
  "CVE-2019-16920",
350
372
  "CVE-2019-17621",
351
373
  "CVE-2019-20500",
@@ -363,6 +385,7 @@
363
385
  "CVE-2021-36380",
364
386
  "CVE-2021-40407",
365
387
  "CVE-2021-45382",
388
+ "CVE-2022-20708",
366
389
  "CVE-2022-26258",
367
390
  "CVE-2022-28810",
368
391
  "CVE-2022-29303",
@@ -429,7 +452,8 @@
429
452
  "CVE-2026-39808",
430
453
  "CVE-2026-39987",
431
454
  "CVE-2026-40933",
432
- "CVE-2026-42271"
455
+ "CVE-2026-42271",
456
+ "CVE-2026-73570"
433
457
  ],
434
458
  "framework_controls_partially_addressing": [
435
459
  "NIST-800-53-SI-10",
@@ -636,6 +660,7 @@
636
660
  "CVE-2018-1273",
637
661
  "CVE-2018-14667",
638
662
  "CVE-2018-7602",
663
+ "CVE-2020-8218",
639
664
  "CVE-2021-3129",
640
665
  "CVE-2021-39144",
641
666
  "CVE-2021-44529",
@@ -774,6 +799,7 @@
774
799
  "CVE-2016-4523",
775
800
  "CVE-2016-4655",
776
801
  "CVE-2017-5030",
802
+ "CVE-2020-11899",
777
803
  "CVE-2021-25487",
778
804
  "CVE-2021-4034",
779
805
  "CVE-2022-22674",
@@ -829,6 +855,7 @@
829
855
  ],
830
856
  "evidence_cves": [
831
857
  "CVE-2008-0655",
858
+ "CVE-2013-0631",
832
859
  "CVE-2015-0310",
833
860
  "CVE-2015-5317",
834
861
  "CVE-2016-0162",
@@ -961,13 +988,17 @@
961
988
  "CVE-2014-2817",
962
989
  "CVE-2014-3153",
963
990
  "CVE-2014-4123",
991
+ "CVE-2015-1701",
964
992
  "CVE-2016-0151",
965
993
  "CVE-2016-0165",
994
+ "CVE-2017-0001",
966
995
  "CVE-2018-8440",
996
+ "CVE-2018-8581",
967
997
  "CVE-2019-1322",
968
998
  "CVE-2019-1388",
969
999
  "CVE-2019-1405",
970
1000
  "CVE-2019-3010",
1001
+ "CVE-2020-1938",
971
1002
  "CVE-2021-25337",
972
1003
  "CVE-2021-34484",
973
1004
  "CVE-2021-40450",
@@ -1025,6 +1056,7 @@
1025
1056
  "CVE-2013-0422",
1026
1057
  "CVE-2013-2423",
1027
1058
  "CVE-2014-3120",
1059
+ "CVE-2015-4902",
1028
1060
  "CVE-2016-3427",
1029
1061
  "CVE-2020-2506",
1030
1062
  "CVE-2021-22941",
@@ -1090,11 +1122,13 @@
1090
1122
  "webapp-security"
1091
1123
  ],
1092
1124
  "evidence_cves": [
1125
+ "CVE-2013-0625",
1093
1126
  "CVE-2015-1187",
1094
1127
  "CVE-2015-7755",
1095
1128
  "CVE-2016-7836",
1096
1129
  "CVE-2017-7921",
1097
1130
  "CVE-2018-10561",
1131
+ "CVE-2019-0543",
1098
1132
  "CVE-2019-19006",
1099
1133
  "CVE-2020-10148",
1100
1134
  "CVE-2021-27877",
@@ -1541,6 +1575,7 @@
1541
1575
  "evidence_cves": [
1542
1576
  "CVE-2008-4128",
1543
1577
  "CVE-2014-100005",
1578
+ "CVE-2016-6277",
1544
1579
  "CVE-2023-2533",
1545
1580
  "CVE-2025-34291",
1546
1581
  "CVE-2025-49596",
@@ -1610,6 +1645,7 @@
1610
1645
  ],
1611
1646
  "evidence_cves": [
1612
1647
  "CVE-2014-0196",
1648
+ "CVE-2016-5195",
1613
1649
  "CVE-2018-8589",
1614
1650
  "CVE-2020-17103-REREGRESSION-2026",
1615
1651
  "CVE-2021-0920",
@@ -1658,16 +1694,20 @@
1658
1694
  "CVE-2012-4969",
1659
1695
  "CVE-2013-2551",
1660
1696
  "CVE-2014-0322",
1697
+ "CVE-2014-0496",
1661
1698
  "CVE-2014-8439",
1662
1699
  "CVE-2015-0311",
1663
1700
  "CVE-2015-0313",
1664
1701
  "CVE-2015-2360",
1702
+ "CVE-2015-5119",
1665
1703
  "CVE-2015-5122",
1666
1704
  "CVE-2015-5123",
1667
1705
  "CVE-2016-0984",
1706
+ "CVE-2016-7855",
1668
1707
  "CVE-2016-7892",
1669
1708
  "CVE-2016-9079",
1670
1709
  "CVE-2017-0059",
1710
+ "CVE-2017-0261",
1671
1711
  "CVE-2019-13720",
1672
1712
  "CVE-2019-5786",
1673
1713
  "CVE-2019-8526",
@@ -1682,6 +1722,8 @@
1682
1722
  "CVE-2021-34486",
1683
1723
  "CVE-2022-22071",
1684
1724
  "CVE-2022-2586",
1725
+ "CVE-2022-26485",
1726
+ "CVE-2022-26486",
1685
1727
  "CVE-2022-3038",
1686
1728
  "CVE-2022-38181",
1687
1729
  "CVE-2023-0266",
@@ -1870,6 +1912,7 @@
1870
1912
  "webapp-security"
1871
1913
  ],
1872
1914
  "evidence_cves": [
1915
+ "CVE-2015-2590",
1873
1916
  "CVE-2016-8735",
1874
1917
  "CVE-2017-3066",
1875
1918
  "CVE-2018-0147",
@@ -2242,20 +2285,29 @@
2242
2285
  "CVE-2012-2539",
2243
2286
  "CVE-2013-0648",
2244
2287
  "CVE-2013-3163",
2288
+ "CVE-2015-1642",
2289
+ "CVE-2015-2387",
2245
2290
  "CVE-2015-2419",
2291
+ "CVE-2015-2424",
2246
2292
  "CVE-2015-2425",
2247
2293
  "CVE-2015-2502",
2294
+ "CVE-2015-3043",
2248
2295
  "CVE-2015-3113",
2249
2296
  "CVE-2016-0189",
2297
+ "CVE-2016-3309",
2250
2298
  "CVE-2016-3393",
2251
2299
  "CVE-2016-4656",
2252
2300
  "CVE-2016-4657",
2253
2301
  "CVE-2016-5198",
2254
2302
  "CVE-2016-7200",
2255
2303
  "CVE-2017-0149",
2304
+ "CVE-2017-8540",
2305
+ "CVE-2018-0172",
2256
2306
  "CVE-2018-17480",
2257
2307
  "CVE-2018-5002",
2308
+ "CVE-2018-8373",
2258
2309
  "CVE-2019-11043",
2310
+ "CVE-2019-16928",
2259
2311
  "CVE-2019-3568",
2260
2312
  "CVE-2019-5825",
2261
2313
  "CVE-2019-7286",
@@ -2270,6 +2322,8 @@
2270
2322
  "CVE-2021-38406",
2271
2323
  "CVE-2021-39793",
2272
2324
  "CVE-2021-4034",
2325
+ "CVE-2022-20700",
2326
+ "CVE-2022-20701",
2273
2327
  "CVE-2022-22675",
2274
2328
  "CVE-2022-2294",
2275
2329
  "CVE-2022-24521",
@@ -2585,9 +2639,11 @@
2585
2639
  "webapp-security"
2586
2640
  ],
2587
2641
  "evidence_cves": [
2642
+ "CVE-2018-8581",
2588
2643
  "CVE-2019-9621",
2589
2644
  "CVE-2020-7796",
2590
2645
  "CVE-2021-21311",
2646
+ "CVE-2021-21973",
2591
2647
  "CVE-2021-22054",
2592
2648
  "CVE-2021-22175",
2593
2649
  "CVE-2021-39935",
@@ -2999,6 +3055,10 @@
2999
3055
  "related_weaknesses": [],
3000
3056
  "evidence_cves": [
3001
3057
  "CVE-2018-8440",
3058
+ "CVE-2019-0841",
3059
+ "CVE-2019-1064",
3060
+ "CVE-2019-1069",
3061
+ "CVE-2019-1129",
3002
3062
  "CVE-2019-1130",
3003
3063
  "CVE-2019-1253",
3004
3064
  "CVE-2019-1315",
@@ -3006,6 +3066,7 @@
3006
3066
  "CVE-2020-0638",
3007
3067
  "CVE-2020-36193",
3008
3068
  "CVE-2021-34484",
3069
+ "CVE-2021-41379",
3009
3070
  "CVE-2022-21919",
3010
3071
  "CVE-2022-21999",
3011
3072
  "CVE-2022-30333",
@@ -3085,16 +3146,33 @@
3085
3146
  "CVE-2015-1671",
3086
3147
  "CVE-2015-2360",
3087
3148
  "CVE-2015-2426",
3149
+ "CVE-2015-2546",
3088
3150
  "CVE-2015-6175",
3151
+ "CVE-2016-1019",
3089
3152
  "CVE-2016-4171",
3153
+ "CVE-2016-7193",
3090
3154
  "CVE-2016-7256",
3091
3155
  "CVE-2017-0022",
3156
+ "CVE-2017-0101",
3092
3157
  "CVE-2017-1000253",
3158
+ "CVE-2017-11826",
3159
+ "CVE-2017-12240",
3093
3160
  "CVE-2017-15944",
3161
+ "CVE-2017-6736",
3162
+ "CVE-2017-6737",
3163
+ "CVE-2017-6738",
3164
+ "CVE-2017-6739",
3165
+ "CVE-2017-6740",
3094
3166
  "CVE-2017-6742",
3167
+ "CVE-2017-6743",
3168
+ "CVE-2017-6744",
3169
+ "CVE-2018-0151",
3170
+ "CVE-2018-0167",
3171
+ "CVE-2018-0175",
3095
3172
  "CVE-2018-4344",
3096
3173
  "CVE-2018-7445",
3097
3174
  "CVE-2019-0903",
3175
+ "CVE-2019-1297",
3098
3176
  "CVE-2019-8720",
3099
3177
  "CVE-2022-22706",
3100
3178
  "CVE-2023-33106",
@@ -3132,6 +3210,7 @@
3132
3210
  "CVE-2007-5659",
3133
3211
  "CVE-2010-2572",
3134
3212
  "CVE-2013-1331",
3213
+ "CVE-2016-0099",
3135
3214
  "CVE-2016-10174",
3136
3215
  "CVE-2016-6366",
3137
3216
  "CVE-2017-6862",
@@ -3169,6 +3248,11 @@
3169
3248
  "CVE-2014-9163",
3170
3249
  "CVE-2018-5002",
3171
3250
  "CVE-2021-27137",
3251
+ "CVE-2022-20699",
3252
+ "CVE-2022-20700",
3253
+ "CVE-2022-20701",
3254
+ "CVE-2022-20703",
3255
+ "CVE-2022-20708",
3172
3256
  "CVE-2025-0282",
3173
3257
  "CVE-2025-20352",
3174
3258
  "CVE-2025-22457",
@@ -3198,6 +3282,7 @@
3198
3282
  "CVE-2013-2729",
3199
3283
  "CVE-2015-8651",
3200
3284
  "CVE-2016-1010",
3285
+ "CVE-2016-3309",
3201
3286
  "CVE-2016-3393",
3202
3287
  "CVE-2018-14634",
3203
3288
  "CVE-2018-6065",
@@ -3394,7 +3479,9 @@
3394
3479
  ],
3395
3480
  "related_weaknesses": [],
3396
3481
  "evidence_cves": [
3482
+ "CVE-2013-5065",
3397
3483
  "CVE-2014-4113",
3484
+ "CVE-2019-1132",
3398
3485
  "CVE-2026-21525"
3399
3486
  ],
3400
3487
  "last_verified": "2026-05-18",
@@ -3434,6 +3521,7 @@
3434
3521
  ],
3435
3522
  "related_weaknesses": [],
3436
3523
  "evidence_cves": [
3524
+ "CVE-2009-3960",
3437
3525
  "CVE-2019-2616",
3438
3526
  "CVE-2023-45727",
3439
3527
  "CVE-2024-34102",
@@ -3549,12 +3637,16 @@
3549
3637
  ],
3550
3638
  "related_weaknesses": [],
3551
3639
  "evidence_cves": [
3640
+ "CVE-2015-7645",
3641
+ "CVE-2016-4117",
3552
3642
  "CVE-2016-7201",
3553
3643
  "CVE-2017-0037",
3554
3644
  "CVE-2017-0213",
3645
+ "CVE-2017-11292",
3555
3646
  "CVE-2017-5070",
3556
3647
  "CVE-2017-8291",
3557
3648
  "CVE-2018-17463",
3649
+ "CVE-2018-8298",
3558
3650
  "CVE-2019-11707",
3559
3651
  "CVE-2019-8506",
3560
3652
  "CVE-2021-1789",
@@ -3700,6 +3792,7 @@
3700
3792
  "related_weaknesses": [],
3701
3793
  "evidence_cves": [
3702
3794
  "CVE-2013-2251",
3795
+ "CVE-2019-11581",
3703
3796
  "CVE-2020-28949",
3704
3797
  "CVE-2021-38371",
3705
3798
  "CVE-2022-27924",
@@ -3927,6 +4020,8 @@
3927
4020
  "related_weaknesses": [],
3928
4021
  "evidence_cves": [
3929
4022
  "CVE-2004-1464",
4023
+ "CVE-2017-12237",
4024
+ "CVE-2018-0161",
3930
4025
  "CVE-2023-29552",
3931
4026
  "CVE-2023-38180",
3932
4027
  "CVE-2023-44487",
@@ -4662,6 +4757,8 @@
4662
4757
  ],
4663
4758
  "related_weaknesses": [],
4664
4759
  "evidence_cves": [
4760
+ "CVE-2018-0154",
4761
+ "CVE-2018-0155",
4665
4762
  "CVE-2020-7247",
4666
4763
  "CVE-2022-44698",
4667
4764
  "CVE-2024-29748"
@@ -4685,6 +4782,7 @@
4685
4782
  ],
4686
4783
  "related_weaknesses": [],
4687
4784
  "evidence_cves": [
4785
+ "CVE-2017-12238",
4688
4786
  "CVE-2023-50387",
4689
4787
  "CVE-2025-30202"
4690
4788
  ],
@@ -5250,7 +5348,8 @@
5250
5348
  ],
5251
5349
  "related_weaknesses": [],
5252
5350
  "evidence_cves": [
5253
- "CVE-2010-3904"
5351
+ "CVE-2010-3904",
5352
+ "CVE-2022-20699"
5254
5353
  ],
5255
5354
  "last_verified": "2026-05-19",
5256
5355
  "notes": "Bulk-imported v0.13.18 from the canonical MITRE Top 25 + commonly-referenced-class expansion.",
@@ -5899,6 +5998,10 @@
5899
5998
  "related_attack_patterns_capec": [],
5900
5999
  "skills_referencing": [],
5901
6000
  "evidence_cves": [
6001
+ "CVE-2017-6627",
6002
+ "CVE-2018-0179",
6003
+ "CVE-2018-0180",
6004
+ "CVE-2018-8120",
5902
6005
  "CVE-2018-8405",
5903
6006
  "CVE-2018-8406",
5904
6007
  "CVE-2018-8611",
@@ -5987,6 +6090,7 @@
5987
6090
  ],
5988
6091
  "skills_referencing": [],
5989
6092
  "evidence_cves": [
6093
+ "CVE-2018-0175",
5990
6094
  "CVE-2021-25489",
5991
6095
  "CVE-2024-23113"
5992
6096
  ],
@@ -6505,6 +6609,7 @@
6505
6609
  ],
6506
6610
  "skills_referencing": [],
6507
6611
  "evidence_cves": [
6612
+ "CVE-2022-20703",
6508
6613
  "CVE-2022-26923",
6509
6614
  "CVE-2023-20963",
6510
6615
  "CVE-2023-41991"
@@ -6640,6 +6745,7 @@
6640
6745
  "related_attack_patterns_capec": [],
6641
6746
  "skills_referencing": [],
6642
6747
  "evidence_cves": [
6748
+ "CVE-2018-0158",
6643
6749
  "CVE-2023-26083"
6644
6750
  ],
6645
6751
  "framework_controls_partially_addressing": [
@@ -6674,6 +6780,7 @@
6674
6780
  ],
6675
6781
  "skills_referencing": [],
6676
6782
  "evidence_cves": [
6783
+ "CVE-2017-6663",
6677
6784
  "CVE-2023-23397"
6678
6785
  ],
6679
6786
  "framework_controls_partially_addressing": [