@blamejs/exceptd-skills 0.19.37 → 0.19.39

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (13) hide show
  1. package/CHANGELOG.md +22 -0
  2. package/data/_indexes/_meta.json +8 -8
  3. package/data/_indexes/activity-feed.json +2 -2
  4. package/data/_indexes/catalog-summaries.json +7 -7
  5. package/data/_indexes/chains.json +63154 -0
  6. package/data/attack-techniques.json +388 -15
  7. package/data/cve-catalog.json +12004 -4
  8. package/data/cwe-catalog.json +115 -3
  9. package/data/framework-control-gaps.json +579 -3
  10. package/data/zeroday-lessons.json +9987 -2
  11. package/manifest.json +53 -53
  12. package/package.json +2 -2
  13. package/sbom.cdx.json +25 -25
package/data/cwe-catalog.json CHANGED
@@ -85,6 +85,7 @@
85
85
  "CVE-2018-0156",
86
86
  "CVE-2018-0158",
87
87
  "CVE-2018-0159",
88
+ "CVE-2018-0171",
88
89
  "CVE-2018-0172",
89
90
  "CVE-2018-0173",
90
91
  "CVE-2018-0174",
@@ -94,10 +95,15 @@
94
95
  "CVE-2019-11708",
95
96
  "CVE-2019-1652",
96
97
  "CVE-2019-7193",
98
+ "CVE-2020-0041",
99
+ "CVE-2020-11261",
100
+ "CVE-2020-3452",
97
101
  "CVE-2021-25489",
98
102
  "CVE-2021-35247",
99
103
  "CVE-2021-38646",
100
104
  "CVE-2021-42278",
105
+ "CVE-2021-42321",
106
+ "CVE-2021-44228",
101
107
  "CVE-2022-1471",
102
108
  "CVE-2022-24086",
103
109
  "CVE-2022-2856",
@@ -173,23 +179,30 @@
173
179
  "CVE-2015-4068",
174
180
  "CVE-2016-0752",
175
181
  "CVE-2017-12637",
182
+ "CVE-2018-14847",
176
183
  "CVE-2018-18809",
177
184
  "CVE-2018-20250",
178
185
  "CVE-2018-5430",
179
186
  "CVE-2019-16278",
187
+ "CVE-2019-3396",
188
+ "CVE-2019-3398",
180
189
  "CVE-2019-5418",
181
190
  "CVE-2019-7194",
182
191
  "CVE-2019-7195",
183
192
  "CVE-2019-7483",
184
193
  "CVE-2020-14864",
185
194
  "CVE-2020-1631",
195
+ "CVE-2020-3452",
186
196
  "CVE-2020-36193",
187
197
  "CVE-2020-5410",
198
+ "CVE-2021-20090",
188
199
  "CVE-2021-20123",
189
200
  "CVE-2021-20124",
190
201
  "CVE-2021-26086",
191
202
  "CVE-2021-38163",
192
203
  "CVE-2021-41277",
204
+ "CVE-2021-41773",
205
+ "CVE-2021-42013",
193
206
  "CVE-2021-43798",
194
207
  "CVE-2022-21999",
195
208
  "CVE-2022-26352",
@@ -294,6 +307,7 @@
294
307
  "CVE-2018-19949",
295
308
  "CVE-2020-25079",
296
309
  "CVE-2020-2509",
310
+ "CVE-2021-1498",
297
311
  "CVE-2021-27878",
298
312
  "CVE-2021-33515",
299
313
  "CVE-2022-40765",
@@ -378,6 +392,7 @@
378
392
  "CVE-2018-6530",
379
393
  "CVE-2018-6961",
380
394
  "CVE-2018-9276",
395
+ "CVE-2019-10149",
381
396
  "CVE-2019-11001",
382
397
  "CVE-2019-12991",
383
398
  "CVE-2019-15107",
@@ -395,13 +410,20 @@
395
410
  "CVE-2020-2509",
396
411
  "CVE-2020-25223",
397
412
  "CVE-2020-7247",
413
+ "CVE-2020-8816",
398
414
  "CVE-2020-9054",
399
415
  "CVE-2020-9377",
416
+ "CVE-2021-1497",
417
+ "CVE-2021-1498",
400
418
  "CVE-2021-20035",
401
419
  "CVE-2021-21315",
402
420
  "CVE-2021-25296",
403
421
  "CVE-2021-25297",
404
422
  "CVE-2021-25298",
423
+ "CVE-2021-27102",
424
+ "CVE-2021-27104",
425
+ "CVE-2021-35394",
426
+ "CVE-2021-36260",
405
427
  "CVE-2021-36380",
406
428
  "CVE-2021-40407",
407
429
  "CVE-2021-45382",
@@ -518,6 +540,8 @@
518
540
  "CVE-2020-11023",
519
541
  "CVE-2020-13965",
520
542
  "CVE-2020-35730",
543
+ "CVE-2020-3580",
544
+ "CVE-2021-1879",
521
545
  "CVE-2021-26829",
522
546
  "CVE-2022-27926",
523
547
  "CVE-2022-39197",
@@ -609,9 +633,12 @@
609
633
  "CVE-2017-18362",
610
634
  "CVE-2018-7841",
611
635
  "CVE-2019-12989",
636
+ "CVE-2020-17463",
612
637
  "CVE-2020-29574",
613
638
  "CVE-2020-5722",
614
639
  "CVE-2021-20028",
640
+ "CVE-2021-27101",
641
+ "CVE-2021-42258",
615
642
  "CVE-2021-44026",
616
643
  "CVE-2023-34362",
617
644
  "CVE-2023-46748",
@@ -686,7 +713,11 @@
686
713
  "CVE-2018-1273",
687
714
  "CVE-2018-14667",
688
715
  "CVE-2018-7602",
716
+ "CVE-2019-0193",
717
+ "CVE-2019-10758",
718
+ "CVE-2019-7609",
689
719
  "CVE-2020-8218",
720
+ "CVE-2021-22204",
690
721
  "CVE-2021-3129",
691
722
  "CVE-2021-39144",
692
723
  "CVE-2021-44529",
@@ -1093,6 +1124,8 @@
1093
1124
  "CVE-2015-4902",
1094
1125
  "CVE-2016-3427",
1095
1126
  "CVE-2020-2506",
1127
+ "CVE-2021-1870",
1128
+ "CVE-2021-1871",
1096
1129
  "CVE-2021-22941",
1097
1130
  "CVE-2021-27876",
1098
1131
  "CVE-2022-23134",
@@ -1238,10 +1271,14 @@
1238
1271
  "evidence_cves": [
1239
1272
  "CVE-2017-10271",
1240
1273
  "CVE-2018-19410",
1274
+ "CVE-2019-7238",
1241
1275
  "CVE-2020-13927",
1242
1276
  "CVE-2020-24363",
1243
1277
  "CVE-2021-35587",
1278
+ "CVE-2021-37415",
1244
1279
  "CVE-2021-39144",
1280
+ "CVE-2021-44077",
1281
+ "CVE-2021-44515",
1245
1282
  "CVE-2022-1388",
1246
1283
  "CVE-2022-21587",
1247
1284
  "CVE-2022-23227",
@@ -1368,6 +1405,7 @@
1368
1405
  ],
1369
1406
  "skills_referencing": [],
1370
1407
  "evidence_cves": [
1408
+ "CVE-2017-1000486",
1371
1409
  "CVE-2017-11317"
1372
1410
  ],
1373
1411
  "framework_controls_partially_addressing": [
@@ -1757,18 +1795,29 @@
1757
1795
  "CVE-2017-0261",
1758
1796
  "CVE-2017-0263",
1759
1797
  "CVE-2018-15982",
1798
+ "CVE-2018-4878",
1799
+ "CVE-2019-0211",
1760
1800
  "CVE-2019-13720",
1801
+ "CVE-2019-2215",
1761
1802
  "CVE-2019-5786",
1762
1803
  "CVE-2019-8526",
1763
1804
  "CVE-2019-8605",
1805
+ "CVE-2020-6572",
1764
1806
  "CVE-2020-9715",
1765
1807
  "CVE-2021-0920",
1766
1808
  "CVE-2021-1048",
1767
1809
  "CVE-2021-25370",
1768
1810
  "CVE-2021-25394",
1811
+ "CVE-2021-28550",
1812
+ "CVE-2021-28663",
1769
1813
  "CVE-2021-29256",
1814
+ "CVE-2021-30661",
1815
+ "CVE-2021-30762",
1816
+ "CVE-2021-30858",
1770
1817
  "CVE-2021-31166",
1771
1818
  "CVE-2021-34486",
1819
+ "CVE-2021-40449",
1820
+ "CVE-2021-4102",
1772
1821
  "CVE-2022-0609",
1773
1822
  "CVE-2022-22071",
1774
1823
  "CVE-2022-22620",
@@ -1882,9 +1931,11 @@
1882
1931
  "CVE-2017-11357",
1883
1932
  "CVE-2017-12615",
1884
1933
  "CVE-2017-12617",
1934
+ "CVE-2018-15961",
1885
1935
  "CVE-2018-4063",
1886
1936
  "CVE-2020-13671",
1887
1937
  "CVE-2021-26828",
1938
+ "CVE-2021-27860",
1888
1939
  "CVE-2024-39717",
1889
1940
  "CVE-2024-50623",
1890
1941
  "CVE-2024-57968",
@@ -1929,6 +1980,7 @@
1929
1980
  "supply-chain-integrity"
1930
1981
  ],
1931
1982
  "evidence_cves": [
1983
+ "CVE-2021-44168",
1932
1984
  "CVE-2022-40799",
1933
1985
  "CVE-2025-15556",
1934
1986
  "CVE-2026-3502"
@@ -1966,13 +2018,17 @@
1966
2018
  ],
1967
2019
  "evidence_cves": [
1968
2020
  "CVE-2015-2590",
2021
+ "CVE-2015-7450",
1969
2022
  "CVE-2016-8735",
2023
+ "CVE-2017-12149",
1970
2024
  "CVE-2017-3066",
2025
+ "CVE-2017-9805",
1971
2026
  "CVE-2018-0147",
1972
2027
  "CVE-2018-0824",
1973
2028
  "CVE-2018-1000861",
1974
2029
  "CVE-2018-15133",
1975
2030
  "CVE-2018-2628",
2031
+ "CVE-2018-4939",
1976
2032
  "CVE-2019-0344",
1977
2033
  "CVE-2019-10068",
1978
2034
  "CVE-2019-15271",
@@ -1990,6 +2046,7 @@
1990
2046
  "CVE-2021-31196",
1991
2047
  "CVE-2021-39144",
1992
2048
  "CVE-2021-42237",
2049
+ "CVE-2021-44228",
1993
2050
  "CVE-2022-1471",
1994
2051
  "CVE-2022-21445",
1995
2052
  "CVE-2022-31199",
@@ -2367,7 +2424,9 @@
2367
2424
  "CVE-2017-0149",
2368
2425
  "CVE-2017-0222",
2369
2426
  "CVE-2017-8540",
2427
+ "CVE-2018-0171",
2370
2428
  "CVE-2018-0172",
2429
+ "CVE-2018-13383",
2371
2430
  "CVE-2018-17480",
2372
2431
  "CVE-2018-5002",
2373
2432
  "CVE-2018-8174",
@@ -2378,12 +2437,25 @@
2378
2437
  "CVE-2019-5825",
2379
2438
  "CVE-2019-7286",
2380
2439
  "CVE-2019-7287",
2440
+ "CVE-2020-0069",
2381
2441
  "CVE-2020-1027",
2442
+ "CVE-2020-11261",
2443
+ "CVE-2020-27930",
2444
+ "CVE-2020-3118",
2382
2445
  "CVE-2020-3837",
2446
+ "CVE-2020-5735",
2447
+ "CVE-2020-9818",
2448
+ "CVE-2020-9819",
2383
2449
  "CVE-2020-9907",
2384
2450
  "CVE-2021-20038",
2451
+ "CVE-2021-21017",
2385
2452
  "CVE-2021-22555",
2386
2453
  "CVE-2021-25372",
2454
+ "CVE-2021-27562",
2455
+ "CVE-2021-28664",
2456
+ "CVE-2021-30665",
2457
+ "CVE-2021-30761",
2458
+ "CVE-2021-30807",
2387
2459
  "CVE-2021-30883",
2388
2460
  "CVE-2021-30900",
2389
2461
  "CVE-2021-38406",
@@ -2579,6 +2651,8 @@
2579
2651
  "webapp-security"
2580
2652
  ],
2581
2653
  "evidence_cves": [
2654
+ "CVE-2021-30657",
2655
+ "CVE-2021-30713",
2582
2656
  "CVE-2021-39226",
2583
2657
  "CVE-2022-0492",
2584
2658
  "CVE-2022-0543",
@@ -2628,6 +2702,7 @@
2628
2702
  "webapp-security"
2629
2703
  ],
2630
2704
  "evidence_cves": [
2705
+ "CVE-2018-13382",
2631
2706
  "CVE-2019-7192",
2632
2707
  "CVE-2021-30533",
2633
2708
  "CVE-2021-3493",
@@ -2720,7 +2795,9 @@
2720
2795
  "CVE-2021-21975",
2721
2796
  "CVE-2021-22054",
2722
2797
  "CVE-2021-22175",
2798
+ "CVE-2021-27103",
2723
2799
  "CVE-2021-39935",
2800
+ "CVE-2021-40438",
2724
2801
  "CVE-2022-36551",
2725
2802
  "CVE-2022-41040",
2726
2803
  "CVE-2022-41080",
@@ -3060,6 +3137,7 @@
3060
3137
  "CVE-2019-1003029",
3061
3138
  "CVE-2019-1003030",
3062
3139
  "CVE-2020-9934",
3140
+ "CVE-2021-42292",
3063
3141
  "CVE-2023-32049",
3064
3142
  "CVE-2023-36025",
3065
3143
  "CVE-2023-36584",
@@ -3260,6 +3338,7 @@
3260
3338
  "CVE-2019-8720",
3261
3339
  "CVE-2020-0796",
3262
3340
  "CVE-2021-22991",
3341
+ "CVE-2021-30666",
3263
3342
  "CVE-2022-22706",
3264
3343
  "CVE-2023-33106",
3265
3344
  "CVE-2023-36033",
@@ -3336,6 +3415,7 @@
3336
3415
  "CVE-2013-2597",
3337
3416
  "CVE-2014-9163",
3338
3417
  "CVE-2018-5002",
3418
+ "CVE-2020-5735",
3339
3419
  "CVE-2021-20038",
3340
3420
  "CVE-2021-27137",
3341
3421
  "CVE-2022-20699",
@@ -3376,6 +3456,8 @@
3376
3456
  "CVE-2016-3393",
3377
3457
  "CVE-2018-14634",
3378
3458
  "CVE-2018-6065",
3459
+ "CVE-2021-30663",
3460
+ "CVE-2021-30860",
3379
3461
  "CVE-2021-30952",
3380
3462
  "CVE-2022-0185",
3381
3463
  "CVE-2023-2136",
@@ -3541,6 +3623,7 @@
3541
3623
  ],
3542
3624
  "related_weaknesses": [],
3543
3625
  "evidence_cves": [
3626
+ "CVE-2013-3900",
3544
3627
  "CVE-2014-6324",
3545
3628
  "CVE-2020-2021",
3546
3629
  "CVE-2025-59718",
@@ -3613,6 +3696,7 @@
3613
3696
  "evidence_cves": [
3614
3697
  "CVE-2009-3960",
3615
3698
  "CVE-2019-2616",
3699
+ "CVE-2019-9670",
3616
3700
  "CVE-2023-45727",
3617
3701
  "CVE-2024-34102",
3618
3702
  "CVE-2025-2775",
@@ -3658,6 +3742,7 @@
3658
3742
  ],
3659
3743
  "related_weaknesses": [],
3660
3744
  "evidence_cves": [
3745
+ "CVE-2021-1782",
3661
3746
  "CVE-2025-43510"
3662
3747
  ],
3663
3748
  "last_verified": "2026-05-18",
@@ -3704,6 +3789,7 @@
3704
3789
  "evidence_cves": [
3705
3790
  "CVE-2013-0074",
3706
3791
  "CVE-2019-0880",
3792
+ "CVE-2019-1458",
3707
3793
  "CVE-2023-29360",
3708
3794
  "CVE-2023-36033",
3709
3795
  "CVE-2024-21338",
@@ -3743,7 +3829,9 @@
3743
3829
  "CVE-2019-0752",
3744
3830
  "CVE-2019-11707",
3745
3831
  "CVE-2019-8506",
3832
+ "CVE-2020-27932",
3746
3833
  "CVE-2021-1789",
3834
+ "CVE-2021-30869",
3747
3835
  "CVE-2022-1096",
3748
3836
  "CVE-2022-1364",
3749
3837
  "CVE-2022-3723",
@@ -3887,6 +3975,8 @@
3887
3975
  "evidence_cves": [
3888
3976
  "CVE-2013-2251",
3889
3977
  "CVE-2019-11581",
3978
+ "CVE-2019-17558",
3979
+ "CVE-2019-2725",
3890
3980
  "CVE-2020-28949",
3891
3981
  "CVE-2021-38371",
3892
3982
  "CVE-2022-27924",
@@ -3918,6 +4008,7 @@
3918
4008
  "CVE-2015-3113",
3919
4009
  "CVE-2017-0005",
3920
4010
  "CVE-2019-3568",
4011
+ "CVE-2021-21017",
3921
4012
  "CVE-2023-23376",
3922
4013
  "CVE-2023-27997",
3923
4014
  "CVE-2023-28252",
@@ -4118,6 +4209,7 @@
4118
4209
  "CVE-2004-1464",
4119
4210
  "CVE-2017-12237",
4120
4211
  "CVE-2018-0161",
4212
+ "CVE-2021-44228",
4121
4213
  "CVE-2023-29552",
4122
4214
  "CVE-2023-38180",
4123
4215
  "CVE-2023-44487",
@@ -4357,6 +4449,7 @@
4357
4449
  ],
4358
4450
  "related_weaknesses": [],
4359
4451
  "evidence_cves": [
4452
+ "CVE-2021-43890",
4360
4453
  "CVE-2024-38112",
4361
4454
  "CVE-2024-43461"
4362
4455
  ],
@@ -4378,7 +4471,9 @@
4378
4471
  "CWE-2000"
4379
4472
  ],
4380
4473
  "related_weaknesses": [],
4381
- "evidence_cves": [],
4474
+ "evidence_cves": [
4475
+ "CVE-2026-82078"
4476
+ ],
4382
4477
  "last_verified": "2026-05-19",
4383
4478
  "notes": "Bulk-imported v0.13.18 from the canonical MITRE Top 25 + commonly-referenced-class expansion.",
4384
4479
  "_auto_imported": true,
@@ -4811,7 +4906,8 @@
4811
4906
  "CVE-2006-1547",
4812
4907
  "CVE-2010-0738",
4813
4908
  "CVE-2010-1428",
4814
- "CVE-2018-19322"
4909
+ "CVE-2018-19322",
4910
+ "CVE-2019-11580"
4815
4911
  ],
4816
4912
  "last_verified": "2026-05-19",
4817
4913
  "notes": "Bulk-imported v0.13.18 from the canonical MITRE Top 25 + commonly-referenced-class expansion.",
@@ -4857,6 +4953,7 @@
4857
4953
  "related_weaknesses": [],
4858
4954
  "evidence_cves": [
4859
4955
  "CVE-2010-0232",
4956
+ "CVE-2017-5638",
4860
4957
  "CVE-2018-0154",
4861
4958
  "CVE-2018-0155",
4862
4959
  "CVE-2020-7247",
@@ -5099,6 +5196,12 @@
5099
5196
  ],
5100
5197
  "related_weaknesses": [],
5101
5198
  "evidence_cves": [
5199
+ "CVE-2010-1871",
5200
+ "CVE-2018-11776",
5201
+ "CVE-2019-7238",
5202
+ "CVE-2020-17530",
5203
+ "CVE-2021-26084",
5204
+ "CVE-2021-44228",
5102
5205
  "CVE-2021-45046",
5103
5206
  "CVE-2022-22947",
5104
5207
  "CVE-2022-22963",
@@ -5665,7 +5768,8 @@
5665
5768
  "skills_referencing": [],
5666
5769
  "evidence_cves": [
5667
5770
  "CVE-2024-37085",
5668
- "CVE-2025-31161"
5771
+ "CVE-2025-31161",
5772
+ "CVE-2026-81578"
5669
5773
  ],
5670
5774
  "framework_controls_partially_addressing": [
5671
5775
  "NIST-800-53-IA-2",
@@ -5948,6 +6052,7 @@
5948
6052
  ],
5949
6053
  "skills_referencing": [],
5950
6054
  "evidence_cves": [
6055
+ "CVE-2016-4437",
5951
6056
  "CVE-2025-30406"
5952
6057
  ],
5953
6058
  "framework_controls_partially_addressing": [
@@ -6167,6 +6272,7 @@
6167
6272
  ],
6168
6273
  "skills_referencing": [],
6169
6274
  "evidence_cves": [
6275
+ "CVE-2017-17562",
6170
6276
  "CVE-2017-8464",
6171
6277
  "CVE-2022-23748"
6172
6278
  ],
@@ -6197,6 +6303,8 @@
6197
6303
  "skills_referencing": [],
6198
6304
  "evidence_cves": [
6199
6305
  "CVE-2018-0175",
6306
+ "CVE-2019-1579",
6307
+ "CVE-2020-3118",
6200
6308
  "CVE-2021-25489",
6201
6309
  "CVE-2024-23113"
6202
6310
  ],
@@ -6558,6 +6666,7 @@
6558
6666
  "evidence_cves": [
6559
6667
  "CVE-2014-0502",
6560
6668
  "CVE-2018-4990",
6669
+ "CVE-2020-9859",
6561
6670
  "CVE-2021-22600",
6562
6671
  "CVE-2026-33824"
6563
6672
  ],
@@ -6637,6 +6746,7 @@
6637
6746
  "related_attack_patterns_capec": [],
6638
6747
  "skills_referencing": [],
6639
6748
  "evidence_cves": [
6749
+ "CVE-2019-6223",
6640
6750
  "CVE-2024-32896"
6641
6751
  ],
6642
6752
  "framework_controls_partially_addressing": [
@@ -6976,6 +7086,7 @@
6976
7086
  "CAPEC-35"
6977
7087
  ],
6978
7088
  "evidence_cves": [
7089
+ "CVE-2019-13272",
6979
7090
  "CVE-2021-3493"
6980
7091
  ],
6981
7092
  "framework_controls_partially_addressing": [
@@ -7351,6 +7462,7 @@
7351
7462
  "skills_referencing": [],
7352
7463
  "evidence_cves": [
7353
7464
  "CVE-2013-1675",
7465
+ "CVE-2020-27950",
7354
7466
  "CVE-2022-0847"
7355
7467
  ],
7356
7468
  "framework_controls_partially_addressing": [