@slicedearth/whoisleuth-cli 2.0.0 → 2.1.0

package/lib/domain-posture.mjs

@@ -62,15 +62,18 @@ function normalizeDkimSelectors(rawSelectors) {
 function normalizeMailProtectionProfile(value) {
     return value === 'defensive_no_mail' || value === 'parked' ? value : 'standard';
 }
-function withTimeout(promise, label, timeoutMs = DNS_TIMEOUT_MS) {
+function withTimeout(promise, label, timeoutMs = DNS_TIMEOUT_MS, timers = {
+    setTimer: (callback, milliseconds) => setTimeout(callback, milliseconds),
+    clearTimer: (handle) => clearTimeout(handle),
+}) {
     return new Promise((resolve, reject) => {
-        const timeout = setTimeout(() => reject(new Error(`${label} timed out`)), timeoutMs);
-        promise.then((value) => { clearTimeout(timeout); resolve(value); }, (err) => { clearTimeout(timeout); reject(err); });
+        const timeout = timers.setTimer(() => reject(new Error(`${label} timed out`)), timeoutMs);
+        promise.then((value) => { timers.clearTimer(timeout); resolve(value); }, (err) => { timers.clearTimer(timeout); reject(err); });
     });
 }
-async function resolveDns(label, factory, timeoutMs = DNS_TIMEOUT_MS) {
+async function resolveDns(label, factory, timeoutMs = DNS_TIMEOUT_MS, timers) {
     try {
-        return { records: await withTimeout(factory(), label, timeoutMs), error: null };
+        return { records: await withTimeout(factory(), label, timeoutMs, timers), error: null };
     }
     catch (err) {
         const error = errorRecord(err);
@@ -559,7 +562,10 @@ function registrationLockCheck(registry) {
 function nameserverCheck(query, registry) {
     if (query.error)
         return queryFailureCheck('nameservers', 'Nameserver delegation', query.error);
-    const records = query.records.map((record) => String(record || '').toLowerCase().replace(/\.+$/u, '')).filter(Boolean);
+    const records = [...new Set(query.records
+            .map((record) => String(record || '').toLowerCase().replace(/\.+$/u, ''))
+            .filter(Boolean))]
+        .sort((left, right) => left.localeCompare(right));
     if (records.length === 0) {
         return check('nameservers', 'Nameserver delegation', 'warning', 'No nameserver delegation returned', {
             detail: 'A missing answer may reflect resolver or publication state and is not proof that a provider account or zone is absent.',
@@ -639,7 +645,17 @@ async function fetchMtaStsPolicy(domain, fetcher = safeFetch) {
         clearTimeout(timeout);
     }
 }
-async function checkDomainPosture(domain, { dkimSelectors = [], retiredDkimSelectors = [], mailProtectionProfile = 'standard', } = {}) {
+async function checkDomainPosture(domain, { dkimSelectors = [], retiredDkimSelectors = [], mailProtectionProfile = 'standard', } = {}, dependencies = {
+    resolveTxt: (name) => dns.resolveTxt(name),
+    resolveMx: (name) => dns.resolveMx(name),
+    resolveNs: (name) => dns.resolveNs(name),
+    resolveCaa: (name) => dns.resolveCaa(name),
+    fetchRdapRecord,
+    fetchMtaStsPolicy: (name) => fetchMtaStsPolicy(name),
+    now: () => new Date(),
+    setTimer: (callback, milliseconds) => setTimeout(callback, milliseconds),
+    clearTimer: (handle) => clearTimeout(handle),
+}) {
     const normalizedDomain = normalizeAuditDomain(domain);
     if (!normalizedDomain)
         throw new Error('Invalid domain name for posture audit.');
@@ -650,40 +666,48 @@ async function checkDomainPosture(domain, { dkimSelectors = [], retiredDkimSelec
         .slice(0, Math.max(0, MAX_DKIM_SELECTORS - selectors.length));
     const normalizedMailProfile = normalizeMailProtectionProfile(mailProtectionProfile);
     const [spf, dmarc, mx, nameservers, caa, mtaStsDns, tlsRpt, bimi, dkim, rdap] = await Promise.all([
-        resolveDns(`TXT ${domain}`, () => dns.resolveTxt(domain)),
-        resolveDns(`TXT _dmarc.${domain}`, () => dns.resolveTxt(`_dmarc.${domain}`)),
-        resolveDns(`MX ${domain}`, () => dns.resolveMx(domain)),
-        resolveDns(`NS ${domain}`, () => dns.resolveNs(domain)),
-        resolveDns(`CAA ${domain}`, () => dns.resolveCaa(domain)),
-        resolveDns(`TXT _mta-sts.${domain}`, () => dns.resolveTxt(`_mta-sts.${domain}`)),
-        resolveDns(`TXT _smtp._tls.${domain}`, () => dns.resolveTxt(`_smtp._tls.${domain}`)),
-        resolveDns(`TXT default._bimi.${domain}`, () => dns.resolveTxt(`default._bimi.${domain}`)),
+        resolveDns(`TXT ${domain}`, () => dependencies.resolveTxt(domain), DNS_TIMEOUT_MS, dependencies),
+        resolveDns(`TXT _dmarc.${domain}`, () => dependencies.resolveTxt(`_dmarc.${domain}`), DNS_TIMEOUT_MS, dependencies),
+        resolveDns(`MX ${domain}`, () => dependencies.resolveMx(domain), DNS_TIMEOUT_MS, dependencies),
+        resolveDns(`NS ${domain}`, () => dependencies.resolveNs(domain), DNS_TIMEOUT_MS, dependencies),
+        resolveDns(`CAA ${domain}`, () => dependencies.resolveCaa(domain), DNS_TIMEOUT_MS, dependencies),
+        resolveDns(`TXT _mta-sts.${domain}`, () => dependencies.resolveTxt(`_mta-sts.${domain}`), DNS_TIMEOUT_MS, dependencies),
+        resolveDns(`TXT _smtp._tls.${domain}`, () => dependencies.resolveTxt(`_smtp._tls.${domain}`), DNS_TIMEOUT_MS, dependencies),
+        resolveDns(`TXT default._bimi.${domain}`, () => dependencies.resolveTxt(`default._bimi.${domain}`), DNS_TIMEOUT_MS, dependencies),
         Promise.all([
             ...selectors.map(async (selector) => ({
                 selector,
                 retired: false,
-                ...await resolveDns(`TXT ${selector}._domainkey.${domain}`, () => dns.resolveTxt(`${selector}._domainkey.${domain}`)),
+                ...await resolveDns(`TXT ${selector}._domainkey.${domain}`, () => dependencies.resolveTxt(`${selector}._domainkey.${domain}`), DNS_TIMEOUT_MS, dependencies),
             })),
             ...retiredSelectors.map(async (selector) => ({
                 selector,
                 retired: true,
-                ...await resolveDns(`TXT ${selector}._domainkey.${domain}`, () => dns.resolveTxt(`${selector}._domainkey.${domain}`)),
+                ...await resolveDns(`TXT ${selector}._domainkey.${domain}`, () => dependencies.resolveTxt(`${selector}._domainkey.${domain}`), DNS_TIMEOUT_MS, dependencies),
             })),
         ]),
-        fetchRdapRecord('domain', domain).catch((err) => ({
+        dependencies.fetchRdapRecord('domain', domain).catch((err) => ({
             error: nonEmptyErrorMessage(err, String(err)),
         })),
     ]);
     const parsedMtaDns = mtaStsDns.error ? null : parseMtaStsDnsRecords(mtaStsDns.records);
-    const enrichmentDeadline = Date.now() + POSTURE_ENRICHMENT_DEADLINE_MS;
+    const enrichmentStartedAt = dependencies.now();
+    if (!(enrichmentStartedAt instanceof Date) || !Number.isFinite(enrichmentStartedAt.getTime())) {
+        throw new TypeError('Domain-posture collection time must be valid.');
+    }
+    const enrichmentDeadline = enrichmentStartedAt.getTime() + POSTURE_ENRICHMENT_DEADLINE_MS;
     const resolveEnrichmentTxt = (name) => {
-        const remaining = Math.max(1, enrichmentDeadline - Date.now());
+        const observedAt = dependencies.now();
+        if (!(observedAt instanceof Date) || !Number.isFinite(observedAt.getTime())) {
+            return Promise.resolve({ records: [], error: 'The bounded posture-enrichment clock was unavailable.' });
+        }
+        const remaining = Math.max(1, enrichmentDeadline - observedAt.getTime());
         if (remaining <= 1)
             return Promise.resolve({ records: [], error: 'The bounded posture-enrichment deadline was reached.' });
-        return resolveDns(`TXT ${name}`, () => dns.resolveTxt(name), Math.min(DNS_TIMEOUT_MS, remaining));
+        return resolveDns(`TXT ${name}`, () => dependencies.resolveTxt(name), Math.min(DNS_TIMEOUT_MS, remaining), dependencies);
     };
     const [mtaStsPolicy, spfExpansion, dmarcAuthorizations] = await Promise.all([
-        parsedMtaDns?.valid ? fetchMtaStsPolicy(domain) : Promise.resolve(null),
+        parsedMtaDns?.valid ? dependencies.fetchMtaStsPolicy(domain) : Promise.resolve(null),
         expandSpfPolicy(domain, spf, resolveEnrichmentTxt),
         validateDmarcExternalReporting(domain, dmarc, resolveEnrichmentTxt),
     ]);
@@ -735,9 +759,13 @@ async function checkDomainPosture(domain, { dkimSelectors = [], retiredDkimSelec
         dmarcAuthorizations,
         mailProtectionProfile: normalizedMailProfile,
     });
+    const checkedAt = dependencies.now();
+    if (!(checkedAt instanceof Date) || !Number.isFinite(checkedAt.getTime())) {
+        throw new TypeError('Domain-posture completion time must be valid.');
+    }
     return {
         ...report,
-        checkedAt: new Date().toISOString(),
+        checkedAt: checkedAt.toISOString(),
         dkimSelectors: selectors,
         retiredDkimSelectors: retiredSelectors,
         mailProtectionProfile: normalizedMailProfile,

package/lib/evidence-export.mjs

@@ -6,11 +6,15 @@ import { validHttpDeliveryMetadata, validPagePublicationMetadata, } from "./home
 import { normalizeExplicitIsoTimestamp } from "../packages/evidence/observation.mjs";
 import { defineSchemaCompatibility } from "../packages/contracts/schema-compatibility.mjs";
 import { isValidAsciiHostname } from "./hostname.mjs";
+import { REGISTRAR_STANDING_SCHEMA, REGISTRAR_STANDING_VERSION, registrarIanaIds, registrarStandingObservedBy, resolveRegistrarIanaId, validRegistrarStanding, } from "./registrar-standing-contract.mjs";
 export const LOOKUP_EVIDENCE_SCHEMA = 'whoisleuth.lookup-evidence';
-export const PUBLIC_LOOKUP_EVIDENCE_SCHEMA_VERSION = 26;
-export const LOOKUP_EVIDENCE_SCHEMA_VERSION = 27;
+export const V1_PUBLIC_LOOKUP_EVIDENCE_SCHEMA_VERSION = 26;
+export const PUBLISHED_V2_LOOKUP_EVIDENCE_SCHEMA_VERSION = 27;
+export const PRIVACY_MINIMIZED_LOOKUP_EVIDENCE_SCHEMA_VERSION = PUBLISHED_V2_LOOKUP_EVIDENCE_SCHEMA_VERSION;
+export const LOOKUP_EVIDENCE_SCHEMA_VERSION = 28;
 export const SUPPORTED_LOOKUP_EVIDENCE_SCHEMA_VERSIONS = Object.freeze([
-    PUBLIC_LOOKUP_EVIDENCE_SCHEMA_VERSION,
+    V1_PUBLIC_LOOKUP_EVIDENCE_SCHEMA_VERSION,
+    PUBLISHED_V2_LOOKUP_EVIDENCE_SCHEMA_VERSION,
     LOOKUP_EVIDENCE_SCHEMA_VERSION,
 ]);
 export const LOOKUP_EVIDENCE_PORTABLE_MAX_BYTES = 5 * 1024 * 1024;
@@ -31,7 +35,7 @@ export const LOOKUP_EVIDENCE_COMPATIBILITY = defineSchemaCompatibility({
     writeSemantics: 'read_only',
     byteBudget: LOOKUP_EVIDENCE_PORTABLE_MAX_BYTES,
     owner: 'lib/evidence-export.mts',
-    note: 'Exact v1.47.4 version 26 remains replayable; version 27 is the single v2 successor with bounded homepage and privacy-minimised registration projections.',
+    note: 'Exact v1.47.4 version 26 and published v2.0.1 version 27 remain replayable; version 28 adds a bounded official-source registrar-standing projection.',
 });
 const REGISTRAR_RDAP_STATUSES = new Set([
     'success', 'partial', 'error', 'unsupported', 'not_found', 'skipped', 'disabled',
@@ -113,7 +117,7 @@ const LOOKUP_AVAILABILITY_PORTABLE_NESTED_KEYS = new Set([
     'version', 'profileVersion', 'status', 'state', 'source', 'observedAt',
     'scanMode', 'durationMs', 'complete', 'truncated', 'limitations',
     'diagnostics', 'detail', 'error', 'count', 'total', 'discarded', 'summary',
-    'findings', 'id', 'label', 'tone', 'category', 'confidence', 'evidence',
+    'findings', 'id', 'label', 'tone', 'category', 'confidence', 'compatibility', 'role', 'roles', 'evidence',
     'value', 'values', 'name', 'type', 'types', 'mode', 'owner', 'target',
     'url', 'uri', 'href',
     'priority', 'ttl', 'records',
@@ -1513,6 +1517,42 @@ function registrarPublicationComparison(body, registryParsed) {
         registrarStatus,
     });
 }
+function projectRegistrarStanding(value, rdapParsed, whoisParsed, generatedAt) {
+    if (value === undefined || value === null)
+        return null;
+    if (!validRegistrarStanding(value))
+        throw new TypeError('Lookup registrar standing is malformed or unsupported.');
+    if (!registrarStandingObservedBy(value, generatedAt)) {
+        throw new TypeError('Lookup registrar standing was observed after the evidence export time.');
+    }
+    const retainedIanaIds = registrarIanaIds(rdapParsed, whoisParsed);
+    const retainedIanaId = resolveRegistrarIanaId(rdapParsed, whoisParsed);
+    // A partial/error source can leave a valid response-level interpretation
+    // whose identifying publication is deliberately omitted from the portable
+    // export. Do not create an orphaned claim in that case. A contradictory
+    // retained identifier remains a hard failure.
+    if (value.ianaId !== null && retainedIanaIds.length === 0)
+        return null;
+    if (retainedIanaIds.length > 1) {
+        throw new TypeError('Lookup registrar standing cannot be exported with conflicting retained registrar identifiers.');
+    }
+    if (value.ianaId !== retainedIanaId) {
+        throw new TypeError('Lookup registrar standing does not match the retained registration sources.');
+    }
+    return {
+        schema: REGISTRAR_STANDING_SCHEMA,
+        version: REGISTRAR_STANDING_VERSION,
+        ianaId: value.ianaId,
+        accreditation: { ...value.accreditation },
+        compliance: {
+            ...value.compliance,
+            actions: value.compliance.actions.map((action) => ({ ...action })),
+        },
+        assessment: { ...value.assessment },
+        limitations: [...value.limitations],
+        nextActions: [...value.nextActions],
+    };
+}
 export function buildLookupEvidence(response, options = {}) {
     assertBoundedJsonStructure(response, 'Lookup response');
     const { generatedAt: generatedAtValue = new Date().toISOString(), idnAnalysis = null, applicationVersion = null } = options;
@@ -1582,6 +1622,7 @@ export function buildLookupEvidence(response, options = {}) {
                 whoisStatus: whoisDiagnostics?.status,
             })),
             registrarPublicationComparison: projectLookupEvidencePrivacySafeTree(registrarPublicationComparison(body, rdapParsed)),
+            registrarStanding: projectRegistrarStanding(body.registrarStanding, rdapParsed, whoisParsed, generatedAt),
         },
     };
     assertLookupEvidencePortableTree(evidence);

package/lib/evidence-report-markdown.mjs

@@ -31,6 +31,10 @@ function formatLookupEvidenceMarkdown(document, options = {}) {
     appendFields(lines, report.assessment);
     lines.push('', '## Registry sources');
     appendGroups(lines, report.registryGroups);
+    if (report.registrarStanding.length) {
+        lines.push('', '## Registrar standing');
+        appendFields(lines, report.registrarStanding);
+    }
     if (report.registryInterpretation.length) {
         lines.push('', '## Registry interpretation');
         appendFields(lines, report.registryInterpretation);

package/lib/evidence-report.mjs

@@ -1,5 +1,6 @@
 import { registryAccessProfileLabel } from "./registry-access.mjs";
 import { buildPortableGeneratorMetadata, portableGeneratorAttribution, } from "./portable-generator.mjs";
+import { technologyEvidenceRoles, } from "./technology-evidence-role.mjs";
 const MAX_REPORT_VALUE_LENGTH = 300;
 const MAX_REPORT_LIST_ITEMS = 50;
 const MAX_REPORT_COMPARISON_FIELDS = 20;
@@ -7,6 +8,12 @@ const MAX_REPORT_RISK_FACTORS = 20;
 function objectOrEmpty(value) {
     return value && typeof value === 'object' && !Array.isArray(value) ? value : {};
 }
+function reportTechnologyNames(findings, role) {
+    return listText(findings
+        .filter((finding) => technologyEvidenceRoles(finding).includes(role))
+        .map((finding) => objectOrEmpty(finding).name)
+        .filter((name) => typeof name === 'string' && name.length > 0));
+}
 function cleanReportText(value, fallback = 'Not reported') {
     if (value === null || value === undefined || value === '')
         return fallback;
@@ -125,6 +132,22 @@ function buildLookupEvidenceReport(document, options = {}) {
     const rdapComparisonHealth = objectOrEmpty(comparisonHealth.rdap);
     const whoisComparisonHealth = objectOrEmpty(comparisonHealth.whois);
     const registrarComparison = objectOrEmpty(analysis.registrarPublicationComparison);
+    const registrarStanding = objectOrEmpty(analysis.registrarStanding);
+    const registrarAccreditation = objectOrEmpty(registrarStanding.accreditation);
+    const registrarCompliance = objectOrEmpty(registrarStanding.compliance);
+    const registrarStandingAssessment = objectOrEmpty(registrarStanding.assessment);
+    const registrarActions = Array.isArray(registrarCompliance.actions)
+        ? registrarCompliance.actions.slice(0, 5).map(objectOrEmpty)
+        : [];
+    const registrarNoticeSummary = registrarCompliance.state === 'reviewed_no_match'
+        ? `None in the reviewed ${cleanReportText(registrarCompliance.catalogueYear, 'current-year')} catalogue`
+        : registrarCompliance.state === 'not_applicable'
+            ? 'Not assessed without one unambiguous registrar IANA ID'
+            : registrarCompliance.state === 'stale'
+                ? 'No matching action retained; the reviewed catalogue is stale'
+                : registrarCompliance.state === 'unavailable'
+                    ? 'Unavailable because the retained catalogue could not be validated'
+                    : 'No matching action was represented';
     const registrarComparisonHealth = objectOrEmpty(registrarComparison.sourceHealth);
     const registryPublicationHealth = objectOrEmpty(registrarComparisonHealth.registry);
     const registrarPublicationHealth = objectOrEmpty(registrarComparisonHealth.registrar);
@@ -140,6 +163,8 @@ function buildLookupEvidenceReport(document, options = {}) {
     const tlsHostname = objectOrEmpty(tls.hostname);
     const tlsValidity = objectOrEmpty(tls.validity);
     const tlsCertificate = objectOrEmpty(tls.certificate);
+    const technology = objectOrEmpty(availability.technologyProfile);
+    const technologyFindings = Array.isArray(technology.findings) ? technology.findings : [];
     const risk = riskReport(options.risk);
     const titleTarget = query.registrableDomain || query.submitted || 'Unknown domain';
     const registryAccessSuffix = [5, 6, 7, 8].includes(Number(diagnostics.version)) && registryAccess.authority === 'context_only'
@@ -239,6 +264,12 @@ function buildLookupEvidenceReport(document, options = {}) {
                 reportField('Redirects', http.redirectCount),
                 reportField('Page title', availability.pageTitle),
                 reportField('Password field observed', yesNoUnknown(availability.hasPasswordField)),
+                reportField('Authoritative nameserver evidence', listText(availability.nameservers)),
+                reportField('Observed edge, CDN, reverse proxy or WAF', reportTechnologyNames(technologyFindings, 'observed_edge')),
+                reportField('Application-platform indicators', reportTechnologyNames(technologyFindings, 'application_platform')),
+                reportField('Framework or runtime indicators', reportTechnologyNames(technologyFindings, 'framework_runtime')),
+                reportField('Embedded or third-party dependencies', reportTechnologyNames(technologyFindings, 'embedded_dependency')),
+                reportField('Origin host', 'Not established from retained evidence'),
             ],
         },
         tls: {
@@ -333,6 +364,24 @@ function buildLookupEvidenceReport(document, options = {}) {
             ...(Object.keys(registrarRdap).length ? [groups.registrarRdap] : []),
             groups.whois,
         ],
+        registrarStanding: registrarStanding.version === 1 ? [
+            reportField('Assessment', displayLabel(registrarStandingAssessment.label || registrarStandingAssessment.state)),
+            reportField('Detail', registrarStandingAssessment.detail),
+            reportField('Registrar IANA ID', registrarStanding.ianaId),
+            reportField('IANA accreditation', displayLabel(registrarAccreditation.state)),
+            reportField('IANA source health', displayLabel(registrarAccreditation.sourceHealth)),
+            reportField('IANA source', registrarAccreditation.sourceUrl),
+            reportField('IANA catalogue reviewed', registrarAccreditation.observedAt),
+            reportField('ICANN notice state', displayLabel(registrarCompliance.state)),
+            reportField('ICANN source health', displayLabel(registrarCompliance.sourceHealth)),
+            reportField('ICANN source', registrarCompliance.sourceUrl),
+            reportField('ICANN catalogue reviewed', registrarCompliance.reviewedAt),
+            ...(registrarActions.length
+                ? registrarActions.map((action, index) => reportField(`Official notice ${index + 1}`, `${displayLabel(action.type)} issued ${cleanReportText(action.issuedOn)}; source ${cleanReportText(action.sourceUrl)}${action.indexOutcome ? `; index outcome ${cleanReportText(action.indexOutcome)}` : ''}`))
+                : [reportField('Matching official notices', registrarNoticeSummary)]),
+            reportField('Standing limitations', listText(registrarStanding.limitations)),
+            reportField('Review steps', listText(registrarStanding.nextActions)),
+        ] : [],
         registryInterpretation: registryInsights.version === 1 ? [
             reportField('Lifecycle', displayLabel(registryLifecycle.label)),
             reportField('Raw lifecycle statuses', listText(registryLifecycle.rawStatuses)),
@@ -387,6 +436,7 @@ function buildLookupEvidenceReport(document, options = {}) {
             ...(networkContext.contextVersion === 1 ? [
                 'Observed network registration describes one point-in-time public endpoint. It may identify an edge or shared network rather than the origin host and does not prove control, ownership, intent, or maliciousness.',
             ] : []),
+            'Nameserver identity does not establish operator or web-host ownership. Edge and application-platform indicators do not establish concealed origin infrastructure.',
             ...(registryAccessFields.length ? [
                 'Registry access constraints describe collection reachability only. They do not decide registration, availability, ownership, safety, or maliciousness.',
             ] : []),

package/lib/generated/cisa-kev-catalog.mjs

@@ -1,9 +1,9 @@
 // Generated by tools/cisa-kev-catalog.mts from the pinned CISA KEV feed.
 // United States Government work; do not edit by hand.
 const CISA_KEV_CATALOG = Object.freeze({
-    catalogVersion: "2026.08.03",
-    releasedAt: "2026-08-03T18:55:09.067Z",
-    sourceSha256: "16acee8334e59e44ccbaed4da7d02b409144061542b64ad74a9443fb7842a828",
+    catalogVersion: "2026.08.31",
+    releasedAt: "2026-08-31T14:55:13.3856Z",
+    sourceSha256: "2043ec4073019154e781f687359bfd9759e4d1ca9a18befc99fbe0c4c93bbde8",
     sourceUrl: "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json",
     identifiers: Object.freeze([
         "CVE-2002-0367",
@@ -193,6 +193,7 @@ const CISA_KEV_CATALOG = Object.freeze({
         "CVE-2015-3035",
         "CVE-2015-3043",
         "CVE-2015-3113",
+        "CVE-2015-3246",
         "CVE-2015-4068",
         "CVE-2015-4495",
         "CVE-2015-4852",
@@ -200,6 +201,7 @@ const CISA_KEV_CATALOG = Object.freeze({
         "CVE-2015-5119",
         "CVE-2015-5122",
         "CVE-2015-5123",
+        "CVE-2015-5287",
         "CVE-2015-5317",
         "CVE-2015-6175",
         "CVE-2015-7450",
@@ -463,6 +465,7 @@ const CISA_KEV_CATALOG = Object.freeze({
         "CVE-2019-10068",
         "CVE-2019-10149",
         "CVE-2019-1064",
+        "CVE-2019-1068",
         "CVE-2019-1069",
         "CVE-2019-10758",
         "CVE-2019-11001",
@@ -760,6 +763,7 @@ const CISA_KEV_CATALOG = Object.freeze({
         "CVE-2021-22941",
         "CVE-2021-22986",
         "CVE-2021-22991",
+        "CVE-2021-23758",
         "CVE-2021-23874",
         "CVE-2021-25296",
         "CVE-2021-25297",
@@ -924,6 +928,7 @@ const CISA_KEV_CATALOG = Object.freeze({
         "CVE-2022-0543",
         "CVE-2022-0609",
         "CVE-2022-0847",
+        "CVE-2022-0995",
         "CVE-2022-1040",
         "CVE-2022-1096",
         "CVE-2022-1364",
@@ -1199,6 +1204,7 @@ const CISA_KEV_CATALOG = Object.freeze({
         "CVE-2023-4863",
         "CVE-2023-48788",
         "CVE-2023-49103",
+        "CVE-2023-49105",
         "CVE-2023-4911",
         "CVE-2023-4966",
         "CVE-2023-49897",
@@ -1542,6 +1548,7 @@ const CISA_KEV_CATALOG = Object.freeze({
         "CVE-2025-6218",
         "CVE-2025-62215",
         "CVE-2025-62221",
+        "CVE-2025-62593",
         "CVE-2025-64328",
         "CVE-2025-64446",
         "CVE-2025-6543",
@@ -1575,6 +1582,7 @@ const CISA_KEV_CATALOG = Object.freeze({
         "CVE-2026-16232",
         "CVE-2026-16812",
         "CVE-2026-1731",
+        "CVE-2026-18556",
         "CVE-2026-18577",
         "CVE-2026-20045",
         "CVE-2026-20122",
@@ -1588,6 +1596,7 @@ const CISA_KEV_CATALOG = Object.freeze({
         "CVE-2026-20253",
         "CVE-2026-20262",
         "CVE-2026-20316",
+        "CVE-2026-20349",
         "CVE-2026-20700",
         "CVE-2026-20805",
         "CVE-2026-20963",
@@ -1600,6 +1609,7 @@ const CISA_KEV_CATALOG = Object.freeze({
         "CVE-2026-21525",
         "CVE-2026-21533",
         "CVE-2026-21643",
+        "CVE-2026-21962",
         "CVE-2026-22719",
         "CVE-2026-22769",
         "CVE-2026-23760",
@@ -1616,8 +1626,10 @@ const CISA_KEV_CATALOG = Object.freeze({
         "CVE-2026-32202",
         "CVE-2026-33017",
         "CVE-2026-33634",
+        "CVE-2026-33824",
         "CVE-2026-33825",
         "CVE-2026-34197",
+        "CVE-2026-34486",
         "CVE-2026-34621",
         "CVE-2026-34908",
         "CVE-2026-34909",
@@ -1650,19 +1662,37 @@ const CISA_KEV_CATALOG = Object.freeze({
         "CVE-2026-50522",
         "CVE-2026-50751",
         "CVE-2026-5281",
+        "CVE-2026-53362",
         "CVE-2026-54420",
+        "CVE-2026-55040",
         "CVE-2026-55255",
         "CVE-2026-56155",
         "CVE-2026-56164",
         "CVE-2026-56290",
         "CVE-2026-56291",
         "CVE-2026-58644",
+        "CVE-2026-59310",
+        "CVE-2026-60004",
         "CVE-2026-60137",
         "CVE-2026-63030",
+        "CVE-2026-63077",
+        "CVE-2026-64849",
+        "CVE-2026-65400",
+        "CVE-2026-66384",
+        "CVE-2026-68820",
         "CVE-2026-6973",
+        "CVE-2026-72529",
+        "CVE-2026-72530",
+        "CVE-2026-72898",
+        "CVE-2026-73570",
         "CVE-2026-7473",
+        "CVE-2026-8037",
+        "CVE-2026-81578",
+        "CVE-2026-82078",
         "CVE-2026-8398",
-        "CVE-2026-9082"
+        "CVE-2026-8452",
+        "CVE-2026-9082",
+        "CVE-2026-9198"
     ]),
 });
 export { CISA_KEV_CATALOG };