regscale-cli 6.16.2.0__py3-none-any.whl → 6.16.3.0__py3-none-any.whl

regscale/__init__.py

@@ -1 +1 @@
-__version__ = "6.16.2.0"
+__version__ = "6.16.3.0"

regscale/core/app/utils/api_handler.py

@@ -67,18 +67,11 @@ class APIHandler(Application):
         :return: The version string
         :rtype: str
         """
+        from regscale.utils.version import RegscaleVersion
+
+        rs_version = RegscaleVersion()
         if self._regscale_version is None:
-            try:
-                response = self.get("/assets/json/version.json")
-                if response.status_code == 200:
-                    version_data = response.json()
-                    self._regscale_version = version_data.get("version", "Unknown")
-                else:
-                    logger.error(f"Failed to fetch version. Status code: {response.status_code}")
-                    self._regscale_version = "Unknown"
-            except Exception as e:
-                logger.error(f"Error fetching version: {e}")
-                self._regscale_version = "Unknown"
+            self._regscale_version = rs_version.current_version
         return self._regscale_version
 
     def _make_request(

regscale/integrations/commercial/crowdstrike.py

@@ -1010,7 +1010,6 @@ def create_new_control_implementation(
     cim = ControlImplementation(
         controlOwnerId=user_id,
         dateLastAssessed=get_current_datetime(),
-        implementation=control.get("implementation", None),
         status=status,
         controlID=control["id"],
         parentId=parent_id,

regscale/integrations/commercial/qualys.py

@@ -27,9 +27,9 @@ from regscale.core.app.utils.app_utils import (
     save_data_to,
 )
 from regscale.core.app.utils.file_utils import download_from_s3
-from regscale.models.app_models.click import regscale_ssp_id
 from regscale.models import Asset, Issue, Search, regscale_models
 from regscale.models.app_models.click import NotRequiredIf, save_output_to
+from regscale.models.app_models.click import regscale_ssp_id
 from regscale.models.integration_models.flat_file_importer import FlatFileImporter
 from regscale.models.integration_models.qualys import (
     Qualys,
@@ -611,11 +611,7 @@ def get_scan_results(scans: Any, task: TaskID) -> dict:
     :return: dictionary of detailed Qualys scans
     :rtype: dict
     """
-    app = check_license()
-    config = app.config
-
-    # set the auth for the QUALYS_API session
-    QUALYS_API.auth = (config["qualysUserName"], config["qualysPassword"])
+    qualys_url, QUALYS_API = _get_qualys_api()
 
     scan_data = {}
     # check number of scans requested
@@ -636,7 +632,7 @@ def get_scan_results(scans: Any, task: TaskID) -> dict:
             }
             # get the scan data via API
             res = QUALYS_API.get(
-                url=urljoin(config["qualysUrl"], "/api/2.0/fo/scan/"),
+                url=urljoin(qualys_url, "/api/2.0/fo/scan/"),
                 headers=HEADERS,
                 params=params,
             )
@@ -664,11 +660,7 @@ def get_detailed_scans(days: int) -> list:
     :return: list of results from Qualys API
     :rtype: list
     """
-    app = check_license()
-    config = app.config
-
-    # set the auth for the QUALYS_API session
-    QUALYS_API.auth = (config["qualysUserName"], config["qualysPassword"])
+    qualys_url, QUALYS_API = _get_qualys_api()
 
     today = datetime.now()
     scan_date = today - timedelta(days=days)
@@ -684,12 +676,12 @@ def get_detailed_scans(days: int) -> list:
         "scan_datetime_since": scan_date.strftime("%Y-%m-%dT%H:%I:%S%ZZ"),
     }
     res = QUALYS_API.get(
-        url=urljoin(config["qualysUrl"], "/api/2.0/fo/scan/summary/"),
+        url=urljoin(qualys_url, "/api/2.0/fo/scan/summary/"),
         headers=HEADERS,
         params=params,
     )
     response = QUALYS_API.get(
-        url=urljoin(config["qualysUrl"], "/api/2.0/fo/scan/vm/summary/"),
+        url=urljoin(qualys_url, "/api/2.0/fo/scan/vm/summary/"),
         headers=HEADERS,
         params=params2,
     )
@@ -708,6 +700,34 @@ def get_detailed_scans(days: int) -> list:
     return res_data
 
 
+def _get_config():
+    """
+    Get the Qualys configuration
+
+    :return: Qualys configuration
+    :rtype: dict
+    """
+    app = check_license()
+    config = app.config
+    return config
+
+
+def _get_qualys_api():
+    """
+    Get the Qualys API session
+
+    :return: Qualys API session
+    :rtype: Session
+    """
+    config = _get_config()
+
+    # set the auth for the QUALYS_API session
+    QUALYS_API.auth = (config.get("qualysUserName"), config.get("qualysPassword"))
+    QUALYS_API.verify = config.get("qualysVerify", True)
+    qualys_url = config.get("qualysUrl")
+    return qualys_url, QUALYS_API
+
+
 def import_total_cloud_data_from_qualys_api(security_plan_id: int, include_tags: str, exclude_tags: str):
     """
     Function to get the total cloud data from Qualys API
@@ -717,10 +737,7 @@ def import_total_cloud_data_from_qualys_api(security_plan_id: int, include_tags:
     """
     try:
 
-        app = check_license()
-        config = app.config
-        # set the auth for the QUALYS_API session
-        QUALYS_API.auth = (config["qualysUserName"], config["qualysPassword"])
+        qualys_url, QUALYS_API = _get_qualys_api()
         params = {
             "action": "list",
             "show_asset_id": "1",
@@ -733,7 +750,7 @@ def import_total_cloud_data_from_qualys_api(security_plan_id: int, include_tags:
             if include_tags:
                 params["tag_set_include"] = include_tags
         response = QUALYS_API.get(
-            url=urljoin(config["qualysUrl"], "/api/2.0/fo/asset/host/vm/detection/"),
+            url=urljoin(qualys_url, "/api/2.0/fo/asset/host/vm/detection/"),
             headers=HEADERS,
             params=params,
         )
@@ -761,17 +778,13 @@ def get_scans_summary(scan_choice: str) -> dict:
     :return: Detailed summary of scans from Qualys API as a dictionary
     :rtype: dict
     """
-    app = check_license()
-    config = app.config
+    qualys_url, QUALYS_API = _get_qualys_api()
     urls = []
 
-    # set the auth for the QUALYS_API session
-    QUALYS_API.auth = (config["qualysUserName"], config["qualysPassword"])
-
     # set up variables for function
     scan_data = {}
     responses = []
-    scan_url = urljoin(config["qualysUrl"], "/api/2.0/fo/scan/")
+    scan_url = urljoin(qualys_url, "/api/2.0/fo/scan/")
 
     # set up parameters for the scans query
     params = {"action": "list"}
@@ -812,11 +825,7 @@ def get_scan_details(days: int) -> list:
     :return: Detailed summary of scans from Qualys API as a dictionary
     :rtype: list
     """
-    app = check_license()
-    config = app.config
-
-    # set the auth for the QUALYS_API session
-    QUALYS_API.auth = (config["qualysUserName"], config["qualysPassword"])
+    qualys_url, QUALYS_API = _get_qualys_api()
     # get since date for API call
     since_date = datetime.now() - timedelta(days=days)
     # set up data and parameters for the scans query
@@ -835,12 +844,12 @@ def get_scan_details(days: int) -> list:
         "scan_datetime_since": since_date.strftime("%Y-%m-%dT%H:%M:%SZ"),
     }
     res = QUALYS_API.get(
-        url=urljoin(config["qualysUrl"], "/api/2.0/fo/scan/summary/"),
+        url=urljoin(qualys_url, "/api/2.0/fo/scan/summary/"),
         headers=headers,
         params=params,
     )
     response = QUALYS_API.get(
-        url=urljoin(config["qualysUrl"], "/api/2.0/fo/scan/vm/summary/"),
+        url=urljoin(qualys_url, "/api/2.0/fo/scan/vm/summary/"),
         headers=headers,
         params=params2,
     )
@@ -874,11 +883,7 @@ def sync_qualys_assets_and_vulns(
     :param Optional[Union[int, str]] asset_group_filter: Filter the Qualys assets by an asset group ID or name, if any
     :rtype: None
     """
-    app = check_license()
-    config = app.config
-
-    # set the auth for the QUALYS_API session
-    QUALYS_API.auth = (config["qualysUserName"], config["qualysPassword"])
+    config = _get_config()
 
     # Get the assets from RegScale with the provided SSP ID
     logger.info("Getting assets from RegScale for SSP #%s...", ssp_id)
@@ -1086,14 +1091,10 @@ def get_qualys_assets_and_scan_results(
     :return: list of dictionaries containing asset data
     :rtype: list
     """
-    app = check_license()
-    config = app.config
-
-    # set the auth for the QUALYS_API session
-    QUALYS_API.auth = (config["qualysUserName"], config["qualysPassword"])
+    qualys_url, QUALYS_API = _get_qualys_api()
     # set url
     if not url:
-        url = urljoin(config["qualysUrl"], "api/2.0/fo/asset/host/vm/detection?action=list&show_asset_id=1")
+        url = urljoin(qualys_url, "api/2.0/fo/asset/host/vm/detection?action=list&show_asset_id=1")
 
     # check if an asset group filter was provided and append it to the url
     if asset_group_filter:
@@ -1143,12 +1144,7 @@ def get_issue_data_for_assets(asset_list: list) -> Tuple[list[dict], int]:
     :return:  Updated asset list of Qualys assets and their associated vulnerabilities, total number of vulnerabilities
     :rtype: Tuple[list[dict], int]
     """
-    app = check_license()
-    config = app.config
-
-    # set the auth for the QUALYS_API session
-    QUALYS_API.auth = (config["qualysUserName"], config["qualysPassword"])
-
+    config = _get_config()
     with job_progress:
         issues = {}
         for asset in asset_list:
@@ -1285,9 +1281,9 @@ def lookup_asset(asset_list: list, asset_id: str = None) -> list[Asset]:
     :rtype: list[Asset]
     """
     if asset_id:
-        results = [Asset(**asset) for asset in asset_list if getattr(asset, "qualysId", None) == asset_id]
+        results = [asset for asset in asset_list if getattr(asset, "qualysId", None) == asset_id]
     else:
-        results = [Asset(**asset) for asset in asset_list]
+        results = [asset for asset in asset_list]
     # Return unique list
     return list(set(results)) or []
 
@@ -1322,11 +1318,7 @@ def create_regscale_issue_from_vuln(
     :return: list of RegScale issues to update, and a list of issues to be created
     :rtype: Tuple[list[Issue], list[Issue]]
     """
-    app = check_license()
-    config = app.config
-
-    # set the auth for the QUALYS_API session
-    QUALYS_API.auth = (config["qualysUserName"], config["qualysPassword"])
+    config = _get_config()
     default_status = config["issues"]["qualys"]["status"]
     regscale_issues = []
     regscale_existing_issues = Issue.get_all_by_parent(parent_id=regscale_ssp_id, parent_module="securityplans")
@@ -1441,13 +1433,10 @@ def get_asset_groups_from_qualys() -> list:
     :return: list of assets from Qualys
     :rtype: list
     """
-    app = check_license()
-    config = app.config
     asset_groups = []
 
-    # set the auth for the QUALYS_API session
-    QUALYS_API.auth = (config["qualysUserName"], config["qualysPassword"])
-    response = QUALYS_API.get(url=urljoin(config["qualysUrl"], "api/2.0/fo/asset/group?action=list"), headers=HEADERS)
+    qualys_url, QUALYS_API = _get_qualys_api()
+    response = QUALYS_API.get(url=urljoin(qualys_url, "api/2.0/fo/asset/group?action=list"), headers=HEADERS)
     if response.ok:
         logger.debug(response.text)
         try:

regscale/integrations/commercial/servicenow.py

@@ -741,6 +741,7 @@ def create_snow_tag(snow_config: ServiceNowConfig, tag_name: str) -> Optional[di
         "active": True,
         "sys_class_name": "tag",
         "type": "Standard",
+        "viewable_by": "everyone",
     }
     url = urljoin(snow_config.url, "api/now/table/label")
     response = snow_api.post(

regscale/integrations/commercial/snyk.py

@@ -18,7 +18,7 @@ def snyk():
 
 @snyk.command(name="import_snyk")
 @FlatFileImporter.common_scanner_options(
-    message="File path to the folder containing Snyk .xlsx files to process to RegScale.",
+    message="File path to the folder containing Snyk .xlsx or .json files to process to RegScale.",
     prompt="File path for Snyk files",
     import_name="snyk",
 )
@@ -77,7 +77,7 @@ def import_synk_files(
     FlatFileImporter.import_files(
         import_type=Snyk,
         import_name="Snyk",
-        file_types=".xlsx",
+        file_types=[".xlsx", ".json"],
         folder_path=folder_path,
         regscale_ssp_id=regscale_ssp_id,
         scan_date=scan_date,

regscale/integrations/commercial/synqly/ticketing.py

@@ -13,6 +13,17 @@ def ticketing() -> None:
     pass
 
 
+@ticketing.command(name="sync_autotask")
+@regscale_id()
+@regscale_module()
+def sync_autotask(regscale_id: int, regscale_module: str) -> None:
+    """Sync Ticketing data between Autotask and RegScale."""
+    from regscale.models.integration_models.synqly_models.connectors import Ticketing
+
+    ticketing_autotask = Ticketing("autotask")
+    ticketing_autotask.run_sync(regscale_id=regscale_id, regscale_module=regscale_module)
+
+
 @ticketing.command(name="sync_jira")
 @regscale_id()
 @regscale_module()
@@ -111,6 +122,24 @@ def sync_servicenow(regscale_id: int, regscale_module: str, issue_type: str, def
     )
 
 
+@ticketing.command(name="sync_servicenow_sir")
+@regscale_id()
+@regscale_module()
+@click.option(
+    "--issue_type",
+    type=click.STRING,
+    help="servicenow_sir issue type",
+    required=True,
+    prompt="servicenow_sir issue type",
+)
+def sync_servicenow_sir(regscale_id: int, regscale_module: str, issue_type: str) -> None:
+    """Sync Ticketing data between Servicenow Sir and RegScale."""
+    from regscale.models.integration_models.synqly_models.connectors import Ticketing
+
+    ticketing_servicenow_sir = Ticketing("servicenow_sir")
+    ticketing_servicenow_sir.run_sync(regscale_id=regscale_id, regscale_module=regscale_module, issue_type=issue_type)
+
+
 @ticketing.command(name="sync_torq")
 @regscale_id()
 @regscale_module()

regscale/integrations/commercial/veracode.py

@@ -83,7 +83,7 @@ def import_veracode_data(
     FlatFileImporter.import_files(
         import_type=Veracode,
         import_name="Veracode",
-        file_types=[".xml", ".xlsx"],
+        file_types=[".xml", ".xlsx", ".json"],
         folder_path=folder_path,
         regscale_ssp_id=regscale_ssp_id,
         scan_date=scan_date,

regscale/integrations/scanner_integration.py

@@ -269,6 +269,10 @@ class IntegrationAsset:
     other_cloud_identifier: Optional[str] = None
     patch_level: Optional[str] = None
     cpe: Optional[str] = None
+    is_latest_scan: Optional[bool] = None
+    is_authenticated_scan: Optional[bool] = None
+    system_administrator_id: Optional[str] = None
+    scanning_tool: Optional[str] = None
 
     source_data: Optional[Dict[str, Any]] = None
     url: Optional[str] = None
@@ -373,6 +377,7 @@ class IntegrationFinding:
     cvss_v2_score: Optional[float] = None
     ip_address: Optional[str] = None
     plugin_id: Optional[str] = None
+    plugin_text: Optional[str] = None
     dns: Optional[str] = None
     severity_int: int = 0
     security_check: Optional[str] = None
@@ -410,6 +415,7 @@ class IntegrationFinding:
     risk_adjustment: str = "No"
     operational_requirements: Optional[str] = None
     deviation_rationale: Optional[str] = None
+    is_cwe: bool = False
 
     poam_comments: Optional[str] = None
     vulnerability_id: Optional[int] = None
@@ -1067,6 +1073,10 @@ class ScannerIntegration(ABC):
             softwareVersion=asset.software_version,
             softwareName=asset.software_name,
             softwareVendor=asset.software_vendor,
+            bLatestScan=asset.is_latest_scan,
+            bAuthenticatedScan=asset.is_authenticated_scan,
+            systemAdministratorId=asset.system_administrator_id,
+            scanningTool=asset.scanning_tool,
         )
         if self.asset_identifier_field:
             setattr(new_asset, self.asset_identifier_field, asset.identifier)
@@ -1587,15 +1597,34 @@ class ScannerIntegration(ABC):
                 bulk_update=True, defaults={"otherIdentifier": self._get_other_identifier(finding, is_poam)}
             )
 
+        self._handle_property_creation_for_issue(issue, finding)
+        return issue
+
+    def _handle_property_creation_for_issue(self, issue: regscale_models.Issue, finding: IntegrationFinding) -> None:
+        """
+        Handles property creation for an issue based on the finding data
+
+        :param regscale_models.Issue issue: The issue to handle properties for
+        :param IntegrationFinding finding: The finding data
+        :rtype: None
+        """
         if poc := finding.point_of_contact:
-            _ = regscale_models.Property(
+            regscale_models.Property(
                 key="POC",
                 value=poc,
                 parentId=issue.id,
                 parentModule="issues",
-            ).create_or_update(bulk_create=True, bulk_update=True)
+            ).create_or_update()
+            logger.debug("Added POC property %s to issue %s", poc, issue.id)
 
-        return issue
+        if finding.is_cwe:
+            regscale_models.Property(
+                key="CWE",
+                value=finding.plugin_id,
+                parentId=issue.id,
+                parentModule="issues",
+            ).create_or_update()
+            logger.debug("Added CWE property %s to issue %s", finding.plugin_id, issue.id)
 
     @staticmethod
     def get_consolidated_asset_identifier(
@@ -1719,15 +1748,16 @@ class ScannerIntegration(ABC):
         :param IntegrationFinding finding: The finding data that has failed
         :rtype: None
         """
-        logger.debug("Creating issue for failing finding %s", finding.external_id)
-        found_issue = self.create_or_update_issue_from_finding(
-            title=issue_title,
-            finding=finding,
-        )
-        # Update the control implementation status to NOT_IMPLEMENTED since we have a failing finding
-        if found_issue.controlImplementationIds:
-            for control_id in found_issue.controlImplementationIds:
-                self.update_control_implementation_status_after_close(control_id)
+        if ScannerVariables.vulnerabilityCreation.lower() != "noissue":
+            logger.debug("Creating issue for failing finding %s", finding.external_id)
+            found_issue = self.create_or_update_issue_from_finding(
+                title=issue_title,
+                finding=finding,
+            )
+            # Update the control implementation status to NOT_IMPLEMENTED since we have a failing finding
+            if found_issue.controlImplementationIds:
+                for control_id in found_issue.controlImplementationIds:
+                    self.update_control_implementation_status_after_close(control_id)
 
     def handle_failing_checklist(
         self,
@@ -2013,6 +2043,7 @@ class ScannerIntegration(ABC):
         self._results["scan_history"] = scan_history.save()
         self.update_result_counts("issues", regscale_models.Issue.bulk_save(progress_context=self.finding_progress))
         self.close_outdated_issues(current_vulnerabilities)
+        self._perform_batch_operations(self.finding_progress)
 
         return processed_findings_count
 
@@ -2206,7 +2237,8 @@ class ScannerIntegration(ABC):
             plugInName=finding.cve or finding.plugin_name,  # Use CVE if available, otherwise use plugin name
             plugInId=finding.plugin_id,
             exploitAvailable=None,  # Set this if you have information about exploit availability
-            plugInText=finding.observations,  # or finding.evidence, whichever is more appropriate
+            plugInText=finding.plugin_text
+            or finding.observations,  # or finding.evidence, whichever is more appropriate
             port=finding.port if hasattr(finding, "port") else None,
             protocol=finding.protocol if hasattr(finding, "protocol") else None,
             operatingSystem=asset.operating_system if hasattr(asset, "operating_system") else None,
@@ -2262,11 +2294,12 @@ class ScannerIntegration(ABC):
         vulnerability = self.create_vulnerability_from_finding(finding, asset, scan_history)
         finding.vulnerability_id = vulnerability.id
 
-        # Handle associated issue
-        self.create_or_update_issue_from_finding(
-            title=finding.title,
-            finding=finding,
-        )
+        if ScannerVariables.vulnerabilityCreation.lower() != "noissue":
+            # Handle associated issue
+            self.create_or_update_issue_from_finding(
+                title=finding.title,
+                finding=finding,
+            )
 
         return vulnerability.id
 
@@ -2623,6 +2656,8 @@ class ScannerIntegration(ABC):
         created_count = instance._results.get("assets", {}).get("created_count", 0)
         updated_count = instance._results.get("assets", {}).get("updated_count", 0)
         dedupe_count = assets_processed - (created_count + updated_count)
+        # Ensure dedupe_count is always a positive value
+        dedupe_count = dedupe_count if dedupe_count >= 0 else dedupe_count * -1
         logger.info(
             "%d assets processed and %d asset(s) deduped. %d asset(s) created & %d asset(s) updated in RegScale.",
             assets_processed,

regscale/models/integration_models/cisa_kev_data.json

@@ -1,9 +1,52 @@
 {
     "title": "CISA Catalog of Known Exploited Vulnerabilities",
-    "catalogVersion": "2025.03.24",
-    "dateReleased": "2025-03-24T18:01:34.066Z",
-    "count": 1308,
+    "catalogVersion": "2025.03.27",
+    "dateReleased": "2025-03-27T17:55:47.8204Z",
+    "count": 1311,
     "vulnerabilities": [
+        {
+            "cveID": "CVE-2025-2783",
+            "vendorProject": "Google",
+            "product": "Chromium Mojo",
+            "vulnerabilityName": "Google Chromium Mojo Sandbox Escape Vulnerability",
+            "dateAdded": "2025-03-27",
+            "shortDescription": "Google Chromium Mojo on Windows contains a sandbox escape vulnerability caused by a logic error, which results from an incorrect handle being provided in unspecified circumstances. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",
+            "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
+            "dueDate": "2025-04-17",
+            "knownRansomwareCampaignUse": "Unknown",
+            "notes": "https:\/\/chromereleases.googleblog.com\/2025\/03\/stable-channel-update-for-desktop_25.html ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-2783",
+            "cwes": []
+        },
+        {
+            "cveID": "CVE-2019-9875",
+            "vendorProject": "Sitecore",
+            "product": "CMS and Experience Platform (XP)",
+            "vulnerabilityName": "Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability",
+            "dateAdded": "2025-03-26",
+            "shortDescription": "Sitecore CMS and Experience Platform (XP) contain a deserialization vulnerability in the Sitecore.Security.AntiCSRF module that allows an authenticated attacker to execute arbitrary code by sending a serialized .NET object in the HTTP POST parameter __CSRFTOKEN.",
+            "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
+            "dueDate": "2025-04-16",
+            "knownRansomwareCampaignUse": "Unknown",
+            "notes": "https:\/\/support.sitecore.com\/kb?id=kb_article_view&sysparm_article=KB0038556 ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2019-9875",
+            "cwes": [
+                "CWE-502"
+            ]
+        },
+        {
+            "cveID": "CVE-2019-9874",
+            "vendorProject": "Sitecore",
+            "product": "CMS and Experience Platform (XP)",
+            "vulnerabilityName": "Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability",
+            "dateAdded": "2025-03-26",
+            "shortDescription": "Sitecore CMS and Experience Platform (XP) contain a deserialization vulnerability in the Sitecore.Security.AntiCSRF module that allows an unauthenticated attacker to execute arbitrary code by sending a serialized .NET object in the HTTP POST parameter __CSRFTOKEN.",
+            "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
+            "dueDate": "2025-04-16",
+            "knownRansomwareCampaignUse": "Unknown",
+            "notes": "https:\/\/support.sitecore.com\/kb?id=kb_article_view&sysparm_article=KB0334035 ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2019-9874",
+            "cwes": [
+                "CWE-502"
+            ]
+        },
         {
             "cveID": "CVE-2025-30154",
             "vendorProject": "reviewdog",
@@ -14,7 +57,7 @@
             "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
             "dueDate": "2025-04-14",
             "knownRansomwareCampaignUse": "Unknown",
-            "notes": "This vulnerability affects a common open-source project, third-party library, or a protocol used by different products. For more information, please see: https:\/\/github.com\/reviewdog\/reviewdog\/security\/advisories\/GHSA-qmg3-hpqr-gqvc ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-30154",
+            "notes": "This vulnerability affects a common open-source project, third-party library, or a protocol used by different products. For more information, please see: CISA Mitigation Instructions: https:\/\/www.cisa.gov\/news-events\/alerts\/2025\/03\/18\/supply-chain-compromise-third-party-tj-actionschanged-files-cve-2025-30066-and-reviewdogaction ; Additional References: https:\/\/github.com\/reviewdog\/reviewdog\/security\/advisories\/GHSA-qmg3-hpqr-gqvc ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-30154",
             "cwes": [
                 "CWE-506"
             ]
@@ -74,7 +117,7 @@
             "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
             "dueDate": "2025-04-08",
             "knownRansomwareCampaignUse": "Unknown",
-            "notes": "This vulnerability affects a common open-source project, third-party library, or a protocol used by different products. For more information, please see: https:\/\/github.com\/tj-actions\/changed-files\/blob\/45fb12d7a8bedb4da42342e52fe054c6c2c3fd73\/README.md?plain=1#L20-L28 ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-30066",
+            "notes": "This vulnerability affects a common open-source project, third-party library, or a protocol used by different products. For more information, please see: CISA Mitigation Instructions: https:\/\/www.cisa.gov\/news-events\/alerts\/2025\/03\/18\/supply-chain-compromise-third-party-tj-actionschanged-files-cve-2025-30066-and-reviewdogaction ; Additional References: https:\/\/github.com\/tj-actions\/changed-files\/blob\/45fb12d7a8bedb4da42342e52fe054c6c2c3fd73\/README.md?plain=1#L20-L28 ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-30066",
             "cwes": [
                 "CWE-506"
             ]
@@ -2964,7 +3007,7 @@
         {
             "cveID": "CVE-2024-4761",
             "vendorProject": "Google",
-            "product": "Chromium Visuals",
+            "product": "Chromium V8",
             "vulnerabilityName": "Google Chromium V8 Out-of-Bounds Memory Write Vulnerability",
             "dateAdded": "2024-05-16",
             "shortDescription": "Google Chromium V8 Engine contains an unspecified out-of-bounds memory write vulnerability via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. ",
@@ -14619,7 +14662,7 @@
             "cveID": "CVE-2020-6572",
             "vendorProject": "Google",
             "product": "Chrome Media",
-            "vulnerabilityName": "Google Chrome Media Prior to 81.0.4044.92 Use-After-Free Vulnerability",
+            "vulnerabilityName": "Google Chrome Media Use-After-Free Vulnerability",
             "dateAdded": "2022-01-10",
             "shortDescription": "Google Chrome Media contains a use-after-free vulnerability that allows a remote attacker to execute code via a crafted HTML page.",
             "requiredAction": "Apply updates per vendor instructions.",