head	1.6;
access;
symbols
	pkgsrc-2026Q3:1.5.0.10
	pkgsrc-2026Q3-base:1.5
	pkgsrc-2026Q2:1.5.0.8
	pkgsrc-2026Q2-base:1.5
	pkgsrc-2026Q1:1.5.0.6
	pkgsrc-2026Q1-base:1.5
	pkgsrc-2025Q4:1.5.0.4
	pkgsrc-2025Q4-base:1.5
	pkgsrc-2025Q3:1.5.0.2
	pkgsrc-2025Q3-base:1.5
	pkgsrc-2025Q2:1.4.0.2
	pkgsrc-2025Q2-base:1.4
	pkgsrc-2025Q1:1.3.0.2
	pkgsrc-2025Q1-base:1.3
	pkgsrc-2024Q4:1.2.0.4
	pkgsrc-2024Q4-base:1.2
	pkgsrc-2024Q3:1.2.0.2
	pkgsrc-2024Q3-base:1.2
	pkgsrc-2024Q2:1.1.0.6
	pkgsrc-2024Q2-base:1.1
	pkgsrc-2024Q1:1.1.0.4
	pkgsrc-2024Q1-base:1.1
	pkgsrc-2023Q4:1.1.0.2
	pkgsrc-2023Q4-base:1.1;
locks; strict;
comment	@# @;


1.6
date	2026.10.26.05.54.18;	author adam;	state Exp;
branches;
next	1.5;
commitid	mGm1dCTYfjVMUW0H;

1.5
date	2025.09.02.07.29.46;	author adam;	state Exp;
branches;
next	1.4;
commitid	7IorjhAiHCYxU69G;

1.4
date	2025.04.14.05.09.33;	author adam;	state Exp;
branches;
next	1.3;
commitid	RnTITH4beRfuFYQF;

1.3
date	2025.01.14.06.43.18;	author adam;	state Exp;
branches;
next	1.2;
commitid	oMRL93Nn1gHX4qFF;

1.2
date	2024.08.22.09.56.57;	author adam;	state Exp;
branches;
next	1.1;
commitid	uc8V15Dy9sWnONmF;

1.1
date	2023.11.19.01.16.31;	author wiz;	state Exp;
branches;
next	;
commitid	UDmT3YaJ7yBYP9NE;


desc
@@


1.6
log
@py-nvdlib: updated to 0.9.0

0.9.0 (2026-09-27)

**Breaking**
- Removed the `verbose` parameter from `searchCVE` and `searchCVE_V2`. It has done nothing since 0.7.8. Use the Python logging module instead, see https://nvdlib.com/en/latest/v2/startedv2.html#logging

**Bugfixes**
- Capped the `searchCPEmatch` limit at 500, the Match Criteria API maximum.
- Fixed CPE match generator requests being sent to the CPE URL.
- Stopped requesting an extra empty page when the total results are an exact multiple of the page size.
- Fixed the `pubStartDate` error message showing `pubEndDate`.
- Corrected CVE, CPE, and match string docstrings to match the live API field names, such as `cisaExploitAdd` and `lastModified`.

**Enhancements**
- Added `asDict` to every search function to return the plain dictionaries from the NVD API instead of objects.
- Added `searchCVEHistory` and `searchCVEHistory_V2` for the CVE Change History API.
- Added `searchSource` and `searchSource_V2` for the Source API.
- Added `cveIds`, `cveTag`, `kevStartDate`, and `kevEndDate` to `searchCVE` and `searchCVE_V2`.
- Added `searchCPEmatch_V2` and the `proxies` parameter to `searchCPEmatch`.
- CVSS 3.1, 3.0, and 2.0 scores now use the Primary metric when one is present, the same as CVSS 4.0.
- `cpe` now includes the CPE matches from every configuration node, not just the first.
- Added `ssvc` to CVE objects when the CVE includes SSVC data.
- HTTP errors now include the reason NVD returns in the `message` header.
@
text
@$NetBSD: distinfo,v 1.5 2025/09/02 07:29:46 adam Exp $

BLAKE2s (nvdlib-0.9.0.tar.gz) = a7b028630c8726116033d428a4af749dd481d92f8df04f8dd2d630c68b18e84b
SHA512 (nvdlib-0.9.0.tar.gz) = 4501e06709510298a2c0bbfbb8670a26747a8452fe5853556523a6803c1d629d8d435611dfea06310db07a17a9f0f52f6c94d16bcf278a77dbda9519c6a96840
Size (nvdlib-0.9.0.tar.gz) = 556971 bytes
@


1.5
log
@py-nvdlib: updated to 0.8.3

0.8.3

Fixed an issue with searchCPEmatch where batching/paging did not work correctly
Modified to paging logic to better align with NIST published best practices for the NVD AP
@
text
@d1 1
a1 1
$NetBSD: distinfo,v 1.4 2025/04/14 05:09:33 adam Exp $
d3 3
a5 4
BLAKE2s (nvdlib-0.8.3.tar.gz) = bcde30c6c6da48cafb1b36fcdbb313f628426936febf6ac731093ea5812f428e
SHA512 (nvdlib-0.8.3.tar.gz) = c07f1a7aa0b415f0c8a909a5e1dff4e9a5efcc807800c35289aa6ca9fdfb96bfb8b4beae8c3a8a9d71f5f6fddaf68ea7a4aa42140224be020079a25563857e11
Size (nvdlib-0.8.3.tar.gz) = 548525 bytes
SHA1 (patch-setup.py) = fbf3594ae1e3afd17afa7213e1bec2c40b14dae5
@


1.4
log
@py-nvdlib: updated to 0.8.0

0.8.0 (2025-03-19)
**Bugfixes**
- Fixed passing the boolean to the URL on hasKev, hasOval, hasCertAlerts, hasCertNotes, and keyworkExactMatch
@
text
@d1 1
a1 1
$NetBSD: distinfo,v 1.3 2025/01/14 06:43:18 adam Exp $
d3 4
a6 3
BLAKE2s (nvdlib-0.8.0.tar.gz) = 29acab2aa32f47e97e93a12a5415116788ca0c16fc42ae6f6875e982b143b8d9
SHA512 (nvdlib-0.8.0.tar.gz) = 9bb369b797de07769ef34f02b50bfb6e4f23bb71790e3dcdd7970416f0adc5cd97a15bcb3304dc82a91f8e715ccd3bebd965b5fc9270cc608759ee66cf658438
Size (nvdlib-0.8.0.tar.gz) = 545749 bytes
@


1.3
log
@py-nvdlib: updated to 0.7.9

0.7.9 (2025-01-13)

**Enhancements**
- Added missing CVSS 3.0 data for `attackVector`, `attackComplexity`, `privilegesRequired`, `userInteraction`, `scope`, `confidentialityImpact`, `integrityImpact`, and `availabilityImpact` as reported from https://github.com/vehemont/nvdlib/issues/48
- Added basic CVSS 4.0 data: `v40score`, `v40vector`, and `v40severity` in CVEs.
- Merged https://github.com/vehemont/nvdlib/pull/49 and https://github.com/vehemont/nvdlib/pull/50 to add more type hints and also fixes the MatchString search. Courtesy of @@LachJones.
- Increased minimum required Python version to `3.11` or later from Python 3.8.3. This opens up some cooler features and fixed a compatibility issue with `LiteralString` not being available until 3.11.

0.7.8 (2024-07-11)

**Enhancements**
- Merged https://github.com/vehemont/nvdlib/pull/44
 - Updated delay parameter to a float.
 - Removed verbose in favor of the Python logging module.

 To try out the new logging addition, try the simple logger configuration below. It will create a file named "example_NVDLib.log" and will log NVDLib and Requests actions into the file. Syntax errors/HTTP server errors are logging level of "error", URLs requested (similar output to the previous `verbose` parameter) are set to "debug".
 ```
 import logging
 import nvdlib

 logging.basicConfig(filename='example_NVDLib.log', encoding='utf-8', level=logging.DEBUG)
r = nvdlib.searchCVE(keywordSearch="Microsoft")
```
@
text
@d1 1
a1 1
$NetBSD: distinfo,v 1.2 2024/08/22 09:56:57 adam Exp $
d3 3
a5 3
BLAKE2s (nvdlib-0.7.9.tar.gz) = 53c549278a27a9208a14cdec2ae3140ca7358a16e7af71c5cd874bc10ceb7e60
SHA512 (nvdlib-0.7.9.tar.gz) = 76efaafad12ba0307b50ce5b63d040af3706bbf5ab88c8be9e75fc86de42907b551bf9539179669387037da1590a42eb57903ea9317228691e7438d33efe61c4
Size (nvdlib-0.7.9.tar.gz) = 545706 bytes
@


1.2
log
@py-nvdlib: updated to 0.7.7

0.7.7 (2024-06-02)

**Bugfixes**
- Fix cwe attr in CVE by @@jobselko in https://github.com/vehemont/nvdlib/pull/39

**Enhancements**
- Added CPE Match String API with `nvdlib.searchCPEmatch`, check out the documentation at https://nvdlib.com/en/latest/v2/CVEv2.html#CPE-Match-Criteria-API and more information can be found at the NVD API documentation page: https://nvd.nist.gov/developers/products
@
text
@d1 1
a1 1
$NetBSD: distinfo,v 1.1 2023/11/19 01:16:31 wiz Exp $
d3 3
a5 3
BLAKE2s (nvdlib-0.7.7.tar.gz) = 3e4aece429c90736977dacdfa2ee43ec24cd49582260b12e2c6af7ff4c43cb9e
SHA512 (nvdlib-0.7.7.tar.gz) = b22a299afaf07cd1bc4ca8870db7876dc1810899ccbda4c2bd79e9eac48ed32368af2ab6b3b38257cfcd7d2f4ebde8a5e79ff8ae7205b20be52de17c6cde8f03
Size (nvdlib-0.7.7.tar.gz) = 544748 bytes
@


1.1
log
@security/py-nvdlib: import py-nvdlib-0.7.6

NVDlib is a Python library that allows you to interface with the
NIST National Vulnerability Database (NVD), pull vulnerabilities
(CVEs), and Common Platform Enumeration (CPEs) into easily accessible
objects.

### Features

- Search the NVD for CVEs using all parameters allowed by the NVD
  API (recently updated to utilize version 2 of the API). Including
  search criteria such as CVE publish and modification date, keywords,
  severity, score, or CPE name.
- Search CPE names by keywords, CPE match strings, or modification
  dates. Then pull the CVE ID's that are relevant to those CPEs.
- Retrieve details on individual CVEs, their relevant CPE names,
  and more.
- Built in rate limiting according to NIST NVD recommendations.
  Get an API key to allow for a delay argument to be passed. Otherwise
  it is 6 seconds between requests by default.
@
text
@d1 1
a1 1
$NetBSD$
d3 3
a5 3
BLAKE2s (nvdlib-0.7.6.tar.gz) = c339d83c027cc423880b7e68bc0ec93ab12bd8ffbd5bf5752b1b6a219e18e535
SHA512 (nvdlib-0.7.6.tar.gz) = c7cf283b6926bf0ec9d34f1520bc74c410e92f233070cc27796c6ca88154826c665483894114b57a1f58ffb2c479e0d2ef85aeb3c60ae5f5d29b7afc65c679d8
Size (nvdlib-0.7.6.tar.gz) = 541676 bytes
@