cvelint

KO | EN

gitlite — search

#javascript #python #react #ai #llm #golang #go #android #docker #macos #java #awesome #cli #mcp

(★ 15)

CLI tool to validate CVE v5 JSON records.

cvelint Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# cvelint

CVE records in the [v5 JSON schema](https://github.com/CVEProject/cve-schema/tree/master/schema/v5.0) may include errors that are neither enforceable by a schema, nor validated on the backend in CVE Services when a CVE record is created/updated.
This CLI tool aims to validate CVE records for such errors so they can be fixed, and changes to the CVE schema can be made based on these findings.

## Installation

### Binary Releases

For Linux, macOS, or Windows, you can download a binary release [here](https://github.com/mprpic/cvelint/releases).

### Build from Source

```bash
$ git clone https://github.com/mprpic/cvelint; cd cvelint
$ make build
$ ./bin/cvelint -h
```

## Usage

```bash
$ git clone https://github.com/CVEProject/cvelistV5  # Download all CVE v5 records
$ ./cvelint -select E005 -cna redhat ./cvelistV5/cves/2023/
Collected 13501 files; checked 222 files.

CVE-2023-3618 (redhat) -- /home/user/cvelistV5/cves/2023/3xxx/CVE-2023-3618.json
  E005  Incorrect CVSS v3 severity: "high"; should be "medium" (at "containers.cna.metrics.1.cvssV3_1")

Found 1 error.
$ ./cvelint -show-rules  # Display available validation rules
$ ./cvelint -h  # Display help
```

CVE JSON can be piped directly to `cvelint` instead of passing a file path:

```bash
$ cat CVE-2023-3618.json | cvelint
$ curl -s https://cveawg.mitre.org/api/cve/CVE-2023-3618 | cvelint
$ echo '{"cveMetadata":...}' | cvelint -select E005 -format json
```

You can also pass `-` as the file argument to explicitly read from stdin:

```bash
$ cvelint - < CVE-2023-3618.json
```

## GitHub Action

[cvelint-action](https://github.com/jgamblin/cvelint-action) runs daily and produces a CSV and JSON output of all errors in the current CVE v5 data set.

cvelint

cvelint Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

cvelint

cvelint Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README