[BUG] CVE-Vulnerabilities widget no longer works as of November 2023

Lissy93 / dashy

🚀 A self-hostable personal dashboard built for you. Includes status-checking, widgets, themes, icon packs, a UI editor and tons more!

https://dashy.to

MIT License

17.98k stars 1.36k forks source link

[BUG] CVE-Vulnerabilities widget no longer works as of November 2023 #1391

Open airplane-flight opened 12 months ago

airplane-flight commented 12 months ago

Environment

Self-Hosted (Docker)

System

Ubuntu Server 22.04.3, Docker 24.0.5

Version

2.1.1

Describe the problem

The CVE-Vulnerabilies plugin stopped functioning on 16 November 2023 and now displays the message "We released new APIs and this endpoint is discontinued as of 16 November 2023. Updating your integrations is strongly recommended. Please visit www.cvedetails.com for more information"

Additional info

Screenshot 2023-11-17 at 9 44 27 AM

Please tick the boxes

[X] You have explained the issue clearly, and included all relevant info
[X] You are using a supported version of Dashy
[X] You've checked that this issue hasn't already been raised
[X] You've checked the docs and troubleshooting guide
[X] You agree to the code of conduct

liss-bot commented 12 months ago

If you're enjoying Dashy, consider dropping us a ⭐
_{🤖 I'm a bot, and this message was automated}

Ouroboros1337 commented 10 months ago

Is this going to be fixed?

TexZeTech commented 5 months ago

So as of 2024-05-29 this is the current state of the CVE output.

Any news on an update?

timowevel1 commented 4 months ago

Still not working

TheBrenny commented 3 months ago

I wouldn't be surprised if this gets marked as a "Won't Fix". CVE Details has gone to a paid model, and for the low low price of $1500 per month (yes, one-thousand five-hundred per month), there's probably zero interest from anyone in the FOSS community to push this through.

Suggest moving to NIST's NVD as an alternate.

CySecZH commented 2 months ago

I wouldn't be surprised if this gets marked as a "Won't Fix". CVE Details has gone to a paid model, and for the low low price of $1500 per month (yes, one-thousand five-hundred per month), there's probably zero interest from anyone in the FOSS community to push this through.

Suggest moving to NIST's NVD as an alternate.

If I understand right, in the same article they state at the end of "What's included in the free trial?"

API access (up to 5 requests per minute)

-->So maybe widget could be rewritten for using credentials to get info and max rate of 5 / min I'd prefer to use a widget without needing of an additional account too to be honest.