clearlinux / cve-check-tool

Original Automated CVE Checking Tool
GNU General Public License v2.0
204 stars 78 forks source link

XML Vulnerability Feed Retirement #76

Open seba-eng opened 4 years ago

seba-eng commented 4 years ago

nvd.nist.gov does not host the xml files anymore (see https://nvd.nist.gov/General/News/XML-Vulnerability-Feed-Retirement) which makes the update fail and prevents the tool from running.

requinham commented 4 years ago

UP !

mid-kid commented 3 years ago

This is currently making the tool completely unusable, and it took me a while to figure out that this was the issue. The tool returns a rather unrelated error, because the download error isn't caught:

Update of db forced
Unable to extract /home/user/NVDS/nvdcve-2.0-2002.xml.gz
DB update failure

It's a shame that this tool seems abandoned...