This utility creates a CycleDX vulnerabilities format JSON file from the OpenJDK Vulnerability Advisory page.
Install the pip dependencies:
python3 -m pip install -r requirements.txt
Run the fetchCVE.py
script passing the date from the OpenJDK Vulnerability Advisory page.
./fetchCVE.py --date <YYYY-MM-DD>
e.g:
./fetchCVE.py --date 2023-01-17
Creates the following file:
[
{
"id": "CVE-2023-21835",
"link": "https://nvd.nist.gov/vuln/detail/CVE-2023-21835",
"components": "security-libs/\njavax.net.ssl",
"score": "5.3",
"affected_versions": [
"11",
"13",
"15",
"17",
"19"
]
},
{
"id": "CVE-2023-21830",
"link": "https://nvd.nist.gov/vuln/detail/CVE-2023-21830",
"components": "other-libs",
"score": "5.3",
"affected_versions": [
"7",
"8"
]
},
{
"id": "CVE-2023-21843",
"link": "https://nvd.nist.gov/vuln/detail/CVE-2023-21843",
"components": "client-libs/\njavax.sound",
"score": "3.7",
"affected_versions": [
"7",
"8",
"11",
"13",
"15",
"17",
"19"
]
}
]