Skip to content

Releases: badchars/cve-mcp

Release list

v0.2.0 — 41 Tools, 11 Data Sources

v0.2.0 — 41 Tools, 11 Data Sources Latest
Latest

Choose a tag to compare

View all tags
@badchars badchars released this 06 Jul 19:27
v0.2.0
e483676

What's New

cve-mcp expands from 23 to 41 vulnerability intelligence tools across 11 data sources.

New Providers (9)

Provider Tools Auth
Shodan CVEDB/InternetDB shodan_cve, shodan_product, shodan_ip_vulns None
VulnCheck vulncheck_kev, vulncheck_cpe, vulncheck_purl Optional
Vulners vulners_lookup, vulners_search Optional
Nuclei Templates nuclei_check None
Metasploit msf_check None
NVD CPE cpe_search, cpe_match Optional
CIRCL circl_cve None
AttackerKB attackerkb_assess Optional
MITRE ATT&CK cve_to_attack None

Enhanced Existing Tools

  • CWE — 3 new tools (cwe_get, cwe_hierarchy, cwe_top25) backed by MITRE CWE REST API with static fallback
  • CVSS — cvss_parse now supports both v3.1 and v4.0 vectors (auto-detects version)
  • Enrichment — cve_enrich queries 8 sources in parallel (was 5), adds Shodan + Nuclei + Metasploit signals
  • Risk Score — New exploit multiplier: CVSS × EPSS × KEV × Exploit (1.5x when Nuclei/MSF module exists)
  • Source Check — cve_list_sources now monitors 11 sources

New Environment Variables

VULNCHECK_API_KEY    # Optional. VulnCheck extended KEV, CPE, PURL search
VULNERS_API_KEY      # Optional. Vulners vulnerability search (200+ sources)
ATTACKERKB_API_KEY   # Optional. AttackerKB community assessments

Install

npx cve-mcp

Full Changelog: https://github.com/badchars/cve-mcp/blob/main/CHANGELOG.md

Assets 2
Loading

v0.1.0 — Initial Release

v0.1.0 — Initial Release

Choose a tag to compare

View all tags
@badchars badchars released this 25 Jun 20:28
v0.1.0
023dd7c

cve-mcp v0.1.0

23-tool MCP server for CVE & vulnerability intelligence.

Features

  • NVD — Search, get details, recent CVEs, product lookup (4 tools)
  • EPSS — Exploitation probability scores and top CVEs (2 tools)
  • CISA KEV — Known exploited vulnerabilities check, search, recent (3 tools)
  • GitHub Advisory — Security advisory search and details (2 tools)
  • OSV — Package vulnerability query, details, batch (3 tools)
  • Exploit — Public PoC search via GitHub repos (1 tool)
  • CWE — Weakness lookup by ID or keyword (1 tool)
  • CVSS — v3.1 vector parser with score calculation (1 tool)
  • Meta — Full enrichment, risk prioritization, trending, compare, sources, report (6 tools)

Data Sources

Source Auth
NVD Optional NVD_API_KEY
EPSS None
CISA KEV None
GitHub Advisory Optional GITHUB_TOKEN
OSV None

Quick Start

npx cve-mcp

Risk Score Formula

Risk Score = CVSS Base × EPSS Score × KEV Multiplier (2× if in KEV)

Full Changelog: https://github.com/badchars/cve-mcp/commits/v0.1.0

Loading