fixes #1391 - replacing old datasource to nist#1986
Conversation
✅ Deploy Preview for dashy-dev ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
There was a problem hiding this comment.
Pull request overview
This PR updates the CVE-Vulnerabilities widget to use the NIST NVD (CVE v2.0) API instead of the deprecated cvedetails.com feed, restoring functionality that broke in November 2023.
Changes:
- Switched the
cveVulnerabilitieswidget API endpoint from the old cvedetails JSON feed to the NVD CVE 2.0 REST API. - Reworked the
CveVulnerabilitieswidget’s data fetching to call the NVD API (including pagination, total results, and filter query building). - Updated the widget’s data processing to map NVD response fields (ID, metrics, descriptions, dates) into the widget’s internal structure and removed the exploit-count display from the UI.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
| src/utils/defaults.js | Points widgetApiEndpoints.cveVulnerabilities at the new NVD CVE 2.0 REST endpoint. |
| src/components/Widgets/CveVulnerabilities.vue | Adapts the widget to the NVD response shape, adds query-building helpers and pagination against the new endpoint, and adjusts the rendered fields accordingly. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
fixing parsing of severity level
lissy93
left a comment
There was a problem hiding this comment.
LGTM - Thanks!
I've pushed a few very small changes, just to make the linter happy. Your changes are working perfectly, so I'll merge now :)
|
Just a heads up, but have made some changes to the widget in #2112 - kept what you did with the NIST data source, but needed to fix some issues raised in #2099, and also re-introduced displaying the CVSS (numeric score) instead of just HIGH/MEDIUM/LOW. Everything else should still work exactly how you intended it :) |
Category: Bugfix
Overview Fixing widget cveVulnerability - replaced old datasource api to NIST api
Issue Number #1391
New Vars N/A
Screenshot N/A
Code Quality Checklist (Please complete)