Tyr - get-cve

Installation

cargo install get-cve

Purpose

This command line utility allows to explore fixed CVE on debian/redhat like OS.

The exploration is based on their changelog.

git-cve don't download CVE database to explore all open CVE on a package. There are several other good tools for this exploration.

Usage

To explore all fixed CVE for an installed package:

get-cve <package>

or if several version are installing:

get-cve <package>=<version>

Eg:

# get-cve less
[less => 590-1ubuntu0.22.04.3]
CVE-2014-9488
CVE-2022-46663
CVE-2022-48624
CVE-2024-32487
#

To explore all options run get-cve help

Future features

• explore the next available release for a package,
• explore the local changelog with an alternative way,
• applies a filter on CVE list (eg: get-cve less --filter 2022, for showing only CVE of year 2022)

Authors and acknowledgment

Help will be appreciated. All tools will be developed with rust technology.

License

This project is under MIT license.

Project status

This project is under development and all contributions are welcome.

These tools are provided without any guaranties.