security_exposure
ActiveTool of io.github.blackboxfoundry/livedatalink
One-call known-vulnerability exposure for a vendor/product/package, built on the LiveDataLink cyber domain. Fans out to NVD (CVE search by vendor+product or keyword), the CISA KEV catalog (actively-exploited flag - the highest signal), FIRST EPSS (exploit-probability scores for the most-severe CVEs), and aggregates MITRE CWE weakness types from the matched CVEs. Returns total CVEs, counts by CVSS severity band, KEV membership with the actively-exploited CVEs listed, the highest EPSS score, the critical CVEs, top CWE weakness types, an overall exposure rollup (KEV present -> high), and an evidence list. No matches returns a friendly 0-exposure result; if the cyber source is unavailable that is noted per-source. Exactly one NVD call per invocation. INFORMATIONAL security research, not advice. Package-registry maintenance/staleness signals are out of scope for this tool.
Parameters schema
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"product"
],
"properties": {
"vendor": {
"type": "string",
"description": "Optional vendor to narrow the NVD CPE match (e.g. 'apache', 'openbsd')."
},
"product": {
"type": "string",
"description": "Product or package name to assess (e.g. 'log4j', 'openssl', 'struts')."
},
"version": {
"type": "string",
"description": "Optional version string (informational; shown in the report)."
},
"max_cves": {
"type": "number",
"description": "Max CVEs to pull from NVD for analysis (default 40)."
}
},
"additionalProperties": false
}No endpoints wrapped at confidence ≥ 0.50.
Parent server
io.github.blackboxfoundry/livedatalink
https://github.com/blackboxfoundry/livedatalink
2/7 registries