[Tool] CVE Daily — concise, vendor-neutral CVE briefs (NVD+OSV, KEV, deps.dev transitive upgrades)
该工具整合NVD和OSV数据,优先展示供应商公告并提供简明修复建议。其Transitive Upgrade Assistant功能利用deps.dev图表推荐最小安全版本以应对传递依赖漏洞。 2025-10-27 10:57:53 Author: www.reddit.com(查看原文) 阅读量:0 收藏

I built CVE Daily to make CVE triage faster. It aggregates NVD and OSV, surfaces vendor advisories first, and adds short, vendor-neutral guidance on what to patch or mitigate now. A Transitive Upgrade Assistant uses deps.dev graphs to suggest the minimum safe host version when a vulnerable dependency is pulled in transitively.

Highlights

*NVD + OSV aggregation

*Vendor advisories up front

*Concise “what to do now” notes

*KEV badges + prioritization hints

*Actionable tags/filters (vendor, product, CWE)

*EOL/EOS context for impacted products

*Optional RSS exports for teams

Site: https://cvedaily.com

If you try it on today’s CVEs and something feels off or missing, point me to the page and I’ll fix it.


文章来源: https://www.reddit.com/r/netsec/comments/1ohbb23/tool_cve_daily_concise_vendorneutral_cve_briefs/
如有侵权请联系:admin#unsafe.sh