psirt

Documentation and Tools for Cisco's PSIRT openVuln API

VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordinated vulnerability disclosure. VINCE is a Python-based web platform.

Autogenerate vulnerability reports for Cisco IOS, NX-OS and ACI devices using the PSIRT OpenVuln API.

FIRP - First Incident Response Powershell

Home of the Mirantis PSIRT

Self-hosted vulnerability database API: ask "is this version vulnerable?" and get answers from NVD, OSV, CISA KEV, EPSS, distro errata (Red Hat, Oracle Linux) and vendor PSIRTs (Cisco, Fortinet, Palo Alto, ...), with fixed versions.

PSIRT-Framework Pdf Download And Enjoy

CRA Article 14 dossiers from an embedded Linux build tree. Scan Yocto or Buildroot, decide affectedness with the evidence shown, emit CSAF, OpenVEX and SRP with the statutory clock running. Zero runtime dependencies, offline-capable.

A Cisco PSIRT (Support API) Web App Using Flask

PoC + automated reproducer for nokia/kong-oidc Finding #1 — Authentication Bypass via X-Userinfo Header Forgery (CVSS 7.5/ High). Reported to Nokia PSIRT.

This development of Cisco psirt automation, allows users the ability to pull live vulnerability (cve) data from Cisco's repository

Dashboard that tracks Cisco security advisories through the public openVuln API

Python tool for vulnerability management that queries Cisco PSIRT openVuln API against an asset inventory. Maps Cisco devices (IOS/NX-OS) to relevant security advisories when VA scanners can't reach all devices.

Reproduce-first triage for vulnerability and security reports: run the PoC in a rootless, network-less sandbox, check policy and duplicates, get a verdict with an evidence bundle. Python CLI and GitHub Action.

Fleet-wide firewall impact analysis, straight from Cisco. Checks every firewall in your inventory against Cisco's published advisory data and writes one HTML impact report.

Used to pull data from the OpenVuln API

EU Cyber Resilience Act Article 14 reportability and Clock of Record: evidence-backed reporting decisions, five separate timestamps, and a hash-chained audit ledger. Decision support, not legal advice.

Documentation and Tools for Cisco's PSIRT openVuln API

Automated Python pipeline designed for Product Security Incident Response Teams (PSIRT) to ingest CycloneDX SBOM inventories and execute risk-based CVSS v3.1 vulnerability triage.

Coordinated vulnerability disclosure, the CVE Program, CSAF, VEX and vulnerability scoring as an OKF bundle for Meerkat and MCP