https://github.com/jmousqueton/euvd-alert
Automated CVE alerting/reporting tool based on ENISA vulnerability database
https://github.com/jmousqueton/euvd-alert
alert alternative api cve enisa mail mitre nvd python security-tools vulnerabilities vulnerability vulnerability-management
Last synced: 2 months ago
JSON representation
Automated CVE alerting/reporting tool based on ENISA vulnerability database
- Host: GitHub
- URL: https://github.com/jmousqueton/euvd-alert
- Owner: JMousqueton
- License: gpl-3.0
- Created: 2025-04-19T18:33:27.000Z (6 months ago)
- Default Branch: main
- Last Pushed: 2025-06-25T04:32:13.000Z (4 months ago)
- Last Synced: 2025-06-25T05:28:04.479Z (4 months ago)
- Topics: alert, alternative, api, cve, enisa, mail, mitre, nvd, python, security-tools, vulnerabilities, vulnerability, vulnerability-management
- Language: Python
- Homepage: https://vuln.mousqueton.io
- Size: 6.11 MB
- Stars: 3
- Watchers: 2
- Forks: 2
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# EUVD-Alert
**EUVD-Alert** is an automated threat monitoring tool based on the ENISA Vulnerability Database (EUVD). It fetches newly published vulnerabilities daily, filters them using keywords and severity thresholds (CVSS), and generates alerts and reporting via email.
## đ Features
- Daily retrieval of vulnerabilities from the ENISA EUVD API
- Filtering based on CVSS score (e.g., alert if score âĨ 8.0)
- Vendor-based & Product-based filtering (see [keywords.json](keyword.json))
- HTML report generation (daily summary and alert-specific)
- Automated email delivery with formatted vulnerability tables
- CVSS radar chart generation for visual severity analysis
- Tracking of processed vulnerabilities to avoid duplicates
- Add EPSS from [FIRST](https://www.first.org)
- Logging to file feature
## âī¸ Configuration
All settings are managed via the `.env` file
Check [env.sample](env.sample) for explainations
## đŦ Email Output
Emails are sent with HTML-formatted tables and include:
- Alert mode: When critical CVEs are detected based on keywords and severity
- Daily report: Summary of all vulnerabilities published on the day with a link to the website
## đ Radar Charts
Each vulnerability report includes a radar chart visualizing the CVSS vector components, offering a quick look at the severity profile.
## đē Demos
### Monthly report
- [March 2025](https://vuln.mousqueton.io/monthly/2025-03.html)
## đšī¸ Usage
```bash
python3 euvd-alert.py --daily # For daily report (vendors match)
python3 euvd-alert.py --alert # For alert mode (severity & vendors match)
python3 euvd-alert.py --monthly # Monthly vendors/CVSS matrix summary
```
## đ Example of cron
```
5 * * * * cd /opt/EUVD-Alert ; python3 Get-EUVD.py --log > /dev/null 2>&1 python3 AlertAndReport.py -A --log > /dev/null 2>&1
0 5 * * * cd /opt/EUVD-Alert ; python3 AlertAndReport.py -D --log > /dev/null 2>&1
0 4 1 * * cd /opt/EUVD-Alert && /usr/bin/python3 AlertAndReport.py -M --log > /dev/null 2>&1
```
## đ Output Files
- HTML reports: stored in `./web/daily/YYYY-MM-DD.html`
- Radar charts: stored in `./web/radars/`
- Monthly reports: stored in `./web/monthly/YYYY-MM.html`
## đ Requirements
- Python 3.x
- Libraries: `requests`, `fcntl`, `logging`, `pytz`, `smtplib`, etc.
- Cron setup for automation (recommended)
- Webserver
## đ§ Roadmap
- ~~Add EPSS from [FIRST](https://www.first.org)~~ â
- ~~Generate a HTML page also for alert~~ â
- ~~Filtering on product-based~~ â
- Optional Slack/Teams integration
- Web dashboard for historical CVE tracking
- Enhanced analytics and visualizations
- Export options (PDF, CSV)
## đ¨âđģ Author
Julien Mousqueton
[LinkedIn](https://linkedin.com/in/julienmousqueton)
GitHub: [JMousqueton](https://github.com/JMousqueton)
## Contributors
Thanks to all the project contributors
- [Ralle12345](https://github.com/ralle12345/) for the filter on vendors and products
## đĄ License
This project is licensed under the GNU General Public License v3.0.
See the `LICENSE` file for more details.