nvd_api.py•2.03 kB
from typing import Any, Dict
import httpx
from dotenv import load_dotenv
import os
NVD_API_BASE = "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId="
# Load environment variables from .env file
load_dotenv()
# Fetch API key from environment variables
API_KEY = os.getenv("NVD_API_KEY")
headers = {
'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3',
'apiKey': API_KEY
}
async def fetch_cve_details(cve_id: str) -> Dict[str, Any] | None:
"""Fetch CVE details from the NVD API."""
url = f"{NVD_API_BASE}{cve_id}"
async with httpx.AsyncClient(headers=headers) as client:
try:
response = await client.get(url, timeout=30.0)
response.raise_for_status()
data = response.json()
# Extract relevant information
vulnerabilities = data.get("vulnerabilities", [])
if not vulnerabilities:
return {
"description": "No description available",
"cwe": "N/A",
"cvss_score": "N/A"
}
cve_data = vulnerabilities[0].get("cve", {})
cve_description = cve_data.get("descriptions", [{}])[0].get("value", "No description available")
cwe = cve_data.get("weaknesses", [{}])[0].get("description", [{}])[0].get("value", "N/A")
cvss_score = cve_data.get("metrics", {}).get("cvssMetricV31", [{}])[0].get("cvssData", {}).get("baseScore", "N/A")
return {
"description": cve_description,
"cwe": cwe,
"cvss_score": cvss_score
}
except httpx.RequestError:
pass
except httpx.HTTPStatusError:
pass
except ValueError:
pass
except Exception:
pass
return {
"description": "No description available",
"cwe": "N/A",
"cvss_score": "N/A"
}
