Pricing

$2,500.00 / 1,000 cra exploited-vulnerability evidence and art. 14 deadline clock runs

Try for free

Go to Apify Store

CRA Exploited-Vulnerability Evidence and Art. 14 Deadline Clock

Try for free

Takes a CycloneDX or SPDX JSON SBOM (or a purl list), asks OSV.dev for the advisories that affect each exact component version (OSV evaluates the version ranges per ecosystem), then checks each CVE against the CISA Known Exploited Vulnerabilities catalog and the ENISA EUVD…

Pricing

$2,500.00 / 1,000 cra exploited-vulnerability evidence and art. 14 deadline clock runs

Rating

0.0

(0)

Developer

WritersLogic

Actor stats

Bookmarked

Total users

Monthly active users

3 minutes ago

Last modified

Categories

Agents

Developer tools

Security

Sbom

sbom

Optional

CycloneDX 1.4-1.6 or SPDX 2.2/2.3 JSON SBOM, as an object or a JSON string, up to 5 MB. Components need a purl with a version (SPDX: a purl externalRef). Exactly one of sbom or purls.

Type:string

Purls

purls

Optional

Alternative to sbom: versioned package URLs, e.g. pkg:maven/org.apache.logging.log4j/log4j-core@2.14.1. Ecosystems: npm, pypi, maven, golang, cargo, nuget, gem, composer, hex, pub, swift.

Type:array

Product

product

Optional

Your product with digital elements; used only to fill the draft fields (defaults to the SBOM's own product name).

Type:object

Awareness_time

awareness_time

Optional

When the manufacturer became aware, ISO 8601 with UTC offset (e.g. 2026-11-04T09:30:00Z). Defaults to now. Taken as given; this agent cannot verify it.

Type:string

Fix_available_at

fix_available_at

Optional

When a corrective or mitigating measure became available, ISO 8601 with UTC offset; sets the Art. 14(2)(c) final-report date.

Type:string

Issue_record

issue_record

Optional

Default false. When true, adds a standalone awareness_record (evidence snapshot, SBOM digest, evaluation time; signed with the hub attestation key when configured) for you to retain. It does not switch off the hub's standard signed response credential, which every response carries and which already binds the output and input digests to a timestamp.

Type:boolean

CISA Known Exploited Vulnerabilities Scraper

neuton/cisa-known-exploited-vulnerabilities-scraper

Export CISA Known Exploited Vulnerabilities catalog records by CVE, vendor, product, date added, ransomware flag, or keyword. Built for security prioritization and vulnerability intelligence.

Neuton Scripts

CVE Vulnerability Lookup

perryay/cve-vulnerability-lookup

Look up known vulnerabilities (CVEs) for software by name and version. Queries the NIST NVD database to find security issues affecting your tech stack.

Perry AY

OSV Package Vulnerability Scanner — Dependency Advisories

ka1tetsu/vivlica-osv-package-security

Check up to 20 exact software package versions against OSV.dev known vulnerability advisories with original links.

Takahashi Kiseki

Canadian Registered Charities (CRA) – Open Data

loudtzu/cra-charities

Registered charities in Canada from the CRA T3010 open data: BN, name, designation, category, city, province. No directors or contact details.

LOUDTZU TZULOUD

Package Dependency Risk Scanner: npm & PyPI Vulnerabilities

centorprat/package-dependency-risk-scanner

Give it npm or PyPI package names. For each it reads the registry metadata and latest version (and npm download counts) and queries OSV.dev for known security advisories, then composes a risk brief: known vulnerabilities, deprecation, staleness and a signal. Keyless, agent-callable.

Centor Prat

CRA SBOM Audit

eloquent_mountain/cra-sbom-audit

Lockfile or SBOM in, CRA evidence pack out: OSV flaws, fixes, licence risk and Annex I mapping.

Paco

CISA KEV Scraper - Exploited CVEs & Remediation Dates

thirdwatch/cisa-kev-scraper

Export CISA's Known Exploited Vulnerabilities catalog. Filter actively exploited CVEs by vendor, product, date, ransomware use, keywords, and remediation deadline.

Thirdwatch

OSV Vulnerability Scraper - Package Risk Data

benthepythondev/osv-vulnerability-scraper

Scrape OSV vulnerability data for open-source packages: CVE/GHSA IDs, summaries, affected ranges and references.

Ben

OSV Package Vulnerability Scanner

technicaldost/osv-package-vulnerability-scanner

Returns known vulnerabilities from the OSV database for packages in npm, PyPI, Maven, Go, NuGet, RubyGems and crates.io: vulnerability ID, aliases (CVE), severity, summary and fixed versions. Input: package names and versions.