NVD CVE Convert

Utility to convert an NVD CVE JSON 1.1 data feed file into the legacy XML format. The XML format was retired in October of 2019.

This is not intended to be a 100% accurate backwards compatible conversion, but a "best effort". Some data in JSON format does not translate back to the XML version.

Flags

  -cpe-file string
        path to the NVD CPE JSON Match Feed data file (gzipped). See https://nvd.nist.gov/vuln/data-feeds
  -cve-file string
        path to the NVD CVE JSON Feed data file (gzipped). See https://nvd.nist.gov/vuln/data-feeds
  -xml-file string
        path to the resulting output XML file

Running

Example run:

$ go run main.go \
    -cve-file=nvdcve-1.1-modified.json.gz \
    -cpe-file=nvdcpematch-1.0.json.gz \
    -xml-file=nvdcve-1.1-modified.xml

Alloc = 135 MiB	TotalAlloc = 5831 MiB	Sys = 480 MiB	NumGC = 349
Completed in 10.121973219s