CVE / NVD Security Vulnerability Monitor

Track newly published CVEs via the public National Vulnerability Database API (v2). Diff alerts on score re-scoring, status changes (analyzed → modified), and description edits. Maps to "security monitoring / CVE intel / supply-chain security" briefs.

Built 2026-05-03 as Demo #22.

Run

. ~/freelance/.venv/bin/activate
cd ~/freelance/portfolio_demos/cve_nvd_monitor
export NVD_API_KEY=...    # optional — bumps quota 5→50 req per 30s
python monitor.py --reset
python monitor.py --once

Result

• 100 CVEs from last 48h baselined ✅
• Idempotent re-run, 4 simulated CVSS deltas detected ✅
• CVSS v3.1 → v3.0 → v2 fallback for score detection ✅
• Use cases: SOC dashboards, dependency-bot triage, supply-chain security ✅