A modern vulnerability intelligence platform that aggregates CVE data from multiple authoritative sources into Elasticsearch with a beautiful Kibana dashboard. Auto-updates every 15 minutes to keep your data fresh.

• 300,000+ CVEs indexed from multiple authoritative sources
• Auto-Updating - Watch mode syncs every 15 minutes automatically
• 16-Panel Kibana Dashboard with real-time vulnerability intelligence
• 4 Data Sources - CVE List V5, NVD, EPSS, and CISA KEV
• Simple Setup - 4 commands to get running
• Modern Python CLI - Beautiful interface with rich output

# 1. Start Elasticsearch and Kibana
docker compose up -d

# 2. Sync CVE data (this takes a while - 300K+ CVEs)
python -m cvelk sync

# 3. Setup the dashboard
python -m cvelk setup

# 4. Open the dashboard
open http://localhost:5601/app/dashboards#/view/cvelk-main-dashboard

Keep your CVE data fresh with automatic updates:

# Start watching for updates (every 15 minutes)
cvelk watch

# Custom interval (every 5 minutes)
cvelk watch --interval 5

# Include NVD enrichment (slower but more complete)
cvelk watch --no-skip-nvd

The watch mode runs continuously, pulling the latest CVE data from all sources.

CVElk aggregates vulnerability data from four authoritative sources:

Note: The CVE List V5 is the authoritative source maintained by the CVE Project and updates every 7 minutes. CVElk's watch command syncs every 15 minutes by default to capture all updates.

Each CVE record is enriched with:

• CVSS Scores - Base scores from CVSS v2.0, v3.0, v3.1, and v4.0
• Severity Levels - Critical, High, Medium, Low based on CVSS
• CWE Mappings - Common Weakness Enumeration classifications
• EPSS Score - Probability of exploitation in the next 30 days
• KEV Status - Whether the CVE is in CISA's Known Exploited Vulnerabilities catalog
• KEV Details - Date added, ransomware usage, required action deadline
• Attack Vectors - Network, Adjacent, Local, Physical
• Vulnerability Status - Published, Modified, Analyzed, Rejected

The CVElk dashboard provides comprehensive vulnerability intelligence:

# Full sync from all sources (recommended for initial setup)
cvelk sync

# Watch mode - auto-update every 15 minutes
cvelk watch

# Watch with custom interval
cvelk watch --interval 5      # Every 5 minutes
cvelk watch --interval 30     # Every 30 minutes

# Sync specific years only
cvelk sync --years 2024 --years 2023

# Skip NVD enrichment (much faster)
cvelk sync --skip-nvd

# Skip EPSS or KEV enrichment
cvelk sync --skip-epss --skip-kev

# Set up Kibana dashboard
cvelk setup

# Show statistics
cvelk stats

# Search for CVEs
cvelk search "log4j"
cvelk search CVE-2021-44228

# Show configuration
cvelk config

Configure via environment variables or .env file:

Get a free API key for 10x faster NVD fetching:

1. Visit NVD API Key Request
2. Set NVD_API_KEY=your-key in your environment

Without key: 5 requests/30 seconds | With key: 50 requests/30 seconds

┌─────────────────────────────────────────────────────────────────┐
│                        Data Sources                             │
├─────────────────┬─────────────────┬───────────────┬─────────────┤
│  CVE List V5    │    NVD API      │    EPSS       │  CISA KEV   │
│   (Primary)     │  (Enrichment)   │   (Scores)    │  (Exploited)│
│  ~300K CVEs     │  ~320K CVEs     │  ~300K scores │  ~1.5K CVEs │
└────────┬────────┴────────┬────────┴───────┬───────┴──────┬──────┘
         │                 │                │              │
         └─────────────────┴────────────────┴──────────────┘
                                   │
                            ┌──────▼──────┐
                            │   CVElk     │
                            │  (Python)   │
                            └──────┬──────┘
                                   │
                      ┌────────────▼────────────┐
                      │     Elasticsearch       │
                      │        8.17.0           │
                      │    303,893 documents    │
                      │       183.7 MB          │
                      └────────────┬────────────┘
                                   │
                      ┌────────────▼────────────┐
                      │        Kibana           │
                      │        8.17.0           │
                      │    16-Panel Dashboard   │
                      └─────────────────────────┘

# Clone and install
git clone https://github.com/jgamblin/CVElk.git
cd CVElk
pip install -e ".[dev]"

# Development commands
make lint        # Run linter
make test        # Run tests
make format      # Format code
make type-check  # Type checking

MIT License - see LICENSE for details.

Jerry Gamblin - @jgamblin

• CVE Project - Authoritative CVE repository
• NIST NVD - National Vulnerability Database
• FIRST.org EPSS - Exploit Prediction Scoring
• CISA - Known Exploited Vulnerabilities catalog
• Elastic - Elasticsearch and Kibana