The CISA recently started to publish the Known Exploited Vulnerabilities Catalog Enrichment to help federal agencies keep up with exploited vulnerabilities.

The data they provide is minimal, so I have built this jupyter notebook to enrich the data using the CIRCL public CVE API to add the following data points:

• CWE
• CVE Published Date
• CVE Modified Date
• Reference URLs
• CPE 2.3 Data

A Github Action runs every 6 hours and updates the following files:

• cisa_enriched.csv
• cisa_enriched.json