Security Advisory Scout

aleff-githubSecurity

Investigate CVE, GHSA, and OSV security advisories using source evidence from NVD and OSV, FIRST EPSS exploitation probability, and CISA KEV known-exploitation information. Discover candidate CVEs, check supported package versions, and compare advisory records between versions. Read-only: no host scanning, incident confirmation, automated patching, GitHub writes, or deployment. Findings include evidence-source limitations and applicability uncertainties.

Where it stands

Skills

  • advisory-triage

Starter prompts

  • Triage CVE-2021-44228 and separate CVSS, EPSS, CISA KEV, affected products, and fixes.
  • Check npm lodash 4.17.21 for known OSV security advisories.
  • Compare known advisories for npm lodash 4.17.21 and 4.18.1.