CWE Search

关于

CWE Search provides a robust Python interface for interacting with MITRE's Common Weakness Enumeration (CWE) database, designed for security researchers, developers, and vulnerability analysts. This tool enables efficient programmatic querying of vulnerability information, solving the problem of fragmented vulnerability research by offering a unified way to retrieve detailed CWE data, explore relationships and hierarchies, and seamlessly integrate into security tooling and workflows, ultimately automating vulnerability analysis and reporting.

主要功能

• Comprehensive Vulnerability Lookup by CWE ID
• Intelligent Keyword Search across CWE descriptions
• CWE Taxonomy and Relationship Mapping (parents, children, ancestors, descendants)
• Automatic CWE ID Normalization for various input formats
• Seamless MCP Integration via stdio transport
• 1 GitHub stars

使用案例

• Automating vulnerability analysis and reporting pipelines
• Integrating CWE data directly into custom security tools and workflows
• Efficiently querying and exploring vulnerability information for security research