CVE PUBLISH

NAME

cve-publish - Publish a CVE record for a reserved (or...

SYNOPSIS

cve publish [OPTIONS] CVE_ID

DESCRIPTION

Publish a CVE record for a reserved (or rejected) CVE ID.

If the CVE is already published, this action will update its record. A published CVE can only be
moved to the rejected state with an appropriate reject record (see ‘cve reject‘). A published
CVE cannot be moved back to the reserved state.

The CVE record can be specified as a string:

cve publish CVE-2022-1234 -j ’{"affected": [], "descriptions": [], "references": {}, ...}’

Or passed in a file:

cve publish CVE-2022-1234 -f v5_record.json

For information on the required properties in a given CVE JSON record, see the schema in:

https://github.com/CVEProject/cve-schema/blob/master/schema/v5.0/CVE_JSON_5.0_schema.json

Because the CVE Services API only expects the cnaPublishedContainer contents of the full record,
the record you pass to this command can specify just that data, and not the full record.

OPTIONS

-j, --cve-json TEXT

JSON body of CVE record to publish.

-f, --cve-json-file FILENAME

File containing JSON body of CVE record to publish.

--raw

Print response JSON.