cwe-data 1.0.0

Request CWE data offline
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60

# cwe-data

CLI tool to query CWE (Common Weakness Enumeration) data.

## Features

- Query Weaknesses, Categories, and Views by ID
- Search across all CWE entries by keyword
- All data embedded in binary (no external files needed at runtime)
- Auto-downloads CWE database on first build

## Build

```bash
cargo build --release
```

On first build, `cwe.json` is automatically downloaded from the [CWE-CAPEC REST-API-wg repository](https://github.com/CWE-CAPEC/REST-API-wg).
Following file is downloaded: https://github.com/CWE-CAPEC/REST-API-wg/blob/main/json_repo/cwe.json

That file is split and imbedded inside the executable. So no internet access is used while using the app, only during build.

## Usage

```bash
# Get by ID (numeric or with CWE prefix)
cwe-data get 79
cwe-data get CWE-79

# Search by keyword (case-insensitive)
cwe-data search injection
cwe-data search "buffer overflow"
cwe-data search xss --limit 5          # Limit results
cwe-data search memory --line-limit 3  # Limit matching lines per entry
```

Output is JSON:

```json
{
  "ID": "79",
  "Name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
  "Abstraction": "Base",
  ...
}
```

---

## Data Source

CWE data from [MITRE CWE](https://cwe.mitre.org/) via the [CWE-CAPEC REST-API-wg](https://github.com/CWE-CAPEC/REST-API-wg) repository.

## License

The code in this project is licensed under the MIT or Apache 2.0 license.

All contributions, code and documentation, to this project will be similarly licensed.

CWE data is provided by MITRE. See [CWE Terms of Use](https://cwe.mitre.org/about/termsofuse.html).