import { email } from "https://esm.town/v/std/email"; import { blob } from "https://esm.town/v/std/blob"; const KEV_URL = "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"; const BLOB_KEY = "seen_cves"; async function checkNewVulnerabilities() { // Fetch the current KEV catalog const response = await fetch(KEV_URL); const data = await response.json(); const currentVulnerabilities = new Set(data.vulnerabilities.map(v => v.cveID)); // Get the previously seen CVEs from blob storage let seenCVEs = new Set(await blob.getJSON(BLOB_KEY) || []); // Find new CVEs const newCVEs = [...currentVulnerabilities].filter(cve => !seenCVEs.has(cve)); if (newCVEs.length > 0) { // Send email notification const subject = `New Vulnerabilities in CISA KEV Catalog`; const text = `The following new CVEs have been added to the CISA Known Exploited Vulnerabilities catalog:\n\n${newCVEs.join('\n')}`; await email({ subject, text }); // Update the seen CVEs in blob storage await blob.setJSON(BLOB_KEY, [...currentVulnerabilities]); } } export default async function server(req: Request): Promise { if (req.method === "POST") { await checkNewVulnerabilities(); return new Response("Cron job executed successfully", { status: 200 }); } return new Response(` CISA KEV Monitor

CISA KEV Monitor

This is a cron job that monitors the CISA Known Exploited Vulnerabilities catalog for new entries.

View source: ${import.meta.url.replace("esm.town", "val.town")}

`, { headers: { "Content-Type": "text/html" }, }); }

cronJobToCheckCISAKEV

Versions

v0