OWASP/cve-lite-cli v1.33.0

v1.33.0 - EPSS Priority Signal

on GitHub

Added

• EPSS Priority Signal: combines CVSS severity with EPSS exploitation likelihood percentile into four actionable tiers - fix_now (high impact + top 10% EPSS), fix_soon (high impact), monitor (lower severity + top 10% EPSS), low_priority (all else). Surfaces as an EPSS Priority column in the verbose terminal table, a prioritySignal field in JSON output, and a column plus four-tier legend in the HTML report. Null when no EPSS data is available.

Fixed

• Scan header now counts unique packages (by name@version) rather than advisory rows; the same package appearing under multiple advisory sources was previously counted twice.

Validation

• npm test
• npm run build