vdanen/rhvex-cve

Dataset Card for rhvex-cve

This Dataset is extracted from publicly available Vulnerability Exploitability eXchange (VEX) files published by Red Hat.

Dataset Details

Red Hat security data is a central source of truth for Red Hat products regarding published, known vulnerabilities. This data is published in form of Vulnerability Exploitability eXchange (VEX) available at: https://security.access.redhat.com/data/csaf/v2/vex/

This Dataset is created by extracting relevant information from this data and converting into a format, which can be used by models for fine-tuning or any other methods of data augmentation like RAG.

While useful on its own, using it with the https://huggingface.co/datasets/vdanen/rhvex-affects dataset will allow you to map affects information to the CVE information contained in this dataset.

Data is extracted and uploaded using the following script: https://github.com/vdanen/vex-db

• —Curated by: Vincent Danen
• —License: Creative Commons Attribution 4.0 International License

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

References

• —https://www.redhat.com/en/blog/future-red-hat-security-data
• —https://www.redhat.com/en/blog/vulnerability-exploitability-exchange-vex-beta-files-now-available
• —https://github.com/vdanen/vex-db

Disclaimer

This is not an official Red Hat supported repository. Rather this Dataset is created as a personal effort by Vincent Danen. Red Hat in no way is responsible for the correctness or the accuracy of this data. It is not meant to be used in any kind of production at this stage and structure/content may change without warning.