ndaal Security Advisory: nvulnlookup Security Assessment Results

Metadata

Vulnerabilities (0)

No vulnerabilities.

Raw JSON

{
  "$schema": "https://docs.oasis-open.org/csaf/csaf/v2.1/schema/csaf.json",
  "document": {
    "category": "csaf_informational_advisory",
    "csaf_version": "2.1",
    "distribution": {
      "tlp": {
        "label": "CLEAR"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "nvulnlookup rust-doctor security analysis completed with a score of 92/100 (Great). Security: 98, Performance: 97, Dependencies: 98, Reliability: 92. No critical findings. This advisory documents the security posture of the application.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "The nvulnlookup application has been assessed using rust-doctor, cargo-audit, SQLMap, and 15 fuzz targets with 839,000+ executions. Zero SQL injection vulnerabilities were found. Zero crashes from fuzzing. Zero known CVEs in dependencies. The application uses pure rustls (no OpenSSL) and enforces TLS 1.3.",
        "title": "Security Assessment Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "THIS DOCUMENT IS PROVIDED ON AN 'AS IS' BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY. ndaal GmbH DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS INFORMATION INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS.",
        "title": "Legal Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security@ndaal.eu",
      "issuing_authority": "ndaal Gesellschaft für Sicherheit in der Informationstechnik mbH & Co KG Security Team",
      "name": "ndaal Gesellschaft für Sicherheit in der Informationstechnik mbH & Co KG",
      "namespace": "https://ndaal.eu/csaf"
    },
    "references": [
      {
        "category": "self",
        "summary": "This advisory in CSAF 2.1 format",
        "url": "https://gitlab.com/vPierre/ndaal_public_nvulnlookup/-/raw/main/csaf/2026/002/NDAAL-SA-2026-002.json"
      },
      {
        "category": "external",
        "summary": "nvulnlookup source code",
        "url": "https://gitlab.com/vPierre/ndaal_public_nvulnlookup"
      }
    ],
    "title": "ndaal Security Advisory: nvulnlookup Security Assessment Results",
    "tracking": {
      "current_release_date": "2026-04-05T07:00:00.000Z",
      "generator": {
        "engine": {
          "name": "ndaal CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ndaal-sa-2026-002",
      "initial_release_date": "2026-04-05T07:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-04-05T07:00:00.000Z",
          "number": "1.0.0",
          "summary": "Initial release"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "ndaal Gesellschaft für Sicherheit in der Informationstechnik mbH & Co KG",
        "branches": [
          {
            "category": "product_name",
            "name": "nvulnlookup",
            "branches": [
              {
                "category": "product_version",
                "name": "0.1.23",
                "product": {
                  "name": "ndaal nvulnlookup 0.1.23",
                  "product_id": "CSAFPID-001"
                }
              }
            ]
          }
        ]
      }
    ]
  }
}