CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

security/go-cve-dictionary 0.16.2_7

Build local copies of vulnerabilities from NVD and JVN

Port info

Maintainer
girgen@FreeBSD.org
Packages
latest: 0.16.2_7
Upstream
up to date
Last update
to 0.16.2_7 · d81b7ba3c3
Quarterly
2026Q4: 0.16.2_7 · last MFH 60647eff54
WWW
https://github.com/vulsio/go-cve-dictionary/
Links
cgit · VuXML

Install

Package
# pkg install go-cve-dictionary
installs 0.16.2_7 from latest; from quarterly (2026Q4) 0.16.2_7
Port
# cd /usr/ports/security/go-cve-dictionary && make install clean
Size
7.6 MiB download · 26 MiB installed
Depends on
security/ca_root_nss 3.132
License
APACHE20
Creates
user vuls, group vuls
pkg-message
Shown after installing
Congratulations, you have installed go-cve-dictionary!

Setup go-cve-dictionary to use you preferred database type and set up access by
editing the config file at /usr/local/etc/go-cve-dictionary.yaml. There's a
default setup for your convenience using sqlite3, but you can also choose
Redis, PostgreSQL or MySQL if you prefer that.

go-cve-dictionary does not ship any CVE database. Instead, to download CVEs
from 2002 until present and keep them updated, activate the periodic script by
running

sysrc -f /etc/periodic.conf daily_go_cve_dictionary_enable="YES"

Then, to fetch the NVD database of CVEs immediately, run

/usr/local/etc/periodic/daily/go-cve-dictionary

To enable the go-cve-dictionary service, edit
/usr/local/etc/go-cve-dictionary.yaml and set bind and port, and then activate
and start the service using:

sysrc go_cve_dictionary_enable="YES"
service go-cve-dictionary start

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 160.16.2_70.16.2_6–
FreeBSD 150.16.2_70.16.2_6–
FreeBSD 140.16.2_70.16.2_60.16.2_7

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 150.16.2_70.16.2_6–
FreeBSD 140.16.2_70.16.2_60.16.2_7

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 0.16.2_7.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (66)

Dmitri Goutnik (dmgk) · 0.5.5_5
all: Bump PORTREVISION after lang/go{118,119} update
f05c98fffb
Stefan Eßer (se) · 0.5.5_4
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 0.5.5_4
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Dmitri Goutnik (dmgk) · 0.5.5_4
all: Bump PORTREVISION after Go update

Bump Go ports PORTREVISION after GO_DEFAULT and lang/go118 update.
4476f89764
Dmitri Goutnik (dmgk) · 0.5.5_3
all: Bump PORTREVISION after lang/go{117,118} update
153cb65ac8
Dmitri Goutnik (dmgk) · 0.5.5_2
*/*: Bump port revisons after lang/go{117,118} update
309cdeccd8
Guangyuan Yang (ygy) · 0.5.5_1
*/*: Bump PORTREVISION after lang/go 1.18 update
d690b5102f
Mathieu Arnold (mat) · 0.5.5
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 0.5.5
Remove # $FreeBSD$ from Makefiles.
305f148f48
Dmitri Goutnik (dmgk) · 0.5.5
security/go-cve-dictionary: Update to 0.5.5

- Pet portclippy while here

Changes:	https://github.com/kotakanbe/go-cve-dictionary/releases/tag/v0.5.5
PR:		251653
Submitted by:	Alexandru Ciobanu <iscandr@gmail.com> (maintainer)
7e41b27d52
Dmitri Goutnik (dmgk) · 0.3.1
Go ports: cleanup, finish transition to USES=go started with r505321 (cat. misc-shells)

- Remove custom build/install targets left in place after r505321
- Switch to the new GO_TARGET tuple syntax introduced in r512001
- Switch to go:modules when upstream already uses them

Reviewed by:	tobik
Approved by:	araujo (mentor), portmgr (adamw)
Differential Revision:	https://reviews.freebsd.org/D21743
67c4b925b7
Mathieu Arnold (mat) · 0.3.1
Convert to UCL & cleanup pkg-message (categories s)
bc89cd3d2c
Tobias Kortkamp (tobik) · 0.3.1
security/go-cve-dictionary: USES=go does not take any arguments

- Prepare for D19570

Submitted by:	Dmitri Goutnik <dg@syrec.org>
Approved by:	portmgr blanket
Differential Revision:	https://reviews.freebsd.org/D19802
ab6448cc92
Steve Wills (swills) · 0.3.1
security/go-cve-dictionary: Update to 0.3.1

PR:		233524
Submitted by:	Alexandru Ciobanu <iscandr@gmail.com> (maintainer)
84a0c7abb3
Richard Gallamore (ultima) · 0.1.1.1
* Updated to 0.1.1 * Update build dependencies * Reorder GH_TUPLE alphabetically * Remove parts of the post-patch target from Makefile(fixed upstream)

PR:		221329
Submitted by:	Alexandru Ciobanu (maintainer)
Approved by:	lifanov (mentor, implicit)
1452ba2d84
Richard Gallamore (ultima) · 0.1.0.76
This is tool to build a local copy of the National Vulnerabilities Database(NVD) and the Japan Vulnerability Notes (JVN). NVD and JVN contain security vulnerabilities according to their CVE identifiers, including exhaustive information and a risk score. The local copy is generated in sqlite format, and the tool has a server mode for easy querying.

WWW: https://github.com/kotakanbe/go-cve-dictionary/

PR:		220561
Submitted by:	Alexandru Ciobanu <iscandr@gmail.com> (maintainer)
Reviewed by:	matthew (mentor), koobs, mat
Approved by:	matthew (mentor)
Differential Revision:	https://reviews.freebsd.org/D11745
fda3db8dd1