Nuclei CVE Analyzer

A fast CLI tool for analyzing CVE coverage in Nuclei templates.

Nuclei CVE Analyzer takes a list of CVE IDs, scans a local Nuclei template repository, and determines which CVEs already have matching templates and which represent potential template coverage gaps.

Built for security researchers, vulnerability hunters, and Nuclei contributors who want a quick way to identify missing CVE coverage.

Features

• Parse CVE IDs from text files
• Parse CVE records from a local CVE database
• Scan Nuclei YAML/YML templates
• Detect CVEs referenced by Nuclei templates
• Identify CVEs without matching templates
• Deduplicate CVE entries automatically
• Multithreaded CVE analysis
• Optional system-wide CVE discovery
• Export results to JSON and CSV
• Generate separate found, missing, and template-usage reports
• Clean terminal output powered by Rich

The project deliberately focuses on template coverage rather than external vulnerability scoring or enrichment services.

Example

Input:

CVE-2021-44228
CVE-2021-45046
CVE-2022-26134
CVE-2023-21840
CVE-2023-22809

Example output:

CVE             STATUS
CVE-2021-44228  FOUND
CVE-2021-45046  FOUND
CVE-2022-26134  FOUND
CVE-2023-21840  MISSING
CVE-2023-22809  MISSING

This makes it easy to spot CVEs that may be candidates for new Nuclei templates.

Installation

Clone the repository:

git clone https://github.com/YOUR_USERNAME/nuclei-cve-analyzer.git
cd nuclei-cve-analyzer

Create a virtual environment:

python3 -m venv .venv
source .venv/bin/activate

Install dependencies:

pip install -r requirements.txt

Usage

Scan a CVE list

python3 nuclei_analyzer.py \
    -f example_cves.txt \
    -n /path/to/nuclei-templates

Use multiple threads

python3 nuclei_analyzer.py \
    -f example_cves.txt \
    -t 16 \
    -n /path/to/nuclei-templates

Save results

python3 nuclei_analyzer.py \
    -f example_cves.txt \
    -t 16 \
    -o output/results.json \
    -n /path/to/nuclei-templates

Scan the local system for CVE references

python3 nuclei_analyzer.py \
    --scan-system \
    -n /path/to/nuclei-templates

Show help

python3 nuclei_analyzer.py --help

Arguments

Output

The analyzer generates several reports inside the output directory.

Combined Results

Contains the complete analysis:

output/results_YYYYMMDD_HHMMSS.json

Found CVEs

CVEs from the input set that have matching Nuclei templates:

output/found_cves.json

Missing Templates

CVEs from the input set without matching templates:

output/missing_templates.json

Used CVEs

All CVEs referenced by the scanned Nuclei templates:

output/used_cves.json

Priority Report

A focused list of CVEs currently missing templates:

output/priority_report.json

CSV Results

A spreadsheet-friendly version of the results:

output/results.csv

Example Workflow

A typical workflow for identifying template gaps:

# Prepare a list of CVEs
cat example_cves.txt

# Scan the Nuclei repository
python3 nuclei_analyzer.py \
    -f example_cves.txt \
    -t 16 \
    -n ~/nuclei-templates

The analyzer then reports which CVEs are already covered and which ones do not currently have matching templates.

Use Cases

Nuclei Contributors

Identify CVEs that may need new detection templates.

Security Researchers

Quickly compare vulnerability lists against existing Nuclei coverage.

Vulnerability Management

Determine which vulnerabilities in a dataset can already be detected using Nuclei.

Research Automation

Use the generated JSON or CSV reports as input for other analysis pipelines.

Project Status

This project is actively focused on CVE-to-Nuclei template coverage analysis.

The goal is to keep the tool lightweight, fast, and focused rather than turning it into a general-purpose vulnerability enrichment platform.

Roadmap

Planned improvements include:

• Improved template reference detection
• Template metadata analysis
• Template quality checks
• Better duplicate-template detection
• Faster template indexing
• Incremental scanning
• Additional export formats
• Improved reporting and filtering
• Template-to-CVE coverage statistics

Requirements

• Python 3.10+
• Rich
• orjson

Install dependencies with:

pip install -r requirements.txt

Contributing

Contributions, bug reports, and improvements are welcome.

When submitting a pull request:

1. Keep changes focused.
2. Preserve the existing CLI behaviour unless the change intentionally modifies it.
3. Include a clear description of the change.
4. Test the analyzer against a real Nuclei template repository where possible.

Disclaimer

This project is intended for security research, vulnerability analysis, and authorized testing.

Use it only against systems, repositories, and datasets you are authorized to analyze.

License

Add your project license here.

Nuclei CVE Analyzer
CVE coverage analysis for Nuclei templates