Vulnerability Data Analysis with Google Spreadsheets and Apps Script for Fun and Profit
summary
Live demo shows pulling CVE metadata into Google Sheets using importJSON plus Apps Script to call CVE List, NVD, OSV.dev and GitHub advisories, producing one-row-per-CVE tables and a reusable template that works but exposes tradeoffs: arrays overflow rows so you need transposes or multiple API calls per CVE, NVD and other APIs rate‑limit, Sheets starts to choke in the tens of thousands of rows, and the importJSON repo is archived; common fixes include paste-as-values snapshots and scheduled App Script refreshes for alerts.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 3:36What we'll build
- 8:29Import JSON setup
- 13:07Live demo pulling data
- 23:07Vulnerability metadata APIs
- 27:02Import JSON formulas
- 31:23Recalculations and rate limits
- 36:05Complex JSON structures
- 42:57Community ideas
- 51:44Q&A
related talks
15mComma Separated Vulnerabilities: Detecting Formula Injection in the Wild
32mUnderstanding Exploitability with VEX, EPSS, and Other Standard Frameworks
47mReal Time Vulnerability Alerting
51mPanel Discussion: It is a Tale as Old as Time…. a CNA, the NVD, and a CVE Consumer Walk Into a ...
51m30 Ways Google Sheets Can Help Your Company Uncover and Share Data Insights
32mWork Less and Do More: Google Sheets for JavaScript Developers
43mOpen Source Runs the World, Why Not Vulnerability Identifiers?
57mSeeing the Vulnerable Forest Through the Exploited Trees