collect DIVD CSIRT cases

[armijnhemel]

Dutch Intitute for Vulnerability Disclosure (DIVD) has its own numbering scheme.

https://csirt.divd.nl/cases/

Not all of these are mapped to CVEs. Some of these are related to actual code issues, but others are for configuration issues.

[pombredanne]

• Add support for https://divd.nl #1397 is a dupe:

They track things like https://csirt.divd.nl/cases/DIVD-2023-00027/
There may be extra resolution data available there

• Add support for https://divd.nl #1397 (comment)

I took a took at that site, we can get the Recommendation and Workaround section of each case and use it in our AdvisoryData summary, apart from that, I see no scope of getting additional data related to Packages.

Is that what you're referring to, in resolution data ? @pombredanne

• and Add support for https://divd.nl #1397 (comment)

@jayanth-kumar-morem I am not sure what you mean exactly.
Say for instance this: https://csirt.divd.nl/cves/CVE-2023-22580/

• These is an upstream advisory for this CVE https://nvd.nist.gov/vuln/detail/CVE-2023-22580
• The CVE has confusing ranges for https://www.npmjs.com/package/sequelize?activeTab=versions
• And the record from DIVD seems simpler

Though I am not sure which one is right (if any)... in any case the point is that the advisory is about a package at https://sequelize.org/ and https://www.npmjs.com/package/sequelize and https://github.com/sequelize/sequelize