Send Organized CVE Digests from NVD with AI-Polished Summaries to Gmail

This workflow automates the delivery of clean, organized security CVE digests directly to your inbox. It triggers on a schedule (every 30 minutes by default), queries the NVD 2.0 API for recent vulnerabilities, and parses each CVE to pull critical info: vendor/product/version from CPE, CVSS severity scores with vector strings, exploit references (e.g., Exploit-DB, GitHub PoCs), short summaries, and NVD links. Data is ranked by severity and score for quick prioritization.

It generates both an HTML table (sortable and visually appealing) and plaintext fallback, then leverages OpenAI (gpt-4o-mini) to craft a concise, professional subject line and body via a JSON-only prompt. The result is a low-noise, actionable digest perfect for SecOps teams, developers, or anyone tracking vulnerabilities without alert fatigue.

Benefits include time savings from manual CVE hunting, customizable outputs (swap Gmail for Slack/Teams/Signal), and easy setup with free NVD API key and OpenAI access. Ideal for security leads needing daily/periodic overviews grouped by impact, with public exploit highlights for urgent triage.