Update Mend Platform parser for Ransomware, Exploitable, and KEV (#12879)

* Add CISA KEV date (publishDate) + Add Exploitable boolean + Add Ransomware boolean

Add CISA KEV date (publishDate) + Add Exploitable boolean + Add Ransomware boolean

* Update parser.py

* Update parser.py

Author: testaccount90009

dojo/tools/mend/parser.py

@@ -36,6 +36,10 @@ def _build_common_output(node, lib_name=None):
             component_name = None
             component_version = None
             impact = None
+            kev_date = None
+            ransomware_used = None
+            known_exploited = None
+            component_path = None
             description = "No Description Available"
             cvss3_score = None
             mitigation = "N/A"
@@ -64,6 +68,9 @@ def _build_common_output(node, lib_name=None):
                     + "\n"
                 )
                 cvss3_score = node["vulnerability"].get("score", None)
+                kev_date = node["vulnerability"].get("publishDate", None)
+                ransomware_used = node.get("malicious", None)
+                known_exploited = node.get("exploitable", None)
                 component_path = node["component"].get("path", None)
                 if component_path:
                     locations.append(component_path)
@@ -195,6 +202,9 @@ def _build_common_output(node, lib_name=None):
                 cvssv3_score=float(cvss3_score) if cvss3_score is not None else None,
                 impact=impact if impact is not None else None,
                 steps_to_reproduce="**Locations Found**: " + ", ".join(locations) if locations is not None else None,
+                kev_date=kev_date if kev_date is not None else None,
+                known_exploited=known_exploited if known_exploited is not None else None,
+                ransomware_used=ransomware_used if ransomware_used is not None else None,
             )
             if cve:
                 new_finding.unsaved_vulnerability_ids = [cve]