Integrate Known Exploited Vulnerabilities Catalog from CISA

[Bordon84]

Hello,
Is there a plan to integrate the KEV catalog (Known Exploited Vulnerabilities Catalog) from CISA (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) into DT as a vulnerability source in future versions?

For the classification of security advisories, this integration would have the advantage that a security advisory could already be marked as an actively exploited vulnerability, thus making it easier to comply with the CRA reporting requirement.

[stohrendorf]

There is, see #2267