vulnerability-db icon indicating copy to clipboard operation
vulnerability-db copied to clipboard

Published 20 hours ago • verified publisher icon AppThreat

Support for ignoring based on type

Open prabhu opened this issue 7 months ago • 0 comments

Noticed that the app-only database still includes vulnerabilities of type rpm and deb.

Example: CVE-2024-6387

https://github.com/AppThreat/vuln-list/blob/main/nvd/2024/CVE-2024-6387.json

cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* becomes pkg:rpm/redhat/openshift_container_platform based on the vers type.

We can further attempt to trim the db by ignoring certain types based on environment variables.

prabhu avatar Jul 17 '24 10:07 prabhu