using wildcards in the /cpes

[dmitry84]

Hi I'm trying to understand is it possible to use wildcards in the /cpes queries. For example '{"name": "cpe:/a:sudo[wildcard]:sudo:-:-"}'

The reason why I'm asking this - there are items for which it is hard to get vendor name from the package, such as "openssl_software_foundation" for open SSL or sudo_project for sudo

I've looked into GetByCpeURI->UnbindURI in the code, also tried a lot of different combinations, but always get either empty array, or Internal Server Error, or invalid character '*' in string escape code"

There is also no examples of a wildcard in the db_test.go

Could you please tell me if it is possible to use a wildcard and provide an example?

[dmitry84]

update: it would be also ok if I can omit the vendor param and use only the package name and version like: '{"name": "cpe:/a:--nothing-here-:sudo:version#:-"}'

Could you tell me if it is possible?

[kotakanbe]

This is not supported in the current implementation, but can be done by changing the implementation.