Version 0.6.5

Changed

• Do not run tests when updating resources in latest GitHub release.

Fixed

• Fixed small bugs in cpe_search submodule.
• Updated test cases.
• Updated license years.

Version 0.6.4

Added

• Added equivalent CPE for inet clear reports.
• Use GHSA DB specific information for last affected version.

Changed

• Slightly modified behavior of browsing CPE dropdown in web app.

Fixed

• Retrieval of GHSA vulnerabilities without a patched version.
• Updated test cases.

Version 0.6.3

Added

• Added ability to search via vulnerability IDs (CVE and GHSA) (thanks @pommfresser).
• Added badge with current version to web server.

Fixed

• Fixed bug to add exploits to GHSA-only vulns.
• Updated test cases.
• Updated node packages.

Version 0.6.2

Fixed

• Updated test cases.

Version 0.6.1

Added

• Added equivalent CPEs.

Changed

• Limited when NVD vuln description search is performed.
• Removed bad CPE equivalence from Debian list.

Fixed

• Updated test cases.

Version 0.6.0

Added

• Integrated GitHub Security Advisory Database as data source.
• Integrated VulnCheck's NVD++ with enhanced NVD information as data source.
• Added very basic retrieval of NVD vulnerabilities via their vuln description text.
• Add equivalent CPEs for Keycloak, NATS server and Nginx.
• Equivalent CPEs are now also searched for via indirect connections (i.e. transitively).

Changed

• Increased size of CVSS vectors in DB to accomodate longer CVSS 4.0 vectors.
• The file structure was changed, such that the build code resides in its own directory.
• Rejected CVEs without content are no longer stored in the local vuln DB.
• Reworked C++ build code for NVD CVSS score to also accept secondary CVSS scores and CVSS 4.0.
• Browsing the CPE dropdown in the web app now wraps around instead of staying fixed to beginning or end.

Fixed

• Updated test cases.
• Fixed processing of EoLD data and made it more resistant to formatting errors.

Version 0.5.7

Added

• Added equivalent CPE for Ghostscript.
• Added equivalent CPE for OwnCloud.
• Added links to public web instance and blog posts to GitHub README.

Changed

• search_vulns logo in web app now uses snake case.

Fixed

• Updated test cases.
• Fixed comparison of zero-extended versions, e.g. 21.0 !< 21.0.0

Version 0.5.6

Fixed

• Update test case.
• Fix install script to terminate with error code if DB build fails.

Version 0.5.5

Changed

• Exclude endoflife.date tests from workflow that updates the release assets.

Fixed

• Update WordPress test case for endoflife.date.

Version 0.5.4

Fixed

• Updated several test cases.