vulncheck 101445109f fix: ASB 2026 URL format, cvelistV5 fixed_version, macOS OS-CVE scan ...

- android-asb: from 2026 Google nests the bulletin under a year segment
  (/bulletin/2026/2026-01-01); older months stay flat (/bulletin/2025-10-01).
  fetch_asb_month now tries the year-nested URL first, then flat. Verified:
  2026-01 → nested 200/flat 404; 2025-xx → nested 404/flat 200.
- cvelistV5 scan: stop using lessThanOrEqual as fixed_version — that bound
  means the version is still affected (no published fix), so leave
  fixed_version empty (correct "no patch available", e.g. 7-Zip CVE-2026-58052
  ≤26.02). Only lessThan is a real fix target.
- app-cve OS scan: add macOS (cpe:2.3:o:apple:macos) alongside iOS/iPadOS so
  Mac assets get OS CVEs (e.g. Apple CVE-2026-43700, previously only Defender
  saw it).

2026-07-05 16:54:50 +02:00

..

__init__.py

Initial release v1.0.0

2026-02-08 10:15:20 +01:00

ai_service.py

feat(ai): EOL-aware remediation prompt (upgrade plan, not "apply patch")

2026-06-10 13:19:26 +02:00

android_cve_service.py

fix: ASB 2026 URL format, cvelistV5 fixed_version, macOS OS-CVE scan

2026-07-05 16:54:50 +02:00

app_cve_scanner_service.py

fix: ASB 2026 URL format, cvelistV5 fixed_version, macOS OS-CVE scan

2026-07-05 16:54:50 +02:00

asset_lifecycle.py

feat(intune): Microsoft Intune/Graph inventory source — Phase 1 (devices + OS-EOL)

2026-06-13 10:34:51 +02:00

audit_events.py

feat(audit): initial VULNERABILITY_DETECTED event for sync-created findings

2026-06-10 08:58:38 +02:00

compliance_impact_import.py

fix(import): substring fallback for exotic cis_id headers

2026-05-19 15:33:51 +02:00

compliance_service.py

fix: wazuh sync scan-row + ssvc badges + compliance disconnected diag

2026-05-20 15:13:07 +02:00

cvelistv5_scan_service.py

fix: ASB 2026 URL format, cvelistV5 fixed_version, macOS OS-CVE scan

2026-07-05 16:54:50 +02:00

defender_service.py

fix(defender): populate affected-software (Package) for Defender CVEs

2026-06-16 13:29:43 +02:00

email_service.py

security: harden auth, secrets, headers and email rendering

2026-05-16 09:25:22 +02:00

enrichment_service.py

perf(enrich): ZIP date pass covers ALL missing CVEs in one run

2026-06-03 15:46:43 +02:00

eol_service.py

feat(intune): Phase 2 — detectedApps feed EOL + M365 detection

2026-06-13 10:37:22 +02:00

exploit_intel_service.py

fix(exploit-intel): scope PoC-in-GitHub fetch to DB CVE-id set

2026-05-27 18:57:04 +02:00

exposure_service.py

feat(risk): Asset Risk Dimensions — high-value-target scoring + exposure rebalance + URS

2026-06-16 13:23:16 +02:00

intune_service.py

feat(intune): mobile device EOL/EOS + Android patch-level staleness

2026-06-24 10:32:37 +02:00

linux_remediation_service.py

feat(osv): add OSV.dev as an additional CVE remediation source

2026-06-13 10:01:45 +02:00

m365_service.py

feat(m365): fill real CVE title + description from cvelistV5

2026-06-13 13:22:16 +02:00

mobile_eol_service.py

feat(intune): per-CVE Android detection from Google ASB

2026-06-30 10:48:06 +02:00

ms_lifecycle_service.py

fix(eol): stop short product names matching unrelated lifecycle listings

2026-06-10 08:52:14 +02:00

msrc_service.py

feat(msrc): newest KB per build-branch+type; sensible M365-Apps handling

2026-06-15 15:08:06 +02:00

nessus_sync.py

feat(audit): initial VULNERABILITY_DETECTED event for sync-created findings

2026-06-10 08:58:38 +02:00

override_jobs.py

fix(eol): three-tier severity + EOL-SOON; nessus Essentials import fallback

2026-06-01 08:19:19 +02:00

risk_dimensions_service.py

feat(risk): Asset Risk Dimensions — high-value-target scoring + exposure rebalance + URS

2026-06-16 13:23:16 +02:00

urs_service.py

feat(risk): Asset Risk Dimensions — high-value-target scoring + exposure rebalance + URS

2026-06-16 13:23:16 +02:00

vuln_override_service.py

perf(enrich): bulk CVE-date backfill via cvelistV5 ZIP (shared cache)

2026-06-03 15:33:24 +02:00