vulncheck
2a831e4678
Adobe writes CVE-2026-48294 as "lessThanOrEqual 26.5.2.2", so no fixed build exists to show and the finding read "not announced" — which hid something the tester rightly pointed out twice: if 26.5.2.2 and older are affected, anything above it is not. That is a valid statement, and an admin can act on "newer than 26.5.2.2" even when the vendor named no build. Stored as ">26.5.2.2" and rendered as "not announced — need newer than 26.5.2.2". The prefix carries both facts at once, which is why it is not written as a bare version: fixed_version also drives the "patch available" badge, and lessThanOrEqual means the CNA named no patched release, often because none has shipped. has_fix reads the prefix and does not claim one exists. A later record with a real lessThan replaces the floor. No schema change: the existing column carries it, and nothing compares fixed_version numerically (only equality, in has_fix).
TrueVuln Frontend
Next.js 16 (App Router) UI for TrueVuln. See the root README for setup, deployment, and configuration — this app is deployed via Docker Compose alongside the backend, not standalone or on Vercel.
Local dev (without Docker)
npm install
npm run dev
Open http://localhost:3000. The dev server proxies API calls to the backend — see ../README.DEV.md for the full local (non-Docker) setup.