vulncheck 36744f193e fix(scan): match Python the interpreter, not python-* modules ...

The python entry in both registries matched any name containing the word,
so PyPI/distro modules resolved as CPython: "python-dotenv 1.1.1" was
compared against CPython's ranges and flagged with every CVE up to 2.7.15
(CVE-2017-1000158, CVSS 9.8). Same for python-dateutil, python3-pip,
pythonnet.

The name now has to END at the interpreter, optionally with its release
("python3", "python3.11", "Python 3.13.7 (64-bit)"); a trailing "-" or
letter means a different product on a different version line.

2026-08-15 09:12:01 +02:00

..

test_adobe_matching.py

feat(scan): detect the Adobe Creative Cloud desktop apps

2026-08-04 10:06:50 +02:00

test_adobe_product_split.py

fix(scan): apply the version-shape check to Teams as well

2026-08-10 08:07:42 +02:00

test_adobe_version_scheme.py

fix(scan): read Adobe's old and new version schemes as the same scale

2026-08-06 10:09:07 +02:00

test_advisory_feed_limit.py

feat(advisories): make the per-feed item cap configurable

2026-08-13 12:14:40 +02:00

test_apple_os_train.py

feat(scan): detect Apple OS CVEs from cvelistV5

2026-07-29 13:04:07 +02:00

test_autodesk_year.py

fix(autodesk): match AutoCAD by release, not by release year

2026-08-13 14:04:46 +02:00

test_browser_extensions.py

feat(scan): report disabled browser extensions too

2026-08-10 15:20:28 +02:00

test_checkmk_version.py

feat(scan): index CVEs that name a single exact version

2026-07-31 13:52:09 +02:00

test_chromium_severity.py

fix(severity): read the Chromium severity Google states in prose

2026-07-30 09:06:15 +02:00

test_companion_products.py

fix(scan): a companion product is not the product it names

2026-08-10 14:18:56 +02:00

test_eol_citrix_stub.py

fix(eol): a Citrix stub keeps the release in its name

2026-08-15 08:45:00 +02:00

test_eol_component_packages.py

fix(eol): only the product itself may claim its release year

2026-08-13 11:42:38 +02:00

test_eol_dotnet.py

fix(eol): detect .NET and .NET Framework at all

2026-08-13 11:29:47 +02:00

test_eol_ms_lifecycle_connector.py

fix(eol): a Microsoft update keeps the EOL product it names after "for"

2026-08-15 08:55:30 +02:00

test_eol_ms_lifecycle_match.py

fix(eol): a lifecycle listing must prefix the product name

2026-08-13 13:34:41 +02:00

test_eol_rapid_release.py

fix(eol): cap the severity of rapid-release "end of life"

2026-08-10 14:22:32 +02:00

test_eol_reconcile.py

fix(eol): detect Exchange 2016, and close findings when software is uninstalled

2026-08-10 13:59:31 +02:00

test_eol_supersede.py

fix(eol): only the product itself may claim its release year

2026-08-13 11:42:38 +02:00

test_eol_sweep_stability.py

refactor(eol): one sweep implementation instead of three

2026-08-13 11:56:02 +02:00

test_exchange_se.py

feat(scan): detect Exchange Server Subscription Edition

2026-07-31 14:09:45 +02:00

test_inclusive_bound.py

fix(scan): an inclusive bound names one release line, not everything below

2026-08-05 13:12:40 +02:00

test_inventory_filter.py

fix(scan): filter published-app stubs once, at the inventory source

2026-07-30 09:04:35 +02:00

test_mobile_browsers.py

fix(scan): carry the CVE description, and keep iOS browsers out

2026-08-05 09:54:32 +02:00

test_nodejs_cvelistv5.py

fix(scan): let Node.js reach the cvelistV5 path

2026-08-06 10:09:17 +02:00

test_port_and_build_evidence.py

fix(exposure): count a service once, not once per socket

2026-07-31 13:49:42 +02:00

test_reopen_grace.py

fix(status): stop slow inventories from reopening what fast ones closed

2026-08-03 13:47:42 +02:00

test_report_scope.py

fix(reports): correct the numbers and rank what claims to be ranked

2026-07-30 11:42:43 +02:00

test_rvtools_veeam.py

feat(scan): report a fix floor when the advisory names no patched build

2026-08-10 14:02:24 +02:00

test_sap_cvelistv5.py

feat(sap): match SAP from cvelistV5 by release + patch-level range

2026-07-29 15:01:03 +02:00

test_sap_patch_level.py

fix(sap): require the release to match, not just the patch level

2026-07-29 14:57:17 +02:00

test_scheduled_wazuh_asset_sync.py

fix(scheduler): sync Wazuh assets before the scheduled agent loop

2026-08-13 13:26:21 +02:00

test_severity_floor.py

fix(scoring): score CVEs the vendor never gave a CVSS

2026-07-31 15:59:07 +02:00

test_target_sw_field.py

fix(scan): read target_sw from the right CPE field

2026-08-04 14:46:22 +02:00

test_tomcat.py

feat(scan): detect Apache Tomcat, and its EOL, on both paths

2026-08-15 09:05:40 +02:00

test_vim_vscode_python.py

fix(scan): match Python the interpreter, not python-* modules

2026-08-15 09:12:01 +02:00

test_vmware_tools.py

feat(scan): detect VMware Tools, and read wildcard version floors

2026-08-04 08:35:22 +02:00

test_wazuh_components.py

feat(scan): findings for advisories that carry no CVE number

2026-08-12 10:11:23 +02:00