Files
vulncheck/.serena/.gitignore
T
vulncheck 3bb480c39f fix(scan): drop ESR false positive; correct Cisco PSIRT feed URL
- cvelistv5: inverse-unaffected fix bound now only for records with
  exactly ONE unaffected entry. Firefox ESR CVEs carry two (e.g.
  CVE-2026-16361: 115.38 lte 115.* + 140.13 lte *), and Mozilla writes
  the ESR floor as an unbounded 'lte *', so a 'below X' rule wrongly
  flagged regular Firefox 121/152. Multi-train records now skipped.
- advisory feeds: DEFAULT cisco-psirt URL corrected to
  psirtrss20/CiscoSecurityAdvisory.xml (old rss.x?i=44 is DTD-refused);
  saved configs auto-migrate the stale URL on load.
2026-07-23 13:27:20 +02:00

3 lines
26 B
Plaintext