vulncheck c1fc992285 fix(app-cve-scan): build cvelistV5 index on manual scan + faster/robust build ...

Why the tester saw nothing: the manual "App CVE Scan" only LOADED the cached
index, it never built it — only the nightly did, and that build likely timed
out on the 557 MB download (120 s). So 7-Zip CVE-2026-58052 / Notepad++
CVE-2026-52885 (both in-registry, in-range) were never matched.

- Manual scan now builds the index when it's missing (same result as the
  nightly), then caches it.
- ZIP download timeout 120 s → 600 s.
- Index build pre-filters on raw bytes (only JSON-parse files mentioning a
  curated vendor) → ~99% fewer json.loads, build drops from minutes to ~a
  minute.

Verified the two CVEs' vendor/product (7-Zip/7-Zip, notepad-plus-plus) match
the registry and the installed versions (26.01 ≤ 26.02, 8.9.5 < 8.9.6.4) fall
in range — so they will now be detected once the index exists.

2026-06-30 10:40:06 +02:00

..

__init__.py

Initial release v1.0.0

2026-02-08 10:15:20 +01:00

ai_service.py

feat(ai): EOL-aware remediation prompt (upgrade plan, not "apply patch")

2026-06-10 13:19:26 +02:00

app_cve_scanner_service.py

fix(app-cve-scan): build cvelistV5 index on manual scan + faster/robust build

2026-06-30 10:40:06 +02:00

asset_lifecycle.py

feat(intune): Microsoft Intune/Graph inventory source — Phase 1 (devices + OS-EOL)

2026-06-13 10:34:51 +02:00

audit_events.py

feat(audit): initial VULNERABILITY_DETECTED event for sync-created findings

2026-06-10 08:58:38 +02:00

compliance_impact_import.py

fix(import): substring fallback for exotic cis_id headers

2026-05-19 15:33:51 +02:00

compliance_service.py

fix: wazuh sync scan-row + ssvc badges + compliance disconnected diag

2026-05-20 15:13:07 +02:00

cvelistv5_scan_service.py

fix(app-cve-scan): build cvelistV5 index on manual scan + faster/robust build

2026-06-30 10:40:06 +02:00

defender_service.py

fix(defender): populate affected-software (Package) for Defender CVEs

2026-06-16 13:29:43 +02:00

email_service.py

security: harden auth, secrets, headers and email rendering

2026-05-16 09:25:22 +02:00

enrichment_service.py

perf(enrich): ZIP date pass covers ALL missing CVEs in one run

2026-06-03 15:46:43 +02:00

eol_service.py

feat(intune): Phase 2 — detectedApps feed EOL + M365 detection

2026-06-13 10:37:22 +02:00

exploit_intel_service.py

fix(exploit-intel): scope PoC-in-GitHub fetch to DB CVE-id set

2026-05-27 18:57:04 +02:00

exposure_service.py

feat(risk): Asset Risk Dimensions — high-value-target scoring + exposure rebalance + URS

2026-06-16 13:23:16 +02:00

intune_service.py

feat(intune): mobile device EOL/EOS + Android patch-level staleness

2026-06-24 10:32:37 +02:00

linux_remediation_service.py

feat(osv): add OSV.dev as an additional CVE remediation source

2026-06-13 10:01:45 +02:00

m365_service.py

feat(m365): fill real CVE title + description from cvelistV5

2026-06-13 13:22:16 +02:00

mobile_eol_service.py

fix(mobile-eol): clean device EOL text + correct Samsung A11/Active5 Pro

2026-06-25 13:12:37 +02:00

ms_lifecycle_service.py

fix(eol): stop short product names matching unrelated lifecycle listings

2026-06-10 08:52:14 +02:00

msrc_service.py

feat(msrc): newest KB per build-branch+type; sensible M365-Apps handling

2026-06-15 15:08:06 +02:00

nessus_sync.py

feat(audit): initial VULNERABILITY_DETECTED event for sync-created findings

2026-06-10 08:58:38 +02:00

override_jobs.py

fix(eol): three-tier severity + EOL-SOON; nessus Essentials import fallback

2026-06-01 08:19:19 +02:00

risk_dimensions_service.py

feat(risk): Asset Risk Dimensions — high-value-target scoring + exposure rebalance + URS

2026-06-16 13:23:16 +02:00

urs_service.py

feat(risk): Asset Risk Dimensions — high-value-target scoring + exposure rebalance + URS

2026-06-16 13:23:16 +02:00

vuln_override_service.py

perf(enrich): bulk CVE-date backfill via cvelistV5 ZIP (shared cache)

2026-06-03 15:33:24 +02:00