from cedric@lemmy.ml to security@lemmy.ml on 02 Sep 12:18
https://lemmy.ml/post/52195834
Vulnerability-Lookup 6.1.0 is out. The highlights:
- CNA roots. The CVE Program hierarchy is now part of the platform. The assigner search accepts root:<name> to select every CNA under a root, the vulnerability page shows the assigner’s root, and a new dashboard tab lists the latest vulnerabilities of each root with per-root RSS/Atom feeds.
- CNA activity report. One page summarizing everything your local CNA/GNA did over a date range: reservations, publications, KEV entries, sightings, disclosures, comments, bundles and registrations. Charts included, Markdown export too.
- CPE Editor integration. The vulnerability page checks CPE names against the collaborative catalogue of the GCVE project (cpe.gcve.eu) and lets you propose missing vendors and products from a pre-filled form.
Also inside: sighting summaries on bundles, a Markdown export of recent vulnerabilities, the CVE Program bundle warning on flagged records, a KEV publication activity grid, frontend libraries managed with npm, and a batch of security and storage fixes.
Upgrading requires Node.js >= 18, a PostgreSQL migration and gcve >= 0.13.0. Instances that tuned kvrocks.conf should read the storage fix before restarting.
Full details on the blog: vulnerability-lookup.org/…/vulnerability-lookup-6…
<img alt="" src="https://lemmy.ml/pictrs/image/39f91fb5-b30b-4202-9d53-a048490ed773.png">
<img alt="" src="https://lemmy.ml/pictrs/image/bc6aa17e-a488-4418-8f35-ee3e69f0b39e.png">
<img alt="" src="https://lemmy.ml/pictrs/image/a3ee32b1-18f7-4c07-ba4a-639441456839.png">
<img alt="" src="https://lemmy.ml/pictrs/image/2e0680f6-a2a8-455b-b8cd-2344b4dd26f5.png">
threaded - newest