Open prabhu opened 1 month ago
Noticed that the app-only database still includes vulnerabilities of type rpm and deb.
Example: CVE-2024-6387
https://github.com/AppThreat/vuln-list/blob/main/nvd/2024/CVE-2024-6387.json
cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* becomes pkg:rpm/redhat/openshift_container_platform based on the vers type.
cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
pkg:rpm/redhat/openshift_container_platform
We can further attempt to trim the db by ignoring certain types based on environment variables.
Noticed that the app-only database still includes vulnerabilities of type rpm and deb.
Example: CVE-2024-6387
https://github.com/AppThreat/vuln-list/blob/main/nvd/2024/CVE-2024-6387.json
cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*becomespkg:rpm/redhat/openshift_container_platformbased on the vers type.We can further attempt to trim the db by ignoring certain types based on environment variables.