search

nix-community / vulnix

Vulnerability (CVE) scanner for Nix/NixOS.
BSD 3-Clause "New" or "Revised" License
476 stars 36 forks source link

CVE mentioned twice #25

Closed frlan closed 7 years ago

frlan commented 7 years ago

Some CVE are mentioned twice.

E.g. PostgreSQL 9.4.6: CVE-2017-7484, CVE-2017-7485 and CVE-2017-7486

output from vulnix call vulnix -w whitelist.yaml --system

…
postgresql-9.4.6

CVEs:
    https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7484
    https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7485
    https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7484
    https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7485
    https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7486
    https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7486
…

Running vulnix-1.2.2