Skip to content

CVEhound 1.3.0

Choose a tag to compare

View all tags
@evdenis evdenis released this 18 Aug 16:34
· 122 commits to main since this release
1.3.0
9c1a8b6
  • Added detection rules for 16 new CVE IDs and updated 25 existing rules
  • Moved upstream-rejected CVEs to the disputed rules group
  • Fixed Kbuild parsing on kernels >= 5.14 and added --arch with ARCH to SRCARCH normalization
  • Made kernel-config affectedness evaluation sounder and tightened --check-strict
  • Replaced the deprecated CVE metadata source with kernel.org vulns.git and CIP kernel-sec, and switched exploit status to CISA KEV
  • Linked CVE records to cve.org and removed CWE and CVSS fields from reports
  • Hardened CVE rule execution and improved metadata, condition-evaluation and worker performance
  • Raised the minimum Python version to 3.11
  • Migrated packaging and development tooling to uv, Ruff and ty; replaced the lxml runtime dependency with PyYAML

Full Changelog: 1.2.1...1.3.0

Assets 2
Loading