Skip to content

v0.61.72

Choose a tag to compare

View all tags
@github-actions github-actions released this 19 Jul 03:16
· 838 commits to main since this release
v0.61.72
9c20a0c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Control plane + dashboard. Fixes GH #245: vulnerability findings all showed "Low".

Fixed

  • Vulnerability severities are now accurate. Severity comes from the Wordfence Intelligence feed's CVSS data, but a request-spacing bug rate-limited the enrichment feed on every sync (the two feeds were fetched two seconds apart against a 30-minute per-key limit), so every finding was stored without a CVSS score and fell back to the lowest severity. A critical core vulnerability could appear with a "Low" badge. The feeds now alternate across syncs (one request per sync), so real severities land, and existing findings re-derive their severity on the next scan.
  • Findings with genuinely no severity data are shown as "Unknown", ranked for attention above Low and Medium, never silently bucketed as Low.
  • When the enrichment feed is unreachable, the Vulnerabilities page and the admin feed status now say so explicitly, instead of understating risk without a trace. The free Wordfence Intelligence key remains sufficient for full severity data.

Full Changelog: v0.61.71...v0.61.72

Assets 3
Loading