Skip to content

Temu v1.3.0

Choose a tag to compare

@github-actions github-actions released this 21 May 00:57
· 20 commits to main since this release

[1.3.0] — 2026-05-21

Feature release for CVE metadata integration in the scan pipeline.

Added

  • Scan runs now execute CVE metadata checks after fingerprinting, using detected versioned technologies, CPE mapping, the local SQLite CVE cache, and NVD fetches on cache miss.
  • CVE cache/NVD matches are merged into scan vulnerabilities as version-related findings.

Notes

  • CVE metadata findings require a detected technology version that can be mapped to a CPE. Targets without exposed versions, such as OWASP Juice Shop in default mode, will not produce NVD findings from metadata alone.
  • CVE-specific YAML probes remain separate active detection rules and still depend on matching technology fingerprints and risk policy.