Repository navigation
Release 0.1.1
0.1.1 - 2026-04-24
Fixed
creation_timestampis now passed toPyVulnerabilityLookup.create_sighting
as a timezone-awaredatetimeinstead of the raw ISO 8601 string returned
by the upstream API, avoiding a'str' object has no attribute 'tzinfo'
error that caused every sighting push to fail.
0.1.0 - 2026-04-24
Initial release.
Added
telegramsightCLI that pulls vulnerability sightings from a Telegram
collector API (POST /api/get_cve_objs) and pushes them to a
Vulnerability-Lookup instance viapyvulnerabilitylookup.--since/--untiltime-window flags accepting unix-epoch seconds,
ISO 8601 timestamps, or natural-language expressions (e.g.2 days ago,
yesterday,today); default window is the last 24 hours so the tool
is cron-friendly with no arguments.--page-sizeflag to tune pagination (default 100).--no-pushdry-run flag that builds and logs each sighting without
contacting the Vulnerability-Lookup instance.- Telegram-tag → Vulnerability-Lookup sighting-type mapping:
tag_poc→
proof_of_concept,tag_wildusage→exploited, otherwiseseen. - AES-256-GCM encryption of the
chat_id/msg_idfragment of each sighting
source, using asource_encryption_keysupplied in the runtime config
(a fresh 12-byte nonce is generated per sighting). - Config split between
telegramsight/conf_sample.py(versioned template)
and a gitignoredtelegramsight/conf.py; the runtime config path is
resolved from theTeleGramSight_CONFIGenvironment variable.