Vulnerability-lookup 2.21.0 released with many improvements and bugs fixed

Vulnerability-Lookup
1

What’s New

  • new: [core] Added a product-level index and a product search API. f906064
  • new: CSAF feeder for Schneider Electric. e43fa03 from @Rafiot
  • new: [registration] Added MESSAGE_ABOUT and MESSAGE_SIGNUP and the
    ACCEPTED_DOMAINS_FOR_REGISTRATION configuration variables to customize
    the signup/about pages and restrict accepted email domains. Closes #297. 3855838 bfc82cf

csaf-schneider-electric
csaf-schneider-electric2378×1622 464 KB

product-search-1
product-search-12049×1506 337 KB

product-search-2
product-search-22042×1486 296 KB

Changes

ghost-cve
ghost-cve645×527 87.6 KB

  • chg: [notifications] Added the publication date in email notifications and
    a special icon for new vulnerabilities. Closes #299. 64bc631
  • chg: [dependencies] Updated Python and dev/docs dependencies. 510233c b08c381
  • chg: [config] Updated default value for ACCEPTED_DOMAINS_FOR_REGISTRATION. 6563f8a
  • chg: [templates] Simplified titles for vuln and sightings pages; added
    Open Graph meta tag. 19c9a69 27eb6bf
  • chg: [documentation] Updated installation instructions. 152212d

image
image1129×1029 163 KB

Fixes

  • fix: [api] Preserve typing for flask-restx decorators (mypy). f5f31c5
  • fix(cvss): Safely handle CVSS 4.0 vectors in Jinja filters. Closes #305. 5a303bb from @thaicn1712
  • fix: [templates] Fix Bootstrap switch click handling (moved popover to help icon). Closes #303. 19a8c54
  • fix: [bin] Corrected the script name for the CSAF Schneider Electric importer. 1386a76
  • fix: [templates] Fixed an issue with batch deletion of users. 839345b
  • fix: [templates] Fixed a tag id in vulnerability_templates.html. bc0d329
2 Likes