Files
rengine/api
Yogesh Ojha f2e28d2f72 feat(software): name the nearest release in the scan that does not carry each CVE
After the match, every inferred CVE row gets fixed_in: the nearest newer
release of the same product this scan saw that does not carry the CVE,
and how many assets run it. Each release's CVE set is read from the NVD
corpus, uncapped, so a scan at the match cap is still judged whole. A
version whose leading number sits far above the product's median is a
misread and never the fix. is:fixable filters on it, and the row and the
sheet name the release.
2026-09-24 23:00:30 +05:30
..
2026-02-04 20:05:28 +05:30
2026-02-04 20:05:28 +05:30