diff --git a/pyproject.toml b/pyproject.toml index 66e1e6d..cd9d4b0 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -1,6 +1,6 @@ [project] name = "appthreat-vulnerability-db" -version = "5.7.3" +version = "5.7.4" description = "AppThreat's vulnerability database and package search library with a built-in file based storage. OSV, CVE, GitHub, npm are the primary sources of vulnerabilities." authors = [ {name = "Team AppThreat", email = "cloud@appthreat.com"}, diff --git a/vdb/lib/aqua.py b/vdb/lib/aqua.py index 52e1fde..eec1790 100644 --- a/vdb/lib/aqua.py +++ b/vdb/lib/aqua.py @@ -131,6 +131,7 @@ def is_supported_source(self, zfname): "oval", "glad", "mariner", + f"cvrf{os.sep}suse{os.sep}suse", ): if distro in zfname: return False @@ -140,8 +141,9 @@ def is_supported_source(self, zfname): except Exception: pass for year in range(1999, nvd_start_year): - if f"CVE-{year}-" in zfname: - return False + for pat in (f"CVE-{year}-", f"{os.sep}{year}{os.sep}", f"ALAS-{year}-", f"ALAS2-{year}-", f"openSUSE-SU-{year}-"): + if pat in zfname: + return False if zfname.endswith(".json"): return True return False