https://cybertoolchain.io/tools/vuls New releases and features in Vuls, tracked by The Cyber Toolchain. en Thu, 15 Oct 2026 05:32:40 GMT https://github.com/future-architect/vuls/releases/tag/v0.42.0 https://github.com/future-architect/vuls/releases/tag/v0.42.0 Thu, 15 Oct 2026 05:32:40 GMT Vuls v0.42.0 adds Windows 11 26H2 scanning support and expands Fortinet CSAF coverage with three new RangeType values.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Expands Fortinet CSAF vulnerability data with three new RangeType values: `fortinet-fortisiem_cloud`, `fortinet-fortimonitoronsight`, and `fortinet-fortipam_chrome_extension`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.41.0 https://github.com/future-architect/vuls/releases/tag/v0.41.0 Wed, 30 Sep 2026 03:23:32 GMT Vuls: Passes through Trivy's repository class to `models.Package` in the `contrib/trivy` integration. • Reports NVD and VulnCheck CVSS scores per source rather than collapsing them into a single score — NVD's own analysis and the CNA's metrics are now both preserved and labelled via `Optional['source']`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.41.0-rc.2 https://github.com/future-architect/vuls/releases/tag/v0.41.0-rc.2 Tue, 29 Sep 2026 12:12:19 GMT Vuls v0.41.0-rc.2 adds Oracle Solaris, Apple security releases, and OpenSSH advisory detection via vuls2⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Detects vulnerabilities in the Oracle Solaris family through the vuls2 detection engine.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Detects Apple security releases through the vuls2 detection engine. • Detects OpenSSH security advisories through the vuls2 detection engine. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.40.0-rc.1 https://github.com/future-architect/vuls/releases/tag/v0.40.0-rc.1 Wed, 29 Jul 2026 06:29:52 GMT Vuls v0.40.0-rc.1 migrates NVD, Cisco, JVN, VulnCheck, Fortinet, Palo Alto, and CTI detection to the vuls2 engine, adds ENISA EUVD and Seal Security coverage. • Routes NVD CPE detection and enrichment through the vuls2 engine with cpematch-expanded criteria, replacing go-cve-dictionary's version-range-only matching. • Routes Cisco, Fortinet, Palo Alto, VulnCheck, and JVN data sources through vuls2 for detection and enrichment. • Adds ENISA EUVD (European Union Vulnerability Database) as a vuls2 enrich data source. • Replaces go-cti with vuls2 attack/CAPEC/CWE datasources; adds ScanResult-level `CWEDict`, `CAPECDict`, and `ATTACKDict` catalog maps and a per-VulnInfo `CTIs` reference list. • Enriches MITRE CVE v5 data via the vuls2 pipeline. • Ignores rejected and withdrawn CPE vulnerabilities to reduce false positives. • Surfaces evaluation warnings from the vuls2 detector for improved scan transparency. • Uses JPCERT-AT `reference_titles` as JVN alert titles for more descriptive reporting. • Shares a single vuls2 DB session across detect and enrich phases per server, reducing I/O overhead. Breaking changes: • The `[cti]` config section is removed; CTI data is now sourced from vuls2 rather than go-cti. • The per-VulnInfo field previously named `Ctis` is renamed to `CTIs`; consumers of scan result JSON will need to update field references. • EUVD content is no longer sourced from go-cve-dictionary; it is now provided solely through the vuls2 enrich path. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.39.3 https://github.com/future-architect/vuls/releases/tag/v0.39.3 Tue, 09 Jun 2026 09:13:59 GMT Vuls v0.39.3 adds EOL data for new OS versions and enables Windows vulnerability detection via vuls2. • Supports Windows vulnerability detection using the vuls2 detector engine. • Updates GetEOL with newly released OS versions for accurate end-of-life tracking. Breaking changes: • The vuls2-based Windows detector (`detect windows with vuls2`) changes detection behaviour for Windows targets — existing Windows scan workflows may produce different results on upgrade. • AnalyzeLibrary failures are now treated as warnings instead of errors, which may change pipeline exit codes or alerting behaviour that relied on hard failures. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.39.3 https://github.com/future-architect/vuls/releases/tag/v0.39.3 Tue, 09 Jun 2026 09:13:59 GMT Vuls v0.39.3 switches Windows CVE detection to the vuls2 backend and expands EOL coverage for new OS versions. • Switches Windows KB-based CVE detection from gost to the vuls2 backend, now reading `vuls.db` built from `microsoft-*` sources (breaking change: gost is no longer used for Windows; a `vuls.db` containing `microsoft-*` data is required). • Surfaces MSRC Exploit Status under `CveContent.Optional["exploit"]` for Windows detections, maintaining parity with the previous gost output. • Adds EOL data for newly released OS versions via updated `GetEOL` configuration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.39.2 https://github.com/future-architect/vuls/releases/tag/v0.39.2 Wed, 20 May 2026 02:36:14 GMT Vuls v0.39.2 adds `disablerepo` option support for yum/dnf scanners. • Supports `disablerepo` option for yum/dnf package scanning, allowing specific repositories to be excluded during vulnerability detection. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.39.0 https://github.com/future-architect/vuls/releases/tag/v0.39.0 Tue, 12 May 2026 02:01:31 GMT Vuls v0.39.0 adds pylock.toml (PEP 751) detection, Ubuntu 26.04 support, RedHat CVE mitigations, and consolidates exploit/KEV/MSF data under vuls2. • Adds pylock.toml (PEP 751) lockfile detection for Python dependency scanning. • Adds Ubuntu 26.04 as a supported OS target. • Surfaces RedHat CVE Mitigation data into VulnInfo via the vuls2 detector. • Adds a DataSources filter to the enrich function, letting users control which data sources are applied during enrichment. • Replaces go-exploitdb, go-msfdb, and go-kev backends with the vuls2 detector for exploit, Metasploit, and CISA KEV data. • Replaces gost RedHat CVE filling with the vuls2 detector. • Detects Debian vulnerabilities via the vuls2 detector. • Adds Dependency.PURL field (replacing GraphQL-based GitHub detection). Breaking changes: • The go-exploitdb backend is replaced by vuls2; configurations relying on go-exploitdb will no longer function. • The go-msfdb backend is replaced by vuls2; configurations relying on go-msfdb will no longer function. • The go-kev backend is replaced by vuls2; configurations relying on go-kev will no longer function. • The gost RedHat CVE filling path is replaced by vuls2; configurations relying on gost for RedHat will no longer function. • Debian detection now uses vuls2; existing setups using the previous Debian detector will need to migrate to vuls2. • The fvuls Docker image is temporarily removed from Docker Hub publish; pipelines pulling that image will fail. • GraphQL-based GitHub detection is removed; integrations depending on it must migrate to the new Dependency.PURL approach. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.38.6 https://github.com/future-architect/vuls/releases/tag/v0.38.6 Wed, 11 Mar 2026 03:06:54 GMT Vuls v0.38.6 adds Amazon Linux vulnerability detection via the vuls2 detector engine. • Adds Amazon Linux support to the vuls2 detector backend. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.38.1 https://github.com/future-architect/vuls/releases/tag/v0.38.1 Fri, 20 Feb 2026 07:38:45 GMT Vuls v0.38.1 updates OS end-of-life data for more accurate EOL detection. • Updates end-of-life (EOL) dates for tracked operating systems, improving accuracy of EOL-based risk reporting. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.38.0 https://github.com/future-architect/vuls/releases/tag/v0.38.0 Fri, 13 Feb 2026 03:32:37 GMT Vuls v0.38.0 adds dev-dependency flagging, Windows vendor fields, updated CWE Top 25 lists, and lowers VulnCheck confidence. • Adds `dev` flag to library scanning so development dependencies are tracked and reported separately from production packages. • Adds `Dev` flag to `trivy-to-vuls` library conversion, surfacing dev dependencies when importing Trivy results. • Adds `vendor` field for Windows packages in the scanner, enriching package metadata for Windows targets. • Includes CWE Top 25 lists for 2023, 2024, and 2025, keeping weakness classifications current. • Lowers the confidence level assigned to VulnCheck detections in the detector pipeline. Breaking changes: • VulnCheck detections are now assigned a lower confidence level by the detector; existing workflows that threshold or filter on VulnCheck confidence scores may produce different results after upgrade. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.37.0 https://github.com/future-architect/vuls/releases/tag/v0.37.0 Tue, 09 Dec 2025 06:38:22 GMT Vuls v0.37.0 adds support for the EU Vulnerability Database (EUVD) as a detection source. • Supports the EU Vulnerability Database (EUVD) as a new CVE detection source. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.36.3 https://github.com/future-architect/vuls/releases/tag/v0.36.3 Mon, 01 Dec 2025 03:15:07 GMT Vuls v0.36.3 adds Windows 11 25H2 scanning support. • Adds detection support for Windows 11 25H2 in the Windows scanner. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.35.0 https://github.com/future-architect/vuls/releases/tag/v0.35.0 Thu, 25 Sep 2025 06:47:46 GMT Vuls v0.35.0 adds Fedora detection via vuls2, snmp2cpe timeout/retry options, and vuls2 DB digest tracking. • Adds Fedora vulnerability detection powered by the vuls2 detector engine. • Adds `--timeout` and `--retry` options to the `contrib/snmp2cpe` command for more resilient SNMP-to-CPE conversion. • Updates the `snmp2cpe convert` command with new conversion logic. • Saves and tracks the digest of the vuls2 vulnerability database for integrity verification. • Updates Windows scanner release info fetching. Breaking changes: • Fedora detection now uses the vuls2 detector (feat! commit a6bee18); setups relying on the previous Fedora detection path may behave differently on upgrade. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.34.0 https://github.com/future-architect/vuls/releases/tag/v0.34.0 Sat, 06 Sep 2025 09:06:25 GMT Vuls v0.34.0 adds VulnCheck support, ExploitDB verified field, and base64-encoded lockfile exchange • Adds `verified` field to ExploitDB detections, surfacing exploit verification status in results. • Supports VulnCheck as a data source via go-cve-dictionary integration. • Enables base64-encoded content exchange for lockfile scanning, broadening transport compatibility. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.33.3 https://github.com/future-architect/vuls/releases/tag/v0.33.3 Thu, 21 Aug 2025 01:29:16 GMT Vuls v0.33.3 adds EOL tracking for more OSes, Debian 13 (Trixie) GOST support, and Ubuntu detection via vuls2. • Adds EOL date tracking for additional operating systems. • Supports Debian 13 (Trixie) in the GOST vulnerability data source. • Enables Ubuntu vulnerability detection using the vuls2 detector. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.33.1 https://github.com/future-architect/vuls/releases/tag/v0.33.1 Wed, 25 Jun 2025 04:34:30 GMT Vuls v0.33.1 strips image tags from server names when scanning containers with Trivy. • Removes image tag from server name automatically when scanning container images via the Trivy contrib integration, producing cleaner server identifiers. Breaking changes: • When scanning with the Trivy integration, the server name no longer includes the image tag — any pipeline, report, or downstream tooling that matched on the tag-suffixed server name will need to be updated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.33.0 https://github.com/future-architect/vuls/releases/tag/v0.33.0 Tue, 24 Jun 2025 02:56:59 GMT Vuls v0.33.0 adds Ubuntu 25.04, Palo Alto/Cisco CVE detection, Oracle/Alpine vuls2 detection, and ignore-vulnerability patterns. • Adds Ubuntu 25.04 (Plucky) as a supported scan target. • Adds CVE detection support for Palo Alto and Cisco devices. • Detects Oracle Linux and Alpine Linux vulnerabilities via the vuls2 engine. • Adds ignore vulnerability pattern support in the vuls2 detector. • Adds RHEL 10 end-of-life data to OS metadata. • Adds row separators to `--format-list` report output for improved readability. • Auto-downloads the vuls2 database when schema versions differ, removing manual intervention. • Opens the vulnerability database before the server starts, reducing first-request latency. Breaking changes: • Oracle Linux and Alpine Linux now use the vuls2 detection engine (`feat!(detector): detect oracle and alpine with vuls2`), which may require a compatible vuls2 database and could change detection results on upgrade. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.30.0 https://github.com/future-architect/vuls/releases/tag/v0.30.0 Tue, 18 Mar 2025 06:43:13 GMT Vuls v0.30.0 adds Python uv and Poetry v2 lockfile scanning support. • Supports Python `uv` and Poetry v2 lockfile formats for dependency vulnerability scanning. Breaking changes: • Bumped vuls dictionary libs (feat! bump) — existing dictionary databases may require re-fetching or migration to remain compatible. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.29.0 https://github.com/future-architect/vuls/releases/tag/v0.29.0 Wed, 05 Feb 2025 04:45:58 GMT Vuls v0.29.0 adds vuls2 detection engine for RedHat, CentOS, AlmaLinux, and Rocky Linux, plus version info in library findings. • Enables the vuls2 detection engine for RedHat, CentOS, AlmaLinux, and Rocky Linux vulnerability detection. • Adds version information to library fixed-in entries in the trivy-to-vuls contrib converter. • Adds library package version data to vulnerability results. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.28.1 https://github.com/future-architect/vuls/releases/tag/v0.28.1 Wed, 18 Dec 2024 16:56:57 GMT Vuls v0.28.1 updates end-of-life date tracking for OS platforms. • Updates end-of-life (EOL) data for tracked operating systems, keeping lifecycle-based risk assessments current. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.28.0 https://github.com/future-architect/vuls/releases/tag/v0.28.0 Sun, 08 Dec 2024 08:38:28 GMT Vuls v0.28.0 adds Windows Server 2025 support, Ubuntu 24.10, a custom SNMP port option, and RPM source-package tracking. • Adds `--port`/`-P` option to `contrib/snmp2cpe` for targeting SNMP devices on non-default ports. • Supports scanning Windows 11 24H2. • Supports scanning Windows Server 2025 and Windows Server 2022 23H2. • Adds Ubuntu 24.10 (Oracular) as a supported scan target. • Changes RPM query format to include `sourcerpm`, enabling source-package attribution in scan results. • Skips SSH configuration validation when `ssh-keyscan` or `ssh-keygen` fails, improving scanner resilience. Breaking changes: • The RPM scanner query format has changed to add `sourcerpm`; existing scan results or integrations parsing the raw RPM query output may receive differently structured data. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.27.0 https://github.com/future-architect/vuls/releases/tag/v0.27.0 Wed, 09 Oct 2024 02:53:40 GMT Vuls v0.27.0 adds CVSS v4.0 scoring, MITRE CVE source, VulnCheck KEV data, and Azure Trivy content type. • Supports CVSS v4.0 scores from NVD and Trivy sources. • Adds MITRE as a new CVE content source via go-cve-dictionary. • Adds VulnCheck KEV (Known Exploited Vulnerabilities) data to the vulnerability model. • Adds new `trivy:azure` CVE content type for Azure-specific Trivy findings. • Skips TDC vs. non-TDC package comparisons in SUSE OVAL detection to reduce false positives. Breaking changes: • Alpine detection now uses source packages instead of binary packages (`fix!(alpine): use source package for detection`) — existing Alpine scan results may change on upgrade. • VulnCheck KEV fields are added to the models (`feat!(models): add vulncheck kev`) — downstream consumers parsing Vuls output JSON may need to handle the new fields. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.26.0 https://github.com/future-architect/vuls/releases/tag/v0.26.0 Mon, 24 Jun 2024 07:48:30 GMT Vuls v0.26.0 adds Minio S3 reporter support and extends EOL data for Alpine 3.19/3.20 • `reporter/s3` now supports Minio as a storage backend for vulnerability reports Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.25.4 https://github.com/future-architect/vuls/releases/tag/v0.25.4 Tue, 21 May 2024 01:54:42 GMT Vulnerability scan results now include modularity labels for Red Hat-like OSes and vendor-specific CVSS data in CVE entries. • Adds `modularityLabel` field to package objects in scan results for Red Hat-like operating systems • Adds `vendorSeverity` and full CVSS vector strings to each object in the `cveContents` array Breaking changes: • The `enabledDnfModules` element is removed from scanner JSON results; use `packages[].modularityLabel` instead. • In `cveContents` derived from Trivy, the `type` field value changes from `trivy` to `trivy:nvd`, `trivy:ghsa`, or similar. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.25.3 https://github.com/future-architect/vuls/releases/tag/v0.25.3 Fri, 10 May 2024 10:04:25 GMT Adds Ubuntu 24.04 detection support and `--tls-insecure-smtp` CLI flag for SMTP notifications • Adds `--tls-insecure-smtp` CLI argument to skip TLS certificate verification for SMTP notifications • Adds Ubuntu 24.04 (Noble) as a supported distribution for vulnerability detection Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.25.2 https://github.com/future-architect/vuls/releases/tag/v0.25.2 Fri, 22 Mar 2024 07:59:36 GMT Adds WPScan enterprise feature support to scan results; fixes JAR name/version overwrite and Amazon Linux 2023 EOL detection. • Includes some enterprise features of WPScan in scan results via `wpscan` detector/library code • Updates JAR-like files' Name/Version in the library list at `vuls report` phase using Java DB Breaking changes: • Names and Versions of JAR-like files set during `vuls scan` may now be incorrect or insufficient; they are overwritten at the `vuls result` phase. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.25.1 https://github.com/future-architect/vuls/releases/tag/v0.25.1 Mon, 11 Mar 2024 01:40:19 GMT Vuls v0.25.1 adds PURL to scan results and expands lockfile scanning via Trivy update. • `vuls scan` results now include a `PURL` (Package URL) field for library scan findings Breaking changes: • `vuls report` now receives scan logic previously executed in `vuls scan` for JAR-like lockfiles; mixing new `vuls scan` with older `vuls report` binaries may cause missing vulnerabilities • Vuls outputs results even when all scans fail (previously it output nothing) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.24.7 https://github.com/future-architect/vuls/releases/tag/v0.24.7 Fri, 15 Dec 2023 07:35:44 GMT Vuls v0.24.7 adds FreeBSD 14 EOL support and groups NVD data by source • Adds FreeBSD 14 EOL detection capability Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.24.5 https://github.com/future-architect/vuls/releases/tag/v0.24.5 Mon, 20 Nov 2023 01:34:37 GMT Vuls v0.24.5 adds support for Fedora 39 and Windows 11 23H2 scanning • Adds `fedora 39` to the list of supported operating systems for vulnerability scanning • Adds `Windows 11 23H2` to the list of supported operating systems for vulnerability scanning Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.24.4 https://github.com/future-architect/vuls/releases/tag/v0.24.4 Fri, 20 Oct 2023 03:07:52 GMT Vuls v0.24.4 adds Ubuntu 23.10 (Mantic) support for vulnerability scanning. • feat(ubuntu) adds Ubuntu 23.10 (mantic) to the supported list of operating systems. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.24.0 https://github.com/future-architect/vuls/releases/tag/v0.24.0 Mon, 25 Sep 2023 08:16:26 GMT Vuls v0.24.0 adds macOS detection support and Fortinet CVE data feed integration • Adds `macOS` support for vulnerability scanning on Apple operating systems • Enables ingestion of the `fortinet` CVE data feed via the detector engine Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.23.4 https://github.com/future-architect/vuls/releases/tag/v0.23.4 Fri, 22 Sep 2023 09:12:59 GMT Vuls v0.23.4 adds SNMP2CPE contributions, Windows config auto-upgrade, and KV detection export • `contrib/snmp2cpe` now includes additional Fortinet products in its CPE mapping data. • `config` auto-upgrades legacy `v1` `windows/config.toml` files to the `v2` schema automatically on load. • `contrib/fvuls` gains new subcommands for retrieving network device CPE information via `snmp2cpe` and uploading it to the Fvuls server. • `windows` detection now exposes the `DetectKBsFromKernelVersion` function for external usage. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.23.3 https://github.com/future-architect/vuls/releases/tag/v0.23.3 Mon, 10 Jul 2023 06:12:46 GMT Vuls v0.23.3 adds support for Debian 12 and Ubuntu 14.04/16.04 ESM detection • `feat(os): support debian 12` • `feat(ubuntu): Support Ubuntu 14.04 and 16.04 ESM` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.23.2 https://github.com/future-architect/vuls/releases/tag/v0.23.2 Wed, 10 May 2023 15:54:09 GMT Adds Ubuntu 23.04 detection support and removes CGO dependency for dictionary tools. • Adds Ubuntu 23.04 platform support to the scanner engine • Removes CGO requirement, making dictionary tooling fully portable Go binaries Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.23.0 https://github.com/future-architect/vuls/releases/tag/v0.23.0 Thu, 06 Apr 2023 10:00:10 GMT Vuls v0.23.0 adds snmp2cpe utility, Windows CPE mapping via CI, and no-sudo csh scanning support • Adds the `snmp2cpe` subcommand in the contrib directory to map SNMP OIDs to CPE names • Enables Windows CPE detection in the CI pipeline (`snmp2cpe` integration) • Supports csh shell scanning without requiring sudo privileges Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.22.1 https://github.com/future-architect/vuls/releases/tag/v0.22.1 Wed, 01 Mar 2023 06:02:34 GMT Vuls v0.22.1 adds CWE data to categories and views, updates EOL definitions, refreshes ExploitDB sources, enhances GitHub Alerts integration with dependency details, fixes SaaS upload error handling, and improves Ubuntu kernel detection. • Adds `cwe-id` for category and view in reports • Updates EOL (End of Life) definitions for supported distributions • Mod updates ExploitDB sources and adds more URLs • Includes dependencies into scan result and CycloneDX for supply chain security on Integration with GitHub Security Alerts • Uploads JSON report to SaaS even if an error occurred during the scan Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.23.0-beta https://github.com/future-architect/vuls/releases/tag/v0.23.0-beta Thu, 23 Feb 2023 23:46:57 GMT Vuls v0.23.0-beta adds CWE-ID support in categories and views, and updates exploitdb detector with new URLs. • Adds `cwe-id` field to category and view output structures for vulnerability reports • Updates the ExploitDB detection engine (`detector/exploitdb`) with additional external URLs for more complete threat intelligence coverage Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.21.0 https://github.com/future-architect/vuls/releases/tag/v0.21.0 Tue, 01 Nov 2022 06:44:56 GMT Vuls v0.21.0 adds CycloneDX report format support • Adds `--cyclonedx` flag to enable CycloneDX output format for vulnerability reports Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.20.0 https://github.com/future-architect/vuls/releases/tag/v0.20.0 Mon, 08 Aug 2022 08:06:03 GMT Vuls v0.20.0 adds Amazon Linux 2 Extra repo support and CWE-2022 database. • Supports scanning for vulnerabilities in the Amazon Linux 2 Extra Repository • Includes the CWE Top 25 2022 list for vulnerability classification Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.19.8 https://github.com/future-architect/vuls/releases/tag/v0.19.8 Mon, 04 Jul 2022 05:42:42 GMT Vuls v0.19.8 adds SaaS tagging via env vars, CIDR config support, and new platform detections. • `vuls scan` now passes `VULS_TAGS` environment variable values to the SaaS report destination • `config.toml` gains a new `cidr` field in the server block for network-based target selection • Adds detection engine coverage for Alpine Linux 3.16, RHEL 9, CentOS Stream 9, and Alma Linux 9 • Integrates Cyber Threat Intelligence (CTI) information into scan results Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.19.6 https://github.com/future-architect/vuls/releases/tag/v0.19.6 Wed, 27 Apr 2022 04:04:39 GMT Adds text/plain scan support for SUSE servers and OS version parsing from Trivy scans in v0.19.6 • Adds support for server scanning on SUSE systems using the `text/plain` output format to extend coverage beyond standard package managers. • Introduces capability to parse the OS version directly from the result of a Trivy scan, enabling more accurate reporting without manual input. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.19.5 https://github.com/future-architect/vuls/releases/tag/v0.19.5 Fri, 25 Mar 2022 20:33:57 GMT Vuls v0.19.5 adds auto-detect library, inTheWild PoC support, and a packages-column report output. • Adds `inthewild` config key to detect inTheWild proof-of-concept exploits • Adds automatic library detection feature via the `library` subsystem • Replaces the NVD column with a `packages-column` in report output Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.19.4 https://github.com/future-architect/vuls/releases/tag/v0.19.4 Wed, 16 Feb 2022 23:36:28 GMT Adds SLES 15, SLES 12 SP5, openSUSE, and SLED scanning support • `sles15`, `sles12sp5`, `opensuse`, and `sled` added as scan targets Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.19.3 https://github.com/future-architect/vuls/releases/tag/v0.19.3 Wed, 09 Feb 2022 01:37:25 GMT Vuls v0.19.3 adds Fedora OS detection support and updates Trivy integration to v0.23.0 • Adds `Fedora` platform support for vulnerability scanning Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.19.1 https://github.com/future-architect/vuls/releases/tag/v0.19.1 Fri, 07 Jan 2022 00:05:13 GMT Vuls v0.19.1 adds Amazon Linux 2022 detection support and updates go-kev dependencies. • Updates the go-kev dependency to v0.1.0, requiring a database recreation due to schema changes Breaking changes: • The go-kev schema has changed in v0.1.0; existing Vuls databases must be recreated or scans may fail. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls https://github.com/future-architect/vuls/releases/tag/v0.19.0 https://github.com/future-architect/vuls/releases/tag/v0.19.0 Fri, 19 Nov 2021 08:09:35 GMT Vuls v0.19.0 adds KEV Catalog alerts to vuls report and TUI • `vuls report` now includes an `ALERT` column indicating CISA/CERT alerts for Known Exploited Vulnerabilities (KEV) when scanning systems. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/vuls