fix(detector/cpe): do not overwrite distro advisories (#2039)

future-architect · Oct 2, 2024 · 0e21ce2 · 0e21ce2
1 parent efa2900
commit 0e21ce2
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/detector/detector.go b/detector/detector.go
@@ -638,7 +638,9 @@ func DetectCpeURIsCves(r *models.ScanResult, cpes []Cpe, cnf config.GoCveDictCon
  if val, ok := r.ScannedCves[detail.CveID]; ok {
  val.CpeURIs = util.AppendIfMissing(val.CpeURIs, cpe.CpeURI)
  val.Confidences.AppendIfMissing(maxConfidence)
- val.DistroAdvisories = advisories
+ for _, adv := range advisories {
+ val.DistroAdvisories.AppendIfMissing(&adv)
+ }
  r.ScannedCves[detail.CveID] = val
  } else {
  v := models.VulnInfo{