From 0e21ce2c6c97cf8d2281fe55be122480dd880fe1 Mon Sep 17 00:00:00 2001 From: MaineK00n Date: Wed, 2 Oct 2024 14:41:40 +0900 Subject: [PATCH] fix(detector/cpe): do not overwrite distro advisories (#2039) --- detector/detector.go | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/detector/detector.go b/detector/detector.go index a2f8aa3c24..b07666b684 100644 --- a/detector/detector.go +++ b/detector/detector.go @@ -638,7 +638,9 @@ func DetectCpeURIsCves(r *models.ScanResult, cpes []Cpe, cnf config.GoCveDictCon if val, ok := r.ScannedCves[detail.CveID]; ok { val.CpeURIs = util.AppendIfMissing(val.CpeURIs, cpe.CpeURI) val.Confidences.AppendIfMissing(maxConfidence) - val.DistroAdvisories = advisories + for _, adv := range advisories { + val.DistroAdvisories.AppendIfMissing(&adv) + } r.ScannedCves[detail.CveID] = val } else { v := models.VulnInfo{