Attributed metadata history
Up to 100 retained publisher events per page for 4407827e205d5cacdda7e04b1d630042a938be5f5240781012ee929a5b96fed2. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_c675c564d013a8a4c9
observed · 2026-10-12 15:09:04 UTC
What's Changed Features & Refactors: Full OSV-Scalibr pipeline: Migrated scanning, filtering, and matching in osv-scanner to use osv-scalibr end-to-end, so most plugins that's supported in osv-scalibr should be supported via the --experimental-plugins flag (#2935). New extractors and ecosystem support via osv-scalibr: Add javascript/vsix extractor to support scanning VS Code extension (.vsix) packages. Extend ecosystem mapping for: SUSE Azure Linux / Mariner Alpaquita Mageia openSUSE Leap Debian and Ubuntu PURL PURL Type Resolution: Updated osvscannerjson extractor to map ecosystem names to valid PURL types (golang, gem, cargo, npm, etc.). Fixes: Bug #2915 Fix issue where osv-scanner reported already-fixed advisories as unfixed for RHEL-family RPM packages (Red Hat, AlmaLinux, Rocky Linux) with epochs by sending epoch-qualified versions. Fix Python requirements.txt extractor in osv-scalibr, specifically regular expressions used to extract package names and per-requirement options (Fixes #2940, #2931) Fix NPM and Composer PURL generation in osv-scalibr, separating package namespace (scope) from package name New Contributors @Korulag made their first contribution in #2
Fingerprint: 66f14a0e063f7d8ed7b8e14d683f0cbe86063a6d5ffafed469133d3b3e8dc515
intelligence_src_c675c564d013a8a4c9
observed · 2026-10-12 15:09:04 UTC
available
Fingerprint: ebe56682a460fbbd8fc896db7195b35f1ac95a62a2029ef19bb828e7976e6b0e