Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 19 Packages Projects Releases Wiki Activity

Temp CVE Python test fix (#46323)

Browse Source
This commit is contained in:
Tim Lee
2026-05-28 05:56:11 -06:00
committed by GitHub
parent f4ee930ce2
commit ef542eaf5b
1 changed files with 70 additions and 64 deletions
Download Patch File Download Diff File Expand all files Collapse all files
server/vulnerabilities/nvd/cve_test.go
+70 -64
View File
@@ -555,66 +555,72 @@ func TestTranslateCPEToCVE(t *testing.T) {
excludedCVEs: []string{"CVE-2024-12254"},
continuesToUpdate: true,
},
// NOTE: VulnCheck (the sole source — NVD has no CPE config for these CVEs)
// currently mislabels several CPython version ranges under product
// cpe:2.3:a:libexpat_project:libexpat instead of cpe:2.3:a:python:python.
// libexpat's real versions are 2.x, so the 3.x ranges clearly belong to CPython.
// These entries are commented out below until VulnCheck corrects the feed —
// uncomment them once upstream relabels the CVEs back to python:python.
"cpe:2.3:a:python:python:3.12.0:-:*:*:*:macos:*:*": {
includedCVEs: []cve{
{
ID: "CVE-2025-1795",
resolvedInVersion: "3.12.3",
},
// {
// ID: "CVE-2025-1795",
// resolvedInVersion: "3.12.3",
// },
{
ID: "CVE-2024-7592",
resolvedInVersion: "3.12.6",
},
{
ID: "CVE-2024-6923",
resolvedInVersion: "3.12.5",
},
{
ID: "CVE-2024-0397",
resolvedInVersion: "3.12.3",
},
{
ID: "CVE-2024-12254",
resolvedInVersion: "3.12.9",
},
// {
// ID: "CVE-2024-6923",
// resolvedInVersion: "3.12.5",
// },
// {
// ID: "CVE-2024-0397",
// resolvedInVersion: "3.12.3",
// },
// {
// ID: "CVE-2024-12254",
// resolvedInVersion: "3.12.9",
// },
{
ID: "CVE-2024-9287",
resolvedInVersion: "3.12.8",
},
{
ID: "CVE-2025-0938",
resolvedInVersion: "3.12.9",
},
// {
// ID: "CVE-2025-0938",
// resolvedInVersion: "3.12.9",
// },
{
ID: "CVE-2023-6507",
// TODO: fix missing version here (according to vulncheck it was fixed in
// 3.12.1, but the generated feed data doesn't have this value)
resolvedInVersion: "",
},
{
ID: "CVE-2024-8088",
resolvedInVersion: "3.12.6",
},
{
ID: "CVE-2024-4032",
resolvedInVersion: "3.12.4",
},
{
ID: "CVE-2024-3219",
resolvedInVersion: "3.12.5",
},
{
ID: "CVE-2024-0450",
resolvedInVersion: "3.12.2",
},
{
ID: "CVE-2023-6597",
resolvedInVersion: "3.12.1",
},
{
ID: "CVE-2024-3220",
resolvedInVersion: "3.14.0",
},
// {
// ID: "CVE-2024-8088",
// resolvedInVersion: "3.12.6",
// },
// {
// ID: "CVE-2024-4032",
// resolvedInVersion: "3.12.4",
// },
// {
// ID: "CVE-2024-3219",
// resolvedInVersion: "3.12.5",
// },
// {
// ID: "CVE-2024-0450",
// resolvedInVersion: "3.12.2",
// },
// {
// ID: "CVE-2023-6597",
// resolvedInVersion: "3.12.1",
// },
// {
// ID: "CVE-2024-3220",
// resolvedInVersion: "3.14.0",
// },
{
ID: "CVE-2024-6232",
resolvedInVersion: "3.12.6",
@@ -624,41 +630,41 @@ func TestTranslateCPEToCVE(t *testing.T) {
},
"cpe:2.3:a:python:python:3.14.0:alpha1:*:*:*:macos:*:*": {
includedCVEs: []cve{
{
ID: "CVE-2024-12254",
resolvedInVersion: "3.14.0a3",
},
// {
// ID: "CVE-2024-12254",
// resolvedInVersion: "3.14.0a3",
// },
{
ID: "CVE-2024-9287",
resolvedInVersion: "",
},
{
ID: "CVE-2025-0938",
resolvedInVersion: "3.14.0a5",
},
// {
// ID: "CVE-2025-0938",
// resolvedInVersion: "3.14.0a5",
// },
},
continuesToUpdate: true,
},
"cpe:2.3:a:python:python:3.14.0:alpha2:*:*:*:macos:*:*": {
includedCVEs: []cve{
{
ID: "CVE-2024-12254",
resolvedInVersion: "3.14.0a3",
},
{
ID: "CVE-2025-0938",
resolvedInVersion: "3.14.0a5",
},
// {
// ID: "CVE-2024-12254",
// resolvedInVersion: "3.14.0a3",
// },
// {
// ID: "CVE-2025-0938",
// resolvedInVersion: "3.14.0a5",
// },
},
continuesToUpdate: true,
},
"cpe:2.3:a:python:python:3.14.0:alpha3:*:*:*:macos:*:*": {
excludedCVEs: []string{"CVE-2024-12254"},
includedCVEs: []cve{
{
ID: "CVE-2025-0938",
resolvedInVersion: "3.14.0a5",
},
// {
// ID: "CVE-2025-0938",
// resolvedInVersion: "3.14.0a5",
// },
},
continuesToUpdate: true,
},