[Feature Request] CVE Management

[DerHannesKannEsWirklich]

Hi,
For my daily workflow it would be insanly helpful If CVE and CVSS Sorce are displayed in the hosts section.
Further the ability to see if a installed package is affected by an CVE and if there is a security update to apply.

Possible sources for this kind of data could be the security errats of the Various distributions or something like https://osv.dev/#use-the-api .

I understand that this is a big Feature thats not easy to implement.
Just want to run this by you to check if this would be something you see worth considering.

Thanks!

[lbr38]

Hello

There once was a CVE tab in repomanager with the list of all CVEs but I had to remove it. It is very difficult to correlate the CVE list with the list of packages on the hosts, there are so many packages and so many CVEs that it becomes unmanageable. I think it is a very specific domain and specialized tools are more suitable for that.