github OWASP/cve-lite-cli v1.3.0
v1.3.0 - Add package-manager fix commands and CLI version support

latest releases: v1, v1.17.3, v1.17.2...
one month ago

Added

  • package-manager-aware suggested fix commands for urgent findings
    • package-lock.json -> npm install ...
    • pnpm-lock.yaml -> pnpm add ...
    • yarn.lock -> yarn add ...
  • explicit skipped-item output for urgent findings that cannot be fixed confidently
  • -v / --version support

Changed

  • improved output flow so suggested fix commands are easier to notice
  • CLI banner now includes the tool version
  • README now documents the new remediation workflow with a concrete fix-command example
  • screenshots were refreshed to match the current output

Example

npm install jsonwebtoken@4.2.2 express-jwt@2.1.0 sanitize-html@2.17.2

Don't miss a new cve-lite-cli release

NewReleases is sending notifications on new releases.