Vulners Python SDK 4.2.0
Support for the Vulners v4 audit API updates.
Added
audit.kb_audit(os_name, kb_list, *, os_version=..., fields=...)now targets the new
/api/v4/audit/kbendpoint and returns one finding per missing update: a result with
items(each carrying the fixing packagefixedPackageand the updateadvisories, which
list the KBs theysupersedes) plustotalPackages. The deprecated v3 endpoint (flat
kbLatest/kbMissed/cvelist) is preserved asaudit.kb_audit_v3(os, kb_list).audit.smart(..., fields=[...])— project which fields each vulnerability carries (e.g.
metrics,exploitation,cvelist,cvelistMetrics,epss); an unknown field is rejected
by the server with400. Each result now also includesfixedVersion.audit.software(..., cvelist_metrics=True)andaudit.host(..., cvelist_metrics=True)—
enrich each finding with per-CVEcvelist/cvelistMetrics. Results carry the resolving
fixed_version, and the applied projection is echoed in theX-Vulners-Applied-Options
response header.audit.linux_audit(..., fields=[...])andaudit.library_audit(..., fields=[...])—
apply advisory enrichment options (metrics,cvelistMetrics); the result reports the
appliedOptionsthat took effect and anywarningsfor unsupported ones.audit.sbom_audit(..., cvelist_metrics=True)— sent as a query option (the request body
carries the uploaded file); the result carriesappliedOptionsandwarnings.
Changed
- Breaking:
audit.kb_auditmoved from the v3 endpoint to/api/v4/audit/kb. Its request
now usesos_name(notos) and its response shape changed from a flat CVE list to
per-update advisories. Callers that need the old flat shape should useaudit.kb_audit_v3.
Full changelog: https://github.com/vulnersCom/api/blob/master/CHANGELOG.md