fix(detector/cpe): do not overwrite distro advisories (#2039)

future-architect · Oct 2, 2024 · 0e21ce2 · 0e21ce2
1 parent efa2900
commit 0e21ce2
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/detector/detector.go b/detector/detector.go
@@ -638,7 +638,9 @@ func DetectCpeURIsCves(r *models.ScanResult, cpes []Cpe, cnf config.GoCveDictCon
 			if val, ok := r.ScannedCves[detail.CveID]; ok {
 				val.CpeURIs = util.AppendIfMissing(val.CpeURIs, cpe.CpeURI)
 				val.Confidences.AppendIfMissing(maxConfidence)
-				val.DistroAdvisories = advisories
+				for _, adv := range advisories {
+					val.DistroAdvisories.AppendIfMissing(&adv)
+				}
 				r.ScannedCves[detail.CveID] = val
 			} else {
 				v := models.VulnInfo{