fleet/server/vulnerabilities
Jonathan Katz 87880ee28d
#31283 Fix false negative with manual mutation to powershell versions 7.5* (#32230)
Fixes: #31283 
Fixes: #32197 

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

## Testing

- [x] Added/updated automated tests

- [x] QA'd all new/changed functionality manually

## Test Plan

I manually tested with these powershell versions
Note more CVEs show up than before
CVEs [40733](https://nvd.nist.gov/vuln/detail/CVE-2022-40733) and
[40732](https://nvd.nist.gov/vuln/detail/CVE-2022-40732) are weird but
are expected to show up with this fix.

<google-sheets-html-origin><style type="text/css"><!--td {border: 1px
solid #cccccc;}br {mso-data-placement:same-cell;}--></style>
OS | Name | Version | expected CVE
-- | -- | -- | --
macos | PowerShell | 7.5.0-rc.1 | 30399, 21171
macos | PowerShell | 7.5.0 | 30399
windows | PowerShell 7-preview-x86 | 7.5.0.101 | 30399, 21171, 40733,
40732
windows | PowerShell 7-x64 | 7.5.0.0 | 30399, 40733, 40732
windows | PowerShell 7.5.2.0-x64 | 7.5.2.0 | 40733, 40732
ubuntu | powershell | 7.5.0-1.deb | -
ubuntu | powershell-preview | 7.5.0-rc.1-1.deb | -
2025-08-22 17:41:54 -04:00
..
customcve Switch vulns cron false positive clear to clear vulns based on when the vulns run started, rather than based on periodicity (#31364) 2025-07-29 10:14:14 -05:00
goval_dictionary validate generate-cve.yml outputs (#26752) 2025-03-12 14:49:47 -05:00
io Updating golangci-lint to 1.61.0 (#22973) 2024-10-18 12:38:26 -05:00
macoffice Microsoft office FMA version from release notes (#30686) 2025-07-23 12:07:18 -05:00
msrc Dedupe MSRC downloads/deletes when enrolled hosts include multiple builds of the same version of Windows (#27060) 2025-03-12 13:22:56 -05:00
nvd #31283 Fix false negative with manual mutation to powershell versions 7.5* (#32230) 2025-08-22 17:41:54 -04:00
oval Add OVAL supported OS mappings for Ubuntu 24.10 and 25.04 (#29381) 2025-05-22 18:05:51 -05:00
testdata Handle flaky vulnerability tests (#11262) 2023-04-21 19:37:29 -04:00
utils Add gosimple linter (#23250) 2024-10-29 14:17:51 -05:00