Release 1.5.1

The VLAI severity classification endpoint of Vulnerability-Lookup requires a credential since version 6.3 of the platform. FediVuln-Publish now sends the configured vulnerability_auth_token as X-API-KEY and derives the endpoint from vulnerability_lookup_base_url instead of a hard-coded URL. A failing classification request no longer drops the whole status: the score falls back to N/A and the error is reported in the monitoring logs.

Release 1.5.0

The content of the originating Mastodon status can now optionally be included in sightings pushed to Vulnerability-Lookup. This behavior is controlled by the new push_sighting_content configuration flag (disabled by default).
Updated dependencies.

Release 1.4.2

Fixed an issue when building posts for comments and bundles.

Release 1.4.1

Fixed an issue when setting the visibility of the status to post.

Release 1.4.0

The visibility of the posts can now be configured via the configuration file (fedivuln/conf.py).
The value in the default configuration for the posts related to security advisories is set to unlisted.

Release 1.3.3

Improved the display of the datePublished from cveMetadata.
The format is now simply: %Y-%m-%d %H:%M

Release 1.3.2

Updated the vulnerability status generation.

Release 1.3.1

Added missing aiohttp dependency.

Release 1.3.0

The VLAI score is now computed (remotely via an API call) and inserted in the status.

Release 1.2.1

Fixed the creation of the vulnerability status (the description was missing).