Skip to content
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 2 additions & 4 deletions http/cves/2026/CVE-2026-25892.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,7 @@ http:
part: body
group: 1
regex:
- '<span class="version">([0-9.]+)'
- '<span class="version">([0-9.]+)</span>'

matchers-condition: and
matchers:
Expand All @@ -62,6 +62,4 @@ http:

- type: dsl
dsl:
- 'compare_versions(version, ">=4.6.2")'
- 'compare_versions(version, "<=5.4.1")'
# digest: 490a0046304402203590d1c08cea7f6e56581e4736401dfa9e21684dcd3add7ea8ab489d92a653ce0220198f2c4b68507e5183d2672aafcac1f0a0f3b429be02ace67e499b1921fb79f7:922c64590222798bb761d5b6d8e72950
- 'compare_versions(version, ">=4.6.2", "<=5.4.1")'
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟠 Incorrect compare_versions syntax - missing spaces around operators — The compare_versions DSL function call is missing required spaces around the comparison operators. The current syntax uses ">=4.6.2" and "<=5.4.1" but should be ">= 4.6.2" and "<= 5.4.1" (with spaces).

Suggested Fix
Change line 65 from:
  - 'compare_versions(version, ">=4.6.2", "<=5.4.1")'
To:
  - compare_versions(version, '>= 4.6.2', '<= 5.4.1')

This matches the standard syntax used in other templates (e.g., CVE-2016-10972.yaml line 39, CVE-2023-34048.yaml line 73, CVE-2022-31101.yaml line 71).

Loading