This release adds 1 notable feature for engineering teams evaluating rollout.
Published 1mo
Vulnerability Scanning
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
security
cve
javascript
nodejs
owasp
security-tools
Summary
AI summaryRatcheting mode adds automatic baseline suppression of known CVEs
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds ratcheting mode to suppress known CVE findings and report only new ones. Adds ratcheting mode to suppress known CVE findings and report only new ones. Source: llm_adapter@2026-06-09 Confidence: high |
— |
Full changelog
Added
- Ratcheting mode: run
cve-lite . --ratchetonce to snapshot current findings into.cve-lite/baseline.json. All subsequent scans automatically suppress known findings and only report new ones introduced above the baseline. No CI flag changes needed - the baseline file's presence activates suppression.
Docs
- New dedicated Ratcheting Mode page
- MAL- advisory handling and unverifiable private source findings documented in how-remediation-works
Validation
- npm test
- npm run build
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About OWASP/cve-lite-cli
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]