Skip to content

Release history

OWASP/cve-lite-cli releases

All releases

50 shown

No immediate action
v1.28.0 Breaking risk

Cooldown resolver + maintenance risk

No immediate action
v1.27.0 Breaking risk

Theme toggle + stale-floor detection

No immediate action
v1.26.0 New feature

Scheduled security fix PRs

Review required
v1.25.0 New feature
Dependencies

Override hygiene audit + fix

No immediate action
v1.24.0 New feature

SARIF + HTML reports

No immediate action
v1.23.1 Breaking risk

Performance docs validation

No immediate action
v1.23.0 Breaking risk

Concurrent CVE fetches + SHA‑pinned warnings

No immediate action
v1.22.0 Breaking risk

Registry detection support

No immediate action
v1.21.0 New feature

Ratcheting mode

No immediate action
v1.20.0 New feature

PR creation flag + Yarn fix

No immediate action
v1.19.2 Breaking risk

Classification fix + version hint + gray indicator

Review required
v1.19.1 Bug fix
Dependencies

Transitive fix detection and refresh suggestion

No immediate action
v1.19.0 Mixed

Monorepo multi‑folder scan + version parse fix

No immediate action
v1.18.2 Bug fix

Show unknown‑severity findings

Config change
v1.18.1 New feature
Crypto / TLS Dependencies

Corporate SSL proxy support

No immediate action
v1.18.0 New feature

Lockfile refresh fixes

Config change
v1.17.3 Bug fix
Crypto / TLS

Proxy SSL detection improvement

Config change
v1.17.2 Bug fix
Crypto / TLS

Clear SSL error messages

No immediate action
v1.17.1 Breaking risk

Clear malicious advisory messages

No immediate action
v1.17.0 Breaking risk

CVE display + shrinkwrap support

No immediate action
v1.16.0 New feature

CycloneDX SBOM + SARIF upload

No immediate action
v1.15.1 New feature

--usage, --only-used, --sarif

No immediate action
v1.15.0 New feature

JSON logging + install‑skill

Review required
v1.14.0 Breaking risk
Dependencies

Cache expiration fixes

No immediate action
v1.13.0 Bug fix

BFS path-expansion fix

Review required
v1.12.1 New feature
Crypto / TLS Dependencies

Signed release tarballs

No immediate action
v1.12.0 Breaking risk

Fix plan parity + withdrawn advisories skip

No immediate action
v1.11.0 Bug fix

Workspace scan fixes + progress indicator

No immediate action
v1.10.0 Breaking risk

Tier‑aware transitive guidance

No immediate action
v1.9.0 Maintenance

Routine maintenance and dependency updates.

No immediate action
v1.8.0-pre-owasp-transfer Maintenance

Routine maintenance and dependency updates.

Review required
v1.8.0 Breaking risk
Dependencies

Usage‑aware dependency analysis

No immediate action
v1.7.1 Breaking risk

Suppress pre‑release fixes

No immediate action
v1.7.0 New feature

pnpm v9 support + case studies

No immediate action
v1.6.0 Breaking risk

Bun lockfile + break change labels

No immediate action
v1.5.4 Bug fix

Validation fixes

Review required
v1.5.3 Breaking risk

CVSS misclassification fix

No immediate action
v1.5.2 New feature

Conservative --fix mode

No immediate action
v1.5.1 Maintenance

Routine maintenance and dependency updates.

No immediate action
v1.5.0 New feature

Structured tables + version scans

No immediate action
v1.4.0 New feature

NestJS case study

No immediate action
v1.3.0 New feature

Package‑manager aware fixes

No immediate action
v1.2.0 Breaking risk

npm cache removal

No immediate action
v1.1.1 New feature

Sync speed boost + stale‑data warning

No immediate action
v1.1.0 New feature

Offline SQLite advisory DB

Review required
v1.0.6 New feature
Dependencies

Parent upgrade guidance + output improvements

Config change
v1.0.5 New feature
Auth RBAC

Configurable advisory endpoint

No immediate action
v1.0.4 New feature

Summary-first CLI output + --verbose

No immediate action
v1.0.3 Maintenance

Documentation & repo updates

No immediate action
1.0.2 New feature

CVE Lite CLI release

Beta — feedback welcome: [email protected]