vulnerabilities

What would you like to be added:

Please add some basic instructions for compiling the binaries to the install readme as an alternative to curl to bash.

Why is this needed:

Some folks are uncomfortable with the security implications of curl to bash

There are additional use cases where users may wish to modify the functionality of the project to better fit their needs

**Addit

What happened

Evidence field doesn't show all the affected pods rather it shows only the count and only one pod details

• location: 127.0.0.1:10255
  vid: KHV044
  category: Privilege Escalation // Privileged container
  severity: high
  vulnerability: Privileged Container
  description: "A Privileged container exist on a node\n could expose the node/cluster
  \ to unwanted r

I thought it would be nice to have a section for talks related to Node.js security. What do you think ? (I can PR a bunch of talks i have in favorite if you are ok with the idea).

Context

• This is part of release-1.5 #148
• MEDIUM priority task

Tasks

• Remove dependency bcrypt-nodejs in package.json
• Add dependency bcrypt in package.json
• Migrate file app/data/user-dao.js to bcrypt
• Validate the instalation with the local test
• Add and submit the chang

Is this a request for help?: Yes

Is this a BUG REPORT or a FEATURE REQUEST? (choose one): FEATURE REQUEST

Can we add a option to allow the engine update vulnerabilities database through specific proxy ser

Current Behavior:

As identified in #1727, there may be multiple fields of CycloneDX BOMs that we currently don't ingest or display.

Proposed Behavior:

Assess DT's coverage of CycloneDX v1.4 fields and add support for ingesting and displaying missing fields.

Is your feature request related to a problem?
Sometimes its hard to know the vendor for a product in the "my products" list, eg. if the product's name is "4221" (-> Cisco).

Do you have a solution in mind, or a suggestion to improve OpenCVE?
In /account/subscriptions it would be great to have the vendor name and the product name in one line.
CPE 2.3 string would be additionally a gre