feat: add CVE to vulnerability_ids in CVE parser

skywalke34 · skywalke34 · commit 0d59af9b5a23 · 2026-04-20T16:44:41.000-06:00
Map the CVE field to unsaved_vulnerability_ids so it appears in the
Vulnerability IDs column in DefectDojo, in addition to vuln_id_from_tool.

Authored by T. Walker - DefectDojo
diff --git a/dojo/tools/qualys_vmdr/cve_parser.py b/dojo/tools/qualys_vmdr/cve_parser.py
@@ -87,4 +87,9 @@ def _create_finding(self, row):
         )
         finding.unsaved_tags = parse_tags(row.get("Asset Tags", ""))
 
+        # Add CVE to vulnerability_ids for proper CVE tracking
+        cve = row.get("CVE", "")
+        if cve:
+            finding.unsaved_vulnerability_ids = [cve]
+
         return finding

Original file line number	Diff line number	Diff line change
`@@ -87,4 +87,9 @@ def _create_finding(self, row):`
`87`	`87`	`)`
`88`	`88`	`finding.unsaved_tags = parse_tags(row.get("Asset Tags", ""))`
`89`	`89`
	`90`	`+ # Add CVE to vulnerability_ids for proper CVE tracking`
	`91`	`+ cve = row.get("CVE", "")`
	`92`	`+ if cve:`
	`93`	`+ finding.unsaved_vulnerability_ids = [cve]`
	`94`	`+`
`90`	`95`	`return finding`