Show vulnerability IDs (#15115)

Author: samiat4911

dojo/templates/dojo/finding_pdf_report.html

@@ -104,6 +104,9 @@ <h5>
                                     {% if finding.cwe > 0 %}
                                         <th>CWE</th>
                                     {% endif %}
+                                    {% if finding.vulnerability_ids %}
+                                        <th>Vulnerability IDs</th>
+                                    {% endif %}
                                     {% endblock finding_header %}
                                 </tr>
                                 <tr>
@@ -147,6 +150,9 @@ <h5>
                                             </a>
                                         </td>
                                     {% endif %}
+                                    {% if finding.vulnerability_ids %}
+                                        <td>{{ finding.vulnerability_ids }}</td>
+                                    {% endif %}
                                     {% endblock finding_data %}
                                 </tr>
                             </table>

unittests/test_pdf_report_rendering.py

@@ -9,6 +9,7 @@
     Test,
     Test_Type,
     User,
+    Vulnerability_Id,
 )
 from unittests.dojo_test_case import DojoTestCase, versioned_fixtures
 
@@ -172,6 +173,16 @@ def test_report_field_contains_rendered_content(self):
         # Mitigation content should appear
         self.assertIn("Remove Debug Files From Public Directories", html)
 
+    def test_report_finding_table_includes_vulnerability_ids(self):
+        """Finding PDF reports should show vulnerability IDs in the finding table."""
+        finding = self._create_finding()
+        Vulnerability_Id.objects.create(finding=finding, vulnerability_id="CVE-2026-12345")
+
+        html = self._render_finding_report(Finding.objects.filter(pk=finding.pk))
+
+        self.assertIn("Vulnerability IDs", html)
+        self.assertIn("CVE-2026-12345", html)
+
     def test_long_unbroken_string_in_report_field(self):
         """
         Fields with very long unbroken strings should render inside report-field