regscale-cli 6.28.0.0__py3-none-any.whl → 6.28.1.1__py3-none-any.whl

regscale/_version.py

@@ -33,7 +33,7 @@ def get_version_from_pyproject() -> str:
                     return match.group(1)
     except Exception:
         pass
-    return "6.28.0.0"  # fallback version
+    return "6.28.1.1"  # fallback version
 
 
 __version__ = get_version_from_pyproject()

regscale/integrations/commercial/synqly/ticketing.py

@@ -49,6 +49,33 @@ def sync_freshdesk(regscale_id: int, regscale_module: str, name: str, subject: s
     ticketing_freshdesk.run_sync(regscale_id=regscale_id, regscale_module=regscale_module, name=name, subject=subject)
 
 
+@ticketing.command(name="sync_ivanti")
+@regscale_id()
+@regscale_module()
+@click.option(
+    "--name",
+    type=click.STRING,
+    help="ivanti name",
+    required=True,
+    prompt="ivanti name",
+)
+@click.option(
+    "--sync_attachments",
+    type=click.BOOL,
+    help="Whether to sync attachments between Ivanti and RegScale",
+    required=False,
+    default=True,
+)
+def sync_ivanti(regscale_id: int, regscale_module: str, name: str, sync_attachments: bool) -> None:
+    """Sync Ticketing data between Ivanti and RegScale."""
+    from regscale.models.integration_models.synqly_models.connectors import Ticketing
+
+    ticketing_ivanti = Ticketing("ivanti")
+    ticketing_ivanti.run_sync(
+        regscale_id=regscale_id, regscale_module=regscale_module, name=name, sync_attachments=sync_attachments
+    )
+
+
 @ticketing.command(name="sync_jira")
 @regscale_id()
 @regscale_module()

regscale/models/integration_models/cisa_kev_data.json

@@ -1,9 +1,39 @@
 {
     "title": "CISA Catalog of Known Exploited Vulnerabilities",
-    "catalogVersion": "2025.10.29",
-    "dateReleased": "2025-10-29T18:39:31.8373Z",
-    "count": 1451,
+    "catalogVersion": "2025.10.30",
+    "dateReleased": "2025-10-30T17:58:16.1627Z",
+    "count": 1453,
     "vulnerabilities": [
+        {
+            "cveID": "CVE-2025-41244",
+            "vendorProject": "Broadcom",
+            "product": "VMware Aria Operations and VMware Tools",
+            "vulnerabilityName": "Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability",
+            "dateAdded": "2025-10-30",
+            "shortDescription": "Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.",
+            "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
+            "dueDate": "2025-11-20",
+            "knownRansomwareCampaignUse": "Unknown",
+            "notes": "https:\/\/support.broadcom.com\/web\/ecx\/support-content-notification\/-\/external\/content\/SecurityAdvisories\/0\/36149 ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-41244",
+            "cwes": [
+                "CWE-267"
+            ]
+        },
+        {
+            "cveID": "CVE-2025-24893",
+            "vendorProject": "XWiki",
+            "product": "Platform",
+            "vulnerabilityName": "XWiki Platform Eval Injection Vulnerability",
+            "dateAdded": "2025-10-30",
+            "shortDescription": "XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a request to SolrSearch.",
+            "requiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
+            "dueDate": "2025-11-20",
+            "knownRansomwareCampaignUse": "Unknown",
+            "notes": "https:\/\/github.com\/xwiki\/xwiki-platform\/security\/advisories\/GHSA-rr6p-3pfg-562j ; https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-24893",
+            "cwes": [
+                "CWE-95"
+            ]
+        },
         {
             "cveID": "CVE-2025-6204",
             "vendorProject": "Dassault Syst\u00e8mes",
@@ -4980,7 +5010,7 @@
             "shortDescription": "Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.",
             "requiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
             "dueDate": "2024-06-20",
-            "knownRansomwareCampaignUse": "Unknown",
+            "knownRansomwareCampaignUse": "Known",
             "notes": "This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https:\/\/git.kernel.org\/pub\/scm\/linux\/kernel\/git\/torvalds\/linux.git\/commit\/?id=f342de4e2f33e0e39165d8639387aa6c19dff660;   https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2024-1086",
             "cwes": [
                 "CWE-416"