mirror of
https://github.com/0xMarcio/cve.git
synced 2026-10-27 16:51:03 +00:00
0xMarcio
dfa41dfbe1
Every keystroke scanned 28 MB of description text, and for terms of four characters or more the loose regex then ran against every entry that did not match, about 80,000 regex tests a keystroke: 100 to 230 ms on a desktop, several times that on a phone. The index now maps each word to the entries carrying it, built in slices after the data lands so typing never waits on it, and a term is a prefix lookup plus a scan of the candidates alone: 7 to 40 ms measured on the same queries. The loose form of a term, "log-4j" for log4j, is only found by the full pass, which now runs when the indexed pass comes back nearly empty and not otherwise. The severity and source of an entry are cached as well, so a filter pass over the whole index takes 20 ms instead of half a second. Within a score tier the order fell straight through to the year, which put five 2026 records above regreSSHion for "openssh" and kept Log4Shell off the first page of "log4j". Ties now go to the evidence first: CISA's listing, how many PoCs exist, how likely exploitation is, and only then the year. A switch on the results panel offers newest and most PoCs instead, and rides in the URL like the query and the filters. The title, vendor and product of a record score above its prose once the records carry them.
