mirror of
https://github.com/Studio-Saelix/sencho.git
synced 2026-07-26 11:49:16 +00:00
c2b508e8b1
The exploit-intel query capped its results with "EPSS DESC, then CVSS DESC", treating an absent EPSS score as the lowest possible value. The overview list ranks the same findings under the assume-it-is-automatable model, where a finding with no EPSS evidence outranks one shown unlikely to be exploited (known-exploited > elevated EPSS > unknown EPSS > known-low EPSS). With more than the row cap of findings, the two disagreed: the cap could keep a known-low-EPSS finding and drop a higher-CVSS finding with no EPSS evidence that the list considers more urgent, hiding it from the dashboard. Rank the capped query by the same tiers the list uses (reusing the shared EPSS threshold) so the rows that survive truncation are the ones the list ranks highest.