patch-aware scanning

Imagine you’re prepping for a compliance audit, and your vulnerability scanner flags a CVE in glibc. Fair enough. But when you check the system, you find that it’s already been...