[voltagex_]

But how is the command you mention getting that information? Couldn't you parse the package database in the same way?

[kotakanbe]

Vuls parse the changelog of upgradable packages on Ubuntu, Debian, CentOS.

For details, see the flow chart in Scanning Flow section. https://github.com/future-architect/vuls#scanning-flow