From bae1d7da8064a3bac42edae24581f22219aec4aa Mon Sep 17 00:00:00 2001
From: Jamie Strandboge <jamie@influxdata.com>
Date: Mon, 11 Dec 2023 14:02:57 -0600
Subject: [PATCH] fix(cve-nfu): handle CVE-...,CVE-...

---
 bin/cve-nfu | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/bin/cve-nfu b/bin/cve-nfu
index b6f4ce0..7282930 100755
--- a/bin/cve-nfu
+++ b/bin/cve-nfu
@@ -108,7 +108,9 @@ else
         cves=("$@")
     fi
 
-    for cve in "${cves[@]}" ; do
-        add_nfu "${cve//,/}" "$proj"
+    for tmp in "${cves[@]}" ; do
+        for cve in ${tmp//,/ } ; do  # handle CVE-YYYY-NNN1,CVE-YYYY-NNN2
+            add_nfu "$cve" "$proj"
+        done
     done
 fi