[AIG] Add 8 fingerprints + 196 CVE rules, remove non-AI products & OpenClaw GHSA dedup [2026-07-24]

[feiyang666]

New Fingerprints (8 AI Products)

#	Fingerprint	Description
1	agentic-flow	MCP server, version extraction
2	agenticmail	AI agent email platform, header match
3	ai-copilot	WordPress AI plugin, version extraction
4	gpt-sovits	AI voice synthesis, version extraction
5	langbot	Multi-platform AI chatbot
6	lightrag	RAG framework, version extraction
7	mcp-documentation-server	MCP server
8	netlicensing-mcp	MCP server, version extraction

crewai / cognee / langroid / ruflo fingerprints already merged into upstream main via fork.

New Vulnerability Rules (EN 196 + CN 196 = 392)

Product	EN Count	Key Vulnerability Types
openwebui	66	XSS / injection / auth bypass
praisonai	48	SSRF / auth flaws
openclaw	28	New CVE-format rules (replacing GHSA)
langflow	18	SSRF / RCE
astrbot	7	Auth bypass
Others	57	mcp / sglang / lollms / jupyter etc.

Cleanup

Type	Count	Details
Non-AI product removal	5+5	budibase / pgadmin / pyload / sim / wallos (fingerprints + CVE, EN+CN)
OpenClaw GHSA→CVE dedup	181+183	GHSA dual-naming consolidated to CVE format

Quality Assurance

• ✅ cvss field normalized to string (yamlcheck !!map into string fix)
• ✅ references at top level only (removed from info block)
• ✅ rule at top level (not nested in aig_matchers)
• ✅ author unified to A.I.G bot
• ✅ Fingerprint matchers use double-quote format
• ✅ Based on latest upstream/main branch