# Task: Check Dependencies for Known Vulnerabilities

Analyze `workspace/requirements.txt` for packages with known security vulnerabilities by cross-referencing against `workspace/vuln_database.json`.

## Requirements

1. Read `workspace/requirements.txt` (pinned package versions).
2. Read `workspace/vuln_database.json` (vulnerability database with CVE entries).
3. For each package in requirements.txt, check if its version is affected by any CVE in the database.
4. Write `workspace/dependency_audit.json` as a JSON array of objects for vulnerable packages, each with:
   - `package`: package name
   - `installed_version`: version from requirements.txt
   - `cve_id`: the CVE identifier
   - `severity`: from the database (`"critical"`, `"high"`, `"medium"`, `"low"`)
   - `fixed_version`: the version that fixes the vulnerability
   - `description`: brief description of the vulnerability

## Notes

- There are 15 packages; 5 have known vulnerabilities in the database.
- A package is vulnerable if its installed version falls within the affected version range.
- Version comparison: a version is affected if it is `>=` the `affected_from` and `<` the `fixed_version`.

## Output

Save results to `workspace/dependency_audit.json`.
