AppThreat / AppThreat/vulnerability-db
Support for ignoring based on type
Open
- Dominant language
- Python
- Stars
- 151
- Forks
- 23
- Avg merge
- 22m
- Merged PRs (30d)
- 7
Description
Noticed that the app-only database still includes vulnerabilities of type rpm and deb.
Example: CVE-2024-6387
https://github.com/AppThreat/vuln-list/blob/main/nvd/2024/CVE-2024-6387.json
`cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*` becomes `pkg:rpm/redhat/openshift_container_platform` based on the vers [type](https://github.com/AppThreat/vulnerability-db/blob/e0e3ec87efa18fb63c57a57c6020301add99fb0f/vdb/lib/config.py#L137).
We can further attempt to trim the db by ignoring certain types based on environment variables.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.