DependencyTrack / DependencyTrack/dependency-track

include vulnerabilities from other sources than NVD in exploit predictions graph

Open
#1,899 2 comments 0 reactions 0 assignees View on GitHub
enhancement on hold
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

The enhancement may already be reported! Please search for the enhancement before creating one.

### Current Behavior:
vulnerabilities reported by oss index or github are not in the exploit predictions graph

### Proposed Behavior:
include these vulnerabilities in the graph so that we can prioritize their audit

![image](https://user-images.githubusercontent.com/43956285/185364522-675acde3-91bb-4b0c-a212-e00cb2858502.png)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.