DependencyTrack / DependencyTrack/dependency-track

Add cvssV2 mapping in Snyk vulnerability parsing

Open
#2,693 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior

Snyk parser maps and sets only cvssV3 information for either source NVD/SNYK.

### Proposed Behavior

It should parse cvssV2 as well in addition to cvssV3 and assign the values in object accordingly based on source priority.
Also, update the latest api version for Snyk and update the mapping if required.

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.