DependencyTrack / DependencyTrack/dependency-track
Ability to change severity
Open
enhancement
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
### Current Behavior:
Currently, it is only possible to mark a vulnerability as a false positive or exploitable.
### Proposed Behavior:
Give the user the ability to change the severity of a given vulnerability. Perhaps this could be a separate analysis state of "SEVERITY_CHANGE" or something similar. I'm envisioning this being used in situations where environmental or temporal factors change the severity.
Contributor guide
Assessment
This issue has not been assessed yet.