aboutcode-org / aboutcode-org/vulnerablecode
Should the apache_httpd importer include data re fixed versions from httpd.apache.org/security/ HTML files?
- Ngôn ngữ chính
- Python
- Star
- 702
- Fork
- 328
- Merge trung bình
- 3 ngày 8 giờ
- Pull request đã merge (30 ngày)
- 3
Mô tả
Exploring the `json` URL we currently use in the `apache_httpd.py` `fetch_links()` function (https://httpd.apache.org/security/json/), if I navigate up 1 step to https://httpd.apache.org/security/, I see that https://httpd.apache.org/security/ contains links to 4 HTML files (listed below), each of which contains information re which CVEs are fixed in which versions of Apache HTTP Server.
* https://httpd.apache.org/security/vulnerabilities_13.html
* https://httpd.apache.org/security/vulnerabilities_20.html
* https://httpd.apache.org/security/vulnerabilities_22.html
* https://httpd.apache.org/security/vulnerabilities_24.html
Do we want to fetch, analyze and include this information in the `fixed_version` field of the `affected_packages` list for each advisory/CVE?
Hướng dẫn đóng góp
Chưa lập chỉ mục được hướng dẫn đóng góp cho kho mã nguồn này
Đánh giá
Issue này chưa được đánh giá.