aboutcode-org / aboutcode-org/vulnerablecode

Provide link to GMS Aliases in UI (and API)

Aberta
#1,182 0 comentários 0 reações 0 responsáveis Ver no GitHub
Linguagem predominante
Python
Estrelas
702
Forks
328
Merge médio
3d 8h
PRs com merge (30d)
3

Descrição

This https://public.vulnerablecode.io/vulnerabilities/VCID-yqzv-rncc-aaak?search=CVE-2022-40151
has this `GMS-2022-9109` as an alias but without a link to its upstream which is https://gitlab.com/gitlab-org/security-products/gemnasium-db/-/blob/master/maven/com.thoughtworks.xstream/xstream/GMS-2022-9109.yml
We should provide a link to the alias. If we do not store it, we should store a canonical link to an alias and not rely only on computing these on the fly. For GMS (formerly Gemnasium, acquired by Gitlab) there is no easy URL that we can construct as the GMS-2022-9109.yml is stored under a specific directory tree named after the affected package.

Guia de contribuição

Nenhum guia de contribuição indexado para este repositório

Avaliação

Esta issue ainda não foi avaliada.

Receba novas issues na sua caixa de entrada

Um resumo curto de issues do GitHub para quem está começando.