aboutcode-org / aboutcode-org/vulnerablecode
Wrong CVSS3 V3.1 QR "MODERATE"
- Lenguaje dominante
- Python
- Estrellas
- 702
- Forks
- 328
- Merge medio
- 3 d 8 h
- PR fusionados (30 d)
- 3
Descripción
GitHub advisories provide the severity "MODERATE" and as a result VulnerableCode does also provide this severity which according to the [specification](https://www.first.org/cvss/v3.1/specification-document#Qualitative-Severity-Rating-Scale) should be "MEDIUM" instead.
For example, this severity is classified as "MODERATE" by GitHub:
https://github.com/advisories/GHSA-c7mc-q43h-5672
It is reported by VulnerableCode as:
```json
{
"reference_url": "https://github.com/advisories/GHSA-c7mc-q43h-5672",
"reference_id": "GHSA-c7mc-q43h-5672",
"scores": [
{
"value": "MODERATE",
"scoring_system": "cvssv3.1_qr",
"scoring_elements": ""
}
],
"url": "https://github.com/advisories/GHSA-c7mc-q43h-5672"
}
```
It would be good if VulnerableCode could map "MODERATE" to the correct "MEDIUM" in its API response.
Guía de contribución
No hay ninguna guía de contribución indexada para este repositorio
Evaluación
Este issue todavía no se ha evaluado.