aboutcode-org / aboutcode-org/vulnerablecode
Confirm that importers filter out CVE Status "REJECT" and NVD Status "Rejected"
- Lingua principale
- Python
- Stelle
- 702
- Fork
- 328
- Merge medio
- 3g 8h
- PR unite (30g)
- 3
Descrizione
Please refer to https://nvd.nist.gov/vuln/vulnerability-status
In the "CVE List Statuses" table, note:
`REJECT | ... As a rule, REJECT CVE Entries should be ignored.`
In the "NVD Statuses" table, note:
`Rejected | CVE has been marked as "**REJECT**" in the CVE List. These CVEs are stored in the NVD, but do not show up in search results.`
Both Statuses are essentially "noise" and it seems that the associated CVE/NVD's should not be selected for VulnerableCode data, since they are only a distraction and add no value to VulnerableCode.
If VC is already filtering such entries out, please simply confirm and close this issue; otherwise, please improve the importers (and possibly the improvers) to filter them out.
Guida per i contributori
Nessuna guida per i contributori indicizzata per questo repository
Valutazione
Questa issue non è ancora stata valutata.