aboutcode-org / aboutcode-org/vulnerablecode

Improve handling of scores

Open
#1,332 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
702
Forks
328
Avg merge
3d 8h
Merged PRs (30d)
3

Description

https://public.vulnerablecode.io/vulnerabilities/VCID-bk15-3vac-aaaj for CVE-2021-44228 has scores all over the places. We need to refactor the way we handle scores.

The low score of https://access.redhat.com/errata/RHSA-2021:5140 is not vulnerability-level. It is instead for a package in a certain usage context. Almost like a VEX or VDR.

![Screenshot_2023-11-06 VulnerableCode Vulnerability Details - VCID-bk15-3vac-aaaj](https://github.com/nexB/vulnerablecode/assets/675997/852e9236-a675-4f38-bf71-eb711c660aea)

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.