aboutcode-org / aboutcode-org/vulnerablecode

Different behaviour of vulnerable code and govulncheck

Aberta
#1,564 1 comentário 0 reações 1 responsável Reivindicada por @keshav-space Ver no GitHub
3-next bug
Linguagem predominante
Python
Estrelas
702
Forks
328
Merge médio
3d 8h
PRs com merge (30d)
3

Descrição

Hi, I tried to reproduce the tutorial case from https://go.dev/doc/tutorial/govulncheck with golang.org/x/text@v0.3.5 but did not get a hit in VulnerableCode, even if I tried some variations to create the PURL as described in https://github.com/aboutcode-org/vulnerablecode/issues/749

On the other side, if I search by the CVE https://public.vulnerablecode.io/vulnerabilities/VCID-h89x-2eq9-aaar?search=CVE-2021-38561 the component is listed.
So VulnerableCode seems to have the information but for me it is unclear how I can access it using the PURL or at least fragments of the package name. Is there a way to search by "*golang.org/x/text*" to get "approximate" findings?

What would you recommend to reproduce the above mentioned tutorial with VulnerableCode?

Guia de contribuição

Nenhum guia de contribuição indexado para este repositório

Avaliação

Esta issue ainda não foi avaliada.

Receba novas issues na sua caixa de entrada

Um resumo curto de issues do GitHub para quem está começando.