aboutcode-org / aboutcode-org/vulnerablecode
Different behaviour of vulnerable code and govulncheck
- Ngôn ngữ chính
- Python
- Star
- 702
- Fork
- 328
- Merge trung bình
- 3 ngày 8 giờ
- Pull request đã merge (30 ngày)
- 3
Mô tả
Hi, I tried to reproduce the tutorial case from https://go.dev/doc/tutorial/govulncheck with golang.org/x/text@v0.3.5 but did not get a hit in VulnerableCode, even if I tried some variations to create the PURL as described in https://github.com/aboutcode-org/vulnerablecode/issues/749
On the other side, if I search by the CVE https://public.vulnerablecode.io/vulnerabilities/VCID-h89x-2eq9-aaar?search=CVE-2021-38561 the component is listed.
So VulnerableCode seems to have the information but for me it is unclear how I can access it using the PURL or at least fragments of the package name. Is there a way to search by "*golang.org/x/text*" to get "approximate" findings?
What would you recommend to reproduce the above mentioned tutorial with VulnerableCode?
Hướng dẫn đóng góp
Chưa lập chỉ mục được hướng dẫn đóng góp cho kho mã nguồn này
Đánh giá
Issue này chưa được đánh giá.