aboutcode-org / aboutcode-org/vulnerablecode
GHSA entry reports incorrect scoring system for 2024 vulnerabilities
Open
bug
data-quality
Priority: medium
- Dominant language
- Python
- Stars
- 702
- Forks
- 328
- Avg merge
- 3d 8h
- Merged PRs (30d)
- 3
Description
For VCID-yktk-48uz-aaac, VCIO does not report a CVSS score for https://nvd.nist.gov/vuln/detail/CVE-2024-34750.
This is correct for CVSS v4 but there is a CVSS v3.x score available.
We do not want to collect CVSS v2 data, but we will need to deal with both v3.x and v4 scores for at least the near future.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.