aboutcode-org / aboutcode-org/vulnerablecode

Incorrect vulnerability data for https://public.vulnerablecode.io/vulnerabilities/VCID-brza-eagp-aaah/packages

Open
#1,811 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
702
Forks
328
Avg merge
3d 8h
Merged PRs (30d)
3

Description

The https://public.vulnerablecode.io/vulnerabilities/VCID-brza-eagp-aaah/packages has a weird history:
- We imported it first with a weird, invalid "PYSEC-0000-000" id when it was first published on pypa https://github.com/pypa/advisory-database/commit/1ba9ff0a4594ba9b99fa0e681601331f01f8eabe
- There were issues and fixes in there:
- https://github.com/pypa/advisory-database/issues/174

This was later corrected, but we have incorrectly kept a relationship between this package and another "PYSEC-0000-000" vulnerability
![Screenshot 2025-03-11 at 10-34-49 VulnerableCode Vulnerability Package Details - VCID-brza-eagp-aaah](https://github.com/user-attachments/assets/9f422934-7f1b-49f5-9a7f-530ec6dae453)

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.