aboutcode-org / aboutcode-org/vulnerablecode

Incorrect vulnerability data for https://public.vulnerablecode.io/vulnerabilities/VCID-brza-eagp-aaah/packages

Abierto
#1,811 1 comentario 0 reacciones 0 asignados Ver en GitHub
Lenguaje dominante
Python
Estrellas
702
Forks
328
Merge medio
3 d 8 h
PR fusionados (30 d)
3

Descripción

The https://public.vulnerablecode.io/vulnerabilities/VCID-brza-eagp-aaah/packages has a weird history:
- We imported it first with a weird, invalid "PYSEC-0000-000" id when it was first published on pypa https://github.com/pypa/advisory-database/commit/1ba9ff0a4594ba9b99fa0e681601331f01f8eabe
- There were issues and fixes in there:
- https://github.com/pypa/advisory-database/issues/174

This was later corrected, but we have incorrectly kept a relationship between this package and another "PYSEC-0000-000" vulnerability
![Screenshot 2025-03-11 at 10-34-49 VulnerableCode Vulnerability Package Details - VCID-brza-eagp-aaah](https://github.com/user-attachments/assets/9f422934-7f1b-49f5-9a7f-530ec6dae453)

Guía de contribución

No hay ninguna guía de contribución indexada para este repositorio

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.