aboutcode-org / aboutcode-org/vulnerablecode

Incorrect vulnerability data for https://public.vulnerablecode.io/vulnerabilities/VCID-brza-eagp-aaah/packages

Ouverte
#1,811 1 commentaire 0 réactions 0 personnes assignées Voir sur GitHub
Langage dominant
Python
Étoiles
702
Forks
328
Merge moyen
3 j 8 h
PR mergées (30 j)
3

Description

The https://public.vulnerablecode.io/vulnerabilities/VCID-brza-eagp-aaah/packages has a weird history:
- We imported it first with a weird, invalid "PYSEC-0000-000" id when it was first published on pypa https://github.com/pypa/advisory-database/commit/1ba9ff0a4594ba9b99fa0e681601331f01f8eabe
- There were issues and fixes in there:
- https://github.com/pypa/advisory-database/issues/174

This was later corrected, but we have incorrectly kept a relationship between this package and another "PYSEC-0000-000" vulnerability
![Screenshot 2025-03-11 at 10-34-49 VulnerableCode Vulnerability Package Details - VCID-brza-eagp-aaah](https://github.com/user-attachments/assets/9f422934-7f1b-49f5-9a7f-530ec6dae453)

Guide de contribution

Aucun guide de contribution indexé pour ce dépôt

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.