aboutcode-org / aboutcode-org/vulnerablecode

Incorrect vulnerability data for https://public.vulnerablecode.io/vulnerabilities/VCID-brza-eagp-aaah/packages

Aberta
#1,811 1 comentário 0 reações 0 responsáveis Ver no GitHub
Linguagem predominante
Python
Estrelas
702
Forks
328
Merge médio
3d 8h
PRs com merge (30d)
3

Descrição

The https://public.vulnerablecode.io/vulnerabilities/VCID-brza-eagp-aaah/packages has a weird history:
- We imported it first with a weird, invalid "PYSEC-0000-000" id when it was first published on pypa https://github.com/pypa/advisory-database/commit/1ba9ff0a4594ba9b99fa0e681601331f01f8eabe
- There were issues and fixes in there:
- https://github.com/pypa/advisory-database/issues/174

This was later corrected, but we have incorrectly kept a relationship between this package and another "PYSEC-0000-000" vulnerability
![Screenshot 2025-03-11 at 10-34-49 VulnerableCode Vulnerability Package Details - VCID-brza-eagp-aaah](https://github.com/user-attachments/assets/9f422934-7f1b-49f5-9a7f-530ec6dae453)

Guia de contribuição

Nenhum guia de contribuição indexado para este repositório

Avaliação

Esta issue ainda não foi avaliada.

Receba novas issues na sua caixa de entrada

Um resumo curto de issues do GitHub para quem está começando.