aboutcode-org / aboutcode-org/vulnerablecode

Duplicated references

オープン
#1,814 コメント 1 件 リアクション 0 件 担当者 0 名 GitHub で見る
主要言語
Python
スター
702
フォーク
328
平均マージ
3日 8時間
マージ済み PR(30日)
3

説明

In https://public.vulnerablecode.io/vulnerabilities/VCID-wsth-kwqz-aaak we have a tons of duplicated severities

```
System Score Found at
cvssv3 5.6 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-35195.json
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
cvssv3.1 6 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-9wx4-h78v-vm56
cvssv3.1 5.6 https://github.com/psf/requests
generic_textual MODERATE https://github.com/psf/requests
cvssv3.1 5.6 https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac
generic_textual MODERATE https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac
cvssv3.1 5.6 https://github.com/psf/requests/pull/6655
generic_textual MODERATE https://github.com/psf/requests/pull/6655
cvssv3.1 5.6 https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56
cvssv3.1_qr MODERATE https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56
ssvc Track https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56
cvssv3.1 5.6 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q
generic_textual MODERATE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q
cvssv3.1 5.6 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ
generic_textual MODERATE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ
```

![Screenshot 2025-03-14 at 18-12-35 VulnerableCode Vulnerability Details - VCID-wsth-kwqz-aaak](https://github.com/user-attachments/assets/67dc67d3-80a5-4932-ad07-0ead0a6af757)

and references:
```
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-35195.json
https://api.first.org/data/v1/epss?cve=CVE-2024-35195
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35195
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://github.com/psf/requests
https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac
https://github.com/psf/requests/pull/6655
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ/
1071593 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1071593
2282114 https://bugzilla.redhat.com/show_bug.cgi?id=2282114
CVE-2024-35195 https://nvd.nist.gov/vuln/detail/CVE-2024-35195
GHSA-9wx4-h78v-vm56 https://github.com/advisories/GHSA-9wx4-h78v-vm56
GHSA-9wx4-h78v-vm56 https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56
RHSA-2024:3781 https://access.redhat.com/errata/RHSA-2024:3781
RHSA-2024:4522 https://access.redhat.com/errata/RHSA-2024:4522
RHSA-2024:9988 https://access.redhat.com/errata/RHSA-2024:9988
RHSA-2025:0012 https://access.redhat.com/errata/RHSA-2025:0012
```

コントリビューションガイド

このリポジトリのコントリビューションガイドは索引されていません

評価

この issue はまだ評価されていません。

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。