aboutcode-org / aboutcode-org/vulnerablecode

Duplicated references

Đang mở
#1,814 1 bình luận 0 reaction 0 người được giao Xem trên GitHub
Ngôn ngữ chính
Python
Star
702
Fork
328
Merge trung bình
3 ngày 8 giờ
Pull request đã merge (30 ngày)
3

Mô tả

In https://public.vulnerablecode.io/vulnerabilities/VCID-wsth-kwqz-aaak we have a tons of duplicated severities

```
System Score Found at
cvssv3 5.6 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-35195.json
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
epss 0.00045 https://api.first.org/data/v1/epss?cve=CVE-2024-35195
cvssv3.1 6 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-9wx4-h78v-vm56
cvssv3.1 5.6 https://github.com/psf/requests
generic_textual MODERATE https://github.com/psf/requests
cvssv3.1 5.6 https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac
generic_textual MODERATE https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac
cvssv3.1 5.6 https://github.com/psf/requests/pull/6655
generic_textual MODERATE https://github.com/psf/requests/pull/6655
cvssv3.1 5.6 https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56
cvssv3.1_qr MODERATE https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56
ssvc Track https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56
cvssv3.1 5.6 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q
generic_textual MODERATE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q
cvssv3.1 5.6 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ
generic_textual MODERATE https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ
```

![Screenshot 2025-03-14 at 18-12-35 VulnerableCode Vulnerability Details - VCID-wsth-kwqz-aaak](https://github.com/user-attachments/assets/67dc67d3-80a5-4932-ad07-0ead0a6af757)

and references:
```
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-35195.json
https://api.first.org/data/v1/epss?cve=CVE-2024-35195
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-35195
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://github.com/psf/requests
https://github.com/psf/requests/commit/a58d7f2ffb4d00b46dca2d70a3932a0b37e22fac
https://github.com/psf/requests/pull/6655
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IYLSNK5TL46Q6XPRVMHVWS63MVJQOK4Q/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N7WP6EYDSUOCOJYHDK5NX43PYZ4SNHGZ/
1071593 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1071593
2282114 https://bugzilla.redhat.com/show_bug.cgi?id=2282114
CVE-2024-35195 https://nvd.nist.gov/vuln/detail/CVE-2024-35195
GHSA-9wx4-h78v-vm56 https://github.com/advisories/GHSA-9wx4-h78v-vm56
GHSA-9wx4-h78v-vm56 https://github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56
RHSA-2024:3781 https://access.redhat.com/errata/RHSA-2024:3781
RHSA-2024:4522 https://access.redhat.com/errata/RHSA-2024:4522
RHSA-2024:9988 https://access.redhat.com/errata/RHSA-2024:9988
RHSA-2025:0012 https://access.redhat.com/errata/RHSA-2025:0012
```

Hướng dẫn đóng góp

Chưa lập chỉ mục được hướng dẫn đóng góp cho kho mã nguồn này

Đánh giá

Issue này chưa được đánh giá.

Nhận issue mới trong hộp thư của bạn

Bản tóm tắt ngắn những issue GitHub phù hợp với người mới.