aboutcode-org / aboutcode-org/vulnerablecode
Conflicting advisories
Open
- Dominant language
- Python
- Stars
- 702
- Forks
- 328
- Avg merge
- 3d 8h
- Merged PRs (30d)
- 3
Description
While working on advisory rearchitecture I was easily able to see conflicting advisories talking about same vulnerability but with different version ranges.
- https://github.com/advisories/GHSA-cf66-xwfp-gvc4
- https://github.com/nodejs/security-wg/blob/main/vuln/npm/485.json
- https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/webpack-dev-server/CVE-2018-14732.yml
- https://nvd.nist.gov/vuln/detail/CVE-2018-14732#range-14726889
Gitlab and NVD says this vulnerability is fixed by 3.1.6 and NPM and GHSA says it's fixed by 3.1.11 reporting 3.1.6 as vulnerable too.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.