aboutcode-org / aboutcode-org/vulnerablecode
Conflicting advisories
- Lingua principale
- Python
- Stelle
- 702
- Fork
- 328
- Merge medio
- 3g 8h
- PR unite (30g)
- 3
Descrizione
While working on advisory rearchitecture I was easily able to see conflicting advisories talking about same vulnerability but with different version ranges.
- https://github.com/advisories/GHSA-cf66-xwfp-gvc4
- https://github.com/nodejs/security-wg/blob/main/vuln/npm/485.json
- https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/webpack-dev-server/CVE-2018-14732.yml
- https://nvd.nist.gov/vuln/detail/CVE-2018-14732#range-14726889
Gitlab and NVD says this vulnerability is fixed by 3.1.6 and NPM and GHSA says it's fixed by 3.1.11 reporting 3.1.6 as vulnerable too.
Guida per i contributori
Nessuna guida per i contributori indicizzata per questo repository
Valutazione
Questa issue non è ancora stata valutata.