aboutcode-org / aboutcode-org/vulnerablecode
Conflicting advisories
未關閉
- 主要語言
- Python
- 星號
- 702
- 分支
- 328
- 平均合併
- 3 天 8 小時
- 30 天內合併 PR
- 3
描述
While working on advisory rearchitecture I was easily able to see conflicting advisories talking about same vulnerability but with different version ranges.
- https://github.com/advisories/GHSA-cf66-xwfp-gvc4
- https://github.com/nodejs/security-wg/blob/main/vuln/npm/485.json
- https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/webpack-dev-server/CVE-2018-14732.yml
- https://nvd.nist.gov/vuln/detail/CVE-2018-14732#range-14726889
Gitlab and NVD says this vulnerability is fixed by 3.1.6 and NPM and GHSA says it's fixed by 3.1.11 reporting 3.1.6 as vulnerable too.
貢獻指南
這個儲存庫沒有索引到貢獻指南
評估
這個 Issue 還沒有評估資料。