aboutcode-org / aboutcode-org/vulnerablecode
Inconsistent package and version ranges
- Lingua principale
- Python
- Stelle
- 702
- Fork
- 328
- Merge medio
- 3g 8h
- PR unite (30g)
- 3
Descrizione
See:
- https://github.com/github/advisory-database/pull/5032#issuecomment-2930738938
and
https://public.vulnerablecode.io/vulnerabilities/VCID-a2bb-91uk-hqbg?search=CVE-2024-47535
This vulnerability's records are a problematic as pointed by @AB-xdev ... and there are more issues beyond CVSS, but also wrt. to the package and versions.
from
- https://github.com/github/advisory-database/pull/5032#issuecomment-2930738938
> It is normal that these three data source do not agree on the package name and the versions ranges:
>
> - GitHub: https://github.com/advisories/GHSA-xq3w-v528-46rv
> - Upstream: https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv
> - CVE.org https://github.com/CVEProject/cvelistV5/blob/027ef3e8f36744185584dc5deaa41af4025eb07f/cves/2024/47xxx/CVE-2024-47535.json#L5
>
> 
>
> 
>
> 
>
>
>
Guida per i contributori
Nessuna guida per i contributori indicizzata per questo repository
Valutazione
Questa issue non è ancora stata valutata.