aboutcode-org / aboutcode-org/vulnerablecode
Inconsistent package and version ranges
- 主要语言
- Python
- 星标
- 702
- 派生
- 328
- 平均合并
- 3 天 8 小时
- 30 天内合并 PR
- 3
描述
See:
- https://github.com/github/advisory-database/pull/5032#issuecomment-2930738938
and
https://public.vulnerablecode.io/vulnerabilities/VCID-a2bb-91uk-hqbg?search=CVE-2024-47535
This vulnerability's records are a problematic as pointed by @AB-xdev ... and there are more issues beyond CVSS, but also wrt. to the package and versions.
from
- https://github.com/github/advisory-database/pull/5032#issuecomment-2930738938
> It is normal that these three data source do not agree on the package name and the versions ranges:
>
> - GitHub: https://github.com/advisories/GHSA-xq3w-v528-46rv
> - Upstream: https://github.com/netty/netty/security/advisories/GHSA-xq3w-v528-46rv
> - CVE.org https://github.com/CVEProject/cvelistV5/blob/027ef3e8f36744185584dc5deaa41af4025eb07f/cves/2024/47xxx/CVE-2024-47535.json#L5
>
> 
>
> 
>
> 
>
>
>
贡献指南
这个仓库没有索引到贡献指南
评估
这个 Issue 还没有评估数据。