aboutcode-org / aboutcode-org/vulnerablecode

Withdrawn advisory should not affect any package

Open
#2,238 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
702
Forks
328
Avg merge
3d 8h
Merged PRs (30d)
3

Description

`pkg:pypi/py@1.11.0` https://public2.vulnerablecode.io/packages/v2/pkg:pypi/py@1.11.0 is shown as affected in GitHub and GitLab advisories, but advisory has been withdrawn in both locations:

* GitHub https://github.com/github/advisory-database/blob/dc14b83d1a8bde9074284e995aeee1317044f799/advisories/github-reviewed/2022/10/GHSA-w596-4wvx-j9j6/GHSA-w596-4wvx-j9j6.json#L6
* GitLab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/py/CVE-2022-42969.yml

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.