aboutcode-org / aboutcode-org/vulnerablecode

Malformed aliases and AVID in the Alpine, Mattermost, Fireeye and Istio Advisory

Open
#2,272 3 comments 1 reaction 1 assignee Claimed by @ziadhany View on GitHub
bug
Dominant language
Python
Stars
702
Forks
328
Avg merge
3d 8h
Merged PRs (30d)
3

Description

We should validate CVEs while parsing aliases in the v2 Alpine importer, and add a data migration to fix this in existing records.

https://public.vulnerablecode.io/advisories/alpine_linux_importer_v2/zabbix/v3.9/3.0.4-r0/CVE
https://public.vulnerablecode.io/advisories/alpine_linux_importer_v2/zabbix/v3.11/3.0.4-r0/CVE
https://public.vulnerablecode.io/advisories/alpine_linux_importer_v2/py3-pillow/v3.23/11.3.0-r0/CVE
https://public.vulnerablecode.io/advisories/alpine_linux_importer_v2/py3-pillow/edge/11.3.0-r0/CVE

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.