aboutcode-org / aboutcode-org/vulnerablecode
Incorrect CVSS scores in GitLab v2 advisories
Open
bug
- Dominant language
- Python
- Stars
- 702
- Forks
- 328
- Avg merge
- 3d 8h
- Merged PRs (30d)
- 3
Description
Rather than storing `None`, the pipeline should compute and store valid CVSS scores from CVSS vector using `Cvssv2ScoringSystem.compute` and `Cvssv3ScoringSystem.compute`.
https://github.com/aboutcode-org/vulnerablecode/blob/77e90520629a9d5e84808c486c27eb6c679dc5a3/vulnerabilities/pipelines/v2_importers/gitlab_importer.py#L306-L323
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.