aboutcode-org / aboutcode-org/vulnerablecode
Gitlab data source damages package versions
未关闭
- 主要语言
- Python
- 星标
- 702
- 派生
- 328
- 平均合并
- 3 天 8 小时
- 30 天内合并 PR
- 3
描述
This is seen in https://public.vulnerablecode.io/advisories/todos/bc2bc6bf-eeb8-49ea-ad03-76eae234ceb2/package/curate/
Here Gitlab transformed the version 9.15 from upstream in 9.15.0 which is still technically the same, BUT does not exist in PyPI https://pypi.org/project/pgadmin4/#history
This is from https://gitlab.com/gitlab-org/security-products/gemnasium-db/-/blob/master/pypi/pgadmin4/CVE-2026-7813.yml
@dbolkensteyn FYI there is something weird in your advisory data (both gemnasium AND the public open source one)
贡献指南
这个仓库没有索引到贡献指南
评估
这个 Issue 还没有评估数据。