aboutcode-org / aboutcode-org/vulnerablecode

We do not collect the affected range for Gitlab advisories

Abierto
#2,412 1 comentario 0 reacciones 0 asignados Ver en GitHub
Lenguaje dominante
Python
Estrellas
702
Forks
328
Merge medio
3 d 8 h
PR fusionados (30 d)
3

Descripción

See https://public.vulnerablecode.io/advisories/todos/1e80217b-9032-4276-8e5b-170de8ebf750/package/curate/

and https://public.vulnerablecode.io/advisories/packages/gitlab/maven/org.bouncycastle/bcprov-debug-jdk14/CVE-2025-14813

Upstream has these ranges:
https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.bouncycastle/bcprov-debug-jdk14/CVE-2025-14813.yml
```
affected_range: "[1.59.0,1.80.1],[1.82.0,1.84.0),[1.81.0,1.81.0]"
fixed_versions:
- "1.84.0"
```

- affected_range is missing
- These are subject to the #2411 issue too, but we should collect the affected range
- version `1.84.0` is reported as a ghost because there is no such version upstream
- https://public.vulnerablecode.io/packages/v2/pkg:maven/org.bouncycastle/bcprov-debug-jdk14@1.84.0?search=pkg:maven/org.bouncycastle/bcprov-debug-jdk14@1.84.0
- https://repo1.maven.org/maven2/org/bouncycastle/bcprov-debug-jdk14/1.84/

Guía de contribución

No hay ninguna guía de contribución indexada para este repositorio

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.