aboutcode-org / aboutcode-org/vulnerablecode
Handle CPE data in Vulnerablecode
Open
Core models
- Dominant language
- Python
- Stars
- 702
- Forks
- 328
- Avg merge
- 3d 8h
- Merged PRs (30d)
- 3
Description
1) NVD provides too much details on CPEs https://nvd.nist.gov/vuln/detail/CVE-2011-4136 with fully enumerated CPE ranges, that put a lot of data under references.
2) We need to know which CPE references are interesting, this may require new models and structures
3) CPEs should be referred as a package alias rather than a vulnerability reference.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.