aboutcode-org / aboutcode-org/www.aboutcode.org
POST: it is hard to rate the severity of vulnerabiliies
Offen
blog
- Vorherrschende Sprache
- JavaScript
- Sterne
- 9
- Forks
- 18
- PR-Merge-Kennzahlen
- Keine gemergten PRs in 30 T.
Beschreibung
It is hard to rate the severity of vulnerabilities!
Let's look beyond the alphabet soup of CVSS, KEY, EPSS, SSVC.
- Can AI be a solution with VLAI? https://huggingface.co/CIRCL/vulnerability-severity-classification-roberta-base
- Or the new metric from NIST https://csrc.nist.gov/pubs/cswp/41/likely-exploited-vulnerabilities-a-proposed-metric/final ?
- Or the vulnerablecode risk score https://github.com/aboutcode-org/vulnerablecode/issues/1543#issuecomment-2502021872
See also Tod Beardsley https://www.youtube.com/watch?v=348LcypOPI0
Beitragsleitfaden
Für dieses Repository ist kein Beitragsleitfaden indexiert
Bewertung
Dieses Issue wurde noch nicht bewertet.