Vulnerabilities in old versions
Open
- Dominant language
- Java
- Stars
- 1.4k
- Forks
- 326
- Avg merge
- 16h 22m
- Merged PRs (30d)
- 17
Description
According to my testing version 2.6.0 has made some progress and fixed a number of vulnerabilities that were still present in version 2.5.2. I'm therefore wondering if there is a list of CVEs for the issues that have been fixed.
Contributor guide
Research direction
The issue names no file, test, or entry point. Start by reviewing the changes between Conscrypt 2.5.2 and 2.6.0 and any existing release or security documentation, then verify which fixes have assigned CVEs; done means publishing a sourced list of the relevant CVEs.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- cryptography, security
- Issue type
- Documentation
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 45/100