google / google/osv.dev

Query API for Ubuntu `linux` packages

Open
#2,478 10 comments 0 reactions 1 assignee Assigned to @another-rex View on GitHub
Dominant language
Go
Stars
2.9k
Forks
369
Avg merge
1d 17h
Merged PRs (30d)
149

Description

**Describe the bug**
Not sure if I'm actually missing something, but I'm getting a timeout when running:
```
$ curl -d '{"package": {"name": "linux-oracle-5.15", "ecosystem": "Ubuntu:20.04:LTS"}, "version": "5.15.0-1065.71~20.04.1"}' "https://api.osv.dev/v1/query"
{"code":504,"message":"upstream request timeout"}
```

And I get an empty answer when I run with a different `version`:
```
$ curl -d '{"package": {"name": "linux-oracle-5.15", "ecosystem": "Ubuntu:20.04:LTS"}, "version": "5.15.0-1065"}' "https://api.osv.dev/v1/query"
{}
```

What I would like to retrieve is some information like this:
https://osv.dev/vulnerability/USN-6957-1

Is this a problem with the data or the API?

**To Reproduce**
Steps to reproduce the behaviour:
Run the commands above and check the output.

**Expected behaviour**
The following data should be retrieved:
https://osv.dev/vulnerability/USN-6957-1

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.