google / google/osv.dev

Search indices aren't populated with full alias/upstream sets

Open
#3,514 3 comments 0 reactions 0 assignees View on GitHub
backlog
Dominant language
Go
Stars
2.9k
Forks
369
Avg merge
1d 17h
Merged PRs (30d)
149

Description

**Describe the bug**
Due to the flow of the preput hook occurring before the alias or upstream computation, aliases aren't being shown for some vulns that don't have the full alias set in their source JSON.
Example:

![Image](https://github.com/user-attachments/assets/db7a485d-8eb8-4cd8-90e8-1976f2036ecb)

https://test.osv.dev/list?q=BIT-valkey-2024-46981 doesn't show it's aliases:

![Image](https://github.com/user-attachments/assets/5fe84e13-488f-45a8-96a0-baaf8f3fe77e)

And it is the same situation for the upstream field.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.