google / google/osv.dev

CVE5 Conversion - look at "solution" field for a fixed version

Open
#4,088 1 comment 0 reactions 1 assignee Claimed by @jess-lowe View on GitHub
backlog
Dominant language
Go
Stars
2.9k
Forks
369
Avg merge
1d 17h
Merged PRs (30d)
149

Description

For CVE5 records that have the solution field, but don't carry the fix over to their affected ranges, attempt to extract and resolve the fix version to use in OSV affected ranges.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.