nodejs / nodejs/nodejs-dependency-vuln-assessments
Check for V8 vulnerabilities?
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 22
- Forks
- 7
- PR merge metrics
- No merged PRs in 30d
Description
Semi-related to https://github.com/nodejs/nodejs-dependency-vuln-assessments/issues/151, I noticed that we do not currently scan for V8 vulnerabilities in this repo: https://github.com/nodejs/nodejs-dependency-vuln-assessments/blob/2e2d73f2678fd4dca9bd2cf2f7d7c07d41f455e9/dep_checker/dependencies.py#L71-L72
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with dep_checker/dependencies.py around lines 71-72 and review the related issue #151 for context on the existing vulnerability checks. Determine how V8 vulnerabilities should be detected within this repository's scanning flow. Done means V8 vulnerabilities are included in the scan with appropriate coverage and verification.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100