Skip to content

Issues: aboutcode-org/vulnerablecode

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

569 Open 419 Closed
569 Open 419 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Missing summary in https://public.vulnerablecode.io/vulnerabilities/VCID-jaz4-2j4u-aaas 3-next bug Data collection data-quality Priority: high
#1684 opened Nov 26, 2024 by pombredanne v36.0.0 - 3-next
@TG1999
2
Add VCIO and Dejacode to https://github.com/FIRSTdotorg/epss-vendors
#1682 opened Nov 25, 2024 by pombredanne
@DennisClark
Performances issues with API v2 bulk_search bug
#1681 opened Nov 22, 2024 by tdruez
@TG1999
Validate that we import or plan to import these data sources
#1680 opened Nov 21, 2024 by pombredanne
11 tasks
Define a way to store sorted packages 3-next
#1676 opened Nov 20, 2024 by TG1999
@TG1999
3
Improve the details provided by the "Severities vectors" tab in VCIO "Vulnerability details" 3-next difficulty: intermediate Priority: high ui
#1672 opened Nov 19, 2024 by DennisClark
@pombredanne @DennisClark
Factor in severity from AffectedByPackageRelatedVulnerability in package risk computation risk evaluate severity, exploitability, and context factors to determine a vulnerability risk score
#1671 opened Nov 19, 2024 by keshav-space
Display severity from AffectedByPackageRelatedVulnerability in UI ui
#1670 opened Nov 19, 2024 by keshav-space
Expose severity from AffectedByPackageRelatedVulnerability in APIv2 API-v2
#1669 opened Nov 19, 2024 by keshav-space
Update importer(s) to populate severity in AffectedByPackageRelatedVulnerability importer
#1668 opened Nov 19, 2024 by keshav-space
Utilize severity available at package-vulnerability intersection
#1667 opened Nov 19, 2024 by keshav-space
4 tasks
Create documentation for API V2 3-next
#1666 opened Nov 19, 2024 by TG1999 v36.0.0 - 3-next
@TG1999
Add Fixed_By in API for Packages Endpoint in V2 3-next Priority: high
#1665 opened Nov 19, 2024 by TG1999 v36.0.0 - 3-next
1
Reset default VCIO API to v1 and announce availability of v2 3-next API API-v2 Priority: high ui
#1663 opened Nov 18, 2024 by mjherzog v36.0.0 - 3-next
@DennisClark @TG1999
1
Weird item with no history and various RedHat data bugs
#1662 opened Nov 18, 2024 by pombredanne
1
Collect Kubernetes advisories Data collection
#1661 opened Nov 16, 2024 by pombredanne
4
"Ghost" package should not be reported as a fix for vulnerability 3-next Priority: high
#1650 opened Nov 12, 2024 by TG1999 v36.0.0 - 3-next
1
@keshav-space
Add GHSA CVSS scores to VCIO data 3-next data-quality enhancement Priority: medium
#1645 opened Nov 8, 2024 by mjherzog
@DennisClark
GHSA entry reports incorrect scoring system for 2024 vulnerabilities bug data-quality Priority: medium
#1644 opened Nov 8, 2024 by mjherzog
@DennisClark
2
Collect raw data from CISA KEV and other sources and store them in git repo Data collection
#1643 opened Nov 8, 2024 by keshav-space
False positive vulnerabilities from ActiveMQ Classic (v5.x) reported for ActiveMQ Artemis (v2.x) bug Data collection
#1638 opened Nov 7, 2024 by mjherzog
@DennisClark @TG1999
Qualify vulnerability references better
#1637 opened Nov 6, 2024 by pombredanne
Design VulnerabilitytoaPackage relationship
#1634 opened Oct 29, 2024 by TG1999
@tdruez @pombredanne @johnmhoran
1
Migrate Alpine Linux importer to aboutcode pipeline 3-next
#1633 opened Oct 29, 2024 by keshav-space v36.0.0 - 3-next
@ziadhany
Add the weaknesses data in the API packages endpoint. Priority: high
#1632 opened Oct 29, 2024 by tdruez
ProTip! Add no:assignee to see everything that’s not assigned.