search

AppThreat / vulnerability-db

Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.0, purl, and vers.
MIT License
88 stars 22 forks source link

[v6] vers improvements for commit hash #142

Closed prabhu closed 3 months ago

prabhu commented 3 months ago

CVE-2022-24774 has

"events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "001a3278b5572e52c0ecac0bd1157bf2599502b7"
            }
          ]

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-24774.json

This leads to the vers string vers:generic/>=0.0.0|<001a3278b5572e52c0ecac0bd1157bf2599502b7. Instead we can improve this to say vers:generic/<001a3278b5572e52c0ecac0bd1157bf2599502b7. In terms of usefulness of operating with commit hashes alone, I have no idea.