no RESERVED CVEs - Githubissues

CVEProject / cvelistV5

CVE cache of the official CVE List in CVE JSON 5 format

735 stars 163 forks source link

no RESERVED CVEs #38

Open pth-one opened 11 months ago

pth-one commented 11 months ago

if attempting to use this repository as a definitive source of CVEs then it seems having those that have been reserved would be useful but are not currently available. For example, right now CVE-2023-38545 exists in the cvelist repository... but not cvelistV5

JonathanLEvans commented 8 months ago

There isn't a schema for reserved records in 5.x. See https://github.com/CVEProject/cve-schema/issues/126 for the decision.

phi-go commented 5 months ago

As far as I can see https://github.com/CVEProject/cve-schema/issues/126 does not contain a reason for the decision, indeed there is an extensive comment describing why RESERVED CVEs should be available. However, it seems that comment was ignored.

Is there a plan to provide a "definite source of CVEs" in this repo? Especially as the "legacy" versions will be phased out according to the website.

Please excuse my negativity, I'm a bit confused on what the direction is.