False positive: CVE-2019-0190 in openssl

Nix-Security-WG / nix-security-tracker

Web service for managing information on vulnerabilities in software distributed through Nixpkgs

26 stars 4 forks source link

Open raboof opened 9 months ago

raboof commented 9 months ago

apparently the pname matching is incorrectly also looking at 'running on/with' CPE of https://nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-0190