search

OSSIndex / vulns

Report missing advisories and corrections on OSS Index
17 stars 12 forks source link

Incorrect vulnerability details #198

Open takeshirs opened 3 years ago

takeshirs commented 3 years ago

Vulnerability URL Provide the URL to the vulnerability. For example:

https://ossindex.sonatype.org/vulnerability/f184cffa-da7a-4158-afb0-0e5f9046aa39?component-type=npm&component-name=pug-code-gen

Component URL Provide the URL to the component. For example:

https://ossindex.sonatype.org/component/pkg:npm/pug-code-gen

Description The mentioned vulnerability ist closed in versions 3.0.1, 3.0.2 and 2.0.3 as described in the reference https://www.npmjs.com/advisories/1644 . Therefore the mentioned versions should not be listed as vulnerable. Thanks!

ken-duck commented 3 years ago

Thank you for the heads up. This should be resolved in the public DB sometime tomorrow.