Closed singh-ashish closed 1 year ago
Hi! Sorry for the delay, but I respond with good news.
OSS Index is going through a major upgrade, as described here: https://ossindex.sonatype.org/updates-notice
The most clear and obvious benefit is far fewer false negatives and false positives, and vulnerabilities will be added to the system on a much more frequent and rapid basis. Once the upgrade is completed you should see most (if not all) of the reported data issues be resolved.
We have advised dependency track of the changes. I expect you should find the upgrade very much to your liking.
Closing old issues. This particular issue was resolved by the aforementioned upgrade.
To facilitate future automation, please use the following format
Advisory details
More information Is there a way for this database to get synched automatically from CVE database. Tools like dependency track dependency track depends on it heavily.