search

RedHatProductSecurity / cvelib

A Python library and command line interface for CVE Services.
MIT License
56 stars 24 forks source link

Fix #87 - load cve json, schema file with parse_float=decimal.Decimal to allow CVSS comparison to validate #88

Closed trolldbois closed 2 months ago

trolldbois commented 3 months ago

Fixes https://github.com/RedHatProductSecurity/cvelib/issues/87 both json cve data and the schema file must be loaded with json.load(filename, parse_float=decimal.Decimal)

mprpic commented 2 months ago

I'd prefer the solution in #89, which just updates the schema to the latest version that isn't susceptible to the multipleOf issues.