VulnerabilityHistoryProject / vulnerability-history

vulnerabilityhistory.org

MIT License

32 stars 5 forks source link

Curator question: Related CVEs #1100

Open andymeneely opened 1 year ago

andymeneely commented 1 year ago

Motivation

Sometimes CVEs are related to each other. For example, one CVE is a regression of another. We should capture that information.

Tasks

[ ] Add the question to all of the vulnerabilities project skeletons
[ ] Add a database table, maybe called related that has a many-many relationship, along with a note.
[ ] Update the vulnerability loader to update the related_to table
[ ] Make sure we handle the bidirectional nature of related - just insert two rows.

Check the following:

[x] I have checked the VHP backlog for something similar: https://github.com/VulnerabilityHistoryProject/vulnerability-history/issues
[x] I have checked if this should also be part of a Github Project: https://github.com/VulnerabilityHistoryProject/vulnerability-history/projects?type=beta
[x] I have checked that this might need dev infrastructure or refactor labels