apache / security-vulnogram

Vulnogram is a tool for creating and editing CVE information in CVE JSON format
https://vulnogram.github.io/
MIT License
5 stars 4 forks source link

default 'versionType' causes validation issues #141

Closed raboof closed 1 month ago

raboof commented 3 months ago

Populating the 'versionType' field is mandatory when a version range is specified, but forbidden when a single version is specified.

We set a default version of "semver" for this field, which makes it invalid when only a single version is specified. To make things worse, when the value is removed, it seems the default is restored again when the page is reloaded.