fix(ghsa): add support of `last_known_affected_version_range` field

aquasecurity / trivy-db

Apache License 2.0

215 stars 131 forks source link

Closed DmitriyLewen closed 5 months ago

DmitriyLewen commented 6 months ago

There two cases when GHSA uses last_known_affected_version_range field - https://github.com/github/advisory-database/issues/470#issuecomment-1998604377. We need to add version for case when last_known_affected_version_range field is exist and fixed/last_affected field doesn't exist.