search

fasten-project / vulnerability-producer

Gathers, enriches and publishes vulnerability information to a Kafka topic.
https://www.fasten-project.eu/
Apache License 2.0
6 stars 3 forks source link

Severity field in statements is just for CVSS2 and not very useful #104

Open MagielBruntink opened 2 years ago

MagielBruntink commented 2 years ago

Consider removing the severity field from the statements as it can be confusing an inconsistent with CVSS3 scores:

Severity is fetched here: https://github.com/fasten-project/vulnerability-producer/blob/f19766d3d1857a5164cbee5a4152f9ff20a89402/src/main/java/eu/fasten/vulnerabilityproducer/utils/parsers/NVDParser.java#L154