search

fasten-project / vulnerability-producer

Gathers, enriches and publishes vulnerability information to a Kafka topic.
https://www.fasten-project.eu/
Apache License 2.0
6 stars 3 forks source link

Dates from PyPI JSONs and Maven XMLs are parsed incorrectly #50

Closed elanzini closed 3 years ago

elanzini commented 3 years ago

The datetime extracted from the upload_time given by PyPI is not parsed correctly. The datetime extracted from the XML given by Maven is not parsed correctly.

This leads to incorrect package version ranges.