google / vulncode-db

Vulncode-DB project
https://www.vulncode-db.com
Apache License 2.0
569 stars 71 forks source link

allow to search by language and vuln type #7

Open agigleux opened 5 years ago

agigleux commented 5 years ago

One of the main problem of the NVD / CVE raw data is that they are not enough qualified so that SAST vendors can easily find vulnerabilities corresponding to a given language or type of vuln. Having such information will really help and speed up the development of enhancements in SAST products. For example, I would like to get a full list of XSS vulnerabilities involving Python (*.py) files.

evonide commented 5 years ago

Thanks a lot for reaching out and for the valuable feedback agigleux! I'll make sure to treat this as a higher priority item for upcoming changes and will post an update once this is live.