search

haskell / security-advisories

https://haskell.github.io/security-advisories/
Other
45 stars 17 forks source link

CVSS3.1 isn't fully supported #226

Open unorsk opened 1 month ago

unorsk commented 1 month ago

Is it just me or the cvss parser doesn't fully support the cvss31 standard (some metrics haven't been implemented) These aren't important semantically since their presence doesn't affect the score calculation, but practically the parser would fail parsing a cvss string containing one of these.

TristanCacqueray commented 1 month ago

You are right, the parser presently only supports the strings used in the advisories.

unorsk commented 1 month ago

You are right, the parser presently only supports the strings used in the advisories.

Cool, sounds like something I could fix. Probably after https://github.com/haskell/security-advisories/issues/208 gets merged.