search

haskell / security-advisories

https://haskell.github.io/security-advisories/
Other
46 stars 18 forks source link

CVSS3.1 isn't fully supported #226

Open unorsk opened 4 months ago

unorsk commented 4 months ago

Is it just me or the cvss parser doesn't fully support the cvss31 standard (some metrics haven't been implemented) These aren't important semantically since their presence doesn't affect the score calculation, but practically the parser would fail parsing a cvss string containing one of these.

TristanCacqueray commented 4 months ago

You are right, the parser presently only supports the strings used in the advisories.

unorsk commented 4 months ago

You are right, the parser presently only supports the strings used in the advisories.

Cool, sounds like something I could fix. Probably after https://github.com/haskell/security-advisories/issues/208 gets merged.