search

vaadin / appsec-kit

Other
1 stars 0 forks source link

Add check for supported CVSS versions #182

Closed tamasmak closed 3 months ago

tamasmak commented 3 months ago

CVSS v4.0 has been introduced last year. OSV can already return CVSS v4.0 score vectors in the response. However, the CVSS v4.0 is not supported yet by the cvss-calculator used in the AppSec Kit to calculate the score from the vector string.

This PR adds a check for the supported CVSS versions to avoid errors when a CVSS v4.0 score is present in the response.

Closes #181