Some published advisory are problematic because they can lead to misleading interpretations and either false positive or false negative. In particular this is the case for unbounded or star version ranges specs as documented in #140
A query of these problematic vulnerabilities and advisory would be help make these visible and alter upstream about it, as well as provide a todo list for review and curation.
Some published advisory are problematic because they can lead to misleading interpretations and either false positive or false negative. In particular this is the case for unbounded or star version ranges specs as documented in #140
A query of these problematic vulnerabilities and advisory would be help make these visible and alter upstream about it, as well as provide a todo list for review and curation.