Official CVE Feed truncating issue titles with multiple : or -

[tabbysable]

kubernetes/kubernetes#131008 (comment)

It seems that the CVE feed generator might be throwing out text between the : and the - in the issue titles

[tabbysable]

I am removing the - from the 4 affected issue titles, let's see if that corrects the feed page after the next update

[tabbysable]

/sig security

[tabbysable]

Removing the - from the affected issue titles caused them to appear correctly on the CVE feed page!

[tabbysable]

In fact, there is a problem with - in issue titles!

If there is more than one : or - in the issue title, the CVE number is taken from the text before the first one, and the description is taken from the text after the last one. Text in between is lost.

Note line 84 and line 93

This could be remedied via more sophisticated handling of this transformation.

[tabbysable]

/triage accepted
/fix-priority low

[tabbysable]

/assign @4rivappa

Thanks for volunteering to help with this!

[k8s-ci-robot]

@tabbysable: GitHub didn't allow me to assign the following users: 4rivappa.

Note that only kubernetes members with read permissions, repo collaborators and people who have commented on this issue/PR can be assigned. Additionally, issues/PRs can only have 10 assignees at the same time.
For more information please see the contributor guide

In response to this:

/assign @4rivappa

Thanks for volunteering to help with this!

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[tabbysable]

@4rivappa can you please comment so that the robot will allow you to be assigned?

[4rivappa]

Assign me (@4rivappa)

Placeholder comment

[mtardy]

/assign @4rivappa