-
Notifications
You must be signed in to change notification settings - Fork 12
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Support CVSS Version 3.1 #26
Labels
help wanted
Extra attention is needed
Comments
After some thinking I came to the conclusion that maybe we should split the
The more we split the version dependent functions into a separate file we can just add other files for other versions and determine with #8 which functions to use. |
After investigation, it's seems like we need to implement exactly two things:
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Currently, it is only possible to use CVSS 3.0 vectors. In the future, I think it is a good idea to support Version 3.1 of the CVSS. The metrics of version 3.1 and 3.0 are identical, but the calculation is different.
When #8 is implemented, we can dynamically check which version the vector has and run the calculations based on that. When no version is specified we should use version 3.0, because it seems to be the most common version at the moment.
This issue could be split into multiple parts. I'm not exactly sure, yet.
The text was updated successfully, but these errors were encountered: