Search results

Need CVE auto-linking disambiguation to CVEs that belong to more than 1 project

Status: Open.

#2869 In github/advisory-database;

· joakime opened on Oct 19, 2023

CONTRIBUTING.md references OSV schema while the actual repo/PR builds reject valid JSON

Status: Open.

#2644 In github/advisory-database;

· daniel-beck opened on Aug 21, 2023

Repo specific advisories with CVE IDs don't make it into the global set

Status: Open.

#3266 In github/advisory-database;

· joshbressers opened on Jan 5, 2024

@wdp-gov/catalog-serialization-engine not a malware

Status: Open.

#4783 In github/advisory-database;

· ghost opened on Sep 10, 2024

GHSA-rjhf-4mh8-9xjq is a duplicate of GHSA-3mv5-343c-w2qg

Status: Open.

#3085 In github/advisory-database;

· lukas-braune opened on Dec 19, 2023

Request to review GHSA-gwr8-m965-83p4

Status: Open.

#4336 In github/advisory-database;

· spack-vendavo opened on May 2, 2024

Unable to improve advisory database for C / C++ packages

Status: Open.

#2963 In github/advisory-database;

· mswilson opened on Nov 21, 2023

Rename Erlang Ecosystem to Hex

Status: Open.

#4932 In github/advisory-database;

· maennchen opened on Oct 24, 2024

False Positive: CWE-506 Flag on Project Packages

Status: Open.

#5478 In github/advisory-database;

· Sina-KH opened on Apr 23, 2025

CVSS 4.0 calculator on advisory improvement screen does not support non-base metrics

Status: Open.

#5357 In github/advisory-database;

· mhassan1 opened on Mar 12, 2025

Removed ecosystem_specific field

Status: Open.

#5407 In github/advisory-database;

· Nardonist opened on Mar 26, 2025

Add support for Elixir Ecosystem for dependency graphs since the package manager hex.pm is already used for Erlang

Status: Open.

#1661 In github/advisory-database;

· SupaMic opened on Jan 31, 2023