New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Incorrect vulnerability data for https://public.vulnerablecode.io/vulnerabilities/VCID-brza-eagp-aaah/packages #1811

Open

pombredanne opened this issue Mar 11, 2025 · 1 comment

Member

pombredanne commented Mar 11, 2025 •

edited

Loading

The https://public.vulnerablecode.io/vulnerabilities/VCID-brza-eagp-aaah/packages has a weird history:

We imported it first with a weird, invalid "PYSEC-0000-000" id when it was first published on pypa pypa/advisory-database@1ba9ff0
There were issues and fixes in there:
- Invalid yaml on PYSEC-0000-000 pypa/advisory-database#174

This was later corrected, but we have incorrectly kept a relationship between this package and another "PYSEC-0000-000" vulnerability

The text was updated successfully, but these errors were encountered:

Member Author

pombredanne commented Mar 11, 2025

See also the closely related:

Incorrect PYSEC-0000-000 alias #1810

See https://public.vulnerablecode.io/packages/pkg:pypi/[email protected]?search=ADYEN and https://public.vulnerablecode.io/vulnerabilities/VCID-brza-eagp-aaah

pombredanne mentioned this issue

Incorrect PYSEC-0000-000 alias #1810

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment