GitHub repository: nexB/vulnerablecode

Issues:
issue_1442: state: open
title: Fix quoting of purl with qualifiers
user: TG1999
issue_1439: state: open
title: Add curl advisories importer
user: ambuj-1211
issue_1437: state: open
title: Collect date from Anchore NVD overrides
user: pombredanne
issue_1436: state: open
title: Expose Advisory Details in API
user: ykodwani01
issue_1435: state: open
title: Add list of supported data sources and status/counters on home page
user: pombredanne
issue_1434: state: open
title: Add proprietary, non-public advisory datasources to vulntotal
user: pombredanne
labels: VulnTotal: Tool for cross-validating vulnerability
issue_1433: state: open
title: Expose advisory details in the API and UI
user: pombredanne
issue_1432: state: open
title: Add wolfi security advisories
user: pombredanne
issue_1431: state: open
title: Improve Improver documentation
user: mjherzog
labels: documentation: Everything about documentation
issue_1430: state: open
title: Add Siemens Healthineers advisories
user: pombredanne
issue_1429: state: open
title: Collect Siemens advisories
user: pombredanne
issue_1428: state: open
title: Fix migration 055
user: TG1999
issue_1427: state: open
title: Ingest Rust data through Github api 
user: shravankshenoy
issue_1425: state: open
title: Missing vulnerable range
user: pombredanne
issue_1422: state: open
title: Add a basic model for Known Exploited Vulnerabilities 
user: ziadhany
issue_1420: state: open
title: Store previous non-vulnerable version
user: TG1999
issue_1418: state: open
title: index Linux kernel vulnerabilities
user: armijnhemel
issue_1417: state: open
title: Ingest pub data through Github api
user: shravankshenoy
issue_1416: state: open
title: Store latest non vulnerable version and next vulnerable version for a package in DB
user: TG1999
issue_1415: state: open
title: Filtering on an exact purl in API take over 1min
user: tdruez
issue_1414: state: open
title: [For Review Purpose Only-Do not Merge] First Draft for Glibc Importer
user: harsh098
issue_1412: state: open
title: Import data from OpenSSF Malicious Packages
user: shravankshenoy
issue_1410: state: open
title: Add Liferay advisories
user: pombredanne
issue_1409: state: open
title: Add malware from https://github.com/ossf/malicious-packages
user: pombredanne
issue_1408: state: open
title: Add Pypi malware from https://github.com/lxyeternal/pypi_malregistry
user: pombredanne
issue_1407: state: open
title: Add GH malware advisories
user: pombredanne
issue_1406: state: open
title: Add malware package data  from https://github.com/datadog/malicious-software-packages-dataset
user: pombredanne
issue_1395: state: open
title: RFC: Design new Improver
user: pombredanne
issue_1394: state: open
title: Debian importer does not extract all reference ids
user: pombredanne
issue_1393: state: open
title: RFC: Design new Advisory -> Package -> Vulnerability models relationhips
user: pombredanne
issue_1388: state: open
title: Add an improver for creating changelog for vulnerabilities and packages that were imported prior to introducing changelog
user: TG1999
issue_1385: state: open
title: Next/latest non-vulnerable version entries are missing from the public Package details page
user: johnmhoran
issue_1383: state: open
title: Review and add CVE fixes  dataset
user: pombredanne
issue_1378: state: open
title: feature: ui: added progress bar for `vulnerabilities.importers`
user: harsh098
issue_1376: state: open
title: [Enhancement] Logging:  Add logging to vulnerabilitites.import_runner and vulnerabilities.importers for better readability
user: harsh098
issue_1375: state: open
title: index Canadian Centre of Cyber Security advisories
user: armijnhemel
issue_1370: state: open
title: Add date of publishing on vulnerability
user: TG1999
issue_1367: state: open
title: vulnerability id searching very slow on public instance when using free text
user: armijnhemel
issue_1365: state: open
title: `test_OpensslImporter` uses network calls while testing
user: TG1999
issue_1364: state: open
title: Deprecate `bulk_search` in favour of `bulk_lookup`
user: TG1999
issue_1363: state: open
title: add CAPEC
user: armijnhemel
issue_1362: state: open
title: Add glibc advisories
user: armijnhemel
issue_1356: state: open
title: Bug in vulnerability details view 
user: TG1999
issue_1355: state: open
title: Add date of publishing in vulnerability detail view
user: TG1999
issue_1353: state: open
title: Add missing ABOUT file for Base32 snippet
user: pombredanne
issue_1352: state: open
title: Update docs WRT relaxed API token requirements
user: sschuberth
issue_1346: state: open
title: Import VEX data
user: pombredanne
issue_1345: state: open
title: Import OpenVEX data 
user: pombredanne
issue_1344: state: open
title: Import CycloneDX VEX data
user: pombredanne
issue_1342: state: open
title: Improvement for Improver: New CVEs first 
user: turambarturin
issue_1340: state: open
title: Vulnerability 'summary' field is neither consistent nor complete
user: johnmhoran
issue_1338: state: open
title: Collect bitnami advisories
user: pombredanne
issue_1332: state: open
title: Improve handling of scores
user: pombredanne
issue_1329: state: open
title: Handling of locally patched packagaes
user: keshav-space
issue_1327: state: open
title: Remove redundant package-urls from VCIO
user: TG1999
issue_1326: state: open
title: Discuss rate limiting for anonymous API user
user: TG1999
issue_1324: state: open
title: Wordfence Intelligence feed
user: armijnhemel
issue_1322: state: open
title: Collect wolfssl vulnerabilities
user: pombredanne
issue_1320: state: open
title: Begin work on combining affected and fixed by packages #1287
user: johnmhoran
issue_1318: state: open
title: CERT-IN reports
user: armijnhemel
issue_1317: state: open
title: CERT Vulnerability Notes
user: armijnhemel
issue_1316: state: open
title: VulnTotal like structure
user: Hritik14
issue_1315: state: open
title: Add data in CSAF format from https://github.com/cisagov/CSAF 
user: pombredanne
issue_1313: state: open
title: RFC: vulnerability reachability
user: TG1999
issue_1309: state: open
title: possible data source: VulInfo
user: armijnhemel
issue_1301: state: open
title: "fixing" or "fixed" -- how should we name a package that fixes a vulnerability?
user: johnmhoran
issue_1300: state: open
title: Importer should be able to import vulns and packages
user: TG1999
issue_1299: state: open
title: Enhance the VCIO UI to make use of all available screen space
user: DennisClark
issue_1297: state: open
title: What if different advisories report different version range for the same vulnerability?
user: sify21
issue_1295: state: open
title: Store date of release in database for versions of package
user: TG1999
issue_1293: state: open
title: Add disclosure somewhere re how UI reports that there is no responsive data in the DB
user: johnmhoran
labels: documentation: Everything about documentation
issue_1292: state: open
title: Cross refer the scores provided by NVD with other advisory sources
user: TG1999
issue_1291: state: open
title: Debian oval links are not working
user: Hritik14
issue_1290: state: open
title: Some fixed-by version data is incorrect and needs to be investigated
user: johnmhoran
issue_1289: state: open
title: Use full screen width
user: pombredanne
issue_1287: state: open
title: Consolidate 'Fixed by packages' tab and 'Affected packages' tab in Vulnerability details page
user: johnmhoran
issue_1285: state: open
title: Track "successor" package [was: Incorrect Package data]
user: johnmhoran
issue_1284: state: open
title: Consider adding mapping to the Package class for related Packages
user: johnmhoran
issue_1283: state: open
title: Provide more comprehensive options for possible upgrades
user: Hritik14
issue_1276: state: open
title: VulnerableCode Insights
user: Hritik14
issue_1275: state: open
title: TypeError: argument of type 'NoneType' is not iterable test_apache_tomcat
user: ziadhany
issue_1272: state: open
title: Display latest compatible non-vulnerable version
user: johnmhoran
issue_1271: state: open
title: Enhancement: provide ability for a user to "follow" a vulnerability or a package
user: DennisClark
issue_1269: state: open
title: Add Vul4j data 
user: pombredanne
issue_1268: state: open
title: Add https://github.com/tuhh-softsec/A-Manually-Curated-Dataset-of-Vulnerability-Introducing-Commits-in-Java/
user: pombredanne
issue_1266: state: open
title: Track Java "shaded"/uberjarred/jarjared hidden deps vulnerabilities 
user: pombredanne
issue_1265: state: open
title: Best way to use univers to sort and compare Package versions
user: johnmhoran
issue_1264: state: open
title: ConanVersionAPI stopped working
user: keshav-space
issue_1263: state: open
title: Add a sticky div to the 'Package details' page that will keep the name of the Package visible when the user scrolls
user: johnmhoran
issue_1262: state: open
title: Provide monthly/weekly datadump
user: Hritik14
issue_1261: state: open
title: Minimum supported system requirements
user: Hritik14
issue_1260: state: open
title: Handle the CVEs not present in DB
user: TG1999
issue_1258: state: open
title: Add summary of vulnerabilities in UI and API
user: pombredanne
issue_1255: state: open
title: What to expect from ``plain_purl`` functionality ?
user: TG1999
issue_1253: state: open
title: Continue reporting/displaying PURLs with URL encoding?
user: johnmhoran
issue_1252: state: open
title: Report only the "best" fixed version that has no vulnerabilities of its own?
user: johnmhoran
issue_1251: state: open
title: Confirm that importers filter out CVE Status "REJECT" and NVD Status "Rejected" 
user: DennisClark
issue_1247: state: open
title: UI display of importer and improver status
user: johnmhoran
issue_1240: state: open
title: Remove `match_purl` from vulnerablecode models
user: TG1999
issue_1239: state: open
title: Display CVSS vectors and allow their search
user: TG1999
issue_1238: state: open
title: VCIO does not collect some Severity (cvssv3.1) scores for a CVE
user: mjherzog
issue_1237: state: open
title: Implement authenticate between clients and servers using django-oauth-toolkit 
user: ziadhany
issue_1236: state: open
title: Implement auth between ( server to server ) using HTTP Signatures
user: ziadhany
issue_1235: state: open
title: Implement Client to Server Interactions Endpoints
user: ziadhany
issue_1234: state: open
title: Implement a notification system for follow actvivity
user: ziadhany
issue_1231: state: open
title: Purl-sync vocabulary
user: ziadhany
issue_1230: state: open
title: Implement the basic UI pages
user: ziadhany
issue_1229: state: open
title: Add the basic implementation for the API endpoint
user: ziadhany
issue_1226: state: open
title: Feature implement linked commits
user: JafarAkhondali
issue_1223: state: open
title: Use new ubuntu OVAL security link
user: TG1999
issue_1220: state: open
title: Add Azul vulnerability data
user: pombredanne
issue_1219: state: open
title: Usability feedback on multiple `packages` returned for a single package_url
user: tdruez
issue_1218: state: open
title: Single purl lookup on `packages` endpoint can take up to 20 seconds
user: tdruez
issue_1216: state: open
title: How to detect link between a vulnerability and source code of project?
user: JafarAkhondali
issue_1215: state: open
title: Fix empty version range crash
user: janniclas
issue_1214: state: open
title: Bug: Failing importer due to missing version range
user: janniclas
issue_1213: state: open
title: Generate SBOMs from VCIO
user: TG1999
issue_1212: state: open
title:  Failed to run NVD Importer 
user: ziadhany
issue_1211: state: open
title:  Failed to run DebianOvalImprover improver  ( TypeError: 'NoneType' object is not subscriptable)
user: ziadhany
issue_1210: state: open
title: ASUS security advisories
user: armijnhemel
issue_1207: state: open
title: Implement the ER diagram using the Django model
user: ziadhany
issue_1206: state: open
title: Export vulnerablecode-data
user: ziadhany
issue_1205: state: open
title: Create a python script that gets the improved data as JSON from a vulnerablecode project and save it in a remote git repository
user: ziadhany
issue_1204: state: open
title: [WIP] Convert CVSSv2 into CVSSv3
user: ziadhany
issue_1203: state: open
title: Aruba Networks advisories
user: armijnhemel
issue_1201: state: open
title: Collect advisories for AlmaLinux
user: mjherzog
issue_1200: state: open
title: VulnerableCode manual comparison
user: Hritik14
labels: VulnTotal: Tool for cross-validating vulnerability
issue_1199: state: open
title: Collect vuldb
user: Hritik14
labels: VulnTotal: Tool for cross-validating vulnerability
issue_1196: state: open
title: Incorrect reference to NVD
user: Hritik14
issue_1194: state: open
title: NVDImporter not populating affected packages
user: Hritik14
issue_1193: state: open
title: One vulnerability affecting different packages.
user: Hritik14
issue_1192: state: open
title: Collect apache ant
user: Hritik14
issue_1189: state: open
title: Add support for CVSS v4 (when ready?)
user: pombredanne
issue_1187: state: open
title: Remove CVSSv2 scores from vulnerablecode
user: TG1999
issue_1186: state: open
title: Wrong CVSS3 V3.1 QR "MODERATE" 
user: mnonnenmacher
issue_1182: state: open
title: Provide link to GMS Aliases in UI (and API)
user: pombredanne
issue_1181: state: open
title: Investigate data issue with withdrawn advisories and CVSS scores
user: pombredanne
issue_1180: state: open
title: Design curation and models to track problems and their resolutions
user: TG1999
issue_1173: state: open
title: URL in vulnerability reference contains illegal character
user: oheger-bosch
issue_1172: state: open
title: Add CVE reference key/maps 
user: armijnhemel
issue_1171: state: open
title: Add Huawei security advisories
user: armijnhemel
issue_1170: state: open
title: Add ISC advisories
user: pombredanne
issue_1168: state: open
title: add Full Disclosure mailinglist
user: armijnhemel
issue_1167: state: open
title: Add AusCERT data source
user: armijnhemel
issue_1166: state: open
title: Add CURL advisories data source 
user: pombredanne
issue_1165: state: open
title: Check for cryptogragphy 39.0.1 in vulnerablecode
user: TG1999
issue_1164: state: open
title: Revisit throttling and rate-limiting
user: TG1999
issue_1153: state: open
title: Use `affected` instead of `versionUnaffected` for reporting fixed versions from DEPS
user: keshav-space
labels: VulnTotal: Tool for cross-validating vulnerability
issue_1152: state: open
title: Automate adding "Token" prefix to API key in VCIO API UI
user: johnmhoran
labels: documentation: Everything about documentation
issue_1151: state: open
title: [WIP] Support Advisory Comparison in VulnTotal
user: keshav-space
labels: VulnTotal: Tool for cross-validating vulnerability
issue_1146: state: open
title: Collect go vulnerabilities from pkg.go.dev
user: TG1999
issue_1145: state: open
title: Use PURL in VersionAPIs
user: keshav-space
issue_1144: state: open
title: Package managers may not contain/report all versions related to a package
user: keshav-space
issue_1143: state: open
title: Failed to run improver vulnerabilities.importers.nginx.NginxBasicImprover.
user: wiredhikari
issue_1141: state: open
title: Redhat CWE syntax
user: ziadhany
issue_1136: state: open
title: Version range normalization for range comparison across different DataSources in VulnTotal
user: keshav-space
labels: VulnTotal: Tool for cross-validating vulnerability
issue_1134: state: open
title: Grammatical Mistakes in VulnerableCode Docs
user: BhaswatiRoy
issue_1133: state: open
title: Improving the Readme.md 
user: siddhi-244
issue_1130: state: open
title: Collect commits from dependabot
user: TG1999
issue_1129: state: open
title: Extract unpublished vulnerabilities from commit histories and trackers
user: pombredanne
issue_1128: state: open
title: Also parse text and HTML OpenSSL feeds
user: pombredanne
issue_1126: state: open
title: Run latest release of Black
user: johnmhoran
issue_1122: state: open
title: Add CSAF importer
user: tschmidtb51
issue_1121: state: open
title: Vulntotal browser extension
user: AyanSinhaMahapatra
labels: VulnTotal: Tool for cross-validating vulnerability
issue_1117: state: open
title: Check for inconsistent fixed and affected purl pair
user: Hritik14
issue_1114: state: open
title: Sample script to do package bulk search using public instance of vulnerablecode 
user: TG1999
issue_1112: state: open
title: ``AdvisoryData`` class should have ``created_by`` field 
user: TG1999
issue_1111: state: open
title: Unify improvers
user: TG1999
issue_1110: state: open
title: Consider using scancode license expression version
user: TG1999
issue_1109: state: open
title: Improve readability for apache_httpd importer
user: TG1999
issue_1108: state: open
title: Consider safetydb for vulntotal
user: TG1999
labels: VulnTotal: Tool for cross-validating vulnerability
issue_1107: state: open
title: Collect MISP advisories
user: pombredanne
issue_1106: state: open
title: Create an improver to handle Maven creation
user: johnmhoran
issue_1105: state: open
title: Collect data from https://github.com/google/security-research
user: pombredanne
issue_1100: state: open
title: Collect data from Vince
user: pombredanne
issue_1095: state: open
title: Are we identifying all affected Ubuntu packages?
user: johnmhoran
issue_1094: state: open
title:  Add CWE support in the API
user: pombredanne
issue_1093: state: open
title: Add CWE support in all importers 
user: pombredanne
issue_1092: state: open
title: Add Support for limit and last_affected range
user: ziadhany
issue_1090: state: open
title: I want to have inlined Aliases (with CVE) when I use the packages API endpoint
user: pombredanne
issue_1089: state: open
title: I want to query the number of vulnerabilities that have changed for a given package
user: pombredanne
issue_1084: state: open
title: RHSA is polluting the data quality
user: keshav-space
issue_1083: state: open
title: Confidence should only be there when either fix or affected package is present
user: Hritik14
issue_1082: state: open
title: store packages/vulnerabilities inside db that VCIO doesn't contain 
user: TG1999
issue_1079: state: open
title: Deprecate yaml format for SUSE importer and ingest data in CSAF, OVAL or CVRF format
user: TG1999
issue_1077: state: open
title: Add a "Release Notes" or "What's New" panel to the VulnerableCode.io home page
user: DennisClark
labels: documentation: Everything about documentation
issue_1076: state: open
title: Provide throttled API for unauthenticated users
user: keshav-space
issue_1074: state: open
title: Revisit why we are skipping some versions in gentoo importer 
user: TG1999
issue_1072: state: open
title: store publicly available vuldb.com identifiers
user: armijnhemel
issue_1071: state: open
title: We should store patches from Xen advisories
user: TG1999
issue_1069: state: open
title: Report new/changed vulnerabilities for a package
user: pombredanne
issue_1068: state: open
title: Re-design Package to Vulnerability model relationships
user: pombredanne
issue_1067: state: open
title: Collect Freexian advisories
user: pombredanne
issue_1064: state: open
title: Interesting / misleading advisories
user: Hritik14
issue_1063: state: open
title: Import Erlang advisory in GitHub importer 
user: keshav-space
issue_1053: state: open
title: Migrate suse backport importer #1054
user: TG1999
issue_1046: state: open
title: Add on demand live evaluation of packages and vulnerabilities
user: TG1999
issue_1045: state: open
title: Find a way to collect CVSS scores from github graphql API
user: TG1999
issue_1039: state: open
title: Ingest github ecosystems
user: pombredanne
issue_1031: state: open
title: Add advisory clarity scoring to VCIO
user: TG1999
issue_1029: state: open
title: ingest git versions from OSS-Fuzz
user: ziadhany
issue_1028: state: open
title: Investigate Known Exploited Vulnerabilities
user: mjherzog
issue_1026: state: open
title: Provide a way get peer review on vulnerability advisory quality
user: TG1999
issue_1023: state: open
title: Collect data from https://github.com/gmatuz/inthewilddb
user: pombredanne
issue_1022: state: open
title: Support conan
user: pombredanne
issue_1020: state: open
title: Should the apache_httpd importer address all 15 MITRE CVE ID JSON File Format 4.0 comparators?
user: johnmhoran
issue_1019: state: open
title: Should the apache_httpd importer include data re fixed versions from httpd.apache.org/security/ HTML files?
user: johnmhoran
issue_1018: state: open
title: Should we use a different source of JSON advisory/CVE objects for the apache_httpd importer?
user: johnmhoran
issue_1016: state: open
title: Package bulk_search by PURLs is too slow
user: tdruez
issue_1015: state: open
title: Support CVE JSON 5.0
user: armijnhemel
issue_1011: state: open
title: Migrate kaybee importer
user: TG1999
issue_1008: state: open
title: Add a live endpoint to find vulnerabilities in a dependency tree
user: TG1999
issue_1006: state: open
title: Clarify apache_httpd importer references and severities
user: johnmhoran
issue_1001: state: open
title: Do not leak internal database ids in the API
user: pombredanne
issue_1000: state: open
title: Also collect secondary, package-level GitHub advisories [was: References to GHSA lack a severity]
user: sschuberth
issue_999: state: open
title: Crawl release notes for specific firmware files
user: armijnhemel
issue_996: state: open
title: Compare with clair 
user: Hritik14
labels: VulnTotal: Tool for cross-validating vulnerability
issue_994: state: open
title: How can we pass useful data from importer to improver?
user: ziadhany
issue_992: state: open
title: Consider adding reCAPTCHA at signup page
user: ziadhany
issue_990: state: open
title: Revisit generic types
user: TG1999
issue_989: state: open
title: Tracking withdrawn packages
user: armijnhemel
issue_981: state: open
title: Check if OLD nodejs are is till relevant was:[Find a way to ingest advisories without aliases]
user: TG1999
issue_979: state: open
title: Revisit using widget tweaks
user: pombredanne
issue_976: state: open
title: Add API documentation for VulnerableCode.io
user: mjherzog
labels: documentation: Everything about documentation
issue_967: state: open
title: Find a way to get alerted when there are new and retired Debian releases
user: TG1999
issue_966: state: open
title: Make models better for efficient queries
user: TG1999
issue_957: state: open
title: CVSS storing problem 
user: ziadhany
issue_956: state: open
title: Add stormshield data
user: TG1999
issue_953: state: open
title: Collect https://github.com/quarkslab/aosp_dataset
user: pombredanne
issue_952: state: open
title: Review failing GH workflows
user: pombredanne
issue_949: state: open
title: index JVNDB
user: armijnhemel
issue_943: state: open
title: Refine CPE to PURL and PURL to CPE
user: TG1999
issue_942: state: open
title: Missing CPEs
user: tdruez
issue_940: state: open
title: Report references from security.archlinux.org/AVG-*
user: johnmhoran
issue_939: state: open
title: Add https://github.com/cybertier/Backstabbers-Knife-Collection
user: pombredanne
issue_937: state: open
title: add VarIoT numbers
user: armijnhemel
issue_936: state: open
title: v30 changelog highlights
user: TG1999
issue_931: state: open
title: consider using Repology CVE data as enhancement
user: armijnhemel
issue_929: state: open
title: Provide a way to fetch lists of all vulnerable CPEs and PURLs
user: tdruez
issue_925: state: open
title: Plan for merging pull requestes
user: ziadhany
issue_920: state: open
title: Consider enabling signup and signup automation
user: pombredanne
issue_917: state: open
title: Add Improver to find out Ghost packages
user: TG1999
issue_915: state: open
title: Alpine: possibly wrong information is indexed
user: armijnhemel
issue_913: state: open
title: Ensure that psql is installed in the container images
user: pombredanne
issue_912: state: open
title: Invalid skipping of data based on summaries
user: pombredanne
issue_908: state: open
title: In the web UI, there is a "flicker" when switching pages
user: pombredanne
issue_906: state: open
title: Collect summary for references
user: TG1999
issue_902: state: open
title: GitHub advisory database and GSD database is taken a long time to  download 
user: ziadhany
issue_895: state: open
title: Review test failures
user: pombredanne
issue_889: state: open
title: The Severity table in the Vulnerability UI would benefit from clarification and normalization
user: DennisClark
issue_881: state: open
title: Consider adding `recommendations` field in Advisory Data
user: TG1999
issue_880: state: open
title: Use models.py Package QuerySet method in place of views.py method
user: johnmhoran
issue_879: state: open
title: '.all()' is not needed when '.filter()' is used
user: johnmhoran
issue_878: state: open
title: 'Q' object is needed only for complex queries
user: johnmhoran
issue_877: state: open
title: Use f-strings for better readability
user: johnmhoran
issue_876: state: open
title: Limit 'try' block to a single piece of logic
user: johnmhoran
issue_874: state: open
title: Add tests for new UI views, templates etc.
user: johnmhoran
issue_873: state: open
title: Add info to purl details re closest subsequent version with no unresolved vulnerabilities
user: johnmhoran
issue_872: state: open
title: Fix the sorting for all lists in UI, particularly version-based sorting
user: johnmhoran
issue_871: state: open
title: limit searches to a minimum number of characters
user: pombredanne
issue_870: state: open
title: Replace search boxes on 5 templates with templates that can be included
user: johnmhoran
issue_868: state: open
title: Fix limited responsiveness in VCIO UI and convert pixels to rem in custom.css
user: johnmhoran
issue_866: state: open
title: Extract improvement operations from RedHat importer
user: pombredanne
issue_865: state: open
title: Rename import.py module to something else
user: pombredanne
issue_864: state: open
title: UI feedback
user: pombredanne
issue_863: state: open
title: Affected vs. fixed packages
user: pombredanne
issue_862: state: open
title: Use slugs for packages and vulnerabilities in the UI
user: pombredanne
issue_861: state: open
title: Clarify and validate what an Alias can be
user: pombredanne
issue_859: state: open
title: Missing Summary values
user: tdruez
issue_858: state: open
title: [WIP] Migrate rust importer 
user: ziadhany
issue_855: state: open
title: Handle `Forever Vulnerable` Packages
user: keshav-space
issue_850: state: open
title: Add Exploit Prediction Scoring System (EPSS)  scores
user: pombredanne
issue_846: state: open
title: Migrate rust importer
user: TG1999
issue_841: state: open
title: Align API doc with ScanCode.io
user: pombredanne
issue_838: state: open
title: Store and/or trace data provenance
user: pombredanne
issue_837: state: open
title: Run importers in Parallel 
user: ziadhany
issue_835: state: open
title: Add `mend.io` DataSource
user: keshav-space
labels: VulnTotal: Tool for cross-validating vulnerability
issue_833: state: open
title: RedHat importer is slow
user: keshav-space
issue_828: state: open
title: Handle CPE data in Vulnerablecode
user: TG1999
issue_825: state: open
title: New Vulnerability details page for data with an Alias
user: mjherzog
issue_823: state: open
title: Unified DataSource handling
user: keshav-space
issue_822: state: open
title: Cluster analysis of advisory fetched from different DataSource in VulnTotal
user: keshav-space
labels: VulnTotal: Tool for cross-validating vulnerability
issue_815: state: open
title: Require some value in search boxes
user: johnmhoran
issue_814: state: open
title: Ensure we extract CVE from RH advisories references for a reference id
user: pombredanne
issue_810: state: open
title: Version the API
user: pombredanne
issue_807: state: open
title: Nix tests are failing
user: Hritik14
issue_806: state: open
title: Refactor Git importer using fetchcode
user: TG1999
issue_803: state: open
title: Adopt single search box in UI
user: pombredanne
issue_796: state: open
title: Migrate ruby to new importers/improvers
user: pombredanne
issue_792: state: open
title: Add a CERTCC importer
user: ziadhany
issue_787: state: open
title: Import data from GSD #706
user: ziadhany
issue_786: state: open
title: vulnerabilities.importers.nvd.NVDImporter - gzip.BadGzipFile
user: juliojimenez
issue_774: state: open
title: Import pypa/advisory-database (e.g. PYSEC upstream)
user: pombredanne
issue_771: state: open
title: Streamline data returned by the API
user: pombredanne
issue_770: state: open
title: Add a data summary endpoint
user: pombredanne
issue_769: state: open
title: Import errors in vulnerabilities.importers.gitlab.GitLabAPIImporter
user: pombredanne
issue_768: state: open
title: Add app version in UI and API
user: pombredanne
issue_767: state: open
title: Add support got git version ranges
user: pombredanne
issue_764: state: open
title: Document API changes
user: pombredanne
labels: documentation: Everything about documentation
issue_763: state: open
title: Try to associate vulnerabilities of packages with different package manager
user: TG1999
issue_761: state: open
title: import information from MalwareBazaar
user: armijnhemel
issue_760: state: open
title: collect DIVD CSIRT cases
user: armijnhemel
issue_759: state: open
title: collect NCSC advisories
user: armijnhemel
issue_756: state: open
title: Collect zend advisories
user: pombredanne
issue_755: state: open
title: Sample test suite of CVEs by purl 
user: pombredanne
issue_754: state: open
title: Improve and revisit Ubuntu data collection
user: pombredanne
issue_753: state: open
title: Collect rockylinux advisories
user: pombredanne
issue_752: state: open
title: Collect loopback advisories
user: pombredanne
issue_751: state: open
title: Collect Mariner vulnerabilities 
user: pombredanne
issue_750: state: open
title: Add alma errata
user: pombredanne
issue_749: state: open
title: Collect Go vulnerabilities from golang/vulndb
user: pombredanne
issue_745: state: open
title: Display purls qualifiers and subpath if they are present in the UI
user: TG1999
issue_744: state: open
title: Could we run tow instances of VC on the same machine?
user: pombredanne
issue_743: state: open
title: Validate that package exists from an Improver
user: TG1999
issue_742: state: open
title: Parse go package names
user: TG1999
issue_738: state: open
title: Support and validate many URL styles correctly
user: TG1999
issue_737: state: open
title: Better track and document ignored versions
user: pombredanne
issue_735: state: open
title: Manage withdrawn vulnerabilities
user: pombredanne
issue_733: state: open
title: Low confidence in OSV and GitHub data
user: Hritik14
issue_732: state: open
title: Add NOTICE files for importer data sources
user: TG1999
issue_730: state: open
title: Debian Importer follow-up issue
user: TG1999
issue_728: state: open
title: Abstract the fetching to handle all errors/requests/sessions
user: TG1999
issue_727: state: open
title: ``AffectedPackage`` as model
user: Hritik14
issue_722: state: open
title: Mine data from endoflife.date to create useful warnings about outdated software
user: armijnhemel
issue_721: state: open
title: Support storing pinned affected version as well in AffectedPackage
user: TG1999
issue_720: state: open
title: Redhat importer can not parse openshift, container-tools, openstack and kubernetes packages
user: TG1999
issue_713: state: open
title: Calculate CVSS score from CVSS vector
user: Hritik14
issue_712: state: open
title: Add types in reference URLs
user: Hritik14
issue_711: state: open
title: Run cvehound on Linux kernel source code
user: armijnhemel
issue_706: state: open
title: Import Global Security Database
user: armijnhemel
issue_705: state: open
title: VulnerableCode  Roadmap
user: pombredanne
issue_701: state: open
title: Improve Improvers
user: Hritik14
issue_698: state: open
title: Store complete descriptions in advisory summary
user: TG1999
issue_697: state: open
title: Index CNVD
user: armijnhemel
issue_694: state: open
title: ScoringSystem should be subclasses and not instance
user: pombredanne
issue_689: state: open
title: Report progress when running import and improve
user: pombredanne
issue_688: state: open
title: revisit the `<reported>`, `<problemtype>` and `<title>` tags under issues section of OpenSSL feed
user: keshav-space
issue_685: state: open
title: Address queryset ordering warnings 
user: pombredanne
issue_683: state: open
title: Improve command hard to kill with Ctrl-C
user: pombredanne
issue_682: state: open
title: Error log in improve run need to be investigated
user: pombredanne
issue_680: state: open
title: Collect more data from imported advisories
user: TG1999
issue_679: state: open
title: NVD importer migration followups
user: TG1999
issue_678: state: open
title: Derive a way to store summaries in NVD importer
user: TG1999
issue_674: state: open
title: nginx advisories are missing CVEs as references
user: pombredanne
issue_665: state: open
title: License not found for NVD importer
user: TG1999
issue_660: state: open
title: Issue with AlpineImporter Code
user: briandoodyie
issue_658: state: open
title: revisit the `<nonissue>` tag in OpenSSL vulnerability feed
user: keshav-space
issue_657: state: open
title: correlate CVEs to other CVEs based on "ref" element in CVE XML
user: armijnhemel
issue_655: state: open
title: import vulnerability PoC (proof of concept) references
user: armijnhemel
issue_654: state: open
title: import data from git-vuln-finder
user: armijnhemel
issue_652: state: open
title: Add Mediatek security bulletins
user: armijnhemel
issue_649: state: open
title: Suggestion: use "Vcs-*" information from Debian's Sources.gz
user: armijnhemel
issue_647: state: open
title: Collect TensorFlow advisories
user: TG1999
issue_646: state: open
title: Some references could be treated as aliases
user: Hritik14
issue_645: state: open
title: Collect more data from GitHub GraphQL API
user: TG1999
issue_644: state: open
title: Add improver to validate that collected purl are real.
user: pombredanne
issue_638: state: open
title: Better Documentation
user: Hritik14
labels: documentation: Everything about documentation
issue_636: state: open
title: Add logging for cases where importer fails to import data rather than silently ignoring them
user: TG1999
issue_633: state: open
title: Document all dataclass fields
user: Hritik14
labels: documentation: Everything about documentation
issue_630: state: open
title: process_advisories should check if fixed version lies within the affected_version_range
user: Hritik14
issue_627: state: open
title: use mypy for type checking 
user: TG1999
issue_626: state: open
title: Import Oval data from https://github.com/CISecurity/OVALRepo/
user: pombredanne
issue_625: state: open
title: Use sphinx autodoc
user: Hritik14
labels: documentation: Everything about documentation
issue_622: state: open
title: Collect data from https://github.com/ismyk8ssecure/ismyk8ssecure
user: pombredanne
issue_619: state: open
title: Streamline tests, remove setups
user: pombredanne
issue_614: state: open
title: Add proper license for nginx importer
user: Hritik14
issue_613: state: open
title: Add OpenSSH vulnerabilities
user: pombredanne
issue_611: state: open
title: Collect nuget vulnerabilities
user: pombredanne
issue_602: state: open
title: Upgrade to Python 3.9
user: Hritik14
issue_595: state: open
title: The query for affected and fixed packages should be abstracted as methods on the models (and/or on a model manager)
user: Hritik14
issue_594: state: open
title: Create and use an `nginx` type now that we have a specific versioning scheme for it
user: Hritik14
issue_593: state: open
title: Inconsistent naming of patched/fixed affected/vulnerable ...
user: Hritik14
issue_591: state: open
title: Use centralized function/objects for all network access 
user: pombredanne
issue_590: state: open
title: Implement structured logging
user: pombredanne
issue_589: state: open
title: Deal with deprecated, retired or obsolete vulnerabilities
user: pombredanne
issue_588: state: open
title: Collect CMU CERT
user: Hritik14
issue_587: state: open
title: Upgrade to Django 4.x
user: pombredanne
issue_586: state: open
title: Track Apache Log4j advisories 
user: pombredanne
issue_584: state: open
title: Rust Sec DB ambiguous version ranges
user: sbs2001
issue_583: state: open
title: Github importer failure
user: sbs2001
issue_582: state: open
title: Behaviour of 'arch' param in debian package request
user: nnobelis
issue_581: state: open
title: Collect https://github.com/gmatuz/inthewilddb
user: pombredanne
issue_580: state: open
title: Deal with some npm false positives
user: pombredanne
issue_579: state: open
title: Apache HTTPD does NOT use Maven versioning
user: pombredanne
issue_576: state: open
title: Handle package-specific "epochs"
user: pombredanne
issue_574: state: open
title: error import from safetydb: Invalid version
user: sify21
issue_573: state: open
title: docker-compose build: add error detection or more docs
user: armijnhemel
labels: documentation: Everything about documentation
issue_572: state: open
title: Low number of findings compared to commercial tool
user: oheger-bosch
issue_568: state: open
title: nginx import -> Name or service not known
user: list4nestor
issue_566: state: open
title: Address Apache HTTPD issue
user: pombredanne
issue_565: state: open
title: Integrate vulnerabilityhistory.org
user: pombredanne
issue_564: state: open
title: Import data from https://github.com/nluedtke/linux_kernel_cves
user: pombredanne
issue_562: state: open
title: Cannot import debian_oval -> "Failed to get updated_advisories"
user: list4nestor
issue_559: state: open
title: Support for http/socks proxy
user: Hritik14
issue_557: state: open
title: github import: https://repo.packagist.org/p/subrion/cms.json not found
user: list4nestor
issue_551: state: open
title: Extract interesting data from CVE and other vulnerabilities body
user: pombredanne
issue_549: state: open
title: Find redoc licenses
user: Hritik14
issue_545: state: open
title: Failure during Ubuntu importer run
user: pombredanne
issue_544: state: open
title: Review license of all 3rd party code (embeded or not)
user: pombredanne
issue_543: state: open
title: A better name to `bulk_search API`
user: sbs2001
issue_541: state: open
title: Add debug/dev settings profile (similar to scancodeio)
user: Hritik14
issue_540: state: open
title: Consider adopting the OSV API as alternative output
user: pombredanne
issue_537: state: open
title: Help complete Openstack importer
user: pombredanne
issue_536: state: open
title: Report newly added CVEs/vulnerabilities
user: nate-droid
issue_535: state: open
title: 7. Add qualifiers, subpath in package view. Increase info density for package detail view.
user: pombredanne
issue_534: state: open
title: Adapt or adopt rustsec to new vulnerability format https://github.com/RustSec/advisory-db
user: pombredanne
issue_532: state: open
title: Collect custom Python vulneraibilities from https://github.com/westonsteimel/safety-db
user: pombredanne
issue_531: state: open
title: Collect CPE mappings from https://github.com/westonsteimel/package-metadata
user: pombredanne
issue_526: state: open
title: Log Importer Runs
user: Hritik14
issue_524: state: open
title: Add suggested fix in frontend
user: Hritik14
issue_520: state: open
title: Implement proper postgres health check in Dockerfile
user: Hritik14
issue_519: state: open
title: Which distro do we support ?
user: Hritik14
labels: documentation: Everything about documentation
issue_517: state: open
title: Add tests for Docker
user: Hritik14
issue_516: state: open
title: Find a way to extract OCR readable advisories
user: Hritik14
issue_513: state: open
title: Add Docker labels
user: Hritik14
issue_511: state: open
title: Revisit bulk_search API data structure
user: pombredanne
issue_509: state: open
title: Collect Alpine vulnerability data from APKBUILD comments
user: pombredanne
issue_506: state: open
title: Be polite to APIs
user: Hritik14
issue_502: state: open
title: More informative commit mesages
user: Hritik14
labels: documentation: Everything about documentation
issue_499: state: open
title: Refactor alpine importer
user: Hritik14
issue_496: state: open
title: Advisories created by alpine importer contain no version information
user: Hritik14
issue_494: state: open
title: Uniform method to categorize versions
user: Hritik14
issue_488: state: open
title: Question: problem with npm importer or something else?
user: kipz
issue_487: state: open
title: Add Fireeye disclosures
user: pombredanne
issue_486: state: open
title: Import github fails due to an "-class.-jw.util.version.Version-" Invalid Version
user: kozlex
issue_482: state: open
title: Use purl for carrying around package informations
user: pombredanne
issue_473: state: open
title: Improve workflows
user: Hritik14
issue_470: state: open
title: Add sudo alerts
user: pombredanne
issue_465: state: open
title: FIX CI
user: pombredanne
issue_463: state: open
title: "Wall of shame" queries for problematic vulnerability advisories data
user: pombredanne
issue_461: state: open
title: Get a (cool) logo 
user: sbs2001
labels: documentation: Everything about documentation
issue_457: state: open
title: [Enhancement] Importer Badges
user: Hritik14
labels: documentation: Everything about documentation
issue_455: state: open
title: Add  CVE as reference in existing importers
user: Hritik14
issue_451: state: open
title: Add Yubico advisories
user: pombredanne
issue_447: state: open
title: Improve naming and be consistent about it
user: sbs2001
issue_442: state: open
title: Zip files for test cases
user: Hritik14
issue_441: state: open
title: Collect friendsofphp
user: sbs2001
issue_431: state: open
title: Add libvirt vulnerabilities
user: pombredanne
issue_429: state: open
title: Feature: Display the most common/popular/severe vulnerabilities
user: Pushpit07
issue_422: state: open
title: Add GraphQL API to provide user required data.
user: AmitGupta7580
issue_410: state: open
title: Vulnerablecode useragent
user: Hritik14
issue_374: state: open
title: Add Openstack advisories
user: pombredanne
issue_362: state: open
title: Revisit DB field character limits
user: sbs2001
issue_361: state: open
title: Handle summaries of vulnerabilities obtained from different sources
user: sbs2001
issue_345: state: open
title: Specify a simple and common MOdern VUlnerability Report
user: pombredanne
issue_341: state: open
title: Collect data from https://github.com/google/osv
user: pombredanne
issue_340: state: open
title: Missing details on NVD vulnerability
user: pombredanne
issue_327: state: open
title: Infer Package URL from references and other references issues for "commitish" URLs 
user: pombredanne
issue_326: state: open
title: Incorrect or misleading data
user: pombredanne
issue_323: state: open
title: Package API filters field order is not correct and set is incomplete
user: pombredanne
issue_318: state: open
title: manage.py import should provide some kind of progress feedback
user: pombredanne
issue_317: state: open
title: Add Android bulletins
user: pombredanne
issue_314: state: open
title: Collect apache project's machine readable advisories. 
user: sbs2001
issue_304: state: open
title: Ignore closed source vulnerabilities
user: sbs2001
issue_300: state: open
title: Deal with temporary vulnerabilities 
user: sbs2001
issue_297: state: open
title: Scrape Github security advisories using HTML scraping 
user: pombredanne
issue_293: state: open
title: Revisit the storage of data source licenses
user: pombredanne
issue_289: state: open
title: Collect Maven vulnerabilities stats
user: pombredanne
issue_288: state: open
title: Collect go announces 
user: sbs2001
issue_286: state: open
title: Add support for DotNet security vulnerabilities
user: sschuberth
issue_279: state: open
title: Collect vulnerabilties for maven packages
user: pombredanne
issue_272: state: open
title: Make VulnerableCode less fragile to schema changes in upstream projects
user: sbs2001
issue_252: state: open
title: Build a graph of packages and vulnerabilities
user: pombredanne
issue_251: state: open
title: Process unstructured data sources
user: pombredanne
issue_233: state: open
title: Parse CHANGELOGs to discover new Vulnerabilities
user: sbs2001
issue_226: state: open
title: Check types in CI
user: sbs2001
issue_224: state: open
title: Add Mattermost security updates
user: pombredanne
issue_218: state: open
title: Create community curation model for VulnerableCode
user: sbs2001
issue_215: state: open
title: Collect  CodeQL  queries for detecting specific vulnerabilities
user: sbs2001
issue_207: state: open
title: Include Commit(s) that Fixed the Vulnerability
user: elanzini
issue_175: state: open
title: Add a coverage badge in README
user: sbs2001
labels: documentation: Everything about documentation
issue_150: state: open
title: Add data from Cisco's PSIRT openVuln API if possible
user: sbs2001
issue_142: state: open
title: Collect all known package versions (Package URLs)
user: pombredanne
issue_129: state: open
title: Cleanup wiki and review/update doc
user: pombredanne
labels: documentation: Everything about documentation
issue_128: state: open
title: Add https://www.nbu.gov.sk/skcsirt-sa-20170909-pypi/
user: pombredanne
issue_118: state: open
title: Add data from https://github.com/google/vulncode-db/ 
user: pombredanne
issue_117: state: open
title: Add oss-fuzz confirmed security issues 
user: pombredanne
issue_116: state: open
title: Add advisory parsing from https://github.com/mprpic/advisory-parser
user: pombredanne
issue_111: state: open
title: Collect OVAL repo from cisecurity.org
user: pombredanne
issue_108: state: open
title: Collect data from mailing lists
user: pombredanne
issue_107: state: open
title: Collect NetBSD
user: pombredanne
labels: sys: system or OS packages
issue_106: state: open
title: Collect misc data sources
user: pombredanne
issue_105: state: open
title: Collect securityfocus
user: pombredanne
issue_104: state: open
title: Collect bugtraq mailing list
user: pombredanne
issue_102: state: open
title: Collect samba
user: pombredanne
labels: app: application packages
issue_100: state: open
title: Collect Apache Announces mailing list
user: pombredanne
labels: app: application packages
issue_95: state: open
title: Collect exploit pointers?
user: pombredanne
issue_94: state: open
title: Collect JVN vulnerabilities
user: pombredanne
issue_93: state: open
title: Collect Atlassian security bugs
user: pombredanne
labels: app: application packages
issue_90: state: open
title: Collect drupal
user: pombredanne
labels: app: application packages
issue_89: state: open
title: Collect TYPO3
user: pombredanne
labels: app: application packages
issue_88: state: open
title: Add support for hackerone reports
user: pombredanne
issue_87: state: open
title: Collect CloudFoundry advisories
user: pombredanne
labels: app: application packages
issue_85: state: open
title: Collect Scientific Linux
user: pombredanne
labels: sys: system or OS packages
issue_84: state: open
title: Collect opensuse
user: pombredanne
labels: sys: system or OS packages
issue_83: state: open
title: Collect Fedora
user: pombredanne
labels: sys: system or OS packages
issue_82: state: open
title: Collect VMWare
user: pombredanne
labels: sys: system or OS packages
issue_81: state: open
title: Collect mageia
user: pombredanne
labels: sys: system or OS packages
issue_80: state: open
title: Collect distrowatch
user: pombredanne
labels: sys: system or OS packages
issue_79: state: open
title: Collect OpenBSD
user: pombredanne
labels: sys: system or OS packages
issue_77: state: open
title: Collect data from LWN
user: pombredanne
issue_76: state: open
title: Collect slackware
user: pombredanne
labels: sys: system or OS packages
issue_75: state: open
title: Collect Oracle Linux
user: pombredanne
labels: sys: system or OS packages
issue_73: state: open
title: Collect vulnerabilities from Jenkins
user: pombredanne
labels: app: application packages
issue_72: state: open
title: Collect vulnerabilities from Amazon Linux
user: pombredanne
labels: sys: system or OS packages
issue_70: state: open
title: Collect OpenWRT
user: pombredanne
labels: sys: system or OS packages
issue_68: state: open
title: Collect FreeBSD
user: pombredanne
labels: sys: system or OS packages
issue_67: state: open
title: Collect tenable/nessus plugin pointers
user: pombredanne
issue_66: state: open
title: Collect OpenVAS Vulnerability Tests pointers
user: pombredanne
issue_65: state: open
title: Collect CentOS vulnerabilities
user: pombredanne
labels: sys: system or OS packages
issue_64: state: open
title: Collect AIX /IBM security advisories
user: pombredanne
labels: sys: system or OS packages
issue_63: state: open
title: Track licenses for each data pointers and records
user: pombredanne
issue_55: state: open
title: Collect NixOS
user: haikoschol
labels: sys: system or OS packages
issue_44: state: open
title: Collect Red Hat RHSA
user: pombredanne
labels: sys: system or OS packages
issue_41: state: open
title: Add support for Microsoft vulnerabilities  and CVRF
user: pombredanne
labels: sys: system or OS packages
issue_36: state: open
title: Add vmware/photon/wiki/Security-Advisories vulnerabilities advisories
user: pombredanne
issue_9: state: open
title: Collect vulnerabilities and package references from cve-search (and/or via4cve)
user: pombredanne