dependency-track
dependency-track copied to clipboard
include vulnerabilities from other sources than NVD in exploit predictions graph
The enhancement may already be reported! Please search for the enhancement before creating one.
Current Behavior:
vulnerabilities reported by oss index or github are not in the exploit predictions graph
Proposed Behavior:
include these vulnerabilities in the graph so that we can prioritize their audit
EPSS is created and managed by "first.org" team, who also created CVSS Calculator for CVEs. DT mirrors the EPSS tables daily and represent them in the GUI. I believe for this enhancement should you address to FIRST
Hi @JN-CSIRT, thank you, i will try to contact them.