local-php-security-checker Add CVSS and Сomplexity for CVE

Apr 14 '22 11:04 ignatenkovnikita

Thanks for the PR! I was looking for something similar. @fabpot could you have a look if this is something you want to add?

Jun 28 '22 13:06 StevendeVries

We would need this info to be provided in the DB, which is not the case right now. So, the new fields would always be empty, right?

Jun 28 '22 13:06 fabpot

if I got it correctly, the implementation is getting the info from the https://cve.circl.lu database by issuing an API call for each advisories found.

This could be nice to have to know quickly if an advisory is severe or not. But the current implementation could cause the tool to become quite slow if you have several advisories (some requests can be slow, for example https://cve.circl.lu/api/cve/CVE-2022-23601 takes more than a second).

Jun 28 '22 15:06 tucksaun

I should have looked at the code :) I think this is out of the scope of this tool then.

Jun 28 '22 16:06 fabpot