osv.dev icon indicating copy to clipboard operation
osv.dev copied to clipboard

Published 20 hours ago • verified publisher icon google

Always return the upstream aliases when no alias groups are generated

Open Moullisha opened this issue 7 months ago • 13 comments

Describe the bug Some vulnerabilities in OSV do not mention alias whereas the source link has alias data.

To Reproduce https://vuln.go.dev/ID/GO-2024-2947.json mentions two aliases whereas https://api.osv.dev/v1/vulns/GO-2024-2947 does not. Similar behaviour observed in case of GO-2024-2918, GHSA-v6v8-xj6m-xwqh, GO-2024-2963

Expected behaviour If alias is available in source data, same should be provided by OSV.

Screenshots If applicable, add screenshots to help explain your problem.

Additional context Add any other context about the problem here.

Moullisha avatar Jul 05 '24 10:07 Moullisha