osv.dev icon indicating copy to clipboard operation
osv.dev copied to clipboard
verified publisher icon google

Ubuntu deleted data still showing up in osv.dev

Open dodys opened this issue 7 months ago • 8 comments

Describe the bug As new CVEs are published, new OSV data are generated for Ubuntu, but at some point the team will triage that CVE and might define that this CVE does not affect any Ubuntu release. In that case, that OSV file is removed from the repo, as the affected[] field would be empty.

To Reproduce Steps to reproduce the behaviour:

  1. Go to 'https://osv.dev/vulnerability/UBUNTU-CVE-2024-53861'
  2. Check the file in the Ubuntu repo exists: 'https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-53861.json'

Expected behaviour If an OSV file is deleted, the website shouldn't show that file anymore too.

dodys avatar May 08 '25 09:05 dodys