David "Pip" Pippenger

Results 2 comments of David "Pip" Pippenger

The github advisory database seems to be enforcing a 1:1 mapping of CVE ID to software project, see here https://github.com/github/advisory-database/pull/2868 The problem this creates is the NVD doesn't have this...

I would ask you reconsider your position. Having defects that are resolvable by upgrading components is generally good security practice. By rejecting these results simply because we can't figure out...