ziad hany

> Unsupported severity type: {'type': 'CVSS_V4', 'score': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N'} for OSV id: 'PYSEC-2024-154' > > Why this score is not supported ? I have a PR for this - #1974

> In the above example af2.affected_version_range shouldn't be none we are completely missing `8.0.0`. > > We should also update osv tests to include case where we test parsed advisory...

@TG1999 Okay, I will add the `aosp_dataset` importer (https://github.com/quarkslab/aosp_dataset) since it has some diversity in vcs_urls.

url2purl currently fails to parse commit hashes correctly: - https://github.com/package-url/packageurl-python/issues/210 I’ve opened a PR with a fix: - https://github.com/package-url/packageurl-python/pull/211

@TG1999 I added an end-to-end test. Can you please have a look?

@keshav-space @TG1999 I’ve added the requested changes. Please have a look and let me know if I should update anything. AospImporterPipeline Logs: ``` Importing data using aosp_dataset_fix_commits INFO 2025-12-11 09:52:54.675302...

> @ziadhany LGTM! please rebase and adjust the migrations! great work 🙌 @TG1999 Done , Please merge 🚀

@Hossam-Osama559 You can go ahead and start working on this issue whenever you’re ready. No need to assign it appreciate your initiative 🚀 ! If the issue already has a...

@jarek-o It sounds like NVD has dropped version 1.1 of the Data Feed API and is now using version 2.0. ``` Decommissioning of Legacy Data Feed Files As of August...

> can you assign this task to me? @jenamjain Sorry, but I'm already working on it. Feel free to pick any other issue that doesn't have a PR.