vulnerablecode
vulnerablecode copied to clipboard
Add Apache Camel Advisories
In reference to the issue #1515
Changes Made:
- Apache Camel Advisory Pipeline added
- Test written
@keshav-space Thanks for the review, I'll make the necessary changes and update you.
@keshav-space I have update the version parsing logic and it works fine. But I have a doubt on how to incorporate fixed_version in the affected_package
For example:
- For the affected version string
2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0the fixed version string is3.2.0 - affected string
3.0.0 up to 3.14.5, and 3.15.0 up to 3.18.3, and 3.19.0.fixed string :3.14.6, 3.18.4. Here what should be the fixed version for3.19.0? Or should I leave it empty ? - Similary in
2.22.x, 2.23.x, 2.24.x, 2.25.0 and 2.25.1, 3.0.0 up to 3.3.0for which fixed string is2.25.2, 3.4.0. - And lastly the latest affected strings are like
Apache Camel 4.10.0 before 4.10.3. Apache Camel 4.8.0 before 4.8.6.for which fixed strings are given in reverse making it tedious to get the fixed version4.8.6 and 4.10.3
Looking forward to your insights !