vulnerablecode icon indicating copy to clipboard operation
vulnerablecode copied to clipboard

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase...

Results 574 vulnerablecode issues
Sort by recently updated
recently updated
newest added

Store date of release in database for versions of package

enhancement
Priority: medium
Data collection
Core models
data-quality
next

A vulnerability is identified in one application and an advisory is generated that corresponds to the application and the vulnerability. Different versions of the package might be vulnerable to the...

Core models
data-quality

[VCID-67rm-w5m7-aaar](https://public.vulnerablecode.io/vulnerabilities/VCID-67rm-w5m7-aaar) contains unrelated redhat packages in `affected packages` ``` pkg:rpm/redhat/[email protected]?arch=el7 pkg:rpm/redhat/[email protected]?arch=el7 pkg:rpm/redhat/[email protected]?arch=el7 pkg:rpm/redhat/[email protected]?arch=el7 pkg:rpm/redhat/[email protected]?arch=el7 pkg:rpm/redhat/[email protected]?arch=el7 pkg:rpm/redhat/[email protected]?arch=el7 pkg:rpm/redhat/[email protected]?arch=el7 pkg:rpm/redhat/[email protected]?arch=el7 pkg:rpm/redhat/[email protected]?arch=el7 ``` [VCID-67rm-w5m7-aaar](https://public.vulnerablecode.io/vulnerabilities/VCID-67rm-w5m7-aaar) alias [CVE-2020-28493](https://nvd.nist.gov/vuln/detail/CVE-2020-28493) is essentially a security advisory for jinja2...

data-quality
next

### **Summary** This pull request enhances the vulnerability data import by allowing data to be imported from a json data stored in the local directory NVD_Data. It also considers robust...

issue: #1543 ![image](https://github.com/user-attachments/assets/8bc7ba56-f8e0-4316-a1f8-354c7b68d2c9) ![image](https://github.com/user-attachments/assets/113cfa69-2de2-4673-b6ad-cd964e0f61ab)

2-next

As we have gone through some major changes in #525, we could also update the python version and carry on with the importer rewrites (#597) accordingly. We could either upgrade...

for issue: #1496 Added a OpenJDK advisory importer that scrapes the vulnerability data from the link: https://openjdk.org/groups/vulnerability/advisories/ and then added the importer to importer registery

# Add CISA GOV Vulnrichment Importer This pull request adds a new importer for the CISA GOV Vulnrichment dataset. The importer fetches vulnerability data from the CISAGOV/vulnrichment GitHub repository and...

Add pagination to VCIO & SCIO #1616 #1617 #1618 This change aligns Package Search functionality and Vulnerability Search, improving consistency across the application and enhancing user control over result display....