vulnerablecode
vulnerablecode copied to clipboard
nexB
A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase...
Anon users are throttled at `3600 requests/hour`, authenticated users without any specific throttling permissions are allowed `10800 requests/hour`. Users may be granted permissions from `throttle_3600_hour`, `throttle_14400_hour`, `throttle_18000_hour` and `throttle_unrestricted` to...
Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.26.19 to 2.5.0. Release notes Sourced from urllib3's releases. 2.5.0 🚀 urllib3 is fundraising for HTTP/2 support urllib3 is raising ~$40,000 USD to release HTTP/2 support and...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
We're getting this log below when running `import --all` twice in parallel. Solution: - [x] Deactivate openssl importer until #1747 is fixed. - [x] Do not run multiple instance of...
- Reference: https://github.com/aboutcode-org/vulnerablecode/issues/1393 - https://github.com/aboutcode-org/vulnerablecode/issues/1877 - Add V2Advisory Model. - V2Advisory Model should have relationships between other models like aliases, affected packages, references, severities and weaknesses. - V2AdvisoyModel will have...
Solves #1916 * Update Nginx importer to filter and process advisories relevant to the purl passed in the constructor * Update Nginx importer tests to include testing the package-first mode
Solves #1911 * Update Ruby importer to only load and process advisories relevant to the purl passed in the constructor * Update Ruby importer tests to include testing the package-first...
Solves #1911 * Update Rust importer to only load and process advisories relevant to the purl passed in the constructor * Update Rust importer tests to include testing the package-first...
Solves #1903 - Extract Gitlab API handling code from vulntotal gitlab datasource into a utils file. - Update vulntotal gitlab datasource to use the utils file. - Update vulntotal gitlab...
As a part of the ongoing GSoC 2025 project titled "On-demand live evaluation of packages and Integration with VulnTotal". It should modify the curl importer to support the package-first mode....
As a part of the ongoing GSoC 2025 project titled "On-demand live evaluation of packages and Integration with VulnTotal". It should modify the nginx importer to support the package-first mode....