vulnerablecode

vulnerablecode copied to clipboard

Continue reporting/displaying PURLs with URL encoding?

2

This is related to https://github.com/nexB/vulnerablecode/issues/1228 and https://github.com/nexB/vulnerablecode/issues/1252. I noticed yesterday while working on https://github.com/nexB/vulnerablecode/issues/1228 that my tests using `univers` (https://github.com/nexB/univers) to compare affected and fixed by versions threw a `univers.versions.InvalidVersion:...

johnmhoran

issue: - #1723

ziadhany

Bump django from 4.2.25 to 4.2.26

1

Bumps [django](https://github.com/django/django) from 4.2.25 to 4.2.26. Commits 0dfd59e [4.2.x] Bumped version for 4.2.26 release. 279f8b9 [4.2.x] Refs CVE-2025-64459 -- Avoided propagating invalid arguments to Q on ... 59ae82e [4.2.x] Fixed...

dependabot[bot]

Add Liferay Importer (Fixes #1410)

4

Fixes #1410 Hey, this PR adds a new importer for Liferay security advisories. It crawls the Liferay security page to fetch CVEs, severity scores, and affected versions. I've also added...

paarthbhatt

Plan shift to the latest advisory based API and UI and deprecating V1 API

7

- First, announce that we are deprecating https://public.vulnerablecode.io/api/ and ask users to migrate to https://public.vulnerablecode.io/api/v2/ - Migrate all of our importers from V1 (aka vulnerability pipelines) to V2 pipelines (aka...

TG1999

fedcode-next: Code pipeline and models to continuously collect related PoC for exploits of a vulnerability

3

To get this data, there are existing basic sources that we have already integrated. We should find more exploits in GitHub repos, and extract more data from existing sources.

pombredanne

fedcode-next: Code pipeline and models to continuously collect scripts and vulnerability scanner rules to detect if the vulnerability is "expressed"

2

These are commonly published for important vulns. This can include yara rules, rules for IDS like Suricata, ClamAV entries, OpenVAS and nessus rules and related, like with MISP

pombredanne

This could include the rewrite the documentation of VulnerableCode docs (see https://vulnerablecode.readthedocs.org/) according to Diátaxis framework to make the AboutCode docs better.

tsteenbe

fedcode-next: Code, UI and models to curate PURL and VERS package version range for packages affected and fixing a vulnerability

4

There is some UI design need to make this efficient. We could also display various advisory data sources side by side to help correct the data, and also we should...

pombredanne

TG1999