claircore icon indicating copy to clipboard operation
claircore copied to clipboard

OSV: fixed_in not in database

Open celek opened this issue 1 year ago • 1 comments

Looking at this https://api.osv.dev/v1/vulns/GHSA-25pr-6pr6-68v7

      "ranges": [
        {
          "type": "SEMVER",
          "events": [{ "introduced": "0" }, { "fixed": "1.1.9" }]
        }
      ],

yet I do not see the fixed_in_version in the DB - is that because I do not have the latest version of the DB ? The code seems to attempt to read the right info

case ev.Fixed != "": // less than
ver, err = semver.NewVersion(ev.Fixed)

celek avatar Nov 07 '23 16:11 celek

Not (yet) an expert but I see the value in the struct when I run a test locally - Not sure where I can continue to debug - pointers to where I can put my breakpoint ? image Oh I noticed FixedInVersion is "" where upper range contains the 1.1.9

celek avatar Nov 09 '23 14:11 celek