claircore
claircore copied to clipboard
OSV: fixed_in not in database
Looking at this https://api.osv.dev/v1/vulns/GHSA-25pr-6pr6-68v7
"ranges": [
{
"type": "SEMVER",
"events": [{ "introduced": "0" }, { "fixed": "1.1.9" }]
}
],
yet I do not see the fixed_in_version in the DB - is that because I do not have the latest version of the DB ? The code seems to attempt to read the right info
case ev.Fixed != "": // less than
ver, err = semver.NewVersion(ev.Fixed)
Not (yet) an expert but I see the value in the struct when I run a test locally - Not sure where I can continue to debug - pointers to where I can put my breakpoint ?
Oh I noticed FixedInVersion is "" where upper range contains the 1.1.9