RafaelGSS/is-my-node-vulnerable

Add support to environment check

Closed this issue · 3 comments

RafaelGSS commented

Sometimes a security vulnerability affects only windows or macOS and in order to make this package consistent, a check against the environment should be performed.

Currently, the Node.js Security DB doesn't provide information about the CVE environment, so the steps should be:

  1. Update the Security DB to provide this information
  2. Update this package
UlisesGascon commented

Happy to help if you need an extra hand 😉

RafaelGSS commented

Happy to help if you need an extra hand wink

That would be awesome, @UlisesGascon

UlisesGascon commented

Next steps:

  • Add affectedEnvironments to the Nodejs Core Vuln model. See: nodejs/security-wg#912
  • Update the vuln DB to include for the core reported vulnerabilities. See: nodejs/security-wg#914
  • Add business logic to check against the os.platform(). See: #12
  • 👍1