fasten-project/vulnerability-producer

CVE-2021-44228 - Too many PURLs

Opened this issue 2 years ago · 1 comments

mir-am commented 2 years ago

For CVE-2021-44228, the producer adds too many non-Maven PURLs that might not be affected by the vulnerability.

MagielBruntink commented 2 years ago

This seems fine: https://api.fasten-project.eu/api/mvn/vulnerabilities/CVE-2021-44228

But this not: https://api.fasten-project.eu/api/pypi/vulnerabilities/CVE-2021-44228