haskell/security-advisories

Issues

• Support for other namespaces

  #240 opened 2 months ago by tchoutri
  4

• SPDX support for SBOM

  #215 opened 5 months ago by TristanCacqueray
  1

• Handle ghc (non hackage) advisories

  #212 opened 5 months ago by TristanCacqueray
  0

• CVSS3.1 isn't fully supported

  #226 opened 5 months ago by unorsk
  2

• Cabal package publishing process

  #177 opened 5 months ago by MangoIV
  4

• Publish new versions on hackage

  #224 opened 5 months ago by blackheaven
  2

• Adapt advisories page to ecosystem

  #222 opened 5 months ago by blackheaven
  0

• osv: CVSS v2 vector string should not include version prefix

  #217 opened 5 months ago by frasertweedale
  0

• Abandoned vincenthz packages

  #187 opened 8 months ago by ysangkok
  10

• GHC 9.0.1 Natural conversion bug

  #210 opened 6 months ago by hsyl20
  7

• GitHub Dependabot support for Haskell packages

  #205 opened 6 months ago by frasertweedale
  3

• add CVSS 4.0 support

  #167 opened 9 months ago by frasertweedale
  6

• drop `ZonedTime` in favour of `UTCTime`

  #203 opened 6 months ago by MangoIV
  7

• add `Exception` instance to to `ParseAdvisoryError`

  #200 opened 6 months ago by MangoIV
  0

• No ISO 8601 parse for outputs of git into type `ZonedTime`

  #202 opened 6 months ago by MangoIV
  3

• Are embargoed vulnerabilities accepted?

  #204 opened 6 months ago by adamgundry
  3

• better documentation of Git-sourced fields when parsing

  #176 opened 9 months ago by MangoIV
  12

• CVE-2024-3205

  #181 opened 7 months ago by hasufell
  17

• Start requiring an approving review for mergers

  #175 opened 8 months ago by MangoIV
  4

• Schema: investigate CAPEC field

  #158 opened 9 months ago by frasertweedale
  2

• integration for `cabal`

  #145 opened a year ago by MangoIV
  5

• offer API to request security advisories

  #166 opened 9 months ago by MangoIV
  14

• support multiple repositories

  #165 opened 9 months ago by MangoIV
  4

• advisory distribution and caching mechanisms

  #170 opened 9 months ago by frasertweedale
  1

• Tracking cbits in the hackage ecosystem

  #162 opened 9 months ago by hasufell
  1

• Where else should be we publish or notify about advisories?

  #161 opened 9 months ago by frasertweedale
  1

• Add a RSS feed to GitHub Pages

  #159 opened 9 months ago by blackheaven
  1

• bzlib is vulnerable to CVE-2019-12900

  #155 opened 9 months ago by hasufell
  2

• bz2 is vulnerable to CVE-2019-12900

  #156 opened 9 months ago by hasufell
  8

• Configure GitHub Pages

  #133 opened 10 months ago by blackheaven
  3

• `hsec-tools` nix package depends on `haskell-language-server`

  #144 opened a year ago by MangoIV
  3

• draft: discover and identify a vulnerabilty

  #134 opened a year ago by aleeusgr
  4

• OSV JSON output of severity `type` and `score` are backwards

  #135 opened a year ago by michaelkedar
  1

• GHC 9.8 support

  #127 opened a year ago by frasertweedale
  0

• CVSS type and support library

  #101 opened a year ago by frasertweedale
  2

• Disclosure policies

  #129 opened a year ago by hasufell
  6

• HSEC ID reservation

  #110 opened a year ago by frasertweedale
  2

• add tests for advisory parsing

  #100 opened a year ago by frasertweedale
  1

• Add initial content

  #32 opened a year ago by TristanCacqueray
  5

• purl type and support library

  #102 opened a year ago by akacase
  0

• Leverage the declaration field to specify which function is affected

  #86 opened a year ago by TristanCacqueray
  1

• No specification of "references" section

  #53 opened a year ago by david-christiansen
  9

• advisory metadata: keyword guidance

  #36 opened a year ago by frasertweedale
  2

• TOML: support multiple packages in a single advisory

  #65 opened a year ago by frasertweedale
  0

• nix: add flake-checker to keep dependencies fresh

  #61 opened 2 years ago by akacase
  0

• lib/advisories: improve time handling (modified / published)

  #46 opened 2 years ago by frasertweedale
  2

• pull request automation - ideation

  #57 opened 2 years ago by frasertweedale
  0

• tools: switch to pandoc AST

  #43 opened 2 years ago by frasertweedale
  0

• advisory metadata: allow multiple urls? more fine-grained references?

  #37 opened 2 years ago by frasertweedale
  2

• check HSEC `id` matches filename

  #40 opened 2 years ago by frasertweedale
  0