Skip to content

Missing CVSSv4 support #473

@MalteHarmsZeiss

Description

@MalteHarmsZeiss

Introduction
I noticed, that this repository is not supporting vulnerabilities in the scoring system CVSSv4. I wanted to provide a fix by myself, but this does not seem to be possible. Maybe this is due to my lack of knowledge, so please correct me if I'm wrong.

My investigation
Originally I'm using the oss-review-toolkit to query vulnerabilities via the BlackDuck vulnerability database. So I debugged into this library, where I saw, that ORT is specifying the VulnerabilityView class. Going through blackduck-common-api and blackduck-common-apigen I noticed the README.md, where internal resources are linked.

Obviously I cannot access to modify such resources. That's why I'm opening this issue. If I oversaw something, please let me know. I would appreciate a quick answer.

Thank you very much in advance!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions