-
Notifications
You must be signed in to change notification settings - Fork 26
Description
Introduction
I noticed, that this repository is not supporting vulnerabilities in the scoring system CVSSv4. I wanted to provide a fix by myself, but this does not seem to be possible. Maybe this is due to my lack of knowledge, so please correct me if I'm wrong.
My investigation
Originally I'm using the oss-review-toolkit to query vulnerabilities via the BlackDuck vulnerability database. So I debugged into this library, where I saw, that ORT is specifying the VulnerabilityView class. Going through blackduck-common-api and blackduck-common-apigen I noticed the README.md, where internal resources are linked.
Obviously I cannot access to modify such resources. That's why I'm opening this issue. If I oversaw something, please let me know. I would appreciate a quick answer.
Thank you very much in advance!