Skip to content

Issues: google/osv.dev

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

164 Open 285 Closed
164 Open 285 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Advisories deleted from REST sources not being marked as withdrawn enhancement New feature or request infra infrastructure bugs/FRs
#2294 opened Jun 7, 2024 by oliverchang
Support commit enumeration on pathologically large repositories infra infrastructure bugs/FRs worker Worker-related infrastructure
#2293 opened Jun 7, 2024 by andrewpollock
Few CWE root causes are mapped from the CVE database into OSV enhancement New feature or request
#2292 opened Jun 6, 2024 by timothee-chauvin
2
Display the correct affected versions when filtering by ecosystem bug Something isn't working frontend Frontend Infrastructure
#2286 opened Jun 6, 2024 by hogo6002
Data quality issue with CVE-2024-32760 (Alpine security tracker related) data quality Issues with data quality
#2285 opened Jun 6, 2024 by hogo6002
1
Include Alpine and Debian security tracker links to vulnerability references on OSV.dev enhancement New feature or request
#2284 opened Jun 6, 2024 by hogo6002
@hogo6002
1
Replace pipenv with a better dependency management tool enhancement New feature or request
#2270 opened Jun 4, 2024 by hogo6002
4
Update material web components to 1.0 dependencies Pull requests that update a dependency file frontend Frontend Infrastructure
#2268 opened Jun 4, 2024 by another-rex
@zahraaalizadeh
Make it possible to visually evaluate a list of vulnerabilities by severity enhancement New feature or request frontend Frontend Infrastructure good first issue Good for newcomers ui UI bugs/FRs
#2255 opened May 30, 2024 by andrewpollock
@ZhangChen199102
Calculate and display the CVSS base score enhancement New feature or request frontend Frontend Infrastructure good first issue Good for newcomers ui UI bugs/FRs
#2254 opened May 30, 2024 by andrewpollock
Advisories from GuardDog datasource Requests for new data sources
#2252 opened May 29, 2024 by christophetd
@andrewpollock
2
Improve the UX of failed vulnerability retrieval by the API api API-related infrastructure documentation Improvements or additions to documentation
#2235 opened May 23, 2024 by andrewpollock
Bisection should not produce zero-length commit ranges bug Something isn't working worker Worker-related infrastructure
#2232 opened May 23, 2024 by andrewpollock
1
nvd-cve-osv: OpenSSL versions do not normalize correctly
#2220 opened May 17, 2024 by andrewpollock
Handle very long fields on vulnerabilities pages enhancement New feature or request frontend Frontend Infrastructure ui UI bugs/FRs
#2216 opened May 16, 2024 by oliverchang
@ZhangChen199102
1
Data quality issue with GHSA-4wrc-f8pq-fpqp data quality Issues with data quality
#2197 opened May 9, 2024 by wrngrn
1
OSV.dev downstream users have a clearly defined user journey to make corrections to OSV records served by OSV.dev with minimal overhead by all parties
#2191 opened May 9, 2024 by andrewpollock
@andrewpollock
OSV.dev downstream users have a way to reason about records that are absent from OSV.dev because of failure to meet the minimum quality bar
#2190 opened May 9, 2024 by andrewpollock
@andrewpollock
OSV record providers have a machine-readable way to reason about existing published records that do not meet this quality bar
#2189 opened May 9, 2024 by andrewpollock
@andrewpollock
The minimum quality bar is sustainably enforced by OSV.dev
#2188 opened May 9, 2024 by andrewpollock
@andrewpollock
Tooling exists for OSV record creators to validate that they meet the minimum quality bar at record creation time
#2187 opened May 9, 2024 by andrewpollock
@andrewpollock
3
There is a human readable authoritative definition of what the minimum quality bar looks like for an an OSV record that is acceptable for import by OSV.dev
#2186 opened May 9, 2024 by andrewpollock
@andrewpollock
CVEs getting reported for git hash, which have been resolved data quality Issues with data quality
#2183 opened May 8, 2024 by yashrsharma44
@andrewpollock
2
Withdrawing OSV reports is too heavyweight
#2177 opened May 8, 2024 by davidben
5
Request OSS-Fuzz project owner approval before importing OSS-Fuzz reports
#2176 opened May 8, 2024 by davidben
@oliverchang
14
ProTip! Follow long discussions with comments:>50.