Are advisories from different data sources (e.g. GitHub Advisory DB & NVD) merged / combined? #3049
|
Take for example https://osv.dev/vulnerability/CVE-2019-11932 In case there is no automatic merging / combining happening yet, would it make sense and be possible to add this at least for non-conflicting data? For the example above, my change adds an Maybe related to #2465? |
Replies: 1 comment
|
You'd have to get this fixed in NVD separately unfortunately. OSV doesn't combine or merge any advisories from any sources today. It just acts as an aggregator of distinct sources. |
You'd have to get this fixed in NVD separately unfortunately.
OSV doesn't combine or merge any advisories from any sources today. It just acts as an aggregator of distinct sources.