Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Incorrect affected package in composer advisories #1516

Closed
keshav-space opened this issue Jul 22, 2024 · 1 comment · Fixed by aboutcode-org/univers#108
Closed

Incorrect affected package in composer advisories #1516

keshav-space opened this issue Jul 22, 2024 · 1 comment · Fixed by aboutcode-org/univers#108
Assignees
@keshav-space
Labels
1-next data-quality

Comments

@keshav-space
Copy link
Member

Following are some of the incorrect affected packages in composer advisories:

This issue is direct result of bug in univers aboutcode-org/univers#136, which leads to incorrect parsing of the affected version range.

VCIO version: v34.0.0rc4
@keshav-space keshav-space self-assigned this Jul 22, 2024
@keshav-space keshav-space mentioned this issue Jul 22, 2024
Closed
@keshav-space
Copy link
Member Author

The was due to aboutcode-org/univers#136 and was fixed in aboutcode-org/univers#108

@keshav-space keshav-space moved this from Reviewed to Done in VulnerableCode Data Quality and next Aug 13, 2024
@pombredanne pombredanne added 1-next and removed 9-next labels Sep 24, 2024
@pombredanne pombredanne mentioned this issue Sep 29, 2024
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@keshav-space keshav-space

Labels
1-next data-quality
Projects
04-VulnerableCode Data Quality and next
Status: Done
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Support Normalization of VersionRange keshav-space/univers
2 participants
@pombredanne @keshav-space