Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Some bulletins are missing ? #4612

Open
maaaaz opened this issue Jul 16, 2024 · 1 comment
Open

Some bulletins are missing ? #4612

maaaaz opened this issue Jul 16, 2024 · 1 comment

Comments

@maaaaz
Copy link

maaaaz commented Jul 16, 2024

Hello there,

Thank you for this great work but it seems that, according to my understanding, some bulletins are missing in the advisories folder of this repository.

For instance, I can't find this bulletin: GHSA-gw4j-fhj8-497m (found with this search request).

Idem with "pymocks" (GHSA and OSV):

┌──[/tmp/]
└─$ git clone https://github.com/github/advisory-database/ && cd /advisory-database/advisories

┌──[/tmp/advisory-database/advisories]
└─$ rg pymocks

┌──[/tmp/advisory-database/advisories]
└─$ grep -inr pymocks

┌──[/tmp/advisory-database/advisories]
└─$ grep -inr "GHSA-8rgr-xgx4-q7jq"

┌──[/tmp/advisory-database/advisories]
└─$ grep -inr "MAL-2022-7426"

Whereas it is present in the PyPi OSV dataset:

$ unzip -l Pypi.zip |grep -i MAL-2022-7426
   2223  2024-07-21 09:37   MAL-2022-7426.json

Is there any reason for this repository not to contain all bulletins ?

Cheers!

@andrewpollock
Copy link

I have this vague recollection that Malware Advisories are treated differently... @calebbrown may be able to say more...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants