News for hackers. Stuff that matters.

A comment on GitHub’s database of security advisories is now open source. Parent comment

Re:GitHub’s database of security advisories is now open source by alexchantavy on Saturday February 26, 2022 @11:16PM (#30485364)
Any plans to include fixed versions of software in the data so users know what to update to?

Also, are there plans to include data from before 2017?

[ Parent | on HN ]
Re:GitHub’s database of security advisories is now open source by greysteil on Saturday February 26, 2022 @11:50PM (#30485514)
We already have fixed versions (where they exist) - example link below.

On backfilling the data to include advisories from before 2017 - absolutely. So far we've done this in a relatively ad-hoc way - you should already find that the most important (severe and wide-reaching) CVEs from before 2017 are in the database (and if there are any that aren't you think should be we'd love you to open an issue on the DB). We want to do a more complete backfill in the near future.

https://github.com/github/advisory-database/blob/main/adviso...

[ Parent | on HN ]