CVSS3.1 isn't fully supported
Is it just me or the cvss parser doesn't fully support the cvss31 standard (some metrics [haven't been implemented](https://github.com/haskell/security-advisories/blob/c38596cf4642efed39fa60b6c9cad0a669004d7b/code/cvss/src/Security/CVSS.hs#L270))
These aren't important semantically since their presence doesn't affect the score calculation, but practically the parser would fail parsing a cvss string containing one of these.
2 条评论