ITADN

CVSS3.1 isn't fully supported

#226Openunorsk 创建于 2024-07-29
U
unorskcommented
Is it just me or the cvss parser doesn't fully support the cvss31 standard (some metrics [haven't been implemented](https://github.com/haskell/security-advisories/blob/c38596cf4642efed39fa60b6c9cad0a669004d7b/code/cvss/src/Security/CVSS.hs#L270)) These aren't important semantically since their presence doesn't affect the score calculation, but practically the parser would fail parsing a cvss string containing one of these.
2 条评论