dependency-check dependencycheck-8024
dependency-check dependencycheck-8024: a task in LegoFlow-SWE (Harbor dataset). The current suppression rule’s cvssBelow element accepts only a single numeric threshold. It is unclear which CVSS version (v2, v3, or v4) is being compared, leading to unexpected behavior when a vulnerability has…
The task
The current suppression rule’s `cvssBelow` element accepts only a single numeric threshold. It is unclear which CVSS version (v2, v3, or v4) is being compared, leading to unexpected behavior when a vulnerability has significantly different scores across versions. For example, CVE-2020-5529 scores 6.8 on CVSS v2 but…
Part of Lego-X/LegoFlow-SWE.