Skip to content

Commit 4e6524d

Browse files
committed
fix: correctly parse cvss v3 vector from osv advisory
Signed-off-by: Keshav Priyadarshi <git@keshav.space>
1 parent d539bcb commit 4e6524d

1 file changed

Lines changed: 4 additions & 2 deletions

File tree

vulnerabilities/pipes/osv_v2.py

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -269,9 +269,11 @@ def get_severities(raw_data, url) -> Iterable[VulnerabilitySeverity]:
269269
continue
270270

271271
severity_type = OSV_TO_VCIO_SEVERITY_MAP.get(severity_type, severity_type)
272-
system = SCORING_SYSTEMS[severity_type]
272+
if value.lower().startswith("cvss:3.0/"):
273+
severity_type = "cvssv3"
273274

274-
if severity_type in ["cvssv3.1", "cvssv4"]:
275+
system = SCORING_SYSTEMS[severity_type]
276+
if severity_type in ["cvssv3", "cvssv3.1", "cvssv4"]:
275277
scoring_element = value
276278
valid_vector = value[:-1] if value and value.endswith("/") else value
277279
value = system.compute(valid_vector)

0 commit comments

Comments
 (0)