fedcode-next: Code, UI and models to assign and qualify the weakness exposed by a CVE (or CWE)

[pombredanne]

This is an area where analyzing the text of a CVE may help in the future. For now we only want to curate CWEs

[keshav-space]

This is completed in

• Add support for CWE weakness curation #2380

The simplest way to try this out is:

Run the below command after cloning VulnerableCode repo:

 docker compose build
 docker compose up -d

This will collect the advisories from all the supported source and detect the conflicting weaknesses reported by different source and make it available at http://127.0.0.1:8001/advisories/todos/?issue_type=CONFLICTING_WEAKNESSES where individual conflicts can be curated by humans.

OR

Simply visit https://public2.vulnerablecode.io/advisories/todos/?issue_type=CONFLICTING_WEAKNESSES on staging instance.

Advisory Weakness Curation List

Advisory Weakness Curation View