diff --git a/CHANGELOG.rst b/CHANGELOG.rst index 586cad497..c295625d9 100644 --- a/CHANGELOG.rst +++ b/CHANGELOG.rst @@ -39,6 +39,8 @@ Version v30.0.0 - Rename `resolved_vulnerabilities` to `fixing_vulnerabilities` - Rename `url` to `reference_url` in the reference list +- We have provided backward compatibility for `url` and `unresolved_vulnerabilities` for now + - There is a new experimental cpe/ API endpoint to lookup for vulnerabilities by CPE and another aliases/ endpoint to lookup for vulnerabilities by aliases. These two endpoints will be replaced by query parameters on the main vulnerabilities/ endpoint when stabilized. diff --git a/vulnerabilities/api.py b/vulnerabilities/api.py index c1d01ea28..dbc26b2ea 100644 --- a/vulnerabilities/api.py +++ b/vulnerabilities/api.py @@ -35,7 +35,7 @@ class VulnerabilityReferenceSerializer(serializers.ModelSerializer): class Meta: model = VulnerabilityReference - fields = ["reference_url", "reference_id", "scores"] + fields = ["reference_url", "reference_id", "scores", "url"] class MinimalPackageSerializer(serializers.HyperlinkedModelSerializer): @@ -94,6 +94,10 @@ class Meta: class PackageSerializer(serializers.HyperlinkedModelSerializer): + def to_representation(self, instance): + data = super().to_representation(instance) + data["unresolved_vulnerabilities"] = data["affected_by_vulnerabilities"] + return data purl = serializers.CharField(source="package_url") affected_by_vulnerabilities = MinimalVulnerabilitySerializer( diff --git a/vulnerabilities/tests/test_fix_api.py b/vulnerabilities/tests/test_fix_api.py index 01a4a4237..61fd0ff08 100644 --- a/vulnerabilities/tests/test_fix_api.py +++ b/vulnerabilities/tests/test_fix_api.py @@ -88,6 +88,7 @@ def test_api_with_single_vulnerability(self): "namespace": "nginx", "name": "test-vulnDB", "version": "1.0", + "unresolved_vulnerabilities": [], "qualifiers": {}, "subpath": "", "affected_by_vulnerabilities": [],