undefined | Better HN

0 pointsgreysteil4y ago0 comments

You can see some of that metadata in the UI for the database: https://github.com/advisories

0 comments

2 comments · 1 top-level

vcdimension4y ago· 1 in thread

OK, thanks. I see it says 6,465 advisories, so I guess you are only storing CVE records that haven't been fixed since the main CVE list currently contains 170804 records. Is this correct?

greysteilOP4y ago

The 6,465 is curated advisories that apply to open source packages in the ecosystems listed. NVD’s 170,804 is all CVEs issued, many of which (the vast majority) don’t apply to open source packages.

(Not trying to claim the GitHub Advisory Database is perfectly complete - it’s not, and achieving that is part of why we’ve opened it up to community contributions. Just that the comparison with everything in the NVD isn’t apples to apples - the databases have different scopes.)

j / k navigate · click thread line to collapse