Suggest improvements form saves "Source code location" as a WEB reference instead of PACKAGE
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 45/100
- Issue type
- Bug
- Clarity
- Mostly clear
- Activity status
- Active
- Tech stack
- github
- Domain
- security
Research direction
Start by comparing the form submission in pull request #9631 with the existing source repository reference in GHSA-rjqq-98f6-6j3r. Trace how the “Source code location” field is converted into a reference, then verify that the resulting entry uses type PACKAGE rather than WEB for the reported URL.
Written by the indexing model from the issue text.
Description
I used the "Suggest improvements for this vulnerability" form on GHSA-xc6g-ggrc-qq4r. The advisory had no source code location, so I set it to https://github.com/apostrophecms/sanitize-html. In the pull request #9631 the form added it as a reference with the WEB type.
+ {
+ "type": "WEB",
+ "url": "https://github.com/apostrophecms/sanitize-html"
+ },
Other advisories keep the source repository as a PACKAGE reference. For example, GHSA-rjqq-98f6-6j3r has the same URL with "type": "PACKAGE".
I expect the form to save the source code location as a PACKAGE reference.
- Dominant language
- No language data
- Stars
- 2.5k
- Forks
- 772
- Avg merge
- 3d 18h
- Merged PRs (30d)
- 48
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from github/advisory-database
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
github/advisory-database#9255 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
github/advisory-database#9164 · 1 reaction ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
github/advisory-database#8994 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
github/advisory-database#8898 · 4 comments · 1 reaction ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
github/advisory-database#8841 ·
All issues in github/advisory-database
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
punkpeye/mcp-remote#369 ·
-
Mend: dependency security vulnerability untriaged
Difficulty 1/5 Under an hour Newbie friendliness 86/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
-
bug
Difficulty 1/5 Under an hour Newbie friendliness 90/100
cisagov/vulnrichment#337 ·
-
bug DUP Reservations
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
bcgov/reserve-rec-public#896 ·