Ignore closed source vulnerabilities #304

Activity

1. pombredanne commented on Jan 27, 2021

   

   pombredanne

   on Jan 27, 2021

   Member

   More actions

   @sbs2001 agreed at some level, but we want to be careful as proprietary software vulnerabilities may be at times about some FOSS packages that's bundled, so discarding it upfront may not be a good thing at all times.
   https://nvd.nist.gov/vuln/detail/CVE-2020-0236 for instance may not be for Ubuntu ... Yet it may be for us? TBD
2. pombredanne

   added

   enhancement

   Data collection

   on Feb 24, 2021
3. pombredanne

   removed

   enhancement

   on Jan 24, 2022
4. armijnhemel commented on Dec 19, 2022

   

   armijnhemel

   on Dec 19, 2022

   Contributor

   More actions

   More != Better

   We don't care about vulnerabilities in windows.

   I have problems with this. First of all, equating "windows" with "not open source" is an oversimplification: there is a lot of open source used in Windows (for more than 25 years) and this is only increasing. Also, users of VulnerableCode might actually be interested in this data.