Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

support prefix validation for vulnerability ID #52

Open
gcmurphy opened this issue Nov 16, 2024 · 0 comments
Open

support prefix validation for vulnerability ID #52

gcmurphy opened this issue Nov 16, 2024 · 0 comments

Comments

@gcmurphy
Copy link
Owner

gcmurphy commented Nov 16, 2024

The id field currently is any arbitrary string. Could be worth validating the prefix (at least for search and filtering purposes).

From the spec:

The id field is a unique identifier for the vulnerability entry. It is a string of the format -, where DB names the database and ENTRYID is in the format used by the database. For example: “OSV-2020-111”, “CVE-2021-3114”, or “GHSA-vp9c-fpxx-744v”.

Prefix Database Description
ASB-A/PUB-A Android Security Bulletin

How to contribute: [Android Vulnerability Rewards Program](https://bughunters.google.com/about/rules/android-friends/6171833274204160/android-and-google-devices-security-reward-program-rules)
Source URL: [https://storage.googleapis.com/android-osv/<ID>.json](https://storage.googleapis.com/android-osv/index.html)
OSV Formatted URL: https://storage.googleapis.com/android-osv/<ID>.json

ALSA/ALBA/ALEA AlmaLinux Security Advisory

How to contribute: TBD
Source URL: https://errata.almalinux.org/<alma version>/<ID>.html
OSV Formatted URL: N/A

BIT Bitnami Vulnerability Database

How to contribute: https://github.com/bitnami/vulndb/blob/main/CONTRIBUTING.md
Source URL: https://github.com/bitnami/vulndb/blob/main/data/<component>/<ID>.json
OSV Formatted URL: N/A

CGA Chainguard Security Notices

How to contribute: TBD
Source URL: TBD
OSV Formatted URL: https://packages.cgr.dev/chainguard/osv/<ID>.json

CURL Curl CVEs

How to contribute: TBD
Source URL: https://curl.se/docs/<ID>.html
OSV Formatted URL: https://curl.se/docs/<ID>.json

CVE National Vulnerability Database (provided by OSV.dev)

How to contribute: TBD
Source URL: https://nvd.nist.gov/vuln/detail/<ID>
OSV Formatted URL: https://api.osv.dev/v1/vulns/<ID>

DSA/DLA/DTSA Debian Security Advisory Database (provided by OSV.dev)

How to contribute: TBD
Source URL: https://debian.org/security/<YEAR>/<ID> (lowercase dsa)
OSV Formatted URL: https://api.osv.dev/v1/vulns/<ID>

ELA Debian Extended LTS Security Advisories (provided by Freexian)

How to contribute: https://github.com/captn3m0/debian-elts-advisories/#contributing
Source URL: https://deb.freexian.com/extended-lts/tracker/<ID>
OSV Formatted URL: https://captnemo.in/debian-elts-advisories/advisories/<ID>.json

GHSA GitHub Security Advisory Database

How to contribute: https://github.com/github/advisory-database#contributions
Source URL: https://github.com/advisories/<ID>
OSV Formatted URL: https://api.osv.dev/v1/vulns/<ID>

GO Go Vulnerability Database

How to contribute: https://github.com/golang/vulndb/issues/new/choose
Source URL: https://pkg.go.dev/vuln/<ID>
OSV Formatted URL: https://vuln.go.dev/ID/<ID>.json

GSD Global Security Database

How to contribute: TBD
Source URL: https://gsd.id/<ID>
OSV Formatted URL: https://api.gsd.id/<ID>

HSEC Haskell Security Advisory Database

How to contribute: https://github.com/haskell/security-advisories/blob/main/CONTRIBUTING.md
Source URL: TBD
OSV Formatted URL: https://raw.githubusercontent.com/haskell/security-advisories/main/advisories/<ID>.json

LBSEC LoopBack Advisory Database

How to contribute: TBD
Source URL: N/A
OSV Formatted URL: N/A

MGASA Mageia Security Advisories

How to contribute: TBD
Source URL: https://advisories.mageia.org/<ID>.html
OSV Formatted URL: https://advisories.mageia.org/<ID>.json

MAL Malicious Packages Repository

How to contribute: https://github.com/ossf/malicious-packages/blob/main/CONTRIBUTING.md
Source URL: N/A
OSV Formatted URL: https://api.osv.dev/v1/vulns/<ID>

OSV Advisories allocated by OSV.dev (currently only from OSS-Fuzz)

How to contribute: https://github.com/google/oss-fuzz-vulns/issues
Source URL: https://osv.dev/vulnerability/<ID>
OSV Formatted URL: https://api.osv.dev/v1/vulns/<ID>

PHSA VMWare Photon Security Advisory Database

How to contribute: https://github.com/captn3m0/photon-os-advisories#contributing
Source URL: https://github.com/vmware/photon/wiki/<ID>
OSV Formatted URL: https://github.com/captn3m0/photon-os-advisories/blob/main/advisories/<ID>.json (unofficial)

PSF Python Software Foundation Vulnerability Database

How to contribute: https://github.com/psf/advisory-database/issues
Source URL: TBD
OSV Formatted URL: TBD

PYSEC PyPI Vulnerability Database

How to contribute: https://github.com/pypa/advisory-database/issues
Source URL: https://osv.dev/vulnerability/<ID>
OSV Formatted URL: https://api.osv.dev/v1/vulns/<ID>

RHSA/RHBA/RHEA Red Hat Security Data

How to contribute: https://access.redhat.com/security/team/contact/
Source URL: https://access.redhat.com/security/security-updates/security-advisories
OSV Formatted URL: https://security.access.redhat.com/data/osv/

RLSA/RXSA Rocky Linux Security Advisory Database

How to contribute: TBD
Source URL: https://errata.rockylinux.org/<ID>
OSV Formatted URL: https://apollo.build.resf.org/api/v3/osv/<ID>

RSEC RConsortium Advisory Database

How to contribute: https://github.com/RConsortium/r-advisory-database#readme
Source URL: https://osv.dev/vulnerability/<ID>
OSV Formatted URL: https://github.com/RConsortium/r-advisory-database/blob/main/vulns/<package>/<ID>.yaml

RUSTSEC RustSec Advisory Database

How to contribute: https://github.com/RustSec/advisory-db/blob/main/CONTRIBUTING.md
Source URL: https://rustsec.org/advisories/<ID>
OSV Formatted URL: https://raw.githubusercontent.com/rustsec/advisory-db/osv/crates/<ID>.json

SUSE-SU/SUSE-RU/SUSE-FU/SUSE-OU/openSUSE-SU SUSE Security Landing page

How to contribute: https://www.suse.com/support/security/contact/
Source URL: https://www.suse.com/support/update/
OSV Formatted URL: https://ftp.suse.com/pub/projects/security/osv/

UBUNTU Ubuntu CVE Reports

How to contribute: TBD
Source URL: https://ubuntu.com/security/<ID>
OSV Formatted URL: https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/<YEAR>/UBUNTU-<ID>.json

USN Ubuntu Security Notices

How to contribute: TBD
Source URL: https://ubuntu.com/security/notices/<ID>
OSV Formatted URL: https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/<ID>.json
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant