-
-
Notifications
You must be signed in to change notification settings - Fork 329
Better Documentation #638
Copy link
Copy link
Open
Labels
documentationEverything about documentationEverything about documentation
Description
Activity
Metadata
Metadata
Assignees
Labels
documentationEverything about documentationEverything about documentation
#631 and #624 gives a basic documentation but there is scope for improvement.
A06:2021-Vulnerable and Outdated Components was previously titled Using Components with Known Vulnerabilities and is #1 Query cve-search' database for package vulnerabilities #2 in the industry survey, but also had enough data to make the Top 10 via data analysis. This category moves up from Collect vulnerabilities and package references from cve-search (and/or via4cve) #9 in 2017 and is a known issue that we struggle to test and assess risk. It is the only category not to have any CVEs mapped to the included CWEs, so a default exploit and impact weights of 5.0 are factored into their scores.