ochronasec / ochrona_python_vulnerabilities Goto Github PK

Hello,
thank you for developing Ochrona tool and making it freely available to anybody! I use Ochrona tool and really I like it.

I have just found out that it has been few months already since the last release of this repo was published.
Since there were quite frequent releases before, I'd like to just kindly ask you, if you are still planning to update and maintain this vulnerability DB in the future.

Thank you!
Best regards from Prague,
David

I'm not sure how the vulnerabilities are populated, but apparently the parser has mistakenly categorized CVE-2021-33511 as affecting lxml because it is mentioned in the CVE advisory. However, the vulnerability affects plone, not lxml, and the version strings mentioned pertain to plone as well (there is currently no lxml==5.2.4 that would fix this).