List view

Use the SCIO Pipeline Mechanism for v1 Importers/Improvers

3-next

core

Priority: high

Status: Closed (completed).

#1509 In aboutcode-org/vulnerablecode;

· by keshav-space was closed on Jan 26, 2026

Match affected and fixed-by Packages

1-next

data-quality

ui

Status: Merged (completed).

aboutcode-org/vulnerablecodenumber 1528

#1528 In aboutcode-org/vulnerablecode;

· by johnmhoran was closed on Sep 28, 2024

VCIO-next: Do not report ghost package as a fix for vulnerability

3-next

Status: Merged (completed).

aboutcode-org/vulnerablecodenumber 1679

#1679 In aboutcode-org/vulnerablecode;

· by keshav-space was closed on Dec 3, 2024

VCIO-next: Add support to track fix commits: Include commits and patches that fix a vulnerability

Core models

feature

fix-commit

Priority: medium

Status: Closed (completed).

#207 In aboutcode-org/vulnerablecode;

· by elanzini was closed on Jan 10, 2025

VCIO-next: Missing Summary values

3-next

bug

data-quality

difficulty:easy

good first issue

Priority: high

Status: Closed (completed).

#859 In aboutcode-org/vulnerablecode;

· by tdruez was closed on Apr 1, 2025

VCIO: Collect CISA Known Exploited Vulnerabilities

Data collection

design-needed

enhancement

improver

Priority: medium

Status: Closed (completed).

#1028 In aboutcode-org/vulnerablecode;

· by mjherzog was closed on Dec 2, 2024

VCIO-next: Add a "Release Notes" or "What's New" panel to the VulnerableCode.io home page

documentationEverything about documentationEverything about documentation

enhancement

Priority: low

ui

Status: Closed (completed).

#1077 In aboutcode-org/vulnerablecode;

· by DennisClark was closed on Jan 16, 2025

Consolidate 'Fixed by packages' tab and 'Affected packages' tab in Vulnerability details page

enhancement

ui

Status: Closed (completed).

#1287 In aboutcode-org/vulnerablecode;

· by johnmhoran was closed on Jan 9, 2025

VCIO-next: VCIO does not collect some Severity (cvssv3.1) scores for a CVE

Data collection

importer

Priority: high

Status: Closed (completed).

#1238 In aboutcode-org/vulnerablecode;

· by mjherzog was closed on Jan 12, 2025

VCIO-next: Design new Improver

3-next

core

improver

Priority: high

Status: Closed (completed).

#1395 In aboutcode-org/vulnerablecode;

· by pombredanne was closed on Jan 9, 2025

VCIO-next: API performance issues (vulnerabilities endpoint)

3-next

API

bug

performance

Priority: high

Status: Closed (completed).

#1492 In aboutcode-org/vulnerablecode;

· by tdruez was closed on Dec 23, 2024

VCIO-next: Do not mix unrelated affected and fixed packages

3-next

Priority: high

Status: Closed (completed).

#1508 In aboutcode-org/vulnerablecode;

· by pombredanne was closed on Jan 9, 2025

VCIO-next: VulnerableCode: Use proper apk package type for Alpine

data-quality

Status: Closed (completed).

#1458 In aboutcode-org/vulnerablecode;

· by pombredanne was closed on Jan 16, 2025

Have consistent labels in UI and API and models for affected and fixed

1-next

Status: Closed (completed).

#1520 In aboutcode-org/vulnerablecode;

· by TG1999 was closed on Oct 15, 2024

VCIO-next: Improve VCIO bulk API package lookup performance

3-next

API

bug

performance

Priority: high

Status: Closed (completed).

#1561 In aboutcode-org/vulnerablecode;

· by pombredanne was closed on Jan 1, 2025

VCIO-next: API performance issues (packages endpoints)

3-next

API

performance

Priority: high

Status: Closed (completed).

#1538 In aboutcode-org/vulnerablecode;

· by tdruez was closed on Dec 24, 2024

VCIO-next: Vulnerability is missing KEV data [was: VCID-3hng-483x-aaar is incomplete]

3-next

bug

data-quality

Status: Closed (completed).

#1532 In aboutcode-org/vulnerablecode;

· by DennisClark was closed on Dec 2, 2024

VCIO-next: For packages, enable sorting versions in database queries, or store additional computed fields

3-next

performance

Priority: high

Status: Closed (completed).

#1549 In aboutcode-org/vulnerablecode;

· by pombredanne was closed on Dec 18, 2024

VCIO-next: Migrate Alpine Linux importer to aboutcode pipeline

3-next

Status: Closed (completed).

#1633 In aboutcode-org/vulnerablecode;

· by keshav-space was closed on Jan 10, 2025

Collect raw data from CISA KEV and other sources and store them in git repo

Data collection

Status: Closed (completed).

#1643 In aboutcode-org/vulnerablecode;

· by keshav-space was closed on Dec 2, 2024

Ghost package should not be reported as a fix for vulnerability

3-next

Priority: high

Status: Closed (completed).

#1650 In aboutcode-org/vulnerablecode;

· by TG1999 was closed on Dec 3, 2024

Missing summary in https://public.vulnerablecode.io/vulnerabilities/VCID-jaz4-2j4u-aaas

3-next

bug

Data collection

data-quality

Priority: high

Status: Closed (completed).

#1684 In aboutcode-org/vulnerablecode;

· by pombredanne was closed on Dec 16, 2024

Avoid spam report for AWS SES email service

Status: Closed (completed).

#1692 In aboutcode-org/vulnerablecode;

· by pombredanne was closed on Mar 25, 2025

VCIO-next: Add <code>Fixed_By</code> in API for Packages Endpoint in V2

3-next

Priority: high

Status: Closed (completed).

#1665 In aboutcode-org/vulnerablecode;

· by TG1999 was closed on Jan 6, 2025

Reset default VCIO API to v1 and announce availability of v2

3-next

API

API-v2

Priority: high

ui

Status: Closed (completed).

#1663 In aboutcode-org/vulnerablecode;

· by mjherzog was closed on Dec 8, 2024