You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Thank you for bringing this to our attention, and apologies for the delayed response. A bug ticket has been filed, and we hope to address this very soon.
The api endpoint at https://ossindex.sonatype.org/api/v3/component-report
returns a CVSSv3.1 vector, but the library ossindex-service-client defaults to "CVSSv2" because it does not start with "CVSSv3.0":
ossindex-public/api/src/main/java/org/sonatype/ossindex/service/api/cvss/CvssVectorFactory.java
Lines 34 to 37 in 12b5be0
This bug results in the following issue over at OWASP dependency check:
jeremylong/DependencyCheck#5598
The text was updated successfully, but these errors were encountered: