https://github.com/psf/advisory-database
This is a repository of vulnerability advisories for projects in scope for the Python Software Foundation CVE Numbering Authority (CNA)
https://github.com/psf/advisory-database
Last synced: 5 months ago
JSON representation
This is a repository of vulnerability advisories for projects in scope for the Python Software Foundation CVE Numbering Authority (CNA)
- Host: GitHub
- URL: https://github.com/psf/advisory-database
- Owner: psf
- License: cc-by-4.0
- Created: 2023-07-13T14:21:14.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2024-09-08T01:18:11.000Z (over 1 year ago)
- Last Synced: 2024-09-08T05:19:30.817Z (over 1 year ago)
- Language: Python
- Homepage:
- Size: 282 KB
- Stars: 25
- Watchers: 8
- Forks: 2
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Security: SECURITY.md
Awesome Lists containing this project
README
# Python Software Foundation Advisory Database
This is a repository of vulnerability advisories for projects in scope for the prospective
[Python Software Foundation](https://python.org/psf/) CVE Numbering Authority (CNA). Advisories are also
published to the [`security-announce@python.org` mailing list](https://mail.python.org/mailman3/lists/security-announce.python.org/).
You can find all advisories in the [`advisories/` directory](https://github.com/psf/advisory-database/tree/main/advisories).
Sub-directories under `advisories/` denote the affected product (ie `python`).
Advisories are published in the [OSV Format](https://ossf.github.io/osv-schema).
Historical advisories have been converted into the OSV format for easier consumption
by automated tools. CVE IDs and metadata for historical advisories are sourced from [vstinner/python-security](https://github.com/vstinner/python-security).
## Contributing
Advisories in OSV format are generated from published CVE records. Updating an advisory requires updating the
upstream CVE record so must be done by either [creating an issue on GitHub](https://github.com/psf/advisory-database/issues/new)
or contacting the CNA operators at [`cna@python.org`](mailto:cna@python.org). Pull requests updating
advisories sourced from CVEs will be closed.