List view

x/vuln/cmd/govulncheck: unrecognized failures

NeedsInvestigationSomeone must examine and confirm this is a valid issue and not a duplicate of an existing one.Someone must examine and confirm this is a valid issue and not a duplicate of an existing one.

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#57119 In golang/go;

· gopherbot opened on Dec 6, 2022

x/vuln: use govulncheck in bazel

NeedsInvestigationSomeone must examine and confirm this is a valid issue and not a duplicate of an existing one.Someone must examine and confirm this is a valid issue and not a duplicate of an existing one.

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#61494 In golang/go;

· ukai opened on Jul 21, 2023

x/vuln: reports could exclude calls with unaffected arguments

NeedsInvestigationSomeone must examine and confirm this is a valid issue and not a duplicate of an existing one.Someone must examine and confirm this is a valid issue and not a duplicate of an existing one.

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#54889 In golang/go;

· prattmic opened on Sep 6, 2022

x/vuln/cmd/govulncheck: provide an option to scan multiple binaries in a directory

FeatureRequestIssues asking for a new feature that does not need a proposal.Issues asking for a new feature that does not need a proposal.

NeedsInvestigationSomeone must examine and confirm this is a valid issue and not a duplicate of an existing one.Someone must examine and confirm this is a valid issue and not a duplicate of an existing one.

UXIssues that involve UXD/UXR inputIssues that involve UXD/UXR input

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#53866 In golang/go;

· hyangah opened on Jul 14, 2022

x/vuln/cmd/govulncheck: type propagation can produce confusing results

NeedsInvestigationSomeone must examine and confirm this is a valid issue and not a duplicate of an existing one.Someone must examine and confirm this is a valid issue and not a duplicate of an existing one.

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#47121 In golang/go;

· rolandshoemaker opened on Jul 10, 2021

x/vuln/vulncheck: warn on unavailable Go version in binaries

NeedsFixThe path to resolution is known, but the work has not been done.The path to resolution is known, but the work has not been done.

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#53740 In golang/go;

· zpavlinovic opened on Jul 8, 2022

x/vulndb: add support to severity and cvss metrics in json and report

NeedsInvestigationSomeone must examine and confirm this is a valid issue and not a duplicate of an existing one.Someone must examine and confirm this is a valid issue and not a duplicate of an existing one.

UXIssues that involve UXD/UXR inputIssues that involve UXD/UXR input

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#50004 In golang/go;

· julieqiu opened on Dec 6, 2021

x/vulndb: allow time-based filters via flags in cve command

NeedsInvestigationSomeone must examine and confirm this is a valid issue and not a duplicate of an existing one.Someone must examine and confirm this is a valid issue and not a duplicate of an existing one.

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#53258 In golang/go;

· tatianab opened on Jun 6, 2022

x/vulndb: check product data for module paths

NeedsInvestigationSomeone must examine and confirm this is a valid issue and not a duplicate of an existing one.Someone must examine and confirm this is a valid issue and not a duplicate of an existing one.

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#49461 In golang/go;

· julieqiu opened on Nov 8, 2021

x/vulndb: consider encoding known false positive paths in reports

NeedsInvestigationSomeone must examine and confirm this is a valid issue and not a duplicate of an existing one.Someone must examine and confirm this is a valid issue and not a duplicate of an existing one.

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#51574 In golang/go;

· rolandshoemaker opened on Mar 9, 2022

x/vulndb: detect false positives based on imported by count

NeedsInvestigationSomeone must examine and confirm this is a valid issue and not a duplicate of an existing one.Someone must examine and confirm this is a valid issue and not a duplicate of an existing one.

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#51944 In golang/go;

· julieqiu opened on Mar 25, 2022

x/vulndb: have Report.Lint return warnings

FeatureRequestIssues asking for a new feature that does not need a proposal.Issues asking for a new feature that does not need a proposal.

NeedsInvestigationSomeone must examine and confirm this is a valid issue and not a duplicate of an existing one.Someone must examine and confirm this is a valid issue and not a duplicate of an existing one.

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#50184 In golang/go;

· jba opened on Dec 15, 2021

x/vulndb: import paths do not uniquely identify packages

NeedsInvestigationSomeone must examine and confirm this is a valid issue and not a duplicate of an existing one.Someone must examine and confirm this is a valid issue and not a duplicate of an existing one.

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#50005 In golang/go;

· julieqiu opened on Dec 6, 2021

x/vulndb: link credits to appropriate user

NeedsDecisionFeedback is required from experts, contributors, and/or the community before a change can be made.Feedback is required from experts, contributors, and/or the community before a change can be made.

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#50454 In golang/go;

· julieqiu opened on Jan 5, 2022

x/vulndb: track file changes in a commit related to the CVE

NeedsInvestigationSomeone must examine and confirm this is a valid issue and not a duplicate of an existing one.Someone must examine and confirm this is a valid issue and not a duplicate of an existing one.

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#49462 In golang/go;

· julieqiu opened on Nov 8, 2021

x/vulndb: "no metadata for C" when computing derived symbols

NeedsInvestigationSomeone must examine and confirm this is a valid issue and not a duplicate of an existing one.Someone must examine and confirm this is a valid issue and not a duplicate of an existing one.

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#53583 In golang/go;

· neild opened on Jun 28, 2022

x/vulndb: derived symbols missing for reference via closure

NeedsFixThe path to resolution is known, but the work has not been done.The path to resolution is known, but the work has not been done.

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#53655 In golang/go;

· neild opened on Jul 2, 2022

x/pkgsite: present GOOS/GOARCH info of a vulnerability if relevant

NeedsDecisionFeedback is required from experts, contributors, and/or the community before a change can be made.Feedback is required from experts, contributors, and/or the community before a change can be made.

pkgsite

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#55330 In golang/go;

· hyangah opened on Sep 22, 2022

x/vulndb: govulncheck surfaces function calls with trusted input (e.g., GO-2022-1039)

NeedsDecisionFeedback is required from experts, contributors, and/or the community before a change can be made.Feedback is required from experts, contributors, and/or the community before a change can be made.

UXIssues that involve UXD/UXR inputIssues that involve UXD/UXR input

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#56099 In golang/go;

· ghost opened on Oct 7, 2022

x/vuln: delay reporting vulnerabilities for N days

NeedsInvestigationSomeone must examine and confirm this is a valid issue and not a duplicate of an existing one.Someone must examine and confirm this is a valid issue and not a duplicate of an existing one.

UXIssues that involve UXD/UXR inputIssues that involve UXD/UXR input

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#56157 In golang/go;

· adamdecaf opened on Oct 11, 2022

x/vuln/cmd/govulncheck: cache results

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#57150 In golang/go;

· zpavlinovic opened on Dec 7, 2022

x/vuln/vulncheck: support for generics

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#57221 In golang/go;

· zpavlinovic opened on Dec 9, 2022

x/vulndb: failure to build on aix/ppc64

NeedsInvestigationSomeone must examine and confirm this is a valid issue and not a duplicate of an existing one.Someone must examine and confirm this is a valid issue and not a duplicate of an existing one.

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#58308 In golang/go;

· mknyszek opened on Feb 3, 2023

x/vulndb: support CVE schema v5.0 in worker

NeedsFixThe path to resolution is known, but the work has not been done.The path to resolution is known, but the work has not been done.

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#49289 In golang/go;

· julieqiu opened on Nov 2, 2021

x/vulndb: don't create duplicate issues via worker

NeedsFixThe path to resolution is known, but the work has not been done.The path to resolution is known, but the work has not been done.

vulncheck or vulndbIssues for the x/vuln or x/vulndb repoIssues for the x/vuln or x/vulndb repo

Status: Open.

#54049 In golang/go;

· tatianab opened on Jul 25, 2022