Skip to content

CVE-2018-12605: reference entry missing required url field #5106

@yusuke-koyoshi

Description

@yusuke-koyoshi

The CVE ID
https://osv.dev/vulnerability/CVE-2018-12605

Describe the data quality issue observed
The references array contains an entry {"type":"WEB"} that is missing the required url field, violating the OSV schema.

[
  {"type":"WEB"},
  {"type":"ADVISORY","url":"https://about.gitlab.com/2018/06/25/security-release-gitlab-11-dot-0-dot-1-released/"},
  {"type":"FIX","url":"https://gitlab.com/gitlab-org/gitlab-ce/issues/45168"}
]

Consumers that treat url as non-nullable (per the schema) fail to parse this record.

Suggested changes to record
Remove the {"type":"WEB"} entry that has no url, or add the missing URL.

This fix appears to already be applied on the staging environment:
https://test.osv.dev/vulnerability/CVE-2018-12605

Additional context
The staging/test environment (test.osv.dev) already has this corrected.
It would be appreciated if the same correction could be applied to production as well.

Metadata

Metadata

Assignees

No one assigned

    Labels

    data qualityIssues with data quality

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions