Ander Ruiz Ayesta

[EXPERIMENTAL] IAST Callback reloader

1

# What Does This Do Includes the ability to reload InstrumentationBridge replacing it with an empty implementation to short-circuit the calls # Motivation Being able to short circuit the IAST...

Let's start by saying that if any of my assumptions is wrong this issue is not relevant. As far as I know CVSS vectors of version 3.0 and 3.1 are...

Semver does not follow Comparable contract for non standard versions

1

`new Semver("1.0.0.1").compareTo(new Semver("1.0.0.2"))==new Semver("1.0.0.2").compareTo(new Semver("1.0.0.1"))==-1` This happens because isGreaterThan() returns false (which is "ok") but isLowerThan() returns in both cases true because they isEquivalent()==false

lightning RCE is not fixed in 2.2.2

1

GHSA-cgwc-qvrx-rf7f advisory is not solved in version 2.2.2 for lightning, at least version 2.2.5 is vulnerable

Update deploy.gradle to use the new repository in github

Incorrect CVE being reported

1

I believe I have a case in where the matching is not correctly being done. The CVE ``` CVE: CVE-2020-0606 KB: [KB4535101](https://catalog.update.microsoft.com/Search.aspx?q=KB4535101) ``` Is being detected in a Windows 10...

Querying for Archive Projects

3

**What's the problem this feature will solve?** We are already using XMLRPC API to gather all projects in PyPI. Unfortunately I would say that archived ones are not available through...

CVE is added in references but not in Aliases as it should. This PR includes the right CVE in the aliases array