advisory-database icon indicating copy to clipboard operation
advisory-database copied to clipboard

Should use "MEDIUM" instead of "MODERATE" in CVSS rating

Open sschuberth opened this issue 2 years ago • 0 comments

While the docs seem to state that both "MEDIUM" and "MODERATE" would be valid CVSS ratings as the docs are linking to "Common Vulnerability Scoring System (CVSS), Section 5", that's actually not true: The CVSS specs only mention "MEDIUM" as a valid value. As such, the GitHub Advisories API should also only return "MEDIUM" instead of "MODERATE".

sschuberth avatar Apr 24 '23 11:04 sschuberth