fedcode-next: Code, UI and models to curate severity scoring #1719

Activity

1. pombredanne

   added this to 00-AboutCodePlanneron Jul 22, 2025
2. pombredanne

   assigned

   TG1999

   on Aug 1, 2025
3. pombredanne

   moved this to Needs prep in 00-AboutCodePlanneron Aug 1, 2025
4. TG1999

   moved this from Needs prep to In progress in 00-AboutCodePlanneron Dec 11, 2025
5. TG1999

   moved this from In progress to Needs prep in 00-AboutCodePlanneron Dec 15, 2025
6. pombredanne

   unassigned

   TG1999

   on Feb 12, 2026
7. keshav-space

   self-assigned this

   on Mar 19, 2026
8. keshav-space

   added a parent issue on Mar 19, 2026

   • fedcode-next: Create curation queue for VulnerableCode data enrichment #1726
9. keshav-space

   added a sub-issue on Jun 3, 2026

   • fedcode-next: Add heuristic to detect and classify CVSS severity conflicts in TODO pipeline #2325
10. keshav-space

    moved this from Needs prep to In progress in 00-AboutCodePlanneron Jun 3, 2026
11. keshav-space

    added a sub-issue on Jun 3, 2026

    • fedcode-next: Add UI for package CVSS severity curation #2326
12. keshav-space commented on Jul 6, 2026

    

    keshav-space

    on Jul 6, 2026

    Member

    More actions

    This is completed in

    • Add support for CVSS severity curation #2359
    • Fix malformed CVSS severity scores #2360
    • Avoid converting None to "None" in AdvisorySeverity #2366

    The simplest way to try this out is:

    Run the below command after cloning VulnerableCode repo:

     docker compose build
     docker compose up -d

    This will collect the advisories from all the supported source and detect the conflicting CVSS severity score reported by different source and make it available at http://127.0.0.1:8001/advisories/todos/?issue_type=CONFLICTING_SEVERITY_SCORES where individual conflicts can be curated by humans.

    OR

    Simply visit https://public2.vulnerablecode.io/advisories/todos/?issue_type=CONFLICTING_SEVERITY_SCORES on staging instance.

    Advisory Severity Curation List

    Advisory Severity Curation View
13. keshav-space

    closed this as completedon Jul 6, 2026
14. github-project-automation

    moved this from In progress to Done in 00-AboutCodePlanneron Jul 6, 2026
15. pombredanne commented on Jul 8, 2026

    

    pombredanne

    on Jul 8, 2026

    MemberAuthor

    More actions

    Looking great! 🙇
16. pombredanne

    self-assigned this

    on Jul 8, 2026
17. pombredanne

    moved this from Done to Reviewed in 00-AboutCodePlanneron Jul 8, 2026
18. pombredanne

    moved this from Reviewed to Done in 00-AboutCodePlanneron Aug 3, 2026
19. pombredanne

    moved this from Done to Reviewed in 00-AboutCodePlanneron Aug 3, 2026
20. pombredanne

    moved this from Reviewed to Done in 00-AboutCodePlanneron Aug 3, 2026
21. pombredanne

    moved this from Done to Reviewed in 00-AboutCodePlanneron Aug 3, 2026
22. pombredanne

    moved this from Reviewed to Validated in 00-AboutCodePlanneron Aug 5, 2026