Skip to content

CVE Conversion - handle cases where only 1 version is affected better. #3938

@jasonlhills

Description

@jasonlhills

The CVE ID
CVE-2025-58050

Describe the data quality issue observed
This vulnerability affects PCRE2-10.45-RC1 and PCRE2-10.45. PCRE2-10.44 and earlier are not affected.

However, in the OSV record, the GIT ranges are:

      "versions": [
        "pcre2-10.38",
        "pcre2-10.38-RC1",
        "pcre2-10.39",
        "pcre2-10.40",
        "pcre2-10.41",
        "pcre2-10.42",
        "pcre2-10.43",
        "pcre2-10.43-RC1",
        "pcre2-10.44",
        "pcre2-10.45"
      ],

Suggested changes to record
The GIT versions should be limited to PCRE2-10.45-RC1 and PCRE2-10.45.

Metadata

Metadata

Assignees

Labels

data qualityIssues with data quality

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions