Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix #87 - load cve json, schema file with parse_float=decimal.Decimal to allow CVSS comparison to validate #88

Closed
wants to merge 3 commits into from

Conversation

trolldbois
Copy link

Fixes #87
both json cve data and the schema file must be loaded with json.load(filename, parse_float=decimal.Decimal)

Float value in the json schema are used in arithmetic division. They must be loaded as decimal or comparison will fail.
see RedHatProductSecurity#87
@trolldbois trolldbois changed the title Fix #87 - load json file with parse_float=decimal.Decimal to allow CVSS comparison to validate Fix #87 - load cve json, schema file with parse_float=decimal.Decimal to allow CVSS comparison to validate Jul 1, 2024
@mprpic
Copy link
Contributor

mprpic commented Jul 8, 2024

I'd prefer the solution in #89, which just updates the schema to the latest version that isn't susceptible to the multipleOf issues.

@mprpic mprpic closed this Jul 8, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

CVE JSON Validation failure of certain CVSS 4 scores
2 participants