Open
Description
In this we have URLs such as
- "url": "http://public.vulnerablecode.io/api/vulnerabilities/1265",
- "url": "http://public.vulnerablecode.io/api/packages/168702",
that leak internal record ids/primary keys.
We should provide either a GUID or a natural key instead.
[
{
"url": "http://public.vulnerablecode.io/api/packages/168702",
"purl": "pkg:maven/junit/[email protected]",
"type": "maven",
"namespace": "junit",
"name": "junit",
"version": "4.12",
"qualifiers": {},
"subpath": "",
"affected_by_vulnerabilities": [
{
"url": "http://public.vulnerablecode.io/api/vulnerabilities/1265",
"vulnerability_id": "VCID-e1bu-4uh4-aaac",
"summary": "",
....