tree b22f0e3029a68ca3fb8ef8c154242ec114b6e884
parent 625c3c96db478967137343fa0441e4ece8e8862f
author Tatiana Bradley <tatianabradley@google.com> 1701893726 -0500
committer Tatiana Bradley <tatianabradley@google.com> 1702417909 +0000

internal/report: improve cve5ToReport

- Consider all "affected" blocks instead of just the first one.
- More cleverly account for vendor/product/package data. For example,
ignore it if it is "n/a", or if it is merely a suffix of the module path
we already have.
- Attempt to populate version data.

Skip the test that checks if v4 and v5 are handled equivalently, as
we are now taking into account data that is only available in v5.

Change-Id: Ibf46c2ad77bad6d72b50ed21b136e5ee014a99f8
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/548057
Reviewed-by: Sarawut Wansee <sarawutwansee07@gmail.com>
Reviewed-by: Damien Neil <dneil@google.com>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>