Skip to content

vcio-api-v3: Store exploits and EPSS based on new advisory models #2069

Closed

Description

@TG1999

Currently, we store exploits in AdvisoryExploits and associate them with other advisories. If we can find any related identifier in aliases or advisory_id of any Advisory.

For example:
we have exploits with CVE-1234 as an identifier. We will relate that exploit to all advisories that have that identifier either as it's alias or advisory ID

Shall we store exploits as an advisory of it's own or shall we relate exploits to other advisories like we are doing currently?

Activity

  1. self-assigned this
    on Dec 19, 2025
  2. moved this to Todo ready in 00-AboutCodePlanneron Dec 19, 2025
  3. DennisClark commented on Dec 19, 2025

    @DennisClark
    Member

    @TG1999 I think we relate exploits to other advisories like we are doing currently makes the most sense, since I think we need to be clear about the distinction between advisories and exploits.

  4. changed the title [-]Plan storing of exploits based advisories[/-] [+]Plan storing of exploits and EPSS based advisories[/+] on Jan 2, 2026
  5. TG1999 commented on Feb 17, 2026

    @TG1999
    ContributorAuthor
  6. changed the title [-]Plan storing of exploits and EPSS based advisories[/-] [+]vcio-api-v3:Plan storing of exploits and EPSS based advisories[/+] on May 11, 2026
  7. changed the title [-]vcio-api-v3:Plan storing of exploits and EPSS based advisories[/-] [+]vcio-api-v3: Plan storing of exploits and EPSS based advisories[/+] on May 11, 2026
  8. changed the title [-]vcio-api-v3: Plan storing of exploits and EPSS based advisories[/-] [+]vcio-api-v3: Store exploits and EPSS based on new advisory models[/+] on May 12, 2026
  9. moved this from Done to Reviewed in 00-AboutCodePlanneron Aug 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions