Issues

• Debian importer assigns fixed versions to the wrong release

  aboutcode-org/vulnerablecode#2460 · opened on Oct 2, 2026

• Consider including Advisory datasource_id value in API v3

  aboutcode-org/vulnerablecode#2458 · opened on Oct 2, 2026

• CodeSupply: add canary tests to track changes in API endpoints used for getting package versions

  aboutcode-org/vulnerablecode#2448 · opened on Sep 17, 2026
  1

• CodeSupply: Improve version range unfurling and add fallback to use aboutcode-data for unfurling package version range

  aboutcode-org/vulnerablecode#2447 · opened on Sep 17, 2026

• CodeSupply: utilities and pipeline to facilitate import of federated data

  aboutcode-org/vulnerablecode#2446 · opened on Sep 17, 2026

• CodeSupply: support advisory lookup and search in UI

  aboutcode-org/vulnerablecode#2445 · opened on Sep 17, 2026

• CodeSupply: add pipeline to import curation data

  aboutcode-org/vulnerablecode#2444 · opened on Sep 17, 2026

• CodeSupply: support filtering curation based on source in UI and API

  aboutcode-org/vulnerablecode#2443 · opened on Sep 17, 2026

• CodeSupply: track advisory curators and develop heuristics to merge curations

  aboutcode-org/vulnerablecode#2442 · opened on Sep 17, 2026
  1

• CodeSupply: add authentication methods to enable curation for AdvisoryToDo items

  aboutcode-org/vulnerablecode#2441 · opened on Sep 17, 2026

• CodeSupply: federated advisory curations and extramitigations

  aboutcode-org/vulnerablecode#2440 · opened on Sep 17, 2026

• CodeSupply: Add user management to allow users to log in and manage API token

  aboutcode-org/vulnerablecode#2439 · opened on Sep 17, 2026

• CodeSupply: Identify and track malicious and yanked packages

  aboutcode-org/vulnerablecode#2438 · opened on Sep 17, 2026

• Improve EPSS Importer and Getting EPSS history data

  aboutcode-org/vulnerablecode#2435 · opened on Sep 15, 2026

• Improve PoC collection using GitHub archive data

  aboutcode-org/vulnerablecode#2429 · opened on Sep 10, 2026

• Docker build fails on Apple Silicon (arm64) — only x86_64 wheels pinned for extractcode-7z, extractcode-libarchive, typecode-libmagic

  aboutcode-org/vulnerablecode#2426 · opened on Sep 1, 2026

• Filter data sources based on id

  aboutcode-org/vulnerablecode#2422 · opened on Aug 26, 2026
  1

• Drop "OSV" aliases from rubygem data sources

  aboutcode-org/vulnerablecode#2421 · opened on Aug 26, 2026

• When collecting patches and searching or validating fixed version, search all active version "lines"

  aboutcode-org/vulnerablecode#2419 · opened on Aug 23, 2026
  1

• Get NuGet package versions from federated PURL version data in https://github.com/aboutcode-data/

  aboutcode-org/vulnerablecode#2418 · opened on Aug 19, 2026
  2

• Make charts more interactive

  aboutcode-org/vulnerablecode#2417 · opened on Aug 18, 2026
  1

• Improve UX of CWE distrubution chart

  aboutcode-org/vulnerablecode#2416 · opened on Aug 18, 2026

• Risk Panel in Insights

  aboutcode-org/vulnerablecode#2414 · opened on Aug 17, 2026

• Review Vulnerablecode after Insights is Live

  aboutcode-org/vulnerablecode#2413 · opened on Aug 17, 2026

• We do not collect the affected range for Gitlab advisories

  aboutcode-org/vulnerablecode#2412 · opened on Aug 13, 2026
  1