History of Advisories #2329

Activity

1. Samk1710

   moved this to Todo in GSOC '26 - VulnerableCode Insightson Jun 7, 2026
2. Samk1710

   added this to GSOC '26 - VulnerableCode Insightson Jun 7, 2026
3. Samk1710

   moved this from Todo to In Progress in GSOC '26 - VulnerableCode Insightson Jun 7, 2026
4. Samk1710 commented on Jun 7, 2026

   

   Samk1710

   on Jun 7, 2026

   ContributorAuthor

   More actions

   Ref: https://github.com/github/advisory-database/commits/main/advisories/github-reviewed/2026/02/GHSA-72hv-8253-57qq/GHSA-72hv-8253-57qq.json

   A similar function can be used to find the diff:
   

   vulnerablecode/vulnerabilities/utils.py

   Line 644 in 77e9052

   def compute_content_id(advisory_data):
5. AyanSinhaMahapatra

   added

   insightsVulnerableCode Insights features, providing more insights into vulnerablecode data.VulnerableCode Insights features, providing more insights into vulnerablecode data.

   on Jun 22, 2026
6. Samk1710 commented on Jul 9, 2026

   

   Samk1710

   on Jul 9, 2026

   Last edited by Samk1710

   ContributorAuthor

   More actions

   A similar function can be used to find the diff:

   vulnerablecode/vulnerabilities/utils.py

   Line 644 in 77e9052

   def compute_content_id(advisory_data):

   We are considering the following fields for diff :

   normalized_data = {
           "advisory_id": advisory_data.advisory_id,
           "aliases": advisory_data.aliases,
           "summary": advisory_data.summary,
           "affected_packages": [pkg.to_dict() for pkg in advisory_data.affected_packages if pkg],
           "references": [ref.to_dict() for ref in advisory_data.references if ref],
           "severities": [sev.to_dict() for sev in advisory_data.severities if sev],
           "weaknesses": advisory_data.weaknesses,
           "patches": [patch.to_dict() for patch in advisory_data.patches],
           "url": advisory_data.url,
       }

   Suugested History Model:

   class AdvisoryV2HistoryDiff(models.Model):
   
       advisory_before = models.ForeignKey(
           AdvisoryV2,
           on_delete=models.CASCADE,
           related_name="history_diff_before",
           null=True,  # For the very first advisory 
           blank=True
       )
       
       advisory_after = models.OneToOneField(
           AdvisoryV2,
           on_delete=models.CASCADE,
           related_name="history_diff",
       )
   
       summary_added = models.TextField(blank=True, null=True)
       summary_removed = models.TextField(blank=True, null=True)
   
       url_added = models.URLField(blank=True, null=True)
       url_removed = models.URLField(blank=True, null=True)
   
       added_severities = models.ManyToManyField("AdvisorySeverity", related_name="added_in_history", blank=True)
       removed_severities = models.ManyToManyField("AdvisorySeverity", related_name="removed_in_history", blank=True)
   
       added_references = models.ManyToManyField("AdvisoryReference", related_name="added_in_history", blank=True)
       removed_references = models.ManyToManyField("AdvisoryReference", related_name="removed_in_history", blank=True)
       
      ...
      ...
   
   
       # (similar for  packages,  aliases, weaknesses and patches)

   @ziadhany @keshav-space your thoughts on this?
7. Samk1710

   moved this from In Progress to Under Review in GSOC '26 - VulnerableCode Insightson Jul 26, 2026