Weekly Blog #5 - OSV : Vendor Problem

Published: 09/18/2022

What did I do this week?

I implemented a mechanism to get vendor data from NVD data source and use it to update vendors for CVEs from OSV. By updating vendors, there was a good increase in the amount of CVEs that could be detected now.

What is coming up next?

Next, I will be working on eliminating duplicate CVEs, as there are common CVEs procured from data sources.

Did I get stuck anywhere?

Yes, I came up with a number of solutions to update vendors for OSV but was stuck for quite a while before I thought of using NVD to get vendor data.