Skip to content

Commit 6fd7267

Browse files
committed
Add tests to check improver function with multiple affected version ranges
Signed-off-by: Tushar Goel <[email protected]>
1 parent 1c38ef3 commit 6fd7267

File tree

2 files changed

+85
-1
lines changed

2 files changed

+85
-1
lines changed

vulnerabilities/tests/test_data/github_api/inference-expected.json

Lines changed: 62 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -424,5 +424,67 @@
424424
}
425425
],
426426
"weaknesses": []
427+
},
428+
{
429+
"vulnerability_id": null,
430+
"aliases": [
431+
"CVE-2022-21831",
432+
"GHSA-w749-p3v6-hccq"
433+
],
434+
"confidence": 100,
435+
"summary": "Possible code injection vulnerability in Rails / Active Storage",
436+
"affected_purls": [
437+
{
438+
"type": "gem",
439+
"namespace": null,
440+
"name": "activestorage",
441+
"version": "10.2.1",
442+
"qualifiers": null,
443+
"subpath": null
444+
},
445+
{
446+
"type": "gem",
447+
"namespace": null,
448+
"name": "activestorage",
449+
"version": "10.2.8",
450+
"qualifiers": null,
451+
"subpath": null
452+
}
453+
],
454+
"fixed_purl": null,
455+
"references": [
456+
{
457+
"reference_id": "",
458+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-21831",
459+
"severities": []
460+
},
461+
{
462+
"reference_id": "",
463+
"url": "https://github.com/rails/rails/commit/0a72f7d670e9aa77a0bb8584cb1411ddabb7546e",
464+
"severities": []
465+
},
466+
{
467+
"reference_id": "",
468+
"url": "https://groups.google.com/g/rubyonrails-security/c/n-p-W1yxatI",
469+
"severities": []
470+
},
471+
{
472+
"reference_id": "",
473+
"url": "https://rubysec.com/advisories/CVE-2022-21831/",
474+
"severities": []
475+
},
476+
{
477+
"reference_id": "GHSA-w749-p3v6-hccq",
478+
"url": "https://github.com/advisories/GHSA-w749-p3v6-hccq",
479+
"severities": [
480+
{
481+
"system": "cvssv3.1_qr",
482+
"value": "HIGH",
483+
"scoring_elements": ""
484+
}
485+
]
486+
}
487+
],
488+
"weaknesses": []
427489
}
428490
]

vulnerabilities/tests/test_github.py

Lines changed: 23 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -172,6 +172,8 @@ def valid_versions():
172172
"6.0.3.4",
173173
"6.0.3.rc1",
174174
"6.0.2.rc2",
175+
"10.2.8",
176+
"10.2.1",
175177
]
176178

177179

@@ -203,7 +205,27 @@ def test_github_improver(mock_response, regen=REGEN):
203205
)
204206
),
205207
fixed_version=None,
206-
)
208+
),
209+
AffectedPackage(
210+
package=PackageURL(
211+
type="gem",
212+
namespace=None,
213+
name="activestorage",
214+
version=None,
215+
qualifiers={},
216+
subpath=None,
217+
),
218+
affected_version_range=GemVersionRange(
219+
constraints=(
220+
VersionConstraint(
221+
comparator=">=", version=RubygemsVersion(string="10.2.0")
222+
),
223+
VersionConstraint(
224+
comparator="<=", version=RubygemsVersion(string="10.2.8")
225+
),
226+
)
227+
),
228+
),
207229
],
208230
references=[
209231
Reference(

0 commit comments

Comments
 (0)