diff --git a/evaluator.rules.kts b/evaluator.rules.kts index 6d5eb0d0..f0fcd5ad 100644 --- a/evaluator.rules.kts +++ b/evaluator.rules.kts @@ -1546,10 +1546,16 @@ fun RuleSet.vulnerabilityWithHighSeverityInDependencyRule() = packageRule("HIGH_ -isProject() -isExcluded() +AnyOf( - hasVulnerability(maxAcceptedSeverity, "CVSS2") { value, threshold -> + hasVulnerability(maxAcceptedSeverity, "CVSS:2") { value, threshold -> value.toFloat() >= threshold.toFloat() }, - hasVulnerability(maxAcceptedSeverity, "CVSS3") { value, threshold -> + hasVulnerability(maxAcceptedSeverity, "CVSS:3") { value, threshold -> + value.toFloat() >= threshold.toFloat() + }, + hasVulnerability(maxAcceptedSeverity, "CVSS:3.1") { value, threshold -> + value.toFloat() >= threshold.toFloat() + }, + hasVulnerability(maxAcceptedSeverity, "CVSS:4.0") { value, threshold -> value.toFloat() >= threshold.toFloat() } )