Description
Incorrect composer version when range expression uses space as separator:
https://gitlab.com/gitlab-org/security-products/gemnasium-db/-/blob/8ba4872b659cf5a306e0d47abdd0e428948bf41c/packagist/bedita/bedita/CVE-2019-15570.yml
> >> from univers import version_range as vr
> >> r = vr .from_gitlab_native ("packagist" , "<=3.8.0||>=4.0.0-alpha <=4.0.0-rc2" )
> >> str (r )
'vers:composer/<=3.8.0|>=4.0.0-alpha--4.0.0-rc2'
Can't parse the Maven ranges:
https://gitlab.com/gitlab-org/security-products/gemnasium-db/-/blob/99457e4dc38ae029f0753af66c265b183aed77ca/maven/com.adobe.acs/acs-aem-commons/CVE-2022-28820.yml
> >> from univers import version_range as vr
> >> r = vr .from_gitlab_native ("maven" , "(,5.2.0)" )
Traceback (most recent call last ):
File "<stdin>" , line 1 , in < module >
File "../univers/version_range.py" , line 1171 , in from_gitlab_native
if "" .join ([comparator , constraint_item ]) in vrc .vers_by_native_comparators :
AttributeError : type object 'MavenVersionRange' has no attribute 'vers_by_native_comparators'
Can't parse NuGet ranges:
https://gitlab.com/gitlab-org/security-products/gemnasium-db/-/blob/99457e4dc38ae029f0753af66c265b183aed77ca/nuget/Microsoft.AspNetCore.App.Runtime.win-arm/CVE-2024-35264.yml
> >> from univers import version_range as vr
> >> r = vr .from_gitlab_native ("nuget" , "[8.0.0,8.0.7)" )
Traceback (most recent call last ):
File "<stdin>" , line 1 , in < module >
File "../univers/version_range.py" , line 1171 , in from_gitlab_native
if "" .join ([comparator , constraint_item ]) in vrc .vers_by_native_comparators :
AttributeError : type object 'NugetVersionRange' has no attribute 'vers_by_native_comparators'
Reactions are currently unavailable
You can’t perform that action at this time.
Incorrect composer version when range expression uses space as separator:
https://gitlab.com/gitlab-org/security-products/gemnasium-db/-/blob/8ba4872b659cf5a306e0d47abdd0e428948bf41c/packagist/bedita/bedita/CVE-2019-15570.yml
Can't parse the Maven ranges:
https://gitlab.com/gitlab-org/security-products/gemnasium-db/-/blob/99457e4dc38ae029f0753af66c265b183aed77ca/maven/com.adobe.acs/acs-aem-commons/CVE-2022-28820.yml
Can't parse NuGet ranges:
https://gitlab.com/gitlab-org/security-products/gemnasium-db/-/blob/99457e4dc38ae029f0753af66c265b183aed77ca/nuget/Microsoft.AspNetCore.App.Runtime.win-arm/CVE-2024-35264.yml