Invalid PypiVersion

[ziadhany]

This is the data of invalid versions obtained from running PySec and the PyPA importer in VulnerableCode.
If a version doesn’t seem valid, I think we should either report it or ignore it.

PYSEC-2006-1: error:InvalidVersion("'2.0.0-final' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2008-3: error:InvalidVersion("'2.0.0-final' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2008-8: error:InvalidVersion("'0.1-bulbasaur' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2015-24: error:InvalidVersion("'0.7.1.fix1' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2015-25: error:InvalidVersion("'0.7.1.fix1' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2017-103: error:InvalidVersion("'1.0beta6.1' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2017-41: error:InvalidVersion("'a3' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2017-46: error:InvalidVersion("'0.7.1.fix1' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2017-47: error:InvalidVersion("'0.7.1.fix1' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2018-100: error:InvalidVersion("'0.3m1' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2018-114: error:InvalidVersion("'0.3.1-p1' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2018-115: error:InvalidVersion("'0.3.1-p1' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2018-19: error:InvalidVersion("'0.1-bulbasaur' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2019-102: error:InvalidVersion("'2013-01-21T20:33:09+0100' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2019-106: error:InvalidVersion("'2.0.1rc2-git' is not a valid <class 'univers.versions.PypiVersion'>")
Invalid version class: <class 'univers.versions.PypiVersion'> - '2019-09-12' for OSV id: 'PYSEC-2019-125'
PYSEC-2019-126: error:InvalidVersion("'a3' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2019-32: error:InvalidVersion("'2013-01-21T20:33:09+0100' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2019-36: error:InvalidVersion("'2.0.1rc2-git' is not a valid <class 'univers.versions.PypiVersion'>")
Invalid version class: <class 'univers.versions.PypiVersion'> - '2019-09-12' for OSV id: 'PYSEC-2019-55'
PYSEC-2019-56: error:InvalidVersion("'a3' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2019-6: error:InvalidVersion("'0.7.10p1' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2019-76': error:InvalidVersion("'0.7.10p1' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2020-341': error:InvalidVersion("'-class.-jw.util.version.Version-' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2021-121': error:InvalidVersion("'trunk' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2021-338': error:InvalidVersion("'4.11-final' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2021-356': error:InvalidVersion("'2.0.1rc2-git' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2021-859': error:InvalidVersion("'2.0.1rc2-git' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2022-12': error:InvalidVersion("'0.7.1.fix1' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2022-166': error:InvalidVersion("'0.1-bulbasaur' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2022-288': error:InvalidVersion("'0.3.2d' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2022-5': error:InvalidVersion("'2.0.1rc2-git' is not a valid <class 'univers.versions.PypiVersion'>")
PYSEC-2024-167': error:InvalidVersion("'2.0.1rc2-git' is not a valid <class 'univers.versions.PypiVersion'>")