Skip to content

Always return the upstream aliases when no alias groups are generated #2374

Open
@Moullisha

Description

Describe the bug
Some vulnerabilities in OSV do not mention alias whereas the source link has alias data.

To Reproduce
https://vuln.go.dev/ID/GO-2024-2947.json mentions two aliases whereas https://api.osv.dev/v1/vulns/GO-2024-2947 does not.
Similar behaviour observed in case of GO-2024-2918, GHSA-v6v8-xj6m-xwqh, GO-2024-2963

Expected behaviour
If alias is available in source data, same should be provided by OSV.

Screenshots
If applicable, add screenshots to help explain your problem.

Additional context
Add any other context about the problem here.

Metadata

Assignees

No one assigned

    Labels

    backlogImportant but currently unprioritizedbugSomething isn't workingdata qualityIssues with data quality

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions