Skip to content

Conversation

Alina-Podoba
Copy link

This PR adds a mismatch rule to the mismatch database for pkg:pypi/tabulate to prevent a false positive on CVE-2024-13223.

Although the CVE refers to a WordPress plugin by vendor samwilson, it is incorrectly matched to the Python package tabulate due to name similarity.

To resolve this, I added samwilson to the invalid_vendors list in mismatch_data/pypi/tabulate/mismatch_relations.yml, following the project's instructions for resolving vendor mismatches.

fixes: #5082

@terriko
Copy link
Contributor

terriko commented Aug 5, 2025

Thank you! I 'm going to rebase your branch because I'm 99% certain the test fails are unrelated but I'd rather be sure before I merge in case some syntax error was making everything go haywire.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

false positive on tabulate -- add to mismatch db
3 participants