Ignore withdrawn cve (#163)

Signed-off-by: Prabhu Subramanian <prabhu@appthreat.com>
AppThreat · Jul 14, 2024 · 7b672d6 · 7b672d6
1 parent 270ff5c
commit 7b672d6
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/vdb/lib/nvd.py b/vdb/lib/nvd.py
@@ -433,6 +433,9 @@ def convert_api_vuln(vuln: dict) -> Vulnerability | None:
                 problem_type = aweakness["description"][0]["value"]
                 break
         description = NvdSource._get_value(vuln, "descriptions")
+        # Ignore disputed CVEs. Eg: CVE-2023-35116
+        if "** DISPUTED **" in description or "this is not a valid vulnerability report" in description:
+            return None
         rdata = vuln.get("references", [])
         related_urls = [r["url"] for r in rdata]
         metrics = vuln.get("metrics", {})