Merge pull request #2 from RustSec/unaffected-and-patched-versions

Separate "unaffected_versions" and "patched_versions"
This commit is contained in:
Tony Arcieri
2017-02-25 15:38:29 -08:00
committed by GitHub

View File

@@ -13,7 +13,12 @@ Each advisory contains information in [TOML] format:
```toml
[vulnerability]
package = "mypackage"
versions = ["1.2.0", "1.2.3", "1.2.4", "1.2.5"]
# Versions which were never vulnerable
unaffected_versions = ["< 1.1.0"]
# Versions which include fixes for this vulnerability
patched_versions = [">= 1.2.0"]
# It is strongly recommended to request a CVE, or alternatively a DWF, and
# reference the assigned number here.