Draft: Display not-affected issues as such (rather than fixed) (CVE view)
This is going to conflict with #32/!221 and #25/!223 but let's push this to start experimenting/discussing.
I didn't try to complexify the base query, or expand the 'vulnerable' field, this would be more intrusive I think.
However the 'fixed_version=0' is clashing with !221.
CVE view:
Package view (open):
Package view (unimportant):
The current CVE view relies on table 'package_source_status' which contains a pre-computed 'vulnerable' field, which does not handle the not-affected case clearly.
This consolidate this data with a simple query for vulnerable releases.
Edited by Sylvain Beucler