Investigate other sources of vulnerabilities

[bunny-therapist]

... and create issues to enable them.

Candidates:

• https://cve.mitre.org/ (thanks to 22Maxx on r/python)
• "the OSV database" (thanks to Zamaamiro on r/python)
• https://ossindex.sonatype.org/

[bunny-therapist]

Ideally, there should be a minimal overlap with GHSA. I see an issue in that most of the databases have a huge overlap.

[9ao9ai9ar]

Check out https://github.com/aboutcode-org/vulnerablecode, which aggregates vulnerability data from GHSA, NVD and the Python Packaging Advisory Database (via OSV?), and is funded by big shots like Microsoft, Google and NLnet.