Use NVD 1.1 feed

NVD 1.0 feed is no longer available which seems to break classification of finding criticality. Signed-off-by: Karsten W. Rohrbach <karsten@rohrbach.de>
quay · Sep 28, 2020 · 5fe11e6 · 5fe11e6
1 parent a3b6218
commit 5fe11e6
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/ext/vulnmdsrc/nvd/nvd.go b/ext/vulnmdsrc/nvd/nvd.go
@@ -39,8 +39,8 @@ import (
 )
 
 const (
-	dataFeedURL     string = "https://nvd.nist.gov/feeds/json/cve/1.0/nvdcve-1.0-%s.json.gz"
-	dataFeedMetaURL string = "https://nvd.nist.gov/feeds/json/cve/1.0/nvdcve-1.0-%s.meta"
+	dataFeedURL     string = "https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-%s.json.gz"
+	dataFeedMetaURL string = "https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-%s.meta"
 
 	appenderName string = "NVD"