New submission from Jesse Bacon <jessemba...@me.com>:

I have loaded the National Vulnerability Database from NIST for 2019 and it 
includes 3989 JSON Documents.  This data I have placed in a shelf.  when I run 
len(db.keys()) I get 3658.  len(set(cves)) == 3989 : True

When I extract the data from the shelf I have the right amount of records, 
3989.  I tested on python 3.7.3 and Python 3.6.5.  I am concerned this is going 
to ruin a metric in a security report.  For example, A risk exposure report may 
use the number of keys in a yearly vulnerability db as the baseline for a risk 
calculation which contrasts the number of patched CVE's.  

nvdcve-1.0-2019.json

----------
components: Library (Lib)
files: KeyCount.png
messages: 345290
nosy: jessembacon
priority: normal
severity: normal
status: open
title: Item Count Error in Shelf
type: behavior
versions: Python 3.6, Python 3.7
Added file: https://bugs.python.org/file48411/KeyCount.png

_______________________________________
Python tracker <rep...@bugs.python.org>
<https://bugs.python.org/issue37241>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to