Skip to content

Normalize CVE data and ensure to return empty arrays instead of objects

This change adds normalization of CVE data to remove common mistakes in CVE data (having '_' instead of '-' or having extra text after the CVE), and converts all empty objects to empty arrays to make sure format of the result is valid.

Merge request reports