I noticed that we have two vulnerabilities for the same CWE-400 issue that have different ID's:

xxx.xx/vulnerabilities/vulnerability?vulnerabilityId=875
xxx.xx/vulnerabilities/vulnerability?vulnerabilityId=1120

They are both completely equal (at least it looks like it). The only difference, one was already marked as "Caution", the other was new an unassessed.

This lead to npm installation error, since we dont allow unassessed vulnerabilities.

We are running ProGet 6.0.4 (Build 8).

Any Ideas why this happened and how we can prevent the same vulnerability to appear twice with different ID's?

Alright.. So we are using ProGet and have it installed on a VM with Windows...
We are also hosting our own k8s both for development and production..
And I was thinking about puting ProGet into k8s to more and more reduce the amount of VM's we are running...
But then again, on ProGet we have our docker images.. Which are needed for almost anything in k8s.... So I was wondering, what would be the best solution to host Proget?

Any Ideas and thoughts are welcome... ;)