CVSS information not appearing on Vulnerability Details page.
Summary
The CVSS information is not appearing on the vulnerability details page, even though the vulnerability seems to have it on the vulnerability report page.
Steps to reproduce
- Visit https://gitlab.com/gitlab-org/auth/glgo/-/security/vulnerabilities/153661088
- Note "Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto" has a CVSS.
- Click on the vulnerability to go the details page
Expected behaviour
We see the CVSS information
Actual behaviour
We don't see the CVSS information
Implementation plan
Looking at the source code, it looks like the backend returns an empty array for the CVSS information.