Displaying unimportant vulnerabilities in HTML reports #1378
Closed
Description
Currently, we remove all the unimportant vulnerabilities in filterPackageVulns()
(This is also only done for Debian. We need to do it for Ubuntu and others if they have their own way of deciding priority/urgency.). This means users don't see them in the results and don't know which ones were removed.
A better way to implement this is to include the unimportant vulnerabilities in the HTML results but hide them by default. This is similar to how we handle vulnerabilities that are not called. Users can then choose to see them by checking a filter.
Activity