Address CVE-2018-1227 @ NVD

[kallisti5]

Summary

https://nvd.nist.gov/vuln/detail/CVE-2018-1227 has been open for a loooong time without an end version. Every time we review CVE's for products, this pops up as a false positive.

Expectation

Maybe reach out to NVD and tag an "end version" so it doesn't show up as a false positive?

[taylorsilva]

Great point! Not sure if they'll accept an end version since some unknown actor still owns the domain. It does redirect to concourse-ci.org now though. I'll send them a message and see, but not hopeful about the outcome.

[taylorsilva]

Three weeks later and still no reply from them. I did submit a request through some form on their website.