Uploaded image for project: 'OASIS Common Security Advisory Framework (CSAF) TC'
  1. OASIS Common Security Advisory Framework (CSAF) TC
  2. CSAF-43

JSON Schema does not include definitions for critical aspects that carry over from CVRF

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: New
    • Priority: Critical
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: None
    • Labels:
      None

      Description

      It appears that the current schema does not provide definitions for a few properties:

      vulnerabilities[]references[] - type property not defined.

      vulnerabilities[]notes[] - "audience" property not defined

      document: "aggregate_severity" property not defined

      document: "acknowledgments" property not defined

      document.references[]: "type" property not defined

      document.notes[]: "audience" property not defined

      document.publisher: "type" property not defined

      product_tree: "relationships" property not defined

      product_tree: "product_groups" property not defined

       

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              ericejohnson Eric Johnson (Inactive)
            • Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated: