Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

full-record-advanced-example.json Does Not Contain A Tags Field #277

Closed
nickspurry opened this issue Feb 12, 2024 · 1 comment
Closed

full-record-advanced-example.json Does Not Contain A Tags Field #277

nickspurry opened this issue Feb 12, 2024 · 1 comment
Labels
documentation Improvements or additions to documentation enhancement New feature or request

Comments

@nickspurry
Copy link

The schema for version 5.0 contains the following definition for a tags field within the CNA Container.

{
    "$schema": "http://json-schema.org/draft-07/schema#",
    "$id": "https://cve.mitre.org/cve/v5_00/tags/cna/",
    "type": "string",
    "description": "exclusively-hosted-service: All known software and/or hardware affected by this CVE Record is known to exist only in the affected hosted service. If the vulnerability affects both hosted and on-prem software and/or hardware, then the tag should not be used.\n\nunsupported-when-assigned: Used by the assigning CNA to indicate that when a request for a CVE assignment was received, the product was already end-of-life (EOL) or a product or specific version was deemed not to be supported by the vendor. This tag should only be applied to a CVE Record when all affected products or version lines referenced in the CVE-Record are EOL.\n\ndisputed: When one party disagrees with another party's assertion that a particular issue in software is a vulnerability, a CVE Record assigned to that issue may be tagged as being 'disputed'.",
    "enum": ["unsupported-when-assigned", "exclusively-hosted-service", "disputed"]
}

full-record-advanced-example.json does not implement this field. If it is intended that this example provide a working demonstration of all fields, then this field should probably be implemented.

@jayjacobs jayjacobs added documentation Improvements or additions to documentation enhancement New feature or request labels Oct 23, 2024
ccoffin added a commit to ccoffin/cve-schema that referenced this issue Dec 30, 2024
Adding an example of using a tag at the container level. Implements suggestion in Issue CVEProject#277
ccoffin added a commit to ccoffin/cve-schema that referenced this issue Dec 30, 2024
Adding an example of using a tag at the container level. Implements suggestion in Issue CVEProject#277
@ccoffin
Copy link
Collaborator

ccoffin commented Dec 30, 2024

Implemented a tag in each of the advanced CVE Record examples in PR #383. Closing

@ccoffin ccoffin closed this as completed Dec 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
documentation Improvements or additions to documentation enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants