[OASIS Issue Tracker] (CSAF-43) JSON Schema does not include definitions for critical aspects that carry over from CVRF

[OASIS Issues Tracker <workgroup_mailer@lists.oasis-open.org>]

Eric Johnson created CSAF-43:
--------------------------------

             Summary: JSON Schema does not include definitions for critical aspects that carry over from CVRF
                 Key: CSAF-43
                 URL: https://issues.oasis-open.org/browse/CSAF-43
             Project: OASIS Common Security Advisory Framework (CSAF) TC
          Issue Type: Improvement
            Reporter: Eric Johnson


It appears that the current schema does not provide definitions for a few properties:

vulnerabilities[]references[] - type property not defined.

vulnerabilities[]notes[] - "audience" property not defined

document: "aggregate_severity" property not defined

document: "acknowledgments" property not defined

document.references[]: "type" property not defined

document.notes[]: "audience" property not defined

document.publisher: "type" property not defined

product_tree: "relationships" property not defined

product_tree: "product_groups" property not defined

Â



--
This message was sent by Atlassian JIRA
(v7.7.2#77003)