← Prev in month ← Prev in thread

Item: Various possible enhancements to the JSON format for representing vulnerabilities

From
Eric Johnson <>
Date
2019-08-28T00:28:56+00:00
ID
CANu9=
Thread
Item: Various possible enhancements to the JSON format for representing vulnerabilities
Hi CSAF-TC,

In working on the JSON format, I've observed the following possible areas of enhancement:

- Drop "ordinal" from JSON output - this field adds no value to the serialized output, that I can tell. I am planning to update the export logic of the conversion tool to automatically supply ordinals for the XML format, which made me think they should just be dropped from the JSON.

- use JSON schema for CVSS? Omar suggested this in an email on May 15. Seems like it might be a good idea...

- Change CVSSScoreSets to just "Scoring" in JSON, with children for v3.0 v3.1, etc.

- Why does Relationship include a _list_ of products? I believe it should just be one. Anyone know differently?

Eric.
← Prev in month ← Prev in thread