search

CVEProject / cve-schema

This repository is used for the development of the CVE JSON record format. Releases of the CVE JSON record format will also be published here. This repository is managed by the CVE Quality Working Group.
Creative Commons Zero v1.0 Universal
245 stars 138 forks source link

containers.cna.source.defect has multiple data types #317

Open jayjacobs opened 3 months ago

jayjacobs commented 3 months ago

The data in the field "containers.cna.source.defect" is stored in multiple different data types.

I will include a list of data types (with CVE counts): and a few samples here:

I would suggest that we fix the data as it is stored and see if we can't add something in the schema to more strictly validate this field.

sei-vsarvepalli commented 1 week ago

Related to https://github.com/CVEProject/cve-schema/issues/339

The "source" section has no schema definitions at all. It is open-ended object perhaps? I am not sure if JSON schema actually is valid with an object that has no "properties" at all defined.