search

CVEProject / quality-workgroup

9 stars 16 forks source link

If CNA chooses to use CWE for `problemTypes`, require `cweId` #14

Open zmanion opened 4 months ago

zmanion commented 4 months ago

problemTypes and CWE are recommended, but not required.

If type is 'CWE' then require cweId and test the value with a reasonable regex (something like ^CWE-[0-9]{2,5}).