search

csaf-tools / CVRF-CSAF-Converter

A CVRF CSAF Converter, taking care about OASIS specification.
https://www.telekom.com/security
MIT License
10 stars 4 forks source link

Omit empty array `scores` #96

Closed tschmidtb51 closed 2 years ago

tschmidtb51 commented 2 years ago

If you convert the following CVSS score with the flag --remove-CVSS-values-without-vector it ends up with an empty scores array in JSON. 

      <CVSSScoreSets>
         <ScoreSetV3>
            <BaseScoreV3>9.8</BaseScoreV3>
         </ScoreSetV3>
      </CVSSScoreSets>

However, empty arrays are prohibited in CSAF and should not be in the output.