fix: allow lenient parsing of CvssV4Data

jeremylong / Open-Vulnerability-Project

Java libraries for working with available vulnerability data sources (GitHub Security Advisories, NVD, EPSS, CISA Known Exploited Vulnerabilities, etc.)

Apache License 2.0

107 stars 30 forks source link

fix: allow lenient parsing of CvssV4Data #175

Closed chadlwilson closed 2 weeks ago

chadlwilson commented 2 weeks ago

Follow-up to #170

The schema does not prohibit additional properties being added: https://github.com/jeremylong/Open-Vulnerability-Project/blob/83189a18225029b1cb535f747e6b7662acfd0ecd/open-vulnerability-clients/src/main/resources/json/cvss-v4.0.json

This will be more robust if NVD add yet new crazy things, or rename the misnamed properties back where they should be....