Skip to content

Commit 10ada0b

Browse files
dodysoliverchang
andauthored
Add Ubuntu severity type to the schema and docs (#337)
Relates to issue #323 --------- Signed-off-by: Eduardo Barretto <[email protected]> Signed-off-by: Eduardo Barretto <[email protected]> Co-authored-by: Oliver Chang <[email protected]>
1 parent ab50c25 commit 10ada0b

File tree

2 files changed

+25
-1
lines changed

2 files changed

+25
-1
lines changed

docs/schema.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -629,6 +629,7 @@ describes the quantitative method used to calculate the associated `score`.
629629
| `CVSS_V2` | A CVSS vector string representing the unique characteristics and severity of the vulnerability using a version of the [Common Vulnerability Scoring System notation](https://www.first.org/cvss/v2/guide#Metric-Groups) that is == 2.0 (e.g.`"AV:L/AC:M/Au:N/C:N/I:P/A:C"`).|
630630
| `CVSS_V3` | A CVSS vector string representing the unique characteristics and severity of the vulnerability using a version of the [Common Vulnerability Scoring System notation](https://www.first.org/cvss/v3.0/specification-document#Vector-String) that is >= 3.0 and < 4.0 (e.g.`"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"`).|
631631
| `CVSS_V4` | A CVSS vector string representing the unique characteristics and severity of the vulnerability using a version on the [Common Vulnerability Scoring System notation](https://www.first.org/cvss/v4.0/specification-document#Vector-String) that is >= 4.0 and < 5.0 (e.g. `"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"`). |
632+
| `Ubuntu` | A lowercased string representing the [Ubuntu priority](https://ubuntu.com/security/cves/about#priority). This is based on many factors including severity, importance, risk, estimated number of affected users, software configuration, active exploitation, and other factors.
632633
| Your quantitative severity type here. | [Send us a PR](https://github.com/ossf/osv-schema/compare). |
633634

634635
### severity[].score field

validation/schema.json

Lines changed: 24 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -393,7 +393,8 @@
393393
"enum": [
394394
"CVSS_V2",
395395
"CVSS_V3",
396-
"CVSS_V4"
396+
"CVSS_V4",
397+
"Ubuntu"
397398
]
398399
},
399400
"score": {
@@ -448,6 +449,28 @@
448449
}
449450
}
450451
}
452+
},
453+
{
454+
"if": {
455+
"properties": {
456+
"type": {
457+
"const": "Ubuntu"
458+
}
459+
}
460+
},
461+
"then": {
462+
"properties": {
463+
"score": {
464+
"enum": [
465+
"negligible",
466+
"low",
467+
"medium",
468+
"high",
469+
"critical"
470+
]
471+
}
472+
}
473+
}
451474
}
452475
],
453476
"required": [

0 commit comments

Comments
 (0)