nvd

Documentation

Index

• type Cve
• type CvssDataV20
• type CvssDataV30
• type CvssDataV40
• type CvssMetricV2
• type CvssMetricV3
• type CvssMetricV40
• type LangString
• type Metrics
• type Reference
• type VulnSrc
  • func NewVulnSrc() VulnSrc
  • func (vs VulnSrc) Name() types.SourceID
  • func (vs VulnSrc) Update(dir string) error
• type Weakness

Types

type Cve

type Cve struct {
	ID           string       `json:"id"`
	Published    string       `json:"published"`
	LastModified string       `json:"lastModified"`
	Descriptions []LangString `json:"descriptions"`
	Metrics      Metrics      `json:"metrics,omitempty"`
	Weaknesses   []Weakness   `json:"weaknesses,omitempty"`
	References   []Reference  `json:"references"`
}

Cve is based on https://csrc.nist.gov/schema/nvd/api/2.0/cve_api_json_2.0.schema (see `cve_item`)

type CvssDataV20

type CvssDataV20 struct {
	Version      string  `json:"version"`
	VectorString string  `json:"vectorString"`
	BaseScore    float64 `json:"baseScore"`
}

CvssDataV20 is based on https://csrc.nist.gov/schema/nvd/api/2.0/external/cvss-v2.0.json

type CvssDataV30

type CvssDataV30 struct {
	Version      string  `json:"version"`
	VectorString string  `json:"vectorString"`
	BaseScore    float64 `json:"baseScore"`
	BaseSeverity string  `json:"baseSeverity"`
}

CvssDataV30 is based on https://csrc.nist.gov/schema/nvd/api/2.0/external/cvss-v3.0.json v3.0 and v3.1 have only one difference: `patterns` for `vectorString`. So we can use version 3.0 for version 3.1.

type CvssDataV40

type CvssDataV40 struct {
	Version      string  `json:"version"`
	VectorString string  `json:"vectorString"`
	BaseScore    float64 `json:"baseScore"`
	BaseSeverity string  `json:"baseSeverity"`
}

CvssDataV40 is based on https://csrc.nist.gov/schema/nvd/api/2.0/external/cvss-v4.0.json

type CvssMetricV2

type CvssMetricV2 struct {
	Source       string      `json:"source"`
	Type         string      `json:"type"`
	CvssData     CvssDataV20 `json:"cvssData"`
	BaseSeverity string      `json:"baseSeverity,omitempty"`
}

type CvssMetricV3

type CvssMetricV3 struct {
	Source   string      `json:"source"`
	Type     string      `json:"type"`
	CvssData CvssDataV30 `json:"cvssData"`
}

CvssMetricV3 is based on https://csrc.nist.gov/schema/nvd/api/2.0/cve_api_json_2.0.schema. v3.0 and v3.1 have only one difference: `cvssData`. But we can use `cvssData` v3.0 for v3.1 (see below). So we can use the same structure for v3.0 and v3.1.

type CvssMetricV40

type CvssMetricV40 struct {
	Source   string      `json:"source"`
	Type     string      `json:"type"`
	CvssData CvssDataV40 `json:"cvssData"`
}

CvssMetricV40 is based on https://csrc.nist.gov/schema/nvd/api/2.0/cve_api_json_2.0.schema.

type LangString

type LangString struct {
	Lang  string `json:"lang"`
	Value string `json:"value"`
}

type Metrics

type Metrics struct {
	CvssMetricV40 []CvssMetricV40 `json:"cvssMetricV40,omitempty"`
	CvssMetricV31 []CvssMetricV3  `json:"cvssMetricV31,omitempty"`
	CvssMetricV30 []CvssMetricV3  `json:"cvssMetricV30,omitempty"`
	CvssMetricV2  []CvssMetricV2  `json:"cvssMetricV2,omitempty"`
}

type Reference

type Reference struct {
	URL    string   `json:"url"`
	Source string   `json:"source,omitempty"`
	Tags   []string `json:"tags,omitempty"`
}

type VulnSrc

type VulnSrc struct {
	// contains filtered or unexported fields
}

func NewVulnSrc

func NewVulnSrc() VulnSrc

func (VulnSrc) Name

func (vs VulnSrc) Name() types.SourceID

func (VulnSrc) Update

func (vs VulnSrc) Update(dir string) error

type Weakness

type Weakness struct {
	Source      string       `json:"source"`
	Type        string       `json:"type"`
	Description []LangString `json:"description"`
}