Vulnerability

import type { Vulnerability } from "https://googleapis.deno.dev/v1/securitycenter:v1.ts";

Refers to common vulnerability fields e.g. cve, cvss, cwe etc.

interface Vulnerability {

cve?: Cve;

cwes?: Cwe[];

fixedPackage?: Package;

offendingPackage?: Package;

providerRiskScore?: bigint;

reachable?: boolean;

securityBulletin?: SecurityBulletin;

}

§Properties

cve?: Cve

CVE stands for Common Vulnerabilities and Exposures (https://cve.mitre.org/about/)

cwes?: Cwe[]

Represents one or more Common Weakness Enumeration (CWE) information on this vulnerability.

fixedPackage?: Package

The fixed package is relevant to the finding.

offendingPackage?: Package

The offending package is relevant to the finding.

providerRiskScore?: bigint

Provider provided risk_score based on multiple factors. The higher the risk score, the more risky the vulnerability is.

reachable?: boolean

Represents whether the vulnerability is reachable (detected via static analysis)

securityBulletin?: SecurityBulletin

The security bulletin is relevant to this finding.