class

Vex::Vulnerability

Inherits JSON::Serializable < Reference < Object

Constructors

new(pull : JSON::PullParser)
Source
new(name : String | Nil = nil, id : String | Nil = nil, description : String | Nil = nil, aliases : Array(String) | Nil = nil)
Source
new(*, __pull_for_json_serializable pull : JSON::PullParser)
Source

Instance methods

==(other : self)

Returns true if this reference is the same as other. Invokes same?.

aliases
Source
aliases=(aliases : Array(String) | Nil)
Source
description
Source
description=(description : String | Nil)
Source
hash(hasher)

See Object#hash(hasher)

id=(id : String | Nil)
Source
matches?(identifier : String) : Bool
Source
name
Source
name=(name : String | Nil)
Source
valid?
Source
validate

Returns spec-violation errors. Empty array means valid. Spec: name is the only required field on a vulnerability.

Source
warnings

Non-fatal spec advisories. The spec recommends an IRI for @id (e.g. https://nvd.nist.gov/vuln/detail/CVE-X), but tolerates other producers. A bare CVE name in the @id slot is a common mistake; the warning surfaces it without failing the document.

Source