cvss

Documentation

Index

• type CVSS
  • func NewCvssBaseString(raw string, version CvssVersion) (CVSS, error)
• type CvssRisk
• type CvssVersion

Types

type CVSS

type CVSS interface {
	Severity() CvssRisk
}

This is the API. Everything else should be hidden within the package

func NewCvssBaseString

func NewCvssBaseString(raw string, version CvssVersion) (CVSS, error)

Factory

type CvssRisk

type CvssRisk string

const (
	// Introduced in v3
	CRITICAL CvssRisk = "CRITICAL"

	// Present in both v3 and v2
	HIGH   CvssRisk = "HIGH"
	MEDIUM CvssRisk = "MEDIUM"
	LOW    CvssRisk = "LOW"
	NONE   CvssRisk = "NONE"
)

Qualitative Severity Ratings https://nvd.nist.gov/vuln-metrics/cvss

type CvssVersion

type CvssVersion string

const (
	CVSS_V2 CvssVersion = "CVSS_V2"
	CVSS_V3 CvssVersion = "CVSS_V3"
	CVSS_V4 CvssVersion = "CVSS_V4"
)

As per OSV schema https://ossf.github.io/osv-schema/#severitytype-field