Affected Software Package

affected_package

The Affected Package object describes details about a software package identified as affected by a vulnerability/vulnerabilities.

Contents

Attributes

Caption Name Type Is Array Default Description
Architecture architecture String Architecture is a shorthand name describing the type of computer hardware the packaged software is meant to run on.
Epoch epoch Integer The software package epoch. Epoch is a way to define weighted dependencies based on version numbers.
Fixed In Version fixed_in_version String The software package version in which a reported vulnerability was patched/fixed.
Software License license String The software license applied to this package.
Name name String The software package name.
Package Manager package_manager String The software packager manager utilized to manage a package on a system, e.g. npm, yum, dpkg etc.
Path path String The installation path of the affected package.
Package URL purl String A purl is a URL string used to identify and locate a software package in a mostly universal and uniform way across programming languages, package managers, packaging conventions, tools, APIs and databases.
Raw Data raw_data JSON The event data as received from the event source.
Record ID record_id String Unique identifier for the object
Software Release Details release String Release is the number of times a version of the software has been packaged.
Remediation Guidance remediation Remediation Describes the recommended remediation steps to address identified issue(s).
Unmapped Data unmapped Unmapped The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source.
Version version String The software package version.

References

Referenced By

Context

Affected Software Package

JSON

            
{
  "caption": "Affected Software Package",
  "description": "The Affected Package object describes details about a software package identified as affected by a vulnerability/vulnerabilities.",
  "extends": "package",
  "name": "affected_package",
  "attributes": {
    "fixed_in_version": {
      "requirement": "optional",
      "caption": "Fixed In Version",
      "description": "The software package version in which a reported vulnerability was patched/fixed.",
      "type": "string_t"
    },
    "package_manager": {
      "requirement": "optional",
      "caption": "Package Manager",
      "description": "The software packager manager utilized to manage a package on a system, e.g. npm, yum, dpkg etc.",
      "type": "string_t"
    },
    "path": {
      "description": "The installation path of the affected package.",
      "requirement": "optional",
      "caption": "Path",
      "type": "string_t"
    },
    "remediation": {
      "requirement": "optional",
      "caption": "Remediation Guidance",
      "description": "Describes the recommended remediation steps to address identified issue(s).",
      "type": "remediation"
    },
    "architecture": {
      "requirement": "recommended",
      "caption": "Architecture",
      "description": "Architecture is a shorthand name describing the type of computer hardware the packaged software is meant to run on.",
      "type": "string_t"
    },
    "epoch": {
      "requirement": "optional",
      "caption": "Epoch",
      "description": "The software package epoch. Epoch is a way to define weighted dependencies based on version numbers.",
      "type": "integer_t"
    },
    "license": {
      "description": "The software license applied to this package.",
      "requirement": "optional",
      "caption": "Software License",
      "type": "string_t"
    },
    "name": {
      "description": "The software package name.",
      "requirement": "required",
      "caption": "Name",
      "type": "string_t"
    },
    "purl": {
      "requirement": "optional",
      "caption": "Package URL",
      "description": "A purl is a URL string used to identify and locate a software package in a mostly universal and uniform way across programming languages, package managers, packaging conventions, tools, APIs and databases.",
      "type": "string_t"
    },
    "release": {
      "requirement": "optional",
      "caption": "Software Release Details",
      "description": "Release is the number of times a version of the software has been packaged.",
      "type": "string_t"
    },
    "version": {
      "description": "The software package version.",
      "requirement": "required",
      "caption": "Version",
      "type": "string_t"
    },
    "raw_data": {
      "group": "context",
      "caption": "Raw Data",
      "description": "The event data as received from the event source.",
      "type": "json_t"
    },
    "record_id": {
      "description": "Unique identifier for the object",
      "group": "primary",
      "requirement": "required",
      "caption": "Record ID",
      "type": "string_t"
    },
    "unmapped": {
      "caption": "Unmapped Data",
      "description": "The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source.",
      "type": "unmapped",
      "is_array": true
    }
  }
}